@generacy-ai/workflow-engine 0.5.0 → 0.7.0

package/dist/actions/github/client/ci-verdict.d.ts

@@ -0,0 +1,22 @@
+import type { CiRun, CiVerdict } from '../../../types/github.js';
+/**
+ * Aggregate a set of CI runs for a single head SHA into a three-state verdict.
+ *
+ * Pure, total, and never throws. Zero I/O.
+ *
+ * Precedence (per contracts/ci-verdict.md), after dropping the ignore-set
+ * (`skipped`, `neutral`):
+ *   1. any failing terminal conclusion → `not-passed`
+ *   2. any in-progress run (`status !== 'completed'` or `conclusion === null`) → `pending`
+ *   3. any `success` → `green`
+ *   4. otherwise → `pending`
+ *
+ * Unknown terminal conclusions are treated conservatively: they are not
+ * `success`, so they never contribute to a `green` verdict, and they fall
+ * through to `pending` (rule 4) unless a concrete success exists.
+ *
+ * Invariants: empty input and all-ignored input both yield `pending` — never
+ * `green` (SC-001). A `green` verdict requires at least one concrete `success`.
+ */
+export declare function aggregateCiVerdict(runs: CiRun[]): CiVerdict;
+//# sourceMappingURL=ci-verdict.d.ts.map

package/dist/actions/github/client/ci-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-verdict.d.ts","sourceRoot":"","sources":["../../../../src/actions/github/client/ci-verdict.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAqBjE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,CAgC3D"}

package/dist/actions/github/client/ci-verdict.js

@@ -0,0 +1,57 @@
+/**
+ * Conclusions that are ignored entirely when computing merge readiness.
+ * A skipped or neutral run is NOT a pass — it means CI never ran for that job
+ * (skipped≠passed, #1133 / SC-001).
+ */
+const IGNORED_CONCLUSIONS = new Set(['skipped', 'neutral']);
+/**
+ * Terminal conclusions that block merge readiness.
+ */
+const FAILING_CONCLUSIONS = new Set([
+    'failure',
+    'cancelled',
+    'timed_out',
+    'action_required',
+    'startup_failure', // #1157 FR-006
+    'stale', // #1157 FR-006
+]);
+/**
+ * Aggregate a set of CI runs for a single head SHA into a three-state verdict.
+ *
+ * Pure, total, and never throws. Zero I/O.
+ *
+ * Precedence (per contracts/ci-verdict.md), after dropping the ignore-set
+ * (`skipped`, `neutral`):
+ *   1. any failing terminal conclusion → `not-passed`
+ *   2. any in-progress run (`status !== 'completed'` or `conclusion === null`) → `pending`
+ *   3. any `success` → `green`
+ *   4. otherwise → `pending`
+ *
+ * Unknown terminal conclusions are treated conservatively: they are not
+ * `success`, so they never contribute to a `green` verdict, and they fall
+ * through to `pending` (rule 4) unless a concrete success exists.
+ *
+ * Invariants: empty input and all-ignored input both yield `pending` — never
+ * `green` (SC-001). A `green` verdict requires at least one concrete `success`.
+ */
+export function aggregateCiVerdict(runs) {
+    const relevant = runs.filter((run) => run.conclusion === null || !IGNORED_CONCLUSIONS.has(run.conclusion));
+    if (relevant.length === 0) {
+        return 'pending';
+    }
+    // Rule 1: any failing terminal conclusion blocks readiness.
+    if (relevant.some((run) => run.conclusion !== null && FAILING_CONCLUSIONS.has(run.conclusion))) {
+        return 'not-passed';
+    }
+    // Rule 2: any in-progress run keeps the verdict pending.
+    if (relevant.some((run) => run.status !== 'completed' || run.conclusion === null)) {
+        return 'pending';
+    }
+    // Rule 3: at least one concrete success and nothing failing/in-progress.
+    if (relevant.some((run) => run.conclusion === 'success')) {
+        return 'green';
+    }
+    // Rule 4: only unknown terminal conclusions remain — conservatively pending.
