@ai-sdlc/orchestrator 0.4.0 → 0.6.0

package/dist/index.d.ts

@@ -5,7 +5,9 @@ export { validateAgentOutput, type ValidationContext, type ValidationResult, typ
 export { createLogger, type Logger } from './logger.js';
 export { validateConfigFiles, type FileValidationResult } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs, type FixCIOptions } from './fix-ci.js';
-export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, type GitHubEnvConfig, type ValidateAndAuditParams, } from './shared.js';
+export { executeFixReview, countRetryAttempts as countReviewRetryAttempts, fetchReviewFindings, type FixReviewOptions, } from './fix-review.js';
+export { executeTriage, type TriageOptions, type TriageResult } from './triage.js';
+export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, extractIssueId, issueIdToNumber, formatIssueRef, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, type GitHubEnvConfig, type ValidateAndAuditParams, } from './shared.js';
 export { DEFAULT_MODEL, DEFAULT_GITHUB_ORG, DEFAULT_GITHUB_REPO, DEFAULT_GITHUB_REPOSITORY, DEFAULT_CONFIG_DIR_NAME, DEFAULT_SANDBOX_MEMORY_MB, DEFAULT_SANDBOX_CPU_PERCENT, DEFAULT_SANDBOX_NETWORK_POLICY, DEFAULT_SANDBOX_TIMEOUT_MS, defaultSandboxConstraints, DEFAULT_RUNNER_TIMEOUT_MS, DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_FILES_PER_CHANGE, DEFAULT_REQUIRE_TESTS, DEFAULT_BLOCKED_PATHS, DEFAULT_MAX_FIX_ATTEMPTS, DEFAULT_MAX_LOG_LINES, DEFAULT_GH_CLI_TIMEOUT_MS, DEFAULT_JIT_TTL_MS, DEFAULT_JIT_SCOPE, DEFAULT_BRANCH_TEMPLATE, DEFAULT_BRANCH_PATTERN, DEFAULT_PR_TITLE_TEMPLATE, DEFAULT_PR_FOOTER, DEFAULT_COMPLEXITY_THRESHOLDS, DEFAULT_MAX_LINES_PER_PR, DEFAULT_ANALYSIS_INCLUDE, DEFAULT_ANALYSIS_EXCLUDE, DEFAULT_GIT_HISTORY_DAYS, DEFAULT_HOTSPOT_THRESHOLD, NOTIFICATION_TITLES, DEFAULT_MODEL_COSTS, DEFAULT_COST_BUDGET_USD, DEFAULT_DASHBOARD_REFRESH_MS, PROGRESSIVE_GATE_PROFILES, DEFAULT_LINT_COMMAND, DEFAULT_FORMAT_COMMAND, DEFAULT_COMMIT_MESSAGE_TEMPLATE, DEFAULT_COMMIT_CO_AUTHOR, DEFAULT_OPENAI_API_URL, DEFAULT_OPENAI_MODEL, DEFAULT_ANTHROPIC_API_URL, DEFAULT_ANTHROPIC_MODEL, DEFAULT_GENERIC_LLM_MODEL, DEFAULT_LLM_TIMEOUT_MS, DEFAULT_LLM_MAX_TOKENS, DEFAULT_LLM_SYSTEM_PROMPT, DEFAULT_DOCKER_IMAGE, DEFAULT_WORKFLOW_FILE, DEFAULT_LABEL_TO_SKILL_MAP, DEFAULT_ANALYSIS_CACHE_TTL_MS, } from './defaults.js';
 export type { ComplexityBand, GateProfile } from './defaults.js';
 export { renderTemplate } from './notifications.js';
@@ -16,19 +18,25 @@ export { createPipelineMetricStore, createInstrumentedEnforcement, createInstrum
 export { createPipelineDiscovery, findMatchingAgent, resolveAgentForIssue, matchAgentBySkill, createStubAgentCardFetcher, createPipelineAgentCardFetcher, } from './discovery.js';
 export { createStructuredConsoleLogger, createStructuredBufferLogger, } from './structured-logger.js';
 export { startWatch, type WatchOptions, type WatchHandle } from './watch.js';
+export { computePriority, rankWorkItems, type PriorityScore, type PriorityInput, type PriorityConfig, } from './priority.js';
+export { checkAction, enforceAction, DEFAULT_BLOCKED_ACTIONS, type ActionEnforcementResult, } from './action-enforcement.js';
+export { scoreIssueForAdmission, mapIssueToPriorityInput, type AdmissionInput, type AdmissionThresholds, type IssueAdmissionResult, type AuthorAssociation, } from './admission-score.js';
