pm-github 2026.10.19 → 2026.10.24

package/dist/refresh.d.ts

@@ -0,0 +1,41 @@
+import { type PmItem, type PreparedGithubImport } from "./index.ts";
+/** An existing item and its unique linked issue number. */
+export interface RefreshTarget {
+    id: string;
+    number: number;
+    item: PmItem;
+}
+/** A machine-readable field delta; null means absent. */
+export interface RefreshChange {
+    field: string;
+    old: unknown;
+    new: unknown;
+}
+/** Per-item result, including non-destructive failures. */
+export interface RefreshEntry {
+    id: string;
+    number: number;
+    changes: RefreshChange[];
+    reason?: "not_found_or_inaccessible" | "inaccessible" | "transferred" | "api_error" | "incomplete_response" | "invalid_issue";
+}
+/** Select only explicit provenance, refusing conflicting links and duplicate local owners. */
+export declare function selectRefreshTargets(items: readonly PmItem[], repo: string): RefreshTarget[];
+/** Compare only refresh-owned fields; use the same source lifecycle projection as import finalization. */
+export declare function refreshChanges(entry: PreparedGithubImport): RefreshChange[];
+/** Build a zero-create refresh plan, then commit changed existing targets with import transactions. */
+export declare function runRefresh(repoArg: string | undefined, pmRoot: string, options: Record<string, unknown>, scope?: {
+    numbers: readonly number[];
+}): Promise<{
+    repo: string;
+    dryRun: boolean;
+    atomic: boolean;
+    selected: number;
+    filtered: number;
+    unchanged: number;
+    updated: number;
+    missing: number;
+    created: number;
+    resumed: number;
+    plan: RefreshEntry[];
+}>;
+//# sourceMappingURL=refresh.d.ts.map

package/dist/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../refresh.ts"],"names":[],"mappings":"AAKA,OAAO,EAIS,KAAK,MAAM,EAAE,KAAK,oBAAoB,EACrD,MAAM,YAAY,CAAC;AAGpB,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC3E,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE;AAC5E,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,2BAA2B,GAAG,cAAc,GAAG,aAAa,GAAG,WAAW,GAAG,qBAAqB,GAAG,eAAe,CAAC;CAC/H;AAED,8FAA8F;AAC9F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAyB5F;AA2DD,0GAA0G;AAC1G,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,aAAa,EAAE,CAS3E;AAqBD,uGAAuG;AACvG,wBAAsB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE;IAAE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;;;;;;;;;;;;GAmFrJ"}

package/dist/refresh.js

@@ -0,0 +1,223 @@
+/** Refresh an explicit local GitHub mirror through the importer's existing mapping and transaction. */
+import { mkdtemp, cp, rm, chmod, readdir, lstat } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, basename } from "node:path";
+import { listAllComplete, certifyCompleteListResult, previewItemMutations } from "@unbrained/pm-cli/sdk";
+import { CommandError, EXIT_CODE, decodeCompletePmItems, githubGraphQLResponse, importGithubAtomic, listUnfinishedGithubImports, parseImportOptions, parseProvenanceTag, prepareGithubImport, readGithubImportPlan, resolveGitHubToken, resumeGithubImport, validateGithubImportFidelity, validateGithubImportPlan, } from "./index.js";
+import { fetchImportTimeline, importFidelityFields, normalizeImportValue, readImportReleases } from "./import-fidelity.js";
+/** Select only explicit provenance, refusing conflicting links and duplicate local owners. */
+export function selectRefreshTargets(items, repo) {
+    const targets = new Map();
+    for (const item of items) {
+        if (!item.id)
+            continue;
+        const numbers = new Set();
+        for (const tag of item.tags ?? []) {
+            const parsed = parseProvenanceTag(tag);
+            if (parsed?.repo === repo)
+                numbers.add(parsed.number);
+        }
+        if (typeof item.github_url === "string") {
+            // Only /issues/ locators are refreshable: the batch query reads issue(...)
+            // nodes, so accepting /pull/ links would report every PR-linked item as
+            // missing on each run.
