@codyswann/lisa 2.293.1 → 2.294.0

package/dist/cli/deploy-status-refs.js

@@ -0,0 +1,195 @@
+import { createExec } from "./deploy-status-adapter.js";
+const GITHUB_TOKEN_PATTERN = /^([A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+)?#([1-9]\d*)$/;
+/** Git revision charset: branch names, SHAs, HEAD^/~ suffixes — nothing that
+ * could smuggle shell metacharacters or option-like payloads into argv. */
+const REVISION_PATTERN = /^[\w./^~@-]+$/;
+/** Maximum concurrent gh lookups during PR-token collection. */
+const GH_CONCURRENCY = 8;
+/**
+ * Split items into consecutive chunks of at most `size` elements. Used to
+ * bound gh fan-out: chunks run sequentially, items within a chunk run
+ * concurrently.
+ * @param items - Items to split
+ * @param size - Maximum chunk size (must be positive)
+ * @returns Consecutive chunks in input order
+ */
+export function chunk(items, size) {
+    return Array.from({ length: Math.ceil(items.length / size) }, (_, index) => items.slice(index * size, (index + 1) * size));
+}
+const KEY_TOKEN_PATTERN = /^([A-Za-z][A-Za-z0-9]{1,9})-([1-9]\d*)$/;
+const REF_LINE_PATTERN = /^(?:refs|closes)\b(.*)$/i;
+/**
+ * Build production deps over the shared fixed-argv executor factory.
+ * @param cwd - Repository working directory
+ * @returns Real git/gh executors
+ */
+export function defaultRefExtractionDeps(cwd) {
+    return {
+        execGit: createExec("git", cwd),
+        execGh: createExec("gh", cwd),
+    };
+}
+/**
+ * Canonicalize one token against the configured tracker scope.
+ * @param token - Raw token from a trailer or PR body
+ * @param options - Extraction options (tracker, repository, project key)
+ * @returns Canonical ref or a skip reason
+ */
+function canonicalizeToken(token, options) {
+    if (options.tracker === "github") {
+        const match = GITHUB_TOKEN_PATTERN.exec(token);
+        if (match === null) {
+            return { token, reason: "not a GitHub work-item ref" };
+        }
+        if (options.repository === undefined) {
+            return { token, reason: "no github.org/github.repo configured" };
+        }
+        const repository = match[1];
+        if (repository !== undefined &&
+            repository.toLowerCase() !== options.repository.toLowerCase()) {
+            return {
+                token,
+                reason: `outside configured repository ${options.repository}`,
+            };
+        }
+        return { token, ref: `${options.repository}#${match[2] ?? ""}` };
+    }
+    const match = KEY_TOKEN_PATTERN.exec(token);
+    if (match === null) {
+        return { token, reason: `not a ${options.tracker} work-item ref` };
+    }
+    const key = (match[1] ?? "").toUpperCase();
+    if (key !== (options.projectKey ?? "").toUpperCase()) {
+        return {
+            token,
+            reason: `outside configured ${options.tracker} project ${options.projectKey ?? "(unset)"}`,
+        };
+    }
+    return { token, ref: `${key}-${match[2] ?? ""}` };
+}
+/**
+ * Collect Refs/Closes tokens from merged PRs associated with the commits.
+ * @param shas - Commit SHAs of the range
+ * @param repository - Configured `owner/repo`
+ * @param deps - Injectable executors
+ * @returns Raw tokens in appearance order
+ */
+async function collectPrTokens(shas, repository, deps) {
+    // Chunked fan-out: a large range must not open one gh process (and one
+    // API request) per SHA simultaneously.
