@bevel-software/platform-core-backend 0.25.2 → 0.27.0

package/dist/modules/workflow/agent-tools/change-request-read-shape.js

@@ -0,0 +1,481 @@
+/**
+ * The mapping from Hexis's change-request types to the shapes the five agent
+ * read tools answer in.
+ *
+ * The tools are named and shaped after GitHub's pull-request API — one tool per
+ * GitHub endpoint, the same filters, the same paging — but they SPEAK HEXIS
+ * (decision by Razvan, 2026-10-02, on the review of PR #347). An agent opens a
+ * change request with `open_change_request` and reads it back with these five;
+ * answering the first in Hexis's words and the second in GitHub's would make
+ * one request two vocabularies. So every field these answers share with
+ * `open_change_request`'s summary takes that summary's name — `url`, `number`,
+ * `title`, `state`, `sourceBranch`, `targetBranch`, `approvals`,
+ * `mergeBlockedReasons`, `files[].path`, `files[].change` — and the rest follow
+ * the same style (camelCase, Hexis's own words for Hexis's own facts).
+ *
+ * What that changed, against GitHub, and why each is the better answer here:
+ *
+ *   - **State is Hexis's own.** GitHub has two states and a `merged` flag;
+ *     Hexis has three — `open`, `merged`, `closed` — and reports them. A merged
+ *     request is `state: "merged"`, not `closed` with `merged: true`: the flag
+ *     exists on GitHub only because its model has nowhere else to put the fact,
+ *     and an agent reading `state` should not have to read a second field to
+ *     learn whether the change landed.
+ *   - **One name per path.** GitHub names a pull-request file's path `filename`
+ *     and a review comment's `path`; mirroring that inconsistency was the point
+ *     while these tools wore GitHub's names, and is now just a trap. Every path
+ *     in every answer is `path`, and a moved file's old name is `previousPath`,
+ *     as `open_change_request` names them.
+ *   - **A file's kind of change** is `change` — `added` / `changed` / `deleted`
+ *     / `moved`, from the very function `open_change_request` uses
+ *     ({@link changeKindOf}), not git's seven-way `status`. One request, one
+ *     spelling of what happened to a file.
+ *   - **Approvals are per FILE**, not per review submission, because that is
+ *     what Hexis records. A reviewer's approvals at one staleness are gathered
+ *     into one entry naming the files, which is as close to a GitHub review as
+ *     Hexis's model honestly gets.
+ *   - **`stale`, not `DISMISSED`.** Hexis's word for an approval a later push
+ *     invalidated is `isStale`; a review entry reports `stale: true` rather
+ *     than borrowing GitHub's review state.
+ *   - **A reply names its parent `parentId`**, which is the argument
+ *     `post_change_request_comment` takes to create one. Reading a comment and
+ *     replying to it use the same word for the same thing.
+ *
+ * The tools' INPUTS are untouched and stay GitHub's (`state`, `head`, `base`,
+ * `author`, `per_page`, `page`, `include`): the ticket pins them by name, and
+ * they are the one part of the surface where matching GitHub's spelling helps —
+ * an agent that knows GitHub's list filters can use these without reading the
+ * schema. Only the ANSWERS are Hexis's.
+ *
+ * Pure, and deliberately so: every judgement these tools make about what a
+ * caller may see is either an access lookup (which belongs to the service) or
+ * one of the functions below (which belongs to a test that can read it). The
+ * tools file does the IO and calls in here for every decision.
+ */
+import { canonicalEmail, hashEmail } from '../../../shared/email-identity.js';
+import { changeKindOf } from './change-request-summary.js';
+/** What the app says in place of an apply-failure reason the caller may not read. */
+export const APPLY_FAILURE_REASON_WITHHELD = 'The reason names files you do not have access to read.';
+export const PER_PAGE_DEFAULT = 30;
+export const PER_PAGE_MAX = 100;
+/**
+ * GitHub's `per_page` (default 30, at most 100) and `page` (from 1), read off
+ * whatever the caller sent. A value out of range is clamped rather than
+ * refused, because a tool call that asks for 500 wants as many as it can have.
+ */
+export function pagingOf(args) {
+    const rawPer = typeof args.per_page === 'number' ? Math.trunc(args.per_page) : PER_PAGE_DEFAULT;
+    const rawPage = typeof args.page === 'number' ? Math.trunc(args.page) : 1;
+    return {
+        perPage: Math.min(PER_PAGE_MAX, Math.max(1, Number.isFinite(rawPer) ? rawPer : PER_PAGE_DEFAULT)),
+        page: Math.max(1, Number.isFinite(rawPage) ? rawPage : 1),
+    };
+}
+/**
+ * One page out of an already-filtered list. Paging runs AFTER the access
+ * filter, always: a page sliced before it would say by its own short length
+ * how many entries were withheld, which is the count's job to say and nobody
+ * else's.
