@geminixiang/mikan 1.0.0-beta.13 → 1.0.0-beta.14

package/dist/adapters/github/gcp-auth.js

@@ -0,0 +1,196 @@
+import { readFileSync } from "fs";
+import { createSign } from "crypto";
+/**
+ * Minimal Google Application Default Credentials provider — enough to mint
+ * cloud-platform access tokens on the host without pulling in
+ * google-auth-library (this repo hand-rolls its GitHub App JWTs the same way).
+ *
+ * Supported `GOOGLE_APPLICATION_CREDENTIALS` JSON shapes:
+ *  - `external_account` (Workload Identity Federation) with a file or url
+ *    credential source: STS token exchange, plus optional service-account
+ *    impersonation. AWS/executable sources are rejected with a clear error.
+ *  - `service_account` key: self-signed JWT assertion grant.
+ *  - `authorized_user` (gcloud user ADC): refresh-token grant. Local dev.
+ */
+const CLOUD_PLATFORM_SCOPE = "https://www.googleapis.com/auth/cloud-platform";
+const OAUTH_TOKEN_URL = "https://oauth2.googleapis.com/token";
+/** Refresh cached tokens this long before expiry — STS/impersonation tokens
+ *  live ~1h; minting per request would hammer STS in a CI-debug loop. */
+const TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;
+function base64Url(data) {
+    return Buffer.from(data).toString("base64url");
+}
+export class GcpAuthError extends Error {
+    constructor(message, options) {
+        super(message, options);
+        this.name = "GcpAuthError";
+    }
+}
+export class GcpTokenProvider {
+    constructor(options) {
+        this.credentials = null;
+        this.cached = null;
+        this.inFlight = null;
+        this.credentialsPath = options.credentialsPath;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    /** A valid cloud-platform access token, cached until near expiry. */
+    async getAccessToken() {
+        if (this.cached && Date.now() < this.cached.expiresAt - TOKEN_REFRESH_MARGIN_MS) {
+            return this.cached.token;
+        }
+        // Single-flight: concurrent tool calls must not each hit STS.
+        this.inFlight ??= this.mintToken().finally(() => {
+            this.inFlight = null;
+        });
+        return this.inFlight;
+    }
+    loadCredentials() {
+        if (this.credentials)
+            return this.credentials;
+        let parsed;
+        try {
+            parsed = JSON.parse(readFileSync(this.credentialsPath, "utf-8"));
+        }
+        catch (err) {
+            throw new GcpAuthError(`Cannot read GCP credentials at ${this.credentialsPath}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
+        }
+        if (!["external_account", "service_account", "authorized_user"].includes(parsed.type)) {
+            throw new GcpAuthError(`Unsupported GCP credential type '${parsed.type}' — expected ` +
+                `external_account (WIF), service_account, or authorized_user.`);
+        }
+        this.credentials = parsed;
+        return parsed;
+    }
+    async mintToken() {
+        const credentials = this.loadCredentials();
+        let minted;
+        switch (credentials.type) {
+            case "external_account":
+                minted = await this.mintExternalAccount(credentials);
+                break;
+            case "service_account":
+                minted = await this.mintServiceAccount(credentials);
+                break;
+            case "authorized_user":
+                minted = await this.mintAuthorizedUser(credentials);
+                break;
+        }
+        this.cached = {
+            token: minted.token,
+            expiresAt: Date.now() + minted.expiresInSeconds * 1000,
+        };
+        return minted.token;
+    }
+    async postForm(url, form, context) {
+        const response = await this.fetchImpl(url, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams(form).toString(),
+        });
+        if (!response.ok) {
+            const detail = (await response.text().catch(() => "")).slice(0, 300);
+            throw new GcpAuthError(`${context} failed with ${response.status}: ${detail}`);
+        }
+        return (await response.json());
+    }
+    /** WIF: read the subject token, exchange at STS, optionally impersonate. */
+    async mintExternalAccount(credentials) {
+        const subjectToken = await this.readSubjectToken(credentials);
+        const sts = await this.postForm(credentials.token_url, {
+            grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
+            audience: credentials.audience,
+            scope: CLOUD_PLATFORM_SCOPE,
+            requested_token_type: "urn:ietf:params:oauth:token-type:access_token",
+            subject_token: subjectToken,
+            subject_token_type: credentials.subject_token_type,
+        }, "GCP STS token exchange");
+        const stsToken = sts.access_token;
+        const stsExpires = sts.expires_in ?? 3600;
+        if (!credentials.service_account_impersonation_url) {
+            return { token: stsToken, expiresInSeconds: stsExpires };
+        }
+        const response = await this.fetchImpl(credentials.service_account_impersonation_url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Authorization: `Bearer ${stsToken}`,
+            },
+            body: JSON.stringify({ scope: [CLOUD_PLATFORM_SCOPE] }),
+        });
+        if (!response.ok) {
+            const detail = (await response.text().catch(() => "")).slice(0, 300);
+            throw new GcpAuthError(`GCP service-account impersonation failed with ${response.status}: ${detail}`);
+        }
+        const impersonated = (await response.json());
+        const expiresInSeconds = Math.max(0, Math.floor((Date.parse(impersonated.expireTime) - Date.now()) / 1000));
+        return { token: impersonated.accessToken, expiresInSeconds };
+    }
+    async readSubjectToken(credentials) {
+        const source = credentials.credential_source;
+        let raw;
+        if (source.file) {
+            raw = readFileSync(source.file, "utf-8").trim();
+        }
+        else if (source.url) {
+            const response = await this.fetchImpl(source.url, { headers: source.headers });
+            if (!response.ok) {
+                throw new GcpAuthError(`WIF credential_source url returned ${response.status} — cannot read subject token`);
+            }
+            raw = (await response.text()).trim();
+        }
+        else {
+            throw new GcpAuthError("Unsupported WIF credential_source: only file and url sources are supported " +
+                "(aws/executable sources are not).");
+        }
+        if (source.format?.type === "json") {
+            const field = source.format.subject_token_field_name ?? "token";
+            const parsed = JSON.parse(raw);
+            const token = parsed[field];
+            if (!token) {
+                throw new GcpAuthError(`WIF subject token field '${field}' missing from JSON source`);
+            }
+            return token;
+        }
+        return raw;
+    }
+    /** Service-account key: self-signed RS256 JWT → assertion grant. */
+    async mintServiceAccount(credentials) {
+        const tokenUrl = credentials.token_uri ?? OAUTH_TOKEN_URL;
+        const now = Math.floor(Date.now() / 1000);
+        const header = base64Url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+        const payload = base64Url(JSON.stringify({
+            iss: credentials.client_email,
+            scope: CLOUD_PLATFORM_SCOPE,
+            aud: tokenUrl,
+            iat: now,
+            exp: now + 3600,
+        }));
+        const signature = createSign("RSA-SHA256")
+            .update(`${header}.${payload}`)
+            .sign(credentials.private_key)
+            .toString("base64url");
+        const data = await this.postForm(tokenUrl, {
+            grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+            assertion: `${header}.${payload}.${signature}`,
+        }, "GCP service-account token grant");
+        return {
+            token: data.access_token,
+            expiresInSeconds: data.expires_in ?? 3600,
+        };
+    }
+    /** gcloud user ADC: refresh-token grant. */
+    async mintAuthorizedUser(credentials) {
+        const data = await this.postForm(OAUTH_TOKEN_URL, {
+            grant_type: "refresh_token",
+            client_id: credentials.client_id,
+            client_secret: credentials.client_secret,
+            refresh_token: credentials.refresh_token,
+        }, "GCP user-credential refresh");
+        return {
+            token: data.access_token,
+            expiresInSeconds: data.expires_in ?? 3600,
+        };
+    }
+}
+//# sourceMappingURL=gcp-auth.js.map

