dorfl 0.0.0 → 0.1.0

package/dist/install-ci-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ci-core.js","sourceRoot":"","sources":["../src/install-ci-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAC,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAC,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAC,MAAM,WAAW,CAAC;AAClD,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AAoHvC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAmB,IAAI,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAkB,UAAU,CAAC;AA0GhE;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAC5D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB;IACrC,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAiB;IACvD,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,GAAY;IAEZ,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,sBAAsB,EAAE,CAAC,CAAC,qCAAqC;IACvE,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC1D,IAAI,EAAE,CAAC;IACT,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,sBAAsB,EAAE,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,SAAS,aAAa,CAAC,OAAe;IACrC,OAAO,IAAI,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAA0B;IAGzD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,GAA4B,EAAC,MAAM,EAAE,CAAC,CAAC,YAAY,EAAC,CAAC;YAChE,IAAI,CAAC,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;YACzC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACP,MAAM,KAAK,GAA4B;gBACtC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,MAAM,EAAE,CAAC,CAAC,YAAY;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;aAChB,CAAC;YACF,IAAI,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC9B,CAAC;IACF,CAAC;IACD,OAAO,EAAC,SAAS,EAAE,YAAY,EAAC,CAAC;AAClC,CAAC;AAED,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,SAAS;QACvC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAChE,MAAM,KAAK,GACV,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACX,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,kBAAkB,IAAI,KAAK,CAAC;SAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,oBAAoB,OAAO,EAAE,CAAC;AACtC,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAexC;IACA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAC,GAAG,OAAO,CAAC;IACpE,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,KAAK,EACvB,IAAY,EACZ,KAAsD,EACtC,EAAE;QAClB,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;YAClC,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;YACxC,OAAO;QACR,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,4EAA4E;IAC5E,uEAAuE;IACvE,+CAA+C;IAC/C,KAAK,MAAM,IAAI,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,gDAAgD;AAChD,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAChD,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CACtB,oCAAoC,QAAQ,IAAI;YAC/C,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;IAChD,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC5D,MAAM,IAAI,aAAa,CACtB,6DAA6D,CAC7D,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,IACC,IAAI,CAAC,aAAa,KAAK,SAAS;QAChC,IAAI,CAAC,aAAa,KAAK,UAAU;QACjC,IAAI,CAAC,aAAa,KAAK,WAAW,EACjC,CAAC;QACF,MAAM,IAAI,aAAa,CACtB,+DAA+D,CAC/D,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IACC,IAAI,CAAC,YAAY,KAAK,IAAI;YAC1B,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAC/B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,kEAAkE;gBACjE,2CAA2C;gBAC3C,gDAAgD,CACjD,CAAC;QACH,CAAC;IACF,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAChC,IACC,CAAC,IAAI,CAAC,SAAS;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;YACF,MAAM,IAAI,aAAa,CACtB,sEAAsE,CACtE,CAAC;QACH,CAAC;IACF,CAAC;IACD,OAAO;QACN,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAC/B,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,eAAe,CAAC,IAAkB;IACjD,OAAO;QACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;QACxC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,sBAAsB;QAC3D,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,oBAAoB;KACrD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC7B,MAAwB,EACxB,OAAgC;IAEhC,MAAM,IAAI,GAAiB;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,aAAa,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,MAAM,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,CAAC;IACD,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAEhF,gEAAgE;AAChE,SAAS,MAAM,CAAC,IAAY,EAAE,MAAc;IAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,IAAI;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAC1B,OAAuB,EACvB,aAA4B;IAE5B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GACR,aAAa,KAAK,WAAW;YAC5B,CAAC,CAAC,2CAA2C;YAC7C,CAAC,CAAC,8CAA8C,CAAC;QACnD,OAAO;;;aAGI,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB;AACxB;;;;;;;GAOG;AACH,iBAA0B;IAE1B,IAAI,QAAgB,CAAC;IACrB,8EAA8E;IAC9E,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,gBAAgB,GACrB,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,QAAQ,GAAG;;;;;;;;;;;;;;;wDAe2C,CAAC;IACxD,CAAC;SAAM,CAAC;QACP,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CACnC,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,EACjC,IAAI,EACJ,CAAC,CACD,CAAC;QACF,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,iFAAiF;QACjF,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,IAAI,iBAAiB,IAAI,KAAK,CAAC;aACxD,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,cAAc,GAAG,gBAAgB;aACrC,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,uBAAuB,IAAI,oBAAoB,IAAI,OAAO,IAAI,yBAAyB