AEOS
--:--:--

GitHub

ConnectedInstalled

Development · GitHub, Inc. · v2.0.0 · manifest schema 1.0

The source-control connector, and the first with a full runtime. Engineering departments raise issues and open pull requests through it, the Knowledge Graph projects repositories as entities once they are synchronised, and inbound webhook deliveries become internal events the bus fans out. It is the connector most likely to be called on a workflow completion, which is why it sits in the development category rather than productivity.

Last sync
just now
Health
100/100
Rate ceiling
900/min
Webhooks
supported

Add to the estate and begin the authentication handshake. Every operation is a state transition inside AI-EOS — no external service is contacted.

Provider Runtime

21/21 served

Implements all twenty-one capabilities the GitHub manifest declares, validates the six configuration fields the development category defines, counts what the connection holds, and declares the topics, workflow actions, graph entities, insights, metrics and agent archetypes this connector offers the rest of the platform. Operations are described rather than performed — the request shape, the returned figures and the topics raised are the ones a real implementation has.

v1.0.0
Runtime
plugin version
1.0
Contract
provider schema
21
Operations
21 declared
9
Topics raised
onto the event bus
Capability coverage100% of the manifest
Operations
  • Read repositoriesrepo.read

    Lists repositories in scope with their default branch, visibility and last push.

    Reads: orgrepositoriesRaises: nothing
  • Write issuesissue.write

    Opens, updates, assigns or closes an issue on behalf of a workflow or an agent.

    Reads: orgrepositoriesRaises: github.issue.createdgithub.issue.closed
  • Review pull requestspr.review

    Posts a review, approves, or requests a reviewer, as the acting agent.

    Reads: orgrepositoriesRaises: github.pull_request.approved
  • Search codecode.search

    Queries across source in scope. The Knowledge Graph's route into the codebase.

    Reads: orgrepositoriesRaises: nothing
  • Read organisationsorg.read

    Enumerates the organisations this grant covers and the repositories each owns.

    Reads: orgRaises: nothing
  • Read issuesissue.read

    Ingests open issues with their labels, assignees and age, for department boards.

    Reads: orgrepositoriesRaises: nothing
  • Read pull requestspr.read

    Open pull requests with their reviewers, check state and time since first review.

    Reads: orgrepositoriesRaises: nothing
  • Write pull requestspr.write

    Opens a pull request, updates it, or merges it once every gate has cleared.

    Reads: orgrepositoriesdefaultBranchRaises: github.pull_request.createdgithub.pull_request.merged
  • Read commitscommit.read

    Commit history and authorship on the configured branch, for velocity and provenance.

    Reads: orgrepositoriesdefaultBranchRaises: nothing
  • Read branchesbranch.read

    Branches with their protection rules and divergence from the default branch.

    Reads: orgrepositoriesdefaultBranchRaises: nothing
  • Write branchesbranch.write

    Creates a branch for a discrete piece of work, or deletes one that is finished.

    Reads: orgrepositoriesdefaultBranchRaises: github.branch.createdgithub.branch.deleted
  • Read releasesrelease.read

    Published releases, their tags and their attached assets.

    Reads: orgrepositoriesRaises: nothing
  • Publish releasesrelease.write

    Cuts a release from a tag on the target branch and publishes its notes.

    Reads: orgrepositoriesdefaultBranchRaises: github.release.published
  • Read Actions workflowspipeline.read

    The CI workflow definitions each repository in scope declares.

    Reads: orgrepositoriesRaises: nothing
  • Read workflow runspipeline.run.read

    Run history with conclusions and durations — the input to deployment frequency.

    Reads: orgrepositoriesRaises: nothing
  • Trigger a workflowpipeline.trigger

    Dispatches an Actions run against a named ref, with the caller's inputs.

    Reads: orgrepositoriesdefaultBranchRaises: github.workflow.completed
  • Read discussionsdiscussion.read

    Discussion threads and their answers, for the Knowledge Graph and support triage.

    Reads: orgrepositoriesRaises: nothing
  • Read projectsproject.read

    Project boards with their columns and the items currently on them.

    Reads: orgrepositoriesRaises: nothing
  • Read labelslabel.read

    The label vocabulary in scope, for classifying incoming work automatically.

    Reads: orgrepositoriesRaises: nothing
  • Read milestonesmilestone.read

    Milestones and their completion, which is most of what release readiness reads.