package/dist/adapters/github/gcp-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcp-auth.js","sourceRoot":"","sources":["../../../src/adapters/github/gcp-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;;;;GAWG;AAEH,MAAM,oBAAoB,GAAG,gDAAgD,CAAC;AAC9E,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D;yEACyE;AACzE,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAyC9C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAO3B,YAAY,OAAgC;QAJpC,gBAAW,GAA0B,IAAI,CAAC;QAC1C,WAAM,GAAgD,IAAI,CAAC;QAC3D,aAAQ,GAA2B,IAAI,CAAC;QAG9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC/C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,CAAC;QACD,8DAA8D;QAC9D,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAmB,CAAC;QACrF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CACpB,kCAAkC,IAAI,CAAC,eAAe,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC7G,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,YAAY,CACpB,oCAAqC,MAA4B,CAAC,IAAI,eAAe;gBACnF,8DAA8D,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,MAAmD,CAAC;QACxD,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,kBAAkB;gBACrB,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACrD,MAAM;YACR,KAAK,iBAAiB;gBACpB,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,iBAAiB;gBACpB,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBACpD,MAAM;QACV,CAAC;QACD,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,gBAAgB,GAAG,IAAI;SACvD,CAAC;QACF,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,GAAW,EACX,IAA4B,EAC5B,OAAe;QAEf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,IAAI,YAAY,CAAC,GAAG,OAAO,gBAAgB,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,mBAAmB,CAC/B,WAAuC;QAEvC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC7B,WAAW,CAAC,SAAS,EACrB;YACE,UAAU,EAAE,iDAAiD;YAC7D,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,KAAK,EAAE,oBAAoB;YAC3B,oBAAoB,EAAE,+CAA+C;YACrE,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;SACnD,EACD,wBAAwB,CACzB,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAsB,CAAC;QAC5C,MAAM,UAAU,GAAI,GAAG,CAAC,UAAiC,IAAI,IAAI,CAAC;QAClE,IAAI,CAAC,WAAW,CAAC,iCAAiC,EAAE,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,iCAAiC,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,QAAQ,EAAE;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,IAAI,YAAY,CACpB,iDAAiD,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgD,CAAC;QAC5F,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CACtE,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAuC;QACpE,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,CAAC;QAC7C,IAAI,GAAW,CAAC;QAChB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,CAAC;aAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CACpB,sCAAsC,QAAQ,CAAC,MAAM,8BAA8B,CACpF,CAAC;YACJ,CAAC;YACD,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,YAAY,CACpB,6EAA6E;gBAC3E,mCAAmC,CACtC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,wBAAwB,IAAI,OAAO,CAAC;YAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,YAAY,CAAC,4BAA4B,KAAK,4BAA4B,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,oEAAoE;IAC5D,KAAK,CAAC,kBAAkB,CAC9B,WAAsC;QAEtC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,IAAI,eAAe,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,SAAS,CACvB,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,WAAW,CAAC,YAAY;YAC7B,KAAK,EAAE,oBAAoB;YAC3B,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;SAChB,CAAC,CACH,CAAC;QACF,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC;aACvC,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;aAC9B,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;aAC7B,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9B,QAAQ,EACR;YACE,UAAU,EAAE,6CAA6C;YACzD,SAAS,EAAE,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE;SAC/C,EACD,iCAAiC,CAClC,CAAC;QACF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,YAAsB;YAClC,gBAAgB,EAAG,IAAI,CAAC,UAAiC,IAAI,IAAI;SAClE,CAAC;IACJ,CAAC;IAED,4CAA4C;IACpC,KAAK,CAAC,kBAAkB,CAC9B,WAAsC;QAEtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9B,eAAe,EACf;YACE,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,aAAa,EAAE,WAAW,CAAC,aAAa;SACzC,EACD,6BAA6B,CAC9B,CAAC;QACF,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,YAAsB;YAClC,gBAAgB,EAAG,IAAI,CAAC,UAAiC,IAAI,IAAI;SAClE,CAAC;IACJ,CAAC;CACF","sourcesContent":["import { readFileSync } from \"fs\";\nimport { createSign } from \"crypto\";\n\n/**\n * Minimal Google Application Default Credentials provider — enough to mint\n * cloud-platform access tokens on the host without pulling in\n * google-auth-library (this repo hand-rolls its GitHub App JWTs the same way).\n *\n * Supported `GOOGLE_APPLICATION_CREDENTIALS` JSON shapes:\n *  - `external_account` (Workload Identity Federation) with a file or url\n *    credential source: STS token exchange, plus optional service-account\n *    impersonation. AWS/executable sources are rejected with a clear error.\n *  - `service_account` key: self-signed JWT assertion grant.\n *  - `authorized_user` (gcloud user ADC): refresh-token grant. Local dev.\n */\n\nconst CLOUD_PLATFORM_SCOPE = \"https://www.googleapis.com/auth/cloud-platform\";\nconst OAUTH_TOKEN_URL = \"https://oauth2.googleapis.com/token\";\n\n/** Refresh cached tokens this long before expiry — STS/impersonation tokens\n *  live ~1h; minting per request would hammer STS in a CI-debug loop. */\nconst TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;\n\ninterface ExternalAccountCredentials {\n  type: \"external_account\";\n  audience: string;\n  subject_token_type: string;\n  token_url: string;\n  service_account_impersonation_url?: string;\n  credential_source: {\n    file?: string;\n    url?: string;\n    headers?: Record<string, string>;\n    format?: { type?: string; subject_token_field_name?: string };\n  };\n}\n\ninterface ServiceAccountCredentials {\n  type: \"service_account\";\n  client_email: string;\n  private_key: string;\n  token_uri?: string;\n}\n\ninterface AuthorizedUserCredentials {\n  type: \"authorized_user\";\n  client_id: string;\n  client_secret: string;\n  refresh_token: string;\n}\n\ntype AdcCredentials =\n  | ExternalAccountCredentials\n  | ServiceAccountCredentials\n  | AuthorizedUserCredentials;\n\nexport interface GcpTokenProviderOptions {\n  /** Path to the ADC JSON (usually $GOOGLE_APPLICATION_CREDENTIALS). */\n  credentialsPath: string;\n  fetchImpl?: typeof fetch;\n}\n\nfunction base64Url(data: string): string {\n  return Buffer.from(data).toString(\"base64url\");\n}\n\nexport class GcpAuthError extends Error {\n  constructor(message: string, options?: { cause?: unknown }) {\n    super(message, options);\n    this.name = \"GcpAuthError\";\n  }\n}\n\nexport class GcpTokenProvider {\n  private readonly credentialsPath: string;\n  private readonly fetchImpl: typeof fetch;\n  private credentials: AdcCredentials | null = null;\n  private cached: { token: string; expiresAt: number } | null = null;\n  private inFlight: Promise<string> | null = null;\n\n  constructor(options: GcpTokenProviderOptions) {\n    this.credentialsPath = options.credentialsPath;\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  /** A valid cloud-platform access token, cached until near expiry. */\n  async getAccessToken(): Promise<string> {\n    if (this.cached && Date.now() < this.cached.expiresAt - TOKEN_REFRESH_MARGIN_MS) {\n      return this.cached.token;\n    }\n    // Single-flight: concurrent tool calls must not each hit STS.