,CACxF;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,UAAU,GACf,gBAAgB,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC;;;;;;;;EAQJ,cAAc;;EAEd,cAAc,EAAE;YACd,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,GAAG;;;;;;EAMX,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;oBACN,UAAU,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,cAAc,GAAG,kBAAkB,CACxC,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,aAAa,CACpB,CAAC;IAEF,2EAA2E;IAC3E,kEAAkE;IAClE,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,YAAoB,CAAC;IACzB,IAAI,MAAM,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QAC1C,YAAY,GAAG;;;;;;;;;;;;;;;iDAegC,cAAc,EAAE,CAAC;IACjE,CAAC;SAAM,CAAC;QACP,YAAY,GAAG;;;iCAGgB,cAAc,EAAE,CAAC;IACjD,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,kEAAkE;IAClE,yEAAyE;IACzE,uEAAuE;IACvE,uEAAuE;IACvE,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,qCAAqC;IACrC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAiCqB,CAAC;IAC3C,YAAY,GAAG,YAAY,GAAG,YAAY,CAAC;IAE3C,uEAAuE;IACvE,8EAA8E;IAC9E,iFAAiF;IACjF,gEAAgE;IAChE,MAAM,WAAW,GAChB,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC;EACH,gBAAgB;aAChB,GAAG,CACH,CAAC,IAAI,EAAE,EAAE,CACR,KAAK,IAAI;4EACgE,IAAI;;gBAEhE,CACd;aACA,IAAI,CAAC,IAAI,CAAC;;CAEX;QACE,CAAC,CAAC,EAAE,CAAC;IAEP,iFAAiF;IACjF,gFAAgF;IAChF,gEAAgE;IAChE,MAAM,iBAAiB,GACtB,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;QAChD,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;EAIN,WAAW;;;;;;;;;;;;;EAaX,iBAAiB;;;;;;;;;;;EAWjB,YAAY;;EAEZ,QAAQ;CACT,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2FnC,CAAC;AAEF,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAwB,EACxB,eAAoC,EAAE;AACtC;;;;;GAKG;AACH,OAAsC;IAEtC,MAAM,KAAK,GAAkB;QAC5B;YACC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC;YAClD,OAAO,EAAE,mBAAmB,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC;SAChE;KACD,CAAC;IACF,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC;YAChD,OAAO,EAAE,oBAAoB;SAC7B,CAAC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAI9B;IACA,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QAC3C,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC"}

package/dist/install-ci-github.d.ts

@@ -0,0 +1,167 @@
+/**
+ * The thin GitHub adapter for `install-ci` (prd `runner-in-ci`, task
+ * `install-ci-core-and-github-adapter`). It plugs into the provider-agnostic
+ * {@link CIProviderContext} seam from `install-ci-core.ts`: the core owns the
+ * wizard / config / `models.json` / `--export-config` / `--fake` / secret
+ * orchestration; THIS adapter only supplies the GitHub-specific I/O (repo
+ * detection, `gh secret set`, the optional `delete_branch_on_merge` repo
+ * setting). Because the seam is the boundary, a second CI provider could be added
+ * WITHOUT touching the core (US #7/#10).
+ *
+ * `install-ci` uses the SEAMS, never `gh` directly in the core: this adapter is
+ * the ONLY place that shells out to `gh`, and it does so behind the seam so tests
+ * stub it entirely (no network, no real `gh`, no real GitHub repo detection). The
+ * adapter NEVER `--force`s and degrades gracefully when `gh` is missing.
+ */
+import type { CIProviderContext } from './install-ci-core.js';
+/**
+ * The provider id this adapter exposes through {@link CIProviderContext.providerId}.
+ * Matches the key the orchestrator looks up in
+ * `CIConfigFile.projectSetup` (the provider-namespaced opaque pass-through).
+ */
+export declare const GITHUB_PROVIDER_ID = "github";
+/**
+ * Raised when the GitHub project-setup payload fails its LIGHT structural sanity
+ * check (the only check we do — see {@link renderGithubProjectSetupSteps}).
+ * Distinct error class so callers can branch on it; message names the field.
+ */
+export declare class GithubProjectSetupError extends Error {
+}
+/**
+ * Validate the user's GitHub project-setup payload with a DELIBERATELY LIGHT
+ * structural check — enough to catch obvious typos (string vs. nothing; not a
+ * YAML list) without re-introducing the mini-format this escape hatch exists to
+ * avoid (ADR `install-ci-project-provisioning-native-passthrough`).
+ *
+ * Rules: the payload must be a non-empty STRING whose trimmed body parses as a
+ * top-level YAML list-of-mappings — at indent level 0, every non-blank line
+ * either (a) starts a step item with `- ` / `-` (a YAML sequence entry) or (b)
+ * is an indented continuation of the previous step. We do NOT inspect step
+ * fields (`uses`, `run`, `name`, …) and we do NOT semantically parse YAML.
+ *
+ * Returns the canonicalised (trimmed) snippet. Throws {@link GithubProjectSetupError}
+ * with a message that NAMES the field (`projectSetup.github`).
+ */
+export declare function validateGithubProjectSetupPayload(payload: unknown): string;
+/**
+ * Render the user's GitHub project-setup payload to the YAML fragment the
+ * composite setup action splices in FIRST (before setup-node, dorfl-install,
+ * and AI-auth). The check is delegated to
+ * {@link validateGithubProjectSetupPayload}; this function only INDENTS the
+ * verbatim payload so it sits at the 4-space level the composite action's
+ * `steps:` body uses. The opacity contract: bytes-in == bytes-out, modulo the
+ * 4-space indent applied here — we do NOT transform, normalize, or reflow the
+ * snippet (that would re-introduce the mini-format this hook exists to avoid).
