@theholocron/holocron-plugin-github 5.0.0-alpha.246 → 5.0.0-alpha.247

package/dist/index.d.mts

@@ -1,21 +1,18 @@
 import { Auth, AuthError, Ci, CiRun, CiRunFilter, Environment, Environments, Issue, IssueSearchFilter, Issues, LabelDef, LifecycleResult, LifecycleSlot, PagesConfig, PullRequest, RepoRef, RepoSettings, ResolveTokenInput, Ruleset, SecretScope, Secrets, Source, SourceFile, SourceTeamMember, TeamEntry, TeamEntry as TeamEntry$1, TeamPermission, TrackerDoctorReport, TrackerUser, VerifyTokenFailure, VerifyTokenResult, VerifyTokenResult as VerifyTokenResult$1, VerifyTokenSuccess, createFeatureResolver } from "@theholocron/cli";
 import { GitHubClient, GitHubClientOptions, createGitHubClient } from "@theholocron/github-client";
-//#region src/auth.d.ts
-declare const resolveReadToken: (input?: ResolveTokenInput) => string;
-declare const resolveIssuesToken: (input?: ResolveTokenInput) => string;
-declare const resolveSyncToken: (input?: ResolveTokenInput) => string;
-declare const resolveReleaseToken: (input?: ResolveTokenInput) => string;
-declare const resolveAdminToken: (input?: ResolveTokenInput) => string;
-declare const resolveSecretsToken: (input?: ResolveTokenInput) => string;
-declare const resolveDeployToken: (input?: ResolveTokenInput) => string;
-declare const resolveUserSyncToken: (input?: ResolveTokenInput) => string;
-declare const resolveOrgToken: (input?: ResolveTokenInput) => string;
-//#endregion
-//#region src/capabilities/ci.d.ts
+export declare const resolveReadToken: (input?: ResolveTokenInput) => string;
+export declare const resolveIssuesToken: (input?: ResolveTokenInput) => string;
+export declare const resolveSyncToken: (input?: ResolveTokenInput) => string;
+export declare const resolveReleaseToken: (input?: ResolveTokenInput) => string;
+export declare const resolveAdminToken: (input?: ResolveTokenInput) => string;
+export declare const resolveSecretsToken: (input?: ResolveTokenInput) => string;
+export declare const resolveDeployToken: (input?: ResolveTokenInput) => string;
+export declare const resolveUserSyncToken: (input?: ResolveTokenInput) => string;
+export declare const resolveOrgToken: (input?: ResolveTokenInput) => string;
 interface CiOptions {
   repo: string;
 }
-declare class GitHubCi implements Ci {
+export declare class GitHubCi implements Ci {
   private readonly client;
   private readonly opts;
   readonly key: "ci";
@@ -26,12 +23,10 @@ declare class GitHubCi implements Ci {
   private mapRun;
   private mapConclusion;
 }
-//#endregion
-//#region src/capabilities/environments.d.ts
 interface EnvironmentsOptions {
   repo: string;
 }
-declare class GitHubEnvironments implements Environments {
+export declare class GitHubEnvironments implements Environments {
   private readonly client;
   private readonly opts;
   readonly key: "environments";
@@ -42,8 +37,6 @@ declare class GitHubEnvironments implements Environments {
   deleteEnvironment(name: string): Promise<void>;
   private flattenReviewers;
 }
-//#endregion
-//#region src/capabilities/issues.d.ts
 interface IssuesOptions {
   repo: string;
   /**
@@ -57,7 +50,7 @@ interface IssuesOptions {
     inReview: string;
   };
 }
-declare class GitHubIssues implements Issues {
+export declare class GitHubIssues implements Issues {
   private readonly client;
   readonly key: "issues";
   readonly providerName = "github";
@@ -84,8 +77,6 @@ declare class GitHubIssues implements Issues {
   private removeStatusLabels;
   private mapIssue;
 }
-//#endregion
-//#region src/capabilities/labels.d.ts
 interface CanonicalLabel {
   readonly name: string;
   readonly color: string;
@@ -99,13 +90,11 @@ interface CanonicalLabel {
  * - DELETEs labels listed in `stale`.
  * - Leaves unrecognised labels that aren't in `stale` untouched.