    Reads: orgrepositoriesRaises: nothing
  • Read contributorscontributor.read

    Contributors and their recent activity, for Agent Fleet provenance.

    Reads: orgrepositoriesRaises: nothing
Readiness checks
  • Organisationadvisory

    No organisation set. Every organisation the grant covers is in scope, which is correct for a single-org estate and expensive for any other.

  • Repository selectionadvisory

    No selection. Every repository the grant covers is in scope — narrow it here rather than in each caller.

  • Default branchadvisory

    Calls that name no branch target main.

  • Sync frequencyadvisory

    Reconciling every 15m, inside the 5-minute floor and the 24-hour ceiling.

  • Retry limitadvisory

    Failing operations are retried 3 times before entering the error queue.

  • Enterprise endpointadvisory

    No base URL set — calls resolve against the vendor's public API.

  • Credentialadvisory

    The Auth Manager reports a usable credential reference — operations may be dispatched.

A blocking failure stops the runtime dispatching and costs health points. The plugin states the fact; the Health Monitor prices it, alongside every other penalty.

Configuration in effect
defaultBranch
main
Provider default — the operator has set no value.
syncFrequency
15m
Provider default — the operator has set no value.
retryLimit
3
Provider default — the operator has set no value.

Operator values over provider defaults. A blank field takes the default, which is declared by the plugin and printed here rather than hidden inside an operation.

Inventory

derived
160
Repositories
Repositories the current selection covers.
5
Organisations
Organisations this grant can reach.
492
Open issues
Across every repository in scope.
10
Open pull requests
Awaiting review, checks or merge.
10
Protected branches
Branches carrying a protection rule.
25
Releases
Published releases across the selection.
236
Workflow runs · 24h
Actions runs in the trailing window.
24
Contributors
Distinct authors with recent activity.

What this connection holds on the far side, counted by the connector's own runtime — the Hub does not know what a repository is and does not learn. Figures are derived from the configured scope, not measured; narrowing the selection narrows them.

Platform Surface

declared

What this connector offers the other modules. Every line is a declaration — nothing below is projected, charted or executed yet. Each consuming module builds against the declaration when it is ready to, which is what lets a connector extend six modules without any of them naming it.

Event topics raised12

Inbound deliveries and outbound operations both raise these onto the internal bus. The Hub is the emitter — an external platform cannot reach the bus, which is what stops it raising arbitrary internal events.

  • Repository Connectedgithub.repository.connected

    A repository entered the connector's selection and will now be synchronised.

  • Repository Disconnectedgithub.repository.disconnected

    A repository left the selection. Its projected entities become stale from this point.

  • Issue Createdgithub.issue.created

    An issue was opened, by an agent through the gateway or by a human on the platform.

  • Issue Closedgithub.issue.closed

    An issue reached a terminal state. The department board item it backs can close with it.

  • Pull Request Createdgithub.pull_request.created

    A pull request was opened against a tracked branch.

  • Pull Request Approvedgithub.pull_request.approved

    A review cleared a pull request. The gate a workflow was waiting on may now be satisfied.

  • Pull Request Mergedgithub.pull_request.merged

    Work landed on the base branch. The strongest single signal of code velocity.

  • Commit Pushedgithub.commit.pushed

    Commits reached a tracked branch. Inbound only — nothing in AI-EOS pushes.

  • Release Publishedgithub.release.published

    A release was cut and published. The event the commerce and messaging chains care about.

  • Actions Workflow Completedgithub.workflow.completed

    A CI run finished, with a conclusion. Namespaced so it cannot be mistaken for the Workflow Engine's own topic.

  • Branch Createdgithub.branch.created

    A branch appeared — usually the first observable step of a piece of work.

  • Branch Deletedgithub.branch.deleted

    A branch was removed, normally after its pull request merged.

Routed by the event bus alongside the platform's own topics. See the fan-out chains.

Workflow actions8

What a future workflow step can request. Several share one capability — the capability is what the gateway routes on, the action is what an operator building a workflow recognises.

  • Create Issueissue.write

    Opens an issue from a blocked workflow, a critical recommendation or an agent's finding.

  • Assign Issueissue.write

    Routes an existing issue to a human or to an agent's linked account.

  • Create Pull Requestpr.write

    Opens a pull request from a work branch onto the configured base.