\n    this.inFlight ??= this.mintToken().finally(() => {\n      this.inFlight = null;\n    });\n    return this.inFlight;\n  }\n\n  private loadCredentials(): AdcCredentials {\n    if (this.credentials) return this.credentials;\n    let parsed: AdcCredentials;\n    try {\n      parsed = JSON.parse(readFileSync(this.credentialsPath, \"utf-8\")) as AdcCredentials;\n    } catch (err) {\n      throw new GcpAuthError(\n        `Cannot read GCP credentials at ${this.credentialsPath}: ${err instanceof Error ? err.message : String(err)}`,\n        { cause: err },\n      );\n    }\n    if (![\"external_account\", \"service_account\", \"authorized_user\"].includes(parsed.type)) {\n      throw new GcpAuthError(\n        `Unsupported GCP credential type '${(parsed as { type?: string }).type}' — expected ` +\n          `external_account (WIF), service_account, or authorized_user.`,\n      );\n    }\n    this.credentials = parsed;\n    return parsed;\n  }\n\n  private async mintToken(): Promise<string> {\n    const credentials = this.loadCredentials();\n    let minted: { token: string; expiresInSeconds: number };\n    switch (credentials.type) {\n      case \"external_account\":\n        minted = await this.mintExternalAccount(credentials);\n        break;\n      case \"service_account\":\n        minted = await this.mintServiceAccount(credentials);\n        break;\n      case \"authorized_user\":\n        minted = await this.mintAuthorizedUser(credentials);\n        break;\n    }\n    this.cached = {\n      token: minted.token,\n      expiresAt: Date.now() + minted.expiresInSeconds * 1000,\n    };\n    return minted.token;\n  }\n\n  private async postForm(\n    url: string,\n    form: Record<string, string>,\n    context: string,\n  ): Promise<Record<string, unknown>> {\n    const response = await this.fetchImpl(url, {\n      method: \"POST\",\n      headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n      body: new URLSearchParams(form).toString(),\n    });\n    if (!response.ok) {\n      const detail = (await response.text().catch(() => \"\")).slice(0, 300);\n      throw new GcpAuthError(`${context} failed with ${response.status}: ${detail}`);\n    }\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  /** WIF: read the subject token, exchange at STS, optionally impersonate. */\n  private async mintExternalAccount(\n    credentials: ExternalAccountCredentials,\n  ): Promise<{ token: string; expiresInSeconds: number }> {\n    const subjectToken = await this.readSubjectToken(credentials);\n    const sts = await this.postForm(\n      credentials.token_url,\n      {\n        grant_type: \"urn:ietf:params:oauth:grant-type:token-exchange\",\n        audience: credentials.audience,\n        scope: CLOUD_PLATFORM_SCOPE,\n        requested_token_type: \"urn:ietf:params:oauth:token-type:access_token\",\n        subject_token: subjectToken,\n        subject_token_type: credentials.subject_token_type,\n      },\n      \"GCP STS token exchange\",\n    );\n    const stsToken = sts.access_token as string;\n    const stsExpires = (sts.expires_in as number | undefined) ?? 3600;\n    if (!credentials.service_account_impersonation_url) {\n      return { token: stsToken, expiresInSeconds: stsExpires };\n    }\n\n    const response = await this.fetchImpl(credentials.service_account_impersonation_url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Authorization: `Bearer ${stsToken}`,\n      },\n      body: JSON.stringify({ scope: [CLOUD_PLATFORM_SCOPE] }),\n    });\n    if (!response.ok) {\n      const detail = (await response.text().catch(() => \"\")).slice(0, 300);\n      throw new GcpAuthError(\n        `GCP service-account impersonation failed with ${response.status}: ${detail}`,\n      );\n    }\n    const impersonated = (await response.json()) as { accessToken: string; expireTime: string };\n    const expiresInSeconds = Math.max(\n      0,\n      Math.floor((Date.parse(impersonated.expireTime) - Date.now()) / 1000),\n    );\n    return { token: impersonated.accessToken, expiresInSeconds };\n  }\n\n  private async readSubjectToken(credentials: ExternalAccountCredentials): Promise<string> {\n    const source = credentials.credential_source;\n    let raw: string;\n    if (source.file) {\n      raw = readFileSync(source.file, \"utf-8\").trim();\n    } else if (source.url) {\n      const response = await this.fetchImpl(source.url, { headers: source.headers });\n      if (!response.ok) {\n        throw new GcpAuthError(\n          `WIF credential_source url returned ${response.status} — cannot read subject token`,\n        );\n      }\n      raw = (await response.text()).trim();\n    } else {\n      throw new GcpAuthError(\n        \"Unsupported WIF credential_source: only file and url sources are supported \" +\n          \"(aws/executable sources are not).\",\n      );\n    }\n    if (source.format?.type === \"json\") {\n      const field = source.format.subject_token_field_name ?? \"token\";\n      const parsed = JSON.parse(raw) as Record<string, string>;\n      const token = parsed[field];\n      if (!token) {\n        throw new GcpAuthError(`WIF subject token field '${field}' missing from JSON source`);\n      }\n      return token;\n    }\n    return raw;\n  }\n\n  /** Service-account key: self-signed RS256 JWT → assertion grant. */\n  private async mintServiceAccount(\n    credentials: ServiceAccountCredentials,\n  ): Promise<{ token: string; expiresInSeconds: number }> {\n    const tokenUrl = credentials.token_uri ?? OAUTH_TOKEN_URL;\n    const now = Math.floor(Date.now() / 1000);\n    const header = base64Url(JSON.stringify({ alg: \"RS256\", typ: \"JWT\" }));\n    const payload = base64Url(\n      JSON.stringify({\n        iss: credentials.client_email,\n        scope: CLOUD_PLATFORM_SCOPE,\n        aud: tokenUrl,\n        iat: now,\n        exp: now + 3600,\n      }),\n    );\n    const signature = createSign(\"RSA-SHA256\")\n      .update(`${header}.${payload}`)\n      .sign(credentials.private_key)\n      .toString(\"base64url\");\n    const data = await this.postForm(\n      tokenUrl,\n      {\n        grant_type: \"urn:ietf:params:oauth:grant-type:jwt-bearer\",\n        assertion: `${header}.${payload}.${signature}`,\n      },\n      \"GCP service-account token grant\",\n    );\n    return {\n      token: data.access_token as string,\n      expiresInSeconds: (data.expires_in as number | undefined) ?? 3600,\n    };\n  }\n\n  /** gcloud user ADC: refresh-token grant. */\n  private async mintAuthorizedUser(\n    credentials: AuthorizedUserCredentials,\n  ): Promise<{ token: string; expiresInSeconds: number }> {\n    const data = await this.postForm(\n      OAUTH_TOKEN_URL,\n      {\n        grant_type: \"refresh_token\",\n        client_id: credentials.client_id,\n        client_secret: credentials.client_secret,\n        refresh_token: credentials.refresh_token,\n      },\n      \"GCP user-credential refresh\",\n    );\n    return {\n      token: data.access_token as string,\n      expiresInSeconds: (data.expires_in as number | undefined) ?? 3600,\n    };\n  }\n}\n"]}

