declastruct-github 1.0.7 → 1.2.0

package/dist/domain.operations/appInstallation/getOneAppInstallation.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOneAppInstallation = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const hasContextWithAppToken_1 = require("../context/hasContextWithAppToken");
+const hasContextWithPatToken_1 = require("../context/hasContextWithPatToken");
+const castToDeclaredGithubAppInstallation_1 = require("./castToDeclaredGithubAppInstallation");
+/**
+ * .what = gets a GitHub App installation by unique key
+ * .why = retrieves current state of an installation from GitHub API for declarative management
+ * .note = lookup by primary key (installation id) is not supported - requires App JWT auth
+ */
+exports.getOneAppInstallation = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    // get cached GitHub client
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    // handle get by unique key
+    if (input.by.unique) {
+        const { app, target } = input.by.unique;
+        // list installations for the org/user and filter by app
+        // uses GET /orgs/{org}/installations which works with PAT (admin:read scope)
+        try {
+            if (target.type === 'organization') {
+                const response = await github.orgs.listAppInstallations({
+                    org: target.slug,
+                    per_page: 100,
+                });
+                // find installation matching app slug
+                const installation = response.data.installations.find((inst) => inst.app_slug === app.slug);
+                if (!installation)
+                    return null;
+                // fetch repositories if selection is 'selected'
+                // (the list endpoint doesn't include repositories)
+                let repositories = null;
+                if (installation.repository_selection === 'selected') {
+                    // detect token type
+                    const isPatToken = (0, hasContextWithPatToken_1.hasContextWithPatToken)(null, context);
+                    const isAppToken = (0, hasContextWithAppToken_1.hasContextWithAppToken)(null, context);
+                    // fail fast on unknown token type
+                    if (!isPatToken && !isAppToken) {
+                        throw new helpful_errors_1.HelpfulError('Unknown token type. Expected PAT (ghp_* or github_pat_*) or installation token (ghs_*).', { tokenPrefix: context.github.token.slice(0, 10) + '...' });
+                    }
+                    // PAT: GET /user/installations/{id}/repositories
+                    if (isPatToken) {
+                        const reposResponse = await github.apps.listInstallationReposForAuthenticatedUser({
+                            installation_id: installation.id,
+                            per_page: 100,
+                        });
+                        repositories = reposResponse.data.repositories.map((r) => r.name);
+                    }
+                    // installation token: GET /installation/repositories
+                    if (isAppToken) {
+                        const reposResponse = await github.apps.listReposAccessibleToInstallation({
+                            per_page: 100,
+                        });
+                        repositories = reposResponse.data.repositories.map((r) => r.name);
+                    }
+                    // fail fast if repositories weren't fetched
+                    if (repositories === null) {
+                        throw new helpful_errors_1.UnexpectedCodePathError('repositories not fetched for selected installation', { isPatToken, isAppToken, installation_id: installation.id });
+                    }
+                }
+                return (0, castToDeclaredGithubAppInstallation_1.castToDeclaredGithubAppInstallation)({
+                    installation,
+                    app,
+                    repositories,
+                });
+            }
+            // for User targets, there's no PAT-accessible endpoint
+            if (target.type === 'user') {
+                throw new helpful_errors_1.HelpfulError('User installations are not supported. GitHub API has no PAT-accessible endpoint to read user installations.', { target });
+            }
+            // for unsupported target.type, fail fast
+            throw new helpful_errors_1.UnexpectedCodePathError('unsupported target.type', { input });
+        }
+        catch (error) {
+            if (!(error instanceof Error))
+                throw error;
+            if (error.message.includes('Not Found'))
+                return null;
+            throw new helpful_errors_1.HelpfulError('github.getOneAppInstallation.byUnique error', {
+                cause: error,
+            });
+        }
+    }
+    // no valid key provided
+    helpful_errors_1.UnexpectedCodePathError.throw('getOneAppInstallation requires by.unique', {
+        input,
+    });
+});
+//# sourceMappingURL=getOneAppInstallation.js.map

