@fitlab-ai/agent-infra 0.9.14 → 0.10.0

package/dist/lib/platform/pr-change-report.js

@@ -3,8 +3,9 @@ import path from 'node:path';
 import { createHash, randomUUID } from 'node:crypto';
 import { execFileSync } from 'node:child_process';
 import { escapeHtmlText } from './comment-safety.js';
+import { isResourceIdentity } from './resource-identity.js';
 const REPORT_FILE_NAME = 'pr-change-report.json';
-const REPORT_VERSION = 1;
+const REPORT_VERSION = 2;
 const CANONICAL_REPORT_PLACEHOLDER = '<!-- canonical-pr-change-report -->';
 const CANONICAL_REPORT_HEADING = '### PR 代码增减';
 const PRECHECK_IDS = [
@@ -211,8 +212,8 @@ function validatePrChangeReport(value) {
     }
     const identity = value.identity;
     const identityRepository = identity.repository;
-    const identityNumber = identity.number;
-    if (!isNonEmptyString(identityRepository) || typeof identityNumber !== 'number' || !Number.isSafeInteger(identityNumber) || identityNumber <= 0)
+    const identityResource = identity.resource;
+    if (!isNonEmptyString(identityRepository) || !isResourceIdentity(identityResource))
         return invalid('change report identity is invalid');
     const parseIdentityPart = (part, name) => {
         if (!isRecord(part) || !isNonEmptyString(part.repository) || !isNonEmptyString(part.ref) || !isSha(part.sha))
@@ -259,7 +260,7 @@ function validatePrChangeReport(value) {
             version: REPORT_VERSION,
             identity: {
                 repository: identityRepository,
-                number: identityNumber,
+                resource: identityResource,
                 base: base.value,
                 head: head.value
             },

package/dist/lib/platform/pr-checks.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import { parseTypedTaskFrontmatter } from '../task/frontmatter.js';
 import { resolveTaskRef } from '../task/resolve-ref.js';
+import { checkStatusBucket } from './check-status.js';
 import { resolvePlatformProviderContext } from './context.js';
 import { inspectPlatformPullRequest } from './pull-requests.js';
 import { platformResult } from './types.js';
@@ -26,20 +27,6 @@ function classifyPullRequestReadiness(input) {
         return { state: 'pending', headSha: input.headSha };
     return { state: 'ready', headSha: input.headSha };
 }
-function parseRunJobIdentity(detailsUrl) {
-    try {
-        const url = new URL(detailsUrl);
-        if (url.hostname !== 'github.com')
-            return null;
-        const match = url.pathname.match(/\/actions\/runs\/(\d+)(?:\/job\/(\d+))?/);
-        if (!match)
-            return null;
-        return { runId: Number(match[1]), jobId: match[2] ? Number(match[2]) : null };
-    }
-    catch {
-        return null;
-    }
-}
 function resolveRunCandidate(candidates, headSha, checkName) {
     const matches = candidates.filter((candidate) => candidate.headSha === headSha && candidate.name === checkName);
     if (matches.length === 1)
@@ -54,42 +41,6 @@ function checksResult(status, overrides = {}) {
         ...overrides
     };
 }
-function normalizeBucket(value) {
-    const raw = String(value.bucket || value.status || value.conclusion || value.state || '').toLowerCase();
-    if (['pass', 'success', 'successful', 'neutral'].includes(raw))
-        return 'pass';
-    if (['fail', 'failure', 'failed', 'error', 'timed_out', 'action_required'].includes(raw))
-        return 'fail';
-    if (['cancel', 'cancelled', 'canceled', 'skipped', 'stale'].includes(raw))
-        return 'cancel';
-    return 'pending';
-}
-function normalizeChecks(value) {
-    if (!Array.isArray(value))
-        return [];
-    return value.flatMap((raw) => {
-        const item = raw;
-        const name = String(item.name || item.context || '');
-        return name ? [{
-                name,
-                bucket: normalizeBucket(item),
-                workflow: item.workflow ? String(item.workflow) : null,
-                conclusion: item.conclusion ? String(item.conclusion) : item.state ? String(item.state) : null,
-                detailsUrl: item.link ? String(item.link) : item.detailsUrl ? String(item.detailsUrl) : null,
-                startedAt: item.startedAt ? String(item.startedAt) : null,
-                completedAt: item.completedAt ? String(item.completedAt) : null
-            }] : [];
-    });
-}
-function inspectGitHubRequiredChecks(client, repository, number, cwd) {
-    const inspected = client.json([
-        'pr', 'checks', String(number), '--repo', repository,
-        '--json', 'name,state,bucket,link,workflow,startedAt,completedAt'
-    ], { cwd });
-    return inspected.ok
-        ? { ok: true, value: normalizeChecks(inspected.value) }
-        : { ok: false, error: inspected.error };
-}
 async function resolvedTask(taskRef, options) {
     const resolved = resolveTaskRef(taskRef, options.cwd ? { repoRoot: options.cwd } : {});
     if (!resolved.ok)
@@ -117,10 +68,9 @@ async function inspectRequiredChecks(taskRef, options = {}) {