+    const payloads = await chunk(shas, GH_CONCURRENCY).reduce(async (accumulated, group) => {
+        const previous = await accumulated;
+        const results = await Promise.all(group.map(sha => deps.execGh(["api", `repos/${repository}/commits/${sha}/pulls`])));
+        return [...previous, ...results];
+    }, Promise.resolve([]));
+    const pulls = payloads.flatMap(raw => {
+        const parsed = JSON.parse(raw.length > 0 ? raw : "[]");
+        return Array.isArray(parsed)
+            ? parsed
+            : [];
+    });
+    const merged = pulls.filter(pull => pull.merged_at !== null && pull.merged_at !== undefined);
+    const unique = [...new Map(merged.map(pull => [pull.number, pull])).values()];
+    return unique.flatMap(pull => prBodyTokens(pull.body ?? ""));
+}
+/** Loose candidate shapes: contains a "#" or looks like KEY-N. A candidate
+ * that later fails canonicalization is reported in `skipped`, never dropped
+ * silently; plain prose words are not candidates. */
+const CANDIDATE_PATTERN = /#|^[A-Za-z][A-Za-z0-9]*-\d/;
+/** Punctuation stripped from the end of candidate tokens. */
+const TRAILING_PUNCTUATION = new Set([".", ",", ";", ":", ")"]);
+/**
+ * Strip trailing punctuation from a word in linear time (a quantified
+ * end-anchored regex would be flagged as super-linear).
+ * @param word - Raw word
+ * @returns The word without its trailing punctuation run
+ */
+function stripTrailingPunctuation(word) {
+    const characters = [...word];
+    const cutoff = characters.reduce((keep, character, index) => TRAILING_PUNCTUATION.has(character) ? keep : index + 1, 0);
+    return word.slice(0, cutoff);
+}
+/**
+ * Collect candidate tokens from one PR body: Refs/Closes lines outside
+ * fenced code regions (triple-backtick blocks), with trailing punctuation
+ * stripped from each word so `Closes #102.` names #102.
+ * @param body - Raw PR body markdown
+ * @returns Candidate tokens in appearance order
+ */
+function prBodyTokens(body) {
+    const scanned = body.split("\n").reduce((state, rawLine) => {
+        const line = rawLine.trim();
+        if (line.startsWith("```")) {
+            return { ...state, inFence: !state.inFence };
+        }
+        const match = state.inFence ? null : REF_LINE_PATTERN.exec(line);
+        if (match === null)
+            return state;
+        const words = (match[1] ?? "")
+            .replace(/^[\s:]+/, "")
+            .split(/[\s,]+/)
+            .map(stripTrailingPunctuation)
+            .filter(word => CANDIDATE_PATTERN.test(word));
+        return { ...state, tokens: [...state.tokens, ...words] };
+    }, { inFence: false, tokens: [] });
+    return scanned.tokens;
+}
+/**
+ * Extract the deduped union of work-item refs for a commit range.
+ * @param options - Range, tracker scope, and working directory
+ * @param deps - Injectable executors (defaults to real git/gh)
+ * @returns Canonical refs, skipped tokens, and the resolved head SHA
+ */
+export async function extractWorkItemRefs(options, deps = defaultRefExtractionDeps(options.cwd)) {
+    // Library-level guard (the cmd layer has its own): without it, the
+    // dot-stripped head would give rev-parse two-dot semantics while rev-list
+    // received the raw three-dot range — two git calls disagreeing silently.
+    if (options.range.includes("...")) {
+        throw new Error(`Invalid range "${options.range}": three-dot "..." selects the symmetric difference, which is never a deploy range. Pass the deployed range as <base>..<head> (two dots).`);
+    }
+    const separator = options.range.indexOf("..");
+    if (separator === -1) {
+        throw new Error(`Invalid range "${options.range}": expected <base>..<head>`);
+    }
+    const base = options.range.slice(0, separator);
+    const head = options.range.slice(separator + 2);
+    // Charset gate + --end-of-options below: a revision must never be able to
+    // smuggle option-like or shell-meta payloads into the git argv.
+    if (!REVISION_PATTERN.test(base) || !REVISION_PATTERN.test(head)) {
+        throw new Error(`Invalid range "${options.range}": each revision side must be a plain git revision (letters, digits, ".", "_", "/", "^", "~", "@", "-").`);
+    }
+    // --verify puts rev-parse in single-revision mode, where --end-of-options
+    // is honored (bare rev-parse would echo it back instead).