package/dist/domain.operations/appInstallation/getOneAppInstallation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOneAppInstallation.js","sourceRoot":"","sources":["../../../src/domain.operations/appInstallation/getOneAppInstallation.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAE3C,mDAAuE;AAIvE,uEAAoE;AAGpE,8EAA2E;AAC3E,8EAA2E;AAC3E,+FAA4F;AAE5F;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,IAAA,0BAAW,EAC9C,KAAK,EACH,KAEC,EACD,OAA6C,EACe,EAAE;IAC9D,2BAA2B;IAC3B,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,2BAA2B;IAC3B,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;QAExC,wDAAwD;QACxD,6EAA6E;QAC7E,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;oBACtD,GAAG,EAAE,MAAM,CAAC,IAAI;oBAChB,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;gBAEH,sCAAsC;gBACtC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CACnD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CACrC,CAAC;gBAEF,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBAE/B,gDAAgD;gBAChD,mDAAmD;gBACnD,IAAI,YAAY,GAAoB,IAAI,CAAC;gBACzC,IAAI,YAAY,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;oBACrD,oBAAoB;oBACpB,MAAM,UAAU,GAAG,IAAA,+CAAsB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzD,MAAM,UAAU,GAAG,IAAA,+CAAsB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAEzD,kCAAkC;oBAClC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC/B,MAAM,IAAI,6BAAY,CACpB,yFAAyF,EACzF,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,CAC3D,CAAC;oBACJ,CAAC;oBAED,iDAAiD;oBACjD,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,aAAa,GACjB,MAAM,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC;4BAC1D,eAAe,EAAE,YAAY,CAAC,EAAE;4BAChC,QAAQ,EAAE,GAAG;yBACd,CAAC,CAAC;wBACL,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACpE,CAAC;oBAED,qDAAqD;oBACrD,IAAI,UAAU,EAAE,CAAC;wBACf,MAAM,aAAa,GACjB,MAAM,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC;4BAClD,QAAQ,EAAE,GAAG;yBACd,CAAC,CAAC;wBACL,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACpE,CAAC;oBAED,4CAA4C;oBAC5C,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;wBAC1B,MAAM,IAAI,wCAAuB,CAC/B,oDAAoD,EACpD,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,EAAE,EAAE,CAC7D,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,IAAA,yEAAmC,EAAC;oBACzC,YAAY;oBACZ,GAAG;oBACH,YAAY;iBACb,CAAC,CAAC;YACL,CAAC;YAED,uDAAuD;YACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,6BAAY,CACpB,6GAA6G,EAC7G,EAAE,MAAM,EAAE,CACX,CAAC;YACJ,CAAC;YAED,yCAAyC;YACzC,MAAM,IAAI,wCAAuB,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrD,MAAM,IAAI,6BAAY,CAAC,6CAA6C,EAAE;gBACpE,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,wCAAuB,CAAC,KAAK,CAAC,0CAA0C,EAAE;QACxE,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CACF,CAAC"}

package/dist/domain.operations/appInstallation/setAppInstallation.d.ts

@@ -0,0 +1,13 @@
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubAppInstallation } from '../../domain.objects/DeclaredGithubAppInstallation';
+/**
+ * .what = sets a GitHub App installation: finsert or upsert
+ * .why = provides declarative interface for managing installations with partial automation
+ * .note = installations cannot be created via API; repository selection can be synced for existing installations
+ */
+export declare const setAppInstallation: (input: PickOne<{
+    finsert: DeclaredGithubAppInstallation;
+    upsert: DeclaredGithubAppInstallation;
+}>, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubAppInstallation>>;