+ */
+export declare function renderGithubProjectSetupSteps(payload: unknown): string;
+/** Options for the live GitHub provider context. */
+export interface GitHubCIContextOptions {
+    /** The target repo's working directory. */
+    workDir: string;
+    /** The `owner/repo` slug; auto-detected via `gh` when omitted. */
+    repo?: string;
+    /** The `gh` CLI binary (default `gh` on PATH). Tests inject a stub. */
+    ghBin?: string;
+    /** Environment for the `gh` child. */
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * The live GitHub provider context: detects the repo + availability via `gh` and
+ * sets secrets via `gh secret set`. This is the PRODUCTION seam implementation;
+ * tests use a STUB context instead (see {@link MemoryCIProviderContext}). It
+ * NEVER `--force`s and treats a missing `gh` as `ghAvailable: false`.
+ */
+export declare class GitHubCIContext implements CIProviderContext {
+    readonly providerId = "github";
+    readonly workDir: string;
+    repo: string | undefined;
+    readonly ghAvailable: boolean;
+    private readonly ghBin;
+    private readonly env;
+    constructor(options: GitHubCIContextOptions);
+    /** Is `gh` available + authenticated? (`gh auth status` exits 0 when so.) */
+    private probeAvailable;
+    /** Detect `owner/repo` via `gh repo view`, or `undefined` when unavailable. */
+    private detectRepo;
+    /** Set a secret via `gh secret set <name> --body <value>`. Throws on failure. */
+    setSecret(name: string, value: string): Promise<void>;
+    /**
+     * Set a GitHub repo-setting (the capability-F residue: `delete_branch_on_merge`)
+     * via `gh api -X PATCH repos/<repo> -f <name>=<value>`. Throws on failure. The
+     * wizard prompts before calling this — it is NEVER silently toggled.
+     */
+    setRepoSetting(name: string, value: boolean): Promise<void>;
+    /**
+     * Detect whether the configured credential has REPO-ADMIN scope by reading
+     * `permissions.admin` from `GET /repos/{owner}/{repo}` — ONE low-cost read
+     * that works uniformly for every token kind (classic/fine-grained PAT,
+     * GitHub App, or the ambient `GITHUB_TOKEN`). See the rationale recorded in
+     * `install-ci-branch-protection.ts` ("pick the cheaper of the two and
+     * record the choice"). Returns `undefined` (unknown, treated as non-admin)
+     * when `gh` is unavailable / the repo is unknown / the call fails.
+     */
+    getRepoAdminScope(): Promise<boolean | undefined>;
+    /**
+     * Configure Tier-1 branch protection via
+     * `PUT /repos/{owner}/{repo}/branches/{branch}/protection`. The `spec` body
+     * is JSON-piped on stdin (`gh api --input -`) so a complex shape (the
+     * required-status `checks` array) carries cleanly without `gh`'s scalar
+     * `-f` field syntax. Throws on a non-zero exit; caller logs + falls back.
+     */
+    setBranchProtection(branch: string, spec: unknown): Promise<void>;
+    /**
+     * Render the GitHub project-setup payload to the steps fragment the
+     * composite setup action splices in FIRST. Free-function delegate so the
+     * memory stub gets identical behaviour with no I/O.
+     */
+    renderProjectSetup(payload: unknown): string;
+    /** Run `gh <args>` in workDir, or `undefined` when `gh` cannot be spawned. */
+    private runGh;
+    /** Like {@link runGh} but pipes `input` on stdin (for `gh api --input -`). */
+    private runGhWithInput;
+}
+/**
+ * An in-memory STUB provider context for tests + `--fake` mode: `setSecret`
+ * records to memory (NO real secrets store touched), `ghAvailable` is fixed
+ * (default `false`), `repo` is a fixture. This is the mechanism the task's
+ * shared-write isolation requires — no network, no real `gh`, no real GitHub, no
+ * real `~`, no system git config written.
+ */
+export declare class MemoryCIProviderContext implements CIProviderContext {
+    readonly providerId: string;
+    readonly workDir: string;
+    repo: string | undefined;
+    readonly ghAvailable: boolean;
+    /** Secrets recorded in memory (name → value). */
+    readonly secrets: Map<string, string>;
+    /** Repo settings recorded in memory (name → value). */
+    readonly repoSettings: Map<string, boolean>;
+    /** Branch-protection spec recorded in memory (branch → spec). */
+    readonly branchProtections: Map<string, unknown>;
+    /** What `getRepoAdminScope()` should return (tests configure). */
+    private readonly adminScope;
+    /** Whether `setBranchProtection` should throw (tests configure). */
+    private readonly branchProtectionError;
+    constructor(options: {
+        workDir: string;
+        repo?: string;
+        ghAvailable?: boolean;
+        /** Fixture admin-scope verdict; `undefined` ⇒ unknown. */
+        adminScope?: boolean;
+        /** When set, `setBranchProtection` throws with this message (failure path). */
+        branchProtectionError?: string;
+        /**
+         * The provider id this stub claims (default `github`). Tests of the
+         * project-setup seam may override to assert the orchestrator's
+         * payload-lookup path; the default models GitHub the way the live
+         * adapter does.