package/dist/adapters/github/ids.d.ts

@@ -22,4 +22,13 @@ export declare function buildGithubConversationId(ref: GithubConversationRef): s
 export declare function parseGithubConversationId(conversationId: string): GithubConversationRef;
 /** Message ts used for the issue/PR body itself (comments use their comment id). */
 export declare const GITHUB_ISSUE_BODY_TS = "issue";
+/**
+ * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids
+ * live in a different id space than issue-comment ids, and several endpoints
+ * (reactions, edits) differ by family — the prefix makes routing a review id
+ * to an issue-comment endpoint structurally impossible.
+ */
+export declare function githubReviewCommentTs(commentId: number): string;
+/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */
+export declare function parseReviewCommentTs(ts: string): number | null;
 //# sourceMappingURL=ids.d.ts.map

package/dist/adapters/github/ids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAE5E;AAID,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,qBAAqB,CAYvF;AAED,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,UAAU,CAAC"}
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAE5E;AAID,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,qBAAqB,CAYvF;AAED,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D"}

package/dist/adapters/github/ids.js

@@ -36,4 +36,18 @@ export function parseGithubConversationId(conversationId) {
 }
 /** Message ts used for the issue/PR body itself (comments use their comment id). */
 export const GITHUB_ISSUE_BODY_TS = "issue";
+/**
+ * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids
+ * live in a different id space than issue-comment ids, and several endpoints
+ * (reactions, edits) differ by family — the prefix makes routing a review id
+ * to an issue-comment endpoint structurally impossible.
+ */
+export function githubReviewCommentTs(commentId) {
+    return `rc-${commentId}`;
+}
+/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */
+export function parseReviewCommentTs(ts) {
+    const match = /^rc-(\d+)$/.exec(ts);
+    return match ? Number(match[1]) : null;
+}
 //# sourceMappingURL=ids.js.map

package/dist/adapters/github/ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAElE,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC","sourcesContent":["import type { GithubConversationRef } from \"./types.js\";\n\n/**\n * Conversation id for one issue/PR: `GH_<owner>_<repo>_<number>`.\n *\n * DESIGN.md originally proposed `gh:<owner>/<repo>#<number>`, but conversation\n * ids are used verbatim as a single path segment (LAYOUT.md § Casing) and the\n * conversation dir is bind-mounted with docker's `-v source:target` syntax in\n * image mode — so the id can contain neither `/` nor `:`. `_` is the\n * separator because it is the only inert character that also parses back\n * unambiguously under GitHub's name grammar: owners allow `-` (so `-` would\n * make the owner/repo boundary ambiguous) but never `_`, repos may contain\n * `_` but the trailing number is pure digits — so the first `_` and the last\n * `_` before the digits are always the real boundaries.\n *\n * Owner and repo are lowercased: GitHub names are case-insensitive (and this\n * id has two spelling sources — the GITHUB_REPOS env var and API payloads),\n * so per LAYOUT.md § Casing this is a mikan-derived slug, not a verbatim\n * platform id, and derived slugs are lowercased to keep one issue from\n * mapping to two conversation dirs on case-sensitive filesystems.\n */\nexport function buildGithubConversationId(ref: GithubConversationRef): string {\n  return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;\n}\n\nconst CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\\d+)$/;\n\nexport function parseGithubConversationId(conversationId: string): GithubConversationRef {\n  // The greedy repo group splits at the last `_` followed by digits-to-end,\n  // which is always the number boundary (repos may contain `_` themselves).\n  const match = CONVERSATION_ID_PATTERN.exec(conversationId);\n  if (!match) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  return {\n    owner: match[1].toLowerCase(),\n    repo: match[2].toLowerCase(),\n    number: Number(match[3]),\n  };\n}\n\n/** Message ts used for the issue/PR body itself (comments use their comment id). */\nexport const GITHUB_ISSUE_BODY_TS = \"issue\";\n"]}
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAElE,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,MAAM,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC","sourcesContent":["import type { GithubConversationRef } from \"./types.js\";\n\n/**\n * Conversation id for one issue/PR: `GH_<owner>_<repo>_<number>`.\n *\n * DESIGN.md originally proposed `gh:<owner>/<repo>#<number>`, but conversation\n * ids are used verbatim as a single path segment (LAYOUT.md § Casing) and the\n * conversation dir is bind-mounted with docker's `-v source:target` syntax in\n * image mode — so the id can contain neither `/` nor `:`. `_` is the\n * separator because it is the only inert character that also parses back\n * unambiguously under GitHub's name grammar: owners allow `-` (so `-` would\n * make the owner/repo boundary ambiguous) but never `_`, repos may contain\n * `_` but the trailing number is pure digits — so the first `_` and the last\n * `_` before the digits are always the real boundaries.\n *\n * Owner and repo are lowercased: GitHub names are case-insensitive (and this\n * id has two spelling sources — the GITHUB_REPOS env var and API payloads),\n * so per LAYOUT.md § Casing this is a mikan-derived slug, not a verbatim\n * platform id, and derived slugs are lowercased to keep one issue from\n * mapping to two conversation dirs on case-sensitive filesystems.\n */\nexport function buildGithubConversationId(ref: GithubConversationRef): string {\n  return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;\n}\n\nconst CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\\d+)$/;\n\nexport function parseGithubConversationId(conversationId: string): GithubConversationRef {\n  // The greedy repo group splits at the last `_` followed by digits-to-end,\n  // which is always the number boundary (repos may contain `_` themselves).\n  const match = CONVERSATION_ID_PATTERN.exec(conversationId);\n  if (!match) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  return {\n    owner: match[1].toLowerCase(),\n    repo: match[2].toLowerCase(),\n    number: Number(match[3]),\n  };\n}\n\n/** Message ts used for the issue/PR body itself (comments use their comment id). */\nexport const GITHUB_ISSUE_BODY_TS = \"issue\";\n\n/**\n * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids\n * live in a different id space than issue-comment ids, and several endpoints\n * (reactions, edits) differ by family — the prefix makes routing a review id\n * to an issue-comment endpoint structurally impossible.\n */\nexport function githubReviewCommentTs(commentId: number): string {\n  return `rc-${commentId}`;\n}\n\n/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */\nexport function parseReviewCommentTs(ts: string): number | null {\n  const match = /^rc-(\\d+)$/.exec(ts);\n  return match ? Number(match[1]) : null;\n}\n"]}

package/dist/adapters/github/repo.d.ts

@@ -1,4 +1,4 @@
-import type { CloneRepoOptions, PushBranchOptions } from "./types.js";
+import type { CloneRepoOptions, PushBranchOptions, SyncRepoOptions, SyncRepoResult } from "./types.js";
 /**
  * Branches the bot may push: `pi/<name>`. Everything else — including the
  * repo's default branch by construction — is refused, so a driven agent can
@@ -8,9 +8,20 @@ export declare const GITHUB_PUSH_BRANCH_PATTERN: RegExp;
 /**
  * Shallow-clone a repo into a conversation dir and preconfigure the bot's
  * commit identity. For PR conversations, additionally fetch the PR head and
- * check it out as `pr-<number>` so the agent starts on the code under review.
+ * check it out so the agent starts on the code under review — under its real
+ * branch name when the caller resolved one, which is what lets the agent push
+ * fixes back to the PR itself.
  */
 export declare function cloneRepo(options: CloneRepoOptions): Promise<void>;
+/**
+ * Refresh a conversation clone from origin. Always fetches; only moves the
+ * checkout when that provably cannot lose agent work: the target branch is
+ * the one checked out, the tree is clean, and it has no commits of its own
+ * (`checkout -B` then handles fast-forward and force-pushed heads alike).
+ * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which
+ * has full credential-less git inside the sandbox, to merge or rebase itself.
+ */
+export declare function syncRepo(options: SyncRepoOptions): Promise<SyncRepoResult>;
 /**
  * Push one local branch to origin. Non-force by construction (plain refspec),
  * and only `pi/*` branches are accepted.