  */
-declare function syncLabels(client: GitHubClient, repo: string, canonical: ReadonlyArray<CanonicalLabel>, stale: ReadonlyArray<string>): Promise<string>;
-//#endregion
-//#region src/capabilities/secrets.d.ts
+export declare function syncLabels(client: GitHubClient, repo: string, canonical: ReadonlyArray<CanonicalLabel>, stale: ReadonlyArray<string>): Promise<string>;
 interface SecretsOptions {
   repo: string;
 }
-declare class GitHubSecrets implements Secrets {
+export declare class GitHubSecrets implements Secrets {
   private readonly client;
   private readonly opts;
   private readonly orgClient?;
@@ -122,8 +111,6 @@ declare class GitHubSecrets implements Secrets {
   setSecret(scope: SecretScope, name: string, value: string): Promise<void>;
   deleteSecret(scope: SecretScope, name: string): Promise<void>;
 }
-//#endregion
-//#region src/capabilities/source.d.ts
 interface SourceOptions {
   repo: string;
   repoRoot: string;
@@ -135,7 +122,7 @@ interface SourceOptions {
   baseUrl?: string;
   fetch?: typeof fetch;
 }
-declare class GitHubSource implements Source {
+export declare class GitHubSource implements Source {
   private readonly client;
   readonly key: "source";
   readonly providerName = "github";
@@ -197,31 +184,23 @@ declare class GitHubSource implements Source {
   getPullRequest(number: number, repo?: string): Promise<PullRequest>;
   configurePages(config: PagesConfig, token: string): Promise<void>;
 }
-//#endregion
-//#region src/capabilities/teams.d.ts
 interface NormalizedTeamEntry {
   slug: string;
   permission: TeamPermission;
 }
-declare function normalizeTeamEntry(entry: TeamEntry): NormalizedTeamEntry;
-declare function syncTeams(client: GitHubClient, repo: string, teams: TeamEntry[]): Promise<string>;
-//#endregion
-//#region src/sodium.d.ts
+export declare function normalizeTeamEntry(entry: TeamEntry): NormalizedTeamEntry;
+export declare function syncTeams(client: GitHubClient, repo: string, teams: TeamEntry[]): Promise<string>;
 /**
  * Encrypt `value` for the given GitHub-provided base64 public key.
  * Returns the base64 ciphertext to send as `encrypted_value`.
  */
-declare function encryptSecret(publicKeyBase64: string, value: string): Promise<string>;
-//#endregion
-//#region src/verify-token.d.ts
+export declare function encryptSecret(publicKeyBase64: string, value: string): Promise<string>;
 interface VerifyTokenOptions {
   baseUrl?: string;
   fetch?: typeof fetch;
 }
-declare function verifyToken(token: string, opts?: VerifyTokenOptions): Promise<VerifyTokenResult$1>;
-//#endregion
-//#region src/index.d.ts
-interface GitHubPluginOptions extends ResolveTokenInput {
+export declare function verifyToken(token: string, opts?: VerifyTokenOptions): Promise<VerifyTokenResult$1>;
+export interface GitHubPluginOptions extends ResolveTokenInput {
   /** "owner/name" — e.g., "theholocron/holocron". Required. */
   repo: string;
   /** Absolute path to the working repo root. Used by `source`'s
@@ -237,18 +216,18 @@ interface GitHubPluginOptions extends ResolveTokenInput {
   /** Override `fetch` for tests. Defaults to global `fetch`. */
   fetch?: typeof fetch;
 }
-interface PluginContext {
+export interface PluginContext {
   options: GitHubPluginOptions;
   client: GitHubClient;
   repo: string;
   repoRoot: string;
 }
-declare function source(ctx: PluginContext, orgClient?: GitHubClient, userSyncClient?: GitHubClient): Source;
-declare function secrets(ctx: PluginContext, orgClient?: GitHubClient): Secrets;
-declare function environments(ctx: PluginContext): Environments;
-declare function ci(ctx: PluginContext): Ci;
-declare function issues(ctx: PluginContext): Issues;
-declare function createPlugin(options: GitHubPluginOptions): {
+export declare function source(ctx: PluginContext, orgClient?: GitHubClient, userSyncClient?: GitHubClient): Source;
+export declare function secrets(ctx: PluginContext, orgClient?: GitHubClient): Secrets;
+export declare function environments(ctx: PluginContext): Environments;
+export declare function ci(ctx: PluginContext): Ci;
+export declare function issues(ctx: PluginContext): Issues;
+export declare function createPlugin(options: GitHubPluginOptions): {
   name: string;
   probes: {
     connection: import("@theholocron/cli").Probe;
@@ -265,6 +244,5 @@ declare function createPlugin(options: GitHubPluginOptions): {
  * One-line hint printed by `holocron auth set github` when no token
  * is supplied or the supplied token is rejected.
