dsh-github-router 0.3.1 → 0.4.0

package/lib/index.js

@@ -19,12 +19,12 @@
  * 4. Plugin-owned state (fetch cache, response cache) lives under
  *    <DSH_HOME>/storages/dsh-github-router; user repositories are only ever
  *    read (log/diff/show) and only when explicitly granted.
- * 5. Configuration rides the official settings seam end to end
- *    (`dsh-github-router` namespace: durable document, schema validation,
- *    revision fencing). Since DSH 0.1.0-rc.7 the framework serves every
- *    registered settings namespace to the browser and renders the plugin's
- *    configuration card in Settings → Plugins, so no plugin-owned HTTP
- *    route exists.
+ * 5. Configuration is the exported `Config` schema (DSH ≥ 0.1.7-rc.2): the
+ *    framework serves the `dsh-github-router` entry id as the settings
+ *    namespace, derives the browser page from the schema, validates and
+ *    persists writes, and redacts the secret token field on every wire
+ *    boundary. The browser half renders that page in Settings → Plugins on
+ *    the bundle's row, so no plugin-owned HTTP route exists.
  * @module dsh-github-router
  */
 import { installSettings } from './settings.js'
@@ -36,6 +36,11 @@ import { registerIssueTool } from './tools/issue.js'
 import { registerPrTool } from './tools/pr.js'
 import { registerProbeTool } from './tools/probe.js'
 
+// The framework reads this entry's `Config` export as the settings schema and
+// serves the entry id as its namespace; re-exporting keeps the schema in the
+// module the Loader checks.
+export { Config } from './config.js'
+
 export const name = 'dsh-github-router'
 export const inject = ['tools', 'subprocess', 'skills', 'systemPrompt']
 

