@appliqation/pr-raise 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Appliqation Pty Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,72 @@
+# Appliqation PR-Raise
+
+**Commits whatever's already changed in a local checkout, pushes, and opens (or reuses) a pull request.**
+
+Fully mechanical — no LLM anywhere in this repo. Deciding *what* to change is someone else's job (a human, or a sibling agent like [`appliqation-scriptgen`](https://github.com/appliqation/appliqation-scriptgen) or [`appliqation-defect-fix`](https://github.com/appliqation/appliqation-defect-fix)); this repo's only job is turning an already-made change into a real, reviewable pull request, reliably and idempotently.
+
+## Why a separate, dumb agent
+
+Committing a known set of files and opening a PR needs no judgment — so it doesn't get one. Every other agent in this family stops at "write the files locally"; none of them touch git or GitHub. This is the one place that does, which keeps the blast radius of any single agent's mistake contained: a bad fix from `appliqation-defect-fix` produces a bad PR you can review and close, never a bad push nobody saw coming from inside a reasoning loop.
+
+## How it works
+
+```mermaid
+flowchart LR
+    A[local checkout<br/>with uncommitted changes] --> B{anything to commit?}
+    B -- no --> C[report and stop<br/>no push, no GitHub call]
+    B -- yes --> D[fetch + checkout/create branch]
+    D --> E[git add -A + commit]
+    E --> F[push]
+    F --> G{open PR already<br/>exists for this branch?}
+    G -- yes --> H[update its body]
+    G -- no --> I[open a new PR]
+```
+
+- **Credentials are its own.** It never reads Appliqation's per-project GitHub PAT — it authenticates with its own `GITHUB_TOKEN`, kept entirely separate from appq's credential store by design.
+- **Idempotent PR handling.** Re-running against a branch that already has an open PR updates that PR's body instead of opening a second one.
+- **No-op is a real, reported outcome.** If there's nothing to commit, it says so and stops — it never pushes or touches GitHub for a no-op.
+
+## Quick start
+
+```bash
+npm install -g @appliqation/pr-raise
+```
+
+Create a `.env` file (in whatever directory you'll run it from) with:
+
+```
+APPQ_API_KEY=your-appliqation-api-key   # read-only, repo lookup only
+GITHUB_TOKEN=your-github-token           # this agent's own, with repo write access
+```
+
+```bash
+appliqation-pr-raise raise \
+  --project-id <id> \
+  --repo-path /path/to/your/checkout \
+  --branch-name my-branch \
+  --pr-title "My change"
+```
+
+`--project-id` resolves the target repo/branch via Appliqation's `get_project_settings` (location only — no credentials come from there). Add `--pr-body`/`--pr-body-file`, `--base-branch`, or `--commit-message` as needed; `--json` prints a structured result instead of the human summary.
+
+## Configuration
+
+Copy `.env.example` to `.env`. Requires `APPQ_API_KEY` (read-only) and `GITHUB_TOKEN` (this agent's own, with repo write access).
+
+## Development
+
+```bash
+git clone https://github.com/appliqation/appliqation-pr-raise.git
+cd appliqation-pr-raise
+npm install
+cp .env.example .env   # fill in APPQ_API_KEY (read-only, repo lookup only) and GITHUB_TOKEN
+npm run dev -- raise --project-id <id> --repo-path <path> --branch-name <name> --pr-title <title>
+npm run typecheck
+npm test
+```
+
+See `CLAUDE.md` for a map of this repo if you're working in it with an AI coding assistant.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/cli/audit.js

@@ -0,0 +1,21 @@
+// Extracted out of cli/index.ts so this is testable without triggering that
+// file's top-level program.parseAsync(process.argv) side effect — same
+// reasoning as appliqation-autotest's cli/resolvers.ts.
+//
+// No LLM in this repo at all — RecordRaiseRunArgs has no model/usage/turns/
+// budgetExceeded (all absent on the underlying AuditRecord type, unlike
+// every other agent in this family).