+    const headSha = (await deps.execGit(["rev-parse", "--verify", "--end-of-options", head])).trim();
+    const shas = (await deps.execGit([
+        "rev-list",
+        "--reverse",
+        "--end-of-options",
+        options.range,
+    ]))
+        .split("\n")
+        .map(line => line.trim())
+        .filter(line => line.length > 0);
+    const trailerOutputs = await Promise.all(shas.map(sha => deps.execGit([
+        "log",
+        "-1",
+        "--format=%(trailers:key=Work-Item,valueonly)",
+        sha,
+    ])));
+    const trailerTokens = trailerOutputs.flatMap(output => output
+        .split("\n")
+        .map(line => line.trim())
+        .filter(line => line.length > 0));
+    const prTokens = options.repository === undefined
+        ? []
+        : await collectPrTokens(shas, options.repository, deps);
+    const results = [...trailerTokens, ...prTokens].map(token => canonicalizeToken(token, options));
+    const canonical = results.flatMap(result => result.ref === undefined ? [] : [result.ref]);
+    const refs = [...new Set(canonical)];
+    const allSkipped = results.flatMap(result => result.reason === undefined
+        ? []
+        : [{ token: result.token, reason: result.reason }]);
+    const skipped = allSkipped.filter((entry, index) => allSkipped.findIndex(other => other.token === entry.token) === index);
+    return { refs, skipped, headSha };
+}
+//# sourceMappingURL=deploy-status-refs.js.map

package/dist/cli/deploy-status-refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-status-refs.js","sourceRoot":"","sources":["../../src/cli/deploy-status-refs.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAwCxD,MAAM,oBAAoB,GAAG,kDAAkD,CAAC;AAChF;2EAC2E;AAC3E,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,gEAAgE;AAChE,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CACnB,KAAmB,EACnB,IAAY;IAEZ,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CACzE,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAC9C,CAAC;AACJ,CAAC;AACD,MAAM,iBAAiB,GAAG,yCAAyC,CAAC;AACpE,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AASpD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC;QAC/B,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CACxB,KAAa,EACb,OAA2B;IAE3B,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IACE,UAAU,KAAK,SAAS;YACxB,UAAU,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,EAC7D,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,iCAAiC,OAAO,CAAC,UAAU,EAAE;aAC9D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,OAAO,CAAC,OAAO,gBAAgB,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrD,OAAO;YACL,KAAK;YACL,MAAM,EAAE,sBAAsB,OAAO,CAAC,OAAO,YAAY,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE;SAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAuB,EACvB,UAAkB,EAClB,IAAuB;IAEvB,uEAAuE;IACvE,uCAAuC;IACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,MAAM,CACvD,KAAK,EAAE,WAAuC,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACd,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,SAAS,UAAU,YAAY,GAAG,QAAQ,CAAC,CAAC,CACjE,CACF,CAAC;QACF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IACnC,CAAC,EACD,OAAO,CAAC,OAAO,CAAC,EAAuB,CAAC,CACzC,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAY,CAAC;QAClE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAE,MAIG;YACN,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CACzB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAChE,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;qDAEqD;AACrD,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEhE;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CACzB,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EACxD,CAAC,CACF,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CACrC,CAAC,KAAsD,EAAE,OAAO,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC3B,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;aACtB,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,wBAAwB,CAAC;aAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAC3D,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAC/B,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAA2B,EAC3B,OAA0B,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC;IAE/D,mEAAmE;IACnE,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,CAAC,KAAK,2IAA2I,CAC3K,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,CAAC,KAAK,4BAA4B,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAChD,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,CAAC,KAAK,0GAA0G,CAC1I,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,CACxE,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,CACX,MAAM,IAAI,CAAC,OAAO,CAAC;QACjB,UAAU;QACV,WAAW;QACX,kBAAkB;QAClB,OAAO,CAAC,KAAK;KACd,CAAC,CACH;SACE,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACb,IAAI,CAAC,OAAO,CAAC;QACX,KAAK;QACL,IAAI;QACJ,8CAA8C;QAC9C,GAAG;KACJ,CAAC,CACH,CACF,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACpD,MAAM;SACH,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACnC,CAAC;IACF,MAAM,QAAQ,GACZ,OAAO,CAAC,UAAU,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAC1D,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAClC,CAAC;IACF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACzC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAC7C,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAC1C,MAAM,CAAC,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CACrD,CAAC;IACF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,CACvE,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/cli/deploy-status-sync-cmd.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `lisa deploy-status-sync` — the DSS-2 transition engine entry point.