+         */
+        providerId?: string;
+    });
+    renderProjectSetup(payload: unknown): string;
+    setSecret(name: string, value: string): Promise<void>;
+    setRepoSetting(name: string, value: boolean): Promise<void>;
+    getRepoAdminScope(): Promise<boolean | undefined>;
+    setBranchProtection(branch: string, spec: unknown): Promise<void>;
+}
+//# sourceMappingURL=install-ci-github.d.ts.map

package/dist/install-ci-github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ci-github.d.ts","sourceRoot":"","sources":["../src/install-ci-github.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,sBAAsB,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,WAAW,CAAC;AAE3C;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AAErD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAsC1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAOtE;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACtC,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,iBAAiB;IACxD,QAAQ,CAAC,UAAU,YAAsB;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgC;gBAExC,OAAO,EAAE,sBAAsB;IAQ3C,6EAA6E;IAC7E,OAAO,CAAC,cAAc;IAKtB,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAmBlB,iFAAiF;IAC3E,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB3D;;;;OAIG;IACG,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBjE;;;;;;;;OAQG;IACG,iBAAiB,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAmBvD;;;;;;OAMG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BvE;;;;OAIG;IACH,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAI5C,8EAA8E;IAC9E,OAAO,CAAC,KAAK;IAQb,8EAA8E;IAC9E,OAAO,CAAC,cAAc;CAOtB;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,iBAAiB;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,sBAA6B;IAC7C,uDAAuD;IACvD,QAAQ,CAAC,YAAY,uBAA8B;IACnD,iEAAiE;IACjE,QAAQ,CAAC,iBAAiB,uBAA8B;IACxD,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsB;IACjD,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAqB;gBAE/C,OAAO,EAAE;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,0DAA0D;QAC1D,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,+EAA+E;QAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B;;;;;WAKG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB;IASD,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM;IAItC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D,iBAAiB,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAIjD,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAMvE"}

package/dist/install-ci-github.js

@@ -0,0 +1,315 @@
+/**
+ * The thin GitHub adapter for `install-ci` (prd `runner-in-ci`, task
+ * `install-ci-core-and-github-adapter`). It plugs into the provider-agnostic
+ * {@link CIProviderContext} seam from `install-ci-core.ts`: the core owns the
+ * wizard / config / `models.json` / `--export-config` / `--fake` / secret
+ * orchestration; THIS adapter only supplies the GitHub-specific I/O (repo
+ * detection, `gh secret set`, the optional `delete_branch_on_merge` repo
+ * setting). Because the seam is the boundary, a second CI provider could be added
+ * WITHOUT touching the core (US #7/#10).
+ *
+ * `install-ci` uses the SEAMS, never `gh` directly in the core: this adapter is
+ * the ONLY place that shells out to `gh`, and it does so behind the seam so tests
+ * stub it entirely (no network, no real `gh`, no real GitHub repo detection). The
+ * adapter NEVER `--force`s and degrades gracefully when `gh` is missing.
+ */
+import { run } from './git.js';
+import { DEFAULT_GH_BIN } from './github.js';
+/**
+ * The provider id this adapter exposes through {@link CIProviderContext.providerId}.
+ * Matches the key the orchestrator looks up in
+ * `CIConfigFile.projectSetup` (the provider-namespaced opaque pass-through).
+ */
+export const GITHUB_PROVIDER_ID = 'github';
+/**
+ * Raised when the GitHub project-setup payload fails its LIGHT structural sanity
+ * check (the only check we do — see {@link renderGithubProjectSetupSteps}).
+ * Distinct error class so callers can branch on it; message names the field.
+ */
+export class GithubProjectSetupError extends Error {
+}
+/**
+ * Validate the user's GitHub project-setup payload with a DELIBERATELY LIGHT
+ * structural check — enough to catch obvious typos (string vs. nothing; not a
+ * YAML list) without re-introducing the mini-format this escape hatch exists to
+ * avoid (ADR `install-ci-project-provisioning-native-passthrough`).
+ *
+ * Rules: the payload must be a non-empty STRING whose trimmed body parses as a
+ * top-level YAML list-of-mappings — at indent level 0, every non-blank line
+ * either (a) starts a step item with `- ` / `-` (a YAML sequence entry) or (b)
+ * is an indented continuation of the previous step. We do NOT inspect step
+ * fields (`uses`, `run`, `name`, …) and we do NOT semantically parse YAML.
+ *
+ * Returns the canonicalised (trimmed) snippet. Throws {@link GithubProjectSetupError}
+ * with a message that NAMES the field (`projectSetup.github`).
+ */
+export function validateGithubProjectSetupPayload(payload) {
+    if (typeof payload !== 'string') {
+        throw new GithubProjectSetupError('projectSetup.github must be a STRING of native GitHub Actions step ' +
+            'YAML (a YAML list of step mappings, e.g. `- name: ...\\n  uses: ...`)');
+    }
+    const trimmed = payload.replace(/^[\r\n\s]+/, '').replace(/\s+$/, '');
+    if (trimmed.length === 0) {
+        throw new GithubProjectSetupError('projectSetup.github is empty; either supply a YAML list of step ' +
+            'mappings or omit the field entirely');
+    }
+    let sawItem = false;
+    for (const line of trimmed.split('\n')) {
+        if (line.trim() === '')
+            continue;
+        // Top-level YAML comments are valid and pass through verbatim.