package/dist/domain.operations/appInstallation/setAppInstallation.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setAppInstallation = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const getOneAppInstallation_1 = require("./getOneAppInstallation");
+/**
+ * .what = sets a GitHub App installation: finsert or upsert
+ * .why = provides declarative interface for managing installations with partial automation
+ * .note = installations cannot be created via API; repository selection can be synced for existing installations
+ */
+exports.setAppInstallation = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const desired = input.finsert ??
+        input.upsert ??
+        helpful_errors_1.UnexpectedCodePathError.throw('no installation provided to setAppInstallation', { input });
+    // check whether it already exists
+    const foundBefore = await (0, getOneAppInstallation_1.getOneAppInstallation)({
+        by: {
+            unique: {
+                app: desired.app,
+                target: desired.target,
+            },
+        },
+    }, context);
+    // if installation doesn't exist, throw HelpfulError with installation instructions
+    if (!foundBefore) {
+        const installUrl = `https://github.com/apps/${desired.app.slug}/installations/new`;
+        throw new helpful_errors_1.HelpfulError('GitHub App installations cannot be created via API. Please install the app manually.', {
+            installUrl,
+            instructions: [
+                `1. Navigate to: ${installUrl}`,
+                `2. Select the ${desired.target.type.toLowerCase()}: ${desired.target.slug}`,
+                desired.repositorySelection === 'selected'
+                    ? `3. Choose "Only select repositories" and select: ${desired.repositories?.join(', ') ?? '(none specified)'}`
+                    : '3. Choose "All repositories" for full access',
+                '4. Click "Install" to complete the installation',
+            ],
+            desired,
+        });
+    }
+    // if it's a finsert and exists, return the found installation
+    if (input.finsert)
+        return foundBefore;
+    // if it's an upsert and exists, sync repository selection if needed
+    if (input.upsert) {
+        // check if we need to sync repository selection
+        if (desired.repositorySelection === 'selected') {
+            const result = await syncInstallationRepositories({
+                installationId: foundBefore.id,
+                desiredRepositories: desired.repositories ?? [],
+                currentRepositories: foundBefore.repositories ?? [],
+                app: desired.app,
+            }, context);
+            // get updated installation after sync
+            const foundAfter = await (0, getOneAppInstallation_1.getOneAppInstallation)({ by: { unique: { app: desired.app, target: desired.target } } }, context);
+            if (!foundAfter)
+                helpful_errors_1.UnexpectedCodePathError.throw('installation not found after sync. should not be possible', { desired, result });
+            return foundAfter;
+        }
+        // no sync needed, return as-is
+        return foundBefore;
+    }
+    // unreachable
+    helpful_errors_1.UnexpectedCodePathError.throw('unexpected code path in setAppInstallation', {
+        input,
+        foundBefore,
+    });
+});
+/**
+ * .what = syncs repositories for an installation by adding/removing as needed
+ * .why = enables declarative management of which repos an installation has access to
+ */
+const syncInstallationRepositories = async (input, context) => {
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    // determine repos to add and remove
+    const reposToAdd = input.desiredRepositories.filter((repo) => !input.currentRepositories.includes(repo));
+    const reposToRemove = input.currentRepositories.filter((repo) => !input.desiredRepositories.includes(repo));
+    // add repos that are missing
+    for (const repoName of reposToAdd) {
+        try {
+            // first get the repo id
+            const repoResponse = await github.repos.get({
+                owner: input.app.owner.slug,
+                repo: repoName,
+            });
+            const repoId = repoResponse.data.id;
+            // then add it to the installation
+            await github.apps.addRepoToInstallationForAuthenticatedUser({
+                installation_id: input.installationId,
+                repository_id: repoId,
+            });
+        }
+        catch (error) {
+            if (!(error instanceof Error))
+                throw error;
+            throw new helpful_errors_1.HelpfulError(`failed to add repository "${repoName}" to installation`, {
+                cause: error,
+                repoName,
+                installationId: input.installationId,
+            });
+        }
+    }
+    // remove repos that shouldn't be there
+    for (const repoName of reposToRemove) {
+        try {
+            // first get the repo id
+            const repoResponse = await github.repos.get({
+                owner: input.app.owner.slug,
+                repo: repoName,
+            });
+            const repoId = repoResponse.data.id;
+            // then remove it from the installation
+            await github.apps.removeRepoFromInstallationForAuthenticatedUser({
+                installation_id: input.installationId,
+                repository_id: repoId,
+            });
+        }
+        catch (error) {
+            if (!(error instanceof Error))
+                throw error;
+            throw new helpful_errors_1.HelpfulError(`failed to remove repository "${repoName}" from installation`, {
+                cause: error,
+                repoName,
+                installationId: input.installationId,
+            });
+        }
+    }
+    return { repositories: input.desiredRepositories };
+};
+//# sourceMappingURL=setAppInstallation.js.map

