@nanobpm/nano-workforce 0.203.0 → 0.204.0

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [0.204.0](https://github.com/nanobpm/nano-workforce/compare/v0.203.1...v0.204.0) (2026-11-04)
+
+### Features
+
+* **feature-run:** post one idempotent "PR opened" comment on the claimed issue ([#912](https://github.com/nanobpm/nano-workforce/issues/912)) ([6c9219a](https://github.com/nanobpm/nano-workforce/commit/6c9219a8e2ca8ba3c495e07c20ee4ae9c3bf60be)), closes [camunda/camunda#19090](https://github.com/camunda/camunda/issues/19090) [#n](https://github.com/nanobpm/nano-workforce/issues/n) [#907](https://github.com/nanobpm/nano-workforce/issues/907) [#907](https://github.com/nanobpm/nano-workforce/issues/907)
+
+## [0.203.1](https://github.com/nanobpm/nano-workforce/compare/v0.203.0...v0.203.1) (2026-11-03)
+
+### Documentation
+
+* shorten the operator guide and skill (64 KB → 26 KB) ([#909](https://github.com/nanobpm/nano-workforce/issues/909)) ([3a0be17](https://github.com/nanobpm/nano-workforce/commit/3a0be17b9f061c006e718f38773ebfffdc690cb4)), closes [sibling/#NNN](https://github.com/sibling/nano-workforce/issues/NNN) [#908](https://github.com/nanobpm/nano-workforce/issues/908) [#666](https://github.com/nanobpm/nano-workforce/issues/666)
+
 ## [0.203.0](https://github.com/nanobpm/nano-workforce/compare/v0.202.0...v0.203.0) (2026-10-13)
 
 ### Features

package/app/feature.ts

@@ -74,6 +74,15 @@ export interface FeatureRun {
    * outcome is written to `status` itself; this carries the sub-state / note (e.g. "merged",
    * "waiting_review", or "operator: <note>"). */
   delivery_label: string | null;
+  /** CONFIRMED "PR opened" link (issue #907, app/issuePrLink.ts): the `owner/repo#N` PR key whose
+   * comment is known to be on the claimed issue (set only after a successful POST or marker match). */
+  pr_linked_pr_key?: string | null;
+  /** The PR key the claimed issue is OWED a "PR opened" link for (set by pr.record-feature for a
+   * claimed single-issue run only). Outstanding while it differs from `pr_linked_pr_key`; the
+   * poller's `pollIssuePrLinks` pass retries it until confirmed. */
+  pr_link_want_pr_key?: string | null;
+  /** In-flight link lease (ISO time) — a CAS-claimed, EXPIRING claim before any GitHub write. */
+  pr_link_lease_at?: string | null;
   /** Timestamp an operator dismissed a TERMINAL run (§5, `acknowledge-done`); NULL until then. When
    * set on a terminal row, `list_bucket` flips from 'active' to 'history'. Projection surface. */
   acknowledged_at: string | null;

package/app/github.ts

@@ -40,14 +40,16 @@ export function githubTransport(): GithubTransport {
 
 /** Run the host `gh` CLI with the given args (no shell — args are passed as a vector, so a
  * `repo`/`number` from the datastore cannot inject a command). Resolves stdout, rejects on a
- * non-zero exit with stderr as the message. */
-async function runGh(args: string[]): Promise<string> {
+ * non-zero exit with stderr as the message. Exported so sibling host-glue modules (e.g.
+ * app/issuePrLink.ts) ride the ONE gh transport instead of re-deriving it. */
+export async function runGh(args: string[], opts: { timeoutMs?: number } = {}): Promise<string> {
   const { execFile } = await import("node:child_process");
   return await new Promise<string>((resolve, reject) => {
     execFile(
       "gh",
       args,
-      { maxBuffer: 16 * 1024 * 1024 },
+      // `timeout` (0 = none) kills a hung `gh` so a bounded caller's deadline is actually enforced.
+      { maxBuffer: 16 * 1024 * 1024, timeout: opts.timeoutMs ?? 0 },
       (err, stdout, stderr) => {
         if (err) reject(new Error(String(stderr || "").trim() || err.message));
         else resolve(String(stdout));
@@ -714,8 +716,9 @@ export async function requestCopilotReview(
 // The same two-transport model (gh | token) backs the merge stage: read a PR's merge state to
 // decide when it is landable, and perform the merge (directly or via the repo's merge queue).
 
-/** Whether to use the `gh` CLI for this pass, honouring `NANO_PR_GITHUB_TRANSPORT`. */
-async function useGh(): Promise<boolean> {
+/** Whether to use the `gh` CLI for this pass, honouring `NANO_PR_GITHUB_TRANSPORT`. Exported so
+ * sibling host-glue modules (e.g. app/issuePrLink.ts) resolve the SAME transport selection. */
+export async function useGh(): Promise<boolean> {
   const mode = githubTransport();
   return mode === "gh" || (mode === "auto" && (await isGhAvailable()));
 }
@@ -739,9 +742,13 @@ export async function fetchPrMeta(
   repo: string,
   number: number | string,
   token: string,
+  timeoutMs?: number,
 ): Promise<PrMeta | null> {
   if (await useGh()) {
-    const out = await runGh(["pr", "view", String(number), "--repo", repo, "--json", "title,body,headRefName,baseRefName"]);
+    const out = await runGh(
+      ["pr", "view", String(number), "--repo", repo, "--json", "title,body,headRefName,baseRefName"],
+      timeoutMs === undefined ? undefined : { timeoutMs },
+    );
     // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape
     const j = JSON.parse(out) as { title?: string; body?: string; headRefName?: string | null; baseRefName?: string | null };
     return { title: j.title ?? null, body: j.body ?? "", headRef: j.headRefName ?? null, baseRef: j.baseRefName ?? null };
@@ -749,6 +756,7 @@ export async function fetchPrMeta(
   if (!token) return null;
   const r = await fetch(`https://api.github.com/repos/${repo}/pulls/${number}`, {
     headers: { authorization: `Bearer ${token}`, accept: "application/vnd.github+json" },
+    ...(timeoutMs === undefined ? {} : { signal: AbortSignal.timeout(timeoutMs) }),
   });
   if (!r.ok) throw new Error(`github ${r.status} ${r.statusText}`.trim());
   // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape