@mclawnet/swarm 0.1.13 → 0.1.15

package/dist/shipment/secret-scrub.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Regex-based scrubber for common secret patterns. Applied to:
+ *   - the diff/patch text sent to the LLM
+ *   - the LLM's returned title/summary (LLM could re-emit a leaked secret)
+ *   - the rendered report.md (which becomes the PR body)
+ *
+ * v1 is intentionally conservative: high-confidence patterns only. Real
+ * secret detection (entropy, false-positive suppression) is out of scope.
+ * Manual review is still required — the report disclaimer makes this explicit.
+ */
+export declare function scrubSecrets(input: string): string;
+//# sourceMappingURL=secret-scrub.d.ts.map

package/dist/shipment/secret-scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scrub.d.ts","sourceRoot":"","sources":["../../src/shipment/secret-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAcH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKlD"}

package/dist/shipment/secret-scrub.js

@@ -0,0 +1,30 @@
+/**
+ * Regex-based scrubber for common secret patterns. Applied to:
+ *   - the diff/patch text sent to the LLM
+ *   - the LLM's returned title/summary (LLM could re-emit a leaked secret)
+ *   - the rendered report.md (which becomes the PR body)
+ *
+ * v1 is intentionally conservative: high-confidence patterns only. Real
+ * secret detection (entropy, false-positive suppression) is out of scope.
+ * Manual review is still required — the report disclaimer makes this explicit.
+ */
+const PATTERNS = [
+    { name: "github-token", re: /gh[pousr]_[A-Za-z0-9]{36,}/g, replace: "[REDACTED-github-token]" },
+    { name: "slack-token", re: /xox[baprs]-[A-Za-z0-9-]{10,}/g, replace: "[REDACTED-slack-token]" },
+    { name: "openai-key", re: /sk-[A-Za-z0-9]{20,}/g, replace: "[REDACTED-openai-key]" },
+    { name: "aws-akia", re: /AKIA[0-9A-Z]{16}/g, replace: "[REDACTED-aws-akia]" },
+    {
+        name: "kv-assign",
+        re: /\b(KEY|TOKEN|SECRET|PASSWORD|PASSWD|API[_-]?KEY)\b\s*[=:]\s*["']?([A-Za-z0-9+/=_.-]{8,})["']?/gi,
+        replace: "$1=[REDACTED]",
+    },
+];
+export function scrubSecrets(input) {
+    if (!input)
+        return input;
+    let out = input;
+    for (const p of PATTERNS)
+        out = out.replace(p.re, p.replace);
+    return out;
+}
+//# sourceMappingURL=secret-scrub.js.map

package/dist/shipment/secret-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scrub.js","sourceRoot":"","sources":["../../src/shipment/secret-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,QAAQ,GAAyD;IACrE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,6BAA6B,EAAE,OAAO,EAAE,yBAAyB,EAAE;IAC/F,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,+BAA+B,EAAE,OAAO,EAAE,wBAAwB,EAAE;IAC/F,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,uBAAuB,EAAE;IACpF,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,qBAAqB,EAAE;IAC7E;QACE,IAAI,EAAE,WAAW;QACjB,EAAE,EAAE,iGAAiG;QACrG,OAAO,EAAE,eAAe;KACzB;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shipment/shipment-actions.d.ts

@@ -0,0 +1,85 @@
+import type { CommandRunner } from "./transport-detect.js";
+/**
+ * M6.2.3 — Shipment action handlers (Merge / Apply / Discard).
+ *
+ * Design (see docs/plans/2026-06-05-m6-2-ui-design.md §D5):
+ *   - **Merge**: PURELY record-keeping. We do NOT call `gh pr merge` (Q1=A).
+ *     User performs the merge on GitHub; we stamp `mergedAt` on shipment.json
+ *     so the UI can render "merged on …" without re-asking.
+ *   - **Apply**: `git -B clawnet-applied/<swarmId>` from the user's current
+ *     HEAD on the project repo, then `git apply <diffPath>`. No auto-commit
+ *     — user reviews/stages/commits themselves.
+ *   - **Discard**: tear down the worktree (force) + delete the dedicated
+ *     branch + remove shipment.json. UI is responsible for the double-confirm
+ *     (Q2=A); by the time we're here the user has already opted in.
+ *
+ * All three are stateless w.r.t. `SwarmCoordinator` — they operate purely on
+ * the persisted `shipment.json` + `recovery.json` snapshots so they keep
+ * working after the live swarm has been GC'd.
+ */
+export type ShipmentActionKind = "merge" | "apply" | "discard";
+export interface ShipmentActionInput {
+    workDir: string;
+    swarmId: string;
+    /**
+     * Optional override for the workspace root used by `apply` and `discard`.
+     * Falls back to `loadSwarmSnapshot(...).workspace.metadata.repoRoot` (apply
+     * needs to checkout in the *parent* repo, not the worktree dir).
+     */
+    workspaceRepoRoot?: string;
+    /**
+     * Optional override for the worktree cwd (used by `discard` for
+     * `git worktree remove`). Falls back to snapshot.
+     */
+    workspaceCwd?: string;
+    /** Override for shipment.branchName (used by `discard`). */
+    branchName?: string;
+    /** Override for shipment.diffPath (used by `apply`). */
+    diffPath?: string;
+    /**
+     * Apply-only: bypass the "dirty working tree" and "branch already exists"
+     * safety checks. Default `false`. The hub plumbs this through from a
+     * `force=true` request param so a future UX layer (planned for M7) can
+     * surface a second confirmation before clobbering.
+     */
+    force?: boolean;
+    /** Test injection — git runner. Defaults to a spawn-based runner. */
+    runner?: CommandRunner;
+}
+export interface ShipmentActionResult {
+    ok: boolean;
+    message?: string;
+    /** Populated by `apply` on success — the branch the diff was applied onto. */
+    newBranchName?: string;
+    error?: string;
+}
+/**
+ * Apply: create a fresh `clawnet-applied/<swarmId>` branch in the project
+ * repo (not the worktree) and `git apply` the saved diff onto it. No commit
+ * is made — the user reviews + commits themselves.
+ *
+ * Uses `git checkout -B` so re-running apply doesn't leave a half-merged
+ * state behind; the branch is treated as ephemeral until the user commits.
+ */
+export declare function applyShipment(input: ShipmentActionInput): Promise<ShipmentActionResult>;
+/**
+ * Merge: record-only. We *don't* call `gh pr merge` — branch protection +
+ * token surface area + merge-strategy complexity make it unsafe to attempt
+ * server-side. Instead we stamp `mergedAt` on shipment.json so the UI can
+ * render "Merged on …" and stop showing the action button.
+ */
+export declare function mergeShipment(input: ShipmentActionInput): Promise<ShipmentActionResult>;
+/**
+ * Discard: tear down the worktree, force-delete the branch, and remove
+ * shipment.json so the UI stops surfacing the action row.
+ *
+ * Each step is best-effort — a missing worktree (already disposed) or branch
+ * (never created) is treated as a no-op, not a hard failure. Only the
+ * shipment.json removal is strictly required for the UI to consider this
+ * "done"; failure there surfaces as `ok: false`.
+ *
+ * UI is responsible for double-confirming with the user before calling this
+ * (per Q2=A) — by this point we assume the user knows what they're losing.
+ */
+export declare function discardShipment(input: ShipmentActionInput): Promise<ShipmentActionResult>;
+//# sourceMappingURL=shipment-actions.d.ts.map

package/dist/shipment/shipment-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipment-actions.d.ts","sourceRoot":"","sources":["../../src/shipment/shipment-actions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAK3D;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwDD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAuE/B;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CA4D/B"}