+ */
+export function pageOf(all, perPage, page) {
+    const start = (page - 1) * perPage;
+    return {
+        items: all.slice(start, start + perPage),
+        totalCount: all.length,
+        page,
+        perPage,
+        hasNextPage: start + perPage < all.length,
+    };
+}
+/**
+ * The Hexis states the `state` FILTER selects. The filter keeps GitHub's three
+ * words because the ticket names them, and `closed` there means "not open" —
+ * which over Hexis's states is `closed` (declined) and `merged` alike. The
+ * ANSWER still reports which of the two a request is.
+ */
+export function statesFor(filter) {
+    if (filter === 'open')
+        return ['open'];
+    if (filter === 'closed')
+        return ['closed', 'merged'];
+    return ['open', 'closed', 'merged'];
+}
+/** The request's author: a hash-derived login, never an email. */
+export function crAuthor(cr) {
+    const name = cr.appAuthor?.name ?? cr.author.name;
+    return { login: cr.author.login, ...(name ? { name } : {}) };
+}
+/**
+ * Whether `needle` names this request's author — an email (compared as the
+ * author hash, since the request stores no raw address) or a login. Mirrors
+ * `listPrsAuthoredBy`, so the tool's `author` filter and the app's "mine" list
+ * agree on who wrote what.
+ */
+export function matchesAuthor(cr, needle) {
+    const wanted = canonicalEmail(needle);
+    if (!wanted)
+        return false;
+    if (wanted.includes('@'))
+        return !!(cr.authorId && cr.authorId === hashEmail(wanted));
+    return cr.author.login.toLowerCase() === wanted;
+}
+/** Whether `viewerEmail` opened this request. */
+export function isAuthor(cr, viewerEmail) {
+    return !!(viewerEmail && cr.authorId && cr.authorId === hashEmail(viewerEmail));
+}
+/**
+ * Whether the caller may SEE a change request at all.
+ *
+ * Readable files, or authorship. Nothing else: a request every file of which
+ * is closed to the caller tells them, by existing, that somebody proposed a
+ * change to something they may not look at, and requirement 7 answers that
+ * with a 404 rather than an empty shell.
+ *
+ * A request with NO files resolved is not visible to a non-author either, and
+ * that is deliberate rather than an oversight: an empty file set is what both a
+ * request that genuinely changes nothing and a request whose diff could not be
+ * computed look like, and the two are indistinguishable from here. So an empty
+ * set proves no read access — the same rule `scopeApplyFailures` applies to the
+ * same question on the same lists.
+ *
+ * Since the 2026-10-02 decision this is a far smaller class than it was: a
+ * MERGED request's files are recovered from its merge commit, so being applied
+ * no longer hides a request from everyone but its author. What is left is a
+ * DECLINED request (no merge commit was ever written, and its branch is gone)
+ * and a clone that cannot resolve the commit at all.
+ */
+export function maySeeChangeRequest(input) {
+    return input.isAuthor || input.readableFiles > 0;
+}
+/** A list row. `readable` / `withheld` come from the access filter. */
+export function toCrSummary(cr, counts) {
+    return {
+        url: cr.url,
+        ...(cr.urlNote ? { urlNote: cr.urlNote } : {}),
+        number: cr.number,
+        title: cr.title,
+        state: cr.state,
+        author: crAuthor(cr),
+        sourceBranch: cr.branch,
+        targetBranch: cr.base,
+        createdAt: cr.createdAt,
+        updatedAt: cr.updatedAt ?? cr.createdAt,
+        changedFiles: counts.readable,
+        withheldFiles: counts.withheld,
+        // The same predicate the app's own list applies (`scopeApplyFailures`): a
+        // non-empty file set, every file readable. An empty set proves nothing,
+        // so it never grants the reason.
+        ...(cr.lastApplyFailure
+            ? {
+                lastApplyFailure: {
+                    reason: counts.readable > 0 && counts.withheld === 0
+                        ? cr.lastApplyFailure.reason
+                        : APPLY_FAILURE_REASON_WITHHELD,
+                    conflicts: cr.lastApplyFailure.conflicts,
+                    at: cr.lastApplyFailure.at,
+                },
+            }
+            : {}),
+    };
+}
+/** A detail: the row, the author's description, and the gate as this caller sees it. */
+export function toCrDetail(detail, counts, blockers, viewer) {
+    return {
+        ...toCrSummary(detail, counts),
+        // Empty rather than present-and-empty: a merged request read from its merge
+        // commit knows both commits, a declined one knows neither, and `''` would
+        // read as a sha nobody can look up.