+import { safeRecord } from '@appliqation/agent-core';
+export async function recordRaiseRun(args) {
+    const { sink, startedAt, endedAt, projectId, repoPath, branchName, result } = args;
+    await safeRecord(sink, {
+        agent: 'appliqation-pr-raise',
+        subcommand: 'raise',
+        startedAt,
+        endedAt,
+        durationMillis: endedAt - startedAt,
+        exitCode: result ? 0 : 1,
+        outcome: result ? { projectId, repoPath, branchName, ...result } : { projectId, repoPath, branchName, error: true },
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,qCAAqC;AAErC,OAAO,EAAE,UAAU,EAAkB,MAAM,yBAAyB,CAAC;AAcrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAwB;IAC3D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACnF,MAAM,UAAU,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,sBAAsB;QAC7B,UAAU,EAAE,OAAO;QACnB,SAAS;QACT,OAAO;QACP,cAAc,EAAE,OAAO,GAAG,SAAS;QACnC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;KACpH,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+// `raise`: commit whatever's already changed in a local checkout, push,
+// and open (or reuse) a pull request. No LLM involved — this is a
+// mechanical git+GitHub operation, reusable by any caller that's already
+// made the file changes it wants raised (appliqation-scriptgen today, a
+// future defect-fix agent later, or a human running this directly).
+import { readFile } from 'node:fs/promises';
+import { Command } from 'commander';
+import { createMcpClient } from '@appliqation/agent-core';
+import { config } from '../config/env.js';
+import { raise } from '../orchestrator/raise.js';
+import { recordRaiseRun } from './audit.js';
+const program = new Command();
+program
+    .name('appliqation-pr-raise')
+    .description('Commit local changes in a repo checkout and open/reuse a pull request for them.');
+program
+    .command('raise')
+    .description("Resolves the project's GitHub repo/branch via appq's get_project_settings (no credentials come from " +
+    "appq — this agent's own GITHUB_TOKEN does the actual git/GitHub work), then in --repo-path: fetch, " +
+    'checkout/create --branch-name, `git add -A` + commit whatever is already changed there, push, and ' +
+    'open a PR — or update the existing open PR for that branch if one is already there, never opening ' +
+    "a second one. If there's nothing to commit, reports that plainly and does not push or touch GitHub at all.")
+    .requiredOption('--project-id <id>', 'Appliqation project ID — resolves the target GitHub repo/branch')
+    .requiredOption('--repo-path <path>', 'local checkout that already has the changes to raise')
+    .requiredOption('--branch-name <name>', 'branch to commit to and open the PR from')
+    .requiredOption('--pr-title <title>', 'pull request title')
+    .option('--pr-body <text>', 'pull request body', '')
+    .option('--pr-body-file <path>', 'read the PR body from a file instead of --pr-body')
+    .option('--base-branch <name>', "override the project's configured default branch")
+    .option('--commit-message <message>', 'defaults to --pr-title')
+    .option('--json', 'print a single structured JSON result instead of a human-readable summary')
+    .action(async (opts) => {
+    const client = createMcpClient({ origin: config.appqOrigin, apiKey: config.appqApiKey() });
+    const prBody = opts.prBodyFile ? await readFile(opts.prBodyFile, 'utf-8') : opts.prBody;
+    const projectId = Number(opts.projectId);
+    const startedAt = Date.now();
+    let result;
+    try {
+        result = await raise({
+            client,
+            projectId,
+            repoPath: opts.repoPath,
+            branchName: opts.branchName,
+            prTitle: opts.prTitle,
+            prBody,
+            baseBranchOverride: opts.baseBranch,
+            commitMessage: opts.commitMessage,
+            githubToken: config.githubToken(),
+            gitAuthorName: config.gitAuthorName,
+            gitAuthorEmail: config.gitAuthorEmail,
+            commandTimeoutMs: config.commandTimeoutMs,
+        });
+    }
+    finally {
+        // Audit write happens whether the run succeeded or threw — see
+        // @appliqation/agent-core's audit/sink.ts: safeRecord() (used
+        // inside recordRaiseRun) never lets a failed/unreachable audit sink
+        // affect this process's real outcome.