+        if (/^#/.test(line))
+            continue;
+        if (/^[ \t]/.test(line)) {
+            if (!sawItem) {
+                throw new GithubProjectSetupError('projectSetup.github must be a YAML list of step mappings ' +
+                    '(top-level first non-blank line must start with `- `; got an ' +
+                    `indented continuation: ${JSON.stringify(line)})`);
+            }
+            continue;
+        }
+        if (!/^-(\s|$)/.test(line)) {
+            throw new GithubProjectSetupError('projectSetup.github must be a YAML list of step mappings ' +
+                `(unexpected top-level line: ${JSON.stringify(line)})`);
+        }
+        sawItem = true;
+    }
+    return trimmed;
+}
+/**
+ * Render the user's GitHub project-setup payload to the YAML fragment the
+ * composite setup action splices in FIRST (before setup-node, dorfl-install,
+ * and AI-auth). The check is delegated to
+ * {@link validateGithubProjectSetupPayload}; this function only INDENTS the
+ * verbatim payload so it sits at the 4-space level the composite action's
+ * `steps:` body uses. The opacity contract: bytes-in == bytes-out, modulo the
+ * 4-space indent applied here — we do NOT transform, normalize, or reflow the
+ * snippet (that would re-introduce the mini-format this hook exists to avoid).
+ */
+export function renderGithubProjectSetupSteps(payload) {
+    const snippet = validateGithubProjectSetupPayload(payload);
+    const indented = snippet
+        .split('\n')
+        .map((line) => (line.length === 0 ? '' : `    ${line}`))
+        .join('\n');
+    return indented.endsWith('\n') ? indented : indented + '\n';
+}
+/**
+ * The live GitHub provider context: detects the repo + availability via `gh` and
+ * sets secrets via `gh secret set`. This is the PRODUCTION seam implementation;
+ * tests use a STUB context instead (see {@link MemoryCIProviderContext}). It
+ * NEVER `--force`s and treats a missing `gh` as `ghAvailable: false`.
+ */
+export class GitHubCIContext {
+    providerId = GITHUB_PROVIDER_ID;
+    workDir;
+    repo;
+    ghAvailable;
+    ghBin;
+    env;
+    constructor(options) {
+        this.workDir = options.workDir;
+        this.ghBin = options.ghBin ?? DEFAULT_GH_BIN;
+        this.env = options.env;
+        this.ghAvailable = this.probeAvailable();
+        this.repo = options.repo ?? this.detectRepo();
+    }
+    /** Is `gh` available + authenticated? (`gh auth status` exits 0 when so.) */
+    probeAvailable() {
+        const result = this.runGh(['auth', 'status']);
+        return result !== undefined && result.status === 0;
+    }
+    /** Detect `owner/repo` via `gh repo view`, or `undefined` when unavailable. */
+    detectRepo() {
+        if (!this.ghAvailable) {
+            return undefined;
+        }
+        const result = this.runGh([
+            'repo',
+            'view',
+            '--json',
+            'nameWithOwner',
+            '--jq',
+            '.nameWithOwner',
+        ]);
+        if (result === undefined || result.status !== 0) {
+            return undefined;
+        }
+        const slug = result.stdout.trim();
+        return slug === '' ? undefined : slug;
+    }
+    /** Set a secret via `gh secret set <name> --body <value>`. Throws on failure. */
+    async setSecret(name, value) {
+        const args = ['secret', 'set', name, '--body', value];
+        if (this.repo) {
+            args.push('--repo', this.repo);
+        }
+        const result = this.runGh(args);
+        if (result === undefined) {
+            throw new Error(`gh not available; cannot set secret ${name}`);
+        }
+        if (result.status !== 0) {
+            throw new Error(`gh secret set ${name} failed: ${result.stderr.trim() || 'unknown error'}`);
+        }
+    }
+    /**
+     * Set a GitHub repo-setting (the capability-F residue: `delete_branch_on_merge`)
+     * via `gh api -X PATCH repos/<repo> -f <name>=<value>`. Throws on failure. The
+     * wizard prompts before calling this — it is NEVER silently toggled.
+     */
+    async setRepoSetting(name, value) {
+        if (!this.repo) {
+            throw new Error(`cannot set repo setting ${name}: repo unknown`);
+        }
+        const result = this.runGh([
+            'api',
+            '-X',
+            'PATCH',
+            `repos/${this.repo}`,
+            '-f',
+            `${name}=${value}`,
+        ]);
+        if (result === undefined) {
+            throw new Error(`gh not available; cannot set repo setting ${name}`);
+        }
+        if (result.status !== 0) {
+            throw new Error(`gh api PATCH repos/${this.repo} ${name}=${value} failed: ` +
+                (result.stderr.trim() || 'unknown error'));
+        }
+    }
+    /**
+     * Detect whether the configured credential has REPO-ADMIN scope by reading
+     * `permissions.admin` from `GET /repos/{owner}/{repo}` — ONE low-cost read
+     * that works uniformly for every token kind (classic/fine-grained PAT,
+     * GitHub App, or the ambient `GITHUB_TOKEN`). See the rationale recorded in
+     * `install-ci-branch-protection.ts` ("pick the cheaper of the two and
+     * record the choice"). Returns `undefined` (unknown, treated as non-admin)
+     * when `gh` is unavailable / the repo is unknown / the call fails.
