@ashlr/hub 2.2.0

package/dist/core/integrations/editors.js

@@ -0,0 +1,216 @@
+/**
+ * core/integrations/editors.ts — Editor MCP gateway wiring (M18).
+ *
+ * detectEditors(): detect which of claude / codex / cursor are present by
+ *   their config directories or files.
+ *
+ * wireEditor(target, opts): wire the ashlr MCP gateway entry into one editor's
+ *   mcpServers config, reusing the M3 install pattern (backup-first, deep-merge,
+ *   idempotent, never clobbers existing servers). LOCAL only. `opts.configPath`
+ *   overrides the default path so tests can run against TEMP files.
+ *
+ * SAFETY RULES (matching M3 contract):
+ *   - Parse the config file FIRST; abort without writing on malformed JSON.
+ *   - Backup (.bak) ONLY after a clean parse.
+ *   - Idempotent: re-running when the entry is already present is a no-op.
+ *   - Never clobber other mcpServers entries or other top-level config keys.
+ *   - Never throws — all errors are caught and returned as {ok:false, detail}.
+ *   - LOCAL only: writes only the target editor's config file.
+ *
+ * Genome note: ~/.ashlr already serves as the genome store; no extra wiring
+ * is needed here — the mcpServers entry is sufficient for the gateway.
+ */
+import { readFileSync, writeFileSync, existsSync, copyFileSync, mkdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname } from 'node:path';
+// ---------------------------------------------------------------------------
+// Editor config paths
+// ---------------------------------------------------------------------------
+const HOME = homedir();
+/**
+ * Default config file paths for each supported editor target.
+ * Claude Code: ~/.claude/settings.json (preferred; falls back to ~/.claude.json)
+ * Codex:       ~/.codex/config.json
+ * Cursor:      ~/.cursor/mcp.json
+ */
+const DEFAULT_CONFIG_PATHS = {
+    claude: join(HOME, '.claude', 'settings.json'),
+    codex: join(HOME, '.codex', 'config.json'),
+    cursor: join(HOME, '.cursor', 'mcp.json'),
+};
+/**
+ * Config directory presence checks for detectEditors.
+ * An editor is "detected" if its primary config directory (or file) exists.
+ */
+const DETECTION_PATHS = {
+    claude: [join(HOME, '.claude'), join(HOME, '.claude.json')],
+    codex: [join(HOME, '.codex')],
+    cursor: [join(HOME, '.cursor')],
+};
+// ---------------------------------------------------------------------------
+// Sentinel for malformed JSON (matches M3 pattern)
+// ---------------------------------------------------------------------------
+class ConfigParseError extends Error {
+    path;
+    constructor(path) {
+        super(`config is not valid JSON: ${path}`);
+        this.path = path;
+        this.name = 'ConfigParseError';
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal helpers (same contract as M3)
+// ---------------------------------------------------------------------------
+/**
+ * Parse a target config file.
+ *   - absent or empty            → {} (fresh config, may safely create)
+ *   - present + valid JSON       → parsed object
+ *   - present + unparseable JSON → throws ConfigParseError (caller must abort;
+ *     we NEVER derive a merged write from a file we failed to parse)
+ */
+function parseConfigFile(filePath) {
+    if (!existsSync(filePath))
+        return {};
+    const raw = readFileSync(filePath, 'utf8').trim();
+    if (!raw)
+        return {};
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new ConfigParseError(filePath);
+    }
+}
+/**
+ * Backup a config file to <path>.bak.
+ * If a .bak already exists, rotate it to <path>.bak.<timestamp> first so a
+ * second run never destroys an earlier backup (best-effort; never blocks write).
+ */
+function backupConfig(configPath) {
+    const bakPath = configPath + '.bak';
+    if (existsSync(bakPath)) {
+        try {
+            copyFileSync(bakPath, `${bakPath}.${Date.now()}`);
+        }
+        catch {
+            // Best-effort — never block on backup-of-backup failure.
+        }
+    }
+    copyFileSync(configPath, bakPath);
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Detect which editors are installed on this machine by checking for the
+ * presence of their primary config directory or config file.
+ *
+ * Returns a subset of ['claude', 'codex', 'cursor'].