  */
-declare const AUTH_HINT: string;
-//#endregion
-export { AUTH_HINT, type Auth, AuthError, type CanonicalLabel, GitHubCi, type GitHubClientOptions, GitHubEnvironments, GitHubIssues, GitHubPluginOptions, GitHubSecrets, GitHubSource, type NormalizedTeamEntry, PluginContext, type ResolveTokenInput, type TeamEntry, type TeamPermission, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveOrgToken, resolveReadToken, resolveReleaseToken, resolveSecretsToken, resolveSyncToken, resolveUserSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };
+export declare const AUTH_HINT: string;
+export { type Auth, AuthError, type CanonicalLabel, type GitHubClientOptions, type NormalizedTeamEntry, type ResolveTokenInput, type TeamEntry, type TeamPermission, type VerifyTokenFailure, type VerifyTokenResult, type VerifyTokenSuccess, createFeatureResolver, createGitHubClient };

package/dist/index.mjs

@@ -5,7 +5,7 @@ import { mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises"
 import { dirname, join } from "node:path";
 import { findRootSync } from "@theholocron/fs-utils";
 import { errorMessage } from "@theholocron/misc-utils";
-//#region src/auth.ts
+// src/auth.ts
 const resolveReadToken = createFeatureResolver({
 	envName: "HOLOCRON_READ_TOKEN",
 	keyringKey: "github.read"
@@ -42,8 +42,7 @@ const resolveOrgToken = createFeatureResolver({
 	envName: "HOLOCRON_ORG_TOKEN",
 	keyringKey: "github.org"
 });
-//#endregion
-//#region src/capabilities/ci.ts
+// src/capabilities/ci.ts
 var GitHubCi = class {
 	client;
 	opts;
@@ -87,8 +86,7 @@ var GitHubCi = class {
 		}
 	}
 };
-//#endregion
-//#region src/capabilities/environments.ts
+// src/capabilities/environments.ts
 var GitHubEnvironments = class {
 	client;
 	opts;
@@ -129,8 +127,7 @@ var GitHubEnvironments = class {
 		}));
 	}
 };
-//#endregion
-//#region src/capabilities/issues.ts
+// src/capabilities/issues.ts
 var GitHubIssues = class {
 	client;
 	key = "issues";
@@ -347,8 +344,7 @@ function parseIssueNumber(key, owner, repoName) {
 	if (!/^\d+$/.test(num)) throw new Error(`Invalid GitHub issue key "${key}" — expected #N or N.`);
 	return parseInt(num, 10);
 }
-//#endregion
-//#region src/sodium.ts
+// src/sodium.ts
 /**
 * libsodium sealed-box encryption for GitHub Actions secrets.
 *
@@ -379,8 +375,7 @@ async function encryptSecret(publicKeyBase64, value) {
 	const ciphertext = sodium.crypto_box_seal(plaintext, publicKey);
 	return sodium.to_base64(ciphertext, sodium.base64_variants.ORIGINAL);
 }
-//#endregion
-//#region src/capabilities/secrets.ts
+// src/capabilities/secrets.ts
 var GitHubSecrets = class {
 	client;
 	opts;
@@ -425,8 +420,7 @@ function toGHScope(scope) {
 	};
 	return scope;
 }
-//#endregion
-//#region src/capabilities/files.ts
+// src/capabilities/files.ts
 /** Reads one file; `null` when it does not exist. `version` is the blob sha `writeFile` needs to replace exactly this one. */
 /** A fine-grained token only reaches the repositories and permissions it was given; say which one is missing. */
 function noAccess(repo, action, cause) {
@@ -465,8 +459,7 @@ async function writeRepoFile(client, repo, path, content, opts) {
 		throw err;
 	}
 }
-//#endregion
-//#region src/capabilities/labels.ts
+// src/capabilities/labels.ts
 /**
 * Idempotently synchronise a repo's labels to the canonical set.
