@theholocron/holocron-plugin-github 3.12.3 → 3.13.0

package/dist/index.d.mts

@@ -7,6 +7,7 @@ declare const resolveSyncToken: (input?: ResolveTokenInput) => string;
 declare const resolveReleaseToken: (input?: ResolveTokenInput) => string;
 declare const resolveAdminToken: (input?: ResolveTokenInput) => string;
 declare const resolveDeployToken: (input?: ResolveTokenInput) => string;
+declare const resolveOrgToken: (input?: ResolveTokenInput) => string;
 //#endregion
 //#region src/capabilities/ci.d.ts
 interface CiOptions {
@@ -117,6 +118,8 @@ declare class GitHubSecrets implements Secrets {
 interface SourceOptions {
   repo: string;
   repoRoot: string;
+  /** Secondary client authenticated with HOLOCRON_ORG_TOKEN for org-scoped operations (teams, custom properties). */
+  orgClient?: GitHubClient;
   /** Forwarded to a secondary client created for Pages calls (HOLOCRON_DEPLOY_TOKEN). */
   baseUrl?: string;
   fetch?: typeof fetch;
@@ -130,6 +133,7 @@ declare class GitHubSource implements Source {
   private readonly repo;
   private readonly repoRoot;
   private readonly workflowDir;
+  private readonly orgClient?;
   private readonly baseUrl?;
   private readonly fetchImpl?;
   constructor(client: GitHubClient, opts: SourceOptions);
@@ -227,7 +231,7 @@ interface PluginContext {
   repo: string;
   repoRoot: string;
 }
-declare function source(ctx: PluginContext): Source;
+declare function source(ctx: PluginContext, orgClient?: GitHubClient): Source;
 declare function secrets(ctx: PluginContext): Secrets;
 declare function environments(ctx: PluginContext): Environments;
 declare function ci(ctx: PluginContext): Ci;
@@ -248,4 +252,4 @@ declare function createPlugin(options: GitHubPluginOptions): {
  */
 declare const AUTH_HINT: string;
 //#endregion
-export { AUTH_HINT, type Auth, AuthError, type CanonicalLabel, GitHubCi, type GitHubClientOptions, GitHubEnvironments, GitHubIssues, GitHubPluginOptions, GitHubSecrets, GitHubSource, type NormalizedTeamEntry, PluginContext, type ResolveTokenInput, type TeamEntry, type TeamPermission, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveReadToken, resolveReleaseToken, resolveSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };
+export { AUTH_HINT, type Auth, AuthError, type CanonicalLabel, GitHubCi, type GitHubClientOptions, GitHubEnvironments, GitHubIssues, GitHubPluginOptions, GitHubSecrets, GitHubSource, type NormalizedTeamEntry, PluginContext, type ResolveTokenInput, type TeamEntry, type TeamPermission, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveOrgToken, resolveReadToken, resolveReleaseToken, resolveSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };

package/dist/index.mjs

@@ -28,6 +28,10 @@ const resolveDeployToken = createFeatureResolver({
 	envName: "HOLOCRON_DEPLOY_TOKEN",
 	keyringKey: "github.deploy"
 });
+const resolveOrgToken = createFeatureResolver({
+	envName: "HOLOCRON_ORG_TOKEN",
+	keyringKey: "github.org"
+});
 //#endregion
 //#region src/capabilities/ci.ts
 var GitHubCi = class {
@@ -483,6 +487,7 @@ var GitHubSource = class {
 	repo;
 	repoRoot;
 	workflowDir;
+	orgClient;
 	baseUrl;
 	fetchImpl;
 	constructor(client, opts) {
@@ -493,6 +498,7 @@ var GitHubSource = class {
 		this.repo = opts.repo;
 		this.repoRoot = opts.repoRoot;
 		this.workflowDir = join(opts.repoRoot, ".github", "workflows");
+		this.orgClient = opts.orgClient;
 		this.baseUrl = opts.baseUrl;
 		this.fetchImpl = opts.fetch;
 	}
@@ -580,10 +586,10 @@ var GitHubSource = class {
 		return syncLabels(this.client, this.repo, canonical, stale);
 	}
 	async syncProperties(values) {
-		return syncProperties(this.client, this.repo, values);
+		return syncProperties(this.orgClient ?? this.client, this.repo, values);
 	}
 	async syncTeams(teams) {
-		return syncTeams(this.client, this.repo, teams);
+		return syncTeams(this.orgClient ?? this.client, this.repo, teams);
 	}
 	async syncTopics(topics) {
 		return syncTopics(this.client, this.repo, topics);
@@ -666,10 +672,11 @@ async function verifyToken(token, opts = {}) {
 }
 //#endregion
 //#region src/index.ts
-function source(ctx) {
+function source(ctx, orgClient) {
 	return new GitHubSource(ctx.client, {
 		repo: ctx.repo,
 		repoRoot: ctx.repoRoot,
+		orgClient,
 		baseUrl: ctx.options.baseUrl,
 		fetch: ctx.options.fetch
 	});
@@ -701,10 +708,21 @@ function createPlugin(options) {
 			repoRoot: options.repoRoot ?? process.cwd()
 		};
 	}
+	function makeOrgClient() {
+		try {
+			return createGitHubClient$1({
+				token: resolveOrgToken(options),
+				baseUrl: options.baseUrl,
+				fetch: options.fetch
+			});
+		} catch {
+			return;
+		}
+	}
 	return {
 		name: "@theholocron/holocron-plugin-github",
 		capabilities: {
-			source: () => source(makeCtx(resolveAdminToken)),
+			source: () => source(makeCtx(resolveAdminToken), makeOrgClient()),
 			ci: () => ci(makeCtx(resolveReadToken)),
 			secrets: () => secrets(makeCtx(resolveAdminToken)),
 			environments: () => environments(makeCtx(resolveAdminToken)),
@@ -718,4 +736,4 @@ function createPlugin(options) {
 */
 const AUTH_HINT = "generate fine-grained Personal Access Tokens at https://github.com/settings/tokens (one per feature — see docs/tokens.md for required scopes per operation), then run: holocron auth set github.<feature> <PAT>";
 //#endregion
-export { AUTH_HINT, AuthError, GitHubCi, GitHubEnvironments, GitHubIssues, GitHubSecrets, GitHubSource, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveReadToken, resolveReleaseToken, resolveSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };
+export { AUTH_HINT, AuthError, GitHubCi, GitHubEnvironments, GitHubIssues, GitHubSecrets, GitHubSource, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveOrgToken, resolveReadToken, resolveReleaseToken, resolveSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/holocron-plugin-github",
-  "version": "3.12.3",
+  "version": "3.13.0",
   "description": "Holocron plugin for GitHub. Implements source, ci, secrets, environments, and issues capabilities against the GitHub REST API.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/holocron-plugin-github#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",
@@ -23,7 +23,7 @@
   },
   "peerDependencies": {
     "@theholocron/github-client": "^1.6.0",
-    "@theholocron/cli": "3.12.3"
+    "@theholocron/cli": "3.13.0"
   },
   "dependencies": {
     "libsodium-wrappers": "^0.8.4"
@@ -44,7 +44,7 @@
     "tsx": "4.23.4",
     "typescript": "^5.9.3",
     "vitest": "^4.1.10",
-    "@theholocron/cli": "3.12.3"
+    "@theholocron/cli": "3.13.0"
   },
   "publishConfig": {
     "access": "public"