@vibes.diy/api-svc 14.3.163 → 14.3.165

package/public/github-install-pick.html

@@ -0,0 +1,25 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Choose a GitHub account</title>
+  </head>
+  <body style="font-family: system-ui, sans-serif; max-width: 32rem; margin: 4rem auto; padding: 0 1rem; line-height: 1.5">
+    <main>
+      <h1 style="font-size: 1.4rem">Choose a GitHub account</h1>
+      <p>
+        Pick the GitHub account to connect to <strong>{{vibe}}</strong>. Next you choose which of its repositories this vibe gets:
+        each vibe gets only the repositories you choose for it.
+      </p>
+      <ul style="padding-left: 1.2rem">
+        {{choices}}
+      </ul>
+      <p>
+        Want another account? <a href="{{installUrl}}">Add the app on GitHub</a> and you'll come straight back to choose its
+        repositories. Changed an account's repositories on GitHub? Press the app's Connect button again to choose them here.
+      </p>
+      <p><a href="{{vibeHref}}">Back to {{vibe}}</a></p>
+    </main>
+  </body>
+</html>

package/public/github-install-signin.html

@@ -8,7 +8,7 @@
   <body style="font-family: system-ui, sans-serif; max-width: 32rem; margin: 4rem auto; padding: 0 1rem; line-height: 1.5">
     <main>
       <h1 style="font-size: 1.4rem">Sign in first</h1>
-      <p>Sign in on vibes.diy first, then use the app's Connect GitHub link again.</p>
+      <p>Sign in on vibes.diy first, then press the app's Connect button again.</p>
       <p><a href="{{vibeHref}}">Back to {{vibe}}</a></p>
     </main>
   </body>

package/public/github-install.d.ts

@@ -1,9 +1,8 @@
-import { Result } from "@adviser/cement";
 import { CFEnv } from "@vibes.diy/api-types";
 import type { VibesApiSQLCtx } from "../types.js";
 import { type GithubDeclLoader, type GithubSetupSql, type VerifySessionToken } from "./github-setup.js";
-export type GithubInstallTemplate = "github-install-consent.html" | "github-install-signin.html";
-export type GithubInstallTemplateLoader = (name: GithubInstallTemplate) => Promise<Result<string>>;
+import { type GithubInstallTemplateLoader } from "./github-templates.js";
+export { escapeHtml, fillFragments, fillTemplate, githubInstallTemplates, resetGithubInstallTemplatesForTests, type GithubInstallTemplate, type GithubInstallTemplateLoader, type TemplateValue, type TrustedHtml, } from "./github-templates.js";
 export interface GithubInstallDeps {
     readonly verifySessionToken: VerifySessionToken;
     readonly githubDecl: GithubDeclLoader;
@@ -13,11 +12,4 @@ export interface GithubInstallDeps {
     readonly nowMs?: number;
 }
 export declare function githubDeclFromVctx(vctx: VibesApiSQLCtx): GithubDeclLoader;
-export declare function resetGithubInstallTemplatesForTests(): void;
-export declare function githubInstallTemplates(src: {
-    readonly workspace: string;
-    readonly fetchAsset: (url: string) => Promise<Result<ReadableStream<Uint8Array>>>;
-}): GithubInstallTemplateLoader;
-export declare function escapeHtml(text: string): string;
-export declare function fillTemplate(template: string, values: Readonly<Record<string, string>>): string;
 export declare function handleGithubInstall(request: Request, env: CFEnv, deps: GithubInstallDeps): Promise<Response>;

