narai-primitives 2.0.0-rc.1

package/dist/connectors/gcp/lib/gcp_client.js

@@ -0,0 +1,434 @@
+/**
+ * gcp_client.ts — read-only GCP facade that shells out to `gcloud` / `bq`
+ * with Application Default Credentials.
+ *
+ * Security notes:
+ * - Uses `execFileSync` — **never** a shell string — so arguments are not
+ *   word-split or glob-expanded.
+ * - Enforces a whitelist of permitted commands; anything else raises.
+ * - Validates project IDs and flag values against conservative regexes.
+ * - Read-only flags enforced at the argv level: for example `bq query`
+ *   always runs with `--use_legacy_sql=false --max_rows=…`.
+ */
+import { execFileSync, } from "node:child_process";
+const DEFAULT_CONNECT_TIMEOUT_MS = 10_000;
+const DEFAULT_READ_TIMEOUT_MS = 30_000;
+const DEFAULT_RATE_LIMIT_PER_MIN = 60;
+const ALLOWED_BINARIES = new Set(["gcloud", "bq"]);
+// Only these sub-commands may be invoked by the client.
+const ALLOWED_SUBCOMMANDS = new Set([
+    "gcloud services list",
+    "gcloud sql instances describe",
+    "gcloud pubsub topics list",
+    "gcloud logging read",
+    "bq query",
+]);
+const PROJECT_ID_SAFE = /^[a-z][a-z0-9-]{4,28}[a-z0-9]$/;
+const ALPHANUM_DASH = /^[a-zA-Z0-9._-]+$/;
+export class GcpClient {
+    _rateLimitPerMin;
+    _connectTimeoutMs;
+    _readTimeoutMs;
+    _runner;
+    _sleep;
+    _timestamps = [];
+    _defaultProjectId = null;
+    _defaultRegion = null;
+    constructor(opts = {}) {
+        this._rateLimitPerMin = opts.rateLimitPerMin ?? DEFAULT_RATE_LIMIT_PER_MIN;
+        this._connectTimeoutMs = opts.connectTimeoutMs ?? DEFAULT_CONNECT_TIMEOUT_MS;
+        this._readTimeoutMs = opts.readTimeoutMs ?? DEFAULT_READ_TIMEOUT_MS;
+        this._runner = opts.runner ?? execFileSync;
+        this._sleep =
+            opts.sleepImpl ??
+                ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this._defaultProjectId = opts.defaultProjectId ?? null;
+        this._defaultRegion = opts.defaultRegion ?? null;
+    }
+    get defaultProjectId() {
+        return this._defaultProjectId;
+    }
+    get defaultRegion() {
+        return this._defaultRegion;
+    }
+    async _throttle() {
+        const now = Date.now();
+        const cutoff = now - 60_000;
+        this._timestamps = this._timestamps.filter((t) => t > cutoff);
+        if (this._timestamps.length >= this._rateLimitPerMin) {
+            const oldest = this._timestamps[0] ?? now;
+            const waitMs = Math.max(0, 60_000 - (now - oldest));
+            if (waitMs > 0)
+                await this._sleep(waitMs);
+            this._timestamps = this._timestamps.filter((t) => t > Date.now() - 60_000);
+        }
+        this._timestamps.push(Date.now());
+    }
+    _run(binary, subcommand, args) {
+        if (!ALLOWED_BINARIES.has(binary)) {
+            return {
+                ok: false,
+                code: "FORBIDDEN_BINARY",
+                message: `Binary ${binary} is not permitted`,
+                retriable: false,
+            };
+        }
+        if (!ALLOWED_SUBCOMMANDS.has(`${binary} ${subcommand}`)) {
+            return {
+                ok: false,
+                code: "FORBIDDEN_COMMAND",
+                message: `Command not whitelisted: ${binary} ${subcommand}`,
+                retriable: false,
+            };
+        }
+        // Block shell metacharacters in every arg — execFile avoids the shell
+        // but a belt-and-braces validation short-circuits any future leakage.
+        //
+        // `bq query` accepts the SQL body as the final positional argument;
+        // that content is validated at the call site (bqQuery) and may
+        // legitimately contain `;` inside string literals or as a single
+        // trailing terminator, so we skip the blocklist for it specifically.
+        const isBqQuery = binary === "bq" && subcommand === "query";
+        const lastIndex = args.length - 1;
+        for (let idx = 0; idx < args.length; idx++) {
+            if (isBqQuery && idx === lastIndex)