     const base = await resolvedTask(taskRef, options);
     if (!base.ok)
         return base.output;
-    return inspectChecksForResolvedTask(base, options);
+    return inspectChecksForResolvedTask(base);
 }
-async function inspectChecksForResolvedTask(base, options) {
-    const repository = base.context.platform.repository;
+async function inspectChecksForResolvedTask(base) {
     {
         const inspected = base.provider.checks?.inspectRequired
             ? await base.provider.checks.inspectRequired({
@@ -137,7 +87,13 @@ async function inspectChecksForResolvedTask(base, options) {
                 pullRequest: base.pullRequest,
                 error: providerError(inspected.error, 'PLATFORM_PROVIDER_OPERATION_FAILED')
             });
-        const required = normalizeChecks(inspected.value);
+        const required = inspected.value.map((check) => ({
+            name: check.name,
+            bucket: checkStatusBucket(check.status),
+            conclusion: check.conclusion || null,
+            detailsUrl: check.detailsUrl || null,
+            workflow: null, startedAt: null, completedAt: null
+        }));
         const classified = classifyRequiredChecks(required);
         const status = classified.state === 'passed' || classified.state === 'no-required'
             ? 'no-op'
@@ -157,7 +113,7 @@ async function inspectPullRequestReadiness(taskRef, options = {}) {
     const base = await resolvedTask(taskRef, options);
     if (!base.ok)
         return base.output;
-    const checked = await inspectChecksForResolvedTask(base, options);
+    const checked = await inspectChecksForResolvedTask(base);
     const classifiedCodes = new Set(['REQUIRED_CHECKS_PENDING', 'REQUIRED_CHECKS_FAILED', 'REQUIRED_CHECKS_CANCELLED']);
     if (checked.error && !classifiedCodes.has(checked.error.code))
         return checked;
@@ -242,15 +198,6 @@ async function resolvePlatformCheckRun(taskRef, options) {
         });
     }
 }
-function fetchCheckLogText(client, args, cwd) {
-    if (!client.text)
-        return { ok: false, error: { code: 'PLATFORM_CLIENT_TEXT_UNAVAILABLE', message: 'Platform client does not support text responses', retryable: false } };
-    const fetched = client.text(args, { cwd });
-    if (fetched.ok || args[0] !== 'api' || !/response contains terminal escape sequences/i.test(fetched.error.message)) {
-        return fetched;
-    }
-    return client.text([...args, '--allow-escape-sequences'], { cwd });
-}
 async function fetchPlatformCheckLogs(taskRef, options) {
     const base = await resolvedTask(taskRef, options);
     if (!base.ok)
@@ -281,5 +228,5 @@ async function fetchPlatformCheckLogs(taskRef, options) {
         });
     }
 }
-export { classifyPullRequestReadiness, classifyRequiredChecks, fetchCheckLogText, fetchPlatformCheckLogs, inspectGitHubRequiredChecks, inspectRequiredChecks, inspectPullRequestReadiness, parseRunJobIdentity, resolvePlatformCheckRun, resolveRunCandidate, watchPullRequestReadiness };
+export { classifyPullRequestReadiness, classifyRequiredChecks, fetchPlatformCheckLogs, inspectRequiredChecks, inspectPullRequestReadiness, resolvePlatformCheckRun, resolveRunCandidate, watchPullRequestReadiness };
 //# sourceMappingURL=pr-checks.js.map

package/dist/lib/platform/pr-summary.js

@@ -11,7 +11,10 @@ import { normalizeCommentContent } from './issue-comments.js';
 import { CONTROL_MARKER_PATTERN, escapeHtmlText, sanitizeMarkdownDocument, splitDocumentPlaceholder } from './comment-safety.js';
 import { platformResult } from './types.js';
 import { providerError, providerOperationContext, providerStatus, providerResourceToken, resourceIdentityNumber, unsupportedProviderOperation } from './provider-bridge.js';
+import { resourceIdentityEquals } from './resource-identity.js';
 import { buildPrChangeReport, CANONICAL_REPORT_PLACEHOLDER, readPrChangeReport, replaceCanonicalReportPlaceholder, runMechanicalChangeReport, taskIntentDigest, validateMechanicalReport, validatePrecheckCandidate, writePrChangeReportAtomic } from './pr-change-report.js';
+import { manualValidationFinalSummaryProjectionMatches } from '../task/manual-validation-receipt.js';
+import { readManualValidationCompletion } from '../task/manual-validation-completion.js';
 function summaryMarker(taskId) {
     return `<!-- sync-pr:${taskId}:summary -->`;
 }
@@ -46,7 +49,8 @@ function readBoundTaskSnapshot(taskMdPath) {
     const frontmatter = parseTypedTaskFrontmatter(taskContent);
     const fact = readPrDeliveryFact(frontmatter);
     const boundFact = fact.status === 'valid' && fact.fact.state === 'bound' ? fact.fact : null;
-    return { taskContent, boundFact };
+    const factError = fact.status === 'invalid' ? { code: fact.error.code, message: fact.error.message } : null;
+    return { taskContent, boundFact, factError };
 }
 function boundPrNumberForWarning(taskMdPath) {
     try {
@@ -115,7 +119,7 @@ function isHardSummaryFailure(error) {
