Function cloneRepo

apps/cursor/src/lib/plugins/scan.ts:356–425

(
  owner: string,
  repo: string,
  tag: string,
)

}

async function cloneRepo(
  owner: string,
  repo: string,
  tag: string,
): Promise<{ cwd: string; cleanup: () => Promise<void> }> {
  const root = await mkdtemp(path.join(tmpdir(), "plugin-scan-"));
  const cwd = path.join(root, "repo");
  const archivePath = path.join(root, "repo.tar.gz");
  const cleanup = () =>
    rm(root, { recursive: true, force: true }).catch(() => {});
  const startedAt = Date.now();
  const archiveUrl = `https://api.github.com/repos/${owner}/${repo}/tarball/HEAD`;
  logInfo(tag, "GitHub archive download start", { owner, repo, cwd });
  try {
    await mkdir(cwd);
    // GITHUB_TOKEN (when configured) lifts the 60 req/hr anonymous rate limit
    // shared across all tenants of the function's egress IP.
    const response = await fetchWithRateLimit(archiveUrl, {
      headers: {
        Accept: "application/vnd.github+json",
        "User-Agent": "cursor-directory-plugin-scan",
        ...githubAuthHeaders(),
      },
      maxWaitMs: 30_000,
    });

    if ([404, 410, 451].includes(response.status)) {
      throw new UnscannableRepoError(
        `GitHub returned ${response.status} for ${owner}/${repo} — the repository does not exist or is not public.`,
      );
    }

    if (!response.ok || !response.body) {
      throw new Error(
        `GitHub archive request failed with ${response.status} ${response.statusText}`,
      );
    }

    const contentLength = response.headers.get("content-length");
    if (
      contentLength &&
      Number.parseInt(contentLength, 10) > REPO_ARCHIVE_MAX_BYTES
    ) {
      throw new UnscannableRepoError(
        `Repository archive advertised ${contentLength} bytes, above the ${REPO_ARCHIVE_MAX_BYTES}-byte scan limit.`,
      );
    }

    await pipeline(
      Readable.fromWeb(response.body as never),
      archiveSizeGuard(tag),
      createWriteStream(archivePath),
    );

    await extractTar({
      file: archivePath,
      cwd,
      strip: 1,