+ * Never throws.
+ */
+export function detectEditors() {
+    const detected = [];
+    const targets = ['claude', 'codex', 'cursor'];
+    for (const target of targets) {
+        const paths = DETECTION_PATHS[target];
+        const found = paths.some(p => existsSync(p));
+        if (found) {
+            detected.push(target);
+        }
+    }
+    return detected;
+}
+/**
+ * Wire the ashlr MCP gateway into one editor's mcpServers config.
+ *
+ * Follows the M3 install pattern exactly:
+ *   1. Parse FIRST — abort without any write if config is malformed JSON.
+ *   2. Backup (.bak) after a clean parse, only if the file exists.
+ *   3. Idempotency — if the "ashlr" entry already matches, return ok without writing.
+ *   4. Deep-merge — spread existing config + mcpServers, add/update only "ashlr".
+ *   5. Write the merged result as pretty-printed JSON.
+ *
+ * @param target    - Editor to wire: 'claude' | 'codex' | 'cursor'
+ * @param opts.configPath - Override the default config path (use a TEMP path in tests).
+ * @returns { ok: boolean; detail: string } — never throws.
+ */
+export async function wireEditor(target, opts) {
+    const configPath = opts.configPath ?? DEFAULT_CONFIG_PATHS[target];
+    // The gateway entry we install — command via PATH so any editor resolves it.
+    const gatewayEntry = {
+        command: 'ashlr',
+        args: ['mcp'],
+    };
+    // ── 1. Parse FIRST — abort on malformed input, before any write/backup ────
+    let existing;
+    try {
+        existing = parseConfigFile(configPath);
+    }
+    catch (err) {
+        if (err instanceof ConfigParseError) {
+            return {
+                ok: false,
+                detail: `refusing to write: ${configPath} is not valid JSON; restore it or pass a clean configPath.`,
+            };
+        }
+        // Unexpected read error (permissions, etc.)
+        const msg = err instanceof Error ? err.message : String(err);
+        return { ok: false, detail: `failed to read config: ${msg}` };
+    }
+    // ── 2. Backup (only after a clean parse, only if file exists) ─────────────
+    if (existsSync(configPath)) {
+        try {
+            backupConfig(configPath);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { ok: false, detail: `backup failed: ${msg}` };
+        }
+    }
+    else {
+        // Ensure the parent directory exists so the write succeeds.
+        try {
+            mkdirSync(dirname(configPath), { recursive: true });
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { ok: false, detail: `could not create config directory: ${msg}` };
+        }
+    }
+    // ── 3. Idempotency check ───────────────────────────────────────────────────
+    const existingServers = existing.mcpServers ?? {};
+    const existingEntry = existingServers['ashlr'];
+    if (existingEntry) {
+        const same = existingEntry.command === gatewayEntry.command &&
+            JSON.stringify(existingEntry.args ?? []) === JSON.stringify(gatewayEntry.args ?? []);
+        if (same) {
+            return {
+                ok: true,
+                detail: `already wired — no changes needed (${configPath})`,
+            };
+        }
+        // Entry exists but differs — will update below.