 function inspectionError(error) {
     return error.retryable ? 'blocked' : 'failed';
 }
-async function inspectBoundPullRequest(context, repoRoot, prNumber, loadedContext) {
+async function inspectBoundPullRequest(context, repoRoot, prIdentity, loadedContext) {
     if (!context.platform.repository) {
         return { ok: false, status: context.status, error: context.error };
     }
@@ -124,16 +128,15 @@ async function inspectBoundPullRequest(context, repoRoot, prNumber, loadedContex
         : await resolvePlatformProviderContext({ cwd: repoRoot });
     if (!loaded.ok)
         return { ok: false, status: loaded.context.status, error: loaded.context.error };
-    const target = providerResourceToken(loaded.value.provider, 'pull-request', String(prNumber));
     const inspected = loaded.value.provider.changeRequests?.inspect
-        ? await loaded.value.provider.changeRequests.inspect({ context: providerOperationContext(loaded.value), target })
+        ? await loaded.value.provider.changeRequests.inspect({ context: providerOperationContext(loaded.value), target: prIdentity })
         : unsupportedProviderOperation(loaded.value.provider, 'changeRequests.inspect');
     if (!inspected.ok) {
         const error = providerError(inspected.error, 'PLATFORM_PROVIDER_OPERATION_FAILED');
         return { ok: false, status: inspectionError(error), error };
     }
     const remote = inspected.value;
-    const number = remote.number ?? resourceIdentityNumber(remote.identity) ?? prNumber;
+    const number = remote.number ?? resourceIdentityNumber(remote.identity) ?? resourceIdentityNumber(prIdentity) ?? 0;
     const head = remote.head || { repository: context.platform.repository, ref: '', sha: remote.headSha || '' };
     const base = remote.base || { repository: context.platform.repository, ref: '', sha: remote.baseSha || '' };
     return {
@@ -141,6 +144,7 @@ async function inspectBoundPullRequest(context, repoRoot, prNumber, loadedContex
         value: {
             repository: context.platform.repository,
             number,
+            identity: remote.identity ?? prIdentity,
             nodeId: remote.id,
             url: remote.displayUrl || '',
             state: remote.state === 'closed' ? 'closed' : 'open',
@@ -161,20 +165,22 @@ async function inspectBoundPullRequest(context, repoRoot, prNumber, loadedContex
 function sameIdentity(left, right) {
     return JSON.stringify({
         repository: left.repository,
-        number: left.number,
+        identity: left.identity ?? null,
         base: left.base,
         head: left.head
     }) === JSON.stringify({
         repository: right.repository,
-        number: right.number,
+        identity: right.identity ?? null,
         base: right.base,
         head: right.head
     });
 }
 function identityFromSnapshot(snapshot) {
+    if (!snapshot.identity)
+        throw new Error('pull-request snapshot has no canonical identity');
     return {
         repository: snapshot.repository,
-        number: snapshot.number,
+        resource: snapshot.identity,
         base: { ...snapshot.base },
         head: { ...snapshot.head }
     };
@@ -203,7 +209,7 @@ function currentReportCheck(report, snapshot, taskContent, repoRoot) {
     if (!digest.ok)
         return { ok: false, error: platformError(digest.error) };
     const reportIdentity = report.identity;
-    if (reportIdentity.repository !== snapshot.repository || reportIdentity.number !== snapshot.number ||
+    if (reportIdentity.repository !== snapshot.repository || !resourceIdentityEquals(reportIdentity.resource, snapshot.identity) ||
         JSON.stringify(reportIdentity.base) !== JSON.stringify(snapshot.base) || JSON.stringify(reportIdentity.head) !== JSON.stringify(snapshot.head))
         return {
             ok: false,
@@ -261,14 +267,23 @@ async function summaryContext(taskRef, options = {}) {
         };
     const taskContent = fs.readFileSync(resolved.taskMdPath, 'utf8');
     const frontmatter = parseTypedTaskFrontmatter(taskContent);
-    const fact = readPrDeliveryFact(frontmatter, options.runtimeVersion);
-    const prNumber = fact.status === 'valid' && fact.fact.state === 'bound' ? resourceIdentityNumber(fact.fact.identity.resource) : null;
     const reportPath = taskReportPath(resolved.taskDir);
+    const fact = readPrDeliveryFact(frontmatter, options.runtimeVersion);
+    if (fact.status === 'invalid')
+        return {
+            ...platformResult('failed', { error: { code: fact.error.code, message: fact.error.message, retryable: false } }),
+            task: { id: resolved.taskId, prNumber: null },
+            pullRequest: null,
+            changeReport: { status: 'invalid', path: reportPath, taskIntentSha256: null, reason: fact.error.message },
+            artifacts: []
+        };
+    const prIdentity = fact.status === 'valid' && fact.fact.state === 'bound' ? fact.fact.identity.resource : null;