package/dist/adapters/github/repo.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMtE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAwC,CAAC;AAoBhF;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAWxE;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E"}
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAwC,CAAC;AA0ChF;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxE;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA8ChF;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E"}

package/dist/adapters/github/repo.js

@@ -24,10 +24,30 @@ async function git(args, token) {
     });
     return stdout;
 }
+/**
+ * Git itself rejects these ref shapes; the check just keeps an API-supplied
+ * branch name that would parse as a git option (leading dash) or an invalid
+ * ref out of argv entirely instead of surfacing as a git error mid-clone.
+ */
+function isSafeBranchName(name) {
+    return (name.length > 0 && !name.startsWith("-") && !name.includes("..") && !/[\s~^:?*[\\]/.test(name));
+}
+/**
+ * Local checkout name for a PR conversation: the PR's real head branch when
+ * known (same-repo heads only — the caller resolves that), falling back to
+ * the synthetic `pr-<n>` for fork PRs, unresolvable heads, and unsafe names.
+ * Using the real name is what lets the agent update the PR in place: commit
+ * on a `pi/*` head and `github_pr` pushes back to the same branch.
+ */
+function prCheckoutName(prNumber, prHeadBranch) {
+    return prHeadBranch && isSafeBranchName(prHeadBranch) ? prHeadBranch : `pr-${prNumber}`;
+}
 /**
  * Shallow-clone a repo into a conversation dir and preconfigure the bot's
  * commit identity. For PR conversations, additionally fetch the PR head and
- * check it out as `pr-<number>` so the agent starts on the code under review.
+ * check it out so the agent starts on the code under review — under its real
+ * branch name when the caller resolved one, which is what lets the agent push
+ * fixes back to the PR itself.
  */
 export async function cloneRepo(options) {
     await git(["clone", "--depth", "50", options.url, options.dir], options.token);
@@ -35,8 +55,66 @@ export async function cloneRepo(options) {
     await git(["-C", options.dir, "config", "user.email", options.botEmail]);
     if (options.prNumber !== undefined) {
         await git(["-C", options.dir, "fetch", "--depth", "50", "origin", `pull/${options.prNumber}/head`], options.token);
-        await git(["-C", options.dir, "checkout", "-B", `pr-${options.prNumber}`, "FETCH_HEAD"]);
+        await git([
+            "-C",
+            options.dir,
+            "checkout",
+            "-B",
+            prCheckoutName(options.prNumber, options.prHeadBranch),
+            "FETCH_HEAD",
+        ]);
+    }
+}
+/**
+ * Refresh a conversation clone from origin. Always fetches; only moves the
+ * checkout when that provably cannot lose agent work: the target branch is
+ * the one checked out, the tree is clean, and it has no commits of its own
+ * (`checkout -B` then handles fast-forward and force-pushed heads alike).
+ * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which
+ * has full credential-less git inside the sandbox, to merge or rebase itself.
+ */
+export async function syncRepo(options) {
+    const { dir, token } = options;
+    let refspec;
+    let target;
+    if (options.branch) {
+        refspec = options.branch;
+        target = options.branch;
+    }
+    else if (options.prNumber !== undefined) {
+        refspec = `pull/${options.prNumber}/head`;
+        target = prCheckoutName(options.prNumber, options.prHeadBranch);
+    }
+    else if (options.defaultBranch) {
+        refspec = options.defaultBranch;
+        target = options.defaultBranch;
+    }
+    else {
+        throw new Error("syncRepo needs a branch, a PR number, or the default branch");
+    }
+    await git(["-C", dir, "fetch", "--depth", "50", "origin", refspec], token);
+    const fetchedSha = (await git(["-C", dir, "rev-parse", "FETCH_HEAD"])).trim();
+    const dirty = (await git(["-C", dir, "status", "--porcelain"])).trim().length > 0;
+    const currentBranch = (await git(["-C", dir, "rev-parse", "--abbrev-ref", "HEAD"])).trim();
+    // Clones made before the head branch name was resolvable sit on the
+    // synthetic pr-<n>; treat that as the same checkout so a clean sync
+    // migrates them to the real name instead of going fetch-only forever.
+    const legacyPrBranch = options.prNumber !== undefined ? `pr-${options.prNumber}` : undefined;
+    const onTarget = currentBranch === target || (legacyPrBranch !== undefined && currentBranch === legacyPrBranch);
+    let localCommits = 0;
+    if (onTarget) {
+        // Commits unique to HEAD split two ways: ones the agent committed here
+        // (the clone's preconfigured bot identity) are its work and must survive;
+        // ones committed by others were force-pushed away upstream and are safe
+        // to drop. Filter by the bot committer so a rebased PR head still syncs.
+        const botEmail = (await git(["-C", dir, "config", "user.email"])).trim();
+        localCommits = Number((await git(["-C", dir, "rev-list", "--count", `--committer=${botEmail}`, "FETCH_HEAD..HEAD"])).trim());
+    }
+    const updatedCheckout = onTarget && !dirty && localCommits === 0;
+    if (updatedCheckout) {
+        await git(["-C", dir, "checkout", "-B", target, "FETCH_HEAD"]);
     }
+    return { target, fetchedSha, updatedCheckout, dirty, currentBranch, localCommits };
 }
 /**
  * Push one local branch to origin. Non-force by construction (plain refspec),