+    }
+    // ── 4. Deep-merge: add/update "ashlr" key only, preserve all others ───────
+    const merged = {
+        ...existing,
+        mcpServers: {
+            ...existingServers,
+            ashlr: gatewayEntry,
+        },
+    };
+    // ── 5. Write ───────────────────────────────────────────────────────────────
+    try {
+        writeFileSync(configPath, JSON.stringify(merged, null, 2) + '\n', 'utf8');
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return { ok: false, detail: `write failed: ${msg}` };
+    }
+    const action = existingEntry ? 'updated' : 'wired';
+    return {
+        ok: true,
+        detail: `${action} ashlr gateway → ${configPath}`,
+    };
+}
+//# sourceMappingURL=editors.js.map

package/dist/core/integrations/editors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editors.js","sourceRoot":"","sources":["../../../src/core/integrations/editors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;AAEvB;;;;;GAKG;AACH,MAAM,oBAAoB,GAAkD;IAC1E,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;IAC9C,KAAK,EAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC;IAC3C,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;CAC1C,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAoD;IACvE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC3D,KAAK,EAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;CAChC,CAAC;AAmBF,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,MAAM,gBAAiB,SAAQ,KAAK;IACN;IAA5B,YAA4B,IAAY;QACtC,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QADjB,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,8EAA8E;AAC9E,yCAAyC;AACzC,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACpC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,EAAE,GAAG,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;IACH,CAAC;IACD,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;IAEvD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAqC,EACrC,IAA6B;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEnE,6EAA6E;IAC7E,MAAM,YAAY,GAAmB;QACnC,OAAO,EAAE,OAAO;QAChB,IAAI,EAAK,CAAC,KAAK,CAAC;KACjB,CAAC;IAEF,6EAA6E;IAC7E,IAAI,QAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAM,KAAK;gBACb,MAAM,EAAE,sBAAsB,UAAU,4DAA4D;aACrG,CAAC;QACJ,CAAC;QACD,4CAA4C;QAC5C,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,GAAG,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,6EAA6E;IAC7E,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,GAAG,EAAE,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,4DAA4D;QAC5D,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,GAAG,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,GACR,aAAa,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO;YAC9C,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAEvF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,EAAE,EAAM,IAAI;gBACZ,MAAM,EAAE,sCAAsC,UAAU,GAAG;aAC5D,CAAC;QACJ,CAAC;QACD,gDAAgD;IAClD,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAoB;QAC9B,GAAG,QAAQ;QACX,UAAU,EAAE;YACV,GAAG,eAAe;YAClB,KAAK,EAAE,YAAY;SACpB;KACF,CAAC;IAEF,8EAA8E;IAC9E,IAAI,CAAC;QACH,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,OAAO;QACL,EAAE,EAAM,IAAI;QACZ,MAAM,EAAE,GAAG,MAAM,oBAAoB,UAAU,EAAE;KAClD,CAAC;AACJ,CAAC"}

package/dist/core/integrations/github.d.ts

@@ -0,0 +1,66 @@
+/**
+ * core/integrations/github.ts — GitHub integration via the `gh` CLI.
+ *
+ * RULES:
+ *  - READ-FIRST: githubStatus, listPrs, listIssues are read-only and NEVER throw.
+ *    On any failure (gh missing, not authed, not a repo, malformed output) they
+ *    return a safe empty/degraded shape.
+ *  - NEVER handle, read, log, or print raw tokens. `gh` owns its own auth.
+ *  - createPr is EXPLICIT + MUTATING. The CLI layer (cli/gh.ts) MUST gate it
+ *    behind an explicit `ashlr gh pr create` + confirmation prompt before calling.
+ *  - All spawns use spawnSync (no shell) with a tight timeout.
+ */
+import type { GithubStatus } from '../types.js';
+/** A single PR summary (read-only list). */
+export interface PrSummary {
+    number: number;
+    title: string;
+    url: string;
+    state: string;
+    author: string;
+}
+/** A single issue summary (read-only list). */
+export interface IssueSummary {
+    number: number;
+    title: string;
+    url: string;
+    state: string;
+    author: string;
+}
+/** Options for creating a PR (EXPLICIT mutation only). */
+export interface CreatePrOpts {
+    title: string;
+    body?: string;
+    base?: string;
+    head?: string;
+    draft?: boolean;
+}
+/** Result of a PR creation (EXPLICIT mutation only). */
+export interface CreatePrResult {
+    ok: boolean;
+    url: string | null;
+    detail: string;
+}
+/**
+ * Read-only repo snapshot via `gh`. NEVER throws — degrades to a not-a-repo
+ * shape when cwd is not a GitHub repo or gh is unavailable / not authed.
+ */
+export declare function githubStatus(cwd: string): GithubStatus;
+/**
+ * List open PRs via `gh pr list`. NEVER throws — returns [] on any failure.
+ */
+export declare function listPrs(cwd: string): PrSummary[];
+/**
+ * List open issues via `gh issue list`. NEVER throws — returns [] on any failure.
+ */
+export declare function listIssues(cwd: string): IssueSummary[];
+/**
+ * EXPLICIT, MUTATING. Creates a PR via `gh pr create`.
