@h-rig/pr-review-plugin 0.0.6-alpha.157 → 0.0.6-alpha.158

package/dist/src/index.js

@@ -2,8 +2,8 @@
 // packages/pr-review-plugin/src/pr-review-gate.ts
 import { mkdirSync, writeFileSync } from "fs";
 import { resolve } from "path";
-import { safePathSegment } from "@rig/shared/safe-identifiers";
-import { resolveRuntimeSecrets } from "@rig/runtime/control-plane/runtime/baked-secrets";
+import { safePathSegment } from "@rig/core/safe-identifiers";
+import { resolveRuntimeSecrets } from "@rig/core/baked-secrets";
 function parseJsonObject(value) {
   if (!value?.trim())
     return { value: {}, error: "empty JSON output" };
@@ -1385,7 +1385,7 @@ function persistPrReviewCycleArtifacts(input) {
 async function runStrictPrMergeGate(input) {
   const evidence = await collectPrReviewEvidence(input);
   const base = evaluateStrictPrMergeGate(evidence, input.requireGreptile !== false);
-  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base, artifacts: undefined });
+  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base });
   const artifacts = persistPrReviewCycleArtifacts({
     projectRoot: input.projectRoot,
     taskId: input.taskId,
@@ -1399,8 +1399,33 @@ async function runStrictPrMergeGate(input) {
   writeFileSync(artifacts.steeringPromptPath, steeringPrompt, "utf8");
   return { ...base, artifacts, steeringPrompt };
 }
+function strictMergeHeadShaFromGate(result, prUrl, requireGreptile = false) {
+  if (!result.approved) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate is not approved.`);
+  }
+  if (result.evidence.prUrl !== prUrl) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate evidence belongs to ${result.evidence.prUrl}.`);
+  }
+  const headSha = result.evidence.headSha?.trim();
+  if (!headSha) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate did not provide a current head SHA.`);
+  }
+  if (!/^[0-9a-f]{40}$/i.test(headSha)) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate head is not a raw 40-character commit SHA.`);
+  }
+  if (requireGreptile) {
+    if (!result.evidence.greptile.fresh || result.evidence.greptile.currentHeadSha !== headSha) {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate approval is not tied to head ${headSha}.`);
+    }
+    if (result.evidence.greptile.mapping !== "score-5-of-5" && result.evidence.greptile.mapping !== "explicit-approved") {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate mapping is ${result.evidence.greptile.mapping}.`);
+    }
+  }
+  return headSha;
+}
 export {
   stripHtml,
+  strictMergeHeadShaFromGate,
   runStrictPrMergeGate,
   persistPrReviewCycleArtifacts,
   parseGreptileScore,