+            const url = /^https:\/\/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)\/?$/i.exec(item.github_url);
+            if (url?.[1].toLowerCase() === repo)
+                numbers.add(Number(url[2]));
+        }
+        if (typeof item.github_repo === "string" && item.github_repo.toLowerCase() === repo && typeof item.github_number === "number")
+            numbers.add(item.github_number);
+        if (numbers.size > 1)
+            throw new CommandError(`Refresh found conflicting GitHub identities for ${item.id}.`);
+        for (const number of numbers) {
+            if (!Number.isSafeInteger(number) || number < 1)
+                throw new CommandError(`Refresh found an invalid issue number for ${item.id}.`);
+            if (targets.has(number))
+                throw new CommandError(`Refresh found multiple existing owners for issue #${number}.`);
+            targets.set(number, { id: item.id, number, item });
+        }
+    }
+    return [...targets.values()].sort((a, b) => a.number - b.number);
+}
+const ISSUE_FIELDS = `number title body state stateReason createdAt updatedAt closedAt url author { __typename login }
+  labels(first:100) { nodes { name } pageInfo { hasNextPage endCursor } }`;
+/** Fetch only the selected numbers, preserving partial failures and every label page. */
+async function fetchRefreshBatch(repo, targets, token) {
+    const [owner, name] = repo.split("/");
+    const fields = targets.map(target => `i${target.number}: issue(number:${target.number}) { ${ISSUE_FIELDS} }`).join("\n");
+    const response = await githubGraphQLResponse(token, `query($owner:String!,$name:String!) { repository(owner:$owner,name:$name) { ${fields} } }`, { owner, name });
+    const results = [];
+    for (const target of targets) {
+        const alias = `i${target.number}`;
+        const error = response.errors?.find(error => !error.path || (error.path[0] === "repository" && (error.path.length === 1 || error.path[1] === alias)));
+        let reason;
+        const node = response.data.repository?.[alias];
+        if (error && error.type !== "NOT_FOUND")
+            reason = error.type === "FORBIDDEN" ? "inaccessible" : "api_error";
+        else if (response.data.repository === null || node === null)
+            reason = "not_found_or_inaccessible";
+        else if (node === undefined)
+            reason = "incomplete_response";
+        else if (node.url.toLowerCase() !== `https://github.com/${repo}/issues/${target.number}`)
+            reason = "transferred";
+        else if (node.number !== target.number || !node.title.trim() || !["OPEN", "CLOSED"].includes(node.state))
+            reason = "invalid_issue";
+        if (reason) {
+            results.push({ target, reason });
+            continue;
+        }
+        const issue = node;
+        const labels = [...issue.labels.nodes];
+        let page = issue.labels.pageInfo;
+        const cursors = new Set();
+        while (page.hasNextPage) {
+            if (!page.endCursor || cursors.has(page.endCursor))
+                throw new CommandError(`Refresh labels for issue #${target.number} have an invalid cursor.`);
+            cursors.add(page.endCursor);
+            const next = await githubGraphQLResponse(token, `query($owner:String!,$name:String!,$number:Int!,$cursor:String!) { repository(owner:$owner,name:$name) { issue(number:$number) { labels(first:100,after:$cursor) { nodes { name } pageInfo { hasNextPage endCursor } } } } }`, { owner, name, number: target.number, cursor: page.endCursor });
+            // A repository or issue can vanish between requests (transfer or delete);
+            // guard the connection so the host sees a CommandError, not a TypeError.
+            const connection = next.data?.repository?.issue?.labels ?? null;
+            if (next.errors?.length || connection === null)
+                throw new CommandError(`Refresh could not read every label for issue #${target.number}.`);
+            labels.push(...connection.nodes);
+            page = connection.pageInfo;
+        }
+        results.push({ target, issue: {
+                number: issue.number, title: issue.title, body: issue.body, state: issue.state.toLowerCase(),
+                state_reason: issue.stateReason?.toLowerCase(), labels,
+                created_at: issue.createdAt, updated_at: issue.updatedAt, closed_at: issue.closedAt,
+                html_url: issue.url, user: issue.author ? { login: issue.author.__typename === "Bot" ? `${issue.author.login.replace(/\[bot\]$/i, "")}[bot]` : issue.author.login } : null,
+                assignee: null, milestone: null,
+            } });
+    }
+    return results;
+}
+/** Compare only refresh-owned fields; use the same source lifecycle projection as import finalization. */
+export function refreshChanges(entry) {
+    const desired = { ...importFidelityFields(entry.fidelity, Boolean(entry.linkOnly)),
+        ...(entry.linkOnly ? {} : { title: entry.title, status: entry.status }), tags: entry.tags };
+    return Object.entries(desired).flatMap(([field, value]) => {
+        const old = entry.match[field] ?? null;
+        const next = value ?? null;
+        const equal = JSON.stringify(normalizeImportValue(field, old)) === JSON.stringify(normalizeImportValue(field, next));
+        return equal ? [] : [{ field, old, new: next }];
+    });
+}
+/** Isolate SDK-derived cache writes for offline diagnostics, previews and no-op applies. @internal */
+export async function readRefreshItems(pmRoot) {
+    const scratch = await mkdtemp(join(tmpdir(), "pm-github-refresh-read-"));
+    try {
+        if (!(await lstat(pmRoot)).isDirectory())
+            throw new CommandError("Offline tracker reads need an ordinary tracker directory; replace a linked root with a regular copy.");
+        const root = join(scratch, "pm");
+        await cp(pmRoot, root, { recursive: true, filter: source => !["runtime", "locks", "github-webhooks", "extensions"].includes(basename(source)) });
+        // Source permissions are retained by cp; only the disposable copy may host SDK caches.