+        await recordRaiseRun({ sink: config.auditSink, startedAt, endedAt: Date.now(), projectId, repoPath: opts.repoPath, branchName: opts.branchName, result });
+    }
+    if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+    }
+    if (!result.committed) {
+        console.log(result.skippedReason);
+        return;
+    }
+    console.log(`Committed and pushed to ${opts.branchName}.`);
+    if (result.pr) {
+        console.log(result.pr.created ? `Opened PR: ${result.pr.url}` : `Updated existing PR: ${result.pr.url}`);
+    }
+});
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,wEAAwE;AACxE,kEAAkE;AAClE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AAEpE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,sBAAsB,CAAC;KAC5B,WAAW,CAAC,iFAAiF,CAAC,CAAC;AAElG,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CACV,sGAAsG;IACpG,qGAAqG;IACrG,oGAAoG;IACpG,oGAAoG;IACpG,4GAA4G,CAC/G;KACA,cAAc,CAAC,mBAAmB,EAAE,iEAAiE,CAAC;KACtG,cAAc,CAAC,oBAAoB,EAAE,sDAAsD,CAAC;KAC5F,cAAc,CAAC,sBAAsB,EAAE,0CAA0C,CAAC;KAClF,cAAc,CAAC,oBAAoB,EAAE,oBAAoB,CAAC;KAC1D,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,EAAE,CAAC;KACnD,MAAM,CAAC,uBAAuB,EAAE,mDAAmD,CAAC;KACpF,MAAM,CAAC,sBAAsB,EAAE,kDAAkD,CAAC;KAClF,MAAM,CAAC,4BAA4B,EAAE,wBAAwB,CAAC;KAC9D,MAAM,CAAC,QAAQ,EAAE,2EAA2E,CAAC;KAC7F,MAAM,CACL,KAAK,EAAE,IAUN,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACxF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC;YACnB,MAAM;YACN,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM;YACN,kBAAkB,EAAE,IAAI,CAAC,UAAU;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,+DAA+D;QAC/D,8DAA8D;QAC9D,oEAAoE;QACpE,sCAAsC;QACtC,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5J,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC,CACF,CAAC;AAEJ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/config/env.js

@@ -0,0 +1,23 @@
+import 'dotenv/config';
+import { required, optional } from '@appliqation/agent-core/config';
+import { resolveAuditSink } from '@appliqation/agent-core/audit';
+export const config = {
+    appqOrigin: optional('APPQ_ORIGIN') ?? 'https://appq.appliqation.io',
+    appqApiKey: () => required('APPQ_API_KEY'),
+    // This agent's own GitHub token — deliberately NOT the per-project PAT
+    // appq stores (appq never hands that out to this client; it only ever
+    // returns repo_url/branch/tests_dir via get_project_settings, no
+    // credentials). The operator running this agent supplies their own.
+    githubToken: () => required('GITHUB_TOKEN'),
+    gitAuthorName: optional('GIT_AUTHOR_NAME') ?? 'Appliqation PR Agent',
+    gitAuthorEmail: optional('GIT_AUTHOR_EMAIL') ?? 'noreply@appliqation.io',
+    commandTimeoutMs: Number(optional('COMMAND_TIMEOUT_MS') ?? 2 * 60 * 1000),
+    // Observability, entirely opt-in — see @appliqation/agent-core's audit/sink.ts.
