@clawos-dev/clawd 0.2.313 → 0.2.315

package/dist/cli.cjs

@@ -6584,6 +6584,32 @@ var init_shift_internal = __esm({
   }
 });
 
+// ../protocol/src/github.ts
+var GITHUB_PR_ROLES, REPO_SEGMENT, owner, repo, number, GithubPrListArgs, GithubPrDetailArgs, GithubPrMergeArgs, GithubPrCommentArgs, GithubPrSetReadyArgs, GithubCollaboratorsArgs, GithubPrRequestReviewersArgs;
+var init_github = __esm({
+  "../protocol/src/github.ts"() {
+    "use strict";
+    init_zod();
+    GITHUB_PR_ROLES = ["created", "review-requested"];
+    REPO_SEGMENT = /^[A-Za-z0-9._-]+$/;
+    owner = external_exports.string().min(1).regex(REPO_SEGMENT);
+    repo = external_exports.string().min(1).regex(REPO_SEGMENT);
+    number = external_exports.number().int().positive();
+    GithubPrListArgs = external_exports.object({ role: external_exports.enum(GITHUB_PR_ROLES) });
+    GithubPrDetailArgs = external_exports.object({ owner, repo, number });
+    GithubPrMergeArgs = external_exports.object({ owner, repo, number, expectedHeadSha: external_exports.string().min(1) });
+    GithubPrCommentArgs = external_exports.object({ owner, repo, number, body: external_exports.string().min(1) });
+    GithubPrSetReadyArgs = external_exports.object({ owner, repo, number, ready: external_exports.boolean() });
+    GithubCollaboratorsArgs = external_exports.object({ owner, repo });
+    GithubPrRequestReviewersArgs = external_exports.object({
+      owner,
+      repo,
+      number,
+      reviewers: external_exports.array(external_exports.string().min(1)).min(1)
+    });
+  }
+});
+
 // ../protocol/src/lark-bot-schemas.ts
 var LarkBotPersonaArgs, LarkBotUnbindArgs, LarkBotStatusArgs, LarkBotProvisionArgs, LarkBotProvisionCancelArgs, LARK_BOT_PROVISION_ERROR_REASONS, LarkBotProvisionErrorReasonSchema, LarkBotBindManualArgs, LarkBotGroupSchema, LarkBotStatusResultSchema, LarkBotStateFrameSchema;
 var init_lark_bot_schemas = __esm({
@@ -7878,6 +7904,7 @@ var init_methods = __esm({
     init_inbox();
     init_peer_exec();
     init_shift_internal();
+    init_github();
     init_lark_bot_schemas();
     init_persona_schemas();
     init_schemas();
@@ -8041,6 +8068,38 @@ var init_methods = __esm({
         summary: "\u5217\u51FA owner \u7684\u5168\u90E8 shift\uFF08\u6392\u73ED\uFF09\uFF0C\u7ED9 UI \u65E5\u5386\u6E32\u67D3\u7528\uFF1Bowner-only",
         args: NO_ARGS
       },
+      "github:status": {
+        summary: "\u63A2\u6D4B\u672C\u673A gh CLI\uFF08PR \u6536\u4EF6\u7BB1\u524D\u7F6E\uFF09\uFF1A\u662F\u5426\u5B89\u88C5\u3001\u662F\u5426\u5DF2\u767B\u5F55 github.com\u3001\u767B\u5F55\u540D\u3002\u65E0\u53C2\u6570",
+        args: NO_ARGS
+      },
+      "github:prList": {
+        summary: "\u5217 open PR\uFF08\u542B draft\uFF09\u3002role=created \u7531\u6211\u521B\u5EFA / review-requested \u8BF7\u6C42\u6211\u8BC4\u5BA1\uFF1BGitHub \u5168\u57DF search\uFF0Cupdated \u5012\u5E8F",
+        args: GithubPrListArgs
+      },
+      "github:prDetail": {
+        summary: "\u5355\u4E2A PR \u8BE6\u60C5\uFF1A\u5206\u652F/diffstat/\u5BA1\u67E5\u8005/\u8BC4\u8BBA\u6570/checks \u9010\u9879/mergeable/headRefOid\uFF08\u5408\u5E76\u5E76\u53D1\u4FDD\u62A4\u7528\uFF09",
+        args: GithubPrDetailArgs
+      },
+      "github:prMerge": {
+        summary: "squash \u5408\u5E76\u3002expectedHeadSha \u4E0E\u670D\u52A1\u7AEF\u4E0D\u7B26\u65F6\u4E0D\u5408\u5E76\uFF0C\u8FD4\u56DE merged:false + reason=head-changed",
+        args: GithubPrMergeArgs
+      },
+      "github:prComment": {
+        summary: "\u53D1 issue \u8BC4\u8BBA\u5230 PR",
+        args: GithubPrCommentArgs
+      },
+      "github:prSetReady": {
+        summary: "draft\u2194ready \u5207\u6362\uFF1Aready=true \u8F6C\u53EF\u8BC4\u5BA1\uFF0Cfalse \u8F6C\u8349\u7A3F",
+        args: GithubPrSetReadyArgs
+      },
+      "github:collaborators": {
+        summary: "\u5217 repo collaborators \u767B\u5F55\u540D\uFF08\u5BA1\u67E5\u8005\u9009\u4EBA\u540D\u5355\uFF09",
+        args: GithubCollaboratorsArgs
+      },
+      "github:prRequestReviewers": {
+        summary: "\u7ED9 PR \u8BF7\u6C42\u5BA1\u67E5\u8005\uFF08\u8FFD\u52A0\uFF0C\u4E0D\u8986\u76D6\u5DF2\u6709\uFF09",
+        args: GithubPrRequestReviewersArgs
+      },
       "shift-internal:add": {
         summary: "\u6392\u4E00\u4E2A shift\uFF08\u5230\u70B9\u81EA\u52A8\u62C9\u8D77 persona \u5E72\u6D3B\uFF09\u3002\u7701\u7565 targetPersona = \u6D3E\u7ED9\u8C03\u7528\u65B9\u81EA\u5DF1",
         args: ShiftInternalAddArgs
@@ -8529,6 +8588,7 @@ var init_runtime = __esm({
     init_dispatch();
     init_log();
     init_visitor_schemas();
+    init_github();
     init_shift_internal();
     init_lark_bot_schemas();
     init_lark_bot_format();
@@ -11987,11 +12047,11 @@ var require_safe_stable_stringify = __commonJS({
       }
       return value === void 0 ? Infinity : value;
     }
-    function getItemCount(number) {
-      if (number === 1) {
+    function getItemCount(number2) {
+      if (number2 === 1) {
         return "1 item";
       }
-      return `${number} items`;
+      return `${number2} items`;
     }
     function getUniqueReplacerSet(replacerArray) {
       const replacerSet = /* @__PURE__ */ new Set();
@@ -12708,8 +12768,8 @@ var require_pino = __commonJS({
         bindings(bindings) {
           return bindings;
         },
-        level(label, number) {
-          return { level: number };
+        level(label, number2) {
+          return { level: number2 };
         }
       }),
       hooks: {
@@ -22167,19 +22227,19 @@ var require_luxon = __commonJS({
         return Math.floor(f);
       }
     }
-    function roundTo(number, digits, rounding = "round") {
+    function roundTo(number2, digits, rounding = "round") {
       const factor = 10 ** digits;
       switch (rounding) {
         case "expand":
-          return number > 0 ? Math.ceil(number * factor) / factor : Math.floor(number * factor) / factor;
+          return number2 > 0 ? Math.ceil(number2 * factor) / factor : Math.floor(number2 * factor) / factor;
         case "trunc":
-          return Math.trunc(number * factor) / factor;
+          return Math.trunc(number2 * factor) / factor;
         case "round":
-          return Math.round(number * factor) / factor;
+          return Math.round(number2 * factor) / factor;
         case "floor":
-          return Math.floor(number * factor) / factor;
+          return Math.floor(number2 * factor) / factor;
         case "ceil":
-          return Math.ceil(number * factor) / factor;
+          return Math.ceil(number2 * factor) / factor;
         default:
           throw new RangeError(`Value rounding ${rounding} is out of range`);
       }
@@ -51598,6 +51658,43 @@ function createShiftStore(deps) {
   return { load, flushNow, list, get, add, update, remove, appendRun, patchState };
 }
 