  • Merge Pull Requestpr.write

    Merges once every gate has cleared. The approval gate is the Workflow Engine's, not GitHub's.

  • Request Reviewpr.review

    Asks a named reviewer, or the agent seat standing in for one, to review.

  • Create Branchbranch.write

    Cuts a branch for a discrete piece of work, from the configured default.

  • Create Releaserelease.write

    Publishes a release from a tag, with notes generated from what merged.

  • Trigger GitHub Actionspipeline.trigger

    Dispatches a CI run against a ref, with the workflow step's inputs.

Knowledge Graph entities7

Node kinds this connector would project. External entities enter the graph on exactly the terms internal ones do — the graph owns neither, and no database change is implied by any of it.

  • Repositoryroot noderepo.read

    The root external entity. Everything else in this list hangs off one, or references one.

  • Filechild of repositorycode.search

    Projected on demand rather than exhaustively — a graph node per file in every repository would swamp every internal entity combined.

  • Issuechild of repositoryissue.read

    Links to the department board item it backs, so internal and external work are one chain.

  • Pull Requestchild of repositorypr.read

    Links to the workflow whose gate it satisfies, and to the developers who reviewed it.

  • Commitchild of repositorycommit.read

    Carries authorship, which is the edge that makes per-agent contribution provenance possible.

  • Developerroot nodecontributor.read

    A root, not a child of a repository — a contributor spans repositories and would otherwise be duplicated per one.

  • Projectroot nodeproject.read

    A board spanning repositories. The external counterpart of a company project.

Decision Engine insights7

Advisory reads this connector's data would support. The Decision Engine sees one instant and stores no history, so each insight states whether it is instantaneous or needs a series.

  • Repository Healthrepo.read · issue.read · pr.read · pipeline.run.read

    Instantaneous. Open issue age, stale pull requests and failing runs, scored the way connector health already is.

  • PR Throughputpr.read · commit.read

    Needs a series. Merged pull requests per cycle is meaningless without the cycles before it.

  • Deployment Riskpipeline.run.read · pr.read · branch.read

    Instantaneous. Failing runs on the default branch, unprotected branches, and merges without review.

  • Release Readinessmilestone.read · pr.read · pipeline.run.read

    Instantaneous. Milestone completion against open blockers — the closest thing to a checkable answer here.

  • Technical Debtissue.read · label.read · code.search

    Instantaneous. Issue volume under the debt labels the operator's own vocabulary defines.

  • Blocked Pull Requestspr.read · pipeline.run.read

    Instantaneous. Pull requests waiting on a review or a failing check, ranked by how long they have waited.

  • Code Velocitycommit.read · pr.read · contributor.read

    Needs a series. The Decision Engine's largest existing gap, and the strongest argument for storing history.

Intelligence metrics8

Figures this connector would publish to the Intelligence Center. Each names the capability that supplies it, so a metric cannot be charted for a grant that does not cover the read behind it.

  • Repositoriesrepositoriesrepo.read

    Size of the estate under source control.

  • Open Issuesissuesissue.read

    Outstanding work visible outside AI-EOS.

  • Merged Pull Requestspull requests / cyclepr.read

    The delivery figure every other engineering metric is read against.

  • Deployment Frequencyruns / daypipeline.run.read

    Successful runs of the deployment workflow, per day.

  • Releasesreleasesrelease.read

    Published releases in the window.

  • Commit Activitycommits / daycommit.read

    Commits reaching tracked branches.

  • Workflow Success Rate% of runspipeline.run.read

    Runs concluding successfully. The CI counterpart of the gateway's error rate.

  • Health Trend/100 over timerepo.read

    Repository health as a series. Requires stored history, which no module has yet.

Agent archetypes served7

Shapes of agent this connector was built for, and the capabilities each requests. Never a connector key — an agent that could name a connector could import one, and the Fleet's isolation would be a convention rather than a structure.

  • Developer Agentrepo.read · branch.write · pr.write · issue.read · code.search

    Cuts a branch, does the work, opens the pull request. The heaviest consumer of the write capabilities.

  • Code Review Agentpr.read · pr.review · commit.read · code.search

    Reads a diff and posts a review. Never merges — merging is a gate the Workflow Engine holds.

  • QA Agentpipeline.run.read · issue.write · pr.read · label.read

    Watches runs, opens an issue when one fails, and labels it from the operator's own vocabulary.