package/dist/adapters/github/repo.js.map

@@ -1 +1 @@
-{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qCAAqC,CAAC;AAEhF;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,IAAI,EAAE,yCAAyC,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,KAAc;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE;QAC7F,OAAO,EAAE,cAAc;QACvB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;KAClD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,CACP,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,OAAO,CAAC,QAAQ,OAAO,CAAC,EACxF,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,oDAAoD,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,sDAAsD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,MAAM,eAAe,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC","sourcesContent":["import { execFile } from \"child_process\";\nimport { promisify } from \"util\";\nimport type { CloneRepoOptions, PushBranchOptions } from \"./types.js\";\n\nconst execFileAsync = promisify(execFile);\n\nconst GIT_TIMEOUT_MS = 120_000;\n\n/**\n * Branches the bot may push: `pi/<name>`. Everything else — including the\n * repo's default branch by construction — is refused, so a driven agent can\n * only ever produce reviewable branches, never touch mainline directly.\n */\nexport const GITHUB_PUSH_BRANCH_PATTERN = /^pi\\/[A-Za-z0-9._][A-Za-z0-9._/-]*$/;\n\n/**\n * Pass the ephemeral token as a per-invocation header, never in the remote\n * URL: nothing credential-shaped may end up in `.git/config`, which lives in\n * the conversation dir and is bind-mounted into the sandbox.\n */\nfunction gitAuthArgs(token: string): string[] {\n  const basic = Buffer.from(`x-access-token:${token}`).toString(\"base64\");\n  return [\"-c\", `http.extraheader=Authorization: basic ${basic}`];\n}\n\nasync function git(args: string[], token?: string): Promise<string> {\n  const { stdout } = await execFileAsync(\"git\", [...(token ? gitAuthArgs(token) : []), ...args], {\n    timeout: GIT_TIMEOUT_MS,\n    env: { ...process.env, GIT_TERMINAL_PROMPT: \"0\" },\n  });\n  return stdout;\n}\n\n/**\n * Shallow-clone a repo into a conversation dir and preconfigure the bot's\n * commit identity. For PR conversations, additionally fetch the PR head and\n * check it out as `pr-<number>` so the agent starts on the code under review.\n */\nexport async function cloneRepo(options: CloneRepoOptions): Promise<void> {\n  await git([\"clone\", \"--depth\", \"50\", options.url, options.dir], options.token);\n  await git([\"-C\", options.dir, \"config\", \"user.name\", options.botLogin]);\n  await git([\"-C\", options.dir, \"config\", \"user.email\", options.botEmail]);\n  if (options.prNumber !== undefined) {\n    await git(\n      [\"-C\", options.dir, \"fetch\", \"--depth\", \"50\", \"origin\", `pull/${options.prNumber}/head`],\n      options.token,\n    );\n    await git([\"-C\", options.dir, \"checkout\", \"-B\", `pr-${options.prNumber}`, \"FETCH_HEAD\"]);\n  }\n}\n\n/**\n * Push one local branch to origin. Non-force by construction (plain refspec),\n * and only `pi/*` branches are accepted.\n */\nexport async function pushBranch(options: PushBranchOptions): Promise<void> {\n  const { dir, branch, token } = options;\n  if (!GITHUB_PUSH_BRANCH_PATTERN.test(branch)) {\n    throw new Error(\n      `Refusing to push branch '${branch}': only branches matching pi/<name> may be pushed.`,\n    );\n  }\n  try {\n    await git([\"-C\", dir, \"rev-parse\", \"--verify\", \"--quiet\", `refs/heads/${branch}`]);\n  } catch {\n    throw new Error(`Branch '${branch}' does not exist in the conversation's ./repo clone.`);\n  }\n  await git([\"-C\", dir, \"push\", \"origin\", `refs/heads/${branch}:refs/heads/${branch}`], token);\n}\n"]}
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAQjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qCAAqC,CAAC;AAEhF;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,IAAI,EAAE,yCAAyC,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,KAAc;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE;QAC7F,OAAO,EAAE,cAAc;QACvB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;KAClD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,CACL,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,YAAqB;IAC7D,OAAO,YAAY,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,CACP,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,OAAO,CAAC,QAAQ,OAAO,CAAC,EACxF,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,CAAC;YACR,IAAI;YACJ,OAAO,CAAC,GAAG;YACX,UAAU;YACV,IAAI;YACJ,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC;YACtD,YAAY;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IACnB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QACzB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,GAAG,QAAQ,OAAO,CAAC,QAAQ,OAAO,CAAC;QAC1C,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;QAChC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,QAAQ,GACZ,aAAa,KAAK,MAAM,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,aAAa,KAAK,cAAc,CAAC,CAAC;IACjG,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,EAAE,CAAC;QACb,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,YAAY,GAAG,MAAM,CACnB,CACE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAC7F,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,IAAI,CAAC,KAAK,IAAI,YAAY,KAAK,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,oDAAoD,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,sDAAsD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,MAAM,eAAe,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC","sourcesContent":["import { execFile } from \"child_process\";\nimport { promisify } from \"util\";\nimport type {\n  CloneRepoOptions,\n  PushBranchOptions,\n  SyncRepoOptions,\n  SyncRepoResult,\n} from \"./types.js\";\n\nconst execFileAsync = promisify(execFile);\n\nconst GIT_TIMEOUT_MS = 120_000;\n\n/**\n * Branches the bot may push: `pi/<name>`. Everything else — including the\n * repo's default branch by construction — is refused, so a driven agent can\n * only ever produce reviewable branches, never touch mainline directly.\n */\nexport const GITHUB_PUSH_BRANCH_PATTERN = /^pi\\/[A-Za-z0-9._][A-Za-z0-9._/-]*$/;\n\n/**\n * Pass the ephemeral token as a per-invocation header, never in the remote\n * URL: nothing credential-shaped may end up in `.git/config`, which lives in\n * the conversation dir and is bind-mounted into the sandbox.\n */\nfunction gitAuthArgs(token: string): string[] {\n  const basic = Buffer.from(`x-access-token:${token}`).toString(\"base64\");\n  return [\"-c\", `http.extraheader=Authorization: basic ${basic}`];\n}\n\nasync function git(args: string[], token?: string): Promise<string> {\n  const { stdout } = await execFileAsync(\"git\", [...(token ? gitAuthArgs(token) : []), ...args], {\n    timeout: GIT_TIMEOUT_MS,\n    env: { ...process.env, GIT_TERMINAL_PROMPT: \"0\" },\n  });\n  return stdout;\n}\n\n/**\n * Git itself rejects these ref shapes; the check just keeps an API-supplied\n * branch name that would parse as a git option (leading dash) or an invalid\n * ref out of argv entirely instead of surfacing as a git error mid-clone.\n */\nfunction isSafeBranchName(name: string): boolean {\n  return (\n    name.length > 0 && !name.startsWith(\"-\") && !name.includes(\"..\") && !/[\\s~^:?*[\\\\]/.test(name)\n  );\n}\n\n/**\n * Local checkout name for a PR conversation: the PR's real head branch when\n * known (same-repo heads only — the caller resolves that), falling back to\n * the synthetic `pr-<n>` for fork PRs, unresolvable heads, and unsafe names.\n * Using the real name is what lets the agent update the PR in place: commit\n * on a `pi/*` head and `github_pr` pushes back to the same branch.\n */\nfunction prCheckoutName(prNumber: number, prHeadBranch?: string): string {\n  return prHeadBranch && isSafeBranchName(prHeadBranch) ? prHeadBranch : `pr-${prNumber}`;\n}\n\n/**\n * Shallow-clone a repo into a conversation dir and preconfigure the bot's\n * commit identity. For PR conversations, additionally fetch the PR head and\n * check it out so the agent starts on the code under review — under its real\n * branch name when the caller resolved one, which is what lets the agent push\n * fixes back to the PR itself.\n */\nexport async function cloneRepo(options: CloneRepoOptions): Promise<void> {\n  await git([\"clone\", \"--depth\", \"50\", options.url, options.dir], options.token);\n  await git([\"-C\", options.dir, \"config\", \"user.name\", options.botLogin]);\n  await git([\"-C\", options.dir, \"config\", \"user.email\", options.botEmail]);\n  if (options.prNumber !== undefined) {\n    await git(\n      [\"-C\", options.dir, \"fetch\", \"--depth\", \"50\", \"origin\", `pull/${options.prNumber}/head`],\n      options.token,\n    );\n    await git([\n      \"-C\",\n      options.dir,\n      \"checkout\",\n      \"-B\",\n      prCheckoutName(options.prNumber, options.prHeadBranch),\n      \"FETCH_HEAD\",\n    ]);\n  }\n}\n\n/**\n * Refresh a conversation clone from origin. Always fetches; only moves the\n * checkout when that provably cannot lose agent work: the target branch is\n * the one checked out, the tree is clean, and it has no commits of its own\n * (`checkout -B` then handles fast-forward and force-pushed heads alike).\n * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which\n * has full credential-less git inside the sandbox, to merge or rebase itself.\n */\nexport async function syncRepo(options: SyncRepoOptions): Promise<SyncRepoResult> {\n  const { dir, token } = options;\n  let refspec: string;\n  let target: string;\n  if (options.branch) {\n    refspec = options.branch;\n    target = options.branch;\n  } else if (options.prNumber !== undefined) {\n    refspec = `pull/${options.prNumber}/head`;\n    target = prCheckoutName(options.prNumber, options.prHeadBranch);\n  } else if (options.defaultBranch) {\n    refspec = options.defaultBranch;\n    target = options.defaultBranch;\n  } else {\n    throw new Error(\"syncRepo needs a branch, a PR number, or the default branch\");\n  }\n\n  await git([\"-C\", dir, \"fetch\", \"--depth\", \"50\", \"origin\", refspec], token);\n  const fetchedSha = (await git([\"-C\", dir, \"rev-parse\", \"FETCH_HEAD\"])).trim();\n  const dirty = (await git([\"-C\", dir, \"status\", \"--porcelain\"])).trim().length > 0;\n  const currentBranch = (await git([\"-C\", dir, \"rev-parse\", \"--abbrev-ref\", \"HEAD\"])).trim();\n  // Clones made before the head branch name was resolvable sit on the\n  // synthetic pr-<n>; treat that as the same checkout so a clean sync\n  // migrates them to the real name instead of going fetch-only forever.\n  const legacyPrBranch = options.prNumber !== undefined ? `pr-${options.prNumber}` : undefined;\n  const onTarget =\n    currentBranch === target || (legacyPrBranch !== undefined && currentBranch === legacyPrBranch);\n  let localCommits = 0;\n  if (onTarget) {\n    // Commits unique to HEAD split two ways: ones the agent committed here\n    // (the clone's preconfigured bot identity) are its work and must survive;\n    // ones committed by others were force-pushed away upstream and are safe\n    // to drop. Filter by the bot committer so a rebased PR head still syncs.\n    const botEmail = (await git([\"-C\", dir, \"config\", \"user.email\"])).trim();\n    localCommits = Number(\n      (\n        await git([\"-C\", dir, \"rev-list\", \"--count\", `--committer=${botEmail}`, \"FETCH_HEAD..HEAD\"])\n      ).trim(),\n    );\n  }\n\n  const updatedCheckout = onTarget && !dirty && localCommits === 0;\n  if (updatedCheckout) {\n    await git([\"-C\", dir, \"checkout\", \"-B\", target, \"FETCH_HEAD\"]);\n  }\n  return { target, fetchedSha, updatedCheckout, dirty, currentBranch, localCommits };\n}\n\n/**\n * Push one local branch to origin. Non-force by construction (plain refspec),\n * and only `pi/*` branches are accepted.\n */\nexport async function pushBranch(options: PushBranchOptions): Promise<void> {\n  const { dir, branch, token } = options;\n  if (!GITHUB_PUSH_BRANCH_PATTERN.test(branch)) {\n    throw new Error(\n      `Refusing to push branch '${branch}': only branches matching pi/<name> may be pushed.`,\n    );\n  }\n  try {\n    await git([\"-C\", dir, \"rev-parse\", \"--verify\", \"--quiet\", `refs/heads/${branch}`]);\n  } catch {\n    throw new Error(`Branch '${branch}' does not exist in the conversation's ./repo clone.`);\n  }\n  await git([\"-C\", dir, \"push\", \"origin\", `refs/heads/${branch}:refs/heads/${branch}`], token);\n}\n"]}