package/dist/shipment/shipment-actions.js

@@ -0,0 +1,190 @@
+import { existsSync, unlinkSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { projectRoot } from "@mclawnet/task";
+import { createLogger } from "@mclawnet/logger";
+import { loadShipmentResult, loadSwarmSnapshot, saveShipmentResult } from "../persistence.js";
+const log = createLogger({ module: "swarm/shipment/actions" });
+function getHome() {
+    return process.env.CLAWNET_HOME ?? homedir();
+}
+/** Default spawn-based git runner. Mirrors the one in shipment-pipeline. */
+const defaultRunner = async (cmd, args, cwd) => {
+    const { spawn } = await import("node:child_process");
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            cwd,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (c) => (stdout += c.toString("utf-8")));
+        child.stderr?.on("data", (c) => (stderr += c.toString("utf-8")));
+        child.on("error", (e) => resolve({ exitCode: -1, stdout, stderr: e.message }));
+        child.on("close", (code) => resolve({ exitCode: code ?? -1, stdout, stderr }));
+    });
+};
+/**
+ * Resolve workspace metadata for an action. Three lookup paths:
+ *   1. Caller-supplied overrides (`workspaceRepoRoot` / `workspaceCwd` /
+ *      `branchName` / `diffPath`) — wins because the caller may already have
+ *      the live SwarmInstance and we don't want to round-trip the disk.
+ *   2. `recovery.json` workspace block — present while the swarm hasn't been
+ *      destroyed.
+ *   3. `shipment.json` `branchName` / `diffPath` — survives `runRetroAndCleanup`.
+ *
+ * We deliberately load *both* recovery and shipment because they answer
+ * different questions: shipment has the diff path + applied-branch label
+ * after teardown, but only recovery still knows where the worktree lived on
+ * disk for `discard`.
+ */
+function resolveContext(input) {
+    const shipment = loadShipmentResult(input.workDir, input.swarmId);
+    const snap = loadSwarmSnapshot(input.workDir, input.swarmId);
+    const ws = snap?.workspace;
+    return {
+        shipment,
+        workspaceRepoRoot: input.workspaceRepoRoot ?? ws?.metadata.repoRoot,
+        workspaceCwd: input.workspaceCwd ?? ws?.cwd,
+        branchName: input.branchName ?? shipment?.branchName ?? ws?.metadata.branchName,
+        diffPath: input.diffPath ?? shipment?.diffPath,
+    };
+}
+/**
+ * Apply: create a fresh `clawnet-applied/<swarmId>` branch in the project
+ * repo (not the worktree) and `git apply` the saved diff onto it. No commit
+ * is made — the user reviews + commits themselves.
+ *
+ * Uses `git checkout -B` so re-running apply doesn't leave a half-merged
+ * state behind; the branch is treated as ephemeral until the user commits.
+ */
+export async function applyShipment(input) {
+    const ctx = resolveContext(input);
+    if (!ctx.workspaceRepoRoot) {
+        return { ok: false, error: "no workspaceRepoRoot available (snapshot gone?)" };
+    }
+    if (!ctx.diffPath) {
+        return { ok: false, error: "no diffPath available (shipment strategy was not diff-only)" };
+    }
+    if (!existsSync(ctx.diffPath)) {
+        return { ok: false, error: `diff file not found on disk: ${ctx.diffPath}` };
+    }
+    const runner = input.runner ?? defaultRunner;
+    const newBranchName = `clawnet-applied/${input.swarmId}`;
+    // M6.2 hotfix I1: refuse to clobber unless `force` is set.
+    // (1) Dirty working tree → `git checkout -B` would carry the WIP onto the
+    //     new branch (the user wouldn't notice until commit time). (2) An
+    //     existing `clawnet-applied/<id>` branch may contain a previous apply +
+    //     manual fixups the user committed — `-B` resets it.
+    if (!input.force) {
+        const status = await runner("git", ["-C", ctx.workspaceRepoRoot, "status", "--porcelain"]);
+        if (status.exitCode === 0 && status.stdout.trim().length > 0) {
+            return {
+                ok: false,
+                error: "working tree has uncommitted changes; commit or stash before applying (or pass force)",
+            };
+        }
+        const branchProbe = await runner("git", ["-C", ctx.workspaceRepoRoot, "rev-parse", "--verify", newBranchName]);
+        if (branchProbe.exitCode === 0) {
+            return {
+                ok: false,
+                error: `branch ${newBranchName} already exists; pass force to clobber`,
+            };