+export { executeReview, type ReviewContext, type ReviewOptions } from './review.js';
 export { createPipelineOrchestration, executePipelineOrchestration, validatePipelineHandoffs, sequential, parallel, hybrid, hierarchical, swarm, validateHandoff, simpleSchemaValidate, } from './orchestration.js';
 export { createPipelineRegoEvaluator, createPipelineCELEvaluator, createPipelineABACHook, createPipelineExpressionEvaluator, createPipelineLLMEvaluator, evaluatePipelineGate, scorePipelineComplexity, evaluatePipelineComplexityRouting, } from './policy-evaluators.js';
-export { createPipelineAdapterRegistry, createPipelineWebhookBridge, resolveAdapterFromGit, resolveInfrastructure, scanPipelineAdapters, } from './adapters.js';
+export { createPipelineAdapterRegistry, createPipelineWebhookBridge, resolveAdapterFromGit, resolveInfrastructure, resolveIssueTrackerFromConfig, scanPipelineAdapters, } from './adapters.js';
 export { createPipelineReconciler, createGateReconciler, createAutonomyReconciler, hasResourceChanged, fingerprintResource, } from './reconcilers.js';
 export { createFileAuditLog, verifyAuditIntegrity, loadAuditEntries, rotateAuditLog, computeAuditHash, } from './audit-extended.js';
 export { checkFrameworkCompliance, getControlCatalog, getFrameworkMappings, listSupportedFrameworks, } from './compliance-extended.js';
 export { createSilentLogger, withPipelineSpanSync, getPipelineTracer, validateResourceSchema, } from './telemetry-extended.js';
-export { ClaudeCodeRunner, ClaudeCodeRunner as GitHubActionsRunner, GenericLLMRunner, CopilotRunner, CursorRunner, CodexRunner, RunnerRegistry, createRunnerRegistry, type AgentRunner, type AgentContext, type AgentResult, type GenericLLMConfig, type RegisteredRunner, } from './runners/index.js';
+export { ClaudeCodeRunner, ClaudeCodeRunner as GitHubActionsRunner, GenericLLMRunner, CopilotRunner, CursorRunner, CodexRunner, RunnerRegistry, createRunnerRegistry, SecurityTriageRunner, ReviewAgentRunner, REVIEW_PROMPTS, type AgentRunner, type AgentContext, type AgentResult, type AgentProgressEvent, type GenericLLMConfig, type RegisteredRunner, type SecurityTriageConfig, type TriageVerdict, type ReviewAgentConfig, type ReviewType, type ReviewFinding, type ReviewVerdict, } from './runners/index.js';
 export type { TokenUsage } from './runners/index.js';
 export { SlackMessenger, TeamsMessenger, NotificationRouter } from './notifications/index.js';
 export type { SlackConfig, TeamsConfig, PipelineEvent, PipelineEventType, NotificationRoute, NotificationTemplate, } from './notifications/index.js';
 export { StateStore } from './state/index.js';
-export type { HotspotRecord, RoutingDecision, CostLedgerEntry, GateThresholdOverride, AutonomyEvent, AutonomyEventType, HandoffEvent, DeploymentRecord, DeploymentRecordState, RolloutStepRecord, AuditEntryRecord, } from './state/index.js';
+export type { HotspotRecord, RoutingDecision, CostLedgerEntry, GateThresholdOverride, AutonomyEvent, AutonomyEventType, HandoffEvent, DeploymentRecord, DeploymentRecordState, RolloutStepRecord, AuditEntryRecord, PriorityCalibrationSample, ToolSequenceEvent, WorkflowPattern, PatternProposal, } from './state/index.js';