+    const prNumber = resourceIdentityNumber(prIdentity);
     const loaded = await resolvePlatformProviderContext({ cwd: resolved.repoRoot, client: options.client });
     const context = loaded.ok ? loaded.value.context : loaded.context;
     let pullRequest = null;
-    if (loaded.ok && prNumber && context.platform.repository && ['no-op', 'degraded'].includes(context.status)) {
-        const inspected = await inspectBoundPullRequest(context, resolved.repoRoot, prNumber, loaded.value);
+    if (loaded.ok && prIdentity && context.platform.repository && ['no-op', 'degraded'].includes(context.status)) {
+        const inspected = await inspectBoundPullRequest(context, resolved.repoRoot, prIdentity, loaded.value);
         if (inspected.ok)
             pullRequest = inspected.value;
     }
@@ -286,10 +301,45 @@ async function summaryContext(taskRef, options = {}) {
         artifacts: canonicalArtifacts(resolved.taskDir)
     };
 }
+async function summaryCommentState(taskRef, options = {}) {
+    const context = await summaryContext(taskRef, options);
+    const prIdentity = context.pullRequest?.identity;
+    if (!prIdentity)
+        return { ...context, comment: null };
+    const loaded = await resolvePlatformProviderContext({ cwd: options.cwd, client: options.client });
+    if (!loaded.ok || !loaded.value.provider.comments?.list)
+        return { ...context, comment: null };
+    const listed = await loaded.value.provider.comments.list({
+        context: providerOperationContext(loaded.value),
+        parent: prIdentity
+    });
+    if (!listed.ok)
+        return { ...context, comment: null };
+    const matches = listed.value.filter((comment) => comment.body.includes(summaryMarker(context.task.id)));
+    return {
+        ...context,
+        comment: matches.length === 1 ? { id: /^\d+$/u.test(matches[0].id) ? Number(matches[0].id) : matches[0].id, body: matches[0].body } : null
+    };
+}
 async function reportWrite(taskRef, options) {
     const resolved = resolveTaskRef(taskRef, options.cwd ? { repoRoot: options.cwd } : {});
     if (!resolved.ok)
         return { ...platformResult('failed', { error: { code: resolved.code, message: resolved.message, retryable: false } }), report: null };
+    let preflight;
+    try {
+        preflight = readBoundTaskSnapshot(resolved.taskMdPath);
+    }
+    catch (error) {
+        return {
+            ...platformResult('failed', { error: { code: 'PR_CHANGE_REPORT_FAILED', message: error instanceof Error ? error.message : String(error), retryable: false } }),
+            report: null
+        };
+    }
+    if (preflight.factError)
+        return {
+            ...platformResult('failed', { error: { code: preflight.factError.code, message: preflight.factError.message, retryable: false } }),
+            report: null
+        };
     const loaded = await resolvePlatformProviderContext({ cwd: resolved.repoRoot, client: options.client });
     const context = loaded.ok ? loaded.value.context : loaded.context;
     if (!loaded.ok || !context.platform.repository || !['no-op', 'degraded'].includes(context.status))
@@ -297,20 +347,21 @@ async function reportWrite(taskRef, options) {
     let knownPrNumber = null;
     try {
         return await withTaskExecutionLock(resolved.repoRoot, resolved.taskId, options.agent, async () => {
-            const { taskContent, boundFact } = readBoundTaskSnapshot(resolved.taskMdPath);
-            if (!boundFact)
+            const { taskContent, boundFact, factError } = readBoundTaskSnapshot(resolved.taskMdPath);
+            if (factError)
                 return {
-                    ...basePlatformResult('failed', context, resolved.taskId, null, { code: 'PR_NOT_LINKED', message: 'Task has no verified bound pull request', retryable: false }),
+                    ...basePlatformResult('failed', context, resolved.taskId, null, { code: factError.code, message: factError.message, retryable: false }),
                     report: null
                 };
-            const boundPrNumber = resourceIdentityNumber(boundFact.identity.resource);
-            if (!boundPrNumber)
+            if (!boundFact)
                 return {
-                    ...basePlatformResult('failed', context, resolved.taskId, null, { code: 'PR_NUMBER_INVALID', message: 'Bound pull request has no numeric identifier', retryable: false }),
+                    ...basePlatformResult('failed', context, resolved.taskId, null, { code: 'PR_NOT_LINKED', message: 'Task has no verified bound pull request', retryable: false }),
                     report: null
                 };
+            const boundPrIdentity = boundFact.identity.resource;
+            const boundPrNumber = resourceIdentityNumber(boundPrIdentity);
             knownPrNumber = boundPrNumber;
-            const initial = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrNumber, loaded.value);
+            const initial = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrIdentity, loaded.value);