+    return 'pending';
+}
+//# sourceMappingURL=ci-verdict.js.map

package/dist/actions/github/client/ci-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-verdict.js","sourceRoot":"","sources":["../../../../src/actions/github/client/ci-verdict.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE;;GAEG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,SAAS;IACT,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,iBAAiB,EAAE,eAAe;IAClC,OAAO,EAAE,eAAe;CACzB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAC7E,CAAC;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,4DAA4D;IAC5D,IACE,QAAQ,CAAC,IAAI,CACX,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAC5E,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,IACE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,EAC7E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6EAA6E;IAC7E,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/actions/github/client/gh-cli.d.ts

@@ -3,7 +3,7 @@
  * Uses the GitHub CLI for all GitHub API operations and git for local operations.
  */
 import type { GitHubClient, IssueUpdate, PRCreate, PRUpdate, MergeResult, CommitResult, PushResult, GitStatus, LabelDefinition } from './interface.js';
-import type { Issue, PullRequest, Comment, Label, RepoInfo, Review, ReviewThread } from '../../../types/github.js';
+import type { Issue, PullRequest, Comment, Label, RepoInfo, Review, ReviewThread, CreateReviewInput, PullRequestFile, CiRun } from '../../../types/github.js';
 /**
  * Thrown by `executeGh()` when the gh CLI's stderr signals HTTP 401 or 403.
  * Callers (label/PR-feedback monitors) catch this to drive auth-health state.
@@ -59,6 +59,9 @@ export declare class GhCliGitHubClient implements GitHubClient {
     getPRComments(owner: string, repo: string, number: number): Promise<Comment[]>;
     getPRReviewThreads(owner: string, repo: string, number: number): Promise<ReviewThread[]>;
     listReviews(owner: string, repo: string, prNumber: number): Promise<Review[]>;
+    createReview(owner: string, repo: string, prNumber: number, input: CreateReviewInput): Promise<Review>;
+    convertPullRequestToDraft(owner: string, repo: string, prNumber: number): Promise<void>;
+    listPullRequestFiles(owner: string, repo: string, prNumber: number): Promise<PullRequestFile[]>;
     replyToPRComment(owner: string, repo: string, number: number, commentId: number, body: string): Promise<Comment>;
     resolveReviewThread(threadId: string): Promise<void>;
     listOpenPullRequests(owner: string, repo: string): Promise<PullRequest[]>;
@@ -79,7 +82,7 @@ export declare class GhCliGitHubClient implements GitHubClient {
     checkout(branch: string): Promise<void>;
     stageFiles(files: string[]): Promise<void>;
     stageAll(): Promise<void>;
-    commit(message: string): Promise<CommitResult>;
+    commit(message: string, pathspec?: string[]): Promise<CommitResult>;
     push(remote?: string, branch?: string, setUpstream?: boolean): Promise<PushResult>;
     fetch(remote?: string, prune?: boolean): Promise<void>;
     merge(branch: string, noCommit?: boolean): Promise<MergeResult>;
@@ -89,6 +92,7 @@ export declare class GhCliGitHubClient implements GitHubClient {
         success: boolean;
         conflicts: boolean;
     }>;
+    discardWorkingTreeChanges(excludePaths?: string[]): Promise<void>;
     getConflictedFiles(): Promise<string[]>;
     getDefaultBranch(): Promise<string>;
     getCommitsBetween(base: string, head: string): Promise<{
@@ -96,6 +100,9 @@ export declare class GhCliGitHubClient implements GitHubClient {
         message: string;
     }[]>;
     getFilesChangedBetween(base: string, head: string): Promise<string[]>;
+    getCurrentCommitSha(): Promise<string>;
+    getFilesChangedByOwnCommits(startRef: string): Promise<string[]>;
+    commitExistsInCheckout(sha: string): Promise<boolean>;
     /**
      * Fetch the head commit SHA for a branch/ref (#892).
      * Uses `gh api repos/{o}/{r}/commits/{ref} --jq .sha` and validates that the
@@ -103,6 +110,37 @@ export declare class GhCliGitHubClient implements GitHubClient {
      * 401 → `GhAuthError` via `executeGh` (existing #762 path).
      */
     getRefHeadSha(owner: string, repo: string, ref: string): Promise<string>;
+    /**
+     * Read CI runs for a commit SHA for merge-readiness aggregation (#1133).
+     *
+     * Primary: `gh api repos/{o}/{r}/commits/{sha}/check-runs` → source
+     * `check-runs`. On non-zero exit — including the `GhAuthError` (HTTP 401/403)
+     * that `executeGh` raises, which is the observed symptom of a token lacking
+     * `checks:read` (FR-002) — fall back to
+     * `gh api repos/{o}/{r}/actions/runs?branch={branch}` filtered client-side to
+     * the head SHA → source `actions-runs`.