+                continue;
+            const arg = args[idx] ?? "";
+            if (/[;|&`$<>\n]/.test(arg)) {
+                return {
+                    ok: false,
+                    code: "UNSAFE_ARG",
+                    message: `Refusing unsafe argument: ${arg}`,
+                    retriable: false,
+                };
+            }
+        }
+        try {
+            const stdout = this._runner(binary, [...subcommand.split(" "), ...args], {
+                encoding: "utf-8",
+                timeout: this._connectTimeoutMs + this._readTimeoutMs,
+                maxBuffer: 16 * 1024 * 1024,
+            });
+            return { ok: true, data: stdout };
+        }
+        catch (err) {
+            const raw = err instanceof Error ? err.message : String(err);
+            // gcloud failures mostly come back from execFileSync as the entire stderr
+            // appended to a "Command failed: ..." preamble. Pull out the bit users
+            // actually want, classify common auth/credential failures separately
+            // from generic exec errors, and trim the noise.
+            return classifyGcloudError(raw);
+        }
+    }
+    async listServices(projectId) {
+        if (!PROJECT_ID_SAFE.test(projectId)) {
+            return {
+                ok: false,
+                code: "INVALID_PROJECT",
+                message: `Invalid project_id '${projectId}'`,
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        const raw = this._run("gcloud", "services list", [
+            "--project",
+            projectId,
+            "--enabled",
+            "--format=json",
+        ]);
+        if (!raw.ok)
+            return raw;
+        return parseJsonArray(raw.data);
+    }
+    async describeSqlInstance(projectId, instanceId) {
+        if (!PROJECT_ID_SAFE.test(projectId)) {
+            return {
+                ok: false,
+                code: "INVALID_PROJECT",
+                message: `Invalid project_id '${projectId}'`,
+                retriable: false,
+            };
+        }
+        if (!ALPHANUM_DASH.test(instanceId)) {
+            return {
+                ok: false,
+                code: "INVALID_INSTANCE",
+                message: `Invalid instance_id '${instanceId}'`,
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        const raw = this._run("gcloud", "sql instances describe", [
+            instanceId,
+            "--project",
+            projectId,
+            "--format=json",
+        ]);
+        if (!raw.ok)
+            return raw;
+        return parseJsonObject(raw.data);
+    }
+    async listPubsubTopics(projectId) {
+        if (!PROJECT_ID_SAFE.test(projectId)) {
+            return {
+                ok: false,
+                code: "INVALID_PROJECT",
+                message: `Invalid project_id '${projectId}'`,
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        const raw = this._run("gcloud", "pubsub topics list", [
+            "--project",
+            projectId,
+            "--format=json",
+        ]);
+        if (!raw.ok)
+            return raw;
+        return parseJsonArray(raw.data);
+    }
+    async queryLogs(projectId, filter, hours, maxResults) {
+        if (!PROJECT_ID_SAFE.test(projectId)) {
+            return {
+                ok: false,
+                code: "INVALID_PROJECT",
+                message: `Invalid project_id '${projectId}'`,
+                retriable: false,
+            };
+        }
+        if (/[;'"\n]/.test(filter)) {
+            return {
+                ok: false,
+                code: "INVALID_FILTER",
+                message: "Filter contains forbidden characters",
+                retriable: false,
+            };
+        }
+        if (!Number.isFinite(hours) || hours <= 0 || hours > 168) {
+            return {
+                ok: false,
+                code: "INVALID_FILTER",
+                message: "hours must be in (0, 168]",