package/dist/domain.operations/appInstallation/setAppInstallation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setAppInstallation.js","sourceRoot":"","sources":["../../../src/domain.operations/appInstallation/setAppInstallation.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAC3C,mDAAuE;AAIvE,uEAAoE;AAGpE,mEAAgE;AAEhE;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,IAAA,0BAAW,EAC3C,KAAK,EACH,KAGE,EACF,OAA6C,EACQ,EAAE;IACvD,MAAM,OAAO,GACX,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,MAAM;QACZ,wCAAuB,CAAC,KAAK,CAC3B,gDAAgD,EAChD,EAAE,KAAK,EAAE,CACV,CAAC;IAEJ,kCAAkC;IAClC,MAAM,WAAW,GAAG,MAAM,IAAA,6CAAqB,EAC7C;QACE,EAAE,EAAE;YACF,MAAM,EAAE;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB;SACF;KACF,EACD,OAAO,CACR,CAAC;IAEF,mFAAmF;IACnF,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,2BAA2B,OAAO,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC;QAEnF,MAAM,IAAI,6BAAY,CACpB,sFAAsF,EACtF;YACE,UAAU;YACV,YAAY,EAAE;gBACZ,mBAAmB,UAAU,EAAE;gBAC/B,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5E,OAAO,CAAC,mBAAmB,KAAK,UAAU;oBACxC,CAAC,CAAC,oDAAoD,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE;oBAC9G,CAAC,CAAC,8CAA8C;gBAClD,iDAAiD;aAClD;YACD,OAAO;SACR,CACF,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC;IAEtC,oEAAoE;IACpE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,gDAAgD;QAChD,IAAI,OAAO,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAC/C;gBACE,cAAc,EAAE,WAAW,CAAC,EAAE;gBAC9B,mBAAmB,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;gBAC/C,mBAAmB,EAAE,WAAW,CAAC,YAAY,IAAI,EAAE;gBACnD,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB,EACD,OAAO,CACR,CAAC;YAEF,sCAAsC;YACtC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAC5C,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAChE,OAAO,CACR,CAAC;YACF,IAAI,CAAC,UAAU;gBACb,wCAAuB,CAAC,KAAK,CAC3B,2DAA2D,EAC3D,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;YACJ,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,+BAA+B;QAC/B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,cAAc;IACd,wCAAuB,CAAC,KAAK,CAC3B,4CAA4C,EAC5C;QACE,KAAK;QACL,WAAW;KACZ,CACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,4BAA4B,GAAG,KAAK,EACxC,KAKC,EACD,OAA6C,EACR,EAAE;IACvC,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,oCAAoC;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CACjD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpD,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,CAAC,mBAAmB,CAAC,MAAM,CACpD,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpD,CAAC;IAEF,6BAA6B;IAC7B,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBAC1C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAEpC,kCAAkC;YAClC,MAAM,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC;gBAC1D,eAAe,EAAE,KAAK,CAAC,cAAc;gBACrC,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,6BAAY,CACpB,6BAA6B,QAAQ,mBAAmB,EACxD;gBACE,KAAK,EAAE,KAAK;gBACZ,QAAQ;gBACR,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;gBAC1C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;gBAC3B,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAEpC,uCAAuC;YACvC,MAAM,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC;gBAC/D,eAAe,EAAE,KAAK,CAAC,cAAc;gBACrC,aAAa,EAAE,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,6BAAY,CACpB,gCAAgC,QAAQ,qBAAqB,EAC7D;gBACE,KAAK,EAAE,KAAK;gBACZ,QAAQ;gBACR,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;AACrD,CAAC,CAAC"}

package/dist/domain.operations/branch/setBranch.js

@@ -50,7 +50,7 @@ exports.setBranch = (0, as_procedure_1.asProcedure)(async (input, context) => {
                         name: desired.name,
                     },
                 },
-            }, context)) ?? undefined, { timeout: { seconds: 3 } });
+            }, context)) ?? undefined, { timeout: { seconds: 10 } });
         }
         catch (error) {
             if (!(error instanceof Error))
@@ -61,20 +61,29 @@ exports.setBranch = (0, as_procedure_1.asProcedure)(async (input, context) => {
         }
     }
     // otherwise, create it
+    // determine commit SHA to create branch from
+    const commitSha = desired.commit?.sha ??
+        (await (0, getBranchCommitShaByRepoDefault_1.getBranchCommitShaByRepoDefault)({
+            repo: desired.repo,
+        }, context));
+    // create the branch using git refs API
     try {
-        // determine commit SHA to create branch from
-        const commitSha = desired.commit?.sha ??
-            (await (0, getBranchCommitShaByRepoDefault_1.getBranchCommitShaByRepoDefault)({
-                repo: desired.repo,
-            }, context));
-        // create the branch using git refs API
         await github.git.createRef({
             owner: desired.repo.owner,
             repo: desired.repo.name,
             ref: `refs/heads/${desired.name}`,
             sha: commitSha,
         });
-        // fetch the created branch to return full metadata (with retry for eventual consistency)
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        throw new helpful_errors_1.HelpfulError('github.setBranch.createRef error', {
+            cause: error,
+        });
+    }
+    // fetch the created branch to return full metadata (with retry for eventual consistency)
+    try {
         return await (0, uni_time_1.waitFor)(async () => (await (0, getBranch_1.getBranch)({
             by: {
                 unique: {
@@ -82,12 +91,12 @@ exports.setBranch = (0, as_procedure_1.asProcedure)(async (input, context) => {
                     name: desired.name,
                 },
             },
-        }, context)) ?? undefined, { timeout: { seconds: 3 } });
+        }, context)) ?? undefined, { timeout: { seconds: 10 } });
     }
     catch (error) {
         if (!(error instanceof Error))
             throw error;
-        throw new helpful_errors_1.HelpfulError('github.setBranch.create error', {
+        throw new helpful_errors_1.HelpfulError('github.setBranch.waitForBranch error', {
             cause: error,
         });
     }