+ *
+ * Given a deploy event (environment or branch + commit range), extract the
+ * work-item refs the range shipped, plan transitions over the config-sourced
+ * deploy ladder (pure planner), and execute them idempotently through the
+ * tracker adapter. Exit code 0 covers success INCLUDING explanatory no-ops
+ * and skips — a deploy job must not gate on tracker vocabulary; 1 is
+ * reserved for genuine errors (config validation, git/gh/API failures,
+ * unknown environment, or any per-item transition failure — remaining items
+ * are still processed first).
+ * @module cli/deploy-status-sync-cmd
+ */
+import { type DeployStatusSyncDependencies, type DeployStatusSyncOptions } from "./deploy-status-sync-engine.js";
+export type { DeployStatusSyncDependencies, DeployStatusSyncOptions, } from "./deploy-status-sync-engine.js";
+/**
+ * Run the deploy-status-sync engine for one deploy event.
+ * @param options - CLI options
+ * @param deps - Injectable collaborators for tests
+ * @returns Intended process exit code
+ */
+export declare function runDeployStatusSync(options: DeployStatusSyncOptions, deps?: DeployStatusSyncDependencies): Promise<number>;
+//# sourceMappingURL=deploy-status-sync-cmd.d.ts.map

package/dist/cli/deploy-status-sync-cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-status-sync-cmd.d.ts","sourceRoot":"","sources":["../../src/cli/deploy-status-sync-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAGL,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAE7B,MAAM,gCAAgC,CAAC;AAExC,YAAY,EACV,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,gCAAgC,CAAC;AAmCxC;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,uBAAuB,EAChC,IAAI,GAAE,4BAAiC,GACtC,OAAO,CAAC,MAAM,CAAC,CAyBjB"}

package/dist/cli/deploy-status-sync-cmd.js

@@ -0,0 +1,75 @@
+/**
+ * `lisa deploy-status-sync` — the DSS-2 transition engine entry point.
+ *
+ * Given a deploy event (environment or branch + commit range), extract the
+ * work-item refs the range shipped, plan transitions over the config-sourced
+ * deploy ladder (pure planner), and execute them idempotently through the
+ * tracker adapter. Exit code 0 covers success INCLUDING explanatory no-ops
+ * and skips — a deploy job must not gate on tracker vocabulary; 1 is
+ * reserved for genuine errors (config validation, git/gh/API failures,
+ * unknown environment, or any per-item transition failure — remaining items
+ * are still processed first).
+ * @module cli/deploy-status-sync-cmd
+ */
+import { resolveRunContext, runResolved, } from "./deploy-status-sync-engine.js";
+/**
+ * Validate the mutually-exclusive event selector and range options.
+ * @param options - CLI options
+ * @returns The normalized range, or an error message
+ */
+function normalizeInputs(options) {
+    const hasEnvironment = options.environment !== undefined;
+    const hasBranch = options.branch !== undefined;
+    if (hasEnvironment === hasBranch) {
+        return {
+            problem: "Pass exactly one of --environment <env> or --branch <branch> to identify the deploy target.",
+        };
+    }
+    if (options.range !== undefined) {
+        if (options.range.includes("...")) {
+            return {
+                problem: `Invalid range "${options.range}": three-dot "..." selects the symmetric difference, which is never a deploy range. Pass the deployed range as <base>..<head> (two dots).`,
+            };
+        }
+        return { range: options.range };
+    }
+    if (options.before !== undefined && options.after !== undefined) {
+        return { range: `${options.before}..${options.after}` };
+    }
+    return {
+        problem: "Pass the deployed commit range as --range <base>..<head> (or --before <sha> --after <sha>).",
+    };
+}
+/**
+ * Run the deploy-status-sync engine for one deploy event.
+ * @param options - CLI options
+ * @param deps - Injectable collaborators for tests
+ * @returns Intended process exit code
+ */
+export async function runDeployStatusSync(options, deps = {}) {
+    const log = deps.log ?? ((message) => console.log(message));
+    const error = deps.error ?? ((message) => console.error(message));
+    // In --json mode the machine payload is the ONLY stdout content; human
+    // narration would corrupt consumers that parse the output.