+// src/github/gh.ts
+var import_node_child_process7 = require("child_process");
+var GhError = class extends Error {
+  constructor(kind, message, stderr) {
+    super(message);
+    this.kind = kind;
+    this.stderr = stderr;
+    this.name = "GhError";
+  }
+  kind;
+  stderr;
+};
+var DEFAULT_TIMEOUT_MS2 = 15e3;
+var MAX_BUFFER = 4 * 1024 * 1024;
+function createGhRunner(defaults) {
+  const baseTimeoutMs = defaults?.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+  return {
+    run(args, opts) {
+      return new Promise((resolve6, reject) => {
+        (0, import_node_child_process7.execFile)(
+          "gh",
+          args,
+          { timeout: opts?.timeoutMs ?? baseTimeoutMs, maxBuffer: MAX_BUFFER },
+          (err, stdout, stderr) => {
+            if (!err) return resolve6(stdout);
+            if (err.code === "ENOENT") {
+              return reject(new GhError("gh-missing", "GitHub CLI (gh) \u672A\u5B89\u88C5"));
+            }
+            const detail = (stderr ?? "").trim();
+            reject(new GhError("gh-error", detail !== "" ? detail : err.message, detail));
+          }
+        );
+      });
+    }
+  };
+}
+
 // src/shift/scheduler.ts
 function cleanupOrphanRunningRuns(store, now) {
   for (const shift of store.list()) {
@@ -56435,7 +56532,7 @@ function readSpawnedByDesktopFromEnv(env = process.env) {
 var import_node_fs40 = __toESM(require("fs"), 1);
 var import_node_path44 = __toESM(require("path"), 1);
 var import_node_crypto10 = __toESM(require("crypto"), 1);
-var import_node_child_process9 = require("child_process");
+var import_node_child_process10 = require("child_process");
 
 // src/tunnel/tunnel-store.ts
 var import_node_fs37 = __toESM(require("fs"), 1);
@@ -56571,7 +56668,7 @@ function escape(v2) {
 var import_node_fs38 = __toESM(require("fs"), 1);
 var import_node_os13 = __toESM(require("os"), 1);
 var import_node_path42 = __toESM(require("path"), 1);
-var import_node_child_process7 = require("child_process");
+var import_node_child_process8 = require("child_process");
 var import_node_stream3 = require("stream");
 var import_promises5 = require("stream/promises");
 var FRPC_VERSION = "0.68.0";
@@ -56671,7 +56768,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
   import_node_fs38.default.mkdirSync(work, { recursive: true });
   try {
     await new Promise((resolve6, reject) => {
-      const proc = (0, import_node_child_process7.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
+      const proc = (0, import_node_child_process8.spawn)("tar", ["xzf", tarball, "-C", work], { stdio: "pipe" });
       proc.on("error", reject);
       proc.on("exit", (code) => code === 0 ? resolve6() : reject(new Error(`tar exited ${code}`)));
     });
@@ -56689,7 +56786,7 @@ async function extractFrpcFromTarball(tarball, binDir, version2, platform, destB
 // src/tunnel/frpc-process.ts
 var import_node_fs39 = __toESM(require("fs"), 1);
 var import_node_path43 = __toESM(require("path"), 1);
-var import_node_child_process8 = require("child_process");
+var import_node_child_process9 = require("child_process");
 function frpcPidFilePath(dataDir) {
   return import_node_path43.default.join(dataDir, "frpc.pid");
 }
@@ -56775,7 +56872,7 @@ async function killStaleFrpc(deps) {
 async function defaultScanFrpcPidsByCmdline(tomlPath, logger) {
   if (process.platform === "win32") return [];
   return new Promise((resolve6) => {
-    const ps = (0, import_node_child_process8.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
+    const ps = (0, import_node_child_process9.spawn)("ps", ["-axo", "pid=,command="], { stdio: ["ignore", "pipe", "ignore"] });
     let buf = "";
     ps.stdout.on("data", (c) => {
       buf += c.toString();
@@ -56944,7 +57041,7 @@ var TunnelManager = class {
         logLevel: "info"
       });
       await import_node_fs40.default.promises.writeFile(tomlPath, toml, { mode: 384 });
-      const proc = (this.deps.spawnImpl ?? import_node_child_process9.spawn)(frpcBin, ["-c", tomlPath], {
+      const proc = (this.deps.spawnImpl ?? import_node_child_process10.spawn)(frpcBin, ["-c", tomlPath], {
         stdio: ["ignore", "pipe", "pipe"]
       });
       const logDir = import_node_path44.default.join(this.deps.dataDir, "log");
@@ -57436,11 +57533,11 @@ var DeviceBindingClientError = class extends Error {
   code;
   cause;
 };
-var DEFAULT_TIMEOUT_MS2 = 8e3;
+var DEFAULT_TIMEOUT_MS3 = 8e3;
 async function upsertDeviceBinding(opts) {
   const doFetch = opts.fetchImpl ?? fetch;
   const ac = new AbortController();
-  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS2);
+  const timer = setTimeout(() => ac.abort(), opts.timeoutMs ?? DEFAULT_TIMEOUT_MS3);
   const body = { unionId: opts.unionId };
   if (opts.avatarUrl != null) body.avatarUrl = opts.avatarUrl;
   let res;
@@ -58406,11 +58503,11 @@ init_protocol();
 init_protocol();
 
