Function resolveGithubFetchRef

src/lib/sources.ts:489–512

* Resolve a GitHub source's ref to a commit SHA, preferring the locked SHA for * deterministic fetches and otherwise resolving the declared ref or default * branch. Returns the on-disk `ref` (SHA when freshly resolved, else locked * ref), the resolved SHA, and the requested ref.

(params: {
  parsed: ParsedSource;
  locked: LockedSource | undefined;
  updateSources: boolean;
  sourceKey: string;
  client: GitHubClient;
  logger: Logger;
})

 * ref), the resolved SHA, and the requested ref.
 */
async function resolveGithubFetchRef(params: {
  parsed: ParsedSource;
  locked: LockedSource | undefined;
  updateSources: boolean;
  sourceKey: string;
  client: GitHubClient;
  logger: Logger;
}): Promise<{ ref: string; resolvedSha: string; requestedRef: string | undefined }> {
  const { parsed, locked, updateSources, sourceKey, client, logger } = params;
  if (locked && !updateSources) {
    // Use the locked SHA for deterministic fetching
    logger.debug(`Using locked ref for ${sourceKey}: ${locked.resolvedRef}`);
    return {
      ref: locked.resolvedRef,
      resolvedSha: locked.resolvedRef,
      requestedRef: locked.requestedRef,
    };
  }
  // Resolve the ref (or default branch) to a SHA
  const requestedRef = parsed.ref ?? (await client.getDefaultBranch(parsed.owner, parsed.repo));
  const resolvedSha = await client.resolveRefToSha(parsed.owner, parsed.repo, requestedRef);
  logger.debug(`Resolved ${sourceKey} ref "${requestedRef}" to SHA: ${resolvedSha}`);
  return { ref: resolvedSha, resolvedSha, requestedRef };
}

/**
 * Fallback path used when an explicit single-skill source points at a flat skill