+     *
+     * Both paths are paginated (`--paginate` + `per_page=100`): the check-runs
+     * endpoint caps at 30 results per page by default (same trap #1043 fixed for
+     * `listBranches`). Without pagination a head SHA with >30 checks would expose
+     * only page 1 to `aggregateCiVerdict`, so a failing or still-pending run past
+     * page 1 would be invisible and could yield a false `green` — the exact
+     * skipped≠passed safety hole this feature closes.
+     *
+     * Both paths normalize to `CiRun[]` consumable by `aggregateCiVerdict`
+     * unchanged (SC-004). Empty result → `{ runs: [], source }`. Non-zero exit on
+     * BOTH paths → throw with stderr (mirrors `getRefHeadSha`).
+     */
+    getCiRunsForSha(owner: string, repo: string, headSha: string, branch: string): Promise<{
+        runs: CiRun[];
+        source: 'check-runs' | 'actions-runs';
+    }>;
+    /**
+     * Parse newline-delimited `{status, conclusion}` JSON objects (jq stream
+     * output) into `CiRun[]`. Blank lines and unparseable lines are skipped.
+     * Unknown `conclusion` values are passed through as-is.
+     */
+    private parseCiRunLines;
     /**
      * List file names touched by a PR (`gh pr diff --name-only`, #892).
      * Non-zero exit → throw with stderr for visibility.

package/dist/actions/github/client/gh-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gh-cli.d.ts","sourceRoot":"","sources":["../../../../src/actions/github/client/gh-cli.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,UAAU,EACV,SAAS,EACT,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,OAAO,EACP,KAAK,EACL,QAAQ,EAER,MAAM,EAEN,YAAY,EACb,MAAM,0BAA0B,CAAC;AAGlC;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAElB,UAAU,EAAE,GAAG,GAAG,GAAG;aACrB,MAAM,EAAE,MAAM;gBADd,UAAU,EAAE,GAAG,GAAG,GAAG,EACrB,MAAM,EAAE,MAAM,EAC9B,OAAO,CAAC,EAAE,MAAM;CAKnB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,aAAa,CAAC,CAAoC;gBAGxD,OAAO,CAAC,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAMnD;;;;;;;;;;;;;OAaG;YACW,eAAe;YAMf,SAAS;IAgBjB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;IA+BhC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAqCrE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAoB9E,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAwCjF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B1F,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB5F,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAmCjF,8BAA8B,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,EAAE,CAAC;IAwEf,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1F,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAwDpF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAoCjF,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B7F,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAiC9E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA2GxF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA2D7E,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BhH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgDpD,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuCzE,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuBrF,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzF,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAoCzF,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAqEjG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1F,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAqB5D,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA4CvG,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IA4D/B,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAQnC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAU9D,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAOzB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAoB9C,IAAI,CAAC,MAAM,SAAW,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAoBlF,KAAK,CAAC,MAAM,SAAW,EAAE,KAAK,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAuD7D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWzC,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAa7D,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKvC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAgBnC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAmB1F,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkB3E;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB9E;;;OAGG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBnE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAyB5D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAI3E,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAIxF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAIzD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1G,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAe5H"}
+{"version":3,"file":"gh-cli.d.ts","sourceRoot":"","sources":["../../../../src/actions/github/client/gh-cli.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,UAAU,EACV,SAAS,EACT,eAAe,EAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,OAAO,EACP,KAAK,EACL,QAAQ,EAER,MAAM,EAEN,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,KAAK,EAEN,MAAM,0BAA0B,CAAC;AAOlC;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAElB,UAAU,EAAE,GAAG,GAAG,GAAG;aACrB,MAAM,EAAE,MAAM;gBADd,UAAU,EAAE,GAAG,GAAG,GAAG,EACrB,MAAM,EAAE,MAAM,EAC9B,OAAO,CAAC,EAAE,MAAM;CAKnB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED;;GAEG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,aAAa,CAAC,CAAoC;gBAGxD,OAAO,CAAC,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAMnD;;;;;;;;;;;;;OAaG;YACW,eAAe;YAMf,SAAS;IAgBjB,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC;IA+BhC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IAqCrE,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAoB9E,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAwCjF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA4B1F,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB5F,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAmCjF,8BAA8B,CAClC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,EAAE,CAAC;IAwEf,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB1F,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAwDpF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAoCjF,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B7F,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAiC9E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA2GxF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA2D7E,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,MAAM,CAAC;IAkEZ,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkFvF,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAsB/F,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA0BhH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgDpD,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuCzE,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuBrF,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzF,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAoCzF,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAqEjG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcvF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1F,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAqB5D,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IA4CvG,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;IAqE/B,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAQnC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAU9D,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY9D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAOzB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IA4BnE,IAAI,CAAC,MAAM,SAAW,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAoBlF,KAAK,CAAC,MAAM,SAAW,EAAE,KAAK,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAuD7D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAO3B,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAWzC,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAa7D,yBAAyB,CAAC,YAAY,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBrE,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKvC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;IAgBnC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAmB1F,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAcrE,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC;IActC,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuBhE,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB3D;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAsB9E;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAAC,MAAM,EAAE,YAAY,GAAG,cAAc,CAAA;KAAE,CAAC;IAmEpE;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAiBvB;;;OAGG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBnE,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAyB5D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;IAI3E,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpF,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAIxF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAIzD,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB1G,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAe5H"}

package/dist/actions/github/client/gh-cli.js

@@ -1,4 +1,8 @@
 import { executeCommand, parseJSONSafe } from '../../cli-utils.js';
+import { writeFile, unlink } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
 /**
  * Thrown by `executeGh()` when the gh CLI's stderr signals HTTP 401 or 403.
  * Callers (label/PR-feedback monitors) catch this to drive auth-health state.
@@ -573,6 +577,141 @@ export class GhCliGitHubClient {
         }
         return reviews;
     }
+    async createReview(owner, repo, prNumber, input) {
+        // The reviews endpoint accepts a nested `comments[]` array of objects,
+        // which `-f field=value` cannot express. The shared `executeCommand`
+        // wrapper ignores stdin (both the launcher and direct-spawn paths use
+        // `stdio: ['ignore', ...]`), so `--input -` is unavailable here. Write the
+        // JSON body to a temp file and pass `--input <file>` — same wire result.
+        const body = {
+            event: input.event,
+            body: input.body,
+            comments: (input.comments ?? []).map(c => ({
+                path: c.path,
+                line: c.line,
+                side: c.side ?? 'RIGHT',
+                body: c.body,
+            })),
+        };
+        const inputPath = join(tmpdir(), `generacy-review-${randomUUID()}.json`);
+        await writeFile(inputPath, JSON.stringify(body), 'utf8');
+        let result;
+        try {
+            result = await this.executeGh([
+                'api',
+                '--method', 'POST',
+                `/repos/${owner}/${repo}/pulls/${prNumber}/reviews`,
+                '--input', inputPath,
+            ]);
+        }
+        finally {
+            await unlink(inputPath).catch(() => {
+                /* best-effort cleanup */
+            });
+        }
+        if (result.exitCode !== 0) {
+            throw new Error(`Failed to create review on PR #${prNumber}: ${result.stderr}`);
+        }
+        const data = parseJSONSafe(result.stdout);
+        if (!data) {
+            throw new Error(`Failed to parse created review response on PR #${prNumber}`);
+        }
+        const review = {
+            id: data.id,
+            user: { login: data.user?.login ?? '' },
+            body: data.body ?? '',
+            state: data.state,
+            submittedAt: data.submitted_at,
+        };
+        if (typeof data.author_association === 'string' && data.author_association.length > 0) {
+            review.authorAssociation = data.author_association;
+        }
+        return review;
+    }
+    async convertPullRequestToDraft(owner, repo, prNumber) {
+        // Step 1 — resolve the PR node id + current draft state. If it is already
+        // a draft, the conversion is a no-op (idempotent short-circuit).
+        const query = 'query($owner: String!, $repo: String!, $n: Int!) { repository(owner: $owner, name: $repo) { pullRequest(number: $n) { id isDraft } } }';
+        const queryResult = await this.executeGh([
+            'api', 'graphql',
+            '-f', `query=${query}`,
+            '-F', `owner=${owner}`,
+            '-F', `repo=${repo}`,
+            '-F', `n=${prNumber}`,
+        ]);
+        if (queryResult.exitCode !== 0) {
+            throw new Error(`convertPullRequestToDraft failed to resolve PR #${prNumber}: ${queryResult.stderr}`);
+        }
+        const queryParsed = parseJSONSafe(queryResult.stdout);
+        if (queryParsed?.errors && queryParsed.errors.length > 0) {
+            const messages = queryParsed.errors.map(e => e.message ?? 'unknown').join('; ');
+            throw new Error(`convertPullRequestToDraft returned GraphQL errors resolving PR #${prNumber}: ${messages}`);
+        }
+        const pr = queryParsed?.data?.repository?.pullRequest;
+        if (!pr?.id) {
+            throw new Error(`convertPullRequestToDraft could not resolve node id for PR #${prNumber}`);
+        }
+        if (pr.isDraft === true)
+            return;
+        // Step 2 — run the mutation, mirroring `resolveReviewThread`'s retry/auth
+        // handling: 3× backoff, rethrow GhAuthError, terminal on GraphQL errors[].