+    const human = options.json === true ? () => undefined : log;
+    const sinks = { log, error, human };
+    const cwd = deps.cwd ?? process.cwd();
+    const normalized = normalizeInputs(options);
+    if ("problem" in normalized) {
+        error(normalized.problem);
+        return 1;
+    }
+    try {
+        const context = await resolveRunContext(options, cwd);
+        if ("problem" in context) {
+            error(context.problem);
+            return 1;
+        }
+        return await runResolved(context, normalized.range, options, deps, sinks);
+    }
+    catch (cause) {
+        error(cause instanceof Error ? cause.message : String(cause));
+        return 1;
+    }
+}
+//# sourceMappingURL=deploy-status-sync-cmd.js.map

package/dist/cli/deploy-status-sync-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-status-sync-cmd.js","sourceRoot":"","sources":["../../src/cli/deploy-status-sync-cmd.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,iBAAiB,EACjB,WAAW,GAIZ,MAAM,gCAAgC,CAAC;AAOxC;;;;GAIG;AACH,SAAS,eAAe,CACtB,OAAgC;IAEhC,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC;IAC/C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EACL,6FAA6F;SAChG,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,kBAAkB,OAAO,CAAC,KAAK,2IAA2I;aACpL,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,OAAO,EACL,6FAA6F;KAChG,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAgC,EAChC,OAAqC,EAAE;IAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,OAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,MAAM,KAAK,GAAU,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/cli/deploy-status-sync-engine.d.ts

@@ -0,0 +1,49 @@
+import { type DeployLadder, type Tracker } from "../core/deploy-status-sync.js";
+import { type JsonValue } from "../sync/json-path.js";
+import { type TrackerAdapter, type TrackerAdapterOptions } from "./deploy-status-adapter.js";
+import { type ExtractedRefs, type ExtractRefsOptions } from "./deploy-status-refs.js";
+import { type DeployStatusSyncOptions, type Sinks } from "./deploy-status-sync-exec.js";
+export type { DeployStatusSyncOptions, Sinks, } from "./deploy-status-sync-exec.js";
+/** Injectable collaborators for the engine. */
+export interface DeployStatusSyncDependencies {
+    /** Working directory (defaults to the process cwd) */
+    readonly cwd?: string;
+    /** Output sink (defaults to stdout) */
+    readonly log?: (message: string) => void;
+    /** Error sink (defaults to stderr) */
+    readonly error?: (message: string) => void;
+    /** Ref extractor (defaults to the real git/gh extractor) */
+    readonly extractRefs?: (options: ExtractRefsOptions) => Promise<ExtractedRefs>;
+    /** Adapter factory (defaults to {@link createTrackerAdapter}) */
+    readonly adapterFactory?: (options: TrackerAdapterOptions) => TrackerAdapter;
+}
+/** Resolved run context shared by the engine stages. */
+export interface RunContext {
+    readonly config: JsonValue;
+    readonly tracker: Tracker;
+    readonly ladder: DeployLadder;
+    readonly env: string;
+    readonly branch: string;
+}
+/**
+ * Read the config and resolve the tracker, ladder, and environment.
+ * @param options - CLI options
+ * @param cwd - Working directory
+ * @returns Run context, or a decision-ready problem
+ */
+export declare function resolveRunContext(options: DeployStatusSyncOptions, cwd: string): Promise<RunContext | {
+    readonly problem: string;
+}>;
+/**
+ * Run the engine over a resolved context: preflight the environment (an
+ * unconfigured env is an explanatory no-op, exit 0), extract refs, then
+ * fetch/plan/execute.
+ * @param context - Resolved run context
+ * @param range - Normalized commit range
+ * @param options - CLI options
+ * @param deps - Injectable collaborators
+ * @param sinks - Output sinks
+ * @returns Intended process exit code
+ */
+export declare function runResolved(context: RunContext, range: string, options: DeployStatusSyncOptions, deps: DeployStatusSyncDependencies, sinks: Sinks): Promise<number>;
+//# sourceMappingURL=deploy-status-sync-engine.d.ts.map

package/dist/cli/deploy-status-sync-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-status-sync-engine.d.ts","sourceRoot":"","sources":["../../src/cli/deploy-status-sync-engine.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,OAAO,EACb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAA2B,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAIL,KAAK,uBAAuB,EAC5B,KAAK,KAAK,EACX,MAAM,8BAA8B,CAAC;AAEtC,YAAY,EACV,uBAAuB,EACvB,KAAK,GACN,MAAM,8BAA8B,CAAC;AAEtC,+CAA+C;AAC/C,MAAM,WAAW,4BAA4B;IAC3C,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,OAAO,EAAE,kBAAkB,KACxB,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,cAAc,CAAC;CAC9E;AAED,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AA+CD;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBpD;AAiGD;;;;;;;;;;GAUG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,4BAA4B,EAClC,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,MAAM,CAAC,CAiDjB"}

package/dist/cli/deploy-status-sync-engine.js

@@ -0,0 +1,214 @@
+/**
+ * Deploy-status-sync engine internals (DSS-2): context resolution, ref
+ * extraction scoping, state fetching, and plan execution. The thin
+ * `deploy-status-sync-cmd` entry point validates CLI inputs and delegates
+ * here; tests drive the same seams through injectable dependencies.