package/dist/src/plugin.js

@@ -1,12 +1,39 @@
 // @bun
-// packages/pr-review-plugin/src/plugin.ts
-import { definePlugin } from "@rig/core/config";
+var __defProp = Object.defineProperty;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // packages/pr-review-plugin/src/pr-review-gate.ts
+var exports_pr_review_gate = {};
+__export(exports_pr_review_gate, {
+  stripHtml: () => stripHtml,
+  strictMergeHeadShaFromGate: () => strictMergeHeadShaFromGate,
+  runStrictPrMergeGate: () => runStrictPrMergeGate,
+  persistPrReviewCycleArtifacts: () => persistPrReviewCycleArtifacts,
+  parseGreptileScore: () => parseGreptileScore,
+  parseGithubPrUrl: () => parseGithubPrUrl,
+  isGreptileGithubLogin: () => isGreptileGithubLogin,
+  evaluateStrictPrMergeGate: () => evaluateStrictPrMergeGate,
+  deriveGreptileEvidence: () => deriveGreptileEvidence,
+  collectPrReviewEvidence: () => collectPrReviewEvidence,
+  buildStrictPrGateSteeringPrompt: () => buildStrictPrGateSteeringPrompt
+});
 import { mkdirSync, writeFileSync } from "fs";
 import { resolve } from "path";
-import { safePathSegment } from "@rig/shared/safe-identifiers";
-import { resolveRuntimeSecrets } from "@rig/runtime/control-plane/runtime/baked-secrets";
+import { safePathSegment } from "@rig/core/safe-identifiers";
+import { resolveRuntimeSecrets } from "@rig/core/baked-secrets";
 function parseJsonObject(value) {
   if (!value?.trim())
     return { value: {}, error: "empty JSON output" };
@@ -1388,7 +1415,7 @@ function persistPrReviewCycleArtifacts(input) {
 async function runStrictPrMergeGate(input) {
   const evidence = await collectPrReviewEvidence(input);
   const base = evaluateStrictPrMergeGate(evidence, input.requireGreptile !== false);
-  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base, artifacts: undefined });
+  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base });
   const artifacts = persistPrReviewCycleArtifacts({
     projectRoot: input.projectRoot,
     taskId: input.taskId,
@@ -1402,9 +1429,52 @@ async function runStrictPrMergeGate(input) {
   writeFileSync(artifacts.steeringPromptPath, steeringPrompt, "utf8");
   return { ...base, artifacts, steeringPrompt };
 }
+function strictMergeHeadShaFromGate(result, prUrl, requireGreptile = false) {
+  if (!result.approved) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate is not approved.`);
+  }
+  if (result.evidence.prUrl !== prUrl) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate evidence belongs to ${result.evidence.prUrl}.`);
+  }
+  const headSha = result.evidence.headSha?.trim();
+  if (!headSha) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate did not provide a current head SHA.`);
+  }
+  if (!/^[0-9a-f]{40}$/i.test(headSha)) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate head is not a raw 40-character commit SHA.`);
+  }
+  if (requireGreptile) {
+    if (!result.evidence.greptile.fresh || result.evidence.greptile.currentHeadSha !== headSha) {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate approval is not tied to head ${headSha}.`);
+    }
+    if (result.evidence.greptile.mapping !== "score-5-of-5" && result.evidence.greptile.mapping !== "explicit-approved") {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate mapping is ${result.evidence.greptile.mapping}.`);
+    }
+  }
+  return headSha;
+}
+var init_pr_review_gate = () => {};
 
 // packages/pr-review-plugin/src/plugin.ts
+init_pr_review_gate();
+import { definePlugin } from "@rig/core/config";
+import { defineCapability } from "@rig/core/capability";
+import { PR_MERGE_GATE } from "@rig/contracts";
 var PR_REVIEW_PLUGIN_ID = "@rig/pr-review-plugin";
+var PrMergeGateCap = defineCapability(PR_MERGE_GATE);
+function createPrMergeGateService() {
+  return async () => {
+    const gate = await Promise.resolve().then(() => (init_pr_review_gate(), exports_pr_review_gate));
+    return {
+      resolveHeadSha: ({ result, prUrl, requireGreptile }) => gate.strictMergeHeadShaFromGate(result, prUrl, requireGreptile),
+      runGate: (input) => gate.runStrictPrMergeGate(input),
+      collectEvidence: (input) => gate.collectPrReviewEvidence(input),
+      evaluateGate: (evidence, requireGreptile) => gate.evaluateStrictPrMergeGate(evidence, requireGreptile),
+      parseGreptileScore: (input) => gate.parseGreptileScore(input),
+      stripHtml: (input) => gate.stripHtml(input)
+    };
+  };
+}
 function createPrReviewPlugin() {
   return definePlugin({
     name: PR_REVIEW_PLUGIN_ID,
@@ -1412,8 +1482,14 @@ function createPrReviewPlugin() {
     provides: [],
     contributes: {
       capabilities: [
-        { id: "pr-review.strict-merge-gate", title: "Strict PR review / merge gate" }
-      ]
+        { id: "pr-review.strict-merge-gate", title: "Strict PR review / merge gate" },
+        PrMergeGateCap.provide(createPrMergeGateService(), { title: "PR merge-gate service" })
+      ],
+      config: {
+        defaults: () => ({
+          pr: { mode: "auto", watchChecks: true, autoFixChecks: true, autoFixReview: true }
+        })
+      }
     }
   });
 }
@@ -1421,6 +1497,7 @@ var prReviewPlugin = createPrReviewPlugin();
 var plugin_default = prReviewPlugin;
 export {
   stripHtml,
+  strictMergeHeadShaFromGate,
   runStrictPrMergeGate,
   prReviewPlugin,
   persistPrReviewCycleArtifacts,