package/lib/routes/gh.js

@@ -1,109 +1,120 @@
-/**
- * gh CLI route. Only read-only subcommands are ever constructed here:
- * `gh --version`, `gh auth status`, `gh api` (GET by default), and the
- * `--json` viewers (`pr view`, `issue view`, `repo view`). JSON field lists
- * are fixed constants — user input never reaches argv beyond validated
- * owner/repo/number/path values, and nothing is ever passed through a shell.
- * @module dsh-github-router/routes/gh
- */
-import { childEnv, runCaptured } from '../util.js'
-
-const PR_FIELDS =
-  'author,title,body,state,isDraft,mergedAt,additions,deletions,changedFiles,' +
-  'createdAt,updatedAt,baseRefName,headRefName,headRefOid,baseRefOid,' +
-  'mergeable,reviewDecision,reviews,comments,commits,files'
-const ISSUE_FIELDS = 'author,title,body,state,stateReason,createdAt,updatedAt,closedAt,comments,labels,assignees'
-const REPO_FIELDS = 'nameWithOwner,description,defaultBranchRef,stargazerCount,forkCount,updatedAt,licenseInfo,isPrivate'
-
-export async function ghVersion(subprocess, signal) {
-  const out = await runCaptured(subprocess, { argv: ['gh', '--version'], graceMs: 8_000, signal, env: childEnv(), maxStdout: 4096, maxStderr: 4096 })
-  return out.ok
-}
-
-export async function ghAuthed(subprocess, signal) {
-  const out = await runCaptured(subprocess, { argv: ['gh', 'auth', 'status'], graceMs: 8_000, signal, env: childEnv(), maxStdout: 8192, maxStderr: 8192 })
-  return out.ok
-}
-
-/** Run a fixed gh invocation and parse its JSON stdout. */
-async function ghJson(subprocess, argv, spec = {}) {
-  const out = await runCaptured(subprocess, {
-    argv,
-    graceMs: spec.graceMs ?? 30_000,
-    signal: spec.signal,
-    env: childEnv(),
-    maxStdout: spec.maxStdout ?? 1048576,
-    maxStderr: 262144,
-  })
-  if (!out.ok) {
-    const err = new Error(`gh exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
-    err.code = 'GH_FAILED'
-    throw err
-  }
-  try {
-    return JSON.parse(out.stdout.text)
-  } catch (error) {
-    const err = new Error(`gh produced unprocessable JSON: ${String(error && error.message ? error.message : error)}`)
-    err.code = 'GH_FAILED'
-    throw err
-  }
-}
-
-/** `gh pr view <owner/repo/N> --json ...` */
-export async function ghPrView(subprocess, owner, repo, number, spec = {}) {
-  return ghJson(subprocess, ['gh', 'pr', 'view', `${owner}/${repo}/${number}`, '--json', PR_FIELDS], spec)
-}
-
-/** `gh pr diff <owner/repo/N>` — capped text of the PR diff. */
-export async function ghPrDiff(subprocess, owner, repo, number, spec = {}) {
-  const out = await runCaptured(subprocess, {
-    argv: ['gh', 'pr', 'diff', `${owner}/${repo}/${number}`],
-    graceMs: 30_000,
-    signal: spec.signal,
-    env: childEnv(),
-    maxStdout: spec.maxStdout ?? 1048576,
-    maxStderr: 262144,
-  })
-  if (!out.ok) {
-    const err = new Error(`gh pr diff exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
-    err.code = 'GH_FAILED'
-    throw err
-  }
-  return { text: out.stdout.text, truncated: out.stdout.truncated }
-}
-
-/** `gh issue view <owner/repo/N> --json ...` */
-export async function ghIssueView(subprocess, owner, repo, number, spec = {}) {
-  return ghJson(subprocess, ['gh', 'issue', 'view', `${owner}/${repo}/${number}`, '--json', ISSUE_FIELDS], spec)
-}
-
-/** `gh repo view <owner/repo> --json ...` */
-export async function ghRepoView(subprocess, owner, repo, spec = {}) {
-  return ghJson(subprocess, ['gh', 'repo', 'view', `${owner}/${repo}`, '--json', REPO_FIELDS], spec)
-}
-
-/**
- * `gh api <path>` — GET only, with the validated api path as a single argv
- * element. Output is parsed as JSON when possible, else returned as text.
- */
-export async function ghApi(subprocess, path, spec = {}) {
-  const out = await runCaptured(subprocess, {
-    argv: ['gh', 'api', path],
-    graceMs: 30_000,
-    signal: spec.signal,
-    env: childEnv(),
-    maxStdout: spec.maxStdout ?? 1048576,
-    maxStderr: 262144,
-  })
-  if (!out.ok) {
-    const err = new Error(`gh api exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
-    err.code = 'GH_FAILED'
-    throw err
-  }
-  const text = out.stdout.text
-  try {
-    return { json: JSON.parse(text), truncated: out.stdout.truncated }
-  } catch {
-    return { json: null, text, truncated: out.stdout.truncated }
-  }
-}
+/**
+ * gh CLI route. Only read-only subcommands are ever constructed here:
+ * `gh --version`, `gh auth status`, `gh api` (GET by default), and the
+ * `--json` viewers (`pr view`, `issue view`, `repo view`). JSON field lists