package/dist/domain.operations/branch/setBranch.js.map

@@ -1 +1 @@
-{"version":3,"file":"setBranch.js","sourceRoot":"","sources":["../../../src/domain.operations/branch/setBranch.ts"],"names":[],"mappings":";;;AAAA,iDAA6C;AAC7C,+CAA2C;AAC3C,mDAA8C;AAI9C,uEAAoE;AAGpE,2CAAwC;AACxC,uFAAoF;AAEpF;;;GAGG;AACU,QAAA,SAAS,GAAG,IAAA,0BAAW,EAClC,KAAK,EACH,KAGE,EACF,OAA6C,EACD,EAAE;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;IAE9C,2BAA2B;IAC3B,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,sCAAsC;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAC5B;QACE,EAAE,EAAE;YACF,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;SACF;KACF,EACD,OAAO,CACR,CAAC;IAEF,uDAAuD;IACvD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE3C,8EAA8E;IAC9E,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG;QACtE,OAAO,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,GAAG,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE;gBAC5B,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG;gBACvB,KAAK,EAAE,KAAK,EAAE,gDAAgD;aAC/D,CAAC,CAAC;YAEH,yFAAyF;YACzF,OAAO,MAAM,IAAA,kBAAO,EAClB,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,IAAA,qBAAS,EACd;gBACE,EAAE,EAAE;oBACF,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;iBACF;aACF,EACD,OAAO,CACR,CAAC,IAAI,SAAS,EACjB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,6BAAY,CAAC,+BAA+B,EAAE;gBACtD,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC;QACH,6CAA6C;QAC7C,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,EAAE,GAAG;YACnB,CAAC,MAAM,IAAA,iEAA+B,EACpC;gBACE,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,EACD,OAAO,CACR,CAAC,CAAC;QAEL,uCAAuC;QACvC,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACvB,GAAG,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;YACjC,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;QAEH,yFAAyF;QACzF,OAAO,MAAM,IAAA,kBAAO,EAClB,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,IAAA,qBAAS,EACd;YACE,EAAE,EAAE;gBACF,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;aACF;SACF,EACD,OAAO,CACR,CAAC,IAAI,SAAS,EACjB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,+BAA+B,EAAE;YACtD,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC"}
+{"version":3,"file":"setBranch.js","sourceRoot":"","sources":["../../../src/domain.operations/branch/setBranch.ts"],"names":[],"mappings":";;;AAAA,iDAA6C;AAC7C,+CAA2C;AAC3C,mDAA8C;AAI9C,uEAAoE;AAGpE,2CAAwC;AACxC,uFAAoF;AAEpF;;;GAGG;AACU,QAAA,SAAS,GAAG,IAAA,0BAAW,EAClC,KAAK,EACH,KAGE,EACF,OAA6C,EACD,EAAE;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;IAE9C,2BAA2B;IAC3B,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,sCAAsC;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAC5B;QACE,EAAE,EAAE;YACF,MAAM,EAAE;gBACN,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB;SACF;KACF,EACD,OAAO,CACR,CAAC;IAEF,uDAAuD;IACvD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE3C,8EAA8E;IAC9E,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG;QACtE,OAAO,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;gBACvB,GAAG,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE;gBAC5B,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG;gBACvB,KAAK,EAAE,KAAK,EAAE,gDAAgD;aAC/D,CAAC,CAAC;YAEH,yFAAyF;YACzF,OAAO,MAAM,IAAA,kBAAO,EAClB,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,IAAA,qBAAS,EACd;gBACE,EAAE,EAAE;oBACF,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;iBACF;aACF,EACD,OAAO,CACR,CAAC,IAAI,SAAS,EACjB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC7B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,MAAM,IAAI,6BAAY,CAAC,+BAA+B,EAAE;gBACtD,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,6CAA6C;IAC7C,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,EAAE,GAAG;QACnB,CAAC,MAAM,IAAA,iEAA+B,EACpC;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,EACD,OAAO,CACR,CAAC,CAAC;IAEL,uCAAuC;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;YACzB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACvB,GAAG,EAAE,cAAc,OAAO,CAAC,IAAI,EAAE;YACjC,GAAG,EAAE,SAAS;SACf,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,kCAAkC,EAAE;YACzD,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,yFAAyF;IACzF,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,kBAAO,EAClB,KAAK,IAAI,EAAE,CACT,CAAC,MAAM,IAAA,qBAAS,EACd;YACE,EAAE,EAAE;gBACF,MAAM,EAAE;oBACN,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;aACF;SACF,EACD,OAAO,CACR,CAAC,IAAI,SAAS,EACjB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,sCAAsC,EAAE;YAC7D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/context/hasContextWithAppToken.d.ts