+        ...(detail.headSha ? { headSha: detail.headSha } : {}),
+        ...(detail.baseSha ? { baseSha: detail.baseSha } : {}),
+        body: authorsDescription(detail.body),
+        mergeable: detail.mergeableInBevel,
+        mergeBlockedReasons: blockers.visible,
+        withheldMergeBlockedReasons: blockers.withheld,
+        viewer,
+    };
+}
+/**
+ * The part of a change-request body its AUTHOR wrote.
+ *
+ * A Hexis body is part human and part machine: `openChangeRequest` appends an
+ * `## Affected owners` block — one line per changed path, naming that path and
+ * its eligible approvers — to whatever the author typed. Returning the body
+ * verbatim NAMED every file of the request, including the ones this caller may
+ * not read: Local Testing caught a GTM-team reader being handed
+ * `- \`KnowledgeBase/Engineering/…\` — Admin` out of a request whose file list
+ * had correctly withheld that very path.
+ *
+ * So the generated block goes, and NOTHING ELSE does. The first cut at this
+ * copied the app's dialog, which drops everything from the first `##` heading
+ * on; Razvan's review (2026-10-02) asked for the narrower cut, because an
+ * author who writes their description in sections loses it from that heading
+ * onwards and is never told. The generated block is appended LAST and begins
+ * with a line that is exactly `## Affected owners`, so cutting at the LAST such
+ * line removes the machinery and keeps every heading a person wrote. (An author
+ * who writes that exact heading themselves loses their text from there — the
+ * safe direction, and the only way this can err.)
+ *
+ * Hexis's OWN hidden markers go too — the `<!--hexis:…-->` / `<!--bevel:…-->`
+ * comments older bodies carry identity in — and no other comment: an HTML
+ * comment the author wrote is the author's prose, like the rest.
+ *
+ * Who must approve each file is NOT lost by this — it is what
+ * `list_change_request_files` answers under `requiredApprovers`, per file and
+ * access-filtered, which is where a caller should read it from anyway.
+ *
+ * Two things this deliberately does not do. It does not vary by caller: one
+ * body for everyone is a body nobody has to reason about. And it does not touch
+ * the author's own prose, which may mention any path they chose to write about —
+ * that is a person's sentence, shown to every viewer in the app, not Hexis
+ * naming a file it was asked to withhold.
+ */
+export function authorsDescription(body) {
+    const lines = body.split('\n');
+    const generated = lines.lastIndexOf('## Affected owners');
+    return (generated === -1 ? lines : lines.slice(0, generated))
+        .join('\n')
+        .replace(/<!--\s*(?:hexis|bevel)[:/][\s\S]*?-->/g, '')
+        .trim();
+}
+/**
+ * What this caller may do with the request.
+ *
+ * `mayMerge` reproduces what `mergePr` would accept, from the detail's own
+ * published fields: no hard block, and either nothing missing or an admin who
+ * may bypass what is. Deriving it here rather than asking a second time keeps
+ * the answer and the enforcement reading the same gate.
+ *
+ * `mayApprove` answers over `shownApprovals` — the approvals of the files this
+ * caller is SHOWN — and not over the request's whole approval set, which is why
+ * the set is passed in rather than read off `detail`. The two differ:
+ * `viewerCanApprove` is a WRITE grant at `origin/<base>`, and a write grant can
+ * hold for a file whose read verdict withholds it. Answering true off such a
+ * file would both contradict the contract ("at least one file they are shown")
+ * and tell the caller something about a file they were refused.
+ */
+export function toCrViewer(detail, viewerIsAuthor, shownApprovals) {
+    const warnings = new Set(detail.mergeWarnings);
+    const hard = detail.mergeBlockedReasons.filter((r) => !warnings.has(r));
+    return {
+        // Nothing on a merged or declined request is there to approve, whatever
+        // write grant the caller holds on its files.
+        mayApprove: detail.state === 'open' && shownApprovals.some((a) => a.viewerCanApprove),
+        mayMerge: detail.state === 'open' &&
+            hard.length === 0 &&
+            (detail.mergeWarnings.length === 0 || detail.viewerCanBypassMerge),
+        isAuthor: viewerIsAuthor,
+    };
+}
+/**
+ * The merge blockers the caller may read.