 // src/workspace/git.ts
-var import_node_child_process10 = require("child_process");
+var import_node_child_process11 = require("child_process");
 var import_node_fs45 = __toESM(require("fs"), 1);
 var import_node_path50 = __toESM(require("path"), 1);
 var import_node_util = require("util");
-var pexec = (0, import_node_util.promisify)(import_node_child_process10.execFile);
+var pexec = (0, import_node_util.promisify)(import_node_child_process11.execFile);
 function normalizePath(p2) {
   const resolved = import_node_path50.default.resolve(p2);
   try {
@@ -58912,7 +59009,7 @@ function buildWhoamiHandler(deps) {
         }
       };
     }
-    const owner = {
+    const owner2 = {
       ...makeOwnerPrincipal(deps.ownerPrincipalId, identity.displayName),
       ownerId: identity.ownerId,
       provider: identity.provider
@@ -58956,7 +59053,7 @@ function buildWhoamiHandler(deps) {
     return {
       response: {
         type: "whoami:ok",
-        owner,
+        owner: owner2,
         capability,
         grantedPersonas
       }
@@ -59210,6 +59307,15 @@ var METHOD_GRANT_MAP = {
   // ---- shift:* (排班 mock，owner-only 读) ----
   // mock 阶段只 owner 用；接 guest 后再考虑分级
   "shift:list": ADMIN_ANY,
+  // github:*（PR 收件箱，spec 2026-08-11）：走 owner 本机 gh 凭据，owner-only 一刀切
+  "github:status": ADMIN_ANY,
+  "github:prList": ADMIN_ANY,
+  "github:prDetail": ADMIN_ANY,
+  "github:prMerge": ADMIN_ANY,
+  "github:prComment": ADMIN_ANY,
+  "github:prSetReady": ADMIN_ANY,
+  "github:collaborators": ADMIN_ANY,
+  "github:prRequestReviewers": ADMIN_ANY,
   // ---- shift-internal:* + inbox:sendDm + personaDispatch complete/list ----
   // 统一 RPC 鉴权（spec 2026-07-28）：原 /api/rpc 白名单 method 收编。调用方 = 本机
   // MCP server 持 owner token → ADMIN_ANY 即「owner token 即可」；业务归因（sendDm 的
@@ -59356,7 +59462,7 @@ function computeMethodAccess(args) {
 }
 
 // src/version.ts
-var version = "0.2.313".length > 0 ? "0.2.313" : "dev";
+var version = "0.2.315".length > 0 ? "0.2.315" : "dev";
 
 // src/cli-probe/probe.ts
 var fs56 = __toESM(require("fs"), 1);
@@ -60372,7 +60478,7 @@ function buildExtensionHandlers(deps) {
 