             if (!initial.ok)
                 return { ...basePlatformResult(initial.status, context, resolved.taskId, boundPrNumber, initial.error), report: null };
             const digest = taskIntentDigest(taskContent);
@@ -343,7 +394,7 @@ async function reportWrite(taskRef, options) {
             const built = buildPrChangeReport(identityFromSnapshot(initial.value), digest.value.sha256, mechanical.value, candidate.value);
             if (!built.ok)
                 return { ...basePlatformResult('failed', context, resolved.taskId, boundPrNumber, platformError(built.error)), report: null };
-            const final = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrNumber, loaded.value);
+            const final = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrIdentity, loaded.value);
             if (!final.ok)
                 return { ...basePlatformResult(final.status, context, resolved.taskId, boundPrNumber, final.error), report: null };
             if (!sameIdentity(initial.value, final.value))
@@ -444,8 +495,13 @@ async function syncPullRequestSummary(taskRef, options) {
         return preserveFailure(context);
     }
     try {
-        return await withTaskExecutionLock(resolved.repoRoot, resolved.taskId, options.agent, async () => {
-            const { taskContent, boundFact } = readBoundTaskSnapshot(resolved.taskMdPath);
+        const execute = async () => {
+            const { taskContent, boundFact, factError } = readBoundTaskSnapshot(resolved.taskMdPath);
+            if (factError)
+                return {
+                    ...platformResult('failed', { resource: { kind: 'pull-request', number: null }, error: { code: factError.code, message: factError.message, retryable: false } }),
+                    result: null, warnings: []
+                };
             if (!boundFact)
                 return {
                     ...platformResult('failed', { resource: { kind: 'pull-request', number: null }, error: { code: 'PR_NOT_LINKED', message: 'Task has no verified bound pull request', retryable: false } }),
@@ -453,16 +509,41 @@ async function syncPullRequestSummary(taskRef, options) {
                 };
             const prIdentity = boundFact.identity.resource;
             const boundPrNumber = resourceIdentityNumber(prIdentity);
-            if (!boundPrNumber)
-                return {
-                    ...platformResult('failed', { resource: { kind: 'pull-request', number: null }, error: { code: 'PR_NUMBER_INVALID', message: 'Bound pull request has no numeric identifier', retryable: false } }),
-                    result: null, warnings: []
-                };
             knownPrNumber = boundPrNumber;
             const prNumber = boundPrNumber;
-            const initial = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrNumber, loaded.value);
+            const initial = await inspectBoundPullRequest(context, resolved.repoRoot, prIdentity, loaded.value);
             if (!initial.ok)
                 return fail(initial.status, context, initial.error);
+            const manual = options.manualValidation;
+            const hasFinalManualValidation = /###\s+✅\s+(?:Manual Validation Passed|人工验证已通过)/u.test(options.body);
+            if (hasFinalManualValidation && (!manual || manual.phase !== 'final'))
+                return fail('failed', context, { code: 'MANUAL_VALIDATION_TRANSACTION_REQUIRED', message: 'final manual-validation summary requires the transaction coordinator', retryable: false }, prNumber);
+            if (manual && (manual.phase === 'pending' ? hasFinalManualValidation : !hasFinalManualValidation))
+                return fail('failed', context, { code: 'MANUAL_VALIDATION_SUMMARY_PHASE_INVALID', message: 'manual-validation summary phase does not match the requested writer phase', retryable: false }, prNumber);
+            if (manual) {
+                if (prNumber === null)
+                    return fail('failed', context, { code: 'MANUAL_VALIDATION_PR_NUMBER_REQUIRED', message: 'manual-validation summary requires a numeric pull-request identity', retryable: false }, prNumber);
+                if (manual.phase === 'final' && (!manual.transactionId || !manual.receiptDigest || !manual.prHeadSha || manual.prHeadSha !== initial.value.head.sha))
+                    return fail('failed', context, { code: 'MANUAL_VALIDATION_TRANSACTION_REQUIRED', message: 'final manual-validation summary requires transaction, receipt, and current head identity', retryable: false }, prNumber);
+                if (manual.phase === 'final') {
+                    if (manual.authority !== 'coordinator')
+                        return fail('failed', context, { code: 'MANUAL_VALIDATION_TRANSACTION_REQUIRED', message: 'final manual-validation summary requires coordinator authority', retryable: false }, prNumber);
+                    const completion = readManualValidationCompletion(resolved.taskDir, {