package/public/github-install.js

@@ -1,8 +1,8 @@
-import { BuildURI, KeyedResolvOnce, loadAsset, URI } from "@adviser/cement";
-import { getAppHtmlUrl } from "../intern/github-app-auth.js";
+import { URI } from "@adviser/cement";
 import { loadSelectedBackend } from "../intern/load-selected-backend.js";
-import { createPromptAssetFetch } from "../intern/prompt-asset-fetch.js";
-import { appExists, GITHUB_CONSENT_STATE_TTL_MS, GITHUB_SETUP_STATE_RE, htmlPage, ownsHandle, recordGithubConsent, sessionTokenFrom, signGithubConsentState, sqlFor, stateSecret, } from "./github-setup.js";
+import { appExists, GITHUB_CONSENT_STATE_TTL_MS, GITHUB_SETUP_STATE_RE, githubAuthorizeUrl, ownsHandle, recordGithubConsent, sessionTokenFrom, sqlFor, githubOAuthReady, } from "./github-setup.js";
+import { flowRedirect, htmlPage, templatePage } from "./github-templates.js";
+export { escapeHtml, fillFragments, fillTemplate, githubInstallTemplates, resetGithubInstallTemplatesForTests, } from "./github-templates.js";
 export function githubDeclFromVctx(vctx) {
     return async function loadGithubDecl(owner, slug) {
         const loaded = await loadSelectedBackend(vctx, owner, slug);
@@ -15,51 +15,6 @@ export function githubDeclFromVctx(vctx) {
         return loaded.parsed.github;
     };
 }
-const templateOnce = new KeyedResolvOnce();
-export function resetGithubInstallTemplatesForTests() {
-    templateOnce.reset();
-}
-export function githubInstallTemplates(src) {
-    const fetchImpl = createPromptAssetFetch({ fetchAsset: (url) => src.fetchAsset(url) });
-    const fallBackUrl = BuildURI.from(src.workspace).appendRelative("@vibes.diy/api-svc/public/").toString();
-    return async function loadTemplate(name) {
-        const r = await templateOnce
-            .get(name)
-            .once(() => loadAsset(`./${name}`, { fallBackUrl, basePath: () => import.meta.url, mock: { fetch: fetchImpl } }));
-        if (r.isErr())
-            templateOnce.unget(name);
-        return r;
-    };
-}
-export function escapeHtml(text) {
-    return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-}
-export function fillTemplate(template, values) {
-    return template.replace(/\{\{(\w+)\}\}/g, (match, key) => Object.prototype.hasOwnProperty.call(values, key) ? escapeHtml(values[key]) : match);
-}
-async function templatePage(deps, page, values) {
-    const rTemplate = await deps.templates(page.name);
-    if (rTemplate.isErr()) {
-        console.error(`[github-install] template ${page.name} unreadable:`, rTemplate.Err().message);
-        return htmlPage("Not available", "This page could not be shown right now. Try again in a moment.", 503);
-    }
-    return new Response(fillTemplate(rTemplate.Ok(), values), {
-        status: page.status,
-        headers: {
-            "Content-Type": "text/html; charset=utf-8",
-            "Cache-Control": "no-store",
-            "X-Frame-Options": "DENY",
-            "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'none'",
-        },
-    });
-}
-function installUrlFor(htmlUrl, state) {
-    const base = URI.from(htmlUrl);
-    return BuildURI.from(htmlUrl)
-        .pathname(`${base.pathname.replace(/\/+$/, "")}/installations/new`)
-        .setParam("state", state)
-        .toString();
-}
 export async function handleGithubInstall(request, env, deps) {
     const appId = env.VIBES_GH_APP_ID ?? "";
     const privateKeyPem = env.VIBES_GH_APP_PRIVATE_KEY ?? "";
@@ -75,7 +30,7 @@ export async function handleGithubInstall(request, env, deps) {
     const token = sessionTokenFrom(request);
     const userId = token === undefined ? undefined : await deps.verifySessionToken(token);
     if (userId === undefined) {
-        return templatePage(deps, { name: "github-install-signin.html", status: 401 }, { vibe, vibeHref });
+        return templatePage(deps.templates, { name: "github-install-signin.html", status: 401 }, { vibe, vibeHref });
     }
     const sql = sqlFor(env, deps);
     if (!(await appExists(sql, owner, slug))) {
@@ -87,23 +42,22 @@ export async function handleGithubInstall(request, env, deps) {
         return htmlPage("Not open to visitors", "This app has not asked visitors to connect their GitHub repositories, so only its author can connect one.", 403);
     }
     const nowMs = deps.nowMs ?? Date.now();
-    const secret = stateSecret(env);
-    if (decl?.bind === "anyone" && secret === undefined) {
-        return htmlPage("Not available", "Connecting GitHub is not fully set up on this environment yet.", 503);
-    }
-    const rHtmlUrl = await getAppHtmlUrl({ appId, privateKeyPem, nowMs, fetchImpl: deps.fetchImpl });
-    if (rHtmlUrl.isErr()) {
-        console.error("[github-install] could not resolve the App's install URL:", rHtmlUrl.Err().message);
-        return htmlPage("GitHub said no", "We could not reach GitHub to start the install. Try again in a moment.", 502);
-    }
-    if (decl?.bind === "anyone" && secret !== undefined) {
+    const ready = githubOAuthReady(env);
+    if (ready.ok === false)
+        return ready.refusal;
+    if (decl?.bind === "anyone") {
         const id = await recordGithubConsent(sql, { userId, owner, slug, nowMs });
-        const consent = await signGithubConsentState(secret, { id, owner, slug, userId, exp: nowMs + GITHUB_CONSENT_STATE_TTL_MS });
-        return templatePage(deps, { name: "github-install-consent.html", status: 200 }, { vibe, why: decl.why, installUrl: installUrlFor(rHtmlUrl.Ok(), consent), vibeHref });
-    }
-    return new Response(null, {
-        status: 302,
-        headers: { Location: installUrlFor(rHtmlUrl.Ok(), vibe), "Cache-Control": "no-store" },
-    });
+        const authorize = await githubAuthorizeUrl(env, {
+            owner,
+            slug,
+            exp: nowMs + GITHUB_CONSENT_STATE_TTL_MS,
+            consent: { id, userId },
+        });
+        if (authorize.ok === false)
+            return authorize.refusal;
+        return templatePage(deps.templates, { name: "github-install-consent.html", status: 200 }, { vibe, why: decl.why, continueUrl: authorize.url, vibeHref });
+    }
+    const authorize = await githubAuthorizeUrl(env, { owner, slug, exp: nowMs + GITHUB_CONSENT_STATE_TTL_MS });
+    return authorize.ok ? flowRedirect(authorize.url) : authorize.refusal;
 }
 //# sourceMappingURL=github-install.js.map