 // src/app-builder/project-store.ts
 var import_node_fs46 = require("fs");
-var import_node_child_process11 = require("child_process");
+var import_node_child_process12 = require("child_process");
 var import_node_path57 = require("path");
 init_protocol();
 var PROJECTS_DIR = "projects";
@@ -60477,7 +60583,7 @@ var ProjectStore = class {
   async scaffold(name, templateSrcDir, scaffoldScriptPath) {
     const destDir = this.projectDir(name);
     return await new Promise((resolve6, reject) => {
-      const child = (0, import_node_child_process11.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
+      const child = (0, import_node_child_process12.spawn)("bash", [scaffoldScriptPath, name, templateSrcDir, destDir], {
         env: { ...process.env, PATH: process.env.PATH ?? "" },
         stdio: ["ignore", "pipe", "pipe"]
       });
@@ -60581,7 +60687,7 @@ var ProjectStore = class {
 };
 
 // src/app-builder/kill-port.ts
-var import_node_child_process12 = require("child_process");
+var import_node_child_process13 = require("child_process");
 async function killPortOccupants(port, ownedPids, logger) {
   let pids;
   try {
@@ -60623,7 +60729,7 @@ async function killPortOccupants(port, ownedPids, logger) {
 }
 function listPidsOnPort(port) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process12.execFile)(
+    (0, import_node_child_process13.execFile)(
       "lsof",
       ["-ti", `:${port}`],
       { timeout: 3e3 },
@@ -60695,7 +60801,7 @@ var PublishJobRegistry = class {
 };
 
 // src/app-builder/publish-job-runner.ts
-var import_node_child_process13 = require("child_process");
+var import_node_child_process14 = require("child_process");
 var import_node_fs47 = require("fs");
 var import_node_path58 = require("path");
 
@@ -60724,7 +60830,7 @@ function tailStderrLines(buf, n) {
 // src/app-builder/publish-job-runner.ts
 async function startPublishJob(deps, args) {
   const { registry: registry2, projectDir } = deps;
-  const spawn12 = deps.spawnImpl ?? import_node_child_process13.spawn;
+  const spawn12 = deps.spawnImpl ?? import_node_child_process14.spawn;
   if (registry2.has(args.name)) {
     return { jobId: registry2.get(args.name).jobId, status: "already-publishing" };
   }
@@ -61494,6 +61600,250 @@ function buildShiftHandlers(deps) {
   };
 }
 