+        await chmod(root, 0o700);
+        for (const entry of await readdir(root, { recursive: true, withFileTypes: true })) {
+            if (!entry.isDirectory() && !entry.isFile())
+                throw new CommandError("Offline tracker reads refuse linked or special files; use an ordinary tracker copy.");
+            await chmod(join(entry.parentPath, entry.name), entry.isDirectory() ? 0o700 : 0o600);
+        }
+        return decodeCompletePmItems(certifyCompleteListResult(await listAllComplete({ includeBody: true }, { pmRoot: root, cwd: root, noExtensions: true })));
+    }
+    finally {
+        await rm(scratch, { recursive: true, force: true });
+    }
+}
+/** Build a zero-create refresh plan, then commit changed existing targets with import transactions. */
+export async function runRefresh(repoArg, pmRoot, options, scope) {
+    if (!repoArg || !/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(repoArg))
+        throw new CommandError("Usage: pm github refresh <owner/repo> [--dry-run] [--since <date|relative>] [--limit N] [--atomic]", EXIT_CODE.USAGE);
+    const repo = repoArg.toLowerCase();
+    const opts = parseImportOptions(options);
+    /** Selected targets bounded by the caller's --limit, in ascending order. */
+    const bounded = (candidates) => (opts.limit === undefined ? [...candidates] : candidates.slice(0, opts.limit)).filter(target => scope === undefined || scope.numbers.includes(target.number));
+    let items = await readRefreshItems(pmRoot);
+    let all = selectRefreshTargets(items, repo);
+    let targets = bounded(all);
+    const token = resolveGitHubToken();
+    // Resume interrupted transactions for the selected targets BEFORE the
+    // unchanged filter: a crash after finalization leaves linked items already
+    // matching the source, so the pending journal would otherwise hide behind an
+    // ordinary no-op report and never commit.
+    const pending = (await listUnfinishedGithubImports(pmRoot))
+        .filter(journal => !journal.itemIds.length || journal.itemIds.some(id => targets.some(target => target.id === id)));
+    let resumed = 0;
+    if (pending.length) {
+        if (opts.dryRun) {
+            throw new CommandError(`Refresh cannot preview while GitHub transaction ${pending.map(journal => journal.transactionId).join(", ")} is unfinished for selected linked items. Re-run without --dry-run to complete it.`);
+        }
+        // Validate the complete recovery set before the first transaction can write.
+        const records = [];
+        for (const journal of pending) {
+            const record = await readGithubImportPlan(pmRoot, journal.transactionId);
+            if (!record || record.transactionId !== journal.transactionId) {
+                throw new CommandError(`Refresh found unfinished GitHub transaction ${journal.transactionId} (status ${journal.status}) for selected linked items, but its original plan is missing or mismatched. If it came from \`pm github import --atomic\`, re-run that import to resume it; otherwise resolve the durable journal at ${join(pmRoot, "transactions", "sdk", `${journal.transactionId}.json`)} manually; nothing was refreshed.`, EXIT_CODE.GENERIC_FAILURE);
+            }
+            validateGithubImportPlan(record, items);
+            if (record.repo.toLowerCase() !== repo) {
+                throw new CommandError(`Refresh cannot replay GitHub transaction ${journal.transactionId} for ${record.repo} while refreshing ${repo}. Re-run refresh for ${record.repo} first; nothing was refreshed.`);
+            }
+            try {
+                await previewItemMutations({ pmRoot, transactionId: record.transactionId, author: "pm-github", mutations: record.mutations });
+            }
+            catch {
+                throw new CommandError(`Refresh cannot replay unfinished GitHub transaction ${journal.transactionId}: its persisted plan cannot resume the durable journal; nothing was refreshed.`);
+            }
+            records.push(record);
+        }
+        for (const record of records) {
+            await resumeGithubImport(pmRoot, record);
+            resumed++;
+        }
+        // The replay finalized the interrupted targets; re-read so this run
+        // compares the committed state instead of the pre-replay snapshot.
+        items = await readRefreshItems(pmRoot);
+        all = selectRefreshTargets(items, repo);
+        targets = bounded(all);
+    }
+    const plan = [];
+    const prepared = [];
+    let unchanged = 0;
+    let missing = 0;
+    let filtered = 0;
+    const context = { items, releases: readImportReleases(pmRoot), timeline: fetchImportTimeline };
+    for (let offset = 0; offset < targets.length; offset += 100) {
+        const batch = await fetchRefreshBatch(repo, targets.slice(offset, offset + 100), token);
+        for (const result of batch) {
+            const row = { id: result.target.id, number: result.target.number, changes: [] };
+            if (result.reason) {
+                row.reason = result.reason;
+                missing++;
+            }
+            else {
+                const issue = result.issue;
+                if (opts.since && Date.parse(issue.updated_at) < Date.parse(opts.since)) {
+                    filtered++;
+                    continue;
+                }
+                const entry = (await prepareGithubImport(issue, repo, opts, token, result.target.item, undefined, context));
+                row.changes = refreshChanges(entry);
+                if (row.changes.length)
+                    prepared.push(entry);
+                else
+                    unchanged++;
+            }
+            plan.push(row);
+        }
+    }
+    // Validate all finalization projections even when applying one item at a time.