+        }
+    }
+    const checkout = await runner("git", ["-C", ctx.workspaceRepoRoot, "checkout", "-B", newBranchName]);
+    if (checkout.exitCode !== 0) {
+        return {
+            ok: false,
+            error: `git checkout failed: ${checkout.stderr.trim() || checkout.stdout.trim()}`,
+        };
+    }
+    const apply = await runner("git", ["-C", ctx.workspaceRepoRoot, "apply", ctx.diffPath]);
+    if (apply.exitCode !== 0) {
+        return {
+            ok: false,
+            error: `git apply failed: ${apply.stderr.trim() || apply.stdout.trim()}`,
+        };
+    }
+    log.info({ swarmId: input.swarmId, repoRoot: ctx.workspaceRepoRoot, newBranchName }, "shipment-actions: applied diff to new branch");
+    return {
+        ok: true,
+        newBranchName,
+        message: `applied diff to branch ${newBranchName}`,
+    };
+}
+/**
+ * Merge: record-only. We *don't* call `gh pr merge` — branch protection +
+ * token surface area + merge-strategy complexity make it unsafe to attempt
+ * server-side. Instead we stamp `mergedAt` on shipment.json so the UI can
+ * render "Merged on …" and stop showing the action button.
+ */
+export async function mergeShipment(input) {
+    const ctx = resolveContext(input);
+    if (!ctx.shipment) {
+        return { ok: false, error: "no shipment.json found" };
+    }
+    if (ctx.shipment.strategy !== "pr" || !ctx.shipment.prUrl) {
+        return { ok: false, error: "merge requires strategy=pr with prUrl" };
+    }
+    const updated = {
+        ...ctx.shipment,
+        mergedAt: new Date().toISOString(),
+    };
+    saveShipmentResult(input.workDir, input.swarmId, updated);
+    log.info({ swarmId: input.swarmId, prUrl: ctx.shipment.prUrl }, "shipment-actions: recorded merge");
+    return { ok: true, message: "marked as merged" };
+}
+/**
+ * Discard: tear down the worktree, force-delete the branch, and remove
+ * shipment.json so the UI stops surfacing the action row.
+ *
+ * Each step is best-effort — a missing worktree (already disposed) or branch
+ * (never created) is treated as a no-op, not a hard failure. Only the
+ * shipment.json removal is strictly required for the UI to consider this
+ * "done"; failure there surfaces as `ok: false`.
+ *
+ * UI is responsible for double-confirming with the user before calling this
+ * (per Q2=A) — by this point we assume the user knows what they're losing.
+ */
+export async function discardShipment(input) {
+    const ctx = resolveContext(input);
+    const runner = input.runner ?? defaultRunner;
+    const warnings = [];
+    if (ctx.workspaceRepoRoot && ctx.workspaceCwd) {
+        const wt = await runner("git", ["-C", ctx.workspaceRepoRoot, "worktree", "remove", "--force", ctx.workspaceCwd]);
+        if (wt.exitCode !== 0) {
+            // Worktree may already be gone (e.g. runRetroAndCleanup ran). Log + continue.
+            warnings.push(`worktree remove: ${wt.stderr.trim() || wt.stdout.trim()}`);
+            log.warn({ swarmId: input.swarmId, stderr: wt.stderr }, "shipment-actions: worktree remove failed (continuing)");
+        }
+    }
+    if (ctx.workspaceRepoRoot && ctx.branchName) {
+        const br = await runner("git", ["-C", ctx.workspaceRepoRoot, "branch", "-D", ctx.branchName]);
+        if (br.exitCode !== 0) {
+            warnings.push(`branch -D: ${br.stderr.trim() || br.stdout.trim()}`);
+            log.warn({ swarmId: input.swarmId, stderr: br.stderr }, "shipment-actions: branch delete failed (continuing)");
+        }
+    }
+    // Delete shipment.json — UI uses presence/absence of shipment to decide
+    // whether to render the WorkspaceBlock action row at all, so this is the
+    // observable signal that "discard happened".
+    const shipmentPath = join(projectRoot(input.workDir, getHome()), "swarms", input.swarmId, "shipment.json");
+    if (existsSync(shipmentPath)) {
+        try {
+            unlinkSync(shipmentPath);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                error: `failed to delete shipment.json: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+    }
+    log.info({ swarmId: input.swarmId, warnings }, "shipment-actions: discarded shipment");
+    return {
+        ok: true,
+        message: warnings.length > 0 ? `discarded (warnings: ${warnings.join("; ")})` : "discarded",
+    };
+}
+//# sourceMappingURL=shipment-actions.js.map