+    auditSink: resolveAuditSink({
+        auditMongoUri: optional('AUDIT_MONGO_URI'),
+        auditMongoDb: optional('AUDIT_MONGO_DB'),
+        auditMongoCollection: optional('AUDIT_MONGO_COLLECTION'),
+        auditJsonlPath: optional('AUDIT_JSONL_PATH'),
+    }),
+};
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,6BAA6B;IACpE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1C,uEAAuE;IACvE,sEAAsE;IACtE,iEAAiE;IACjE,oEAAoE;IACpE,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3C,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,sBAAsB;IACpE,cAAc,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,wBAAwB;IACxE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEzE,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,CAAC;QAC1B,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QACxC,oBAAoB,EAAE,QAAQ,CAAC,wBAAwB,CAAC;QACxD,cAAc,EAAE,QAAQ,CAAC,kBAAkB,CAAC;KAC7C,CAAC;CACH,CAAC"}

package/dist/git/gitClient.js

@@ -0,0 +1,88 @@
+// A thin, real `git` CLI wrapper. No LLM is involved anywhere in this agent
+// — committing and pushing a known set of local changes is fully mechanical,
+// so there's no tool-calling loop, no allowlist-gated dispatch the way
+// appliqation-scriptgen's shell surface needs (that one exists specifically
+// because an LLM chooses what to run there; here, this code is the only
+// thing that ever decides what git command runs).
+import { execFile } from 'node:child_process';
+// Same hand-rolled wrapper as appliqation-scriptgen's codingTools.ts, for
+// the same reason: util.promisify(execFile) only resolves {stdout, stderr}
+// via an internal Node symbol that a mocked module in tests won't carry.
+function execFileAsync(command, args, options) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        execFile(command, args, options, (error, stdout, stderr) => {
+            if (error) {
+                const failure = error;
+                failure.stdout = String(stdout ?? '');
+                failure.stderr = String(stderr ?? '');
+                rejectPromise(failure);
+            }
+            else {
+                resolvePromise({ stdout: String(stdout ?? ''), stderr: String(stderr ?? '') });
+            }
+        });
+    });
+}
+export class GitClient {
+    repoPath;
+    timeoutMs;
+    constructor(repoPath, timeoutMs) {
+        this.repoPath = repoPath;
+        this.timeoutMs = timeoutMs;
+    }
+    async git(args) {
+        return execFileAsync('git', args, { cwd: this.repoPath, timeout: this.timeoutMs, maxBuffer: 10 * 1024 * 1024 });
+    }
+    async statusPorcelain() {
+        return (await this.git(['status', '--porcelain'])).stdout;
+    }
+    async hasUncommittedChanges() {
+        return (await this.statusPorcelain()).trim().length > 0;
+    }
+    async fetch(remote = 'origin') {
+        await this.git(['fetch', remote]);
+    }
+    async localBranchExists(branchName) {
+        try {
+            await this.git(['rev-parse', '--verify', '--quiet', `refs/heads/${branchName}`]);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /** Checks out branchName, creating it from origin/baseBranch if it doesn't exist locally yet. Never force-resets an existing local branch. */
+    async checkoutBranch(branchName, baseBranch) {
+        if (await this.localBranchExists(branchName)) {
+            await this.git(['checkout', branchName]);
+            return;
+        }
+        await this.git(['checkout', '-b', branchName, `origin/${baseBranch}`]);
+    }
+    async addAll() {
+        await this.git(['add', '-A']);
+    }
+    /** Returns { committed: false } for "nothing to commit" rather than throwing — that's a legitimate outcome, not a failure. */
+    async commit(message, authorName, authorEmail) {
+        try {
+            await this.git(['-c', `user.name=${authorName}`, '-c', `user.email=${authorEmail}`, 'commit', '-m', message]);
+            return { committed: true };
+        }
+        catch (err) {
+            const e = err;
+            if (/nothing to commit/i.test(e.stdout ?? ''))
+                return { committed: false };
+            throw err;
+        }
+    }
+    /**
+     * Pushes HEAD to branchName on remoteUrl, authenticating with token only
+     * for this one push — never persisted into .git/config, so the token
+     * doesn't linger in the checkout after this process exits.
