@nanonets/graft 0.22.0 → 0.22.1

package/dist/app/brain-build.js

@@ -1,278 +0,0 @@
-/**
- * Building one repository into a brain, on demand.
- *
- * The whole point of the onboarding flow this serves: someone pastes a
- * repository URL, and a minute later they are looking at rules mined from their
- * own history. Nothing is installed and nobody has signed up yet, so this has to
- * work from the repository name alone.
- *
- * Runs in the app rather than in the platform because only the app has the
- * GitHub App credentials, only it can clone, and only graft can build a symbol
- * graph. What crosses back to the platform is a digest of messages and symbol
- * ids — never source.
- */
-import { buildGraph } from "../graph/build.js";
-import { contextDirFor } from "../context/node-file.js";
-import { loadGraphCached } from "../graph/load.js";
-import { checkoutRepository } from "./checkout.js";
-import { appJwt, ghHeaders, installationFor, publicReadInstallation, repoAccessGap, } from "./identity.js";
-import { buildDigest, postDigest, readCommits, readSymbols, readThreads } from "./history.js";
-import { budgetSources, readAgentInstructions, readBranchProtection, readCodeowners, readCodifiedRules, readDecisionDocs, readDeclinedIssues, readReverts, readTestNames, } from "./sources.js";
-/** Raised when the App cannot see the repository. Distinct because the caller
- * turns it into a specific answer — "install the app, or run it locally" — and
- * not into a 500. */
-export class RepoNotAccessibleError extends Error {
-    gap;
-    constructor(message, 
-    /** Which gap it is, so the caller can send the user to the right place. */
-    gap = { reason: "not_installed", ownerId: null, installationId: null }) {
-        super(message);
-        this.gap = gap;
-    }
-}
-/**
- * Can we read this repository at all?
- *
- * The cheap half of a build, on its own: an installation lookup and at most
- * one repository lookup, about a second in total, with no clone and no graph.
- *
- * It exists as its own call because the answer decides which screen the user
- * sees next, and the rest of the read takes minutes. Waiting for the whole
- * build to find out means either holding the person there or guessing from a
- * timer, and a guess is wrong exactly when the box is busy — which is when
- * two people are onboarding at once.
- */
-export async function checkRepoAccess(job, deps) {
-    const api = deps.api ?? "https://api.github.com";
-    const installationId = await installationFor(deps.creds, job.owner, job.repo, deps.fetch, (deps.now ?? Date.now)(), api);
-    if (installationId !== null) {
-        const token = await installationToken(deps, installationId, `${job.owner}/${job.repo}`, api);
-        const meta = await repoMeta(job.owner, job.repo, token, deps.fetch, api);
-        return { accessible: true, isPrivate: meta?.isPrivate ?? true, via: "installation" };
-    }
-    const meta = await repoMeta(job.owner, job.repo, await publicReadToken(deps, api), deps.fetch, api);
-    if (meta && !meta.isPrivate)
-        return { accessible: true, isPrivate: false, via: "public" };
-    const gap = await repoAccessGap(deps.creds, job.owner, deps.fetch, (deps.now ?? Date.now)(), api);
-    return {
-        accessible: false,
-        isPrivate: true,
-        via: "none",
-        reason: gap.reason === "repo_not_selected"
-            ? `graft is installed on ${job.owner} but ${job.owner}/${job.repo} is not in the list of repositories it can see`
-            : `graft is not installed on ${job.owner}`,
-        gap,
-    };
-}
-/**
- * Decide how this repository gets read, and mint the credential for it.
- *
- * The network half of a build, kept separate from the work: an installation
- * lookup, a token, a repository lookup. About a second, none of it blocking.
- *
- * Throws RepoNotAccessibleError when there is no way in. That is the answer the
- * onboarding UI turns into a choice, which is why it is raised here — before a
- * single byte is cloned — rather than discovered somewhere inside the read.
- */
-export async function resolveRepoRead(job, deps) {
-    const api = deps.api ?? "https://api.github.com";
-    const tag = `${job.owner}/${job.repo}`;
-    const installationId = await installationFor(deps.creds, job.owner, job.repo, deps.fetch, (deps.now ?? Date.now)(), api);
-    if (installationId !== null) {
-        const token = await installationToken(deps, installationId, tag, api);
-        const meta = await repoMeta(job.owner, job.repo, token, deps.fetch, api);
-        return { token, cloneToken: token, meta: meta ?? { isPrivate: true, defaultBranch: "" } };
-    }
-    // No installation on this repository. That rules out nothing yet: a public
-    // repo clones with no credential at all, and its API answers to any token we
-    // hold. So find a credential for the reading, then ask whether it is public.
-    const token = await publicReadToken(deps, api);
-    const meta = await repoMeta(job.owner, job.repo, token, deps.fetch, api);
-    if (!meta || meta.isPrivate) {
-        // Which of the two gaps it is decides what the UI can offer, so it is
-        // resolved here rather than guessed there.