+ * @module cli/deploy-status-sync-engine
+ */
+import { readFile } from "node:fs/promises";
+import * as path from "node:path";
+import { resolveDeployLadder, } from "../core/deploy-status-sync.js";
+import { planTransitions } from "../core/deploy-status-transition.js";
+import { getAtPath, isJsonObject } from "../sync/json-path.js";
+import { createTrackerAdapter, withDryRun, } from "./deploy-status-adapter.js";
+import { extractWorkItemRefs, } from "./deploy-status-refs.js";
+import { emitNoOp, executePlan, fetchStates, } from "./deploy-status-sync-exec.js";
+const VALID_TRACKERS = new Set(["github", "jira", "linear"]);
+/**
+ * Resolve the target environment from an explicit flag or the deployed
+ * branch via the ladder (raw `deploy.branches` catches skipped rungs so the
+ * planner can explain the missing done-map key).
+ * @param options - CLI options
+ * @param ladder - Resolved deploy ladder
+ * @param config - Parsed config
+ * @returns The environment name, or an error message
+ */
+function resolveEnvironment(options, ladder, config) {
+    if (options.environment !== undefined)
+        return { env: options.environment };
+    const branch = options.branch ?? "";
+    const matching = ladder.rungs.filter(rung => rung.branch === branch);
+    const envs = [...new Set(matching.map(rung => rung.env))];
+    if (envs.length === 1 && envs[0] !== undefined)
+        return { env: envs[0] };
+    if (envs.length > 1) {
+        return {
+            problem: `Branch "${branch}" deploys to multiple environments (${envs.join(", ")}); pass --environment to disambiguate.`,
+        };
+    }
+    const branches = getAtPath(config, "deploy.branches");
+    const rawEnvs = isJsonObject(branches)
+        ? Object.keys(branches).filter(env => branches[env] === branch)
+        : [];
+    if (rawEnvs.length === 1 && rawEnvs[0] !== undefined) {
+        return { env: rawEnvs[0] };
+    }
+    if (rawEnvs.length > 1) {
+        // Name ALL candidates — silently picking the first would report a
+        // misleading no-op for an env the operator never meant.
+        return {
+            problem: `Branch "${branch}" deploys to multiple environments (${rawEnvs.join(", ")}); pass --environment to disambiguate.`,
+        };
+    }
+    return {
+        problem: `Branch "${branch}" is not a value of deploy.branches in .lisa.config.json.`,
+    };
+}
+/**
+ * Read the config and resolve the tracker, ladder, and environment.
+ * @param options - CLI options
+ * @param cwd - Working directory
+ * @returns Run context, or a decision-ready problem
+ */
+export async function resolveRunContext(options, cwd) {
+    const configPath = path.resolve(cwd, options.config ?? ".lisa.config.json");
+    const config = JSON.parse(await readFile(configPath, "utf8"));
+    const tracker = getAtPath(config, "tracker");
+    if (typeof tracker !== "string" || !VALID_TRACKERS.has(tracker)) {
+        return {
+            problem: "'tracker' is not set in .lisa.config.json. Run /lisa:setup:jira (or :github, :linear) to configure.",
+        };
+    }
+    const ladder = resolveDeployLadder(config, tracker, configPath);
+    const resolvedEnv = resolveEnvironment(options, ladder, config);
+    if ("problem" in resolvedEnv)
+        return resolvedEnv;
+    const env = resolvedEnv.env;
+    return {
+        config,
+        tracker: tracker,
+        ladder,
+        env,
+        branch: options.branch ??