+     */
+    async pushWithToken(remoteUrl, token, branchName) {
+        const authedUrl = remoteUrl.replace('https://', `https://x-access-token:${token}@`);
+        await this.git(['push', authedUrl, `HEAD:refs/heads/${branchName}`]);
+    }
+}
+//# sourceMappingURL=gitClient.js.map

package/dist/git/gitClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitClient.js","sourceRoot":"","sources":["../../src/git/gitClient.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,wEAAwE;AACxE,kDAAkD;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAa9C,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,SAAS,aAAa,CACpB,OAAe,EACf,IAAc,EACd,OAA4D;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,KAAoB,CAAC;gBACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,SAAS;IAED;IACA;IAFnB,YACmB,QAAgB,EAChB,SAAiB;QADjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEI,KAAK,CAAC,GAAG,CAAC,IAAc;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ;QAC3B,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,UAAkB;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,UAAU,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8IAA8I;IAC9I,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,UAAkB;QACzD,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,8HAA8H;IAC9H,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,UAAkB,EAAE,WAAmB;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,aAAa,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9G,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAkB,CAAC;YAC7B,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;gBAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC3E,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,KAAa,EAAE,UAAkB;QACtE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,0BAA0B,KAAK,GAAG,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,UAAU,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/github/prClient.js

@@ -0,0 +1,54 @@
+// Idempotent PR open/reuse — mirrors workers/automan-worker's
+// GitHubCommitClientAdapter.ensurePr() exactly (list open PRs for this
+// head first, reuse if found; rebuild the body rather than append, so
+// repeat calls stay accurate rather than accumulating stale text), the one
+// proven pattern in this workspace for "don't open a second PR for a
+// branch that already has one open".
+import { Octokit } from '@octokit/rest';
+/** Parses owner/repo from either https://github.com/owner/repo(.git) or git@github.com:owner/repo(.git). */
+export function parseGitHubRepoUrl(url) {
+    const match = url.match(/github\.com[/:]([^/]+)\/([^/.]+?)(\.git)?\/?$/);
+    if (!match) {
+        throw new Error(`Could not parse a GitHub owner/repo out of repo_url "${url}"`);
+    }
+    return { owner: match[1], repo: match[2] };
+}
+export class PrClient {
+    octokit;
+    constructor(token) {
+        this.octokit = new Octokit({ auth: token });
+    }
+    async ensurePr(target, opts) {
+        const existing = await this.octokit.pulls.list({
+            owner: target.owner,
+            repo: target.repo,
+            head: `${target.owner}:${opts.head}`,
+            state: 'open',
+        });
+        if (existing.data.length > 0) {
+            const pr = existing.data[0];
+            await this.octokit.pulls.update({ owner: target.owner, repo: target.repo, pull_number: pr.number, body: opts.body });
+            return { number: pr.number, url: pr.html_url, created: false };
+        }
+        try {
+            const created = await this.octokit.pulls.create({
+                owner: target.owner,
+                repo: target.repo,
+                head: opts.head,
+                base: opts.base,
+                title: opts.title,
+                body: opts.body,
+            });
+            return { number: created.data.number, url: created.data.html_url, created: true };
+        }
+        catch (err) {
+            const e = err;
+            if (e.status === 422 && /No commits between/i.test(e.message ?? '')) {
+                throw new Error(`GitHub rejected the PR: no commits between "${opts.base}" and "${opts.head}" yet. ` +
+                    'This can happen if the push hasn\'t landed yet — check the push actually succeeded.');
+            }
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=prClient.js.map

package/dist/github/prClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prClient.js","sourceRoot":"","sources":["../../src/github/prClient.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,uEAAuE;AACvE,sEAAsE;AACtE,2EAA2E;AAC3E,qEAAqE;AACrE,qCAAqC;AAErC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAOxC,4GAA4G;AAC5G,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAQD,MAAM,OAAO,QAAQ;IACF,OAAO,CAAU;IAElC,YAAY,KAAa;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAgB,EAAE,IAAiE;QAChG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE;YACpC,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrH,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC9C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAA4C,CAAC;YACvD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,SAAS;oBAClF,qFAAqF,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/orchestrator/raise.js

@@ -0,0 +1,38 @@
+// Ties it together: resolve the target repo/branch via appq's existing
+// get_project_settings (repo_url/branch/tests_dir only — no credentials;
+// appq never hands out the per-project GitHub PAT to this client. This
+// agent's own GitHub token, from its own .env, is what actually
+// authenticates every git/GitHub call below), commit whatever's already
+// changed in the given local checkout, push, and open or reuse a PR.
