@geminixiang/mikan 1.0.0-beta.7 → 1.0.0-beta.71

package/dist/adapters/github/github-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-ops.js","sourceRoot":"","sources":["../../../src/adapters/github/github-ops.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAa5D,8DAA8D;AAC9D,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;iEACiE;AACjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAoB,EACpB,GAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAoB,EACpB,GAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,MAAM,QAAQ,GACZ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvF,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IACpB,YACmB,MAAoB,EACpB,MAAgC;sBADhC,MAAM;sBACN,MAAM;IACtB,CAAC;IAEI,OAAO,CAAC,cAAsB;QACpC,OAAO,mBAAmB,CACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,OAAwB;QACpE,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,WAAW,OAAO,CAAC,MAAM,0DAA0D,GAAG,CAAC,MAAM,IAAI,CAClG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,cAAc,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,EAAE;YACtE,QAAQ,EAAE,OAAO;YACjB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;QACH,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAChC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE;gBACjD,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,IAAI,EAAE,OAAO,CAAC,MAAM;gBACpB,IAAI;gBACJ,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC,CACH,CAAC;YACF,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,gBAAgB,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3E,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,kEAAkE;YAClE,6DAA6D;YAC7D,IACE,GAAG,YAAY,cAAc;gBAC7B,GAAG,CAAC,MAAM,KAAK,GAAG;gBAClB,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EACnC,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAC5D,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,IAAI,EACR,OAAO,CAAC,MAAM,CACf,CAAC;gBACF,IAAI,QAAQ,EAAE,CAAC;oBACb,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,4BAA4B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,QAAQ,EAAE,CACtF,CAAC;oBACF,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,MAAe;QACrD,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,EAAE,CAAC;YACP,IAAI,CAAC;gBACH,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5F,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,GAAG,EAAE,GAAG,CAAC,QAAQ;YACjB,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI;YAC9B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;SACrF,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,cAAsB,EAAE,MAAe;QACpD,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,6BAA6B,CAAC,GAAG,CAAC,IAAI,EAAE;YACtE,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,IAAI,QAA4B,CAAC;QACjC,IAAI,YAAgC,CAAC;QACrC,IAAI,aAAiC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;gBACtB,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3F,aAAa,GAAG,UAAU,CAAC,cAAc,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;QAE7F,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,OAAO,0BAA0B,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;QAChG,CAAC;QACD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,aAAa,WAAW,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,YAAY,gCAAgC,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,CACL,WAAW,MAAM,CAAC,MAAM,mBAAmB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB;YAC1F,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC;YAC7E,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CAAC,cAAsB,EAAE,OAA0B;QACjE,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;QAC5C,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,IAAI,EAAE,CAAC;gBACV,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC5F,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACnC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAC9D,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YACrC,CAAC;YACD,KAAK,YAAY,EAAE,CAAC;gBAClB,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBAC3C,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAClF,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBACnF,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAClD,CAAC;YACD,KAAK,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;gBACzF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC;YACD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACtC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAC3D,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;YACxC,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACpC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE;oBAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CACH,CAAC;gBACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAClC,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,cAAsB,EAAE,OAA2B;QACnE,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;QAC5C,IAAI,CAAC;YACH,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,YAAY,EAAE,CAAC;oBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;wBAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAO,CAAC,CACzE,CAAC;oBACF,OAAO,kBAAkB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,GAAG,CAAC;gBACtE,CAAC;gBACD,KAAK,cAAc,EAAE,CAAC;oBACpB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;wBACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;oBACzD,CAAC;oBACD,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,KAAM,CAAC,CAC1E,CAAC;oBACF,OAAO,iBAAiB,OAAO,CAAC,KAAK,UAAU,MAAM,GAAG,CAAC;gBAC3D,CAAC;gBACD,KAAK,eAAe,EAAE,CAAC;oBACrB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;oBACzE,CAAC;oBACD,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAC/E,CAAC;oBACF,OAAO,YAAY,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,MAAM,GAAG,CAAC;gBAC/F,CAAC;gBACD,KAAK,kBAAkB,EAAE,CAAC;oBACxB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;wBAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;oBAC5E,CAAC;oBACD,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,SAAU,CAAC,CAClF,CAAC;oBACF,OAAO,cAAc,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,GAAG,CAAC;gBACnG,CAAC;gBACD,KAAK,OAAO,EAAE,CAAC;oBACb,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAC1B,GAAG,CAAC,KAAK,EACT,GAAG,CAAC,IAAI,EACR,MAAM,EACN,QAAQ,EACR,OAAO,CAAC,YAAY,CACrB,CACF,CAAC;oBACF,OAAO,WAAW,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC1F,CAAC;gBACD,KAAK,QAAQ,EAAE,CAAC;oBACd,MAAM,WAAW,CAAC,GAAG,EAAE,CACrB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAClE,CAAC;oBACF,OAAO,aAAa,MAAM,GAAG,CAAC;gBAChC,CAAC;gBACD;oBACE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CACvB,cAAsB,EACtB,SAAiB,EACjB,IAAY;QAEZ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,GAAG,yBAAyB;YACrC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,yBAAyB,CAAC,gBAAgB;YAC7D,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACnC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CACnF,CAAC;YACF,OAAO;gBACL,GAAG,EAAE,sBAAsB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,MAAM,gBAAgB,KAAK,CAAC,EAAE,EAAE;aAC9F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,2DAA2D;oBAC7E,+EAA+E,EACjF,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,KAAa;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,yBAAyB,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,gDAAgD;oBACpF,iEAAiE;oBACjE,oFAAoF;oBACpF,iDAAiD,EACnD,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,aAAa;YACnC,CAAC,CAAC,2BAA2B,aAAa,YAAY,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE;YACrF,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;CACF","sourcesContent":["import { existsSync } from \"node:fs\";\nimport * as log from \"../../log.js\";\nimport type { GithubClient } from \"./client.js\";\nimport { GithubApiError, GITHUB_MAX_COMMENT_LENGTH, githubRetry } from \"./client.js\";\nimport { parseGithubConversationId } from \"./ids.js\";\nimport { conversationRepoDir, GITHUB_PUSH_BRANCH_PATTERN, pushBranch, syncRepo } from \"./repo.js\";\nimport { createOfficeAddress } from \"../../office/index.js\";\nimport type { Workspace } from \"../../office/index.js\";\nimport type {\n  GithubCheckSummary,\n  GithubConversationRef,\n  GithubIssueRequest,\n  GithubPrRequest,\n  GithubPrResult,\n  GithubReadRequest,\n  GithubReadResult,\n  PlatformGithubOps,\n} from \"./types.js\";\n\n/** CI job logs are tail-truncated to this many characters. */\nconst MAX_LOG_CHARS = 20000;\n\n/** Whether the conversation's issue is a PR, for callers where the triggering\n *  item didn't carry that knowledge. Errs toward plain issue. */\nexport async function fetchIsPr(\n  client: GithubClient,\n  ref: GithubConversationRef,\n): Promise<boolean> {\n  try {\n    const issue = await githubRetry(() => client.getIssue(ref.owner, ref.repo, ref.number));\n    return Boolean(issue.pull_request);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The PR's head branch name when it lives in this repo — that is the name\n * the local checkout should carry, so committing on it and calling\n * github_pr pushes back to the PR itself instead of opening a new one.\n * Fork heads (unpushable with the repo-scoped token) and failed lookups\n * return undefined; callers then fall back to the synthetic pr-<n>.\n */\nexport async function fetchPrHeadBranch(\n  client: GithubClient,\n  ref: GithubConversationRef,\n): Promise<string | undefined> {\n  try {\n    const pr = await githubRetry(() => client.getPullRequest(ref.owner, ref.repo, ref.number));\n    const sameRepo =\n      pr.head?.repo?.full_name?.toLowerCase() === `${ref.owner}/${ref.repo}`.toLowerCase();\n    return sameRepo ? pr.head?.ref : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Host-side backend of the github_* tool pack (`PlatformGithubOps`),\n * standalone from the messaging bot: it needs the API client, the\n * conversation working dir — not the poll\n * loop, queues, or trigger gate. Tokens are minted per call, scoped to the\n * conversation's repo, and never enter the sandbox.\n */\nexport class GithubOps implements PlatformGithubOps {\n  constructor(\n    private readonly client: GithubClient,\n    private readonly config: { workspace: Workspace },\n  ) {}\n\n  private repoDir(conversationId: string): string {\n    return conversationRepoDir(\n      this.config.workspace.office(createOfficeAddress(\"github\", conversationId)),\n    );\n  }\n\n  /**\n   * Backs the `github_pr` tool: push a `pi/*` branch the agent prepared in\n   * the conversation's clone, then open a pull request as the App. The write\n   * token is minted per call, scoped to this one repo, and never enters the\n   * sandbox.\n   */\n  async pushAndCreatePr(conversationId: string, request: GithubPrRequest): Promise<GithubPrResult> {\n    const ref = parseGithubConversationId(conversationId);\n    const dir = this.repoDir(conversationId);\n    if (!existsSync(dir)) {\n      throw new Error(\"This conversation has no ./repo clone to push from.\");\n    }\n    if (!GITHUB_PUSH_BRANCH_PATTERN.test(request.branch)) {\n      throw new Error(\n        `Branch '${request.branch}' is not pushable: name it pi/<something> (e.g. pi/fix-${ref.number}).`,\n      );\n    }\n    const repository = await githubRetry(() => this.client.getRepository(ref.owner, ref.repo));\n    const base = request.base ?? repository.default_branch;\n    const token = await this.client.createScopedInstallationToken(ref.repo, {\n      contents: \"write\",\n      pull_requests: \"write\",\n    });\n    await pushBranch({ dir, branch: request.branch, token });\n    try {\n      const pr = await githubRetry(() =>\n        this.client.createPullRequest(ref.owner, ref.repo, {\n          title: request.title,\n          head: request.branch,\n          base,\n          body: request.body,\n          draft: request.draft,\n        }),\n      );\n      log.logInfo(`[${conversationId}] Opened PR #${pr.number}: ${pr.html_url}`);\n      return { number: pr.number, url: pr.html_url };\n    } catch (err) {\n      // Idempotency: pushing more commits to a branch that already has an\n      // open PR updates that PR; the create call then 422s. Surface the\n      // existing PR instead of failing the fix-CI-push-again loop.