+ *
+ * The CLI layer (cli/gh.ts) MUST gate this behind an explicit
+ * `ashlr gh pr create` command + confirmation prompt — NEVER call this
+ * automatically or from any read/status path.
+ *
+ * May reject on hard failures; ok:false + detail describes the error.
+ */
+export declare function createPr(cwd: string, opts: CreatePrOpts): Promise<CreatePrResult>;

package/dist/core/integrations/github.js

@@ -0,0 +1,332 @@
+/**
+ * core/integrations/github.ts — GitHub integration via the `gh` CLI.
+ *
+ * RULES:
+ *  - READ-FIRST: githubStatus, listPrs, listIssues are read-only and NEVER throw.
+ *    On any failure (gh missing, not authed, not a repo, malformed output) they
+ *    return a safe empty/degraded shape.
+ *  - NEVER handle, read, log, or print raw tokens. `gh` owns its own auth.
+ *  - createPr is EXPLICIT + MUTATING. The CLI layer (cli/gh.ts) MUST gate it
+ *    behind an explicit `ashlr gh pr create` + confirmation prompt before calling.
+ *  - All spawns use spawnSync (no shell) with a tight timeout.
+ */
+import { spawnSync } from 'node:child_process';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const GH_BIN = 'gh';
+const TIMEOUT_MS = 8_000; // ms — gh can be slow on first auth check
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/**
+ * Run a `gh` sub-command synchronously in `cwd`.
+ * Returns trimmed stdout on success (exit 0), or null on any error.
+ * NEVER throws.
+ */
+function runGh(cwd, args) {
+    try {
+        const res = spawnSync(GH_BIN, args, {
+            cwd,
+            timeout: TIMEOUT_MS,
+            stdio: 'pipe',
+            encoding: 'utf8',
+            // Suppress interactive prompts; gh is already authed via its own config.
+            env: {
+                ...process.env,
+                GH_NO_UPDATE_NOTIFIER: '1',
+                NO_COLOR: '1',
+            },
+        });
+        // spawn error (e.g. ENOENT — gh not on PATH) or non-zero exit → null.
+        if (res.error)
+            return null;
+        if (res.status !== 0)
+            return null;
+        return typeof res.stdout === 'string' ? res.stdout.trim() : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Parse a JSON string safely. Returns null on any parse error.
+ */
+function safeJson(raw) {
+    if (!raw)
+        return null;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Determine CI status from the most recent workflow runs in cwd.
+ * Uses `gh run list --limit 5 --json status,conclusion` and aggregates:
+ *   - any 'in_progress' / 'queued' / 'waiting' → 'pending'
+ *   - any 'failure' / 'cancelled' / 'timed_out' → 'failing'
+ *   - all 'success' / 'skipped' / 'neutral' → 'passing'
+ *   - no runs found → 'none'
+ * NEVER throws.
+ */
+function resolveCiStatus(cwd) {
+    const raw = runGh(cwd, [
+        'run',
+        'list',
+        '--limit',
+        '5',
+        '--json',
+        'status,conclusion',
+    ]);
+    const parsed = safeJson(raw);
+    if (!Array.isArray(parsed) || parsed.length === 0)
+        return 'none';
+    const runs = parsed;
+    const IN_PROGRESS_STATUSES = new Set([
+        'in_progress',
+        'queued',
+        'waiting',
+        'requested',
+        'pending',
+    ]);
+    const FAILURE_CONCLUSIONS = new Set([
+        'failure',
+        'cancelled',
+        'timed_out',
+        'action_required',
+        'startup_failure',
+    ]);
+    const SUCCESS_CONCLUSIONS = new Set(['success', 'skipped', 'neutral']);
+    for (const run of runs) {
+        const status = (run.status ?? '').toLowerCase();
+        const conclusion = (run.conclusion ?? '').toLowerCase();
+        if (IN_PROGRESS_STATUSES.has(status))
+            return 'pending';
+        if (FAILURE_CONCLUSIONS.has(conclusion))
+            return 'failing';
+        // completed with non-success conclusion is also failing
+        if (status === 'completed' && conclusion && !SUCCESS_CONCLUSIONS.has(conclusion)) {
+            return 'failing';
+        }
+    }
+    // If we get here all completed runs were success/skipped/neutral
+    return 'passing';
+}
+// ---------------------------------------------------------------------------
+// Public API — READ-ONLY (never throw)
+// ---------------------------------------------------------------------------
+/**
+ * Read-only repo snapshot via `gh`. NEVER throws — degrades to a not-a-repo
+ * shape when cwd is not a GitHub repo or gh is unavailable / not authed.
