feat: add toolpath-github crate for GitHub PR provenance

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to the Toolpath workspace are documented here.
 
+## 0.1.0 — toolpath-github
+
+### toolpath-github 0.1.0
+
+- New crate: derive Toolpath Path documents from GitHub pull requests via the REST API
+- Every PR event becomes a Step: commits (with per-file diffs), inline review comments, PR discussion comments, review decisions (approve/reject), and CI check runs
+- Platform-agnostic artifact URIs: `review://` for code review artifacts, `ci://` for CI artifacts
+- `derive_pull_request()` fetches all data and builds a complete provenance DAG
+- `list_pull_requests()` lists PRs with summary metadata
+- `resolve_token()` checks `GITHUB_TOKEN` env var, falls back to `gh auth token`
+- Configurable: `--no-ci` and `--no-comments` flags to exclude non-code events
+- CLI: `path derive github --repo owner/repo --pr 42` and `path list github --repo owner/repo`
+
 ## 0.5.0 — toolpath-convo / 0.6.2 — toolpath-claude
 
 ### toolpath-convo 0.5.0

CLAUDE.md

@@ -14,6 +14,7 @@ crates/
   toolpath/                     # core types, builders, serde, query API
   toolpath-convo/               # provider-agnostic conversation types and traits
   toolpath-git/                 # derive from git repos (git2)
+  toolpath-github/              # derive from GitHub pull requests (REST API)
   toolpath-claude/              # derive from Claude conversation logs
   toolpath-dot/                 # Graphviz DOT rendering
   toolpath-cli/                 # unified CLI (binary: path)
@@ -30,6 +31,7 @@ toolpath-cli (binary: path)
  ├── toolpath           (core types)
  ├── toolpath-convo     (conversation abstraction)
  ├── toolpath-git     → toolpath
+ ├── toolpath-github  → toolpath
  ├── toolpath-claude  → toolpath, toolpath-convo
  └── toolpath-dot     → toolpath
 ```
@@ -52,13 +54,15 @@ The binary is called `path` (package: `toolpath-cli`):
 
 ```bash
 cargo run -p toolpath-cli -- derive git --repo . --branch main --pretty
+cargo run -p toolpath-cli -- derive github --repo owner/repo --pr 42 --pretty
 cargo run -p toolpath-cli -- derive claude --project /path/to/project
 cargo run -p toolpath-cli -- render dot --input doc.json
 cargo run -p toolpath-cli -- query dead-ends --input doc.json
 cargo run -p toolpath-cli -- query ancestors --input doc.json --step-id step-003
 cargo run -p toolpath-cli -- query filter --input doc.json --actor "agent:"
 cargo run -p toolpath-cli -- merge doc1.json doc2.json --title "Combined"
 cargo run -p toolpath-cli -- list git --repo .
+cargo run -p toolpath-cli -- list github --repo owner/repo
 cargo run -p toolpath-cli -- track init --file src/main.rs --actor "human:alex"
 cargo run -p toolpath-cli -- validate --input doc.json
 ```
@@ -78,6 +82,7 @@ Tests live alongside the code (`#[cfg(test)] mod tests`), plus `toolpath-cli` ha
 - `toolpath`: 32 unit + 9 doc tests (serde roundtrip, builders, query)
 - `toolpath-convo`: 28 unit + 1 doc test (types, enrichment, display)
 - `toolpath-git`: 33 unit + 3 doc tests (derive, branch detection, diffstat)
+- `toolpath-github`: 28 unit + 2 doc tests (mapping, DAG construction, fixtures)
 - `toolpath-claude`: 216 unit + 5 doc tests (path resolution, conversation reading, query, chaining, watcher, derive)
 - `toolpath-dot`: 30 unit + 2 doc tests (render, visual conventions, escaping)
 - `toolpath-cli`: 120 unit + 8 integration tests (all commands, track sessions, merge, validate, roundtrip)
@@ -111,7 +116,7 @@ When changing a crate's public API (new types, new trait impls, new public metho
 
 **Release script** (`scripts/release.sh`) publishes in dependency order:
 - Tier 1: `toolpath`, `toolpath-convo` (no workspace deps)
-- Tier 2: `toolpath-git`, `toolpath-dot`, `toolpath-claude` (depend on tier 1)
+- Tier 2: `toolpath-git`, `toolpath-github`, `toolpath-dot`, `toolpath-claude` (depend on tier 1)
 - Tier 3: `toolpath-cli` (depends on everything)
 
 Build the site after changes: `cd site && pnpm run build` (should produce 7 pages).