\n      if (\n        err instanceof GithubApiError &&\n        err.status === 422 &&\n        /already exists/i.test(err.message)\n      ) {\n        const existing = await this.client.findOpenPullRequestByBranch(\n          ref.owner,\n          ref.repo,\n          request.branch,\n        );\n        if (existing) {\n          log.logInfo(\n            `[${conversationId}] Pushed to existing PR #${existing.number}: ${existing.html_url}`,\n          );\n          return { number: existing.number, url: existing.html_url, updatedExisting: true };\n        }\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Backs the `github_checks` tool: CI check runs for a branch the agent\n   * pushed, or for the conversation's PR head when no branch is given.\n   */\n  async getChecks(conversationId: string, branch?: string): Promise<GithubCheckSummary[]> {\n    const ref = parseGithubConversationId(conversationId);\n    let target = branch;\n    if (!target) {\n      let pr;\n      try {\n        pr = await githubRetry(() => this.client.getPullRequest(ref.owner, ref.repo, ref.number));\n      } catch {\n        pr = null;\n      }\n      if (!pr?.head) {\n        throw new Error(\n          \"This conversation is not a pull request — pass the branch whose checks you want.\",\n        );\n      }\n      target = pr.head.sha;\n    }\n    const runs = await githubRetry(() => this.client.listCheckRuns(ref.owner, ref.repo, target));\n    return runs.map((run) => ({\n      id: run.id,\n      name: run.name,\n      status: run.status,\n      conclusion: run.conclusion,\n      url: run.html_url,\n      appSlug: run.app?.slug ?? null,\n      outputSummary: run.output?.summary?.trim() ? run.output.summary.slice(0, 500) : null,\n    }));\n  }\n\n  /**\n   * Backs the `github_sync` tool: refresh the conversation's ./repo clone\n   * from origin with an ephemeral read token. Fetch-only when moving the\n   * checkout could lose agent work; the formatted report tells the agent\n   * what happened and what to do next.\n   */\n  async syncRepo(conversationId: string, branch?: string): Promise<string> {\n    const ref = parseGithubConversationId(conversationId);\n    const dir = this.repoDir(conversationId);\n    if (!existsSync(dir)) {\n      throw new Error(\"This conversation has no ./repo clone to sync.\");\n    }\n    const token = await this.client.createScopedInstallationToken(ref.repo, {\n      contents: \"read\",\n    });\n    let prNumber: number | undefined;\n    let prHeadBranch: string | undefined;\n    let defaultBranch: string | undefined;\n    if (!branch) {\n      if (await fetchIsPr(this.client, ref)) {\n        prNumber = ref.number;\n        prHeadBranch = await fetchPrHeadBranch(this.client, ref);\n      } else {\n        const repository = await githubRetry(() => this.client.getRepository(ref.owner, ref.repo));\n        defaultBranch = repository.default_branch;\n      }\n    }\n    const result = await syncRepo({ dir, token, branch, prNumber, prHeadBranch, defaultBranch });\n\n    if (result.updatedCheckout) {\n      return `Updated ./repo: branch ${result.target} is now at ${result.fetchedSha.slice(0, 12)}.`;\n    }\n    const reasons: string[] = [];\n    if (result.currentBranch !== result.target) {\n      reasons.push(`the checkout is on '${result.currentBranch}', not '${result.target}'`);\n    }\n    if (result.dirty) {\n      reasons.push(\"the working tree has uncommitted changes\");\n    }\n    if (result.localCommits > 0) {\n      reasons.push(`'${result.target}' has ${result.localCommits} local commit(s) not on origin`);\n    }\n    return (\n      `Fetched ${result.target} to FETCH_HEAD (${result.fetchedSha.slice(0, 12)}) but left the ` +\n      `checkout alone: ${reasons.join(\"; \")}. Merge or rebase FETCH_HEAD yourself ` +\n      `(e.g. git merge FETCH_HEAD), or commit your work to a pi/* branch first.`\n    );\n  }\n\n  /**\n   * Backs the `github_read` tool: PR/issue metadata the ./repo clone cannot\n   * provide (diff stats, review state, other issues in the repo). Owner/repo\n   * always come from the conversation id, so reads never leave this repo.\n   */\n  async readGithub(conversationId: string, request: GithubReadRequest): Promise<GithubReadResult> {\n    const ref = parseGithubConversationId(conversationId);\n    const number = request.number ?? ref.number;\n    switch (request.action) {\n      case \"pr\": {\n        const pr = await githubRetry(() => this.client.getPullRequest(ref.owner, ref.repo, number));\n        return { kind: \"pr\", pr };\n      }\n      case \"pr_files\": {\n        const files = await githubRetry(() =>\n          this.client.listPullRequestFiles(ref.owner, ref.repo, number),\n        );\n        return { kind: \"pr_files\", files };\n      }\n      case \"pr_reviews\": {\n        const [reviews, threads] = await Promise.all([\n          githubRetry(() => this.client.listPullRequestReviews(ref.owner, ref.repo, number)),\n          githubRetry(() => this.client.listPullReviewComments(ref.owner, ref.repo, number)),\n        ]);\n        return { kind: \"pr_reviews\", reviews, threads };\n      }\n      case \"issue\": {\n        const issue = await githubRetry(() => this.client.getIssue(ref.owner, ref.repo, number));\n        return { kind: \"issue\", issue };\n      }\n      case \"comments\": {\n        const comments = await githubRetry(() =>\n          this.client.listIssueComments(ref.owner, ref.repo, number),\n        );\n        return { kind: \"comments\", comments };\n      }\n      case \"list\": {\n        const issues = await githubRetry(() =>\n          this.client.listIssues(ref.owner, ref.repo, {\n            state: request.state,\n            labels: request.labels,\n            creator: request.creator,\n          }),\n        );\n        return { kind: \"list\", issues };\n      }\n      default:\n        throw new Error(`Unknown github_read action: ${String(request.action)}`);\n    }\n  }\n\n  /**\n   * Backs the `github_issue` tool: labels, assignees, and open/closed state\n   * on any issue of this conversation's repo (triage). Same-repo by\n   * construction — owner/repo come from the conversation id; the action enum\n   * is closed, so lock/delete/transfer cannot be expressed at all.\n   */\n  async manageIssue(conversationId: string, request: GithubIssueRequest): Promise<string> {\n    const ref = parseGithubConversationId(conversationId);\n    const number = request.number ?? ref.number;\n    try {\n      switch (request.action) {\n        case \"add_labels\": {\n          if (!request.labels?.length) {\n            throw new Error(\"add_labels requires a non-empty labels array.\");\n          }\n          await githubRetry(() =>\n            this.client.addIssueLabels(ref.owner, ref.repo, number, request.labels!),\n          );\n          return `Added label(s) ${request.labels.join(\", \")} to #${number}.`;\n        }\n        case \"remove_label\": {\n          if (!request.label) {\n            throw new Error(\"remove_label requires a label name.\");\n          }\n          await githubRetry(() =>\n            this.client.removeIssueLabel(ref.owner, ref.repo, number, request.label!),\n          );\n          return `Removed label ${request.label} from #${number}.`;\n        }\n        case \"add_assignees\": {\n          if (!request.assignees?.length) {\n            throw new Error(\"add_assignees requires a non-empty assignees array.\");\n          }\n          await githubRetry(() =>\n            this.client.addIssueAssignees(ref.owner, ref.repo, number, request.assignees!),\n          );\n          return `Assigned ${request.assignees.map((login) => `@${login}`).join(\", \")} to #${number}.`;\n        }\n        case \"remove_assignees\": {\n          if (!request.assignees?.length) {\n            throw new Error(\"remove_assignees requires a non-empty assignees array.\");\n          }\n          await githubRetry(() =>\n            this.client.removeIssueAssignees(ref.owner, ref.repo, number, request.assignees!),\n          );\n          return `Unassigned ${request.assignees.map((login) => `@${login}`).join(\", \")} from #${number}.`;\n        }\n        case \"close\": {\n          await githubRetry(() =>\n            this.client.updateIssueState(\n              ref.owner,\n              ref.repo,\n              number,\n              \"closed\",\n              request.state_reason,\n            ),\n          );\n          return `Closed #${number}${request.state_reason ? ` as ${request.state_reason}` : \"\"}.`;\n        }\n        case \"reopen\": {\n          await githubRetry(() =>\n            this.client.updateIssueState(ref.owner, ref.repo, number, \"open\"),\n          );\n          return `Reopened #${number}.`;\n        }\n        default:\n          throw new Error(`Unknown github_issue action: ${String(request.action)}`);\n      }\n    } catch (err) {\n      if (err instanceof GithubApiError && err.status === 404) {\n        throw new Error(`Issue #${number} not found in ${ref.owner}/${ref.repo}.`, { cause: err });\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Backs the `github_review_reply` tool: answer inside one inline review\n   * thread of this conversation's PR. The comment id comes from an\n   * `[PR review comment rc-<id> …]` message; GitHub validates it belongs to\n   * this PR (404 otherwise, translated into agent-actionable guidance).\n   */\n  async replyToReviewThread(\n    conversationId: string,\n    commentId: number,\n    body: string,\n  ): Promise<{ url: string }> {\n    if (!Number.isInteger(commentId) || commentId <= 0) {\n      throw new Error(\n        \"comment_id must be the numeric id from an [PR review comment rc-<id> …] message.\",\n      );\n    }\n    const ref = parseGithubConversationId(conversationId);\n    const text =\n      body.length > GITHUB_MAX_COMMENT_LENGTH\n        ? `${body.slice(0, GITHUB_MAX_COMMENT_LENGTH)}\\n…(truncated)`\n        : body;\n    try {\n      const reply = await githubRetry(() =>\n        this.client.replyToReviewComment(ref.owner, ref.repo, ref.number, commentId, text),\n      );\n      return {\n        url: `https://github.com/${ref.owner}/${ref.repo}/pull/${ref.number}#discussion_r${reply.id}`,\n      };\n    } catch (err) {\n      if (err instanceof GithubApiError && err.status === 404) {\n        throw new Error(\n          `Comment ${commentId} is not a review comment on this PR. Take the id from an ` +\n            `[PR review comment rc-<id> …] message in this conversation; do not guess ids.`,\n          { cause: err },\n        );\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Backs the log mode of `github_checks`: the tail of one CI job's log so\n   * the agent can diagnose a failing check without sandbox credentials. Only\n   * GitHub Actions checks have logs on GitHub; external CI apps keep theirs\n   * on their own service, so a 404 here becomes guidance instead of a dead end.\n   */\n  async getJobLog(conversationId: string, jobId: number): Promise<string> {\n    if (!Number.isInteger(jobId) || jobId <= 0) {\n      throw new Error(\n        \"job_id must be a positive Actions job id taken from a [job …] entry in the github_checks summary.\",\n      );\n    }\n    const ref = parseGithubConversationId(conversationId);\n    let logText: string;\n    try {\n      logText = await githubRetry(() => this.client.getJobLog(ref.owner, ref.repo, jobId));\n    } catch (err) {\n      if (err instanceof GithubApiError && err.status === 404) {\n        throw new Error(\n          `No GitHub Actions log for job ${jobId}. Logs are only available for checks reported ` +\n            `by github-actions; external CI keeps logs on its own service — ` +\n            `use that check's summary/url from github_checks, or reproduce the failure locally ` +\n            `in ./repo instead. Do not retry with other ids.`,\n          { cause: err },\n        );\n      }\n      throw err;\n    }\n    return logText.length > MAX_LOG_CHARS\n      ? `…(truncated to the last ${MAX_LOG_CHARS} chars)\\n${logText.slice(-MAX_LOG_CHARS)}`\n      : logText;\n  }\n}\n"]}