package/dist/adapters/github/tool-pack.d.ts

@@ -1,7 +1,9 @@
 import type { PlatformToolPack } from "../../tools/types.js";
 import type { PlatformGithubOps } from "./types.js";
 /**
- * GitHub host-side capability pack: github_pr + github_checks.
+ * GitHub host-side capability pack — one tool per module under `tools/`:
+ * github_pr, github_checks, github_review_reply, github_sync, github_read,
+ * github_issue.
  *
  * These tools never run in the sandbox; they call PlatformGithubOps which
  * mints short-lived installation tokens on the host. The pack is only

package/dist/adapters/github/tool-pack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-pack.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,CAmB7E"}
+{"version":3,"file":"tool-pack.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,CA0C7E"}

package/dist/adapters/github/tool-pack.js

@@ -1,7 +1,13 @@
-import { createGithubChecksTool } from "../../tools/github-checks.js";
-import { createGithubPrTool } from "../../tools/github-pr.js";
+import { createGithubChecksTool } from "./tools/checks.js";
+import { createGithubPrTool } from "./tools/pr.js";
+import { createGithubIssueTool } from "./tools/issue.js";
+import { createGithubReadTool } from "./tools/read.js";
+import { createGithubReviewReplyTool } from "./tools/review-reply.js";
+import { createGithubSyncTool } from "./tools/sync.js";
 /**
- * GitHub host-side capability pack: github_pr + github_checks.
+ * GitHub host-side capability pack — one tool per module under `tools/`:
+ * github_pr, github_checks, github_review_reply, github_sync, github_read,
+ * github_issue.
  *
  * These tools never run in the sandbox; they call PlatformGithubOps which
  * mints short-lived installation tokens on the host. The pack is only
@@ -11,19 +17,39 @@ import { createGithubPrTool } from "../../tools/github-pr.js";
 export function createGithubToolPack(ops) {
     const { tool: githubPrTool, setGithubPrFunction } = createGithubPrTool();
     const { tool: githubChecksTool, setGithubChecksFunction } = createGithubChecksTool();
+    const { tool: githubReviewReplyTool, setGithubReviewReplyFunction } = createGithubReviewReplyTool();
+    const { tool: githubSyncTool, setGithubSyncFunction } = createGithubSyncTool();
+    const { tool: githubReadTool, setGithubReadFunction } = createGithubReadTool();
+    const { tool: githubIssueTool, setGithubIssueFunction } = createGithubIssueTool();
     return {
-        tools: [githubPrTool, githubChecksTool],
+        tools: [
+            githubPrTool,
+            githubChecksTool,
+            githubReviewReplyTool,
+            githubSyncTool,
+            githubReadTool,
+            githubIssueTool,
+        ],
         bindRun({ conversationId, platformName }) {
             if (platformName !== "github") {
                 setGithubPrFunction(null);
                 setGithubChecksFunction(null);
+                setGithubReviewReplyFunction(null);
+                setGithubSyncFunction(null);
+                setGithubReadFunction(null);
+                setGithubIssueFunction(null);
                 return;
             }
             setGithubPrFunction((request) => ops.pushAndCreatePr(conversationId, request));
             setGithubChecksFunction({
                 getChecks: (branch) => ops.getChecks(conversationId, branch),
                 getJobLog: (jobId) => ops.getJobLog(conversationId, jobId),
+                getBuildLog: (buildId) => ops.getBuildLog(conversationId, buildId),
             });
+            setGithubReviewReplyFunction((commentId, body) => ops.replyToReviewThread(conversationId, commentId, body));
+            setGithubSyncFunction((branch) => ops.syncRepo(conversationId, branch));
+            setGithubReadFunction((request) => ops.readGithub(conversationId, request));
+            setGithubIssueFunction((request) => ops.manageIssue(conversationId, request));
         },
     };
 }