package/public/github-install.js.map

@@ -1 +1 @@
-{"version":3,"file":"github-install.js","sourceRoot":"","sources":["../../jsr/public/github-install.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAU,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAIpF,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,qBAAqB,EAGrB,QAAQ,EACR,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,MAAM,EACN,WAAW,GAEZ,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,OAAO,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;QAC9D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,KAAK,IAAI,IAAI,0BAA0B,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAID,MAAM,YAAY,GAAG,IAAI,eAAe,EAAkB,CAAC;AAG3D,MAAM,UAAU,mCAAmC;IACjD,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AASD,MAAM,UAAU,sBAAsB,CAAC,GAGtC;IACC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzG,OAAO,KAAK,UAAU,YAAY,CAAC,IAA2B;QAC5D,MAAM,CAAC,GAAG,MAAM,YAAY;aACzB,GAAG,CAAC,IAAI,CAAC;aACT,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QACpH,IAAI,CAAC,CAAC,KAAK,EAAE;YAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC;AAGD,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChI,CAAC;AAMD,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,MAAwC;IACrF,OAAO,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE,CACvE,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CACpF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAuB,EACvB,IAAuE,EACvE,MAAwC;IAExC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,CAAC,IAAI,cAAc,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC,eAAe,EAAE,gEAAgE,EAAE,GAAG,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE;QACxD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;YAE3B,iBAAiB,EAAE,MAAM;YACzB,yBAAyB,EAAE,uEAAuE;SACnG;KACF,CAAC,CAAC;AACL,CAAC;AAGD,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;SAC1B,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAAC;SAClE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;SACxB,QAAQ,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,GAAU,EAAE,IAAuB;IAC7F,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CACb,eAAe,EACf,yFAAyF,EACzF,GAAG,CACJ,CAAC;IACJ,CAAC;IAGD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC,cAAc,EAAE,6DAA6D,EAAE,GAAG,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,SAAS,IAAI,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,gBAAgB,EAAE,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACrH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,QAAQ,CACb,sBAAsB,EACtB,2GAA2G,EAC3G,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAGvC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,QAAQ,CAAC,eAAe,EAAE,gEAAgE,EAAE,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACjG,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,2DAA2D,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QACnG,OAAO,QAAQ,CAAC,gBAAgB,EAAE,wEAAwE,EAAE,GAAG,CAAC,CAAC;IACnH,CAAC;IAED,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAGpD,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAG,2BAA2B,EAAE,CAAC,CAAC;QAC5H,OAAO,YAAY,CACjB,IAAI,EACJ,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE,EACpD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE;KACvF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"github-install.js","sourceRoot":"","sources":["../../jsr/public/github-install.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAItC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EACL,SAAS,EACT,2BAA2B,EAC3B,qBAAqB,EACrB,kBAAkB,EAGlB,UAAU,EACV,mBAAmB,EACnB,gBAAgB,EAChB,MAAM,EACN,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAoC,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE/G,OAAO,EACL,UAAU,EACV,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,mCAAmC,GAKpC,MAAM,uBAAuB,CAAC;AAiB/B,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,OAAO,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;QAC9D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,8CAA8C,KAAK,IAAI,IAAI,0BAA0B,CAAC,CAAC;YACvG,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAgB,EAAE,GAAU,EAAE,IAAuB;IAC7F,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO,QAAQ,CACb,eAAe,EACf,yFAAyF,EACzF,GAAG,CACJ,CAAC;IACJ,CAAC;IAGD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC,cAAc,EAAE,6DAA6D,EAAE,GAAG,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,SAAS,IAAI,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC,gBAAgB,EAAE,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACrH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,QAAQ,CACb,sBAAsB,EACtB,2GAA2G,EAC3G,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAIvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAE7C,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAI5B,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE;YAC9C,KAAK;YACL,IAAI;YACJ,GAAG,EAAE,KAAK,GAAG,2BAA2B;YACxC,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACxB,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC;QACrD,OAAO,YAAY,CACjB,IAAI,CAAC,SAAS,EACd,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE,EACpD,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,2BAA2B,EAAE,CAAC,CAAC;IAC3G,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;AACxE,CAAC"}

