Expand description
Bounded GitHub REST transport and fixed gh process adapter.
Bounded GitHub REST transport for remote build orchestration.
Every request uses an explicit repository endpoint and fixed gh api
arguments. The process runner clears ambient environment state, supplies
exactly one configured authentication source, caps captured output, and
never returns command stderr in errors.
Structs§
- Actions
Permissions - Repository-scoped GitHub Actions availability.
- Artifact
Download Target - Canonical download directory plus a safe ZIP basename.
- Artifact
Id - Non-zero GitHub artifact identifier.
- Artifact
Info - Bounded artifact metadata returned by one run.
- Artifact
Name - Exact generated artifact name expected from the workflow.
- Authenticated
User - Parsed authenticated GitHub account.
- Branch
Name - Exact Git branch name without the
refs/heads/prefix. - Commit
Sha - Exact lowercase 40-character Git commit identifier.
- Deployment
Branch Policy - One bounded custom deployment branch policy.
- Downloaded
Artifact - Completed bounded artifact download.
- Environment
Info - Security-relevant metadata for one exact GitHub Environment.
- Environment
Secret - Metadata for one environment secret; secret values are never readable.
- Environment
Secret Write Receipt - Secret-free confirmation that
ghaccepted one exact Environment write. - Environment
Secret Write Request - Exact secret role and protected GitHub Environment selected for one write.
- GhProcess
Runner - Real fixed-argv GitHub CLI process runner.
- GhRequest
- Fully planned, non-secret
gh apirequest. - Github
Transport - GitHub.com transport over an injectable
gh apirunner. - Github
Workflow Dispatch Http Request - Bounded direct HTTPS request for one workflow dispatch.
- Github
Workflow Dispatch Http Response - Bounded HTTP result. Debug output never includes response bytes or URLs.
- Poll
Policy - Bounded polling policy for one known run.
- Repository
- Explicit GitHub owner and repository name.
- Repository
Info - Parsed repository metadata used before dispatch.
- RunHandle
- Exact identity selected during run lookup.
- RunId
- Non-zero GitHub run identifier.
- RunSnapshot
- One locally identity-checked run observation.
- Temporary
GitRef - A branch proven to be below the configured temporary namespace.
- Thread
Poll Sleeper - Standard thread-based polling sleeper.
- Transport
Limits - Bounded metadata, pagination, and artifact-download policy.
- Workflow
Dispatch Receipt - Secret-free receipt binding one positive run ID to every expected run identity field.
- Workflow
Dispatch Request - Validated public inputs for one no-secret workflow dispatch.
- Workflow
Id - Non-zero GitHub workflow identifier.
- Workflow
Registration - One active workflow registration bound to its exact repository path.
Enums§
- ApiMethod
- HTTP method used by a planned
gh apicall. - Authenticated
Principal - Validated GitHub API credential principal without overstating identity.
- GhAuthentication
- Explicit GitHub CLI authentication source.
- GhExecution
Error - Redacted execution failure from a
ghrunner. - Github
Workflow Dispatch Http Error - Redacted direct-HTTPS dispatch failure.
- RunConclusion
- Terminal GitHub Actions run conclusion.
- RunEvent
- Supported workflow event used for an exact run lookup.
- RunStatus
- Current GitHub Actions run state.
- Token
Environment Variable - Exact environment variable accepted as a GitHub token source.
- Transport
Config Error - Validation failure for a GitHub identifier or local policy value.
- Transport
Error - Redacted transport or response-validation failure.
Constants§
- MAX_
ENVIRONMENT_ SECRET_ BYTES - Maximum value accepted by GitHub Actions for one Environment secret.
Traits§
- GhRunner
- Injectable executor for planned GitHub API requests.
- GhSecret
Runner - Injectable executor for one fixed-argv Environment-secret write.
- Github
Workflow Dispatch Http Client - Injectable no-auto-redirect HTTPS adapter for workflow dispatch.
- Github
Workflow Dispatch Http Client Factory - Lazy factory detached from the provider’s metadata-transport lock.
- Poll
Sleeper - Sleeper injection used to test bounded polling without wall-clock delay.