+ */
+export function githubStatus(cwd) {
+    const NOT_A_REPO = {
+        isRepo: false,
+        openPrs: 0,
+        openIssues: 0,
+        ci: 'none',
+        repo: null,
+    };
+    // ── 1. Confirm it's a GitHub repo ────────────────────────────────────────
+    const repoRaw = runGh(cwd, ['repo', 'view', '--json', 'nameWithOwner']);
+    if (!repoRaw)
+        return NOT_A_REPO;
+    const repoParsed = safeJson(repoRaw);
+    if (repoParsed === null ||
+        typeof repoParsed !== 'object' ||
+        Array.isArray(repoParsed)) {
+        return NOT_A_REPO;
+    }
+    const repoObj = repoParsed;
+    const repoSlug = typeof repoObj['nameWithOwner'] === 'string'
+        ? repoObj['nameWithOwner']
+        : null;
+    if (!repoSlug)
+        return NOT_A_REPO;
+    // ── 2. Open PR count ─────────────────────────────────────────────────────
+    let openPrs = 0;
+    {
+        const raw = runGh(cwd, [
+            'pr',
+            'list',
+            '--state',
+            'open',
+            '--json',
+            'number',
+        ]);
+        const parsed = safeJson(raw);
+        if (Array.isArray(parsed))
+            openPrs = parsed.length;
+    }
+    // ── 3. Open issue count ──────────────────────────────────────────────────
+    let openIssues = 0;
+    {
+        const raw = runGh(cwd, [
+            'issue',
+            'list',
+            '--state',
+            'open',
+            '--json',
+            'number',
+        ]);
+        const parsed = safeJson(raw);
+        if (Array.isArray(parsed))
+            openIssues = parsed.length;
+    }
+    // ── 4. CI status ─────────────────────────────────────────────────────────
+    const ci = resolveCiStatus(cwd);
+    return {
+        isRepo: true,
+        openPrs,
+        openIssues,
+        ci,
+        repo: repoSlug,
+    };
+}
+/**
+ * List open PRs via `gh pr list`. NEVER throws — returns [] on any failure.
+ */
+export function listPrs(cwd) {
+    const raw = runGh(cwd, [
+        'pr',
+        'list',
+        '--state',
+        'open',
+        '--json',
+        'number,title,url,state,author',
+    ]);
+    const parsed = safeJson(raw);
+    if (!Array.isArray(parsed))
+        return [];
+    const results = [];
+    for (const item of parsed) {
+        if (item === null || typeof item !== 'object' || Array.isArray(item))
+            continue;
+        const obj = item;
+        const number = typeof obj['number'] === 'number' ? obj['number'] : 0;
+        const title = typeof obj['title'] === 'string' ? obj['title'] : '';
+        const url = typeof obj['url'] === 'string' ? obj['url'] : '';
+        const state = typeof obj['state'] === 'string' ? obj['state'] : '';
+        // author is a nested { login: string } object in gh's JSON output
+        let author = '';
+        if (obj['author'] !== null && typeof obj['author'] === 'object') {
+            const a = obj['author'];
+            if (typeof a['login'] === 'string')
+                author = a['login'];
+        }
+        else if (typeof obj['author'] === 'string') {
+            author = obj['author'];
+        }
+        results.push({ number, title, url, state, author });
+    }
+    return results;
+}
+/**
+ * List open issues via `gh issue list`. NEVER throws — returns [] on any failure.