+ *
+ * A gate warning quotes the path it waits on (`Waiting on approval for
+ * X from …`), so a blocker about a withheld file would name that file. Each
+ * blocker mentioning any withheld path is dropped and counted. Matching on the
+ * text rather than rebuilding the gate's sentences is deliberate: the gate owns
+ * its wording, and the only way this can err is by withholding a line that
+ * contains a withheld path as a substring — which is the safe direction.
+ */
+export function visibleBlockers(reasons, withheldPaths) {
+    if (withheldPaths.length === 0)
+        return { visible: [...reasons], withheld: 0 };
+    const visible = reasons.filter((r) => !withheldPaths.some((p) => r.includes(p)));
+    return { visible, withheld: reasons.length - visible.length };
+}
+/**
+ * Whether the caller may read a changed file AT ALL.
+ *
+ * Both of its names must be readable. A moved file carries its old path in
+ * `previousPath`, and the diff of a move shows the content that was at that
+ * old path — so a file moved OUT of a folder the caller may not read is not
+ * readable here either, however open its new home is, and `previousPath` can
+ * never name a path they were refused. Fail-closed in the one direction that
+ * matters: a file with nowhere to hide is listed, a file with a hidden side is
+ * withheld and counted.
+ */
+export function fileIsReadable(file, mayRead) {
+    if (!mayRead(file.path))
+        return false;
+    return file.previousPath === undefined || mayRead(file.previousPath);
+}
+/** Every path a changed file names — both sides of a move. */
+export function pathsOf(file) {
+    return file.previousPath === undefined ? [file.path] : [file.path, file.previousPath];
+}
+/** A changed file plus its approval state. */
+export function toCrFile(file, approval, 
+/** `open`: whether the request still is — an approval can be given on an open request only. */
+opts) {
+    return {
+        path: file.path,
+        ...(file.previousPath ? { previousPath: file.previousPath } : {}),
+        change: changeKindOf(file.status),
+        additions: file.additions,
+        deletions: file.deletions,
+        // No `sha`. GitHub's file entry carries the blob sha at the head, and an
+        // earlier draft of this answer did too — but nothing in Hexis populates it:
+        // `GitService.prFilesForRange`, the only builder of `PullRequestFile` and
+        // the one that serves an open request and an applied one alike, writes
+        // `sha: ''` for every file. Answering a field whose every value is the empty
+        // string is worse than not answering it, because an agent that pins content
+        // or a diff on it gets no error (cubic P3 on #347). If a blob sha is wanted
+        // here, the git layer has to produce it first — `git diff --raw` carries
+        // both sides' blob shas — and the app's own change-request detail gets it in
+        // the same change.
+        ...(opts.patches && file.patch !== undefined ? { patch: file.patch } : {}),
+        isBinary: file.isBinary,
+        requiredApprovers: {
+            roles: approval?.eligibleApprovers.roles ?? [],
+            users: (approval?.eligibleApprovers.users ?? []).map((u) => ({
+                login: loginFor(u.email),
+                name: u.name,
+                email: u.email,
+            })),
+        },
+        // No approval entry at all means the lookup never ran (no workspace, an
+        // unwired enricher), which is exactly the "unknown" the flag reports — and
+        // it is reported the way `open_change_request` reports it: a present
+        // `approversUnknown`, absent when the set IS known, so the fail-closed
+        // reading is the one a caller gets by default.
+        ...(approval?.eligibilityResolved === true ? {} : { approversUnknown: true }),
+        approvedBy: (approval?.approvedBy ?? []).map(toCrFileApproval),
+        approved: approval?.isApproved === true,
+        inMergeGate: approval?.inMergeGate === true,
+        viewerMayApprove: opts.open && approval?.viewerCanApprove === true,
+    };
+}
+function toCrFileApproval(entry) {
+    return {
+        user: { login: loginFor(entry.email), name: entry.name, email: entry.email },
+        approvedAt: entry.approvedAt,
+        stale: entry.isStale,
+        selfApproval: entry.isSelfApproval,
+    };
+}
+/** The same hash-derived login the change-request summaries carry. */
+export function loginFor(email) {
+    return `user-${hashEmail(email).slice(0, 12)}`;
+}
+/**
+ * The reviews of a change request, gathered out of its per-file approvals.
+ *
+ * Hexis records an approval per FILE; a review list wants one entry per review.
+ * One entry per (reviewer, staleness) is the closest honest join: it names the
+ * reviewer once and the files they approved, which is what the ticket's
+ * scenario asks to read back. A reviewer holding both a current and a stale
+ * approval appears twice — one entry for the files that still stand and one
+ * with `stale: true` for the ones the latest push invalidated.