+ * are fixed constants — user input never reaches argv beyond validated
+ * owner/repo/number/path values, and nothing is ever passed through a shell.
+ * @module dsh-github-router/routes/gh
+ */
+import { childEnv, runCaptured } from '../util.js'
+
+const PR_FIELDS =
+  'author,title,body,state,isDraft,mergedAt,additions,deletions,changedFiles,' +
+  'createdAt,updatedAt,baseRefName,headRefName,headRefOid,baseRefOid,' +
+  'mergeable,reviewDecision,reviews,comments,commits,files,url'
+const ISSUE_FIELDS = 'author,title,body,state,stateReason,createdAt,updatedAt,closedAt,comments,labels,assignees,url'
+const REPO_FIELDS = 'nameWithOwner,description,defaultBranchRef,stargazerCount,forkCount,updatedAt,licenseInfo,isPrivate'
+
+export async function ghVersion(subprocess, signal) {
+  const out = await runCaptured(subprocess, { argv: ['gh', '--version'], graceMs: 8_000, signal, env: childEnv(), maxStdout: 4096, maxStderr: 4096 })
+  return out.ok
+}
+
+export async function ghAuthed(subprocess, signal) {
+  const out = await runCaptured(subprocess, { argv: ['gh', 'auth', 'status'], graceMs: 8_000, signal, env: childEnv(), maxStdout: 8192, maxStderr: 8192 })
+  return out.ok
+}
+
+/** Run a fixed gh invocation and parse its JSON stdout. */
+async function ghJson(subprocess, argv, spec = {}) {
+  const out = await runCaptured(subprocess, {
+    argv,
+    graceMs: spec.graceMs ?? 30_000,
+    signal: spec.signal,
+    env: childEnv(),
+    maxStdout: spec.maxStdout ?? 1048576,
+    maxStderr: 262144,
+  })
+  if (!out.ok) {
+    const err = new Error(`gh exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
+    err.code = 'GH_FAILED'
+    throw err
+  }
+  try {
+    return JSON.parse(out.stdout.text)
+  } catch (error) {
+    const err = new Error(`gh produced unprocessable JSON: ${String(error && error.message ? error.message : error)}`)
+    err.code = 'GH_FAILED'
+    throw err
+  }
+}
+
+/**
+ * `gh pr view <number> --repo <owner/repo> --json ...`
+ *
+ * The number is positional and the repository is passed with `--repo`:
+ * `gh pr view` also accepts a branch, so an `owner/repo/N` positional would
+ * be resolved as a branch against the local git repository instead.
+ */
+export async function ghPrView(subprocess, owner, repo, number, spec = {}) {
+  return ghJson(subprocess, ['gh', 'pr', 'view', String(number), '--repo', `${owner}/${repo}`, '--json', PR_FIELDS], spec)
+}
+
+/** `gh pr diff <number> --repo <owner/repo>` — capped text of the PR diff. */
+export async function ghPrDiff(subprocess, owner, repo, number, spec = {}) {
+  const out = await runCaptured(subprocess, {
+    argv: ['gh', 'pr', 'diff', String(number), '--repo', `${owner}/${repo}`],
+    graceMs: 30_000,
+    signal: spec.signal,
+    env: childEnv(),
+    maxStdout: spec.maxStdout ?? 1048576,
+    maxStderr: 262144,
+  })
+  if (!out.ok) {
+    const err = new Error(`gh pr diff exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
+    err.code = 'GH_FAILED'
+    throw err
+  }
+  return { text: out.stdout.text, truncated: out.stdout.truncated }
+}
+
+/**
+ * `gh issue view <number> --repo <owner/repo> --json ...`
+ *
+ * `gh issue view` accepts only a bare number or a URL, so the repository
+ * must travel in `--repo` — never as part of the positional argument.
+ */
+export async function ghIssueView(subprocess, owner, repo, number, spec = {}) {
+  return ghJson(subprocess, ['gh', 'issue', 'view', String(number), '--repo', `${owner}/${repo}`, '--json', ISSUE_FIELDS], spec)
+}
+
+/** `gh repo view <owner/repo> --json ...` */
+export async function ghRepoView(subprocess, owner, repo, spec = {}) {
+  return ghJson(subprocess, ['gh', 'repo', 'view', `${owner}/${repo}`, '--json', REPO_FIELDS], spec)
+}
+
+/**
+ * `gh api <path>` — GET only, with the validated api path as a single argv
+ * element. Output is parsed as JSON when possible, else returned as text.
+ */
+export async function ghApi(subprocess, path, spec = {}) {
+  const out = await runCaptured(subprocess, {
+    argv: ['gh', 'api', path],
+    graceMs: 30_000,
+    signal: spec.signal,
+    env: childEnv(),
+    maxStdout: spec.maxStdout ?? 1048576,
+    maxStderr: 262144,
+  })
+  if (!out.ok) {
+    const err = new Error(`gh api exited with code ${out.exitCode}: ${out.stderr.text.slice(0, 400)}`)
+    err.code = 'GH_FAILED'
+    throw err
+  }
+  const text = out.stdout.text
+  try {
+    return { json: JSON.parse(text), truncated: out.stdout.truncated }
+  } catch {
+    return { json: null, text, truncated: out.stdout.truncated }
+  }
+}