+export { readToolSequenceJSONL, readSessionMetaFiles, sessionMetaToEvents, categorizeAction, DEFAULT_DETECTION_OPTIONS, } from './workflow-patterns/index.js';
+export type { CanonicalStep, NGram, DetectedPattern, DetectionOptions, RawToolSequenceEntry, SessionMeta, } from './workflow-patterns/index.js';
 export { createKubernetesTarget, createVercelTarget, createFlyioTarget, createHttpMetricsCollector, createStubMetricsCollector, RolloutController, } from './deploy/index.js';
 export type { DeploymentTargetConfig, HealthCheckConfig, DeploymentState, DeploymentResult, DeploymentTarget, ExecFn, FetchFn, KubernetesConfig, VercelConfig, FlyioConfig, CanaryStep, CanaryConfig, BlueGreenConfig, RollingConfig, RolloutStrategy, RolloutPhase, RolloutStatus, RolloutMetrics, MetricsSource, RolloutControllerConfig, HttpMetricsConfig, } from './deploy/index.js';
 export { getComplexityBand, getGateProfile, adjustEnforcement, adjustGateForComplexity, adjustGatesForComplexity, computeGateAdjustments, } from './progressive-gates.js';
@@ -67,5 +75,7 @@ export type { ArchiveManifest, ArchivalOptions } from './audit-archival.js';
 export { Orchestrator, type OrchestratorConfig, type WebhookConfig } from './orchestrator.js';
 export type { OrchestratorPlugin, PluginContext, BeforeRunEvent, AfterRunEvent, RunErrorEvent, } from './plugin.js';
 export { CostGovernancePlugin } from './cost-governance.js';
+export { PipelineCycleDetector, createStageMarker, parseStageInvocations, DEFAULT_CYCLE_LIMITS, type PipelineStage, type CycleConfig, type CycleDetectionResult, } from './pipeline-cycle-detector.js';
+export { checkAndHandleCycle, createCycleDetectorFromConfig, type CycleHandlerOptions, type CycleCheckResult, } from './cycle-utils.js';
 export type { ApiVersion, Metadata, Condition, SecretRef, MetricCondition, Duration, Resource, TriggerFilter, Trigger, Provider, RoutingStrategy, ComplexityThreshold, Routing, Stage, PipelineSpec, PipelinePhase, PipelineStatus, Pipeline, AgentConstraints, HandoffContractRef, Handoff, SkillExample, Skill, AgentCard, AgentRoleSpec, AgentRoleStatus, AgentRole, GateScope, MetricRule, ToolRule, ReviewerRule, DocumentationRule, ProvenanceRule, ExpressionRule, GateRule, EnforcementLevel, Override, RetryPolicy, Evaluation, Gate, QualityGateSpec, QualityGateStatus, QualityGate, Permissions, ApprovalRequirement, Guardrails, MonitoringLevel, AutonomyLevel, PromotionCriteria, DemotionTrigger, AgentAutonomyStatus, AutonomyPolicySpec, AutonomyPolicyStatus, AutonomyPolicy, AdapterInterface, HealthCheck, AdapterBindingSpec, AdapterBindingStatus, AdapterBinding, AnyResource, ResourceKind, ValidationError, GateVerdict, DemotionResult, ComplexityFactor, AuthorizationContext, AuthorizationResult, AuthIdentity, AuthenticationResult, Authenticator, MutatingGateContext, ExpressionEvaluator, ExpressionVerdict, LLMEvaluationDimension, LLMEvaluationResult, LLMGateVerdict, AgentExecutionState, HandoffValidationError, SchemaResolver, SchemaValidationError, MemoryTier, MemoryEntry, WorkingMemory, ShortTermMemory, LongTermMemory, SharedMemory, EpisodicMemory, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -6,8 +6,10 @@ export { validateAgentOutput, } from './validate-agent-output.js';
 export { createLogger } from './logger.js';