+ *
+ * `mayShow` decides, per file, what this caller may be told. A review keeps the
+ * files they may read and counts the rest in its own `withheldFiles`; a review
+ * EVERY file of which is withheld is dropped and counted in `withheldReviews`,
+ * because naming the reviewer would itself say that somebody approved a change
+ * to something the caller may not look at. `submittedAt` is taken from the
+ * readable approvals alone, for the same reason.
+ *
+ * Hexis records nothing about who DECLINED a request — a rejection closes it
+ * and stores no reviewer — so no review entry can report one. A reviewer's
+ * objection lives in a comment, which `list_change_request_comments` returns.
+ */
+export function toCrReviews(approvals, mayShow = () => true) {
+    const byReviewer = new Map();
+    for (const approval of approvals) {
+        const readable = mayShow(approval.path);
+        for (const entry of approval.approvedBy) {
+            const login = loginFor(entry.email);
+            const id = `${login}:${entry.isStale ? 'stale' : 'current'}`;
+            let review = byReviewer.get(id);
+            if (!review) {
+                review = {
+                    id,
+                    reviewer: { login, name: entry.name, email: entry.email },
+                    stale: entry.isStale,
+                    submittedAt: '',
+                    files: [],
+                    withheldFiles: 0,
+                };
+                byReviewer.set(id, review);
+            }
+            if (!readable) {
+                review.withheldFiles += 1;
+                continue;
+            }
+            review.files.push(approval.path);
+            if (entry.approvedAt > review.submittedAt)
+                review.submittedAt = entry.approvedAt;
+        }
+    }
+    const all = [...byReviewer.values()];
+    const reviews = all.filter((r) => r.files.length > 0);
+    return {
+        reviews: reviews.sort((a, b) => a.submittedAt.localeCompare(b.submittedAt) || a.id.localeCompare(b.id)),
+        withheldReviews: all.length - reviews.length,
+    };
+}
+/** A comment. Covers the file-anchored and the general ones — Hexis has one table. */
+export function toCrComment(comment) {
+    return {
+        id: comment.id,
+        author: {
+            login: loginFor(comment.author.email),
+            name: comment.author.name,
+            email: comment.author.email,
+        },
+        body: comment.body,
+        ...(comment.path ? { path: comment.path } : {}),
+        ...(comment.line !== undefined ? { line: comment.line } : {}),
+        ...(comment.parentId ? { parentId: comment.parentId } : {}),
+        headSha: comment.headSha,
+        createdAt: comment.createdAt,
+        ...(comment.updatedAt ? { updatedAt: comment.updatedAt } : {}),
+    };
+}
+/**
+ * The comments the caller may read, replies included in the answer only when
+ * the comment they reply to is.
+ *
+ * A comment with no path is about the request as a whole, and a comment with
+ * one is as readable as that path is NAMEABLE here (`mayShow`, so a comment
+ * anchored to the new name of a file withheld for its old one goes with the
+ * file rather than announcing it). A REPLY is neither, quite: it carries no
+ * path of its own when it was posted without one, so judged on itself it is a
+ * general comment — and `post_change_request_comment` takes `parentId` without
+ * requiring `path`, so a reply to a comment on a withheld file was returned
+ * with its body and a `parentId` naming a comment the caller cannot see.
+ * Razvan's review (2026-10-02) asked for the rule the ticket states: a reply is
+ * shown only when its parent is.
+ *
+ * So a comment is visible when its OWN path may be shown (if it has one) AND
+ * its parent is visible, all the way up the chain. Both halves are needed:
+ * inheriting only would show a reply naming a withheld file under a readable
+ * parent, and checking only its own path would show it under a withheld one.
+ *
+ * Fail-closed at the edges. A `parentId` naming a comment that is not in this
+ * request's list (deleted, or from somewhere this answer cannot see) is not
+ * provably pathless, so the reply goes. A cycle — which the schema does not
+ * permit and a corrupted row could still hold — is unresolvable, so it goes
+ * too. Both are counted in the withheld total, never named.