package/dist/adapters/github/ids.d.ts

@@ -0,0 +1,34 @@
+import type { GithubConversationRef } from "./types.js";
+/**
+ * Conversation id for one issue/PR: `GH_<owner>_<repo>_<number>`.
+ *
+ * DESIGN.md originally proposed `gh:<owner>/<repo>#<number>`, but conversation
+ * ids are used verbatim as a single path segment (LAYOUT.md § Casing) and the
+ * conversation dir is bind-mounted with docker's `-v source:target` syntax in
+ * image mode — so the id can contain neither `/` nor `:`. `_` is the
+ * separator because it is the only inert character that also parses back
+ * unambiguously under GitHub's name grammar: owners allow `-` (so `-` would
+ * make the owner/repo boundary ambiguous) but never `_`, repos may contain
+ * `_` but the trailing number is pure digits — so the first `_` and the last
+ * `_` before the digits are always the real boundaries.
+ *
+ * Owner and repo are lowercased: GitHub names are case-insensitive (and this
+ * id has two spelling sources — the GITHUB_REPOS env var and API payloads),
+ * so per LAYOUT.md § Casing this is a mikan-derived slug, not a verbatim
+ * platform id, and derived slugs are lowercased to keep one issue from
+ * mapping to two conversation dirs on case-sensitive filesystems.
+ */
+export declare function buildGithubConversationId(ref: GithubConversationRef): string;
+export declare function parseGithubConversationId(conversationId: string): GithubConversationRef;
+/** Message ts used for the issue/PR body itself (comments use their comment id). */
+export declare const GITHUB_ISSUE_BODY_TS = "issue";
+/**
+ * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids
+ * live in a different id space than issue-comment ids, and several endpoints
+ * (reactions, edits) differ by family — the prefix makes routing a review id
+ * to an issue-comment endpoint structurally impossible.
+ */
+export declare function githubReviewCommentTs(commentId: number): string;
+/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */
+export declare function parseReviewCommentTs(ts: string): number | null;
+//# sourceMappingURL=ids.d.ts.map

package/dist/adapters/github/ids.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,qBAAqB,GAAG,MAAM,CAE5E;AAID,wBAAgB,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,qBAAqB,CAgBvF;AAED,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAE5C;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D"}

