@attalabs/vinaya 0.8.1 → 0.8.2

package/dist/checks/bin/check-doc-coverage.js

@@ -3146,14 +3146,43 @@ function resolvePrBody() {
   }
   return "";
 }
-function waiverActiveFromEnv() {
-  const labels = (process.env.PR_LABELS || "").split(",").map((s) => s.trim()).filter(Boolean);
-  if (!labels.includes(WAIVER_LABEL))
+function fetchPrLabels(prNumber) {
+  try {
+    const out = execFileSync3("gh", ["pr", "view", String(prNumber), "--json", "labels"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    return JSON.parse(out).labels.map((l) => l.name);
+  } catch {
+    return null;
+  }
+}
+function fetchWaiverLabelActor(prNumber, label2) {
+  try {
+    const out = execFileSync3("gh", ["api", `repos/{owner}/{repo}/issues/${prNumber}/timeline`, "--paginate"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+    const events = JSON.parse(out);
+    const matches = events.filter((e) => e.event === "labeled" && e.label?.name === label2);
+    return matches[matches.length - 1]?.actor?.login ?? null;
+  } catch {
+    return null;
+  }
+}
+function waiverActive() {
+  const prNumberStr = process.env.PR_NUMBER;
+  if (!prNumberStr)
+    return false;
+  const prNumber = Number(prNumberStr);
+  const labels = fetchPrLabels(prNumber);
+  if (!labels?.includes(WAIVER_LABEL))
     return false;
+  const labelActor = fetchWaiverLabelActor(prNumber, WAIVER_LABEL);
   return isWaiverLabelActorVerified({
     label: WAIVER_LABEL,
     labels,
-    labelActor: process.env.WAIVER_LABEL_ACTOR || null,
+    labelActor,
     principalAllowlist: resolvePrincipalAllowlist(loadTrustAnchorConfig())
   });
 }
@@ -3166,7 +3195,7 @@ function main() {
     process.exit(0);
   }
   const content = existsSync(DOC_OWNERS_PATH) ? readFileSync(DOC_OWNERS_PATH, "utf8") : null;
-  const result = evaluateC5(changed, content, resolvePrBody(), existsSync, waiverActiveFromEnv());
+  const result = evaluateC5(changed, content, resolvePrBody(), existsSync, waiverActive());
   if (result.errors.length > 0) {
     for (const message of result.errors) {
       emitCheckError({

package/dist/index.js

@@ -2970,8 +2970,7 @@ function coreCheckRegistry() {
         BASE_SHA: { optional: true },
         PR_BODY: { optional: true },
         PR_BODY_FILE: { optional: true },
-        PR_LABELS: { optional: true },
-        WAIVER_LABEL_ACTOR: { optional: true },
+        PR_NUMBER: { optional: true },
         GITHUB_REPOSITORY: { optional: true },
         GITHUB_TOKEN: { optional: true },
         GH_TOKEN: { optional: true }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@attalabs/vinaya",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Vinaya — Agentic Engineering Harness. Deterministic checks every AI coding agent must satisfy before merge.",
   "type": "module",
   "license": "Apache-2.0",