+import { GitClient } from '../git/gitClient.js';
+import { PrClient, parseGitHubRepoUrl } from '../github/prClient.js';
+export async function raise(opts) {
+    const settingsResult = await opts.client.callTool('get_project_settings', { project_id: opts.projectId });
+    if (!settingsResult.ok) {
+        throw new Error(`get_project_settings failed for project ${opts.projectId}: ${settingsResult.text}`);
+    }
+    const settings = JSON.parse(settingsResult.text);
+    if (!settings.github_repo_url) {
+        throw new Error(`Project ${opts.projectId} has no GitHub repo configured (github_repo_url is empty).`);
+    }
+    const baseBranch = opts.baseBranchOverride ?? settings.github_branch ?? 'main';
+    const target = parseGitHubRepoUrl(settings.github_repo_url);
+    const git = new GitClient(opts.repoPath, opts.commandTimeoutMs);
+    await git.fetch();
+    await git.checkoutBranch(opts.branchName, baseBranch);
+    await git.addAll();
+    const { committed } = await git.commit(opts.commitMessage ?? opts.prTitle, opts.gitAuthorName, opts.gitAuthorEmail);
+    if (!committed) {
+        return {
+            committed: false,
+            pushed: false,
+            pr: null,
+            skippedReason: 'Nothing to commit — the working tree already matches HEAD.',
+        };
+    }
+    await git.pushWithToken(`https://github.com/${target.owner}/${target.repo}.git`, opts.githubToken, opts.branchName);
+    const prClient = new PrClient(opts.githubToken);
+    const pr = await prClient.ensurePr(target, { head: opts.branchName, base: baseBranch, title: opts.prTitle, body: opts.prBody });
+    return { committed: true, pushed: true, pr };
+}
+//# sourceMappingURL=raise.js.map

package/dist/orchestrator/raise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raise.js","sourceRoot":"","sources":["../../src/orchestrator/raise.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AACxE,qEAAqE;AAGrE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA8BrE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAkB;IAC5C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAoB,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,SAAS,4DAA4D,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,IAAI,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC;IAC/E,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE5D,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,MAAM,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACtD,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAEpH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK;YACb,EAAE,EAAE,IAAI;YACR,aAAa,EAAE,4DAA4D;SAC5E,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,CAAC,aAAa,CAAC,sBAAsB,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAEpH,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEhI,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@appliqation/pr-raise",
+  "version": "0.1.1",
+  "description": "Standalone agent that commits local file changes in a repo checkout and opens (or reuses) a pull request. Fully mechanical \u2014 no LLM involved \u2014 reusable for scripts from appliqation-scriptgen or code changes from any future defect-fix agent.",
+  "type": "module",
+  "bin": {
+    "appliqation-pr-raise": "./dist/cli/index.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/cli/index.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src --ext .ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@appliqation/agent-core": "^0.1.0",
+    "@octokit/rest": "^21.1.1",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "tsx": "^4.19.3",
+    "typescript": "^5.8.2",
+    "vitest": "^3.2.7"
+  }
+}