 export { validateConfigFiles } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs } from './fix-ci.js';
+export { executeFixReview, countRetryAttempts as countReviewRetryAttempts, fetchReviewFindings, } from './fix-review.js';
+export { executeTriage } from './triage.js';
 // Shared utilities
-export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, } from './shared.js';
+export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, extractIssueId, issueIdToNumber, formatIssueRef, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, } from './shared.js';
 // Defaults
 export { DEFAULT_MODEL, DEFAULT_GITHUB_ORG, DEFAULT_GITHUB_REPO, DEFAULT_GITHUB_REPOSITORY, DEFAULT_CONFIG_DIR_NAME, DEFAULT_SANDBOX_MEMORY_MB, DEFAULT_SANDBOX_CPU_PERCENT, DEFAULT_SANDBOX_NETWORK_POLICY, DEFAULT_SANDBOX_TIMEOUT_MS, defaultSandboxConstraints, DEFAULT_RUNNER_TIMEOUT_MS, DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_FILES_PER_CHANGE, DEFAULT_REQUIRE_TESTS, DEFAULT_BLOCKED_PATHS, DEFAULT_MAX_FIX_ATTEMPTS, DEFAULT_MAX_LOG_LINES, DEFAULT_GH_CLI_TIMEOUT_MS, DEFAULT_JIT_TTL_MS, DEFAULT_JIT_SCOPE, DEFAULT_BRANCH_TEMPLATE, DEFAULT_BRANCH_PATTERN, DEFAULT_PR_TITLE_TEMPLATE, DEFAULT_PR_FOOTER, DEFAULT_COMPLEXITY_THRESHOLDS, DEFAULT_MAX_LINES_PER_PR, DEFAULT_ANALYSIS_INCLUDE, DEFAULT_ANALYSIS_EXCLUDE, DEFAULT_GIT_HISTORY_DAYS, DEFAULT_HOTSPOT_THRESHOLD, NOTIFICATION_TITLES, DEFAULT_MODEL_COSTS, DEFAULT_COST_BUDGET_USD, DEFAULT_DASHBOARD_REFRESH_MS, PROGRESSIVE_GATE_PROFILES, DEFAULT_LINT_COMMAND, DEFAULT_FORMAT_COMMAND, DEFAULT_COMMIT_MESSAGE_TEMPLATE, DEFAULT_COMMIT_CO_AUTHOR, DEFAULT_OPENAI_API_URL, DEFAULT_OPENAI_MODEL, DEFAULT_ANTHROPIC_API_URL, DEFAULT_ANTHROPIC_MODEL, DEFAULT_GENERIC_LLM_MODEL, DEFAULT_LLM_TIMEOUT_MS, DEFAULT_LLM_MAX_TOKENS, DEFAULT_LLM_SYSTEM_PROMPT, DEFAULT_DOCKER_IMAGE, DEFAULT_WORKFLOW_FILE, DEFAULT_LABEL_TO_SKILL_MAP, DEFAULT_ANALYSIS_CACHE_TTL_MS, } from './defaults.js';
 // Notifications
@@ -26,12 +28,20 @@ export { createPipelineDiscovery, findMatchingAgent, resolveAgentForIssue, match
 export { createStructuredConsoleLogger, createStructuredBufferLogger, } from './structured-logger.js';
 // Watch mode
 export { startWatch } from './watch.js';
+// Priority scoring (PPA)
+export { computePriority, rankWorkItems, } from './priority.js';
+// Action enforcement
+export { checkAction, enforceAction, DEFAULT_BLOCKED_ACTIONS, } from './action-enforcement.js';
+// Issue admission scoring
+export { scoreIssueForAdmission, mapIssueToPriorityInput, } from './admission-score.js';
+// PR review orchestration
+export { executeReview } from './review.js';
 // Agent orchestration
 export { createPipelineOrchestration, executePipelineOrchestration, validatePipelineHandoffs, sequential, parallel, hybrid, hierarchical, swarm, validateHandoff, simpleSchemaValidate, } from './orchestration.js';
 // Policy evaluators
 export { createPipelineRegoEvaluator, createPipelineCELEvaluator, createPipelineABACHook, createPipelineExpressionEvaluator, createPipelineLLMEvaluator, evaluatePipelineGate, scorePipelineComplexity, evaluatePipelineComplexityRouting, } from './policy-evaluators.js';
 // Adapter ecosystem
-export { createPipelineAdapterRegistry, createPipelineWebhookBridge, resolveAdapterFromGit, resolveInfrastructure, scanPipelineAdapters, } from './adapters.js';