package/public/github-repo-pick-item.html

@@ -0,0 +1,7 @@
+<li style="margin: 0.4rem 0">
+  <label>
+    <input type="checkbox" name="repo" value="{{repo}}" {{checked}} {{disabled}} />
+    <span style="font-weight: 600">{{repo}}</span>
+  </label>
+  <span style="color: #666">{{note}}</span>
+</li>

package/public/github-repo-pick.html

@@ -0,0 +1,28 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Choose repositories</title>
+  </head>
+  <body style="font-family: system-ui, sans-serif; max-width: 32rem; margin: 4rem auto; padding: 0 1rem; line-height: 1.5">
+    <main>
+      <h1 style="font-size: 1.4rem">Choose repositories</h1>
+      <p>
+        Tick the repositories <strong>{{vibe}}</strong> gets. Each vibe hears only the repositories you choose for it, so your other
+        vibes keep exactly what they have. Untick one to take it off this vibe.
+      </p>
+      <form method="post" action="{{action}}">
+        <input type="hidden" name="state" value="{{state}}" />
+        <ul style="list-style: none; padding-left: 0">
+          {{rows}}
+        </ul>
+        <p style="display: flex; gap: 1rem; flex-wrap: wrap; align-items: center">
+          <button type="submit" style="font-weight: 600">Save</button>
+          <a href="{{vibeHref}}">Back to {{vibe}}</a>
+        </p>
+      </form>
+      <p>Missing a repository? Add it to the vibes.diy app on GitHub, then press the app's Connect button again.</p>
+    </main>
+  </body>
+</html>

package/public/github-repos.d.ts

@@ -0,0 +1,3 @@
+import { CFEnv } from "@vibes.diy/api-types";
+import { type GithubSetupDeps } from "./github-setup.js";
+export declare function handleGithubRepos(request: Request, env: CFEnv, deps: GithubSetupDeps): Promise<Response>;