package/dist/shipment/shipment-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipment-actions.js","sourceRoot":"","sources":["../../src/shipment/shipment-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI9F,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;AA4D/D,SAAS,OAAO;IACd,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,4EAA4E;AAC5E,MAAM,aAAa,GAAkB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,SAAS,cAAc,CAAC,KAA0B;IAOhD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,CAAC;IAC3B,OAAO;QACL,QAAQ;QACR,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,EAAE,EAAE,QAAQ,CAAC,QAAQ;QACnE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,GAAG;QAC3C,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,QAAQ,CAAC,UAAU;QAC/E,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE,QAAQ;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA0B;IAE1B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6DAA6D,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;IAC7C,MAAM,aAAa,GAAG,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC;IAEzD,2DAA2D;IAC3D,0EAA0E;IAC1E,sEAAsE;IACtE,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,aAAa,CAAC,CACvD,CAAC;QACF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,uFAAuF;aAC/F,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,MAAM,CAC9B,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,CAAC,CACtE,CAAC;QACF,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,aAAa,wCAAwC;aACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC,CAC/D,CAAC;IACF,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,wBAAwB,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;SAClF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CACxB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CACrD,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,qBAAqB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;SACzE,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,iBAAiB,EAAE,aAAa,EAAE,EAC1E,8CAA8C,CAC/C,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,aAAa;QACb,OAAO,EAAE,0BAA0B,aAAa,EAAE;KACnD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA0B;IAE1B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAmB;QAC9B,GAAG,GAAG,CAAC,QAAQ;QACf,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1D,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EACrD,kCAAkC,CACnC,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA0B;IAE1B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,MAAM,CACrB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CACjF,CAAC;QACF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACtB,8EAA8E;YAC9E,QAAQ,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAC7C,uDAAuD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,MAAM,CACrB,KAAK,EACL,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAC9D,CAAC;QACF,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAC7C,qDAAqD,CACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,6CAA6C;IAC7C,MAAM,YAAY,GAAG,IAAI,CACvB,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EACrC,QAAQ,EACR,KAAK,CAAC,OAAO,EACb,eAAe,CAChB,CAAC;IACF,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,UAAU,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CACN,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,EACpC,sCAAsC,CACvC,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW;KAC5F,CAAC;AACJ,CAAC"}