+                        transactionId: manual.transactionId,
+                        taskId: resolved.taskId,
+                        prNumber,
+                        prHeadSha: initial.value.head.sha,
+                        receiptDigest: manual.receiptDigest
+                    });
+                    if (!completion.ok)
+                        return fail('failed', context, platformError(completion.error), prNumber);
+                    const { receipt, transaction } = completion.value;
+                    if (transaction.phase !== 'final-promotion-in-progress' || !transaction.eventAppended)
+                        return fail('failed', context, { code: 'MANUAL_VALIDATION_TRANSACTION_PHASE_INVALID', message: 'final summary requires a receipt-backed promotion intent', retryable: false }, prNumber);
+                    if (!manualValidationFinalSummaryProjectionMatches(options.body, receipt))
+                        return fail('failed', context, { code: 'MANUAL_VALIDATION_SUMMARY_PROJECTION_INVALID', message: 'final summary body does not match the canonical receipt projection', retryable: false }, prNumber);
+                }
+            }
             const expectedReportPath = taskReportPath(resolved.taskDir);
             const suppliedReportPath = path.resolve(resolved.repoRoot, options.changeReportFile);
             if (suppliedReportPath !== expectedReportPath)
@@ -521,7 +602,7 @@ async function syncPullRequestSummary(taskRef, options) {
                 ? listed.value.find((comment) => comment.id === reconciliation.commentId)?.body ?? null
                 : null;
             const info = { precheckVerdict: report.value.precheck.verdict, nextAction: report.value.precheck.route };
-            const beforeWrite = await inspectBoundPullRequest(context, resolved.repoRoot, boundPrNumber, loaded.value);
+            const beforeWrite = await inspectBoundPullRequest(context, resolved.repoRoot, prIdentity, loaded.value);
             if (!beforeWrite.ok)
                 return fail(beforeWrite.status, context, beforeWrite.error, prNumber);
             if (!sameIdentity(initial.value, beforeWrite.value))
@@ -556,7 +637,7 @@ async function syncPullRequestSummary(taskRef, options) {
                 : unsupportedProviderOperation(loaded.value.provider, 'comments.write');
             if (!written.ok)
                 return fail(providerStatus(written.error) === 'blocked' ? 'blocked' : 'failed', context, providerError(written.error, 'PLATFORM_PROVIDER_OPERATION_FAILED'), prNumber);
-            const after = await inspectBoundPullRequest(context, resolved.repoRoot, prNumber, loaded.value);
+            const after = await inspectBoundPullRequest(context, resolved.repoRoot, prIdentity, loaded.value);
             const id = /^\d+$/.test(written.value.remoteId) ? Number(written.value.remoteId) : written.value.remoteId;
             const compensateWrittenSummary = async () => reconciliation.action === 'create'
                 ? written.value.remoteId && loaded.value.provider.comments?.delete
@@ -610,7 +691,10 @@ async function syncPullRequestSummary(taskRef, options) {
                 operations: [{ name: `summary:${reconciliation.action}`, status: 'applied', reasonCode: null }],
                 result: null, warnings: [], ...info
             };
-        });
+        };
+        return await (options.lockAlreadyHeld
+            ? execute()
+            : withTaskExecutionLock(resolved.repoRoot, resolved.taskId, options.agent, execute));
     }
     catch (error) {
         const lockError = error instanceof TaskExecutionLockError
@@ -619,5 +703,5 @@ async function syncPullRequestSummary(taskRef, options) {
         return fail(lockError.retryable ? 'blocked' : 'failed', context, lockError);
     }
 }
-export { buildPullRequestSummary, reconcileSummaryComment, reportWrite, summaryContext, summaryMarker, syncPullRequestSummary, warningResultForPrimary };
+export { buildPullRequestSummary, reconcileSummaryComment, reportWrite, summaryCommentState, summaryContext, summaryMarker, syncPullRequestSummary, warningResultForPrimary };
 //# sourceMappingURL=pr-summary.js.map

package/dist/lib/platform/pull-requests.js

@@ -1,3 +1,4 @@
+import { normalizePullRequest } from './github-data.js';
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
@@ -54,56 +55,6 @@ function withCreation(output, creation) {
 const PRECONDITION_NOT_CREATED = {
     kind: 'not-created', reason: 'precondition-failed', createdByCurrentOperation: false
 };
-function normalizePullRequest(remote, repository) {
-    const number = Number(remote.number);
-    const headRepository = remote.head?.repo?.full_name;
-    const baseRepository = remote.base?.repo?.full_name;
-    if (!Number.isInteger(number) || number <= 0 || !remote.node_id || !remote.html_url ||
-        !remote.head?.ref || !remote.head.sha || !headRepository || !remote.base?.ref || !baseRepository)