package/dist/adapters/github/tool-pack.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-pack.js","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAI9D;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,GAAG,sBAAsB,EAAE,CAAC;IAErF,OAAO;QACL,KAAK,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACvC,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE;YACtC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC1B,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/E,uBAAuB,CAAC;gBACtB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC;gBAC5D,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createGithubChecksTool } from \"../../tools/github-checks.js\";\nimport { createGithubPrTool } from \"../../tools/github-pr.js\";\nimport type { PlatformToolPack } from \"../../tools/types.js\";\nimport type { PlatformGithubOps } from \"./types.js\";\n\n/**\n * GitHub host-side capability pack: github_pr + github_checks.\n *\n * These tools never run in the sandbox; they call PlatformGithubOps which\n * mints short-lived installation tokens on the host. The pack is only\n * constructed when the GitHub bot is configured; bindRun enables the tools\n * only for github-named conversations so multi-platform processes stay safe.\n */\nexport function createGithubToolPack(ops: PlatformGithubOps): PlatformToolPack {\n  const { tool: githubPrTool, setGithubPrFunction } = createGithubPrTool();\n  const { tool: githubChecksTool, setGithubChecksFunction } = createGithubChecksTool();\n\n  return {\n    tools: [githubPrTool, githubChecksTool],\n    bindRun({ conversationId, platformName }) {\n      if (platformName !== \"github\") {\n        setGithubPrFunction(null);\n        setGithubChecksFunction(null);\n        return;\n      }\n      setGithubPrFunction((request) => ops.pushAndCreatePr(conversationId, request));\n      setGithubChecksFunction({\n        getChecks: (branch) => ops.getChecks(conversationId, branch),\n        getJobLog: (jobId) => ops.getJobLog(conversationId, jobId),\n      });\n    },\n  };\n}\n"]}
+{"version":3,"file":"tool-pack.js","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAIvD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACrF,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,GACjE,2BAA2B,EAAE,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAElF,OAAO;QACL,KAAK,EAAE;YACL,YAAY;YACZ,gBAAgB;YAChB,qBAAqB;YACrB,cAAc;YACd,cAAc;YACd,eAAe;SAChB;QACD,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE;YACtC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC1B,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAC9B,4BAA4B,CAAC,IAAI,CAAC,CAAC;gBACnC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC5B,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC5B,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/E,uBAAuB,CAAC;gBACtB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC;gBAC5D,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC1D,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC;aACnE,CAAC,CAAC;YACH,4BAA4B,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAC/C,GAAG,CAAC,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CACzD,CAAC;YACF,qBAAqB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;YACxE,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createGithubChecksTool } from \"./tools/checks.js\";\nimport { createGithubPrTool } from \"./tools/pr.js\";\nimport { createGithubIssueTool } from \"./tools/issue.js\";\nimport { createGithubReadTool } from \"./tools/read.js\";\nimport { createGithubReviewReplyTool } from \"./tools/review-reply.js\";\nimport { createGithubSyncTool } from \"./tools/sync.js\";\nimport type { PlatformToolPack } from \"../../tools/types.js\";\nimport type { PlatformGithubOps } from \"./types.js\";\n\n/**\n * GitHub host-side capability pack — one tool per module under `tools/`:\n * github_pr, github_checks, github_review_reply, github_sync, github_read,\n * github_issue.\n *\n * These tools never run in the sandbox; they call PlatformGithubOps which\n * mints short-lived installation tokens on the host. The pack is only\n * constructed when the GitHub bot is configured; bindRun enables the tools\n * only for github-named conversations so multi-platform processes stay safe.\n */\nexport function createGithubToolPack(ops: PlatformGithubOps): PlatformToolPack {\n  const { tool: githubPrTool, setGithubPrFunction } = createGithubPrTool();\n  const { tool: githubChecksTool, setGithubChecksFunction } = createGithubChecksTool();\n  const { tool: githubReviewReplyTool, setGithubReviewReplyFunction } =\n    createGithubReviewReplyTool();\n  const { tool: githubSyncTool, setGithubSyncFunction } = createGithubSyncTool();\n  const { tool: githubReadTool, setGithubReadFunction } = createGithubReadTool();\n  const { tool: githubIssueTool, setGithubIssueFunction } = createGithubIssueTool();\n\n  return {\n    tools: [\n      githubPrTool,\n      githubChecksTool,\n      githubReviewReplyTool,\n      githubSyncTool,\n      githubReadTool,\n      githubIssueTool,\n    ],\n    bindRun({ conversationId, platformName }) {\n      if (platformName !== \"github\") {\n        setGithubPrFunction(null);\n        setGithubChecksFunction(null);\n        setGithubReviewReplyFunction(null);\n        setGithubSyncFunction(null);\n        setGithubReadFunction(null);\n        setGithubIssueFunction(null);\n        return;\n      }\n      setGithubPrFunction((request) => ops.pushAndCreatePr(conversationId, request));\n      setGithubChecksFunction({\n        getChecks: (branch) => ops.getChecks(conversationId, branch),\n        getJobLog: (jobId) => ops.getJobLog(conversationId, jobId),\n        getBuildLog: (buildId) => ops.getBuildLog(conversationId, buildId),\n      });\n      setGithubReviewReplyFunction((commentId, body) =>\n        ops.replyToReviewThread(conversationId, commentId, body),\n      );\n      setGithubSyncFunction((branch) => ops.syncRepo(conversationId, branch));\n      setGithubReadFunction((request) => ops.readGithub(conversationId, request));\n      setGithubIssueFunction((request) => ops.manageIssue(conversationId, request));\n    },\n  };\n}\n"]}

package/dist/{tools/github-checks.d.ts → adapters/github/tools/checks.d.ts}

@@ -1,12 +1,14 @@
 import type { AgentTool } from "@earendil-works/pi-agent-core";
-import type { GithubCheckSummary } from "../adapters/github/types.js";
+import type { GithubCheckSummary } from "../types.js";
 declare const githubChecksSchema: import("@sinclair/typebox").TObject<{
     branch: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     job_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    build_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
 export interface GithubChecksFns {
     getChecks: (branch?: string) => Promise<GithubCheckSummary[]>;
     getJobLog: (jobId: number) => Promise<string>;
+    getBuildLog: (buildId: string) => Promise<string>;
 }
 /**
  * The `github_checks` tool reads CI check runs (GitHub Actions and other
@@ -19,4 +21,4 @@ export declare function createGithubChecksTool(): {
     setGithubChecksFunction: (fns: GithubChecksFns | null) => void;
 };
 export {};
-//# sourceMappingURL=github-checks.d.ts.map
+//# sourceMappingURL=checks.d.ts.map

package/dist/adapters/github/tools/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../../src/adapters/github/tools/checks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,QAAA,MAAM,kBAAkB;;;;EAsBtB,CAAC;AA+BH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,IAAI,EAAE,SAAS,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC3C,uBAAuB,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,KAAK,IAAI,CAAC;CAChE,CAgFA"}