+        const mutation = 'mutation($id: ID!) { convertPullRequestToDraft(input: { pullRequestId: $id }) { pullRequest { id isDraft } } }';
+        const backoffs = [1000, 2000, 4000];
+        let lastError = null;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                const result = await this.executeGh([
+                    'api', 'graphql',
+                    '-f', `query=${mutation}`,
+                    '-F', `id=${pr.id}`,
+                ]);
+                if (result.exitCode !== 0) {
+                    lastError = new Error(`convertPullRequestToDraft mutation failed for PR #${prNumber}: ${result.stderr}`);
+                }
+                else {
+                    const parsed = parseJSONSafe(result.stdout);
+                    if (parsed?.errors && parsed.errors.length > 0) {
+                        const messages = parsed.errors.map(e => e.message ?? 'unknown').join('; ');
+                        throw new Error(`convertPullRequestToDraft returned GraphQL errors for PR #${prNumber}: ${messages}`);
+                    }
+                    return;
+                }
+            }
+            catch (err) {
+                if (err instanceof GhAuthError)
+                    throw err;
+                if (err instanceof Error &&
+                    err.message.startsWith('convertPullRequestToDraft returned GraphQL errors')) {
+                    throw err;
+                }
+                lastError = err instanceof Error ? err : new Error(String(err));
+            }
+            const backoff = backoffs[attempt];
+            if (backoff !== undefined) {
+                await new Promise(resolve => setTimeout(resolve, backoff));
+            }
+        }
+        throw lastError ?? new Error(`convertPullRequestToDraft failed for PR #${prNumber}`);
+    }
+    async listPullRequestFiles(owner, repo, prNumber) {
+        const result = await this.executeGh([
+            'api',
+            `/repos/${owner}/${repo}/pulls/${prNumber}/files?per_page=100`,
+            '--paginate',
+        ]);
+        if (result.exitCode !== 0) {
+            throw new Error(`Failed to list files for PR #${prNumber}: ${result.stderr}`);
+        }
+        const data = parseJSONSafe(result.stdout);
+        if (!data)
+            return [];
+        return data.map(f => {
+            const file = { filename: f.filename, status: f.status };
+            if (typeof f.patch === 'string')
+                file.patch = f.patch;
+            return file;
+        });
+    }
     async replyToPRComment(owner, repo, number, commentId, body) {
         const result = await this.executeGh([
             'api',
@@ -879,7 +1018,12 @@ export class GhCliGitHubClient {
     async getStatus() {
         const branchResult = await executeCommand('git', ['branch', '--show-current'], { cwd: this.workdir });
         const branch = branchResult.stdout.trim();
-        const statusResult = await executeCommand('git', ['status', '--porcelain'], { cwd: this.workdir });
+        // `--untracked-files=all`: report every untracked file individually. The
+        // default collapses a wholly-untracked directory into one `?? dir/` entry,
+        // which hides the files inside from path-based consumers (e.g. the
+        // orchestrator's engine-sidecar staging filter, #1162 — a bare `.generacy/`
+        // entry would be staged wholesale, committing every sidecar).
+        const statusResult = await executeCommand('git', ['status', '--porcelain', '--untracked-files=all'], { cwd: this.workdir });
         const lines = statusResult.stdout.split('\n').filter(l => l);
         const staged = [];
         const unstaged = [];
@@ -975,8 +1119,15 @@ export class GhCliGitHubClient {
             throw new Error(`Failed to stage all: ${result.stderr}`);
         }
     }
-    async commit(message) {
-        const result = await executeCommand('git', ['commit', '-m', message], { cwd: this.workdir });
+    async commit(message, pathspec) {
+        // With an explicit pathspec, `git commit -m <msg> -- <paths>` records only
+        // those paths and disregards anything else staged in the index (#1162) —
+        // the caller must have already staged untracked members of `pathspec`.