+     */
+    async getRepoAdminScope() {
+        if (!this.repo) {
+            return undefined;
+        }
+        const result = this.runGh([
+            'api',
+            `repos/${this.repo}`,
+            '--jq',
+            '.permissions.admin',
+        ]);
+        if (result === undefined || result.status !== 0) {
+            return undefined;
+        }
+        const out = result.stdout.trim();
+        if (out === 'true')
+            return true;
+        if (out === 'false')
+            return false;
+        return undefined;
+    }
+    /**
+     * Configure Tier-1 branch protection via
+     * `PUT /repos/{owner}/{repo}/branches/{branch}/protection`. The `spec` body
+     * is JSON-piped on stdin (`gh api --input -`) so a complex shape (the
+     * required-status `checks` array) carries cleanly without `gh`'s scalar
+     * `-f` field syntax. Throws on a non-zero exit; caller logs + falls back.
+     */
+    async setBranchProtection(branch, spec) {
+        if (!this.repo) {
+            throw new Error(`cannot set branch protection on ${branch}: repo unknown`);
+        }
+        const args = [
+            'api',
+            '-X',
+            'PUT',
+            '-H',
+            'Accept: application/vnd.github+json',
+            `repos/${this.repo}/branches/${branch}/protection`,
+            '--input',
+            '-',
+        ];
+        const result = this.runGhWithInput(args, JSON.stringify(spec));
+        if (result === undefined) {
+            throw new Error(`gh not available; cannot set branch protection on ${branch}`);
+        }
+        if (result.status !== 0) {
+            throw new Error(`gh api PUT branches/${branch}/protection failed: ` +
+                (result.stderr.trim() || 'unknown error'));
+        }
+    }
+    /**
+     * Render the GitHub project-setup payload to the steps fragment the
+     * composite setup action splices in FIRST. Free-function delegate so the
+     * memory stub gets identical behaviour with no I/O.
+     */
+    renderProjectSetup(payload) {
+        return renderGithubProjectSetupSteps(payload);
+    }
+    /** Run `gh <args>` in workDir, or `undefined` when `gh` cannot be spawned. */
+    runGh(args) {
+        try {
+            return run(this.ghBin, args, this.workDir, { env: this.env });
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /** Like {@link runGh} but pipes `input` on stdin (for `gh api --input -`). */
+    runGhWithInput(args, input) {
+        try {
+            return run(this.ghBin, args, this.workDir, { env: this.env, input });
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+/**
+ * An in-memory STUB provider context for tests + `--fake` mode: `setSecret`
+ * records to memory (NO real secrets store touched), `ghAvailable` is fixed
+ * (default `false`), `repo` is a fixture. This is the mechanism the task's
+ * shared-write isolation requires — no network, no real `gh`, no real GitHub, no
+ * real `~`, no system git config written.
+ */
+export class MemoryCIProviderContext {
+    providerId;
+    workDir;
+    repo;
+    ghAvailable;
+    /** Secrets recorded in memory (name → value). */
+    secrets = new Map();
+    /** Repo settings recorded in memory (name → value). */
+    repoSettings = new Map();
+    /** Branch-protection spec recorded in memory (branch → spec). */
+    branchProtections = new Map();
+    /** What `getRepoAdminScope()` should return (tests configure). */
+    adminScope;
+    /** Whether `setBranchProtection` should throw (tests configure). */
+    branchProtectionError;
+    constructor(options) {
+        this.workDir = options.workDir;
+        this.repo = options.repo;
+        this.ghAvailable = options.ghAvailable ?? false;
+        this.adminScope = options.adminScope;
+        this.branchProtectionError = options.branchProtectionError;
+        this.providerId = options.providerId ?? GITHUB_PROVIDER_ID;
+    }
+    renderProjectSetup(payload) {
+        return renderGithubProjectSetupSteps(payload);
+    }
+    async setSecret(name, value) {
+        this.secrets.set(name, value);
+    }
+    async setRepoSetting(name, value) {
+        this.repoSettings.set(name, value);
+    }
+    async getRepoAdminScope() {
+        return this.adminScope;
+    }
+    async setBranchProtection(branch, spec) {
+        if (this.branchProtectionError !== undefined) {
+            throw new Error(this.branchProtectionError);
+        }
+        this.branchProtections.set(branch, spec);
+    }
+}
+//# sourceMappingURL=install-ci-github.js.map