package/dist/adapters/github/ids.js

@@ -0,0 +1,57 @@
+/**
+ * Conversation id for one issue/PR: `GH_<owner>_<repo>_<number>`.
+ *
+ * DESIGN.md originally proposed `gh:<owner>/<repo>#<number>`, but conversation
+ * ids are used verbatim as a single path segment (LAYOUT.md § Casing) and the
+ * conversation dir is bind-mounted with docker's `-v source:target` syntax in
+ * image mode — so the id can contain neither `/` nor `:`. `_` is the
+ * separator because it is the only inert character that also parses back
+ * unambiguously under GitHub's name grammar: owners allow `-` (so `-` would
+ * make the owner/repo boundary ambiguous) but never `_`, repos may contain
+ * `_` but the trailing number is pure digits — so the first `_` and the last
+ * `_` before the digits are always the real boundaries.
+ *
+ * Owner and repo are lowercased: GitHub names are case-insensitive (and this
+ * id has two spelling sources — the GITHUB_REPOS env var and API payloads),
+ * so per LAYOUT.md § Casing this is a mikan-derived slug, not a verbatim
+ * platform id, and derived slugs are lowercased to keep one issue from
+ * mapping to two conversation dirs on case-sensitive filesystems.
+ */
+export function buildGithubConversationId(ref) {
+    return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;
+}
+const CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\d+)$/;
+export function parseGithubConversationId(conversationId) {
+    // The greedy repo group splits at the last `_` followed by digits-to-end,
+    // which is always the number boundary (repos may contain `_` themselves).
+    const match = CONVERSATION_ID_PATTERN.exec(conversationId);
+    if (!match) {
+        throw new Error(`Not a GitHub conversation id: ${conversationId}`);
+    }
+    const [, owner, repo, number] = match;
+    if (owner === undefined || repo === undefined || number === undefined) {
+        throw new Error(`Not a GitHub conversation id: ${conversationId}`);
+    }
+    return {
+        owner: owner.toLowerCase(),
+        repo: repo.toLowerCase(),
+        number: Number(number),
+    };
+}
+/** Message ts used for the issue/PR body itself (comments use their comment id). */
+export const GITHUB_ISSUE_BODY_TS = "issue";
+/**
+ * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids
+ * live in a different id space than issue-comment ids, and several endpoints
+ * (reactions, edits) differ by family — the prefix makes routing a review id
+ * to an issue-comment endpoint structurally impossible.
+ */
+export function githubReviewCommentTs(commentId) {
+    return `rc-${commentId}`;
+}
+/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */
+export function parseReviewCommentTs(ts) {
+    const match = /^rc-(\d+)$/.exec(ts);
+    return match ? Number(match[1]) : null;
+}
+//# sourceMappingURL=ids.js.map

package/dist/adapters/github/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../../src/adapters/github/ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAA0B;IAClE,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,uBAAuB,GAAG,iCAAiC,CAAC;AAElE,MAAM,UAAU,yBAAyB,CAAC,cAAsB;IAC9D,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE;QAC1B,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,OAAO,MAAM,SAAS,EAAE,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC","sourcesContent":["import type { GithubConversationRef } from \"./types.js\";\n\n/**\n * Conversation id for one issue/PR: `GH_<owner>_<repo>_<number>`.\n *\n * DESIGN.md originally proposed `gh:<owner>/<repo>#<number>`, but conversation\n * ids are used verbatim as a single path segment (LAYOUT.md § Casing) and the\n * conversation dir is bind-mounted with docker's `-v source:target` syntax in\n * image mode — so the id can contain neither `/` nor `:`. `_` is the\n * separator because it is the only inert character that also parses back\n * unambiguously under GitHub's name grammar: owners allow `-` (so `-` would\n * make the owner/repo boundary ambiguous) but never `_`, repos may contain\n * `_` but the trailing number is pure digits — so the first `_` and the last\n * `_` before the digits are always the real boundaries.\n *\n * Owner and repo are lowercased: GitHub names are case-insensitive (and this\n * id has two spelling sources — the GITHUB_REPOS env var and API payloads),\n * so per LAYOUT.md § Casing this is a mikan-derived slug, not a verbatim\n * platform id, and derived slugs are lowercased to keep one issue from\n * mapping to two conversation dirs on case-sensitive filesystems.\n */\nexport function buildGithubConversationId(ref: GithubConversationRef): string {\n  return `GH_${ref.owner.toLowerCase()}_${ref.repo.toLowerCase()}_${ref.number}`;\n}\n\nconst CONVERSATION_ID_PATTERN = /^GH_([A-Za-z0-9-]+)_(.+)_(\\d+)$/;\n\nexport function parseGithubConversationId(conversationId: string): GithubConversationRef {\n  // The greedy repo group splits at the last `_` followed by digits-to-end,\n  // which is always the number boundary (repos may contain `_` themselves).\n  const match = CONVERSATION_ID_PATTERN.exec(conversationId);\n  if (!match) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  const [, owner, repo, number] = match;\n  if (owner === undefined || repo === undefined || number === undefined) {\n    throw new Error(`Not a GitHub conversation id: ${conversationId}`);\n  }\n  return {\n    owner: owner.toLowerCase(),\n    repo: repo.toLowerCase(),\n    number: Number(number),\n  };\n}\n\n/** Message ts used for the issue/PR body itself (comments use their comment id). */\nexport const GITHUB_ISSUE_BODY_TS = \"issue\";\n\n/**\n * Message ts for an inline PR review comment: `rc-<id>`. Review-comment ids\n * live in a different id space than issue-comment ids, and several endpoints\n * (reactions, edits) differ by family — the prefix makes routing a review id\n * to an issue-comment endpoint structurally impossible.\n */\nexport function githubReviewCommentTs(commentId: number): string {\n  return `rc-${commentId}`;\n}\n\n/** The review-comment id inside an `rc-<id>` ts, or null for other ts kinds. */\nexport function parseReviewCommentTs(ts: string): number | null {\n  const match = /^rc-(\\d+)$/.exec(ts);\n  return match ? Number(match[1]) : null;\n}\n"]}

package/dist/adapters/github/repo.d.ts

@@ -0,0 +1,33 @@
+import type { Office } from "../../office/index.js";
+import type { CloneRepoOptions, PushBranchOptions, SyncRepoOptions, SyncRepoResult } from "./types.js";
+/**
+ * Branches the bot may push: `pi/<name>`. Everything else — including the
+ * repo's default branch by construction — is refused, so a driven agent can
+ * only ever produce reviewable branches, never touch mainline directly.
+ */
+export declare const GITHUB_PUSH_BRANCH_PATTERN: RegExp;
+/** The conversation's clone location (bind-mounted into the sandbox as ./repo). */
+export declare function conversationRepoDir(office: Office): string;
+/**
+ * Shallow-clone a repo into a conversation dir and preconfigure the bot's
+ * commit identity. For PR conversations, additionally fetch the PR head and
+ * check it out so the agent starts on the code under review — under its real
+ * branch name when the caller resolved one, which is what lets the agent push
+ * fixes back to the PR itself.
+ */
+export declare function cloneRepo(options: CloneRepoOptions): Promise<void>;
+/**
+ * Refresh a conversation clone from origin. Always fetches; only moves the
+ * checkout when that provably cannot lose agent work: the target branch is
+ * the one checked out, the tree is clean, and it has no commits of its own
+ * (`checkout -B` then handles fast-forward and force-pushed heads alike).
+ * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which
+ * has full credential-less git inside the sandbox, to merge or rebase itself.
+ */
+export declare function syncRepo(options: SyncRepoOptions): Promise<SyncRepoResult>;
+/**
+ * Push one local branch to origin. Non-force by construction (plain refspec),
+ * and only `pi/*` branches are accepted.
+ */
+export declare function pushBranch(options: PushBranchOptions): Promise<void>;
+//# sourceMappingURL=repo.d.ts.map

package/dist/adapters/github/repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAMpB;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAwC,CAAC;AAEhF,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AA0CD;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBxE;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CA8ChF;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E"}