package/dist/shipment/shipment-pipeline.d.ts

@@ -0,0 +1,48 @@
+import type { SwarmInstance } from "../types.js";
+import { type CommandRunnerWithStdin } from "./gh-pr-creator.js";
+export interface ShipmentInput {
+    swarm: SwarmInstance;
+    /** Optional LLM caller for title/summary generation. Falls back to swarmId/diffStat if absent. */
+    generateText?: (prompt: string) => Promise<string>;
+    /**
+     * Test injection: command runner for git/gh/cp commands. Supports stdin so
+     * `gh pr create --body-file -` receives the rendered report body.
+     * For backwards compatibility, runners that only accept (cmd, args) or
+     * (cmd, args, cwd) work for non-stdin commands.
+     */
+    runner?: CommandRunnerWithStdin;
+    /** Test injection: file writer (for fallback diff.patch + report.md). */
+    writeFile?: (path: string, contents: string) => Promise<void>;
+}
+export interface ShipmentResult {
+    strategy: "pr" | "diff-only" | "skipped";
+    /** ISO timestamp when shipment ran. M6.2 UI uses this for display. */
+    createdAt: string;
+    /** PR title (LLM-generated or fallback). M6.2 UI surface. */
+    title?: string;
+    /** PR summary (first ~200 chars; full version lives in report.md). M6.2 UI surface. */
+    summary?: string;
+    prUrl?: string;
+    branchName?: string;
+    diffPath?: string;
+    reportPath?: string;
+    /** Populated when strategy=diff-only because a PR attempt failed; carries the gh error. */
+    prAttemptError?: string;
+    error?: string;
+    /**
+     * ISO timestamp stamped by `mergeShipment()` when the user marks the PR as
+     * merged. Lives on the on-disk JSON; M6.3's history view surfaces it as the
+     * "Merged" filter. Optional because most shipments are never marked merged
+     * and pre-M6.2.3 shipment.json files don't have the field at all.
+     */
+    mergedAt?: string;
+}
+/**
+ * Stdin-aware default runner. When `opts.stdin` is set, opens a stdin pipe so
+ * `gh pr create --body-file -` can read the rendered report body. Mirrors
+ * gh-pr-creator's own defaultRunner so production wiring actually delivers
+ * stdin to subprocesses.
+ */
+export declare const defaultRunnerWithStdin: CommandRunnerWithStdin;
+export declare function runShipment(input: ShipmentInput): Promise<ShipmentResult>;
+//# sourceMappingURL=shipment-pipeline.d.ts.map