 *
@@ -504,14 +497,12 @@ async function syncLabels(client, repo, canonical, stale) {
 	}
 	return `${created} created, ${updated} updated, ${deleted} deleted`;
 }
-//#endregion
-//#region src/capabilities/properties.ts
+// src/capabilities/properties.ts
 async function syncProperties(client, repo, values) {
 	await client.properties.setProperties(repo, values);
 	return `${Object.keys(values).length} properties set`;
 }
-//#endregion
-//#region src/capabilities/teams.ts
+// src/capabilities/teams.ts
 function normalizeTeamEntry(entry) {
 	if (typeof entry === "string") return {
 		slug: entry,
@@ -531,14 +522,12 @@ async function syncTeams(client, repo, teams) {
 	}
 	return `${succeeded} team${succeeded === 1 ? "" : "s"} synced`;
 }
-//#endregion
-//#region src/capabilities/topics.ts
+// src/capabilities/topics.ts
 async function syncTopics(client, repo, topics) {
 	await client.topics.setTopics(repo, topics);
 	return `${topics.length} topics set`;
 }
-//#endregion
-//#region src/capabilities/variables.ts
+// src/capabilities/variables.ts
 /** GitHub's rule for a variable name: letters, digits and underscores, not starting with a digit or `GITHUB_`. */
 const NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
 /** Longest name GitHub accepts. */
@@ -638,8 +627,7 @@ function syncOrgVariables(client, repo, org, variables, opts = {}) {
 		dryRun: opts.dryRun === true
 	});
 }
-//#endregion
-//#region src/capabilities/source.ts
+// src/capabilities/source.ts
 var GitHubSource = class {
 	client;
 	key = "source";
@@ -836,8 +824,7 @@ async function ensureDir(path) {
 		throw err;
 	}
 }
-//#endregion
-//#region src/verify-token.ts
+// src/verify-token.ts
 async function verifyToken(token, opts = {}) {
 	const client = createGitHubClient({
 		token,
@@ -857,8 +844,7 @@ async function verifyToken(token, opts = {}) {
 		};
 	}
 }
-//#endregion
-//#region src/index.ts
+// src/index.ts
 function source(ctx, orgClient, userSyncClient) {
 	return new GitHubSource(ctx.client, {
 		repo: ctx.repo,
@@ -978,5 +964,4 @@ function createPlugin(options) {
 * is supplied or the supplied token is rejected.
 */
 const AUTH_HINT = "generate fine-grained Personal Access Tokens at https://github.com/settings/tokens (one per feature — see docs/tokens.md for required scopes per operation), then run: holocron auth set github.<feature> <PAT>";
-//#endregion
 export { AUTH_HINT, AuthError, GitHubCi, GitHubEnvironments, GitHubIssues, GitHubSecrets, GitHubSource, ci, createFeatureResolver, createGitHubClient, createPlugin, encryptSecret, environments, issues, normalizeTeamEntry, resolveAdminToken, resolveDeployToken, resolveIssuesToken, resolveOrgToken, resolveReadToken, resolveReleaseToken, resolveSecretsToken, resolveSyncToken, resolveUserSyncToken, secrets, source, syncLabels, syncTeams, verifyToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/holocron-plugin-github",
-  "version": "5.0.0-alpha.246",
+  "version": "5.0.0-alpha.247",
   "description": "Holocron plugin for GitHub. Implements source, ci, secrets, environments, and issues capabilities against the GitHub REST API.",
   "keywords": [
     "ci",
@@ -43,22 +43,22 @@
     "@theholocron/tsdown-config": "^8.8.2",
     "@theholocron/vitest-config": "^8.8.2",
     "@types/node": "^26",
-    "@vitest/coverage-v8": "^4.1.11",
+    "@vitest/coverage-v8": "^5.0.5",
     "@vitest/eslint-plugin": "^1.6.27",
     "eslint": "^10.8.1",
     "eslint-plugin-n": "^18.3.0",
     "globals": "^17.11.0",
-    "tsdown": "^0.22.14",
+    "tsdown": "^0.23.3",
     "tsx": "4.23.15",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.11",
-    "@theholocron/cli": "5.0.0-alpha.246"
+    "vitest": "^5.0.5",
+    "@theholocron/cli": "5.0.0-alpha.247"
   },
   "peerDependencies": {
     "@theholocron/fs-utils": "^1.16.0",
     "@theholocron/github-client": "^1.51.0",
     "@theholocron/misc-utils": "^1.16.0",
-    "@theholocron/cli": "5.0.0-alpha.246"
+    "@theholocron/cli": "5.0.0-alpha.247"
   },
   "engines": {
     "node": ">=22"