+ */
+export function visibleComments(comments, mayShow) {
+    const byId = new Map(comments.map((c) => [c.id, c]));
+    /** Memoised per id, so a long thread costs one walk and not one per reply. */
+    const verdicts = new Map();
+    const mayShowComment = (comment, seen) => {
+        const cached = verdicts.get(comment.id);
+        if (cached !== undefined)
+            return cached;
+        if (seen.has(comment.id))
+            return false;
+        seen.add(comment.id);
+        let verdict = !comment.path || mayShow(comment.path);
+        if (verdict && comment.parentId) {
+            const parent = byId.get(comment.parentId);
+            verdict = parent !== undefined && mayShowComment(parent, seen);
+        }
+        verdicts.set(comment.id, verdict);
+        return verdict;
+    };
+    const visible = comments.filter((c) => mayShowComment(c, new Set()));
+    return { visible, withheld: comments.length - visible.length };
+}
+//# sourceMappingURL=change-request-read-shape.js.map

package/dist/modules/workflow/agent-tools/change-request-read-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-request-read-shape.js","sourceRoot":"","sources":["../../../../src/modules/workflow/agent-tools/change-request-read-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAUH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAkD5E,qFAAqF;AACrF,MAAM,CAAC,MAAM,6BAA6B,GAAG,wDAAwD,CAAC;AAsHtG,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAA4C;IAInE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAChG,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACjG,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,MAAM,CAAI,GAAQ,EAAE,OAAe,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC;IACnC,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC;QACxC,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,IAAI;QACJ,OAAO;QACP,WAAW,EAAE,KAAK,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAiC;IACzD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,QAAQ,CAAC,EAA+C;IACtE,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;IAClD,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,EAA8C,EAC9C,MAAc;IAEd,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtF,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAClD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,QAAQ,CACtB,EAAmC,EACnC,WAA+B;IAE/B,OAAO,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAGnC;IACC,OAAO,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CACzB,EAAiB,EACjB,MAA8C;IAE9C,OAAO;QACL,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpB,YAAY,EAAE,EAAE,CAAC,MAAM;QACvB,YAAY,EAAE,EAAE,CAAC,IAAI;QACrB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,SAAS;QACvC,YAAY,EAAE,MAAM,CAAC,QAAQ;QAC7B,aAAa,EAAE,MAAM,CAAC,QAAQ;QAC9B,0EAA0E;QAC1E,wEAAwE;QACxE,iCAAiC;QACjC,GAAG,CAAC,EAAE,CAAC,gBAAgB;YACrB,CAAC,CAAC;gBACE,gBAAgB,EAAE;oBAChB,MAAM,EACJ,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBAC1C,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM;wBAC5B,CAAC,CAAC,6BAA6B;oBACnC,SAAS,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS;oBACxC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE;iBAC3B;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CACxB,MAA2B,EAC3B,MAA8C,EAC9C,QAAiD,EACjD,MAAgB;IAEhB,OAAO;QACL,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;QAC9B,4EAA4E;QAC5E,0EAA0E;QAC1E,oCAAoC;QACpC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,gBAAgB;QAClC,mBAAmB,EAAE,QAAQ,CAAC,OAAO;QACrC,2BAA2B,EAAE,QAAQ,CAAC,QAAQ;QAC9C,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAC1D,OAAO,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,wCAAwC,EAAE,EAAE,CAAC;SACrD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,UAAU,CACxB,MAGC,EACD,cAAuB,EACvB,cAAwD;IAExD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO;QACL,wEAAwE;QACxE,6CAA6C;QAC7C,UAAU,EAAE,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACrF,QAAQ,EACN,MAAM,CAAC,KAAK,KAAK,MAAM;YACvB,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,oBAAoB,CAAC;QACpE,QAAQ,EAAE,cAAc;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAiB,EACjB,aAAuB;IAEvB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAgD,EAChD,OAAkC;IAElC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;AACvE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,OAAO,CAAC,IAAgD;IACtE,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;AACxF,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,QAAQ,CACtB,IAAiB,EACjB,QAAkC;AAClC,+FAA+F;AAC/F,IAAyC;IAEzC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,uEAAuE;QACvE,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,mBAAmB;QACnB,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE;YACjB,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,IAAI,EAAE;YAC9C,KAAK,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3D,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAAC;SACJ;QACD,wEAAwE;QACxE,2EAA2E;QAC3E,qEAAqE;QACrE,uEAAuE;QACvE,+CAA+C;QAC/C,GAAG,CAAC,QAAQ,EAAE,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAa,EAAE,CAAC;QACtF,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9D,QAAQ,EAAE,QAAQ,EAAE,UAAU,KAAK,IAAI;QACvC,WAAW,EAAE,QAAQ,EAAE,WAAW,KAAK,IAAI;QAC3C,gBAAgB,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ,EAAE,gBAAgB,KAAK,IAAI;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyC;IACjE,OAAO;QACL,