package/dist/adapters/github/repo.js

@@ -0,0 +1,141 @@
+import { execFile } from "node:child_process";
+import { join } from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+const GIT_TIMEOUT_MS = 120_000;
+/**
+ * Branches the bot may push: `pi/<name>`. Everything else — including the
+ * repo's default branch by construction — is refused, so a driven agent can
+ * only ever produce reviewable branches, never touch mainline directly.
+ */
+export const GITHUB_PUSH_BRANCH_PATTERN = /^pi\/[A-Za-z0-9._][A-Za-z0-9._/-]*$/;
+/** The conversation's clone location (bind-mounted into the sandbox as ./repo). */
+export function conversationRepoDir(office) {
+    return join(office.dir, "repo");
+}
+/**
+ * Pass the ephemeral token as a per-invocation header, never in the remote
+ * URL: nothing credential-shaped may end up in `.git/config`, which lives in
+ * the conversation dir and is bind-mounted into the sandbox.
+ */
+function gitAuthArgs(token) {
+    const basic = Buffer.from(`x-access-token:${token}`).toString("base64");
+    return ["-c", `http.extraheader=Authorization: basic ${basic}`];
+}
+async function git(args, token) {
+    const { stdout } = await execFileAsync("git", [...(token ? gitAuthArgs(token) : []), ...args], {
+        timeout: GIT_TIMEOUT_MS,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+    });
+    return stdout;
+}
+/**
+ * Git itself rejects these ref shapes; the check just keeps an API-supplied
+ * branch name that would parse as a git option (leading dash) or an invalid
+ * ref out of argv entirely instead of surfacing as a git error mid-clone.
+ */
+function isSafeBranchName(name) {
+    return (name.length > 0 && !name.startsWith("-") && !name.includes("..") && !/[\s~^:?*[\\]/.test(name));
+}
+/**
+ * Local checkout name for a PR conversation: the PR's real head branch when
+ * known (same-repo heads only — the caller resolves that), falling back to
+ * the synthetic `pr-<n>` for fork PRs, unresolvable heads, and unsafe names.
+ * Using the real name is what lets the agent update the PR in place: commit
+ * on a `pi/*` head and `github_pr` pushes back to the same branch.
+ */
+function prCheckoutName(prNumber, prHeadBranch) {
+    return prHeadBranch && isSafeBranchName(prHeadBranch) ? prHeadBranch : `pr-${prNumber}`;
+}
+/**
+ * Shallow-clone a repo into a conversation dir and preconfigure the bot's
+ * commit identity. For PR conversations, additionally fetch the PR head and
+ * check it out so the agent starts on the code under review — under its real
+ * branch name when the caller resolved one, which is what lets the agent push
+ * fixes back to the PR itself.
+ */
+export async function cloneRepo(options) {
+    await git(["clone", "--depth", "50", options.url, options.dir], options.token);
+    await git(["-C", options.dir, "config", "user.name", options.botLogin]);
+    await git(["-C", options.dir, "config", "user.email", options.botEmail]);
+    if (options.prNumber !== undefined) {
+        await git(["-C", options.dir, "fetch", "--depth", "50", "origin", `pull/${options.prNumber}/head`], options.token);
+        await git([
+            "-C",
+            options.dir,
+            "checkout",
+            "-B",
+            prCheckoutName(options.prNumber, options.prHeadBranch),
+            "FETCH_HEAD",
+        ]);
+    }
+}
+/**
+ * Refresh a conversation clone from origin. Always fetches; only moves the
+ * checkout when that provably cannot lose agent work: the target branch is
+ * the one checked out, the tree is clean, and it has no commits of its own
+ * (`checkout -B` then handles fast-forward and force-pushed heads alike).
+ * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which
+ * has full credential-less git inside the sandbox, to merge or rebase itself.
+ */
+export async function syncRepo(options) {
+    const { dir, token } = options;
+    let refspec;
+    let target;
+    if (options.branch) {
+        refspec = options.branch;
+        target = options.branch;
+    }
+    else if (options.prNumber !== undefined) {
+        refspec = `pull/${options.prNumber}/head`;
+        target = prCheckoutName(options.prNumber, options.prHeadBranch);
+    }
+    else if (options.defaultBranch) {
+        refspec = options.defaultBranch;
+        target = options.defaultBranch;
+    }
+    else {
+        throw new Error("syncRepo needs a branch, a PR number, or the default branch");
+    }
+    await git(["-C", dir, "fetch", "--depth", "50", "origin", refspec], token);
+    const fetchedSha = (await git(["-C", dir, "rev-parse", "FETCH_HEAD"])).trim();
+    const dirty = (await git(["-C", dir, "status", "--porcelain"])).trim().length > 0;
+    const currentBranch = (await git(["-C", dir, "rev-parse", "--abbrev-ref", "HEAD"])).trim();
+    // Clones made before the head branch name was resolvable sit on the
+    // synthetic pr-<n>; treat that as the same checkout so a clean sync
+    // migrates them to the real name instead of going fetch-only forever.
+    const legacyPrBranch = options.prNumber !== undefined ? `pr-${options.prNumber}` : undefined;
+    const onTarget = currentBranch === target || (legacyPrBranch !== undefined && currentBranch === legacyPrBranch);
+    let localCommits = 0;
+    if (onTarget) {
+        // Commits unique to HEAD split two ways: ones the agent committed here
+        // (the clone's preconfigured bot identity) are its work and must survive;
+        // ones committed by others were force-pushed away upstream and are safe
+        // to drop. Filter by the bot committer so a rebased PR head still syncs.
+        const botEmail = (await git(["-C", dir, "config", "user.email"])).trim();
+        localCommits = Number((await git(["-C", dir, "rev-list", "--count", `--committer=${botEmail}`, "FETCH_HEAD..HEAD"])).trim());
+    }
+    const updatedCheckout = onTarget && !dirty && localCommits === 0;
+    if (updatedCheckout) {
+        await git(["-C", dir, "checkout", "-B", target, "FETCH_HEAD"]);
+    }
+    return { target, fetchedSha, updatedCheckout, dirty, currentBranch, localCommits };
+}
+/**
+ * Push one local branch to origin. Non-force by construction (plain refspec),
+ * and only `pi/*` branches are accepted.
+ */
+export async function pushBranch(options) {
+    const { dir, branch, token } = options;
+    if (!GITHUB_PUSH_BRANCH_PATTERN.test(branch)) {
+        throw new Error(`Refusing to push branch '${branch}': only branches matching pi/<name> may be pushed.`);
+    }
+    try {
+        await git(["-C", dir, "rev-parse", "--verify", "--quiet", `refs/heads/${branch}`]);
+    }
+    catch {
+        throw new Error(`Branch '${branch}' does not exist in the conversation's ./repo clone.`);
+    }
+    await git(["-C", dir, "push", "origin", `refs/heads/${branch}:refs/heads/${branch}`], token);
+}
+//# sourceMappingURL=repo.js.map