-        return null;
-    const mergeabilityDetail = remote.mergeable_state?.trim().toLowerCase() || null;
-    const mergeability = remote.mergeable === false
-        ? { state: 'conflicting', detail: mergeabilityDetail }
-        : remote.mergeable === true && mergeabilityDetail !== 'dirty'
-            ? { state: 'mergeable', detail: mergeabilityDetail }
-            : { state: 'unknown', detail: mergeabilityDetail };
-    return {
-        repository,
-        number,
-        nodeId: remote.node_id,
-        url: remote.html_url,
-        state: remote.state === 'closed' ? 'closed' : 'open',
-        title: remote.title || '',
-        body: remote.body || '',
-        draft: Boolean(remote.draft),
-        head: { repository: headRepository, ref: remote.head.ref, sha: remote.head.sha },
-        base: { repository: baseRepository, ref: remote.base.ref, sha: remote.base.sha || '' },
-        mergedAt: remote.merged_at || null,
-        mergeCommitSha: remote.merge_commit_sha || null,
-        labels: (remote.labels || []).map((label) => typeof label === 'string' ? label : label.name || '').filter(Boolean).sort(),
-        assignees: (remote.assignees || []).map((assignee) => assignee.login || '').filter(Boolean).sort(),
-        milestone: remote.milestone?.title || null,
-        mergeability
-    };
-}
-function normalizeClosingPullRequest(node, repository) {
-    return normalizePullRequest({
-        number: node.number,
-        node_id: node.id,
-        html_url: node.url,
-        state: node.state === 'OPEN' ? 'open' : 'closed',
-        title: node.title,
-        body: node.body,
-        draft: node.isDraft,
-        head: { ref: node.headRefName, sha: node.headRefOid, repo: node.headRepository ? { full_name: node.headRepository.nameWithOwner } : null },
-        base: { ref: node.baseRefName, sha: node.baseRefOid, repo: node.baseRepository ? { full_name: node.baseRepository.nameWithOwner } : null },
-        merged_at: node.mergedAt,
-        merge_commit_sha: node.mergeCommit?.oid,
-        labels: node.labels?.nodes,
-        assignees: node.assignees?.nodes,
-        milestone: node.milestone
-    }, repository);
-}
 function repositoryKey(repository) {
     return repository.trim().toLowerCase();
 }
@@ -183,51 +134,6 @@ function selectExternalPullRequest(candidates, repository, existingPrIdentity, e
         };
     return { status: 'selected', source: 'unique', selected: eligible[0], candidates, eligible };
 }
-const CLOSING_PULL_REQUESTS_QUERY = `query($owner:String!,$name:String!,$issue:Int!,$cursor:String){repository(owner:$owner,name:$name){issue(number:$issue){closedByPullRequestsReferences(first:100,after:$cursor){nodes{number id url state title body isDraft headRefName headRefOid headRepository{nameWithOwner} baseRefName baseRefOid baseRepository{nameWithOwner} mergedAt mergeCommit{oid} labels(first:100){nodes{name}} assignees(first:100){nodes{login}} milestone{title}} pageInfo{hasNextPage endCursor}}}}}`;
-function inspectGitHubIssueClosingChangeRequests(client, repository, issueNumber, cwd) {
-    const [owner, name] = repository.split('/');
-    if (!owner || !name || !Number.isInteger(issueNumber) || issueNumber <= 0)
-        return {
-            ok: false,
-            error: { code: 'PR_IDENTITY_INVALID', message: 'Repository or Issue identity is invalid', retryable: false }
-        };
-    const candidates = [];
-    let cursor = null;
-    for (;;) {
-        const args = [
-            'api', 'graphql', '-f', `query=${CLOSING_PULL_REQUESTS_QUERY}`,
-            '-F', `owner=${owner}`, '-F', `name=${name}`, '-F', `issue=${issueNumber}`
-        ];
-        if (cursor)
-            args.push('-F', `cursor=${cursor}`);
-        const response = client.json(args, { cwd });
-        if (!response.ok)
-            return response;
-        const connection = response.value?.data?.repository?.issue?.closedByPullRequestsReferences;
-        if (!connection || !Array.isArray(connection.nodes) || !connection.pageInfo)
-            return {
-                ok: false,
-                error: { code: 'PR_IDENTITY_INVALID', message: 'Closing pull request response is incomplete', retryable: false }
-            };
-        for (const node of connection.nodes) {
-            const normalized = normalizeClosingPullRequest(node, repository);
-            if (!normalized)
-                return {
-                    ok: false,
-                    error: { code: 'PR_IDENTITY_INVALID', message: 'Closing pull request identity is incomplete', retryable: false }
-                };
-            candidates.push(normalized);
-        }
-        if (!connection.pageInfo.hasNextPage)
-            return { ok: true, value: candidates };
-        if (!connection.pageInfo.endCursor || connection.pageInfo.endCursor === cursor)
-            return {
-                ok: false,
-                error: { code: 'PR_IDENTITY_INVALID', message: 'Closing pull request pagination cursor is invalid', retryable: false }
