fix: token default / download limits and retries

Signed-off-by: Sam Gammon <sam@elide.ventures>

Author: sgammon

__tests__/releases-download.test.ts

@@ -83,6 +83,37 @@ describe('resolveLatestVersion', () => {
     expect(getOctokitMock).toHaveBeenCalledWith('ghp_test_token')
     expect(result.userProvided).toBe(true)
   })
+
+  it('should retry on transient failure and succeed', async () => {
+    requestMock
+      .mockRejectedValueOnce(new Error('rate limit exceeded'))
+      .mockResolvedValueOnce({
+        data: { tag_name: '2.0.0', name: 'Elide 2.0.0' }
+      })
+    const result = await resolveLatestVersion()
+    expect(result.tag_name).toBe('2.0.0')
+    expect(requestMock).toHaveBeenCalledTimes(2)
+    expect(warningMock).toHaveBeenCalledWith(
+      expect.stringContaining('Retrying')
+    )
+  })
+
+  it('should throw after exhausting retries', async () => {
+    requestMock.mockRejectedValue(new Error('quota exhausted'))
+    await expect(resolveLatestVersion()).rejects.toThrow('quota exhausted')
+    expect(requestMock).toHaveBeenCalledTimes(3)
+    expect(errorMock).toHaveBeenCalledWith(
+      expect.stringContaining('rate limit'),
+      expect.objectContaining({ title: 'Rate Limited' })
+    )
+  })
+
+  it('should warn when no token is provided', async () => {
+    await resolveLatestVersion()
+    expect(warningMock).toHaveBeenCalledWith(
+      expect.stringContaining('No GitHub token provided')
+    )
+  })
 })
 
 describe('downloadRelease', () => {

action.yml

@@ -63,6 +63,7 @@ inputs:
   token:
     description: 'GitHub Token'
     required: false
+    default: ${{ github.token }}
 
 outputs:
   path:

dist/index.js

@@ -267,33 +267,70 @@ async function unpackRelease(
   return target
 }
 
+const MAX_RETRIES = 3
+const RETRY_DELAY_MS = 1000
+
 /**
- * Fetch the latest Elide release from GitHub.
+ * Fetch the latest Elide release from GitHub, with retry on transient failures.
  *
  * @param token GitHub token active for this workflow step.
  */
 export async function resolveLatestVersion(
   token?: string
 ): Promise<ElideVersionInfo> {
+  if (!token) {
+    core.warning(
+      'No GitHub token provided. API requests may be rate-limited. ' +
+        'Set the `token` input or ensure GITHUB_TOKEN is available.'
+    )
+  }
   const octokit = token ? github.getOctokit(token) : new Octokit({})
-  const latest = await octokit.request(
-    'GET /repos/{owner}/{repo}/releases/latest',
-    {
-      owner: 'elide-dev',
-      repo: 'elide',
-      headers: GITHUB_DEFAULT_HEADERS
-    }
-  )
 
-  if (!latest) {
-    throw new Error('Failed to fetch the latest Elide version')
-  }
-  const name = latest.data?.name || undefined
-  return {
-    name,
-    tag_name: latest.data.tag_name,
-    userProvided: !!token
+  let lastError: Error | undefined
+  for (let attempt = 1; attempt <= MAX_RETRIES; attempt++) {
+    try {
+      const latest = await octokit.request(
+        'GET /repos/{owner}/{repo}/releases/latest',
+        {
+          owner: 'elide-dev',
+          repo: 'elide',
+          headers: GITHUB_DEFAULT_HEADERS
+        }
+      )
+
+      if (!latest) {
+        throw new Error('Failed to fetch the latest Elide version')
+      }
+      const name = latest.data?.name || undefined
+      return {
+        name,
+        tag_name: latest.data.tag_name,
+        userProvided: !!token
+      }
+    } catch (err) {
+      lastError = err instanceof Error ? err : new Error(String(err))
+      const isRateLimit =
+        lastError.message.includes('rate limit') ||
+        lastError.message.includes('quota exhausted') ||
+        lastError.message.includes('403') ||
+        lastError.message.includes('429')
+
+      if (attempt < MAX_RETRIES) {
+        const delay = RETRY_DELAY_MS * attempt
+        core.warning(
+          `GitHub API request failed (attempt ${attempt}/${MAX_RETRIES}): ${lastError.message}. Retrying in ${delay}ms...`
+        )
+        await new Promise(resolve => setTimeout(resolve, delay))
+      } else if (isRateLimit) {
+        core.error(
+          'GitHub API rate limit exhausted. Provide a token via the `token` input to increase the limit.',
+          { title: 'Rate Limited' }
+        )
+      }
+    }
   }
+
+  throw lastError!
 }
 
 /**