+export { createPipelineAdapterRegistry, createPipelineWebhookBridge, resolveAdapterFromGit, resolveInfrastructure, resolveIssueTrackerFromConfig, scanPipelineAdapters, } from './adapters.js';
 // Reconcilers (generalized names)
 export { createPipelineReconciler, createGateReconciler, createAutonomyReconciler, hasResourceChanged, fingerprintResource, } from './reconcilers.js';
 // Extended audit
@@ -41,11 +51,13 @@ export { checkFrameworkCompliance, getControlCatalog, getFrameworkMappings, list
 // Extended telemetry
 export { createSilentLogger, withPipelineSpanSync, getPipelineTracer, validateResourceSchema, } from './telemetry-extended.js';
 // Runners
-export { ClaudeCodeRunner, ClaudeCodeRunner as GitHubActionsRunner, GenericLLMRunner, CopilotRunner, CursorRunner, CodexRunner, RunnerRegistry, createRunnerRegistry, } from './runners/index.js';
+export { ClaudeCodeRunner, ClaudeCodeRunner as GitHubActionsRunner, GenericLLMRunner, CopilotRunner, CursorRunner, CodexRunner, RunnerRegistry, createRunnerRegistry, SecurityTriageRunner, ReviewAgentRunner, REVIEW_PROMPTS, } from './runners/index.js';
 // Notifications
 export { SlackMessenger, TeamsMessenger, NotificationRouter } from './notifications/index.js';
 // State store
 export { StateStore } from './state/index.js';
+// Workflow pattern detection
+export { readToolSequenceJSONL, readSessionMetaFiles, sessionMetaToEvents, categorizeAction, DEFAULT_DETECTION_OPTIONS, } from './workflow-patterns/index.js';
 // Deployment targets
 export { createKubernetesTarget, createVercelTarget, createFlyioTarget, createHttpMetricsCollector, createStubMetricsCollector, RolloutController, } from './deploy/index.js';
 // Progressive gates
@@ -85,4 +97,7 @@ export { archiveEntries, loadArchivedEntries, verifyArchiveContinuity } from './
 export { Orchestrator } from './orchestrator.js';
 // Cost governance plugin
 export { CostGovernancePlugin } from './cost-governance.js';
+// Pipeline cycle detection
+export { PipelineCycleDetector, createStageMarker, parseStageInvocations, DEFAULT_CYCLE_LIMITS, } from './pipeline-cycle-detector.js';
+export { checkAndHandleCycle, createCycleDetectorFromConfig, } from './cycle-utils.js';
 //# sourceMappingURL=index.js.map

package/dist/orchestrator.d.ts

@@ -74,7 +74,7 @@ export declare class Orchestrator {
     /**
      * Run the full pipeline for a single issue.
      */
-    run(issueNumber: number, overrides?: Partial<ExecuteOptions>): Promise<PipelineResult>;
+    run(issueId: string, overrides?: Partial<ExecuteOptions>): Promise<PipelineResult>;
     /**
      * Start watch mode — continuous reconciliation loop.
      */

package/dist/orchestrator.js

@@ -8,6 +8,7 @@ import { executeFixCI } from './fix-ci.js';
 import { loadConfig } from './config.js';
 import { StateStore } from './state/index.js';
 import { createLogger } from './logger.js';
+import { issueIdToNumber } from './shared.js';
 import { analyzeCodebase } from './analysis/analyzer.js';
 import { buildCodebaseContext } from './analysis/context-builder.js';
 import { DEFAULT_ANALYSIS_CACHE_TTL_MS } from './defaults.js';
@@ -48,14 +49,16 @@ export class Orchestrator {
     /**
      * Run the full pipeline for a single issue.