-            };
-        cursor = connection.pageInfo.endCursor;
-    }
-}
 function expectedHead(repository, head) {
     const colon = head.indexOf(':');
     if (colon === -1)
@@ -346,7 +252,7 @@ async function resolvedContext(taskRef, options) {
     const fact = factRead.status === 'valid' ? factRead.fact : null;
     let issueIdentity;
     try {
-        issueIdentity = taskIssueIdentity(frontmatter, undefined, options.runtimeVersion);
+        issueIdentity = taskIssueIdentity(frontmatter);
     }
     catch (error) {
         return { ok: false, output: result('failed', resolved.taskId, null, null, { error: { ...taskIssueIdentityError(error), retryable: false } }) };
@@ -420,15 +326,6 @@ async function inspectExternalPullRequest(base, prIdentity) {
         error: null
     });
 }
-function inspectGitHubPullRequest(client, repository, number, cwd) {
-    const fetched = client.json(['api', `repos/${repository}/pulls/${number}`], { cwd });
-    if (!fetched.ok)
-        return fetched;
-    const pullRequest = normalizePullRequest(fetched.value, repository);
-    return pullRequest
-        ? { ok: true, value: pullRequest }
-        : { ok: false, error: { code: 'PR_IDENTITY_INVALID', message: 'Remote resource is not a valid pull request', retryable: false } };
-}
 async function inspectPlatformPullRequest(taskRef, options = {}) {
     const base = await resolvedContext(taskRef, options);
     if (!base.ok)
@@ -879,7 +776,7 @@ async function resolveExternalPullRequest(taskRef, options) {
         return externalResult(result('failed', base.resolved.taskId, null, base.prNumber, {
             platform: base.context.platform,
             capabilities: base.context.capabilities,
-            error: { code: 'EXTERNAL_DELIVERY_ISSUE_REQUIRED', message: 'External delivery requires a valid issue_number', retryable: false }
+            error: { code: 'EXTERNAL_DELIVERY_ISSUE_REQUIRED', message: 'External delivery requires a valid platform issue identity', retryable: false }
         }));
     const inspected = base.provider.changeRequests?.listClosing
         ? await base.provider.changeRequests.listClosing({
@@ -1388,7 +1285,7 @@ function skipPlatformPullRequestFactUnlocked(resolved, options) {
     }
     let issueIdentity;
     try {
-        issueIdentity = taskIssueIdentity(frontmatter, undefined, options.runtimeVersion);
+        issueIdentity = taskIssueIdentity(frontmatter);
     }
     catch (error) {
         return result('failed', resolved.taskId, null, null, { error: { ...taskIssueIdentityError(error), retryable: false } });
@@ -1463,6 +1360,6 @@ async function skipPlatformPullRequestFact(taskRef, options) {
         });
     }
 }
-export { bindPlatformPullRequest, createPlatformPullRequest, inspectGitHubPullRequest, inspectGitHubIssueClosingChangeRequests, inspectPlatformPullRequest, inspectPlatformPullRequestByNumber, normalizePullRequest, resolveExternalPullRequest, skipPlatformPullRequestFact, selectExternalPullRequest, selectPullRequest, syncPlatformPullRequest, syncPlatformPullRequestInLabels };
+export { bindPlatformPullRequest, createPlatformPullRequest, inspectPlatformPullRequest, inspectPlatformPullRequestByNumber, resolveExternalPullRequest, skipPlatformPullRequestFact, selectExternalPullRequest, selectPullRequest, syncPlatformPullRequest, syncPlatformPullRequestInLabels };
 export { warningResultForPrimary };
 //# sourceMappingURL=pull-requests.js.map

package/dist/lib/platform/snapshots.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=snapshots.js.map

package/dist/lib/platform/task-identities.js

@@ -1,7 +1,6 @@
 import { parseResourceIdentity } from './resource-identity.js';
-import { isLegacyCompatibilityEnabled, legacyCompatibilityError, VERSION } from '../version.js';
 import { parse as parseYaml } from 'yaml';
-function taskIssueIdentity(frontmatter, _declaration, runtimeVersion = VERSION) {
+function taskIssueIdentity(frontmatter) {
     const serialized = frontmatter.platform_issue_identity;
     if (typeof serialized === 'string' && serialized.trim()) {
         try {
@@ -12,13 +11,7 @@ function taskIssueIdentity(frontmatter, _declaration, runtimeVersion = VERSION)
             return null;
         }
     }
-    const legacy = frontmatter.issue_number;
-    const number = typeof legacy === 'number' ? legacy : typeof legacy === 'string' && /^[1-9]\d*$/u.test(legacy) ? Number(legacy) : NaN;
-    // TODO(compat): Remove the numeric issue_number fallback before the first stable v1.0.0 release.
-    if (Number.isSafeInteger(number) && number > 0 && !isLegacyCompatibilityEnabled(runtimeVersion)) {
-        throw legacyCompatibilityError('issue_number', runtimeVersion);
-    }
-    return Number.isSafeInteger(number) && number > 0 ? { kind: 'number', value: number } : null;
+    return null;
 }
 function taskIssueIdentityError(error) {
     const value = error && typeof error === 'object' ? error : {};