package/dist/src/pr-review-gate.d.ts

@@ -31,9 +31,10 @@ export declare function persistPrReviewCycleArtifacts(input: {
     readonly projectRoot: string;
     readonly taskId: string;
     readonly cycle: number;
-    readonly artifactRoot?: string | null;
+    readonly artifactRoot?: string | null | undefined;
     readonly result: Omit<StrictPrMergeGateResult, "artifacts" | "steeringPrompt">;
     readonly steeringPrompt: string;
-    readonly final?: boolean;
+    readonly final?: boolean | undefined;
 }): PrReviewCycleArtifacts;
 export declare function runStrictPrMergeGate(input: StrictPrMergeGateInput): Promise<StrictPrMergeGateResult>;
+export declare function strictMergeHeadShaFromGate(result: StrictPrMergeGateResult, prUrl: string, requireGreptile?: boolean): string;

package/dist/src/pr-review-gate.js

@@ -2,8 +2,8 @@
 // packages/pr-review-plugin/src/pr-review-gate.ts
 import { mkdirSync, writeFileSync } from "fs";
 import { resolve } from "path";
-import { safePathSegment } from "@rig/shared/safe-identifiers";
-import { resolveRuntimeSecrets } from "@rig/runtime/control-plane/runtime/baked-secrets";
+import { safePathSegment } from "@rig/core/safe-identifiers";
+import { resolveRuntimeSecrets } from "@rig/core/baked-secrets";
 function parseJsonObject(value) {
   if (!value?.trim())
     return { value: {}, error: "empty JSON output" };
@@ -1385,7 +1385,7 @@ function persistPrReviewCycleArtifacts(input) {
 async function runStrictPrMergeGate(input) {
   const evidence = await collectPrReviewEvidence(input);
   const base = evaluateStrictPrMergeGate(evidence, input.requireGreptile !== false);
-  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base, artifacts: undefined });
+  const preliminaryPrompt = buildStrictPrGateSteeringPrompt({ ...base });
   const artifacts = persistPrReviewCycleArtifacts({
     projectRoot: input.projectRoot,
     taskId: input.taskId,
@@ -1399,8 +1399,33 @@ async function runStrictPrMergeGate(input) {
   writeFileSync(artifacts.steeringPromptPath, steeringPrompt, "utf8");
   return { ...base, artifacts, steeringPrompt };
 }
+function strictMergeHeadShaFromGate(result, prUrl, requireGreptile = false) {
+  if (!result.approved) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate is not approved.`);
+  }
+  if (result.evidence.prUrl !== prUrl) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate evidence belongs to ${result.evidence.prUrl}.`);
+  }
+  const headSha = result.evidence.headSha?.trim();
+  if (!headSha) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate did not provide a current head SHA.`);
+  }
+  if (!/^[0-9a-f]{40}$/i.test(headSha)) {
+    throw new Error(`Refusing to merge ${prUrl}: strict merge gate head is not a raw 40-character commit SHA.`);
+  }
+  if (requireGreptile) {
+    if (!result.evidence.greptile.fresh || result.evidence.greptile.currentHeadSha !== headSha) {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate approval is not tied to head ${headSha}.`);
+    }
+    if (result.evidence.greptile.mapping !== "score-5-of-5" && result.evidence.greptile.mapping !== "explicit-approved") {
+      throw new Error(`Refusing to merge ${prUrl}: strict merge gate mapping is ${result.evidence.greptile.mapping}.`);
+    }
+  }
+  return headSha;
+}
 export {
   stripHtml,
+  strictMergeHeadShaFromGate,
   runStrictPrMergeGate,
   persistPrReviewCycleArtifacts,
   parseGreptileScore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/pr-review-plugin",
-  "version": "0.0.6-alpha.157",
+  "version": "0.0.6-alpha.158",
   "type": "module",
   "description": "Swappable strict PR review / merge-gate policy capability plugin for Rig.",
   "license": "UNLICENSED",
@@ -25,9 +25,7 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.157",
-    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.157",
-    "@rig/runtime": "npm:@h-rig/runtime@0.0.6-alpha.157",
-    "@rig/shared": "npm:@h-rig/shared@0.0.6-alpha.157"
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.158",
+    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.158"
   }
 }