+        // Without it, the whole index is committed (legacy behavior).
+        const args = pathspec && pathspec.length > 0
+            ? ['commit', '-m', message, '--', ...pathspec]
+            : ['commit', '-m', message];
+        const result = await executeCommand('git', args, { cwd: this.workdir });
         if (result.exitCode !== 0) {
             throw new Error(`Failed to commit: ${result.stderr}`);
         }
@@ -1089,6 +1240,23 @@ export class GhCliGitHubClient {
         }
         return { success: true, conflicts: false };
     }
+    async discardWorkingTreeChanges(excludePaths = []) {
+        // Revert tracked modifications (staged + unstaged) to HEAD.
+        const reset = await executeCommand('git', ['reset', '--hard', 'HEAD'], { cwd: this.workdir });
+        if (reset.exitCode !== 0) {
+            throw new Error(`Failed to reset working tree: ${reset.stderr}`);
+        }
+        // Remove untracked files/directories left behind by the abandoned work.
+        // `-e <pattern>` keeps caller-owned untracked state (e.g. `.generacy/`).
+        const cleanArgs = ['clean', '-fd'];
+        for (const pattern of excludePaths) {
+            cleanArgs.push('-e', pattern);
+        }
+        const clean = await executeCommand('git', cleanArgs, { cwd: this.workdir });
+        if (clean.exitCode !== 0) {
+            throw new Error(`Failed to clean working tree: ${clean.stderr}`);
+        }
+    }
     async getConflictedFiles() {
         const result = await executeCommand('git', ['diff', '--name-only', '--diff-filter=U'], { cwd: this.workdir });
         return result.stdout.split('\n').filter(f => f);
@@ -1132,6 +1300,44 @@ export class GhCliGitHubClient {
         }
         return result.stdout.split('\n').filter(Boolean);
     }
+    async getCurrentCommitSha() {
+        const result = await executeCommand('git', [
+            'rev-parse', 'HEAD',
+        ], { cwd: this.workdir });
+        if (result.exitCode !== 0) {
+            throw new Error(`git rev-parse HEAD failed (exit ${result.exitCode}): ${result.stderr.trim()}`);
+        }
+        return result.stdout.trim();
+    }
+    async getFilesChangedByOwnCommits(startRef) {
+        const result = await executeCommand('git', [
+            'log', '--first-parent', '--no-merges', '--name-only', '--pretty=format:',
+            `${startRef}..HEAD`,
+        ], { cwd: this.workdir });
+        if (result.exitCode !== 0) {
+            throw new Error(`git log --first-parent --no-merges --name-only ${startRef}..HEAD failed ` +
+                `(exit ${result.exitCode}): ${result.stderr.trim()}`);
+        }
+        const seen = new Set();
+        for (const line of result.stdout.split('\n')) {
+            const path = line.trim();
+            if (path) {
+                seen.add(path);
+            }
+        }
+        return [...seen];
+    }
+    async commitExistsInCheckout(sha) {
+        const result = await executeCommand('git', [
+            'rev-parse', '--verify', '--quiet', `${sha}^{commit}`,
+        ], { cwd: this.workdir });
+        if (result.exitCode === 0)
+            return true;
+        if (result.exitCode === 1)
+            return false; // commit-missing (FR-003, Q4=B)
+        throw new Error(`git rev-parse --verify --quiet ${sha}^{commit} failed ` +
+            `(exit ${result.exitCode}): ${result.stderr.trim()}`);
+    }
     // ==========================================================================
     // Alias Methods (convenience wrappers)
     // ==========================================================================
@@ -1156,6 +1362,109 @@ export class GhCliGitHubClient {
         }
         return sha;
     }
+    /**
+     * Read CI runs for a commit SHA for merge-readiness aggregation (#1133).
+     *
+     * Primary: `gh api repos/{o}/{r}/commits/{sha}/check-runs` → source
+     * `check-runs`. On non-zero exit — including the `GhAuthError` (HTTP 401/403)
+     * that `executeGh` raises, which is the observed symptom of a token lacking
+     * `checks:read` (FR-002) — fall back to
+     * `gh api repos/{o}/{r}/actions/runs?branch={branch}` filtered client-side to
+     * the head SHA → source `actions-runs`.