package/dist/shipment/shipment-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipment-pipeline.d.ts","sourceRoot":"","sources":["../../src/shipment/shipment-pipeline.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjD,OAAO,EAAiB,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AA+BhF,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,kGAAkG;IAClG,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,yEAAyE;IACzE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,SAAS,CAAC;IACzC,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AAKH,eAAO,MAAM,sBAAsB,EAAE,sBAwBpC,CAAC;AAEF,wBAAsB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CA8L/E"}

package/dist/shipment/shipment-pipeline.js

@@ -0,0 +1,256 @@
+import { writeFile as fsWriteFile } from "node:fs/promises";
+import { join } from "node:path";
+import { createLogger } from "@mclawnet/logger";
+import { computeWorkspaceDiff } from "./workspace-diff.js";
+import { renderReport } from "./report.js";
+import { detectTransport } from "./transport-detect.js";
+import { createDraftPR } from "./gh-pr-creator.js";
+import { scrubSecrets } from "./secret-scrub.js";
+const log = createLogger({ module: "swarm/shipment/pipeline" });
+/**
+ * Auto-commit identity. Surfaces in `git log`/`git blame` so reviewers can
+ * distinguish swarm-generated commits from human work without inspecting
+ * the message body.
+ */
+const COMMIT_AUTHOR_NAME = "ClawNet Swarm";
+const COMMIT_AUTHOR_EMAIL = "swarm@clawnet.local";
+/** GitHub caps PR bodies near 65KB. 60KB leaves headroom for trailing markers. */
+const MAX_PR_BODY = 60_000;
+function commitArgs(message, extra = []) {
+    return [
+        "-c",
+        `user.name=${COMMIT_AUTHOR_NAME}`,
+        "-c",
+        `user.email=${COMMIT_AUTHOR_EMAIL}`,
+        "commit",
+        "--author",
+        `${COMMIT_AUTHOR_NAME} <${COMMIT_AUTHOR_EMAIL}>`,
+        ...extra,
+        "-m",
+        message,
+    ];
+}
+/**
+ * Stdin-aware default runner. When `opts.stdin` is set, opens a stdin pipe so
+ * `gh pr create --body-file -` can read the rendered report body. Mirrors
+ * gh-pr-creator's own defaultRunner so production wiring actually delivers
+ * stdin to subprocesses.
+ */
+// Exported (not `const` private) so the EPIPE regression suite can pin the
+// stdin error-listener behavior against the real runner instead of an inline
+// copy. Default-runner overrides for tests still flow through
+// `ShipmentInput.runner`; only the test layer touches this export directly.
+export const defaultRunnerWithStdin = async (cmd, args, opts) => {
+    const { spawn } = await import("node:child_process");
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            cwd: opts.cwd,
+            stdio: [opts.stdin === undefined ? "ignore" : "pipe", "pipe", "pipe"],
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (c) => (stdout += c.toString("utf-8")));
+        child.stderr?.on("data", (c) => (stderr += c.toString("utf-8")));
+        child.on("error", (e) => resolve({ exitCode: -1, stdout, stderr: e.message }));
+        child.on("close", (code) => resolve({ exitCode: code ?? -1, stdout, stderr }));
+        if (opts.stdin !== undefined && child.stdin) {
+            // EPIPE safety (matches claude-process PR #181 pattern): if the child
+            // dies before we finish writing, stdin emits 'error' and — without a
+            // listener — Node crashes the agent process. Route to the same resolve
+            // path as spawn errors. Promise dedupes naturally so a later close()
+            // resolve() is a no-op.
+            child.stdin.on("error", (e) => resolve({ exitCode: -1, stdout, stderr: e.message }));
+            child.stdin.write(opts.stdin);
+            child.stdin.end();
+        }
+    });
+};
+export async function runShipment(input) {
+    const createdAt = new Date().toISOString();
+    try {
+        const swarm = input.swarm;
+        const ws = swarm.workspace;
+        if (!ws)
+            return { strategy: "skipped", createdAt, error: "no workspace" };
+        if (ws.strategy !== "git-worktree") {
+            return {
+                strategy: "skipped",
+                createdAt,
+                error: `${ws.strategy} not supported in M6.1 (git-worktree only)`,
+            };
+        }
+        const runner = input.runner ?? defaultRunnerWithStdin;
+        // Facade for code paths that historically used (cmd, args, cwd) — drops stdin.
+        const runnerNoStdin = (cmd, args, cwd) => runner(cmd, args, { cwd });
+        const writeFile = input.writeFile ??
+            (async (p, c) => {
+                await fsWriteFile(p, c, "utf-8");
+            });
+        // 2. Auto-commit any uncommitted changes
+        await runnerNoStdin("git", ["add", "-A"], ws.cwd).catch(() => null);
+        const status = await runnerNoStdin("git", ["status", "--porcelain"], ws.cwd).catch(() => null);
+        if (status && status.exitCode === 0 && status.stdout.trim().length > 0) {
+            // Observability for S4: surface the file list so users can spot junk
+            // (e.g. .DS_Store, editor swap files) that crept in via `git add -A`.
+            // Not filtered here — opt-in filtering would need user config.
+            log.info({
+                swarmId: swarm.id,
+                files: status.stdout.trim().split("\n").slice(0, 50),
+            }, "shipment: about to auto-commit changes");
+            const commitMsg = `swarm output: ${swarm.id}`;
+            let commit = await runnerNoStdin("git", commitArgs(commitMsg), ws.cwd).catch(() => null);
+            if (!commit || commit.exitCode !== 0) {
+                log.warn({ swarmId: swarm.id, stderr: commit?.stderr }, "shipment: git commit failed (likely pre-commit hook); retrying with --no-verify");
+                commit = await runnerNoStdin("git", commitArgs(`${commitMsg} (no-verify after hook failure)`, ["--no-verify"]), ws.cwd).catch(() => null);
+                if (!commit || commit.exitCode !== 0) {
+                    log.warn({ swarmId: swarm.id, stderr: commit?.stderr }, "shipment: git commit --no-verify also failed; continuing with HEAD as-is");
+                }
+            }
+        }
+        // 3. Diff