      */
-    async run(issueNumber, overrides) {
-        const runId = `run-${Date.now()}-${issueNumber}`;
+    async run(issueId, overrides) {
+        const issueNumber = issueIdToNumber(issueId);
+        const runId = `run-${Date.now()}-${issueId}`;
         const startedAt = new Date().toISOString();
         // Record pipeline start in state store
         if (this._state) {
             this._state.savePipelineRun({
                 runId,
-                issueNumber,
+                issueId,
+                issueNumber: issueNumber ?? undefined,
                 pipelineType: 'execute',
                 status: 'running',
                 currentStage: 'init',
@@ -84,11 +87,16 @@ export class Orchestrator {
         }
         // Notify plugins before run
         for (const plugin of this.plugins) {
-            await plugin.beforeRun?.({ runId, issueNumber, startedAt });
+            await plugin.beforeRun?.({
+                runId,
+                issueId,
+                issueNumber: issueNumber ?? undefined,
+                startedAt,
+            });
         }
         const runStart = Date.now();
         try {
-            const result = await executePipeline(issueNumber, {
+            const result = await executePipeline(issueId, {
                 configDir: this.config.configDir,
                 workDir: this.config.workDir,
                 runner: this.config.runner,
@@ -109,7 +117,8 @@ export class Orchestrator {
                     }),
                 });
                 this._state.saveEpisodicRecord({
-                    issueNumber,
+                    issueId,
+                    issueNumber: issueNumber ?? undefined,
                     pipelineType: 'execute',
                     outcome: 'success',
                     filesChanged: result.filesChanged.length,
@@ -118,7 +127,13 @@ export class Orchestrator {
             // Notify plugins after successful run
             const durationMs = Date.now() - runStart;
             for (const plugin of this.plugins) {
-                await plugin.afterRun?.({ runId, issueNumber, result, durationMs });
+                await plugin.afterRun?.({
+                    runId,
+                    issueId,
+                    issueNumber: issueNumber ?? undefined,
+                    result,
+                    durationMs,
+                });
             }
             return result;
         }
@@ -131,7 +146,8 @@ export class Orchestrator {
                     }),
                 });
                 this._state.saveEpisodicRecord({
-                    issueNumber,
+                    issueId,
+                    issueNumber: issueNumber ?? undefined,
                     pipelineType: 'execute',
                     outcome: 'failure',
                     errorMessage: err instanceof Error ? err.message : String(err),
@@ -141,7 +157,13 @@ export class Orchestrator {
             const errorDurationMs = Date.now() - runStart;
             const error = err instanceof Error ? err : new Error(String(err));
             for (const plugin of this.plugins) {
-                await plugin.onError?.({ runId, issueNumber, error, durationMs: errorDurationMs });
+                await plugin.onError?.({
+                    runId,
+                    issueId,
+                    issueNumber: issueNumber ?? undefined,
+                    error,
+                    durationMs: errorDurationMs,
+                });
             }
             throw err;
         }

package/dist/pipeline-cycle-detector.d.ts

@@ -0,0 +1,70 @@
+/**
+ * PipelineCycleDetector — tracks stage invocations per issue/PR across
+ * all workflow runs to detect infinite orchestration loops.
+ *
+ * Uses GitHub issue/PR comments as shared state (hidden HTML markers)
+ * to work across workflow boundaries.
+ */
+import type { IssueTracker } from '@ai-sdlc/reference';
+export type PipelineStage = 'admission' | 'triage' | 'agent' | 'review' | 'fix-ci' | 'fix-review';
+export interface CycleConfig {
+    /** Max invocations per stage (default: 3 for agent stages, 2 for fix stages). */
+    maxInvocations: Record<PipelineStage, number>;
+}
+export interface CycleDetectionResult {
+    cycleDetected: boolean;
+    loopingStages: Array<{
+        stage: PipelineStage;
+        count: number;
+        max: number;
+    }>;
+    totalInvocations: number;
+}
+/**
+ * Default max invocations per stage.
+ * These must be HIGHER than the per-stage retry limits (which are the
+ * primary guard). The cycle detector is a safety net for cross-stage
+ * loops, not a replacement for retry counting.
