wip v28

Author: geraldarthurdavis

packages/github/src/__tests__/jwt-helper.test.ts

@@ -32,6 +32,14 @@ describe('GitHub App JWT helpers', () => {
     expect(generateGitHubAppJWT('244206', base64PrivateKey).split('.')).toHaveLength(3);
   });
 
+  it('reconstructs single-line PEM values that preserve markers but lose line breaks', () => {
+    const privateKey = createPrivateKeyPem();
+    const singleLinePrivateKey = privateKey.replace(/\n/g, ' ');
+
+    expect(normalizeGitHubAppPrivateKey(singleLinePrivateKey)).toBe(privateKey.trim());
+    expect(generateGitHubAppJWT('244206', singleLinePrivateKey).split('.')).toHaveLength(3);
+  });
+
   it('rejects local private-key paths with an actionable configuration error', () => {
     expect(() =>
       normalizeGitHubAppPrivateKey('/Users/example/Downloads/bitcode.private-key.pem')

packages/github/src/auth/jwt-helper.ts

@@ -45,6 +45,20 @@ function decodeBase64Pem(value: string): string | null {
   }
 }
 
+function canonicalizePem(value: string): string {
+  const match = value.match(
+    /(-----BEGIN [A-Z ]*PRIVATE KEY-----)([\s\S]*?)(-----END [A-Z ]*PRIVATE KEY-----)/,
+  );
+  if (!match) return value;
+
+  const [, begin = '', body = '', end = ''] = match;
+  const compactBody = body.replace(/\s/g, '');
+  if (!compactBody) return value;
+
+  const wrappedBody = compactBody.match(/.{1,64}/g)?.join('\n') ?? compactBody;
+  return `${begin}\n${wrappedBody}\n${end}`;
+}
+
 export function normalizeGitHubAppPrivateKey(privateKey: string): string {
   let key = stripWrappingQuotes(privateKey.trim())
     .replace(/\\r\\n/g, '\n')
@@ -58,6 +72,8 @@ export function normalizeGitHubAppPrivateKey(privateKey: string): string {
     key = decodeBase64Pem(key) ?? key;
   }
 
+  key = canonicalizePem(key);
+
   if (/^\/.*\.pem$/i.test(key) || /^[A-Z]:\\.*\.pem$/i.test(key)) {
     throw new Error(
       'GITHUB_PRIVATE_KEY contains a file path. Configure the deployed environment with the PEM contents or a base64-encoded PEM, not a local .pem path.'