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        const raw = this._run("gcloud", "logging read", [
+            filter,
+            "--project",
+            projectId,
+            "--limit",
+            String(Math.min(Math.max(1, Math.trunc(maxResults)), 1000)),
+            "--freshness",
+            `${Math.trunc(hours)}h`,
+            "--format=json",
+        ]);
+        if (!raw.ok)
+            return raw;
+        return parseJsonArray(raw.data);
+    }
+    async bqQuery(projectId, sql, maxRows) {
+        if (!PROJECT_ID_SAFE.test(projectId)) {
+            return {
+                ok: false,
+                code: "INVALID_PROJECT",
+                message: `Invalid project_id '${projectId}'`,
+                retriable: false,
+            };
+        }
+        if (!/^\s*SELECT\b/i.test(sql)) {
+            return {
+                ok: false,
+                code: "WRITE_FORBIDDEN",
+                message: "Only SELECT statements are permitted",
+                retriable: false,
+            };
+        }
+        // Reject multi-statement scripts. BigQuery accepts scripts like
+        // `SELECT 1; DROP TABLE x` when `--use_legacy_sql=false`, so a
+        // SELECT-prefix check alone is not enough. Strip quoted string
+        // literals first so legitimate semicolons inside strings pass.
+        const stripped = stripSqlStringLiterals(sql);
+        const trailingStripped = stripped.replace(/\s*;\s*$/, "");
+        if (trailingStripped.includes(";")) {
+            return {
+                ok: false,
+                code: "WRITE_FORBIDDEN",
+                message: "Multi-statement scripts are not permitted",
+                retriable: false,
+            };
+        }
+        await this._throttle();
+        const raw = this._run("bq", "query", [
+            `--project_id=${projectId}`,
+            "--use_legacy_sql=false",
+            `--max_rows=${Math.max(1, Math.trunc(maxRows))}`,
+            "--format=json",
+            "--quiet",
+            sql,
+        ]);
+        if (!raw.ok)
+            return raw;
+        const parsed = parseJsonArray(raw.data);
+        if (!parsed.ok)
+            return parsed;
+        return { ok: true, data: { rows: parsed.data, row_count: parsed.data.length } };
+    }
+}
+function parseJsonArray(raw) {
+    try {
+        const trimmed = raw.trim() || "[]";
+        const parsed = JSON.parse(trimmed);
+        if (!Array.isArray(parsed)) {
+            return {
+                ok: false,
+                code: "PARSE_ERROR",
+                message: "Expected JSON array from gcloud output",
+                retriable: false,
+            };
+        }
+        return { ok: true, data: parsed };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            code: "PARSE_ERROR",
+            message: `Failed to parse JSON: ${err.message}`,
+            retriable: false,
+        };
+    }
+}
+function parseJsonObject(raw) {
+    try {
+        const parsed = JSON.parse(raw.trim());
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+            return {
+                ok: false,
+                code: "PARSE_ERROR",
+                message: "Expected JSON object from gcloud output",
+                retriable: false,
+            };
+        }
+        return { ok: true, data: parsed };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            code: "PARSE_ERROR",
+            message: `Failed to parse JSON: ${err.message}`,
+            retriable: false,
+        };
+    }
+}
+/**
+ * Replace SQL string literals with empty markers so downstream semicolon
+ * detection ignores any `;` that lives inside a quoted string.
+ * Handles single-quoted, double-quoted, and backtick-quoted runs; SQL-style
+ * `''` / `""` escapes are consumed as part of the enclosing literal.
+ */
+function stripSqlStringLiterals(sql) {
+    let out = "";
+    let i = 0;
+    while (i < sql.length) {
+        const ch = sql[i];
+        if (ch === "'" || ch === '"' || ch === "`") {