+// src/handlers/github.ts
+init_protocol();
+
+// src/github/graphql.ts
+function buildPrSearchQuery(role) {
+  const roleQualifier = role === "created" ? "author:@me" : "review-requested:@me";
+  return `is:pr is:open ${roleQualifier} sort:updated-desc`;
+}
+var PR_LIST_QUERY = `
+query($searchQuery: String!, $first: Int!) {
+  search(query: $searchQuery, type: ISSUE, first: $first) {
+    nodes {
+      ... on PullRequest {
+        number title isDraft updatedAt additions deletions headRefName
+        author { login }
+        repository { nameWithOwner }
+        commits(last: 1) { nodes { commit { statusCheckRollup { state } } } }
+      }
+    }
+  }
+}`;
+var PR_DETAIL_QUERY = `
+query($owner: String!, $repo: String!, $number: Int!) {
+  repository(owner: $owner, name: $repo) {
+    pullRequest(number: $number) {
+      number title body state isDraft updatedAt additions deletions
+      headRefName baseRefName headRefOid mergeable
+      author { login }
+      reviewRequests(first: 50) { nodes { requestedReviewer { ... on User { login } } } }
+      comments { totalCount }
+      commits(last: 1) { nodes { commit { statusCheckRollup {
+        state
+        contexts(first: 100) { nodes {
+          __typename
+          ... on CheckRun { name status conclusion }
+          ... on StatusContext { context state }
+        } }
+      } } } }
+    }
+  }
+}`;
+function mapRollupState(state) {
+  if (state == null) return "none";
+  if (state === "SUCCESS") return "success";
+  if (state === "PENDING" || state === "EXPECTED") return "pending";
+  return "failure";
+}
+function mapCheckNode(node) {
+  if (node.__typename === "CheckRun") {
+    const name = typeof node.name === "string" ? node.name : "";
+    if (name === "") return null;
+    if (node.status !== "COMPLETED") return { name, conclusion: "pending" };
+    return { name, conclusion: node.conclusion === "SUCCESS" ? "success" : "failure" };
+  }
+  if (node.__typename === "StatusContext") {
+    const name = typeof node.context === "string" ? node.context : "";
+    if (name === "") return null;
+    if (node.state === "SUCCESS") return { name, conclusion: "success" };
+    if (node.state === "PENDING" || node.state === "EXPECTED") return { name, conclusion: "pending" };
+    return { name, conclusion: "failure" };
+  }
+  return null;
+}
+function mapPrState(state, isDraft) {
+  if (state === "MERGED") return "merged";
+  if (state === "CLOSED") return "closed";
+  return isDraft === true ? "draft" : "open";
+}
+function asRecord(v2) {
+  return typeof v2 === "object" && v2 !== null ? v2 : {};
+}
+function lastCommitRollup(node) {
+  const first = asRecord(node.commits).nodes?.[0];
+  return asRecord(asRecord(first).commit).statusCheckRollup;
+}
+function parsePrListResponse(json) {
+  const nodes = asRecord(asRecord(asRecord(json).data).search).nodes ?? [];
+  const items = [];
+  for (const raw of nodes) {
+    const n = asRecord(raw);
+    if (typeof n.number !== "number") continue;
+    const nameWithOwner = String(asRecord(n.repository).nameWithOwner ?? "");
+    const slash = nameWithOwner.indexOf("/");
+    if (slash <= 0) continue;
+    const rollup = lastCommitRollup(n);
+    items.push({
+      owner: nameWithOwner.slice(0, slash),
+      repo: nameWithOwner.slice(slash + 1),
+      number: n.number,
+      title: String(n.title ?? ""),
+      state: mapPrState("OPEN", n.isDraft),
+      headRef: String(n.headRefName ?? ""),
+      additions: typeof n.additions === "number" ? n.additions : 0,
+      deletions: typeof n.deletions === "number" ? n.deletions : 0,
+      updatedAt: String(n.updatedAt ?? ""),
+      author: String(asRecord(n.author).login ?? ""),
+      checksRollup: rollup == null ? "none" : mapRollupState(asRecord(rollup).state)
+    });
+  }
+  return items;
+}
+function parsePrDetailResponse(json, repoRef) {
+  const pr = asRecord(asRecord(asRecord(json).data).repository).pullRequest;
+  if (pr == null || typeof pr !== "object") return null;
+  const n = asRecord(pr);
+  const rollup = lastCommitRollup(n);
+  const contextNodes = asRecord(asRecord(rollup).contexts).nodes ?? [];
+  const checks = [];
+  for (const c of contextNodes) {
+    const mapped = mapCheckNode(asRecord(c));
+    if (mapped) checks.push(mapped);
+  }
+  const reviewerNodes = asRecord(n.reviewRequests).nodes ?? [];
+  const reviewers = reviewerNodes.map((r) => String(asRecord(asRecord(r).requestedReviewer).login ?? "")).filter((s) => s !== "");
+  const mergeable = n.mergeable === "MERGEABLE" ? "mergeable" : n.mergeable === "CONFLICTING" ? "conflicting" : "unknown";
+  const commentCountRaw = asRecord(n.comments).totalCount;
+  return {
+    owner: repoRef.owner,
+    repo: repoRef.repo,
+    number: typeof n.number === "number" ? n.number : 0,
+    title: String(n.title ?? ""),
+    body: String(n.body ?? ""),