package/dist/adapters/github/repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.js","sourceRoot":"","sources":["../../../src/adapters/github/repo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,qCAAqC,CAAC;AAEhF,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,CAAC,IAAI,EAAE,yCAAyC,KAAK,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,KAAc;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE;QAC7F,OAAO,EAAE,cAAc;QACvB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;KAClD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,CACL,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAC/F,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,YAAqB;IAC7D,OAAO,YAAY,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,GAAG,CACP,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,OAAO,CAAC,QAAQ,OAAO,CAAC,EACxF,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,CAAC;YACR,IAAI;YACJ,OAAO,CAAC,GAAG;YACX,UAAU;YACV,IAAI;YACJ,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC;YACtD,YAAY;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACrD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IACnB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QACzB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,GAAG,QAAQ,OAAO,CAAC,QAAQ,OAAO,CAAC;QAC1C,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;QAChC,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,QAAQ,GACZ,aAAa,KAAK,MAAM,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,aAAa,KAAK,cAAc,CAAC,CAAC;IACjG,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,EAAE,CAAC;QACb,uEAAuE;QACvE,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,YAAY,GAAG,MAAM,CACnB,CACE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAC7F,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,IAAI,CAAC,KAAK,IAAI,YAAY,KAAK,CAAC,CAAC;IACjE,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,oDAAoD,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,sDAAsD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,MAAM,eAAe,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { join } from \"node:path\";\nimport type { Office } from \"../../office/index.js\";\nimport { promisify } from \"node:util\";\nimport type {\n  CloneRepoOptions,\n  PushBranchOptions,\n  SyncRepoOptions,\n  SyncRepoResult,\n} from \"./types.js\";\n\nconst execFileAsync = promisify(execFile);\n\nconst GIT_TIMEOUT_MS = 120_000;\n\n/**\n * Branches the bot may push: `pi/<name>`. Everything else — including the\n * repo's default branch by construction — is refused, so a driven agent can\n * only ever produce reviewable branches, never touch mainline directly.\n */\nexport const GITHUB_PUSH_BRANCH_PATTERN = /^pi\\/[A-Za-z0-9._][A-Za-z0-9._/-]*$/;\n\n/** The conversation's clone location (bind-mounted into the sandbox as ./repo). */\nexport function conversationRepoDir(office: Office): string {\n  return join(office.dir, \"repo\");\n}\n\n/**\n * Pass the ephemeral token as a per-invocation header, never in the remote\n * URL: nothing credential-shaped may end up in `.git/config`, which lives in\n * the conversation dir and is bind-mounted into the sandbox.\n */\nfunction gitAuthArgs(token: string): string[] {\n  const basic = Buffer.from(`x-access-token:${token}`).toString(\"base64\");\n  return [\"-c\", `http.extraheader=Authorization: basic ${basic}`];\n}\n\nasync function git(args: string[], token?: string): Promise<string> {\n  const { stdout } = await execFileAsync(\"git\", [...(token ? gitAuthArgs(token) : []), ...args], {\n    timeout: GIT_TIMEOUT_MS,\n    env: { ...process.env, GIT_TERMINAL_PROMPT: \"0\" },\n  });\n  return stdout;\n}\n\n/**\n * Git itself rejects these ref shapes; the check just keeps an API-supplied\n * branch name that would parse as a git option (leading dash) or an invalid\n * ref out of argv entirely instead of surfacing as a git error mid-clone.\n */\nfunction isSafeBranchName(name: string): boolean {\n  return (\n    name.length > 0 && !name.startsWith(\"-\") && !name.includes(\"..\") && !/[\\s~^:?*[\\\\]/.test(name)\n  );\n}\n\n/**\n * Local checkout name for a PR conversation: the PR's real head branch when\n * known (same-repo heads only — the caller resolves that), falling back to\n * the synthetic `pr-<n>` for fork PRs, unresolvable heads, and unsafe names.\n * Using the real name is what lets the agent update the PR in place: commit\n * on a `pi/*` head and `github_pr` pushes back to the same branch.\n */\nfunction prCheckoutName(prNumber: number, prHeadBranch?: string): string {\n  return prHeadBranch && isSafeBranchName(prHeadBranch) ? prHeadBranch : `pr-${prNumber}`;\n}\n\n/**\n * Shallow-clone a repo into a conversation dir and preconfigure the bot's\n * commit identity. For PR conversations, additionally fetch the PR head and\n * check it out so the agent starts on the code under review — under its real\n * branch name when the caller resolved one, which is what lets the agent push\n * fixes back to the PR itself.\n */\nexport async function cloneRepo(options: CloneRepoOptions): Promise<void> {\n  await git([\"clone\", \"--depth\", \"50\", options.url, options.dir], options.token);\n  await git([\"-C\", options.dir, \"config\", \"user.name\", options.botLogin]);\n  await git([\"-C\", options.dir, \"config\", \"user.email\", options.botEmail]);\n  if (options.prNumber !== undefined) {\n    await git(\n      [\"-C\", options.dir, \"fetch\", \"--depth\", \"50\", \"origin\", `pull/${options.prNumber}/head`],\n      options.token,\n    );\n    await git([\n      \"-C\",\n      options.dir,\n      \"checkout\",\n      \"-B\",\n      prCheckoutName(options.prNumber, options.prHeadBranch),\n      \"FETCH_HEAD\",\n    ]);\n  }\n}\n\n/**\n * Refresh a conversation clone from origin. Always fetches; only moves the\n * checkout when that provably cannot lose agent work: the target branch is\n * the one checked out, the tree is clean, and it has no commits of its own\n * (`checkout -B` then handles fast-forward and force-pushed heads alike).\n * Anything else stays fetch-only — FETCH_HEAD is left for the agent, which\n * has full credential-less git inside the sandbox, to merge or rebase itself.\n */\nexport async function syncRepo(options: SyncRepoOptions): Promise<SyncRepoResult> {\n  const { dir, token } = options;\n  let refspec: string;\n  let target: string;\n  if (options.branch) {\n    refspec = options.branch;\n    target = options.branch;\n  } else if (options.prNumber !== undefined) {\n    refspec = `pull/${options.prNumber}/head`;\n    target = prCheckoutName(options.prNumber, options.prHeadBranch);\n  } else if (options.defaultBranch) {\n    refspec = options.defaultBranch;\n    target = options.defaultBranch;\n  } else {\n    throw new Error(\"syncRepo needs a branch, a PR number, or the default branch\");\n  }\n\n  await git([\"-C\", dir, \"fetch\", \"--depth\", \"50\", \"origin\", refspec], token);\n  const fetchedSha = (await git([\"-C\", dir, \"rev-parse\", \"FETCH_HEAD\"])).trim();\n  const dirty = (await git([\"-C\", dir, \"status\", \"--porcelain\"])).trim().length > 0;\n  const currentBranch = (await git([\"-C\", dir, \"rev-parse\", \"--abbrev-ref\", \"HEAD\"])).trim();\n  // Clones made before the head branch name was resolvable sit on the\n  // synthetic pr-<n>; treat that as the same checkout so a clean sync\n  // migrates them to the real name instead of going fetch-only forever.\n  const legacyPrBranch = options.prNumber !== undefined ? `pr-${options.prNumber}` : undefined;\n  const onTarget =\n    currentBranch === target || (legacyPrBranch !== undefined && currentBranch === legacyPrBranch);\n  let localCommits = 0;\n  if (onTarget) {\n    // Commits unique to HEAD split two ways: ones the agent committed here\n    // (the clone's preconfigured bot identity) are its work and must survive;\n    // ones committed by others were force-pushed away upstream and are safe\n    // to drop. Filter by the bot committer so a rebased PR head still syncs.\n    const botEmail = (await git([\"-C\", dir, \"config\", \"user.email\"])).trim();\n    localCommits = Number(\n      (\n        await git([\"-C\", dir, \"rev-list\", \"--count\", `--committer=${botEmail}`, \"FETCH_HEAD..HEAD\"])\n      ).trim(),\n    );\n  }\n\n  const updatedCheckout = onTarget && !dirty && localCommits === 0;\n  if (updatedCheckout) {\n    await git([\"-C\", dir, \"checkout\", \"-B\", target, \"FETCH_HEAD\"]);\n  }\n  return { target, fetchedSha, updatedCheckout, dirty, currentBranch, localCommits };\n}\n\n/**\n * Push one local branch to origin. Non-force by construction (plain refspec),\n * and only `pi/*` branches are accepted.\n */\nexport async function pushBranch(options: PushBranchOptions): Promise<void> {\n  const { dir, branch, token } = options;\n  if (!GITHUB_PUSH_BRANCH_PATTERN.test(branch)) {\n    throw new Error(\n      `Refusing to push branch '${branch}': only branches matching pi/<name> may be pushed.`,\n    );\n  }\n  try {\n    await git([\"-C\", dir, \"rev-parse\", \"--verify\", \"--quiet\", `refs/heads/${branch}`]);\n  } catch {\n    throw new Error(`Branch '${branch}' does not exist in the conversation's ./repo clone.`);\n  }\n  await git([\"-C\", dir, \"push\", \"origin\", `refs/heads/${branch}:refs/heads/${branch}`], token);\n}\n"]}

package/dist/adapters/github/tool-pack.d.ts

@@ -0,0 +1,14 @@
+import type { PlatformToolPack } from "../../harness/tools/types.js";
+import type { PlatformGithubOps } from "./types.js";
+/**
+ * GitHub host-side capability pack — one tool per module under `tools/`:
+ * github_pr, github_checks, github_review_reply, github_sync, github_read,
+ * github_issue.
+ *
+ * These tools never run in the sandbox; they call PlatformGithubOps which
+ * mints short-lived installation tokens on the host. The pack is only
+ * constructed when the GitHub bot is configured; bindRun enables the tools
+ * only for github-named conversations so multi-platform processes stay safe.
+ */
+export declare function createGithubToolPack(ops: PlatformGithubOps): PlatformToolPack;
+//# sourceMappingURL=tool-pack.d.ts.map

package/dist/adapters/github/tool-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-pack.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,CAyC7E"}

package/dist/adapters/github/tool-pack.js

@@ -0,0 +1,55 @@
+import { createGithubChecksTool } from "./tools/checks.js";
+import { createGithubPrTool } from "./tools/pr.js";
+import { createGithubIssueTool } from "./tools/issue.js";
+import { createGithubReadTool } from "./tools/read.js";
+import { createGithubReviewReplyTool } from "./tools/review-reply.js";
+import { createGithubSyncTool } from "./tools/sync.js";
+/**
+ * GitHub host-side capability pack — one tool per module under `tools/`:
+ * github_pr, github_checks, github_review_reply, github_sync, github_read,
+ * github_issue.
+ *
+ * These tools never run in the sandbox; they call PlatformGithubOps which
+ * mints short-lived installation tokens on the host. The pack is only
+ * constructed when the GitHub bot is configured; bindRun enables the tools
+ * only for github-named conversations so multi-platform processes stay safe.
+ */
+export function createGithubToolPack(ops) {
+    const { tool: githubPrTool, setGithubPrFunction } = createGithubPrTool();
+    const { tool: githubChecksTool, setGithubChecksFunction } = createGithubChecksTool();
+    const { tool: githubReviewReplyTool, setGithubReviewReplyFunction } = createGithubReviewReplyTool();
+    const { tool: githubSyncTool, setGithubSyncFunction } = createGithubSyncTool();
+    const { tool: githubReadTool, setGithubReadFunction } = createGithubReadTool();
+    const { tool: githubIssueTool, setGithubIssueFunction } = createGithubIssueTool();
+    return {
+        tools: [
+            githubPrTool,
+            githubChecksTool,
+            githubReviewReplyTool,
+            githubSyncTool,
+            githubReadTool,
+            githubIssueTool,
+        ],
+        bindRun({ conversationId, platformName }) {
+            if (platformName !== "github") {
+                setGithubPrFunction(null);
+                setGithubChecksFunction(null);
+                setGithubReviewReplyFunction(null);
+                setGithubSyncFunction(null);
+                setGithubReadFunction(null);
+                setGithubIssueFunction(null);
+                return;
+            }
+            setGithubPrFunction((request) => ops.pushAndCreatePr(conversationId, request));
+            setGithubChecksFunction({
+                getChecks: (branch) => ops.getChecks(conversationId, branch),
+                getJobLog: (jobId) => ops.getJobLog(conversationId, jobId),
+            });
+            setGithubReviewReplyFunction((commentId, body) => ops.replyToReviewThread(conversationId, commentId, body));
+            setGithubSyncFunction((branch) => ops.syncRepo(conversationId, branch));
+            setGithubReadFunction((request) => ops.readGithub(conversationId, request));
+            setGithubIssueFunction((request) => ops.manageIssue(conversationId, request));
+        },
+    };
+}
+//# sourceMappingURL=tool-pack.js.map