package/dist/install-ci-github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ci-github.js","sourceRoot":"","sources":["../src/install-ci-github.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAC,GAAG,EAAiB,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAC,cAAc,EAAC,MAAM,aAAa,CAAC;AAG3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AAErD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iCAAiC,CAAC,OAAgB;IACjE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAChC,qEAAqE;YACpE,uEAAuE,CACxE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAChC,kEAAkE;YACjE,qCAAqC,CACtC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,+DAA+D;QAC/D,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,IAAI,uBAAuB,CAChC,2DAA2D;oBAC1D,+DAA+D;oBAC/D,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAClD,CAAC;YACH,CAAC;YACD,SAAS;QACV,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,uBAAuB,CAChC,2DAA2D;gBAC1D,+BAA+B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CACvD,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAgB;IAC7D,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,OAAO;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC7D,CAAC;AAcD;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IAClB,UAAU,GAAG,kBAAkB,CAAC;IAChC,OAAO,CAAS;IACzB,IAAI,CAAqB;IAChB,WAAW,CAAU;IACb,KAAK,CAAS;IACd,GAAG,CAAgC;IAEpD,YAAY,OAA+B;QAC1C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/C,CAAC;IAED,6EAA6E;IACrE,cAAc;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,+EAA+E;IACvE,UAAU;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,MAAM;YACN,MAAM;YACN,QAAQ;YACR,eAAe;YACf,MAAM;YACN,gBAAgB;SAChB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAa;QAC1C,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACd,iBAAiB,IAAI,YAAY,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,eAAe,EAAE,CAC1E,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAc;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,gBAAgB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,KAAK;YACL,IAAI;YACJ,OAAO;YACP,SAAS,IAAI,CAAC,IAAI,EAAE;YACpB,IAAI;YACJ,GAAG,IAAI,IAAI,KAAK,EAAE;SAClB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACd,sBAAsB,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,KAAK,WAAW;gBAC1D,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC,CAC1C,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,iBAAiB;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,KAAK;YACL,SAAS,IAAI,CAAC,IAAI,EAAE;YACpB,MAAM;YACN,oBAAoB;SACpB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,IAAa;QACtD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACd,mCAAmC,MAAM,gBAAgB,CACzD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG;YACZ,KAAK;YACL,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,qCAAqC;YACrC,SAAS,IAAI,CAAC,IAAI,aAAa,MAAM,aAAa;YAClD,SAAS;YACT,GAAG;SACH,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACd,qDAAqD,MAAM,EAAE,CAC7D,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACd,uBAAuB,MAAM,sBAAsB;gBAClD,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC,CAC1C,CAAC;QACH,CAAC;IACF,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,OAAgB;QAClC,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,8EAA8E;IACtE,KAAK,CAAC,IAAc;QAC3B,IAAI,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAED,8EAA8E;IACtE,cAAc,CAAC,IAAc,EAAE,KAAa;QACnD,IAAI,CAAC;YACJ,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IAC1B,UAAU,CAAS;IACnB,OAAO,CAAS;IACzB,IAAI,CAAqB;IAChB,WAAW,CAAU;IAC9B,iDAAiD;IACxC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,uDAAuD;IAC9C,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnD,iEAAiE;IACxD,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxD,kEAAkE;IACjD,UAAU,CAAsB;IACjD,oEAAoE;IACnD,qBAAqB,CAAqB;IAE3D,YAAY,OAeX;QACA,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAC5D,CAAC;IAED,kBAAkB,CAAC,OAAgB;QAClC,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAa;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAY,EAAE,KAAc;QAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,iBAAiB;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,IAAa;QACtD,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;CACD"}

package/dist/install-ci.d.ts

@@ -0,0 +1,105 @@
+/**
+ * The `install-ci` orchestrator (prd `runner-in-ci`, task
+ * `install-ci-core-and-github-adapter`): ties the provider-agnostic core
+ * (`install-ci-core.ts`) to a CI-provider adapter (the first being GitHub,
+ * `install-ci-github.ts`) through the {@link CIProviderContext} seam. It drives
+ * three paths from ONE config shape so they cannot diverge:
+ *
+ *   - the interactive WIZARD (prompts via the injectable {@link WizardPrompts}
+ *     seam — production wires readline; tests inject a deterministic stub);
+ *   - the non-interactive `--config <file>` path (loads the same shape, no prompts);
+ *   - `--export-config` (+ `--include-secrets`) which round-trips the gathered
+ *     config back to JSON.
+ *
+ * The artifacts (composite setup action + auth) are assembled by the core and
+ * written under `.fake/` in `--fake` snapshot mode (NEVER `.github/`, NO real
+ * secret), so the SAME inputs produce byte-identical output whether gathered
+ * interactively or from a config file (the equivalence the task pins).
+ */
+import { type CIConfigFile, type ResolvedCIConfig, type InstallSource, type CIProviderContext, type CapabilityEmitter, type SecretSetResult, DEFAULT_HARNESS } from './install-ci-core.js';
+import { type BranchProtectionStepResult } from './install-ci-branch-protection.js';
+/**
+ * The interactive prompt SEAM the wizard drives. Production wires readline; tests
+ * inject a deterministic stub so the wizard runs with NO TTY, NO network, and the
+ * gathered config exactly equals a config-file input (proving the equivalence).