+            const quote = ch;
+            i++;
+            while (i < sql.length) {
+                if (sql[i] === quote) {
+                    if (sql[i + 1] === quote) {
+                        i += 2;
+                        continue;
+                    }
+                    i++;
+                    break;
+                }
+                if (sql[i] === "\\" && i + 1 < sql.length) {
+                    i += 2;
+                    continue;
+                }
+                i++;
+            }
+            out += " ";
+            continue;
+        }
+        out += ch;
+        i++;
+    }
+    return out;
+}
+/**
+ * Classify a raw error message from `gcloud` (as surfaced by execFileSync).
+ *
+ * `gcloud` writes structured ERROR lines to stderr — Node's execFileSync
+ * appends them to a "Command failed: …" preamble. The raw message is
+ * actionable for an interactive operator but verbose for an envelope:
+ * we'd rather emit a stable code (`AUTH_ERROR` / `NOT_FOUND` / `TIMEOUT` /
+ * `EXEC_ERROR`) and a normalized one-line message that points at the fix.
+ */
+function classifyGcloudError(raw) {
+    if (/timeout/i.test(raw)) {
+        return { ok: false, code: "TIMEOUT", message: "gcloud command timed out", retriable: true };
+    }
+    // Auth failures — the most common gcloud failure mode and the one most worth
+    // distinguishing from a generic "exec error". gcloud emits stable phrases:
+    //   "You do not currently have an active account selected"
+    //   "Reauthentication required"
+    //   "Your credentials are invalid"
+    //   "Application Default Credentials are not available"
+    if (/do not currently have an active account/i.test(raw) ||
+        /reauthentication/i.test(raw) ||
+        /credentials are invalid/i.test(raw) ||
+        /Application Default Credentials are not available/i.test(raw) ||
+        /Could not load (the )?default credentials/i.test(raw)) {
+        return {
+            ok: false,
+            code: "AUTH_ERROR",
+            message: "gcloud is not authenticated. Run `gcloud auth application-default login` or set GOOGLE_APPLICATION_CREDENTIALS.",
+            retriable: false,
+        };
+    }
+    // Not-found surfaces with stable strings as well — `(NOT_FOUND)` or
+    // "was not found" or "does not exist".
+    if (/\(NOT_FOUND\)|was not found|does not exist/i.test(raw)) {
+        const summary = (raw.split("\n").find((l) => /ERROR|NOT_FOUND/.test(l)) ?? "").trim();
+        return {
+            ok: false,
+            code: "NOT_FOUND",
+            message: summary || "gcloud reported NOT_FOUND",
+            retriable: false,
+        };
+    }
+    // Permission / quota / rate-limit
+    if (/PERMISSION_DENIED|forbidden/i.test(raw)) {
+        return { ok: false, code: "PERMISSION_DENIED", message: "gcloud reports permission denied", retriable: false };
+    }
+    if (/RATE_LIMIT|quota exceeded|RESOURCE_EXHAUSTED/i.test(raw)) {
+        return { ok: false, code: "RATE_LIMITED", message: "gcloud reports rate limit / quota exhausted", retriable: true };
+    }
+    // Generic fallback: keep the first ERROR line, drop the "Command failed: …"
+    // preamble. If no ERROR line, take the last non-empty line.
+    const lines = raw.split("\n").map((l) => l.trim()).filter(Boolean);
+    const errLine = lines.find((l) => l.startsWith("ERROR")) ?? lines[lines.length - 1] ?? raw;
+    return {
+        ok: false,
+        code: "EXEC_ERROR",
+        message: errLine.length > 240 ? errLine.slice(0, 237) + "…" : errLine,
+        retriable: /ECONNRESET/i.test(raw),
+    };
+}
+/** Detect whether gcloud/bq are available on PATH. Returns `null` on detection failure. */
+export function detectGcloudAvailable(runner = execFileSync) {
+    try {
+        runner("gcloud", ["--version"], {
+            encoding: "utf-8",
+            timeout: 5000,
+            maxBuffer: 1024 * 1024,
+        });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=gcp_client.js.map