package/dist/adapters/github/tool-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-pack.js","sourceRoot":"","sources":["../../../src/adapters/github/tool-pack.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAIvD;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAsB;IACzD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACzE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,GAAG,sBAAsB,EAAE,CAAC;IACrF,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,GACjE,2BAA2B,EAAE,CAAC;IAChC,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,qBAAqB,EAAE,GAAG,oBAAoB,EAAE,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,sBAAsB,EAAE,GAAG,qBAAqB,EAAE,CAAC;IAElF,OAAO;QACL,KAAK,EAAE;YACL,YAAY;YACZ,gBAAgB;YAChB,qBAAqB;YACrB,cAAc;YACd,cAAc;YACd,eAAe;SAChB;QACD,OAAO,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE;YACtC,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC1B,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAC9B,4BAA4B,CAAC,IAAI,CAAC,CAAC;gBACnC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC5B,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBAC5B,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/E,uBAAuB,CAAC;gBACtB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC;gBAC5D,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;aAC3D,CAAC,CAAC;YACH,4BAA4B,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAC/C,GAAG,CAAC,mBAAmB,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CACzD,CAAC;YACF,qBAAqB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;YACxE,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5E,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createGithubChecksTool } from \"./tools/checks.js\";\nimport { createGithubPrTool } from \"./tools/pr.js\";\nimport { createGithubIssueTool } from \"./tools/issue.js\";\nimport { createGithubReadTool } from \"./tools/read.js\";\nimport { createGithubReviewReplyTool } from \"./tools/review-reply.js\";\nimport { createGithubSyncTool } from \"./tools/sync.js\";\nimport type { PlatformToolPack } from \"../../harness/tools/types.js\";\nimport type { PlatformGithubOps } from \"./types.js\";\n\n/**\n * GitHub host-side capability pack — one tool per module under `tools/`:\n * github_pr, github_checks, github_review_reply, github_sync, github_read,\n * github_issue.\n *\n * These tools never run in the sandbox; they call PlatformGithubOps which\n * mints short-lived installation tokens on the host. The pack is only\n * constructed when the GitHub bot is configured; bindRun enables the tools\n * only for github-named conversations so multi-platform processes stay safe.\n */\nexport function createGithubToolPack(ops: PlatformGithubOps): PlatformToolPack {\n  const { tool: githubPrTool, setGithubPrFunction } = createGithubPrTool();\n  const { tool: githubChecksTool, setGithubChecksFunction } = createGithubChecksTool();\n  const { tool: githubReviewReplyTool, setGithubReviewReplyFunction } =\n    createGithubReviewReplyTool();\n  const { tool: githubSyncTool, setGithubSyncFunction } = createGithubSyncTool();\n  const { tool: githubReadTool, setGithubReadFunction } = createGithubReadTool();\n  const { tool: githubIssueTool, setGithubIssueFunction } = createGithubIssueTool();\n\n  return {\n    tools: [\n      githubPrTool,\n      githubChecksTool,\n      githubReviewReplyTool,\n      githubSyncTool,\n      githubReadTool,\n      githubIssueTool,\n    ],\n    bindRun({ conversationId, platformName }) {\n      if (platformName !== \"github\") {\n        setGithubPrFunction(null);\n        setGithubChecksFunction(null);\n        setGithubReviewReplyFunction(null);\n        setGithubSyncFunction(null);\n        setGithubReadFunction(null);\n        setGithubIssueFunction(null);\n        return;\n      }\n      setGithubPrFunction((request) => ops.pushAndCreatePr(conversationId, request));\n      setGithubChecksFunction({\n        getChecks: (branch) => ops.getChecks(conversationId, branch),\n        getJobLog: (jobId) => ops.getJobLog(conversationId, jobId),\n      });\n      setGithubReviewReplyFunction((commentId, body) =>\n        ops.replyToReviewThread(conversationId, commentId, body),\n      );\n      setGithubSyncFunction((branch) => ops.syncRepo(conversationId, branch));\n      setGithubReadFunction((request) => ops.readGithub(conversationId, request));\n      setGithubIssueFunction((request) => ops.manageIssue(conversationId, request));\n    },\n  };\n}\n"]}

package/dist/adapters/github/tools/checks.d.ts

@@ -0,0 +1,18 @@
+import type { AgentTool } from "@earendil-works/pi-agent-core";
+export type { GithubChecksFns } from "../types.js";
+import type { GithubChecksFns } from "../types.js";
+declare const githubChecksSchema: import("@sinclair/typebox").TObject<{
+    branch: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    job_id: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+}>;
+/**
+ * The `github_checks` tool reads CI check runs (GitHub Actions and other
+ * check-reporting apps) for a branch or the conversation's PR head, and can
+ * fetch one job's log tail so the agent can diagnose failures and iterate.
+ * Read-only, host-side; wired per run and only for GitHub conversations.
+ */
+export declare function createGithubChecksTool(): {
+    tool: AgentTool<typeof githubChecksSchema>;
+    setGithubChecksFunction: (fns: GithubChecksFns | null) => void;
+};
+//# sourceMappingURL=checks.d.ts.map

package/dist/adapters/github/tools/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../../src/adapters/github/tools/checks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAG/D,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAsB,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,QAAA,MAAM,kBAAkB;;;EAetB,CAAC;AA0BH;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI;IACxC,IAAI,EAAE,SAAS,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC3C,uBAAuB,EAAE,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,KAAK,IAAI,CAAC;CAChE,CAmDA"}