+    state: mapPrState(n.state, n.isDraft),
+    author: String(asRecord(n.author).login ?? ""),
+    updatedAt: String(n.updatedAt ?? ""),
+    headRef: String(n.headRefName ?? ""),
+    baseRef: String(n.baseRefName ?? ""),
+    headSha: String(n.headRefOid ?? ""),
+    additions: typeof n.additions === "number" ? n.additions : 0,
+    deletions: typeof n.deletions === "number" ? n.deletions : 0,
+    mergeable,
+    reviewers,
+    commentCount: typeof commentCountRaw === "number" ? commentCountRaw : 0,
+    checksRollup: rollup == null ? "none" : mapRollupState(asRecord(rollup).state),
+    checks
+  };
+}
+
+// src/handlers/github.ts
+var HOSTNAME = "github.com";
+function buildGithubHandlers(deps) {
+  const { gh } = deps;
+  return {
+    "github:status": async () => {
+      try {
+        await gh.run(["--version"]);
+      } catch (err) {
+        if (err instanceof GhError && err.kind === "gh-missing") {
+          return { response: { installed: false, authenticated: false } };
+        }
+        throw err;
+      }
+      try {
+        await gh.run(["auth", "status", "--active", "--hostname", HOSTNAME]);
+      } catch {
+        return { response: { installed: true, authenticated: false } };
+      }
+      const login = (await gh.run(["api", "user", "--jq", ".login"])).trim();
+      const response = { installed: true, authenticated: true, login };
+      return { response };
+    },
+    "github:prList": async (frame) => {
+      const { role } = GithubPrListArgs.parse(frame);
+      const stdout = await gh.run([
+        "api",
+        "graphql",
+        "-f",
+        `query=${PR_LIST_QUERY}`,
+        "-f",
+        `searchQuery=${buildPrSearchQuery(role)}`,
+        "-F",
+        // 上限 50：超出即静默截断（收件箱语义按 updated 倒序取最近的，够用；真溢出再谈分页）
+        "first=50"
+      ]);
+      const prs = parsePrListResponse(JSON.parse(stdout));
+      return { response: { prs } };
+    },
+    "github:prDetail": async (frame) => {
+      const { owner: owner2, repo: repo2, number: number2 } = GithubPrDetailArgs.parse(frame);
+      const stdout = await gh.run([
+        "api",
+        "graphql",
+        "-f",
+        `query=${PR_DETAIL_QUERY}`,
+        "-f",
+        `owner=${owner2}`,
+        "-f",
+        `repo=${repo2}`,
+        "-F",
+        `number=${number2}`
+      ]);
+      const pr = parsePrDetailResponse(JSON.parse(stdout), { owner: owner2, repo: repo2 });
+      return { response: { pr } };
+    },
+    "github:prMerge": async (frame) => {
+      const { owner: owner2, repo: repo2, number: number2, expectedHeadSha } = GithubPrMergeArgs.parse(frame);
+      try {
+        await gh.run([
+          "pr",
+          "merge",
+          String(number2),
+          "--repo",
+          `${owner2}/${repo2}`,
+          "--squash",
+          "--match-head-commit",
+          expectedHeadSha
+        ]);
+      } catch (err) {
+        if (err instanceof GhError && /head/i.test(err.message) && /modif|match/i.test(err.message)) {
+          return { response: { merged: false, reason: "head-changed", message: err.message } };
+        }
+        throw err;
+      }
+      return { response: { merged: true } };
+    },
+    "github:prComment": async (frame) => {
+      const { owner: owner2, repo: repo2, number: number2, body } = GithubPrCommentArgs.parse(frame);
+      await gh.run(["api", `repos/${owner2}/${repo2}/issues/${number2}/comments`, "-f", `body=${body}`]);
+      return { response: { posted: true } };
+    },
+    "github:prSetReady": async (frame) => {
+      const { owner: owner2, repo: repo2, number: number2, ready } = GithubPrSetReadyArgs.parse(frame);
+      const args = ["pr", "ready", String(number2), "--repo", `${owner2}/${repo2}`];
+      if (!ready) args.push("--undo");
+      await gh.run(args);
+      return { response: { updated: true } };
+    },
+    "github:collaborators": async (frame) => {
+      const { owner: owner2, repo: repo2 } = GithubCollaboratorsArgs.parse(frame);
+      const stdout = await gh.run(["api", `repos/${owner2}/${repo2}/collaborators?per_page=100`]);
+      const arr = JSON.parse(stdout);
+      const logins = arr.map((c) => String(c.login ?? "")).filter((s) => s !== "");
+      return { response: { logins } };
+    },
+    "github:prRequestReviewers": async (frame) => {
+      const { owner: owner2, repo: repo2, number: number2, reviewers } = GithubPrRequestReviewersArgs.parse(frame);
+      const args = ["api", "-X", "POST", `repos/${owner2}/${repo2}/pulls/${number2}/requested_reviewers`];
+      for (const r of reviewers) args.push("-f", `reviewers[]=${r}`);
+      await gh.run(args);
+      return { response: { requested: true } };
+    }
+  };
+}
+
 // src/handlers/visitor.ts
 init_protocol();
 function ensureOwner4(ctx) {
@@ -61611,15 +61961,15 @@ var import_node_crypto18 = require("crypto");
 init_protocol();
 