  • DevOps Agentpipeline.read · pipeline.run.read · pipeline.trigger · branch.read

    Owns the CI surface: reads definitions, dispatches runs, and reports what came back.

  • Release Managermilestone.read · pr.read · release.read · release.write

    Assembles a release from what merged, and publishes it once the milestone closes.

  • Architecture Agentcode.search · repo.read · commit.read · discussion.read

    Reads across repositories for structure and drift. Read-only by design — advisory, like the Decision Engine.

  • Research Agentcode.search · discussion.read · project.read · contributor.read

    Gathers context for the Knowledge Graph and the Memory System. Writes nothing to the platform.

Archetypes, not roster entries. The Agent Fleet's own registry is unchanged by this connector existing.

Health

100/100

Healthy — 181,440 calls in 24h at 647ms mean, 0.5% failing.

No penalties applied. Credential valid, error rate and latency inside thresholds, every endpoint delivering.

Authentication

Authenticated
Method
OAuth 2.0
Credential
oauth_····b98d
Last verified
1d ago
Principal
AI-EOS Platform · GitHub, Inc.
Expires
360h
Scopes held
7/7
Credential lifetime remainingrenewal window 72h
Scopes
  • repo
  • read:org
  • write:issues
  • write:discussion
  • workflow
  • read:project
  • read:user
Also accepted
  • Personal Access Token8760h

    A long-lived token minted by a named human and scoped by them. Acts as that person, not as the platform.

Prepared, not selectable yet. The Auth Manager derives this connector's state from the method currently in force; switching would be a lifecycle operation, and the handshake below would be rebuilt from the new method's row with no code changing.

Handshake · OAuth 2.0
  1. 1.InitiateThe Hub prepares a OAuth 2.0 request for GitHub, Inc..
  2. 2.Supply client idexternalProvided on GitHub, Inc.'s authorisation screen, not in AI-EOS.
  3. 3.Supply client secretexternalProvided on GitHub, Inc.'s authorisation screen, not in AI-EOS.
  4. 4.Supply redirect uriexternalProvided on GitHub, Inc.'s authorisation screen, not in AI-EOS.
  5. 5.Supply scope grantexternalProvided on GitHub, Inc.'s authorisation screen, not in AI-EOS.
  6. 6.VerifyThe Hub performs one authenticated read to confirm the grant, then records the reference.

Nothing is contacted. The Hub stores no credential material — only a masked reference, the granted scopes and an expiry. There is no field on the auth record a secret could go in, which is a stronger guarantee than a policy of not putting one there.

Capabilities21

  • Read repositoriesrepo.read

    List repositories, branches and commit history.

  • Write issuesissue.write

    Open, update, assign or close an issue from a blocked workflow or a critical alert.

  • Review pull requestspr.review

    Post a review, approve, or request a reviewer, as the acting agent.

  • Search codecode.search

    Query across the organisation's source for the Knowledge Graph.

  • Read organisationsorg.read

    Enumerate organisations, their members and the repositories they own.

  • Read issuesissue.read

    Ingest issues and their state onto department boards.

  • Read pull requestspr.read

    Open pull requests, their reviewers, their checks and their age.

  • Write pull requestspr.write

    Open a pull request, update it, or merge it once its gates clear.

  • Read commitscommit.read

    Commit history and authorship, for provenance and code velocity.

  • Read branchesbranch.read

    Branch list, protection rules and divergence from the default branch.

  • Write branchesbranch.write

    Create or delete a branch for a discrete piece of work.

  • Read releasesrelease.read

    Releases, tags and their published assets.

  • Publish releasesrelease.write

    Cut a release from a tag and publish its notes.

  • Read Actions workflowspipeline.read

    The CI workflow definitions a repository declares. Named pipeline to avoid colliding with the Workflow Engine.

  • Read workflow runspipeline.run.read

    Run history, conclusions and durations, for deployment frequency.

  • Trigger a workflowpipeline.trigger

    Dispatch an Actions run against a named ref.

  • Read discussionsdiscussion.read

    Discussion threads, for the Knowledge Graph and support triage.

  • Read projectsproject.read

    Project boards, their columns and the items on them.

  • Read labelslabel.read

    The label vocabulary, for classifying incoming work automatically.