package/dist/connectors/gcp/lib/gcp_client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp_client.js","sourceRoot":"","sources":["../../../../src/connectors/gcp/lib/gcp_client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,YAAY,GAEb,MAAM,oBAAoB,CAAC;AAQ5B,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAEtC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAExE,wDAAwD;AACxD,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,sBAAsB;IACtB,+BAA+B;IAC/B,2BAA2B;IAC3B,qBAAqB;IACrB,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,gCAAgC,CAAC;AACzD,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAwB1C,MAAM,OAAO,SAAS;IACH,gBAAgB,CAAS;IACzB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,OAAO,CAAgB;IACvB,MAAM,CAAgC;IAC/C,WAAW,GAAa,EAAE,CAAC;IAC3B,iBAAiB,GAAkB,IAAI,CAAC;IACxC,cAAc,GAAkB,IAAI,CAAC;IAE7C,YAAY,OAAyB,EAAE;QACrC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,IAAI,0BAA0B,CAAC;QAC3E,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACpE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;QAC3C,IAAI,CAAC,MAAM;YACT,IAAI,CAAC,SAAS;gBACd,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC;YACpD,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,CAAC;IAEO,IAAI,CACV,MAAuB,EACvB,UAAkB,EAClB,IAAc;QAEd,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,UAAU,MAAM,mBAAmB;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,EAAE,CAAC;YACxD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4BAA4B,MAAM,IAAI,UAAU,EAAE;gBAC3D,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,sEAAsE;QACtE,EAAE;QACF,oEAAoE;QACpE,+DAA+D;QAC/D,iEAAiE;QACjE,qEAAqE;QACrE,MAAM,SAAS,GAAG,MAAM,KAAK,IAAI,IAAI,UAAU,KAAK,OAAO,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAClC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;YAC3C,IAAI,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,YAAY;oBAClB,OAAO,EAAE,6BAA6B,GAAG,EAAE;oBAC3C,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE;gBACvE,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,cAAc;gBACrD,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,0EAA0E;YAC1E,uEAAuE;YACvE,qEAAqE;YACrE,gDAAgD;YAChD,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,SAAiB;QAEjB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,SAAS,GAAG;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC/C,WAAW;YACX,SAAS;YACT,WAAW;YACX,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,cAAc,CAAmB,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAC9B,SAAiB,EACjB,UAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,SAAS,GAAG;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,wBAAwB,UAAU,GAAG;gBAC9C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,wBAAwB,EAAE;YACxD,UAAU;YACV,WAAW;YACX,SAAS;YACT,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,eAAe,CAAiB,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,SAAiB;QAEjB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,SAAS,GAAG;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE;YACpD,WAAW;YACX,SAAS;YACT,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,cAAc,CAAW,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,SAAiB,EACjB,MAAc,EACd,KAAa,EACb,UAAkB;QAElB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,SAAS,GAAG;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sCAAsC;gBAC/C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,2BAA2B;gBACpC,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE;YAC9C,MAAM;YACN,WAAW;YACX,SAAS;YACT,SAAS;YACT,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3D,aAAa;YACb,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG;YACvB,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,cAAc,CAAc,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,SAAiB,EACjB,GAAW,EACX,OAAe;QAEf,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB,SAAS,GAAG;gBAC5C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,sCAAsC;gBAC/C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,gEAAgE;QAChE,+DAA+D;QAC/D,+DAA+D;QAC/D,+DAA+D;QAC/D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,2CAA2C;gBACpD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;YACnC,gBAAgB,SAAS,EAAE;YAC3B,wBAAwB;YACxB,cAAc,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE;YAChD,eAAe;YACf,SAAS;YACT,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;QACxB,MAAM,MAAM,GAAG,cAAc,CAA0B,GAAG,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAClF,CAAC;CACF;AAiCD,SAAS,cAAc,CAAI,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,wCAAwC;gBACjD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAa,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,yBAA0B,GAAa,CAAC,OAAO,EAAE;YAC1D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAI,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QACjD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,yCAAyC;gBAClD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,yBAA0B,GAAa,CAAC,OAAO,EAAE;YAC1D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;oBACrB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;wBACzB,CAAC,IAAI,CAAC,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,CAAC,EAAE,CAAC;oBACJ,MAAM;gBACR,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC1C,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,GAAG,IAAI,GAAG,CAAC;YACX,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;QACV,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,GAAW;IAMtC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9F,CAAC;IACD,6EAA6E;IAC7E,2EAA2E;IAC3E,2DAA2D;IAC3D,gCAAgC;IAChC,mCAAmC;IACnC,wDAAwD;IACxD,IACE,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7B,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;QACpC,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9D,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC,EACtD,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,iHAAiH;YAC1H,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,oEAAoE;IACpE,uCAAuC;IACvC,IAAI,6CAA6C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,OAAO,IAAI,2BAA2B;YAC/C,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,kCAAkC;IAClC,IAAI,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,kCAAkC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6CAA6C,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtH,CAAC;IACD,4EAA4E;IAC5E,4DAA4D;IAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO;QACrE,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CACnC,SAAwB,YAAY;IAEpC,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,GAAG,IAAI;SACvB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/connectors/gcp/lib/gcp_error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Bridges GcpClient's `{ok: false, code, ...}` result shape to the
+ * handler-throws-an-Error contract the factory expects.
+ */
+export declare class GcpCliError extends Error {
+    readonly code: string;
+    readonly retriable: boolean;
+    constructor(code: string, message: string, retriable: boolean);
+}
+//# sourceMappingURL=gcp_error.d.ts.map