package/public/github-repos.js

@@ -0,0 +1,195 @@
+import { exception2Result, Result } from "@adviser/cement";
+import { and, eq, inArray, ne, or } from "drizzle-orm/sql/expressions";
+import { isUniqueViolation } from "../intern/is-unique-violation.js";
+import { appExists, claimGithubConsent, consentUsedPage, GITHUB_REPO_PICK_PROVIDER, githubConsentUnspent, mayBindVibe, notProvisionedPage, notYourVibePage, ownsHandle, sessionTokenFrom, sqlFor, stateSecret, verifyGithubRepoPickState, } from "./github-setup.js";
+import { flowRedirect, htmlPage } from "./github-templates.js";
+import { GITHUB_REPO_MAX_VIBES } from "./github-webhook.js";
+function pickUsedPage() {
+    return htmlPage("Choice already saved", "That page has already saved a choice of repositories. Open the app and press its Connect button again to change it.", 403);
+}
+function pickExpiredPage() {
+    return htmlPage("Link expired", "That choice of repositories is no longer valid. Open the app and press its Connect button again.", 400);
+}
+async function claimPick(sql, pick, nowMs) {
+    const t = sql.tables.connectionApprovals;
+    const claimed = await sql.db
+        .update(t)
+        .set({ consumedAt: new Date(nowMs).toISOString() })
+        .where(and(eq(t.id, pick.id), eq(t.consumedAt, ""), eq(t.userId, pick.userId), eq(t.provider, GITHUB_REPO_PICK_PROVIDER), eq(t.ownerHandle, pick.owner), eq(t.appSlug, pick.slug)))
+        .returning({ id: t.id });
+    return claimed.length > 0;
+}
+async function bindOne(input) {
+    const { sql, pick, repoFullName, accountLogin, now } = input;
+    const t = sql.tables.githubRepoRoutes;
+    const rApplied = await exception2Result(() => sql.db
+        .insert(t)
+        .values({
+        installationId: pick.installationId,
+        repoFullName,
+        ownerHandle: pick.owner,
+        appSlug: pick.slug,
+        accountLogin,
+        installedByUserId: pick.userId,
+        created: now,
+        updated: now,
+        removedAt: "",
+    })
+        .onConflictDoUpdate({
+        target: [t.installationId, t.repoFullName, t.ownerHandle, t.appSlug],
+        set: { accountLogin, installedByUserId: pick.userId, updated: now, removedAt: "" },
+        setWhere: or(eq(t.installedByUserId, pick.userId), ne(t.removedAt, "")),
+    })
+        .returning({ repoFullName: t.repoFullName }));
+    if (rApplied.isOk())
+        return Result.Ok(rApplied.Ok().length > 0 ? "bound" : "held-here");
+    if (isUniqueViolation(rApplied.Err()) === false)
+        return Result.Err(rApplied.Err());
+    const reused = await sql.db
+        .update(t)
+        .set({
+        ownerHandle: pick.owner,
+        appSlug: pick.slug,
+        accountLogin,
+        installedByUserId: pick.userId,
+        updated: now,
+        removedAt: "",
+    })
+        .where(and(eq(t.installationId, pick.installationId), eq(t.repoFullName, repoFullName), ne(t.removedAt, "")))
+        .returning({ repoFullName: t.repoFullName });
+    return Result.Ok(reused.length > 0 ? "bound" : "held-elsewhere");
+}
+async function inChunks(items, fn) {
+    const out = [];
+    for (let i = 0; i < items.length; i = i + IN_ARRAY_CHUNK) {
+        out.push(...(await fn(items.slice(i, i + IN_ARRAY_CHUNK))));
+    }
+    return out;
+}
+const IN_ARRAY_CHUNK = 50;
+async function otherVibesFed(input) {
+    const t = input.sql.tables.githubRepoRoutes;
+    const rows = await input.sql.db
+        .select({ ownerHandle: t.ownerHandle, appSlug: t.appSlug })
+        .from(t)
+        .where(and(eq(t.installationId, input.pick.installationId), eq(t.repoFullName, input.repoFullName), eq(t.removedAt, "")))
+        .limit(GITHUB_REPO_MAX_VIBES + 1);
+    return rows.filter((r) => r.ownerHandle !== input.pick.owner || r.appSlug !== input.pick.slug).length;
+}
+export async function handleGithubRepos(request, env, deps) {
+    const signingKey = stateSecret(env);
+    if (signingKey === undefined)
+        return notProvisionedPage();
+    const rForm = await exception2Result(() => request.formData());
+    if (rForm.isErr())
+        return pickExpiredPage();
+    const form = rForm.Ok();
+    const rawState = form.get("state");
+    const nowMs = deps.nowMs ?? Date.now();
+    const pick = typeof rawState === "string" ? await verifyGithubRepoPickState(signingKey, rawState, nowMs) : undefined;
+    if (pick === undefined)
+        return pickExpiredPage();
+    const token = sessionTokenFrom(request);
+    const sessionUserId = token === undefined ? undefined : await deps.verifySessionToken(token);
+    if (sessionUserId !== undefined && sessionUserId !== pick.userId) {
+        console.error(`[github-repos] pick state for clerk user ${pick.userId} presented by ${sessionUserId}; refusing`);
+        return pickExpiredPage();
+    }
+    const userId = pick.userId;
+    const sql = sqlFor(env, deps);
+    const isOwner = await ownsHandle(sql, userId, pick.owner);
+    if (isOwner === false) {
+        if (pick.consentId === undefined ||
+            (await mayBindVibe(sql, { userId, owner: pick.owner, slug: pick.slug }, deps.githubDecl)) === false) {