  • Read milestonesmilestone.read

    Milestones and their completion, which is most of release readiness.

  • Read contributorscontributor.read

    Contributors and their activity, for Agent Fleet provenance.

Modules request capabilities, never connectors. A capability offered by two connectors gives the requesting module a fallback it does not have to know about.

Usage · 24h

181,440
Calls
907,200
Records
647ms
Mean latency
0.5%
Error rate
900/min
Rate ceiling
declared by the manifest
56%
Peak usage
saturates at 80%
Peak consumption against ceiling

Event Subscriptions3

  • Workflow Completedworkflow.completed

    A workflow reached its final stage with every gate cleared.

    Raised by workflows · see the fan-out chain

  • Workflow Blockedworkflow.blocked

    A workflow stalled on a dependency or an unapproved gate.

    Raised by workflows · see the fan-out chain

  • Critical Recommendationdecision.critical

    The advisory layer raised something at critical priority.

    Raised by decision-engine · see the fan-out chain

Publisher

First party
Name
AI-EOS
Publisher ID
aeos
Platform vendor
GitHub, Inc.
Support
operations@ai-eos.internal

Published by the platform itself. These manifests ship with the build rather than being fetched.

GitHub, Inc. owns the platform this plugin reaches. AI-EOS authored the manifest.

Version and changelog

Up to date
Installed
2.0.0
Published
2.0.0
Minimum platform
1.0.0
Compatibility
Compatible
Manifest schema
1.0
First published
14 months ago

Requires platform 1.0.0 or newer. This build is 1.0.0.

  • 2.0.0major · 2 months ago
    • Added a provider runtime, so issue, PR and check capabilities dispatch rather than merely being advertised.
    • Named topic-to-capability pairing, replacing the reliance on capability array order.
    • Multi-instance support: a production organisation and a sandbox are now two connections.
  • 1.4.0minor · 7 months ago
    • Subscribed to decision.critical so escalations open an issue.
  • 1.0.0major · 14 months ago
    • First release. OAuth, repository read and issue write.

Permissions and scopes

viewer+

AI-EOS permissions are what this plugin may do insidethe platform, resolved against the API Gateway’s own table. Scopes are what the external platform is asked to allow. They are different systems and neither substitutes for the other.

  • workflow:read4 roles

    Workflows, stages, tasks and approval gates.

  • company:read4 roles

    Companies, departments, executives and the knowledge graph projection.

  • analytics:read4 roles

    Enterprise Intelligence read models and the Decision Engine's outputs.

Requested external scopes
  • repo
  • read:org
  • write:issues
  • write:discussion
  • workflow
  • read:project
  • read:user

Dependencies0

Declares no dependencies. It can be installed against an empty estate.

Whether each is satisfied is resolved against the live estate at install time, not here.

Security

Authentication
OAuth 2.0
Credential storage
Never stored
External scopes
7
AI-EOS permissions
3
Minimum role
viewer
Inbound deliveries
Signature verified
Tenant isolation
Installation state is tenant-scoped

A plugin is a data literal. Nothing in the marketplace executes plugin code, and a plugin cannot bypass the Authentication Manager, the Integration Hub, the API Gateway or a permission check, because it has no code path — the host performs every transition.

The credential is referenced by a masked hint (oauth_····b98d) and nothing else. The auth state type has no field a credential fits in, so the guarantee is enforced by the type checker rather than by convention.

Privacy

Data leaving AI-EOS
6 capabilities
Data entering AI-EOS
15 capabilities
Modules served
6
Event topics received
3

Direction is declared per capability, so what this plugin can send and what it can receive are both enumerable rather than a matter of trust. It reaches only the modules listed above, and only through capabilities the Integration Hub resolves.

Documentation2

Webhook Manager1

1 active

Logs3

  • Sync1h agoSynchronisation completed — 907,200 records reconciled in 24h.
  • Gateway39m ago181,440 gateway calls in 24h at 647ms mean latency.
  • Registry4d agoConnector v2.0.0 installed against manifest schema 1.0.

Roadmap

  • Projected repositories as first-class Knowledge Graph nodes
  • Per-agent commit attribution feeding the Agent Fleet
  • GitHub Enterprise Server against a configured base URL
  • Fine-grained token scopes narrowed per department rather than per estate

What this connector would gain next. Mirrors the Future Integrations list every module carries in the Navigator registry.