+    for (const entry of prepared)
+        validateGithubImportFidelity(entry, repo, `Refresh issue #${entry.issueNumber}`, items);
+    if (!opts.dryRun && prepared.length) {
+        if (opts.atomic)
+            await importGithubAtomic(pmRoot, repo, prepared, { updateOnly: true });
+        else
+            for (const entry of prepared)
+                await importGithubAtomic(pmRoot, repo, [entry], { updateOnly: true });
+    }
+    return { repo, dryRun: opts.dryRun, atomic: opts.atomic, selected: targets.length, filtered,
+        unchanged, updated: prepared.length, missing, created: 0, resumed, plan };
+}
+//# sourceMappingURL=refresh.js.map

package/dist/refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.js","sourceRoot":"","sources":["../refresh.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACzG,OAAO,EACL,YAAY,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,kBAAkB,EACzF,2BAA2B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAC9G,kBAAkB,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,wBAAwB,GAE/F,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAc3H,8FAA8F;AAC9F,MAAM,UAAU,oBAAoB,CAAC,KAAwB,EAAE,IAAY;IACzE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,SAAS;QACvB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACxC,2EAA2E;YAC3E,wEAAwE;YACxE,uBAAuB;YACvB,MAAM,GAAG,GAAG,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/F,IAAI,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/J,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,mDAAmD,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,6CAA6C,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YACjI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,qDAAqD,MAAM,GAAG,CAAC,CAAC;YAChH,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAUD,MAAM,YAAY,GAAG;0EACqD,CAAC;AAE3E,yFAAyF;AACzF,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAiC,EAAE,KAAyB;IACzG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,kBAAkB,MAAM,CAAC,MAAM,OAAO,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAA4D,KAAK,EAC3G,+EAA+E,MAAM,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChH,MAAM,OAAO,GAAuF,EAAE,CAAC;IACvG,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;QACtJ,IAAI,MAA8B,CAAC;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC;aACvG,IAAI,QAAQ,CAAC,IAAK,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,GAAG,2BAA2B,CAAC;aAC9F,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,GAAG,qBAAqB,CAAC;aACvD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,sBAAsB,IAAI,WAAW,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,GAAG,aAAa,CAAC;aAC5G,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,GAAG,eAAe,CAAC;QACnI,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,6BAA6B,MAAM,CAAC,MAAM,0BAA0B,CAAC,CAAC;YACjJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAA6E,KAAK,EACxH,8NAA8N,EAC9N,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAClE,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;YAChE,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,KAAK,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,iDAAiD,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1I,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAsB;gBAChH,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAA6B,EAAE,MAAM;gBACjF,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ;gBACnF,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC1K,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI;aAChC,EAAE,CAAC,CAAC;IACP,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,KAA2B;IACxD,MAAM,OAAO,GAAG,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAS,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC9F,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrH,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,sGAAsG,CAAC,CAAC;QACzK,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACjJ,uFAAuF;QACvF,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,qFAAqF,CAAC,CAAC;YAC3J,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,qBAAqB,CAAC,yBAAyB,CAAC,MAAM,eAAe,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA2B,EAAE,MAAc,EAAE,OAAgC,EAAE,KAAsC;IACpJ,IAAI,CAAC,OAAO,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,oGAAoG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACnN,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,4EAA4E;IAC5E,MAAM,OAAO,GAAG,CAAC,UAAoC,EAAmB,EAAE,CACxE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChK,IAAI,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,GAAG,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,sEAAsE;IACtE,2EAA2E;IAC3E,6EAA6E;IAC7E,0CAA0C;IAC1C,MAAM,OAAO,GAAG,CAAC,MAAM,2BAA2B,CAAC,MAAM,CAAC,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACtH,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,YAAY,CAAC,mDAAmD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;QAC1N,CAAC;QACD,6EAA6E;QAC7E,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;YACzE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC9D,MAAM,IAAI,YAAY,CACpB,+CAA+C,OAAO,CAAC,aAAa,YAAY,OAAO,CAAC,MAAM,yMAAyM,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,aAAa,OAAO,CAAC,mCAAmC,EAC9Y,SAAS,CAAC,eAAe,CAC1B,CAAC;YACJ,CAAC;YACD,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBACvC,MAAM,IAAI,YAAY,CAAC,4CAA4C,OAAO,CAAC,aAAa,QAAQ,MAAM,CAAC,IAAI,qBAAqB,IAAI,wBAAwB,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAC;YAC3M,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,oBAAoB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAChI,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,YAAY,CAAC,uDAAuD,OAAO,CAAC,aAAa,gFAAgF,CAAC,CAAC;YACvL,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,oEAAoE;QACpE,mEAAmE;QACnE,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,GAAG,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,OAAO,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAC/F,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACxF,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAiB,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;YAC9F,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,CAAC;YAAC,CAAC;iBACxD,CAAC;gBACJ,MAAM,KAAK,GAAG,MAAM,CAAC,KAAM,CAAC;gBAC5B,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,QAAQ,EAAE,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAClG,MAAM,KAAK,GAAG,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAE,CAAC;gBAC7G,GAAG,CAAC,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM;oBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;oBACxC,SAAS,EAAE,CAAC;YACnB,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,4BAA4B,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IACtH,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;;YACnF,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,MAAM,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ;QACzF,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC9E,CAAC"}