package/dist/connectors/gcp/lib/gcp_error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp_error.d.ts","sourceRoot":"","sources":["../../../../src/connectors/gcp/lib/gcp_error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO;CAM9D"}

package/dist/connectors/gcp/lib/gcp_error.js

@@ -0,0 +1,15 @@
+/**
+ * Bridges GcpClient's `{ok: false, code, ...}` result shape to the
+ * handler-throws-an-Error contract the factory expects.
+ */
+export class GcpCliError extends Error {
+    code;
+    retriable;
+    constructor(code, message, retriable) {
+        super(message);
+        this.name = "GcpCliError";
+        this.code = code;
+        this.retriable = retriable;
+    }
+}
+//# sourceMappingURL=gcp_error.js.map

package/dist/connectors/gcp/lib/gcp_error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp_error.js","sourceRoot":"","sources":["../../../../src/connectors/gcp/lib/gcp_error.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACb,SAAS,CAAU;IAE5B,YAAY,IAAY,EAAE,OAAe,EAAE,SAAkB;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}

package/dist/connectors/github/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/connectors/github/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/cli.ts"],"names":[],"mappings":""}

package/dist/connectors/github/cli.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+/**
+ * Thin bin entry. Library code lives in index.ts.
+ *
+ * Reads `~/.connectors/config.yaml` (or `NARAI_CONFIG_BLOB`, when injected
+ * by `@narai/connector-hub`) before `main()` runs and applies any configured
+ * GitHub token / default owner to `process.env`. Existing exports win —
+ * the bootstrap only fills in undefined entries.
+ */
+import { loadConnectorEnvironment } from "narai-primitives/config";
+import connector from "./index.js";
+const GITHUB_ENV_MAPPING = {
+    token: "GITHUB_TOKEN",
+    owner: "GITHUB_OWNER",
+};
+async function run() {
+    await loadConnectorEnvironment("github", { envMapping: GITHUB_ENV_MAPPING });
+    return connector.main(process.argv.slice(2));
+}
+void run().then((code) => {
+    process.exit(code);
+});
+//# sourceMappingURL=cli.js.map

package/dist/connectors/github/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/connectors/github/cli.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,kBAAkB,GAA2B;IACjD,KAAK,EAAE,cAAc;IACrB,KAAK,EAAE,cAAc;CACtB,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,wBAAwB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC7E,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/connectors/github/index.d.ts

@@ -0,0 +1,23 @@
+import { type Connector } from "narai-primitives/toolkit";
+import { GithubClient } from "./lib/github_client.js";
+export interface BuildOptions {
+    sdk?: () => Promise<GithubClient>;
+    credentials?: () => Promise<Record<string, unknown>>;
+}
+/**
+ * Scope callback installed into the toolkit config. Returns
+ * `${host}/${defaultOwner}` when a tenant owner is configured, otherwise
+ * `null` (global tier). Exported for unit testing.
+ */
+export declare function githubScope(ctx: {
+    sdk: GithubClient;
+    action: string;
+    params: unknown;
+}): string | null;
+export declare function buildGithubConnector(overrides?: BuildOptions): Connector;
+declare const connector: Connector;
+export default connector;
+export declare const main: (argv: readonly string[]) => Promise<number>, fetch: (action: string, params: unknown) => Promise<import("narai-primitives/toolkit").Envelope>, validActions: ReadonlySet<string>;
+export { GithubClient, loadGithubCredentials, type GithubClientOptions, type GithubResult, } from "./lib/github_client.js";
+export { GithubError } from "./lib/github_error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/github/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,YAAY,EAGb,MAAM,wBAAwB,CAAC;AAyKhC,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE;IAC/B,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB,GAAG,MAAM,GAAG,IAAI,CAIhB;AAED,wBAAgB,oBAAoB,CAAC,SAAS,GAAE,YAAiB,GAAG,SAAS,CAiV5E;AAGD,QAAA,MAAM,SAAS,WAAyB,CAAC;AACzC,eAAe,SAAS,CAAC;AACzB,eAAO,MAAQ,IAAI,gDAAE,KAAK,6FAAE,YAAY,qBAAc,CAAC;AAEvD,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,KAAK,mBAAmB,EACxB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC"}