+ *
+ * Per-stage retry limits: fix-ci=2, fix-review=2
+ * Cycle limits: set to retry_limit + 2 to allow retries + headroom
+ */
+export declare const DEFAULT_CYCLE_LIMITS: Record<PipelineStage, number>;
+/**
+ * Generate HTML comment marker for a stage invocation.
+ * Format: <!-- ai-sdlc-cycle:{stage}:{timestamp} -->
+ */
+export declare function createStageMarker(stage: PipelineStage): string;
+/**
+ * Parse stage invocation markers from comment bodies.
+ * Returns a map of stage -> invocation count.
+ */
+export declare function parseStageInvocations(comments: string[]): Map<PipelineStage, number>;
+export declare class PipelineCycleDetector {
+    private config;
+    constructor(config?: Partial<CycleConfig>);
+    /**
+     * Check if a cycle exists for the given issue/PR by analyzing comment history.
+     * @param pendingStage — if set, adds +1 to this stage's count to account for the upcoming invocation
+     */
+    detectCycle(tracker: IssueTracker, issueOrPrId: string, pendingStage?: PipelineStage): Promise<CycleDetectionResult>;
+    /**
+     * Detect cycle from comment bodies (for testing without IssueTracker).
+     * @param pendingStage — if set, adds +1 to this stage's count for the pending invocation
+     */
+    detectCycleFromComments(comments: string[], pendingStage?: PipelineStage): CycleDetectionResult;
+    /**
+     * Record a stage invocation by creating a marker.
+     * The caller should append this to their comment.
+     */
+    recordInvocation(stage: PipelineStage): string;
+    /**
+     * Get the max invocation limit for a stage.
+     */
+    getMaxInvocations(stage: PipelineStage): number;
+    /**
+     * Update max invocations for specific stages.
+     */
+    updateMaxInvocations(overrides: Partial<Record<PipelineStage, number>>): void;
+}
+//# sourceMappingURL=pipeline-cycle-detector.d.ts.map

package/dist/pipeline-cycle-detector.js

@@ -0,0 +1,111 @@
+/**
+ * PipelineCycleDetector — tracks stage invocations per issue/PR across
+ * all workflow runs to detect infinite orchestration loops.
+ *
+ * Uses GitHub issue/PR comments as shared state (hidden HTML markers)
+ * to work across workflow boundaries.
+ */
+/**
+ * Default max invocations per stage.
+ * These must be HIGHER than the per-stage retry limits (which are the
+ * primary guard). The cycle detector is a safety net for cross-stage
+ * loops, not a replacement for retry counting.
+ *
+ * Per-stage retry limits: fix-ci=2, fix-review=2
+ * Cycle limits: set to retry_limit + 2 to allow retries + headroom
+ */
+export const DEFAULT_CYCLE_LIMITS = {
+    admission: 5,
+    triage: 5,
+    agent: 5,
+    review: 4,
+    'fix-ci': 4,
+    'fix-review': 4,
+};
+/**
+ * Generate HTML comment marker for a stage invocation.
+ * Format: <!-- ai-sdlc-cycle:{stage}:{timestamp} -->
+ */
+export function createStageMarker(stage) {
+    const timestamp = Date.now();
+    return `<!-- ai-sdlc-cycle:${stage}:${timestamp} -->`;
+}
+/**
+ * Parse stage invocation markers from comment bodies.
+ * Returns a map of stage -> invocation count.
+ */
+export function parseStageInvocations(comments) {
+    const counts = new Map();
+    // Non-backtracking pattern: stage names are alphanumeric with optional single hyphens
+    const markerPattern = /<!-- ai-sdlc-cycle:([a-z][a-z0-9-]{0,30}):(\d{1,15}) -->/g;
+    for (const body of comments) {
+        let match;
+        while ((match = markerPattern.exec(body)) !== null) {
+            const stage = match[1];
+            counts.set(stage, (counts.get(stage) ?? 0) + 1);
+        }
+    }
+    return counts;
+}
+export class PipelineCycleDetector {
+    config;
+    constructor(config) {
+        this.config = {
+            maxInvocations: { ...DEFAULT_CYCLE_LIMITS, ...config?.maxInvocations },
+        };
+    }
+    /**
+     * Check if a cycle exists for the given issue/PR by analyzing comment history.