package/dist/webhooks.d.ts

@@ -0,0 +1,55 @@
+/** Stable refusal discriminators; no secret, payload or storage path is included in diagnostics. */
+export type WebhookRefusalCode = "invalid_signature" | "invalid_event" | "invalid_options" | "delivery_conflict" | "inbox_corrupt" | "inbox_unavailable" | "provider_unavailable";
+/** A machine-readable refusal with an actionable, public-safe remedy. */
+export declare class WebhookRefusal extends Error {
+    /** Recognized by the pm command host as a handled failure, preventing handler replay. */
+    readonly exitCode = 1;
+    /** Stable discriminator shared by SDK and CLI diagnostics. */
+    readonly code: WebhookRefusalCode;
+    /** Public-safe instructions for recovering from this refusal. */
+    readonly remedy: string;
+    /** Construct a typed refusal with a compact JSON diagnostic for CLI callers. */
+    constructor(code: WebhookRefusalCode, remedy: string);
+}
+/** Exact bytes and delivery headers supplied by the receiving adapter; secret stays in memory. */
+export interface GithubWebhookDelivery {
+    repo: string;
+    delivery: string;
+    event: string;
+    signature: string;
+    secret: string;
+    payload: Uint8Array;
+}
+/** Compact proposed updates; fetch full values with polling refresh --dry-run before applying. */
+export interface WebhookProposal {
+    id: string;
+    number: number;
+    fields: string[];
+    lifecycle: Array<{
+        field: string;
+        old: unknown;
+        new: unknown;
+    }>;
+}
+/** A bounded reconciliation receipt, also persisted for operator inspection. */
+export interface WebhookReconciliation {
+    ok: true;
+    repo: string;
+    selected: number;
+    remaining: number;
+    reconciled: number;
+    retry: number;
+    unlinked: number;
+    proposals: WebhookProposal[];
+    recovery: string;
+}
+/** Authenticate exact bytes before parsing, locking, initializing storage or performing any write. */
+export declare function acceptGithubWebhook(pmRoot: string, input: GithubWebhookDelivery): Promise<{
+    ok: true;
+    repo: string;
+    delivery: string;
+    duplicate: boolean;
+}>;
+/** Read current provider state once per linked issue, persist compact proposals, and leave failed hints retryable. */
+export declare function reconcileGithubWebhooks(pmRoot: string, repoArg: string, limit?: number): Promise<WebhookReconciliation>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../webhooks.ts"],"names":[],"mappings":"AAOA,oGAAoG;AACpG,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,eAAe,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,eAAe,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;AAClL,yEAAyE;AACzE,qBAAa,cAAe,SAAQ,KAAK;IACvC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,KAAK;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gFAAgF;IAChF,YAAY,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAKnD;CACF;AACD,kGAAkG;AAClG,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,CAAC;CACrB;AASD,kGAAkG;AAClG,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACjE;AACD,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAiDD,sGAAsG;AACtG,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC,CA+BjK;AAWD,sHAAsH;AACtH,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAwCzH"}

package/dist/webhooks.js

@@ -0,0 +1,188 @@
+/** Durable authenticated issue-event hints; provider reads, never event payloads, produce proposals. */
+import { createHash, createHmac, timingSafeEqual } from "node:crypto";
+import { open, mkdir, readdir, readFile } from "node:fs/promises";
+import { join, basename } from "node:path";
+import { acquireLock, writeFileAtomic } from "@unbrained/pm-cli/sdk";
+import { runRefresh } from "./refresh.js";
+/** A machine-readable refusal with an actionable, public-safe remedy. */
+export class WebhookRefusal extends Error {
+    /** Recognized by the pm command host as a handled failure, preventing handler replay. */
+    exitCode = 1;
+    /** Stable discriminator shared by SDK and CLI diagnostics. */
+    code;
+    /** Public-safe instructions for recovering from this refusal. */
+    remedy;
+    /** Construct a typed refusal with a compact JSON diagnostic for CLI callers. */
+    constructor(code, remedy) {
+        super(JSON.stringify({ ok: false, code, remedy }));
+        this.name = "WebhookRefusal";
+        this.code = code;
+        this.remedy = remedy;
+    }
+}
+/** Normalize an explicit repository boundary before opening storage. */
+function repository(value) {
+    if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(value))
+        throw new WebhookRefusal("invalid_options", "Supply an explicit owner/repo.");
+    return value.toLowerCase();
+}
+/** Narrow untrusted JSON without assuming the provider schema. */
+function object(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+}
+/** Hash public identities into fixed-length storage names. */
+function hash(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+/** Preserve typed refusals while hiding native errors that may include paths or payloads. */
+function refusal(error, code, remedy) {
+    if (error instanceof WebhookRefusal)
+        throw error;
+    throw new WebhookRefusal(code, remedy);
+}
+/** Flush published records and the containing directory before acknowledging durable intake. */
+async function persist(file, value) {
+    await writeFileAtomic(file, JSON.stringify(value) + "\n");
+    await flush(file);
+}
+/** Finish a prior publisher's flush as well as a fresh receipt's durable acknowledgment. */
+async function flush(file) {
+    for (const target of [file, join(file, ".."), join(file, "../.."), join(file, "../../..")]) {
+        const handle = await open(target, "r");
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+    }
+}
+/** Serialize independent writers using the host's token-owned, crash-recoverable tracker lock. */
+async function locked(pmRoot, repo, operation, lockId = "github-webhooks") {
+    try {
+        await readFile(join(pmRoot, "settings.json"), "utf8");
+        // Age alone cannot prove a worker is dead while it awaits provider or disk I/O.