+ */
+export function listIssues(cwd) {
+    const raw = runGh(cwd, [
+        'issue',
+        'list',
+        '--state',
+        'open',
+        '--json',
+        'number,title,url,state,author',
+    ]);
+    const parsed = safeJson(raw);
+    if (!Array.isArray(parsed))
+        return [];
+    const results = [];
+    for (const item of parsed) {
+        if (item === null || typeof item !== 'object' || Array.isArray(item))
+            continue;
+        const obj = item;
+        const number = typeof obj['number'] === 'number' ? obj['number'] : 0;
+        const title = typeof obj['title'] === 'string' ? obj['title'] : '';
+        const url = typeof obj['url'] === 'string' ? obj['url'] : '';
+        const state = typeof obj['state'] === 'string' ? obj['state'] : '';
+        let author = '';
+        if (obj['author'] !== null && typeof obj['author'] === 'object') {
+            const a = obj['author'];
+            if (typeof a['login'] === 'string')
+                author = a['login'];
+        }
+        else if (typeof obj['author'] === 'string') {
+            author = obj['author'];
+        }
+        results.push({ number, title, url, state, author });
+    }
+    return results;
+}
+// ---------------------------------------------------------------------------
+// Public API — EXPLICIT MUTATION (caller must gate behind confirm)
+// ---------------------------------------------------------------------------
+/**
+ * EXPLICIT, MUTATING. Creates a PR via `gh pr create`.
+ *
+ * The CLI layer (cli/gh.ts) MUST gate this behind an explicit
+ * `ashlr gh pr create` command + confirmation prompt — NEVER call this
+ * automatically or from any read/status path.
+ *
+ * May reject on hard failures; ok:false + detail describes the error.
+ */
+export async function createPr(cwd, opts) {
+    const args = ['pr', 'create', '--title', opts.title];
+    if (opts.body) {
+        args.push('--body', opts.body);
+    }
+    else {
+        // gh pr create requires --body or --fill; use --fill to generate from commits
+        args.push('--fill');
+    }
+    if (opts.base)
+        args.push('--base', opts.base);
+    if (opts.head)
+        args.push('--head', opts.head);
+    if (opts.draft)
+        args.push('--draft');
+    // NOTE: `gh pr create` does NOT support `--json` (only `gh pr list/view` do).
+    // On success it prints the created PR URL as plain text on stdout, which we
+    // parse below. Passing `--json` here would make gh exit non-zero on every run.
+    try {
+        const res = spawnSync(GH_BIN, args, {
+            cwd,
+            timeout: 30_000, // network operation — allow more time
+            stdio: 'pipe',
+            encoding: 'utf8',
+            env: {
+                ...process.env,
+                GH_NO_UPDATE_NOTIFIER: '1',
+                NO_COLOR: '1',
+            },
+        });
+        if (res.error) {
+            return { ok: false, url: null, detail: res.error.message };
+        }
+        if (res.status !== 0) {
+            const stderr = typeof res.stderr === 'string' ? res.stderr.trim() : '';
+            return { ok: false, url: null, detail: stderr || `gh pr create exited ${res.status}` };
+        }
+        const trimmed = typeof res.stdout === 'string' ? res.stdout.trim() : '';
+        let url = null;
+        // `gh pr create` prints the created PR URL as plain text on stdout. Scan
+        // the output for the first https:// line (gh may emit other lines first).