+            ladder.rungs.find(rung => rung.env === env)?.branch ??
+            env,
+    };
+}
+/**
+ * Extract the work-item refs for the run's tracker scope.
+ * @param context - Resolved run context
+ * @param range - Normalized commit range
+ * @param cwd - Working directory
+ * @param deps - Injectable collaborators
+ * @returns Extraction result
+ */
+function extractRefsForRun(context, range, cwd, deps) {
+    const org = getAtPath(context.config, "github.org");
+    const repo = getAtPath(context.config, "github.repo");
+    const repository = typeof org === "string" && typeof repo === "string"
+        ? `${org}/${repo}`
+        : undefined;
+    const projectKey = getAtPath(context.config, context.tracker === "jira" ? "jira.project" : "linear.teamKey");
+    return (deps.extractRefs ?? extractWorkItemRefs)({
+        range,
+        tracker: context.tracker,
+        ...(repository === undefined ? {} : { repository }),
+        ...(typeof projectKey === "string" ? { projectKey } : {}),
+        cwd,
+    });
+}
+/**
+ * Fetch states, plan, and execute for the extracted refs.
+ * @param context - Resolved run context
+ * @param extracted - Extraction result
+ * @param options - CLI options
+ * @param deps - Injectable collaborators
+ * @param sinks - Output sinks
+ * @returns Intended process exit code
+ */
+async function runPlanned(context, extracted, options, deps, sinks) {
+    const base = (deps.adapterFactory ?? createTrackerAdapter)({
+        tracker: context.tracker,
+        config: context.config,
+        doneStatuses: context.ladder.rungs.map(rung => rung.doneStatus),
+        cwd: deps.cwd ?? process.cwd(),
+    });
+    const adapter = options.dryRun === true
+        ? withDryRun(base, write => {
+            sinks.human(`dry-run: would ${write.method} ${write.ref}`);
+        })
+        : base;
+    const fetched = await fetchStates(extracted.refs, adapter);
+    const plan = planTransitions({
+        ladder: context.ladder,
+        env: context.env,
+        tracker: context.tracker,
+        branch: context.branch,
+        headSha: extracted.headSha,
+        items: fetched.items,
+    });
+    // The if-guard is load-bearing for code-organization/enforce-statement-
+    // order: `if` statements are exempt from the definitions-before-side-
+    // effects ordering, a bare forEach here is not.
+    if (fetched.failures.length > 0) {
+        fetched.failures.forEach(failure => {
+            sinks.error(`failed ${failure.ref}: ${failure.detail ?? ""}`);
+        });
+    }
+    if (plan.kind === "no-op") {
+        emitNoOp(sinks, options, plan);
+        return fetched.failures.length > 0 ? 1 : 0;
+    }
+    const results = await executePlan(plan, adapter, sinks);
+    const allResults = [...fetched.failures, ...results];
+    if (options.json === true) {
+        sinks.log(JSON.stringify({ env: context.env, plan, results: allResults }, null, 2));
+    }
+    sinks.human(`deploy-status-sync: ${String(allResults.length)} item(s) processed for ${context.env}${options.dryRun === true ? " (dry-run)" : ""}`);
+    return allResults.some(result => result.outcome === "failed") ? 1 : 0;
+}
+/**
+ * Run the engine over a resolved context: preflight the environment (an
+ * unconfigured env is an explanatory no-op, exit 0), extract refs, then
+ * fetch/plan/execute.
+ * @param context - Resolved run context
+ * @param range - Normalized commit range
+ * @param options - CLI options
+ * @param deps - Injectable collaborators
+ * @param sinks - Output sinks
+ * @returns Intended process exit code
+ */
+export async function runResolved(context, range, options, deps, sinks) {
+    const preflight = planTransitions({
+        ladder: context.ladder,
+        env: context.env,
+        tracker: context.tracker,
+        branch: context.branch,
+        headSha: "",
+        items: [],
+    });
+    if (preflight.kind === "no-op") {
+        emitNoOp(sinks, options, preflight);
+        return 0;
+    }
+    const extracted = await extractRefsForRun(context, range, deps.cwd ?? process.cwd(), deps);
+    extracted.skipped.forEach(entry => {
+        // Skipped tokens come from untrusted commit messages and PR bodies —
+        // strip control characters (incl. ANSI escapes) AND Unicode bidi/
+        // formatting controls (Trojan-Source-style reordering: LRM/RLM,
+        // embeddings/overrides U+202A-E, isolates U+2066-9) before echoing so a
+        // crafted token cannot manipulate the operator's terminal.