+        const release = await acquireLock(pmRoot, lockId, 300, "pm-github", false, true, 5000);
+        try {
+            const parent = join(pmRoot, "github-webhooks");
+            await mkdir(parent, { recursive: true, mode: 0o700 });
+            const directory = join(parent, hash(repo));
+            await mkdir(directory, { recursive: true, mode: 0o700 });
+            return await operation(directory);
+        }
+        finally {
+            await release();
+        }
+    }
+    catch (error) {
+        refusal(error, "inbox_unavailable", "Restore initialized writable local tracker storage; inspect stale locks and recover only after confirming their worker has stopped, then retry; retain github-webhooks receipts.");
+    }
+}
+/** Authenticate exact bytes before parsing, locking, initializing storage or performing any write. */
+export async function acceptGithubWebhook(pmRoot, input) {
+    if (!input.secret || !/^sha256=[a-f0-9]{64}$/.test(input.signature) ||
+        !timingSafeEqual(createHmac("sha256", input.secret).update(input.payload).digest(), Buffer.from(input.signature.slice(7), "hex"))) {
+        throw new WebhookRefusal("invalid_signature", "Supply the original unmodified payload bytes, X-Hub-Signature-256 and the matching webhook secret.");
+    }
+    const repo = repository(input.repo);
+    if (input.event !== "issues" || !/^[A-Za-z0-9-]{1,128}$/.test(input.delivery) || input.payload.byteLength > 25 * 1024 * 1024) {
+        throw new WebhookRefusal("invalid_event", "Supply an issues event, its original X-GitHub-Delivery identifier and a payload of at most 25 MiB.");
+    }
+    let payload;
+    try {
+        payload = object(JSON.parse(Buffer.from(input.payload).toString("utf8")));
+    }
+    catch {
+        throw new WebhookRefusal("invalid_event", "Supply the signed GitHub JSON payload without re-encoding it.");
+    }
+    const issue = object(payload.issue);
+    const source = object(payload.repository);
+    if (typeof payload.action !== "string" || !payload.action.trim() || typeof source.full_name !== "string" || source.full_name.toLowerCase() !== repo ||
+        !Number.isSafeInteger(issue.number) || Number(issue.number) < 1 || "pull_request" in issue) {
+        throw new WebhookRefusal("invalid_event", "Supply an issue event from the explicitly selected repository; pull requests and ambiguous identities are unsupported.");
+    }
+    const record = { version: 1, repo, delivery: input.delivery, digest: hash(input.payload), number: Number(issue.number) };
+    return locked(pmRoot, repo, async (directory) => {
+        const file = join(directory, `${hash(record.delivery)}.json`);
+        if ((await readdir(directory)).includes(`${hash(record.delivery)}.json`)) {
+            const existing = await readRecord(file, repo);
+            if (JSON.stringify(existing) !== JSON.stringify(record))
+                throw new WebhookRefusal("delivery_conflict", "The delivery identifier already names different bytes; retain both source receipts and investigate the adapter.");
+            // A previous process may have died after rename but before its flush.