 // src/peer-ops/run-command.ts
-var import_node_child_process14 = require("child_process");
+var import_node_child_process15 = require("child_process");
 var import_node_os21 = __toESM(require("os"), 1);
-var DEFAULT_TIMEOUT_MS3 = 3e4;
+var DEFAULT_TIMEOUT_MS4 = 3e4;
 var MAX_TIMEOUT_MS = 3e5;
 var MAX_OUTPUT_BYTES = 1048576;
 function runCommand(command, opts = {}) {
-  const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS3, MAX_TIMEOUT_MS);
+  const timeoutMs = Math.min(opts.timeoutMs ?? DEFAULT_TIMEOUT_MS4, MAX_TIMEOUT_MS);
   return new Promise((resolve6) => {
-    const child = (0, import_node_child_process14.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
+    const child = (0, import_node_child_process15.spawn)("bash", ["-c", command], { cwd: import_node_os21.default.homedir() });
     const out = [];
     const err = [];
     let outBytes = 0;
@@ -61824,6 +62174,7 @@ function buildMethodHandlers(deps) {
       ownerIdProvider: deps.shiftOwnerIdProvider,
       now: () => Date.now()
     }),
+    ...buildGithubHandlers({ gh: deps.ghRunner }),
     ...buildVisitorHandlers({ visitorStore: deps.visitorStore })
   };
   handlers["meta:methods"] = buildMetaMethodsHandler({
@@ -61834,7 +62185,7 @@ function buildMethodHandlers(deps) {
 }
 