+            return notYourVibePage();
+        }
+        if ((await githubConsentUnspent(sql, { id: pick.consentId, userId, owner: pick.owner, slug: pick.slug })) === false) {
+            return consentUsedPage();
+        }
+    }
+    if ((await appExists(sql, pick.owner, pick.slug)) === false) {
+        return htmlPage("Vibe not found", "That vibe does not exist. Publish it first, then connect the repository.", 404);
+    }
+    const offered = new Map(pick.repos.map((r) => [r.fullName, r]));
+    const ticked = new Set();
+    for (const value of form.getAll("repo")) {
+        if (typeof value !== "string")
+            continue;
+        const name = value.toLowerCase();
+        if (offered.has(name))
+            ticked.add(name);
+    }
+    const t = sql.tables.githubRepoRoutes;
+    const offeredNames = [...offered.keys()];
+    const removable = (await inChunks(offeredNames, (names) => sql.db
+        .select({ repoFullName: t.repoFullName, installedByUserId: t.installedByUserId })
+        .from(t)
+        .where(and(eq(t.installationId, pick.installationId), eq(t.ownerHandle, pick.owner), eq(t.appSlug, pick.slug), eq(t.removedAt, ""), inArray(t.repoFullName, [...names])))))
+        .filter((row) => ticked.has(row.repoFullName) === false && (isOwner || row.installedByUserId === userId))
+        .map((row) => row.repoFullName);
+    if (ticked.size === 0 && removable.length === 0) {
+        return htmlPage("No repositories chosen", "Tick at least one repository for this vibe, then save. Go back to choose.", 400);
+    }
+    if ((await claimPick(sql, pick, nowMs)) === false)
+        return pickUsedPage();
+    if (pick.consentId !== undefined &&
+        isOwner === false &&
+        (await claimGithubConsent(sql, { id: pick.consentId, userId, owner: pick.owner, slug: pick.slug, nowMs })) === false) {
+        return consentUsedPage();
+    }
+    const now = new Date(nowMs).toISOString();
+    await inChunks(removable, async (names) => {
+        await sql.db
+            .delete(t)
+            .where(and(eq(t.installationId, pick.installationId), eq(t.ownerHandle, pick.owner), eq(t.appSlug, pick.slug), eq(t.removedAt, ""), inArray(t.repoFullName, [...names]), ...(isOwner ? [] : [eq(t.installedByUserId, userId)])));
+        return [];
+    });
+    let bound = 0;
+    let heldHere = 0;
+    let heldElsewhere = 0;
+    let atCapacity = 0;
+    for (const name of ticked) {
+        const repo = offered.get(name);
+        if (repo === undefined)
+            continue;
+        if ((await otherVibesFed({ sql, pick, repoFullName: name })) >= GITHUB_REPO_MAX_VIBES) {
+            atCapacity = atCapacity + 1;
+            console.warn(`[github-repos] installation ${pick.installationId} repo ${name} already feeds ${GITHUB_REPO_MAX_VIBES} vibes; ` +
+                `not adding ${pick.owner}/${pick.slug} (clerk user ${userId})`);
+            continue;
+        }
+        const rOutcome = await bindOne({ sql, pick, repoFullName: name, accountLogin: repo.accountLogin, now });
+        if (rOutcome.isErr()) {
+            console.error(`[github-repos] bind of ${name} to ${pick.owner}/${pick.slug} failed:`, rOutcome.Err().message);
+            return htmlPage("Not saved", "We could not save your choice of repositories. Open the app and press its Connect button again.", 500);
+        }
+        switch (rOutcome.Ok()) {
+            case "bound":
+                bound = bound + 1;
+                break;
+            case "held-here":
+                heldHere = heldHere + 1;
+                console.warn(`[github-repos] installation ${pick.installationId} repo ${name} is connected to ${pick.owner}/${pick.slug} by ` +
+                    `another clerk user; leaving it theirs (clerk user ${userId} asked)`);
+                break;
+            case "held-elsewhere":
+                heldElsewhere = heldElsewhere + 1;
+                console.warn(`[github-repos] installation ${pick.installationId} repo ${name} already feeds another vibe; the one-vibe ` +
+                    `index holds until schema step 3 (clerk user ${userId}, ${pick.owner}/${pick.slug})`);
+                break;
+        }
+    }
+    if (atCapacity > 0) {
+        return htmlPage("That repository is popular", `One repository can feed up to ${GITHUB_REPO_MAX_VIBES} vibes, and one you chose already feeds ${GITHUB_REPO_MAX_VIBES} vibes, so ` +
+            "it was not added here. The rest of your choice is saved.", 409);
+    }
+    if (heldElsewhere > 0) {
+        return htmlPage("Switching on shortly", "Connecting one repository to more than one vibe is switching on shortly, so one of the repositories you chose " +
+            "could not be added here yet; please try again soon. The rest of your choice is saved.", 409);
+    }
+    if (ticked.size > 0 && bound === 0 && heldHere > 0 && removable.length === 0) {
+        return htmlPage("Already connected", "Those repositories are already connected to this vibe by someone else, so they stay theirs.", 409);
+    }
+    return flowRedirect(`/vibe/${pick.owner}/${pick.slug}`);
+}
+//# sourceMappingURL=github-repos.js.map