+            await flush(file);
+            return { ok: true, repo, delivery: record.delivery, duplicate: true };
+        }
+        await persist(file, record);
+        return { ok: true, repo, delivery: record.delivery, duplicate: false };
+    });
+}
+/** Refuse malformed durable hints before fetching or acknowledging any selected delivery. */
+async function readRecord(file, repo) {
+    try {
+        const value = object(JSON.parse(await readFile(file, "utf8")));
+        if (value.version !== 1 || value.repo !== repo || typeof value.delivery !== "string" || !/^[A-Za-z0-9-]{1,128}$/.test(value.delivery) ||
+            typeof value.digest !== "string" || !/^[a-f0-9]{64}$/.test(value.digest) || !Number.isSafeInteger(value.number) || Number(value.number) < 1 ||
+            basename(file) !== `${hash(value.delivery)}.json`)
+            throw new Error("invalid record");
+        return { version: 1, repo, delivery: value.delivery, digest: value.digest, number: Number(value.number) };
+    }
+    catch {
+        throw new WebhookRefusal("inbox_corrupt", "Restore the affected delivery receipt from backup or redelivery; do not delete the inbox. Poll with github refresh meanwhile.");
+    }
+}
+/** Read current provider state once per linked issue, persist compact proposals, and leave failed hints retryable. */
+export async function reconcileGithubWebhooks(pmRoot, repoArg, limit = 20) {
+    const repo = repository(repoArg);
+    if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100)
+        throw new WebhookRefusal("invalid_options", "Use a delivery limit from 1 to 100 (default 20).");
+    return locked(pmRoot, repo, async (directory) => {
+        const names = new Set(await readdir(directory));
+        const files = [...names].filter(file => /^[a-f0-9]{64}\.json$/.test(file)).sort();
+        const selected = files.filter(file => !names.has(file.replace(".json", ".done.json")));
+        let after = "";
+        if (names.has("cursor.json")) {
+            try {
+                const cursor = object(JSON.parse(await readFile(join(directory, "cursor.json"), "utf8")));
+                if (typeof cursor.after !== "string" || !/^[a-f0-9]{64}\.json$/.test(cursor.after))
+                    throw new Error("invalid cursor");
+                after = cursor.after;
+            }
+            catch {
+                throw new WebhookRefusal("inbox_corrupt", "Restore the reconciliation cursor from backup; retain delivery receipts and poll with github refresh meanwhile.");
+            }
+        }
+        const batch = [...selected.filter(file => file > after), ...selected.filter(file => file <= after)].slice(0, limit);
+        const records = await Promise.all(batch.map(file => readRecord(join(directory, file), repo)));
+        // Advance even when a provider request throws, so retries cannot starve later hints.
+        if (batch.length)
+            await persist(join(directory, "cursor.json"), { after: batch[batch.length - 1] });
+        let preview;
+        try {
+            preview = records.length ? await runRefresh(repo, pmRoot, { "dry-run": true }, { numbers: records.map(record => record.number) }) : undefined;
+        }
+        catch (error) {
+            refusal(error, "provider_unavailable", "Retry reconciliation after restoring GitHub access or completing unfinished imports with github refresh; pending deliveries are retained.");
+        }
+        const proposals = [];
+        for (const row of preview?.plan ?? []) {
+            if (row.changes.length)
+                proposals.push({ id: row.id, number: row.number, fields: row.changes.map(change => change.field),
+                    lifecycle: row.changes.filter(change => ["status", "github_state", "github_updated_at", "closed_at", "completed_at"].includes(change.field)) });
+        }
+        let reconciled = 0;
+        let unlinked = 0;
+        for (const record of records) {
+            const row = preview.plan.find(entry => entry.number === record.number);
+            if (row?.reason)
+                continue;
+            if (!row)
+                unlinked++;
+            await persist(join(directory, `${hash(record.delivery)}.done.json`), { delivery: record.delivery, reconciledAt: new Date().toISOString(),
+                outcome: row ? "proposed" : "unlinked", proposals: proposals.filter(proposal => proposal.number === record.number) });
+            reconciled++;
+        }
+        return { ok: true, repo, selected: records.length, remaining: selected.length - reconciled, reconciled, retry: records.length - reconciled, unlinked,
+            proposals, recovery: `pm github refresh ${repo} --dry-run` };
+    }, "github-webhooks-reconcile");
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../webhooks.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI1C,yEAAyE;AACzE,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,yFAAyF;IAChF,QAAQ,GAAG,CAAC,CAAC;IACtB,8DAA8D;IACrD,IAAI,CAAqB;IAClC,iEAAiE;IACxD,MAAM,CAAS;IACxB,gFAAgF;IAChF,YAAY,IAAwB,EAAE,MAAc;QAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAsCD,wEAAwE;AACxE,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;IACrI,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AACD,kEAAkE;AAClE,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtH,CAAC;AACD,8DAA8D;AAC9D,SAAS,IAAI,CAAC,KAA0B;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AACD,6FAA6F;AAC7F,SAAS,OAAO,CAAC,KAAc,EAAE,IAAwB,EAAE,MAAc;IACvE,IAAI,KAAK,YAAY,cAAc;QAAE,MAAM,KAAK,CAAC;IACjD,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AACD,gGAAgG;AAChG,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,KAAc;IACjD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AACD,4FAA4F;AAC5F,KAAK,UAAU,KAAK,CAAC,IAAY;IAC/B,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAChE,CAAC;AACH,CAAC;AACD,kGAAkG;AAClG,KAAK,UAAU,MAAM,CAAI,MAAc,EAAE,IAAY,EAAE,SAA4C,EAAE,MAAM,GAAG,iBAAiB;IAC7H,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,gFAAgF;QAChF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;YAC/C,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,kLAAkL,CAAC,CAAC;IAC1N,CAAC;AACH,CAAC;AACD,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,KAA4B;IACpF,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACjE,CAAC,eAAe,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,oGAAoG,CAAC,CAAC;IACtJ,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QAC7H,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,oGAAoG,CAAC,CAAC;IAClJ,CAAC;IACD,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAClF,MAAM,CAAC;QAAC,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,+DAA+D,CAAC,CAAC;IAAC,CAAC;IACrH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI;QACjJ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;QAC7F,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,wHAAwH,CAAC,CAAC;IACtK,CAAC;IACD,MAAM,MAAM,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACtI,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACzE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,iHAAiH,CAAC,CAAC;YAC1N,sEAAsE;YACtE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,6FAA6F;AAC7F,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACnI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3I,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5G,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,+HAA+H,CAAC,CAAC;IAAC,CAAC;AACzL,CAAC;AACD,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAc,EAAE,OAAe,EAAE,KAAK,GAAG,EAAE;IACvF,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;QAAE,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;IAC9J,OAAO,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAC,SAAS,EAAC,EAAE;QAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1F,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACtH,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,iHAAiH,CAAC,CAAC;YAAC,CAAC;QAC3K,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9F,qFAAqF;QACrF,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACpG,IAAI,OAA2D,CAAC;QAChE,IAAI,CAAC;YAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAAC,CAAC;QACtJ,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,2IAA2I,CAAC,CAAC;QAAC,CAAC;QACtM,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;oBACtH,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACpJ,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,OAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,GAAG,EAAE,MAAM;gBAAE,SAAS;YAC1B,IAAI,CAAC,GAAG;gBAAE,QAAQ,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtI,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxH,UAAU,EAAE,CAAC;QACf,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,QAAQ;YAClJ,SAAS,EAAE,QAAQ,EAAE,qBAAqB,IAAI,YAAY,EAAE,CAAC;IACjE,CAAC,EAAE,2BAA2B,CAAC,CAAC;AAClC,CAAC"}

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-github",
-  "version": "2026.10.19",
+  "version": "2026.10.24",
   "description": "GitHub Issues + Projects v2 integration. Imports issues as pm items (`pm github import`), exports pm items as GitHub issues, syncs issue state, and bidirectionally syncs pm items with a GitHub Projects v2 board (`pm github project import/sync/list/fields`) — mapping pm status to the board Status column with idempotent, no-data-loss provenance.",
   "author": "@unbraind",
   "entry": "./dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-github",
-  "version": "2026.10.19",
+  "version": "2026.10.24",
   "description": "GitHub Issues importer extension for pm-cli",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "changelog:check": "npm run changelog:full -- --check",
     "release:check": "npm run typecheck && npm run build && npm run docstring && npm run lint && npm run duplication && npm run privacy && npm run coverage && npm run audit:prod && npm run pack:dry-run && npm run changelog:check && npm run verify:release-publish-attestation",
     "prepublishOnly": "npm run release:check",
-    "release:notes": "pm-changelog --pm-root .agents/pm --pm-arg=--output-limit --pm-arg=unbounded --pm-arg=--output-budget --pm-arg=unbounded --stdout --since-previous-tag --until-release-tag --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-github/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm --github-step-summary",
+    "release:notes": "pm-changelog --pm-root .agents/pm --pm-arg=--output-limit --pm-arg=unbounded --pm-arg=--output-budget --pm-arg=unbounded --stdout --since-previous-tag --until-release-tag --release-version-from-package --date-from-version --item-url-base https://github.com/unbraind/pm-github/blob/main/.agents/pm --respect-item-release --pm-bin ./node_modules/.bin/pm",
     "prepare": "node scripts/prepare-merge-driver.ts",
     "merge:install": "pm merge install",
     "coverage": "npm run build && npm run build:test && node scripts/coverage-gate.ts",
@@ -51,12 +51,12 @@
     "@babel/plugin-syntax-typescript": "8.0.3",
     "@toon-format/toon": "4.4.0",
     "@types/node": "26.6.5",
-    "@unbrained/pm-cli": "2026.10.15",
+    "@unbrained/pm-cli": "2026.10.20",
     "c8": "12.0.0",
-    "eslint": "10.12.0",
+    "eslint": "10.13.0",
     "jscpd": "5.4.1",
-    "pm-changelog": "2026.10.15",
-    "pm-ops": "2026.10.15",
+    "pm-changelog": "2026.10.20",
+    "pm-ops": "2026.10.20",
     "typescript": "7.0.2"
   },
   "keywords": [
@@ -124,5 +124,8 @@
   "duplicationGate": {
     "threshold": 0,
     "minTokens": 50
+  },
+  "dependencies": {
+    "entities": "8.1.0"
   }
 }