+     *
+     * Both paths are paginated (`--paginate` + `per_page=100`): the check-runs
+     * endpoint caps at 30 results per page by default (same trap #1043 fixed for
+     * `listBranches`). Without pagination a head SHA with >30 checks would expose
+     * only page 1 to `aggregateCiVerdict`, so a failing or still-pending run past
+     * page 1 would be invisible and could yield a false `green` — the exact
+     * skipped≠passed safety hole this feature closes.
+     *
+     * Both paths normalize to `CiRun[]` consumable by `aggregateCiVerdict`
+     * unchanged (SC-004). Empty result → `{ runs: [], source }`. Non-zero exit on
+     * BOTH paths → throw with stderr (mirrors `getRefHeadSha`).
+     */
+    async getCiRunsForSha(owner, repo, headSha, branch) {
+        let primaryError = '';
+        try {
+            const primary = await this.executeGh([
+                'api',
+                '--paginate',
+                `repos/${owner}/${repo}/commits/${headSha}/check-runs?per_page=100`,
+                '--jq', '.check_runs[] | {status, conclusion}',
+            ]);
+            if (primary.exitCode === 0) {
+                return {
+                    runs: this.parseCiRunLines(primary.stdout),
+                    source: 'check-runs',
+                };
+            }
+            primaryError = `exit ${primary.exitCode}: ${primary.stderr.trim()}`;
+        }
+        catch (err) {
+            // executeGh throws GhAuthError on 401/403 — the checks:read-missing
+            // symptom. Treat it as a fallback trigger, not a fatal readout error.
+            primaryError = err instanceof Error ? err.message : String(err);
+        }
+        // #1157 FR-007: this fallback only enumerates GitHub-Actions `workflow_runs`
+        // for the branch (filtered client-side to the head SHA). It is BLIND to
+        // third-party required checks (external status contexts), so a `green`
+        // aggregated from these runs may be a false green. The primary path is used
+        // only when `check-runs` failed — the canonical symptom of a token lacking
+        // `checks:read`. To close the false-green hole, `evaluateCiReadiness`
+        // (packages/orchestrator/src/worker/ci-merge-readiness.ts) fails-closed:
+        // when `source === 'actions-runs'` a would-be `green` is downgraded to
+        // `not-passed`. Operator note: a `checks:read`-lacking cluster fails closed
+        // (CI merge readiness never reports green via this fallback); granting the
+        // token `checks:read` restores full third-party-check visibility via the
+        // primary `check-runs` path.
+        const fallback = await this.executeGh([
+            'api',
+            '--paginate',
+            `repos/${owner}/${repo}/actions/runs?branch=${branch}&per_page=100`,
+            '--jq', '.workflow_runs[] | {head_sha, status, conclusion}',
+        ]);
+        if (fallback.exitCode !== 0) {
+            throw new Error(`getCiRunsForSha ${owner}/${repo}@${headSha} failed on both paths ` +
+                `(check-runs ${primaryError}; ` +
+                `actions-runs exit ${fallback.exitCode}: ${fallback.stderr.trim()})`);
+        }
+        // The actions/runs jq keeps head_sha, so filter to the target SHA.
+        const filtered = [];
+        for (const line of fallback.stdout.split('\n')) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            const parsed = parseJSONSafe(trimmed);
+            if (!parsed || parsed.head_sha !== headSha)
+                continue;
+            filtered.push({
+                status: typeof parsed.status === 'string' ? parsed.status : '',
+                conclusion: (parsed.conclusion ?? null),
+            });
+        }
+        return { runs: filtered, source: 'actions-runs' };
+    }
+    /**
+     * Parse newline-delimited `{status, conclusion}` JSON objects (jq stream
+     * output) into `CiRun[]`. Blank lines and unparseable lines are skipped.
+     * Unknown `conclusion` values are passed through as-is.
+     */
+    parseCiRunLines(stdout) {
+        const runs = [];
+        for (const line of stdout.split('\n')) {
+            const trimmed = line.trim();
+            if (!trimmed)
+                continue;
+            const parsed = parseJSONSafe(trimmed);
+            if (!parsed)
+                continue;
+            runs.push({
+                status: typeof parsed.status === 'string' ? parsed.status : '',
+                conclusion: (parsed.conclusion ?? null),
+            });
+        }
+        return runs;
+    }
     /**
      * List file names touched by a PR (`gh pr diff --name-only`, #892).
      * Non-zero exit → throw with stderr for visibility.