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QAC5E,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,OAAO;QACpB,YAAY,EAAE,KAAK,CAAC,cAAc;KACnC,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,QAAQ,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,WAAW,CACzB,SAAyB,EACzB,UAAqC,GAAG,EAAE,CAAC,IAAI;IAE/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,EAAE,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YAC7D,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG;oBACP,EAAE;oBACF,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;oBACzD,KAAK,EAAE,KAAK,CAAC,OAAO;oBACpB,WAAW,EAAE,EAAE;oBACf,KAAK,EAAE,EAAE;oBACT,aAAa,EAAE,CAAC;iBACjB,CAAC;gBACF,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW;gBAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACnF,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CACjF;QACD,eAAe,EAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;KAC7C,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,OAA6B;IACvD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE;YACN,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YACrC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;SAC5B;QACD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAa,EACb,OAAkC;IAElC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,cAAc,GAAG,CAAC,OAAU,EAAE,IAAiB,EAAW,EAAE;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1C,OAAO,GAAG,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjE,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC"}

package/dist/modules/workflow/agent-tools/change-request-read.tools.d.ts

@@ -0,0 +1,126 @@
+import type { Router, RequestHandler } from 'express';
+import type { ChangeRequestDetail } from '@bevel-software/platform-shared';
+import type { IToolRegistry } from '../../tool-registry/tool.contract.js';
+import { ToolError, type ToolContext } from '../../tool-helpers/tool.contract.js';
+import type { ToolHandlerFactory } from '../../tool-helpers/tool-handler.js';
+import type { KbContext } from '../../../shared/kb-context.js';
+import type { IAccessControl } from '../../access/access-control.interface.js';
+/**
+ * The five read tools over change requests, named and shaped after GitHub's
+ * pull-request API: `list_change_requests`, `get_change_request`,
+ * `list_change_request_files`, `list_change_request_reviews` and
+ * `list_change_request_comments`. The mapping lives in
+ * `change-request-read-shape.ts`; this file does the IO and the access
+ * filtering.
+ *
+ * They ANSWER in Hexis's own vocabulary, not GitHub's field names (Razvan's
+ * decision on the review of PR #347, 2026-10-02): every field shared with
+ * `open_change_request`'s summary takes that summary's name, and the rest follow
+ * its style, so an agent opens a change request and reads it back in one
+ * vocabulary. Their INPUTS keep GitHub's filter names, which the ticket pins.
+ * The shape module's header says what that changed, field by field.
+ *
+ * None of them writes anything — every handler is registered `write: false`,
+ * so a read-scoped connection key may call all five, and every service call
+ * below is a read.
+ *
+ * ## What the caller may see
+ *
+ * The app's own change-request routes serve the whole list and the whole
+ * detail to any signed-in viewer; only the file CONTENT routes gate per path
+ * (`canReadAtRef` at `origin/<base>`, with an unresolvable verdict as a
+ * denial). These tools apply that same content gate to the whole payload,
+ * because an agent's answer is the content: a file list, a reviewer's comment
+ * and a gate warning all name paths, and an agent hands what it reads to
+ * whoever it is talking to.
+ *
+ * So, per request:
+ *
+ *   - every path is resolved at `origin/<base>` — the target's access tree, the
+ *     one the request is asking to be judged against — in ONE batched lookup;
+ *   - BOTH names of a moved file are resolved, and a file is readable only if
+ *     both are: the diff of a move shows what was at the old path, so a file
+ *     moved out of a closed folder stays closed, however open its new home.
+ *     The LIST decides this over the same `touchedNodeFiles` pairs the detail
+ *     does — a list that judged the flat `touchedNodePaths` could not see a
+ *     move's old side, and advertised requests its own by-number tools
+ *     answered 404 for;
+ *   - files the caller may not read are left out and counted in
+ *     `withheldFiles`, never named (decision 2 on the ticket);
+ *   - comments on a withheld file, and gate blockers naming one, go the same
+ *     way, with their own counts; a REPLY goes when the comment it replies to
+ *     does, up the whole chain;
+ *   - `body` is the author's own description, with the generated
+ *     `## Affected owners` block cut off the end — see `authorsDescription`;
+ *   - a request with no readable file and no claim of authorship answers 404,
+ *     indistinguishable from a number that was never issued.
+ *
+ * ## Reading a request that is no longer open
+ *
+ * A MERGED request is read from the merge commit its row records: its branch is
+ * retired, but the commit holds exactly the change that landed, so its file list
+ * is recovered from there and filtered by access like an open request's (the
+ * 2026-10-02 decision). Nothing in that path touches the network — the commit is
+ * in the clone or it is not.