+        const diff = await computeWorkspaceDiff({
+            worktreeCwd: ws.cwd,
+            baseCommit: ws.metadata.baseCommit,
+            runner: runnerNoStdin,
+        });
+        if (diff.error)
+            return { strategy: "skipped", createdAt, error: diff.error };
+        if (diff.files.length === 0)
+            return { strategy: "skipped", createdAt, error: "no changes" };
+        // Scrub secrets from diff text BEFORE it reaches the LLM or report. Common
+        // patterns only (GitHub/Slack/OpenAI/AWS tokens + KEY=value lines); manual
+        // review is still required and the report makes this explicit.
+        const scrubbedDiff = {
+            ...diff,
+            stat: scrubSecrets(diff.stat),
+            patch: scrubSecrets(diff.patch),
+        };
+        // 4. LLM title/summary or fallback
+        let title = `swarm: ${swarm.id}`;
+        let summary = `Swarm produced ${scrubbedDiff.files.length} file change(s).\n\n${scrubbedDiff.stat}`;
+        if (input.generateText) {
+            try {
+                const t = (await input.generateText(buildTitlePrompt(swarm, scrubbedDiff)))
+                    .trim()
+                    .split("\n")[0];
+                if (t)
+                    title = t;
+                const s = (await input.generateText(buildSummaryPrompt(swarm, scrubbedDiff))).trim();
+                if (s)
+                    summary = s;
+            }
+            catch (err) {
+                log.warn({ err, swarmId: swarm.id }, "shipment: LLM generateText failed; using fallback");
+            }
+        }
+        // Re-scrub LLM output: model could re-emit a leaked secret it saw in the diff.
+        title = scrubSecrets(title);
+        summary = scrubSecrets(summary);
+        // 5. Render report
+        const report = renderReport({
+            swarmId: swarm.id,
+            swarmDisplayName: swarm.displayName,
+            teamName: swarm.teamName ?? "default",
+            baseBranch: ws.metadata.baseBranch ?? "main",
+            baseCommit: ws.metadata.baseCommit,
+            branchName: ws.metadata.branchName,
+            startedAt: getStartedAt(swarm, createdAt),
+            endedAt: createdAt,
+            status: mapStatus(swarm.status),
+            diffStat: scrubbedDiff.stat,
+            changedFiles: scrubbedDiff.files,
+            title,
+            summary,
+            roles: [...swarm.roles.values()].map((r) => ({
+                instanceId: r.instanceId,
+                roleName: r.roleName,
+            })),
+        });
+        // 6. Transport
+        const transport = await detectTransport(ws.cwd, { runner: runnerNoStdin });
+        const branchName = ws.metadata.branchName;
+        // 7. PR path
+        let prAttemptError;
+        if (transport.kind === "pr") {
+            // GitHub caps PR bodies around 65KB. Truncate with a clear pointer to
+            // the full report on disk so reviewers know nothing was silently dropped.
+            let body = report;
+            if (body.length > MAX_PR_BODY) {
+                body =
+                    body.substring(0, MAX_PR_BODY) +
+                        "\n\n... (truncated — full report at `report.md` in the worktree)\n";
+            }
+            const pr = await createDraftPR({
+                cwd: ws.cwd,
+                branchName,
+                baseBranch: transport.defaultBranch ?? "main",
+                title,
+                bodyMarkdown: body,
+            }, { runner });
+            if (pr.ok) {
+                log.info({ swarmId: swarm.id, prUrl: pr.url }, "shipment: PR created");
+                return {
+                    strategy: "pr",
+                    createdAt,
+                    title,
+                    summary: summary.substring(0, 200),
+                    prUrl: pr.url,
+                    branchName,
+                };
+            }
+            prAttemptError = `${pr.step}: ${pr.error}`;
+            log.warn({ swarmId: swarm.id, step: pr.step, err: pr.error }, "shipment: PR creation failed; falling back to diff-only");
+            // fall through
+        }
+        // 8. Diff-only fallback
+        const diffPath = join(ws.cwd, "diff.patch");
+        const reportPath = join(ws.cwd, "report.md");
+        await writeFile(diffPath, scrubbedDiff.patch);
+        await writeFile(reportPath, report);
+        log.info({ swarmId: swarm.id, diffPath, reportPath }, "shipment: diff+report written to worktree");
+        return {
+            strategy: "diff-only",
+            createdAt,
+            title,
+            summary: summary.substring(0, 200),
+            diffPath,
+            reportPath,
+            branchName,
+            prAttemptError,
+        };
+    }
+    catch (err) {
+        log.warn({ err, swarmId: input.swarm.id }, "shipment: unexpected failure");
+        return { strategy: "skipped", createdAt, error: err?.message ?? String(err) };
+    }
+}
+function buildTitlePrompt(swarm, diff) {
+    return (`You are summarizing a swarm's work as a one-line PR title.\n\n` +
+        `Swarm id: ${swarm.id}\n` +
+        `Files changed:\n${diff.stat}\n\n` +
+        `Output a single short title (max 60 chars), no quotes, no trailing period.`);
+}
+function buildSummaryPrompt(swarm, diff) {
+    return (`Write a 1-3 paragraph summary of what this swarm accomplished, suitable for a PR description.\n\n` +
+        `Swarm id: ${swarm.id}\n` +
+        `Files changed:\n${diff.stat}\n\n` +
+        `Diff (truncated to 4000 chars):\n${diff.patch.substring(0, 4000)}\n\n` +
+        `Write the summary in markdown. Do not include a heading.`);
+}
+function getStartedAt(swarm, fallback) {
+    const candidate = swarm.createdAt;
+    if (typeof candidate === "string")
+        return candidate;
+    if (typeof candidate === "number")
+        return new Date(candidate).toISOString();
+    // No createdAt → use endedAt instead of 1970-01-01 epoch zero (cosmetic fix).
+    return fallback;
+}
+function mapStatus(s) {
+    if (s === "completed")
+        return "completed";
+    if (s === "failed")
+        return "failed";
+    return "cancelled";
+}
+//# sourceMappingURL=shipment-pipeline.js.map