+        const printable = [...entry.token]
+            .filter(character => {
+            const code = character.codePointAt(0) ?? 0;
+            const isControl = code < 0x20 || code === 0x7f || (code >= 0x80 && code <= 0x9f);
+            const isBidi = code === 0x20_0e ||
+                code === 0x20_0f ||
+                (code >= 0x20_2a && code <= 0x20_2e) ||
+                (code >= 0x20_66 && code <= 0x20_69);
+            return !isControl && !isBidi;
+        })
+            .join("");
+        sinks.human(`skipped token ${printable} (${entry.reason})`);
+    });
+    if (extracted.refs.length === 0) {
+        emitNoOp(sinks, options, {
+            kind: "no-op",
+            env: context.env,
+            reason: `no work-item refs found in ${range}`,
+        });
+        return 0;
+    }
+    return runPlanned(context, extracted, options, deps, sinks);
+}
+//# sourceMappingURL=deploy-status-sync-engine.js.map

package/dist/cli/deploy-status-sync-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-status-sync-engine.js","sourceRoot":"","sources":["../../src/cli/deploy-status-sync-engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,mBAAmB,GAGpB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAkB,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EACL,oBAAoB,EACpB,UAAU,GAGX,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,GAGpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,QAAQ,EACR,WAAW,EACX,WAAW,GAGZ,MAAM,8BAA8B,CAAC;AAgCtC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErE;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CACzB,OAAgC,EAChC,MAAoB,EACpB,MAAiB;IAEjB,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,WAAW,MAAM,uCAAuC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;SACzH,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,kEAAkE;QAClE,wDAAwD;QACxD,OAAO;YACL,OAAO,EAAE,WAAW,MAAM,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;SAC5H,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,WAAW,MAAM,2DAA2D;KACtF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgC,EAChC,GAAW;IAEX,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAc,CAAC;IAC3E,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,OAAO,EACL,qGAAqG;SACxG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,OAAkB,EAAE,UAAU,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,SAAS,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC;IAC5B,OAAO;QACL,MAAM;QACN,OAAO,EAAE,OAAkB;QAC3B,MAAM;QACN,GAAG;QACH,MAAM,EACJ,OAAO,CAAC,MAAM;YACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,MAAM;YACnD,GAAG;KACN,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,OAAmB,EACnB,KAAa,EACb,GAAW,EACX,IAAkC;IAElC,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,UAAU,GACd,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QACjD,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;QAClB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,UAAU,GAAG,SAAS,CAC1B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAC/D,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;QAC/C,KAAK;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG;KACJ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CACvB,OAAmB,EACnB,SAAwB,EACxB,OAAgC,EAChC,IAAkC,EAClC,KAAY;IAEZ,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,oBAAoB,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/D,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;KAC/B,CAAC,CAAC;IACH,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,IAAI;QACrB,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;YACvB,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IACH,wEAAwE;IACxE,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,KAAK,CAAC,KAAK,CAAC,UAAU,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CACP,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,KAAK,CACT,uBAAuB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,0BAA0B,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CACtI,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAmB,EACnB,KAAa,EACb,OAAgC,EAChC,IAAkC,EAClC,KAAY;IAEZ,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,iBAAiB,CACvC,OAAO,EACP,KAAK,EACL,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EACzB,IAAI,CACL,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAChC,qEAAqE;QACrE,kEAAkE;QAClE,gEAAgE;QAChE,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;aAC/B,MAAM,CAAC,SAAS,CAAC,EAAE;YAClB,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,SAAS,GACb,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;YACjE,MAAM,MAAM,GACV,IAAI,KAAK,OAAO;gBAChB,IAAI,KAAK,OAAO;gBAChB,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC;gBACpC,CAAC,IAAI,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC;YACvC,OAAO,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,KAAK,CAAC,KAAK,CAAC,iBAAiB,SAAS,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE;YACvB,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE,8BAA8B,KAAK,EAAE;SAC9C,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC"}