package/public/github-repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-repos.js","sourceRoot":"","sources":["../../jsr/public/github-repos.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,eAAe,EACf,yBAAyB,EACzB,oBAAoB,EAIpB,WAAW,EACX,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,MAAM,EACN,WAAW,EACX,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,SAAS,YAAY;IACnB,OAAO,QAAQ,CACb,sBAAsB,EACtB,qHAAqH,EACrH,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,QAAQ,CACb,cAAc,EACd,kGAAkG,EAClG,GAAG,CACJ,CAAC;AACJ,CAAC;AAGD,KAAK,UAAU,SAAS,CAAC,GAAmB,EAAE,IAAyB,EAAE,KAAa;IACpF,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;SACzB,MAAM,CAAC,CAAC,CAAC;SACT,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;SAClD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,EACjB,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,EACpB,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EACzB,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EACzC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAC7B,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CACzB,CACF;SACA,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AAC5B,CAAC;AAWD,KAAK,UAAU,OAAO,CAAC,KAMtB;IACC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAC3C,GAAG,CAAC,EAAE;SACH,MAAM,CAAC,CAAC,CAAC;SACT,MAAM,CAAC;QACN,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,YAAY;QACZ,WAAW,EAAE,IAAI,CAAC,KAAK;QACvB,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,YAAY;QACZ,iBAAiB,EAAE,IAAI,CAAC,MAAM;QAC9B,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;SACD,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC;QAGpE,GAAG,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE;QAClF,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;KACxE,CAAC;SACD,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAC/C,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACxF,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IASnF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE;SACxB,MAAM,CAAC,CAAC,CAAC;SACT,GAAG,CAAC;QACH,WAAW,EAAE,IAAI,CAAC,KAAK;QACvB,OAAO,EAAE,IAAI,CAAC,IAAI;QAClB,YAAY;QACZ,iBAAiB,EAAE,IAAI,CAAC,MAAM;QAC9B,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;SACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;SAC5G,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;AACnE,CAAC;AAGD,KAAK,UAAU,QAAQ,CAAO,KAAmB,EAAE,EAAkD;IACnG,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,MAAM,cAAc,GAAG,EAAE,CAAC;AAQ1B,KAAK,UAAU,aAAa,CAAC,KAI5B;IACC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE;SAC5B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;SACxH,KAAK,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAgB,EAAE,GAAU,EAAE,IAAqB;IACzF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,kBAAkB,EAAE,CAAC;IAG1D,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,eAAe,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,yBAAyB,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrH,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,eAAe,EAAE,CAAC;IASjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,aAAa,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7F,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,MAAM,iBAAiB,aAAa,YAAY,CAAC,CAAC;QACjH,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAG9B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,KAAK,EACnG,CAAC;YACD,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YACpH,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC,gBAAgB,EAAE,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACrH,CAAC;IAGD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAID,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;IACtC,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,CAChB,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACrC,GAAG,CAAC,EAAE;SACH,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC;SAChF,IAAI,CAAC,CAAC,CAAC;SACP,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EACzC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAC7B,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EACxB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EACnB,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CACpC,CACF,CACJ,CACF;SACE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,iBAAiB,KAAK,MAAM,CAAC,CAAC;SACxG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAElC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAEhD,OAAO,QAAQ,CAAC,wBAAwB,EAAE,2EAA2E,EAAE,GAAG,CAAC,CAAC;IAC9H,CAAC;IAED,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,YAAY,EAAE,CAAC;IACzE,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,OAAO,KAAK,KAAK;QACjB,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,EACpH,CAAC;QACD,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAW1C,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,GAAG,CAAC,EAAE;aACT,MAAM,CAAC,CAAC,CAAC;aACT,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EACzC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAC7B,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EACxB,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EACnB,OAAO,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,EACnC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CACtD,CACF,CAAC;QACJ,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,CAAC,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;YACtF,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,+BAA+B,IAAI,CAAC,cAAc,SAAS,IAAI,kBAAkB,qBAAqB,UAAU;gBAC9G,cAAc,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,gBAAgB,MAAM,GAAG,CACjE,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QACxG,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YAIrB,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC9G,OAAO,QAAQ,CACb,WAAW,EACX,iGAAiG,EACjG,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,QAAQ,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;YACtB,KAAK,OAAO;gBACV,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;gBAClB,MAAM;YACR,KAAK,WAAW;gBACd,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,+BAA+B,IAAI,CAAC,cAAc,SAAS,IAAI,oBAAoB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM;oBAC9G,qDAAqD,MAAM,SAAS,CACvE,CAAC;gBACF,MAAM;YACR,KAAK,gBAAgB;gBACnB,aAAa,GAAG,aAAa,GAAG,CAAC,CAAC;gBAClC,OAAO,CAAC,IAAI,CACV,+BAA+B,IAAI,CAAC,cAAc,SAAS,IAAI,4CAA4C;oBACzG,+CAA+C,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,CACvF,CAAC;gBACF,MAAM;QACV,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,QAAQ,CACb,4BAA4B,EAC5B,iCAAiC,qBAAqB,2CAA2C,qBAAqB,aAAa;YACjI,0DAA0D,EAC5D,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QAItB,OAAO,QAAQ,CACb,sBAAsB,EACtB,gHAAgH;YAC9G,uFAAuF,EACzF,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,QAAQ,CACb,mBAAmB,EACnB,6FAA6F,EAC7F,GAAG,CACJ,CAAC;IACJ,CAAC;IAID,OAAO,YAAY,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC"}