@@ -0,0 +1,6 @@
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+/**
+ * .what = checks if context contains a GitHub App installation token
+ * .why = different GitHub API endpoints require different token types; app tokens have different scopes than PATs
+ */
+export declare const hasContextWithAppToken: (_input: null, context: ContextGithubApi) => boolean;

package/dist/domain.operations/context/hasContextWithAppToken.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasContextWithAppToken = void 0;
+/**
+ * .what = checks if context contains a GitHub App installation token
+ * .why = different GitHub API endpoints require different token types; app tokens have different scopes than PATs
+ */
+const hasContextWithAppToken = (_input, context) => {
+    const token = context.github.token;
+    // GitHub App installation token format (server-to-server token)
+    const isAppToken = token.startsWith('ghs_');
+    return isAppToken;
+};
+exports.hasContextWithAppToken = hasContextWithAppToken;
+//# sourceMappingURL=hasContextWithAppToken.js.map

package/dist/domain.operations/context/hasContextWithAppToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasContextWithAppToken.js","sourceRoot":"","sources":["../../../src/domain.operations/context/hasContextWithAppToken.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,sBAAsB,GAAG,CACpC,MAAY,EACZ,OAAyB,EAChB,EAAE;IACX,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAEnC,gEAAgE;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAE5C,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAVW,QAAA,sBAAsB,0BAUjC"}

package/dist/domain.operations/context/hasContextWithPatToken.d.ts

@@ -0,0 +1,6 @@
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+/**
+ * .what = checks if context contains a GitHub Personal Access Token (PAT)
+ * .why = different GitHub API endpoints require different token types; PATs have different permissions than app tokens
+ */
+export declare const hasContextWithPatToken: (_input: null, context: ContextGithubApi) => boolean;

package/dist/domain.operations/context/hasContextWithPatToken.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasContextWithPatToken = void 0;
+/**
+ * .what = checks if context contains a GitHub Personal Access Token (PAT)
+ * .why = different GitHub API endpoints require different token types; PATs have different permissions than app tokens
+ */
+const hasContextWithPatToken = (_input, context) => {
+    const token = context.github.token;
+    // classic PAT format
+    const isClassicPat = token.startsWith('ghp_');
+    // fine-grained PAT format
+    const isFineGrainedPat = token.startsWith('github_pat_');
+    return isClassicPat || isFineGrainedPat;
+};
+exports.hasContextWithPatToken = hasContextWithPatToken;
+//# sourceMappingURL=hasContextWithPatToken.js.map

package/dist/domain.operations/context/hasContextWithPatToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hasContextWithPatToken.js","sourceRoot":"","sources":["../../../src/domain.operations/context/hasContextWithPatToken.ts"],"names":[],"mappings":";;;AAEA;;;GAGG;AACI,MAAM,sBAAsB,GAAG,CACpC,MAAY,EACZ,OAAyB,EAChB,EAAE;IACX,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAEnC,qBAAqB;IACrB,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAE9C,0BAA0B;IAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEzD,OAAO,YAAY,IAAI,gBAAgB,CAAC;AAC1C,CAAC,CAAC;AAbW,QAAA,sBAAsB,0BAajC"}

package/dist/domain.operations/org/castToDeclaredGithubOrg.d.ts

@@ -0,0 +1,12 @@
+import type { Endpoints } from '@octokit/types';
+import { type HasMetadata } from 'type-fns';
+import { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+type GithubOrgResponse = Endpoints['GET /orgs/{org}']['response']['data'];
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrg
+ * .why = transforms external API shape to our domain model with type safety and validation
+ */
+export declare const castToDeclaredGithubOrg: (input: {
+    data: GithubOrgResponse;
+}) => HasMetadata<DeclaredGithubOrg>;
+export {};

package/dist/domain.operations/org/castToDeclaredGithubOrg.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.castToDeclaredGithubOrg = void 0;
+const uni_time_1 = require("@ehmpathy/uni-time");
+const type_fns_1 = require("type-fns");
+const DeclaredGithubOrg_1 = require("../../domain.objects/DeclaredGithubOrg");
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrg
+ * .why = transforms external API shape to our domain model with type safety and validation
+ */
+const castToDeclaredGithubOrg = (input) => {
+    return DeclaredGithubOrg_1.DeclaredGithubOrg.as({
+        id: (0, type_fns_1.assure)(input.data.id, type_fns_1.isPresent),
+        login: (0, type_fns_1.assure)(input.data.login, type_fns_1.isPresent),
+        name: input.data.name ?? null,
+        description: input.data.description ?? null,
+        billingEmail: undefined, // write-only: not read back from API
+        twoFactorRequirementEnabled: input.data.two_factor_requirement_enabled ?? undefined,
+        publicRepos: input.data.public_repos ?? undefined,
+        createdAt: input.data.created_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.created_at)
+            : undefined,
+        updatedAt: input.data.updated_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.updated_at)
+            : undefined,
+    });
+};
+exports.castToDeclaredGithubOrg = castToDeclaredGithubOrg;
+//# sourceMappingURL=castToDeclaredGithubOrg.js.map