+ */
+export interface WizardPrompts {
+    /** A free-text answer (with an optional default). */
+    input(message: string, opts?: {
+        default?: string;
+    }): Promise<string>;
+    /** A masked secret answer (never echoed). */
+    password(message: string): Promise<string>;
+    /** A yes/no answer (with a default). */
+    confirm(message: string, opts: {
+        default: boolean;
+    }): Promise<boolean>;
+    /** Pick one of `choices` (each `{name, value}`). */
+    select<T extends string>(message: string, choices: {
+        name: string;
+        value: T;
+    }[]): Promise<T>;
+}
+/** Options for {@link installCI}. */
+export interface InstallCIOptions {
+    /** The CI-provider seam (GitHub adapter in production; a stub in tests). */
+    ctx: CIProviderContext;
+    /** Snapshot mode: write to `.fake/` (never `.github/`), set NO real secret. */
+    fake?: boolean;
+    /** Non-interactive: load the config from this JSON file (skips the wizard). */
+    configFile?: string;
+    /** Write the gathered config as JSON to this path instead of generating. */
+    exportConfig?: string;
+    /** With `--export-config`: also gather + include the secret values. */
+    includeSecrets?: boolean;
+    /**
+     * Force the CLI install source (`registry` / `workspace`), overriding the
+     * package.json auto-detection in BOTH directions. When omitted, the source
+     * comes from the config file (if it set it) else the auto-detection below.
+     */
+    installSource?: InstallSource;
+    /**
+     * Force the advance-lifecycle matrix concurrency cap (`--max-parallel`),
+     * overriding the config file's value. When omitted, it comes from the config
+     * file (if set) else {@link DEFAULT_MAX_PARALLEL}. Must be a positive integer.
+     */
+    maxParallel?: number;
+    /** The interactive prompt seam (required unless `configFile` is given). */
+    prompts?: WizardPrompts;
+    /** The capability emitters to emit workflows for (none in this core task). */
+    capabilities?: CapabilityEmitter[];
+    /** Sink for human-facing progress lines (default: console.log). */
+    log?: (line: string) => void;
+}
+/** The result of an {@link installCI} run. */
+export interface InstallCIResult {
+    /** What the run did. */
+    outcome: 'exported' | 'generated';
+    /** The resolved config that was used. */
+    config: ResolvedCIConfig;
+    /** Repo-relative paths written (the artifacts), empty on `exported`. */
+    written: string[];
+    /** The secret-orchestration outcomes (empty on `--fake` / `exported`). */
+    secrets: SecretSetResult[];
+    /** The Tier-1 branch-protection outcome (undefined on `exported`). */
+    branchProtection?: BranchProtectionStepResult;
+}
+/**
+ * Run `install-ci`. Resolves the config (config-file path or the wizard), then
+ * either exports it (`--export-config`) or generates the artifacts. In `--fake`
+ * mode it writes to `.fake/` and sets NO real secret; otherwise it orchestrates
+ * the required secrets through the provider seam. Returns a structured result.
+ */
+export declare function installCI(options: InstallCIOptions): Promise<InstallCIResult>;
+/**
+ * The interactive wizard: gather the auth mode, providers/models (models-json) or
+ * the default provider/model (auth-json), and the harness, into a
+ * {@link CIConfigFile}. Drives the {@link WizardPrompts} seam, so it runs
+ * deterministically in tests and the gathered shape exactly equals a config-file
+ * input — the equivalence the snapshot test pins. Mirrors whitesmith's prompt
+ * flow (provider type → key env var → models → defaults).
+ */
+export declare function runWizard(prompts: WizardPrompts): Promise<CIConfigFile>;
+/** Re-export the default harness for callers building a config programmatically. */
+export { DEFAULT_HARNESS };
+//# sourceMappingURL=install-ci.d.ts.map

package/dist/install-ci.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-ci.d.ts","sourceRoot":"","sources":["../src/install-ci.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAGN,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,eAAe,EAOf,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,mCAAmC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC7B,qDAAqD;IACrD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,wCAAwC;IACxC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;QAAC,OAAO,EAAE,OAAO,CAAA;KAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,oDAAoD;IACpD,MAAM,CAAC,CAAC,SAAS,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,CAAC,CAAA;KAAC,EAAE,GACjC,OAAO,CAAC,CAAC,CAAC,CAAC;CACd;AAED,qCAAqC;AACrC,MAAM,WAAW,gBAAgB;IAChC,4EAA4E;IAC5E,GAAG,EAAE,iBAAiB,CAAC;IACvB,+EAA+E;IAC/E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACnC,mEAAmE;IACnE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC/B,wBAAwB;IACxB,OAAO,EAAE,UAAU,GAAG,WAAW,CAAC;IAClC,yCAAyC;IACzC,MAAM,EAAE,gBAAgB,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0EAA0E;IAC1E,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAC9B,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,eAAe,CAAC,CA8N1B;AAqCD;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyC7E;AA6HD,oFAAoF;AACpF,OAAO,EAAC,eAAe,EAAC,CAAC"}