+        for (const line of trimmed.split('\n')) {
+            const t = line.trim();
+            if (t.startsWith('https://')) {
+                url = t;
+                break;
+            }
+        }
+        return { ok: true, url, detail: url ? `PR created: ${url}` : 'PR created' };
+    }
+    catch (err) {
+        const detail = err instanceof Error
+            ? err.message
+            : String(err);
+        return { ok: false, url: null, detail };
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/core/integrations/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/core/integrations/github.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,MAAM,GAAG,IAAI,CAAC;AACpB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,0CAA0C;AAwCpE,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,KAAK,CAAC,GAAW,EAAE,IAAc;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,GAAG;YACH,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;YAChB,yEAAyE;YACzE,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,qBAAqB,EAAE,GAAG;gBAC1B,QAAQ,EAAE,GAAG;aACd;SACF,CAAC,CAAC;QACH,sEAAsE;QACtE,IAAI,GAAG,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,QAAQ,CAAC,GAAkB;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE;QACrB,KAAK;QACL,MAAM;QACN,SAAS;QACT,GAAG;QACH,QAAQ;QACR,mBAAmB;KACpB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAGjE,MAAM,IAAI,GAAG,MAAoB,CAAC;IAElC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;QACnC,aAAa;QACb,QAAQ;QACR,SAAS;QACT,WAAW;QACX,SAAS;KACV,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;QAClC,SAAS;QACT,WAAW;QACX,WAAW;QACX,iBAAiB;QACjB,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAExD,IAAI,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACvD,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1D,wDAAwD;QACxD,IAAI,MAAM,KAAK,WAAW,IAAI,UAAU,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACjF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,UAAU,GAAiB;QAC/B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,CAAC;QACb,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,IAAI;KACX,CAAC;IAEF,4EAA4E;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IAEhC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrC,IACE,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EACzB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,UAAqC,CAAC;IACtD,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,QAAQ;QAC1C,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QAC1B,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IAEjC,4EAA4E;IAC5E,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,CAAC;QACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE;YACrB,IAAI;YACJ,MAAM;YACN,SAAS;YACT,MAAM;YACN,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,CAAC;IAED,4EAA4E;IAC5E,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,CAAC;QACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE;YACrB,OAAO;YACP,MAAM;YACN,SAAS;YACT,MAAM;YACN,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,CAAC;IAED,4EAA4E;IAC5E,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEhC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,OAAO;QACP,UAAU;QACV,EAAE;QACF,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE;QACrB,IAAI;QACJ,MAAM;QACN,SAAS;QACT,MAAM;QACN,QAAQ;QACR,+BAA+B;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/E,MAAM,GAAG,GAAG,IAA+B,CAAC;QAE5C,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnE,kEAAkE;QAClE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAA4B,CAAC;YACnD,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE;QACrB,OAAO;QACP,MAAM;QACN,SAAS;QACT,MAAM;QACN,QAAQ;QACR,+BAA+B;KAChC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/E,MAAM,GAAG,GAAG,IAA+B,CAAC;QAE5C,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEnE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAA4B,CAAC;YACnD,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,IAAkB;IAElB,MAAM,IAAI,GAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAE/D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAErC,8EAA8E;IAC9E,4EAA4E;IAC5E,+EAA+E;IAE/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;YAClC,GAAG;YACH,OAAO,EAAE,MAAM,EAAE,sCAAsC;YACvD,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,qBAAqB,EAAE,GAAG;gBAC1B,QAAQ,EAAE,GAAG;aACd;SACF,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7D,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,uBAAuB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACzF,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,GAAG,GAAkB,IAAI,CAAC;QAE9B,yEAAyE;QACzE,0EAA0E;QAC1E,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,GAAG,GAAG,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,KAAK;YAClB,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/core/integrations/identity.d.ts

@@ -0,0 +1,29 @@
+/**
+ * core/integrations/identity.ts — Phantom identity probe (M18).
+ *
+ * INTENTIONALLY VALUES-FREE: derives only names/status from the phantom CLI.
+ * Never reads, captures, logs, or returns secret values under any code path.
+ *
+ * Public API:
+ *   getIdentity(): Identity
+ *     — reads phantom cloud status + team list to derive who the caller is.
+ *     — NEVER throws; degrades to {loggedIn:false,...null} on any failure.
+ *     — bounded by a short timeout on each probe call.
+ */
+import type { Identity } from '../types.js';
+/**
+ * Returns a read-only identity snapshot derived from the `phantom` CLI.
+ *
+ * Guarantees:
+ *  - NEVER throws.
+ *  - NEVER returns secret values — names/status only.
+ *  - Degrades to {loggedIn:false, user:null, tier:null, team:null} when
+ *    phantom is absent, not logged in, or returns unexpected output.
+ *  - Each probe call is bounded by TIMEOUT_MS (4 s).
+ *
+ * Probe sequence:
+ *  1. `phantom cloud status --json` — login state + user + tier. A spawn
+ *     error here (phantom absent) degrades to {loggedIn:false,...}.
+ *  2. `phantom team list --json` — team name (only when logged in).
+ */
+export declare function getIdentity(): Identity;