package/dist/domain.operations/org/castToDeclaredGithubOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"castToDeclaredGithubOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/castToDeclaredGithubOrg.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAEnD,uCAA+D;AAE/D,8EAA2E;AAI3E;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CAAC,KAEvC,EAAkC,EAAE;IACnC,OAAO,qCAAiB,CAAC,EAAE,CAAC;QAC1B,EAAE,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAS,CAAC;QACpC,KAAK,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAS,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;QAC7B,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;QAC3C,YAAY,EAAE,SAAS,EAAE,qCAAqC;QAC9D,2BAA2B,EACzB,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,SAAS;QACxD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,SAAS;QACjD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;KACd,CAAmC,CAAC;AACvC,CAAC,CAAC;AAnBW,QAAA,uBAAuB,2BAmBlC"}

package/dist/domain.operations/org/getOneOrg.d.ts

@@ -0,0 +1,14 @@
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+/**
+ * .what = gets a GitHub Organization's settings
+ * .why = retrieves current state of org for declarative management
+ */
+export declare const getOneOrg: (input: {
+    by: PickOne<{
+        unique: RefByUnique<typeof DeclaredGithubOrg>;
+    }>;
+}, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrg> | null>;

package/dist/domain.operations/org/getOneOrg.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOneOrg = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrg_1 = require("./castToDeclaredGithubOrg");
+/**
+ * .what = gets a GitHub Organization's settings
+ * .why = retrieves current state of org for declarative management
+ */
+exports.getOneOrg = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    const login = (() => {
+        if (input.by.unique)
+            return input.by.unique.login;
+        helpful_errors_1.UnexpectedCodePathError.throw('not referenced by unique', { input });
+    })();
+    try {
+        const response = await github.orgs.get({ org: login });
+        return (0, castToDeclaredGithubOrg_1.castToDeclaredGithubOrg)({ data: response.data });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        if (error.message.includes('Not Found'))
+            return null;
+        throw new helpful_errors_1.HelpfulError('github.getOrg error', { cause: error });
+    }
+});
+//# sourceMappingURL=getOneOrg.js.map

package/dist/domain.operations/org/getOneOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOneOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/getOneOrg.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAE3C,mDAAuE;AAIvE,uEAAoE;AAGpE,uEAAoE;AAEpE;;;GAGG;AACU,QAAA,SAAS,GAAG,IAAA,0BAAW,EAClC,KAAK,EACH,KAIC,EACD,OAA6C,EACG,EAAE;IAClD,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAClD,wCAAuB,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,IAAA,iDAAuB,EAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,IAAI,6BAAY,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/org/setOrg.d.ts

@@ -0,0 +1,17 @@
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+/**
+ * .what = sets GitHub Organization profile settings
+ * .why = enables declarative management of org profile
+ *
+ * AUTOMATION BOUNDARIES:
+ * - AUTOMATED: Profile settings via PATCH /orgs/{org}
+ * - NOTE: Cannot create organizations via API (only update existing)
+ * - NOTE: Member privileges are managed via DeclaredGithubOrgMemberPrivileges
+ */
+export declare const setOrg: (input: PickOne<{
+    finsert: DeclaredGithubOrg;
+    upsert: DeclaredGithubOrg;
+}>, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrg>>;

package/dist/domain.operations/org/setOrg.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setOrg = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrg_1 = require("./castToDeclaredGithubOrg");
+const getOneOrg_1 = require("./getOneOrg");
+/**
+ * .what = sets GitHub Organization profile settings
+ * .why = enables declarative management of org profile
+ *
+ * AUTOMATION BOUNDARIES:
+ * - AUTOMATED: Profile settings via PATCH /orgs/{org}
+ * - NOTE: Cannot create organizations via API (only update existing)
+ * - NOTE: Member privileges are managed via DeclaredGithubOrgMemberPrivileges
+ */
+exports.setOrg = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const desired = input.finsert ?? input.upsert;
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    // Check if org exists
+    const before = await (0, getOneOrg_1.getOneOrg)({ by: { unique: { login: desired.login } } }, context);
+    // Cannot create orgs via API - must exist
+    if (!before) {
+        throw new helpful_errors_1.HelpfulError('GitHub Organization does not exist and cannot be created via API.\n' +
+            'Organizations must be created manually via the GitHub UI.', {
+            createUrl: 'https://github.com/organizations/plan',
+            desiredOrg: desired,
+        });
+    }
+    // If finsert and found, return as-is (no changes)
+    if (before && input.finsert)
+        return before;
+    // Apply profile updates via PATCH
+    try {
+        const response = await github.orgs.update({
+            org: desired.login,
+            name: desired.name ?? undefined,
+            description: desired.description ?? undefined,
+            billing_email: desired.billingEmail ?? undefined,
+        });
+        return (0, castToDeclaredGithubOrg_1.castToDeclaredGithubOrg)({ data: response.data });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        throw new helpful_errors_1.HelpfulError('github.setOrg.update error', { cause: error });
+    }
+});
+//# sourceMappingURL=setOrg.js.map