package/dist/adapters/github/tools/checks.js

@@ -0,0 +1,86 @@
+import { Type } from "@sinclair/typebox";
+import { defineHostFnTool } from "../../../harness/tools/host-fn-tool.js";
+const githubChecksSchema = Type.Object({
+    branch: Type.Optional(Type.String({
+        description: "Branch whose CI checks to read (e.g. a pi/<name> branch you pushed). " +
+            "Omit in a pull-request conversation to read the PR head's checks.",
+    })),
+    job_id: Type.Optional(Type.Number({
+        description: "A [job …] id from the summary output (GitHub Actions checks) — returns that " +
+            "CI job's log (tail) instead of the summary, for diagnosing a failing check.",
+    })),
+});
+/** Conclusions that mean "this check did not pass and needs attention". */
+const FAILING_CONCLUSIONS = new Set(["failure", "timed_out", "action_required", "cancelled"]);
+function formatCheckLine(run) {
+    const state = run.status === "completed" ? (run.conclusion ?? "unknown") : run.status;
+    const marker = run.conclusion === null
+        ? "…"
+        : FAILING_CONCLUSIONS.has(run.conclusion)
+            ? "✗"
+            : run.conclusion === "success"
+                ? "✓"
+                : "−";
+    const handle = run.appSlug === "github-actions"
+        ? `[job ${run.id}]`
+        : `[external CI: ${run.appSlug ?? "unknown"} — logs not on GitHub]`;
+    const line = `${marker} ${run.name}: ${state} ${handle}${run.url ? ` (${run.url})` : ""}`;
+    const failed = run.conclusion !== null && FAILING_CONCLUSIONS.has(run.conclusion);
+    return failed && run.outputSummary
+        ? `${line}\n  ↳ ${run.outputSummary.replace(/\s*\n\s*/g, " ")}`
+        : line;
+}
+/**
+ * The `github_checks` tool reads CI check runs (GitHub Actions and other
+ * check-reporting apps) for a branch or the conversation's PR head, and can
+ * fetch one job's log tail so the agent can diagnose failures and iterate.
+ * Read-only, host-side; wired per run and only for GitHub conversations.
+ */
+export function createGithubChecksTool() {
+    const { tool, setFn } = defineHostFnTool({
+        name: "github_checks",
+        description: "Read CI status (check runs) for a branch you pushed with github_pr, or for this " +
+            "conversation's pull request when branch is omitted. Pass job_id (a [job …] id, " +
+            "GitHub Actions) from the summary to fetch that run's log. External CI checks keep " +
+            "logs on their own service: use " +
+            "their summary/url, or reproduce the failure locally in ./repo. Only available in " +
+            "GitHub conversations.",
+        parameters: githubChecksSchema,
+        unavailable: "github_checks is only available in GitHub conversations.",
+        run: async (checksFns, args) => {
+            if (args.job_id !== undefined) {
+                const logText = await checksFns.getJobLog(args.job_id);
+                return {
+                    content: [{ type: "text", text: logText || "(empty log)" }],
+                    details: undefined,
+                };
+            }
+            const runs = await checksFns.getChecks(args.branch);
+            if (runs.length === 0) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: "No check runs found — CI may not have started yet; try again shortly.",
+                        },
+                    ],
+                    details: undefined,
+                };
+            }
+            const completed = runs.filter((run) => run.status === "completed");
+            const failing = completed.filter((run) => run.conclusion !== null && FAILING_CONCLUSIONS.has(run.conclusion));
+            const summary = `${runs.length} check(s): ${completed.length} completed, ${runs.length - completed.length} running, ${failing.length} failing`;
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: [summary, ...runs.map(formatCheckLine)].join("\n"),
+                    },
+                ],
+                details: undefined,
+            };
+        },
+    });
+    return { tool, setGithubChecksFunction: setFn };
+}
+//# sourceMappingURL=checks.js.map

package/dist/adapters/github/tools/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../../src/adapters/github/tools/checks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAI1E,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EACT,uEAAuE;YACvE,mEAAmE;KACtE,CAAC,CACH;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACV,WAAW,EACT,8EAA8E;YAC9E,6EAA6E;KAChF,CAAC,CACH;CACF,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9F,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACtF,MAAM,MAAM,GACV,GAAG,CAAC,UAAU,KAAK,IAAI;QACrB,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;YACvC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;gBAC5B,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,GAAG,CAAC;IACd,MAAM,MAAM,GACV,GAAG,CAAC,OAAO,KAAK,gBAAgB;QAC9B,CAAC,CAAC,QAAQ,GAAG,CAAC,EAAE,GAAG;QACnB,CAAC,CAAC,iBAAiB,GAAG,CAAC,OAAO,IAAI,SAAS,wBAAwB,CAAC;IACxE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClF,OAAO,MAAM,IAAI,GAAG,CAAC,aAAa;QAChC,CAAC,CAAC,GAAG,IAAI,SAAS,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE;QAC/D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IAIpC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAA6C;QACnF,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,kFAAkF;YAClF,iFAAiF;YACjF,oFAAoF;YACpF,iCAAiC;YACjC,mFAAmF;YACnF,uBAAuB;QACzB,UAAU,EAAE,kBAAkB;QAC9B,WAAW,EAAE,0DAA0D;QACvE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,IAAI,aAAa,EAAE,CAAC;oBACpE,OAAO,EAAE,SAAS;iBACnB,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,uEAAuE;yBAC9E;qBACF;oBACD,OAAO,EAAE,SAAS;iBACnB,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAC9B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAC5E,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,cAAc,SAAS,CAAC,MAAM,eAAe,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,UAAU,CAAC;YAC/I,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;qBACzD;iBACF;gBACD,OAAO,EAAE,SAAS;aACnB,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC;AAClD,CAAC","sourcesContent":["import type { AgentTool } from \"@earendil-works/pi-agent-core\";\nimport { Type } from \"@sinclair/typebox\";\nimport { defineHostFnTool } from \"../../../harness/tools/host-fn-tool.js\";\nexport type { GithubChecksFns } from \"../types.js\";\nimport type { GithubCheckSummary, GithubChecksFns } from \"../types.js\";\n\nconst githubChecksSchema = Type.Object({\n  branch: Type.Optional(\n    Type.String({\n      description:\n        \"Branch whose CI checks to read (e.g. a pi/<name> branch you pushed). \" +\n        \"Omit in a pull-request conversation to read the PR head's checks.\",\n    }),\n  ),\n  job_id: Type.Optional(\n    Type.Number({\n      description:\n        \"A [job …] id from the summary output (GitHub Actions checks) — returns that \" +\n        \"CI job's log (tail) instead of the summary, for diagnosing a failing check.\",\n    }),\n  ),\n});\n\n/** Conclusions that mean \"this check did not pass and needs attention\". */\nconst FAILING_CONCLUSIONS = new Set([\"failure\", \"timed_out\", \"action_required\", \"cancelled\"]);\n\nfunction formatCheckLine(run: GithubCheckSummary): string {\n  const state = run.status === \"completed\" ? (run.conclusion ?? \"unknown\") : run.status;\n  const marker =\n    run.conclusion === null\n      ? \"…\"\n      : FAILING_CONCLUSIONS.has(run.conclusion)\n        ? \"✗\"\n        : run.conclusion === \"success\"\n          ? \"✓\"\n          : \"−\";\n  const handle =\n    run.appSlug === \"github-actions\"\n      ? `[job ${run.id}]`\n      : `[external CI: ${run.appSlug ?? \"unknown\"} — logs not on GitHub]`;\n  const line = `${marker} ${run.name}: ${state} ${handle}${run.url ? ` (${run.url})` : \"\"}`;\n  const failed = run.conclusion !== null && FAILING_CONCLUSIONS.has(run.conclusion);\n  return failed && run.outputSummary\n    ? `${line}\\n  ↳ ${run.outputSummary.replace(/\\s*\\n\\s*/g, \" \")}`\n    : line;\n}\n\n/**\n * The `github_checks` tool reads CI check runs (GitHub Actions and other\n * check-reporting apps) for a branch or the conversation's PR head, and can\n * fetch one job's log tail so the agent can diagnose failures and iterate.\n * Read-only, host-side; wired per run and only for GitHub conversations.\n */\nexport function createGithubChecksTool(): {\n  tool: AgentTool<typeof githubChecksSchema>;\n  setGithubChecksFunction: (fns: GithubChecksFns | null) => void;\n} {\n  const { tool, setFn } = defineHostFnTool<GithubChecksFns, typeof githubChecksSchema>({\n    name: \"github_checks\",\n    description:\n      \"Read CI status (check runs) for a branch you pushed with github_pr, or for this \" +\n      \"conversation's pull request when branch is omitted. Pass job_id (a [job …] id, \" +\n      \"GitHub Actions) from the summary to fetch that run's log. External CI checks keep \" +\n      \"logs on their own service: use \" +\n      \"their summary/url, or reproduce the failure locally in ./repo. Only available in \" +\n      \"GitHub conversations.\",\n    parameters: githubChecksSchema,\n    unavailable: \"github_checks is only available in GitHub conversations.\",\n    run: async (checksFns, args) => {\n      if (args.job_id !== undefined) {\n        const logText = await checksFns.getJobLog(args.job_id);\n        return {\n          content: [{ type: \"text\" as const, text: logText || \"(empty log)\" }],\n          details: undefined,\n        };\n      }\n\n      const runs = await checksFns.getChecks(args.branch);\n      if (runs.length === 0) {\n        return {\n          content: [\n            {\n              type: \"text\" as const,\n              text: \"No check runs found — CI may not have started yet; try again shortly.\",\n            },\n          ],\n          details: undefined,\n        };\n      }\n      const completed = runs.filter((run) => run.status === \"completed\");\n      const failing = completed.filter(\n        (run) => run.conclusion !== null && FAILING_CONCLUSIONS.has(run.conclusion),\n      );\n      const summary = `${runs.length} check(s): ${completed.length} completed, ${runs.length - completed.length} running, ${failing.length} failing`;\n      return {\n        content: [\n          {\n            type: \"text\" as const,\n            text: [summary, ...runs.map(formatCheckLine)].join(\"\\n\"),\n          },\n        ],\n        details: undefined,\n      };\n    },\n  });\n\n  return { tool, setGithubChecksFunction: setFn };\n}\n"]}