 // src/app-builder/dev-server-supervisor.ts
-var import_node_child_process15 = require("child_process");
+var import_node_child_process16 = require("child_process");
 var import_node_events2 = require("events");
 var DEFAULT_READY_PATTERN = /Local:\s+https?:\/\/|Nest application successfully started|server listening on/i;
 var DevServerSupervisor = class extends import_node_events2.EventEmitter {
@@ -61871,7 +62222,7 @@ var DevServerSupervisor = class extends import_node_events2.EventEmitter {
       tunnelHost: args.tunnelHost,
       devCommand: cmd
     });
-    const child = (0, import_node_child_process15.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
       cwd: args.cwd,
       env,
       stdio: "pipe",
@@ -62123,7 +62474,7 @@ async function dispatchRpc(method, frame, client, ctx, deps) {
 }
 
 // src/extension/runtime.ts
-var import_node_child_process16 = require("child_process");
+var import_node_child_process17 = require("child_process");
 var import_node_path62 = __toESM(require("path"), 1);
 var import_promises12 = require("timers/promises");
 
@@ -62231,7 +62582,7 @@ var Runtime = class {
       CLAWOS_EXT_PORT: String(port),
       CLAWOS_EXT_ID: extId
     };
-    const child = (0, import_node_child_process16.spawn)("sh", ["-c", cmd], {
+    const child = (0, import_node_child_process17.spawn)("sh", ["-c", cmd], {
       cwd: dir,
       env,
       stdio: ["ignore", "pipe", "pipe"],
@@ -63284,6 +63635,8 @@ async function startDaemon(config) {
       // daemon 稳定身份），跟我们 ShiftStore boot 时用的 provider 一致。
       shiftStore,
       shiftOwnerIdProvider: () => ownerPrincipalId,
+      // PR 收件箱：github:* handler spawn 本机 gh CLI（凭据复用 gh 登录态）
+      ghRunner: createGhRunner(),
       // persona web 分享：visitor:list owner RPC 读访客名单（同 exchange upsert 的实例）
       visitorStore
     })