+ *
+ * A DECLINED request has no merge commit and no branch left to diff, so its file
+ * set cannot be resolved at all; it fails closed, and is therefore readable by
+ * its author alone. "We cannot tell what this request touched" is not "you may
+ * see it", and an empty path set is the same answer `scopeApplyFailures` already
+ * refuses to grant anything on. The same holds for any request whose file set
+ * does not resolve — an access tree that will not load at `origin/<base>`, or a
+ * clone that does not have the merge commit yet.
+ */
+export declare function registerChangeRequestReadTools(registry: IToolRegistry, router: Router, toolAuth: RequestHandler, toolHandler: ToolHandlerFactory, accessControl: Pick<IAccessControl, 'canReadBatchAtRef'>, kb: Pick<KbContext, 'defaultWorkspaceId'>): void;
+/**
+ * The detail of request `number` with the access filter applied, or a 404 —
+ * the one place the four by-number tools get their data, so they cannot
+ * drift on who may see what.
+ */
+export interface ScopedDetail {
+    detail: ChangeRequestDetail;
+    /**
+     * Whether the caller may read one path of this request — the raw per-path
+     * verdict, as the access tree gives it at `origin/<base>`.
+     */
+    mayRead: (path: string) => boolean;
+    /**
+     * Whether this request may NAME `path` to the caller — `mayRead`, minus
+     * every name a withheld file goes by. The ONE verdict the tools below ask
+     * about a path, so none of them can decide it a second way.
+     *
+     * The two differ on exactly one shape, and it is the shape that leaks: a
+     * file moved out of a folder the caller may not read is readable under
+     * its NEW name, yet `fileIsReadable` withholds it whole (its diff shows the
+     * old path's content). Anything keyed on that new path — an approval, a
+     * comment anchored to it — would otherwise say the request touches a file
+     * the file tool refuses to list, under a name it refuses to print.
+     */
+    mayShow: (path: string) => boolean;
+    /** The request's files the caller may read, in the request's own order. */
+    readableFiles: ChangeRequestDetail['files'];
+    /**
+     * Every name the withheld files go by — for filtering the gate blockers and
+     * for deciding `mayShow`. NEVER answered: use `withheldFileCount` to report
+     * them.
+     */
+    withheldFilePaths: string[];
+    /** How many files are withheld. One per file, whatever its move names. */
+    withheldFileCount: number;
+    viewerIsAuthor: boolean;
+}
+/**
+ * The access scope of one change request, as every by-number read tool sees
+ * it — and as `delete_branch` does, so a deletion's preview or refusal never
+ * names a request `get_change_request` answers as not found.
+ */
+export declare function changeRequestScope(accessControl: Pick<IAccessControl, 'canReadBatchAtRef'>, kb: Pick<KbContext, 'defaultWorkspaceId'>): {
+    repoGlobalWorkspaceId: (ctx: ToolContext) => Promise<string>;
+    readablePaths: (ctx: ToolContext, workspaceId: string, base: string, paths: string[]) => Promise<Set<string>>;
+    scopedDetail: (ctx: ToolContext, number: number, opts: {
+        patches: boolean;
+    }) => Promise<ScopedDetail>;
+    notFound: (number: number) => ToolError;
+    maySee: (ctx: ToolContext, number: number) => Promise<boolean>;
+};
+//# sourceMappingURL=change-request-read.tools.d.ts.map

package/dist/modules/workflow/agent-tools/change-request-read.tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-request-read.tools.d.ts","sourceRoot":"","sources":["../../../../src/modules/workflow/agent-tools/change-request-read.tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAEV,mBAAmB,EAGpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,KAAK,WAAW,EAAoB,MAAM,qCAAqC,CAAC;AAEpG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAsB/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,kBAAkB,EAC/B,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,CAAC,EACxD,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,GACxC,IAAI,CA0fN;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,mBAAmB,CAAC;IAC5B;;;OAGG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC;;;;;;;;;;;OAWG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,2EAA2E;IAC3E,aAAa,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC5C;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,mBAAmB,CAAC,EACxD,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC;iCAOC,WAAW,KAAG,OAAO,CAAC,MAAM,CAAC;yBAUhE,WAAW,eACH,MAAM,QACb,MAAM,SACL,MAAM,EAAE,KACd,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAahB,WAAW,UACR,MAAM,QACR;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KACzB,OAAO,CAAC,YAAY,CAAC;uBA8CE,MAAM,KAAG,SAAS;kBAIjB,WAAW,UAAU,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;EAW1E"}