+     * @param pendingStage — if set, adds +1 to this stage's count to account for the upcoming invocation
+     */
+    async detectCycle(tracker, issueOrPrId, pendingStage) {
+        const comments = await tracker.getComments(issueOrPrId);
+        const commentBodies = comments.map((c) => c.body);
+        return this.detectCycleFromComments(commentBodies, pendingStage);
+    }
+    /**
+     * Detect cycle from comment bodies (for testing without IssueTracker).
+     * @param pendingStage — if set, adds +1 to this stage's count for the pending invocation
+     */
+    detectCycleFromComments(comments, pendingStage) {
+        const invocations = parseStageInvocations(comments);
+        // Account for the pending invocation that hasn't been recorded yet
+        if (pendingStage) {
+            invocations.set(pendingStage, (invocations.get(pendingStage) ?? 0) + 1);
+        }
+        const loopingStages = [];
+        let totalInvocations = 0;
+        for (const [stage, count] of invocations.entries()) {
+            totalInvocations += count;
+            const max = this.config.maxInvocations[stage];
+            if (count >= max) {
+                loopingStages.push({ stage, count, max });
+            }
+        }
+        return {
+            cycleDetected: loopingStages.length > 0,
+            loopingStages,
+            totalInvocations,
+        };
+    }
+    /**
+     * Record a stage invocation by creating a marker.
+     * The caller should append this to their comment.
+     */
+    recordInvocation(stage) {
+        return createStageMarker(stage);
+    }
+    /**
+     * Get the max invocation limit for a stage.
+     */
+    getMaxInvocations(stage) {
+        return this.config.maxInvocations[stage];
+    }
+    /**
+     * Update max invocations for specific stages.
+     */
+    updateMaxInvocations(overrides) {
+        this.config.maxInvocations = { ...this.config.maxInvocations, ...overrides };
+    }
+}
+//# sourceMappingURL=pipeline-cycle-detector.js.map

package/dist/plugin.d.ts

@@ -19,18 +19,24 @@ export interface PluginContext {
 }
 export interface BeforeRunEvent {
     runId: string;
-    issueNumber: number;
+    issueId: string;
+    /** @deprecated Use `issueId` instead. */
+    issueNumber?: number;
     startedAt: string;
 }
 export interface AfterRunEvent {
     runId: string;
-    issueNumber: number;
+    issueId: string;
+    /** @deprecated Use `issueId` instead. */
+    issueNumber?: number;
     result: PipelineResult;
     durationMs: number;
 }
 export interface RunErrorEvent {
     runId: string;
-    issueNumber: number;
+    issueId: string;
+    /** @deprecated Use `issueId` instead. */
+    issueNumber?: number;
     error: Error;
     durationMs: number;
 }

package/dist/priority.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Product Priority Algorithm (PPA) — composite scoring module.
+ *
+ * Implements the PPA priority function:
+ *   P(w) = Sα(w) × Dπ(w) × Mφ(w) × Eρ(w) × (1 − Eτ) × (1 + HC(w)) × Cκ(w)
+ *
+ * Each dimension maps real-world product signals into a bounded numeric
+ * range and the multiplicative composite lets any single zero-score
+ * dimension veto the work item.
+ *
+ * RFC reference: PPA section (priority scoring).
+ */
+import type { PriorityScore, PriorityInput, PriorityConfig } from '@ai-sdlc/reference';
+export type { PriorityScore, PriorityInput, PriorityConfig };
+/**
+ * Compute the PPA composite priority score for a single work item.
+ *
+ * P(w) = Sα × Dπ × Mφ × Eρ × (1 − Eτ) × (1 + HC) × Cκ
+ */
+export declare function computePriority(input: PriorityInput, config?: PriorityConfig): PriorityScore;
+/**
+ * Score and rank multiple work items by descending composite priority.
+ * Override items (composite = Infinity) always sort first.
+ */
+export declare function rankWorkItems(items: PriorityInput[], config?: PriorityConfig): Array<PriorityInput & {
+    score: PriorityScore;
+}>;
+//# sourceMappingURL=priority.d.ts.map