package/public/github-setup.d.ts

@@ -1,6 +1,8 @@
 import { CFEnv } from "@vibes.diy/api-types";
 import { cfDrizzle, VibesApiTables } from "@vibes.diy/api-sql";
 import type { BackendGithubDecl } from "@vibes.diy/vibe-runtime/parse-backend-config.js";
+import { type GithubInstallTemplateLoader } from "./github-templates.js";
+export { htmlPage } from "./github-templates.js";
 export interface GithubSetupSql {
     db: ReturnType<typeof cfDrizzle>["db"];
     tables: VibesApiTables;
@@ -12,10 +14,10 @@ export interface GithubSetupDeps {
     readonly fetchImpl?: typeof fetch;
     readonly nowMs?: number;
     readonly githubDecl?: GithubDeclLoader;
+    readonly templates?: GithubInstallTemplateLoader;
 }
 export type GithubDeclLoader = (owner: string, slug: string) => Promise<BackendGithubDecl | undefined>;
 export declare const GITHUB_SETUP_STATE_RE: RegExp;
-export declare function htmlPage(title: string, body: string, status: number): Response;
 export declare function sessionCookieTokenFrom(request: Request): string | undefined;
 export declare function sessionTokenFrom(request: Request): string | undefined;
 export declare const GITHUB_SETUP_OAUTH_STATE_TTL_MS: number;
@@ -23,10 +25,10 @@ export declare const GITHUB_OAUTH_AUTHORIZE_URL = "https://github.com/login/oaut
 export declare const USER_AGENT = "vibes.diy-github-app";
 export declare const GITHUB_SETUP_MAX_REPOS = 200;
 export declare function stateSecret(env: CFEnv): string | undefined;
-interface SetupOAuthState {
+export interface SetupOAuthState {
     readonly owner: string;
     readonly slug: string;
-    readonly installationId: string;
+    readonly installationId?: string;
     readonly exp: number;
     readonly consent?: {
         readonly id: string;
@@ -44,6 +46,11 @@ export declare function exchangeOAuthCode(input: {
     code: string;
     fetchImpl: typeof fetch;
 }): Promise<string | undefined>;
+export interface UserInstallation {
+    readonly id: string;
+    readonly accountLogin: string;
+    readonly settingsUrl?: string;
+}
 export declare function sqlFor(env: CFEnv, deps: {
     readonly sql?: GithubSetupSql;
 }): GithubSetupSql;
@@ -73,4 +80,56 @@ export declare function recordGithubConsent(sql: GithubSetupSql, input: {
     readonly slug: string;
     readonly nowMs: number;
 }): Promise<string>;
-export {};
+interface ConsentRowKey {
+    readonly id: string;
+    readonly userId: string;
+    readonly owner: string;
+    readonly slug: string;
+}
+export declare function githubConsentUnspent(sql: GithubSetupSql, key: ConsentRowKey): Promise<boolean>;
+export declare function claimGithubConsent(sql: GithubSetupSql, key: ConsentRowKey & {
+    readonly nowMs: number;
+}): Promise<boolean>;
+export declare function notYourVibePage(): Response;
+export declare const GITHUB_SETUP_PATH = "/github/setup";
+export declare function notProvisionedPage(): Response;
+export declare function consentUsedPage(): Response;
+export type GithubAuthorizeUrl = {
+    readonly ok: true;
+    readonly url: string;
+} | {
+    readonly ok: false;
+    readonly refusal: Response;
+};
+export type GithubOAuthReady = {
+    readonly ok: true;
+    readonly signingKey: string;
+    readonly clientId: string;
+    readonly redirectUri: string;
+} | {
+    readonly ok: false;
+    readonly refusal: Response;
+};
+export declare function githubOAuthReady(env: CFEnv): GithubOAuthReady;
+export declare function githubAuthorizeUrl(env: CFEnv, state: SetupOAuthState): Promise<GithubAuthorizeUrl>;
+export declare function installUrlFor(htmlUrl: string, state: string): string;
+export declare const GITHUB_REPOS_PATH = "/github/repos";
+export declare const GITHUB_REPO_PICK_STATE_PREFIX = "r1.";
+export declare const GITHUB_REPO_PICK_STATE_TTL_MS: number;
+export declare const GITHUB_REPO_PICK_PROVIDER = "github-app-repos";
+export interface PickedRepo {
+    readonly fullName: string;
+    readonly accountLogin: string;
+}
+export interface GithubRepoPickState {
+    readonly id: string;
+    readonly owner: string;
+    readonly slug: string;
+    readonly installationId: string;
+    readonly userId: string;
+    readonly repos: readonly PickedRepo[];
+    readonly consentId?: string;
+    readonly exp: number;
+}
+export declare function signGithubRepoPickState(secret: string, state: GithubRepoPickState): Promise<string>;
+export declare function verifyGithubRepoPickState(secret: string, signed: string, nowMs: number): Promise<GithubRepoPickState | undefined>;