package/dist/domain.operations/org/setOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/setOrg.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAC3C,mDAA8C;AAI9C,uEAAoE;AAGpE,uEAAoE;AACpE,2CAAwC;AAExC;;;;;;;;GAQG;AACU,QAAA,MAAM,GAAG,IAAA,0BAAW,EAC/B,KAAK,EACH,KAGE,EACF,OAA6C,EACJ,EAAE;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAC5B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAC5C,OAAO,CACR,CAAC;IAEF,0CAA0C;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAAY,CACpB,qEAAqE;YACnE,2DAA2D,EAC7D;YACE,SAAS,EAAE,uCAAuC;YAClD,UAAU,EAAE,OAAO;SACpB,CACF,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE3C,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACxC,GAAG,EAAE,OAAO,CAAC,KAAK;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;YAC/B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,aAAa,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;SACjD,CAAC,CAAC;QAEH,OAAO,IAAA,iDAAuB,EAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.d.ts

@@ -0,0 +1,15 @@
+import type { Endpoints } from '@octokit/types';
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata } from 'type-fns';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+import { DeclaredGithubOrgMemberPrivileges } from '../../domain.objects/DeclaredGithubOrgMemberPrivileges';
+type GithubOrgResponse = Endpoints['GET /orgs/{org}']['response']['data'];
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrgMemberPrivileges
+ * .why = extracts member privilege fields from org API response
+ */
+export declare const castToDeclaredGithubOrgMemberPrivileges: (input: {
+    data: GithubOrgResponse;
+    org: RefByUnique<typeof DeclaredGithubOrg>;
+}) => HasMetadata<DeclaredGithubOrgMemberPrivileges>;
+export {};

package/dist/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.castToDeclaredGithubOrgMemberPrivileges = void 0;
+const uni_time_1 = require("@ehmpathy/uni-time");
+const DeclaredGithubOrgMemberPrivileges_1 = require("../../domain.objects/DeclaredGithubOrgMemberPrivileges");
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrgMemberPrivileges
+ * .why = extracts member privilege fields from org API response
+ */
+const castToDeclaredGithubOrgMemberPrivileges = (input) => {
+    return DeclaredGithubOrgMemberPrivileges_1.DeclaredGithubOrgMemberPrivileges.as({
+        org: input.org,
+        updatedAt: input.data.updated_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.updated_at)
+            : undefined,
+        // Repository creation
+        membersCanCreateRepositories: input.data.members_can_create_repositories ?? true,
+        membersCanCreatePublicRepositories: input.data.members_can_create_public_repositories ?? true,
+        membersCanCreatePrivateRepositories: input.data.members_can_create_private_repositories ?? true,
+        membersCanCreateInternalRepositories: (() => {
+            // internal repos only available for enterprise orgs
+            const isEnterprise = input.data.plan?.name
+                ?.toLowerCase()
+                .includes('enterprise');
+            if (!isEnterprise)
+                return null;
+            return input.data.members_can_create_internal_repositories ?? null;
+        })(),
+        // Repository management (KEY SECURITY)
+        membersCanDeleteRepositories: 
+        // Note: GitHub API uses 'members_can_delete_repositories' field
+        input.data
+            .members_can_delete_repositories ?? true,
+        membersCanChangeRepoVisibility: input.data
+            .members_can_change_repo_visibility ?? true,
+        membersCanForkPrivateRepositories: input.data.members_can_fork_private_repositories ?? false,
+        // Collaboration
+        membersCanInviteOutsideCollaborators: true, // Not directly exposed in API
+        // GitHub Pages
+        membersCanCreatePages: input.data.members_can_create_pages ?? true,
+        membersCanCreatePublicPages: input.data.members_can_create_public_pages ?? true,
+        membersCanCreatePrivatePages: input.data.members_can_create_private_pages ?? true,
+        defaultRepositoryPermission: input.data.default_repository_permission ?? 'read',
+    });
+};
+exports.castToDeclaredGithubOrgMemberPrivileges = castToDeclaredGithubOrgMemberPrivileges;
+//# sourceMappingURL=castToDeclaredGithubOrgMemberPrivileges.js.map