-        const gap = await repoAccessGap(deps.creds, job.owner, deps.fetch, (deps.now ?? Date.now)(), api);
-        throw new RepoNotAccessibleError(gap.reason === "repo_not_selected"
-            ? `graft is installed on ${job.owner} but ${tag} is not in the list of repositories it can see`
-            : `graft is not installed on ${job.owner}`, gap);
-    }
-    return { token, cloneToken: "", meta };
-}
-/**
- * Read the repository and hand its history to the brain.
- *
- * An installation is the preferred way in: it is the only way into a private
- * repository, and it carries a rate limit worth having. It is not required for
- * a public one, though — those clone anonymously and answer the API
- * anonymously — so a failed installation lookup is a reason to try the open
- * door, not a reason to stop. Only a repository that is private or unreadable
- * both ways is one we genuinely cannot see, and that is the case the UI turns
- * into "read it on your machine".
- */
-export async function buildRepoIntoBrain(job, deps) {
-    return readRepository(job, deps, await resolveRepoRead(job, deps));
-}
-/**
- * The heavy half: clone, graph, history, digest.
- *
- * Takes its credential rather than minting one, because this is the half that
- * runs somewhere else. Every expensive thing in it is synchronous — the git
- * calls are spawnSync, the parse is a loop of native tree-sitter calls, the
- * graph is written with a blocking stringify — so in the server process it
- * holds the event loop for the whole read, and a second person pasting a URL
- * waits behind the first. See brain-build-process.ts.
- */
-export async function readRepository(job, deps, auth) {
-    const rawLog = deps.log ?? (() => { });
-    const api = deps.api ?? "https://api.github.com";
-    const tag = `${job.owner}/${job.repo}`;
-    const { token, cloneToken, meta } = auth;
-    // Every line carries how long we have been at it. A read that feels slow is
-    // four things in a trench coat — the clone, the graph build, the
-    // pull-request walk, the digest — and without the elapsed time on each, the
-    // only observation anyone can make is "it took two minutes".
-    const startedAt = (deps.now ?? Date.now)();
-    const log = (msg) => rawLog(`[+${(((deps.now ?? Date.now)() - startedAt) / 1000).toFixed(1)}s] ${msg}`);
-    const phase = (name) => {
-        const at = (deps.now ?? Date.now)();
-        return () => log(`${tag}: ${name} took ${(((deps.now ?? Date.now)() - at) / 1000).toFixed(1)}s`);
-    };
-    const doneClone = phase("clone");
-    const checkout = checkoutRepository({
-        owner: job.owner,
-        repo: job.repo,
-        ref: job.ref || meta.defaultBranch,
-        token: cloneToken,
-        api: deps.githubHost,
-        log,
-    });
-    doneClone();
-    try {
-        // `graphOnly`: the symbol ids and their hashes are all the digest needs, and
-        // the markdown projections cost real time on a large repo.
-        const doneGraph = phase("symbol graph");
-        await buildGraph(checkout.dir, { graphOnly: true });
-        const graph = loadGraphCached(contextDirFor(checkout.dir));
-        doneGraph();
-        const commits = readCommits(checkout.dir);
-        const symbols = readSymbols(graph);
-        // The threads are the slow part (two API calls per pull request), and the
-        // one most likely to fail on a rate limit. A failure here degrades to a
-        // commits-only ingest rather than losing the whole build.
-        let threads = [];
-        const doneThreads = phase("pull-request discussion");
-        try {
-            threads = await readThreads(job.owner, job.repo, token, deps.fetch, api);
-        }
-        catch (e) {
-            log(`${tag}: pull-request discussion unavailable (${e instanceof Error ? e.message : e}); mining commits only`);
-        }
-        doneThreads();
-        // Everything the repo already states as a rule. All best-effort: the file
-        // readers cannot fail the build, and the two API readers swallow their own
-        // errors, so a repo with none of this still gets a brain from its history.
-        const doneSources = phase("stated sources");
-        const sources = budgetSources([
-            ...readAgentInstructions(checkout.dir),
-            ...readDecisionDocs(checkout.dir),
-            ...readCodeowners(checkout.dir),
-            ...readCodifiedRules(checkout.dir),
-            ...readReverts(checkout.dir),
-            ...readTestNames(symbols.map((s) => ({ name: s.name, path: s.path }))),
-            ...(await readBranchProtection(job.owner, job.repo, meta.defaultBranch, token, deps.fetch, api)),
-            ...(await readDeclinedIssues(job.owner, job.repo, token, deps.fetch, api)),
-        ]);
-        doneSources();
-        log(`${tag}: read ${commits.length} commits, ${threads.length} threads, ${symbols.length} symbols, ${sources.length} stated sources`);
-        const digest = buildDigest({
-            owner: job.owner,
-            name: job.repo,
-            headSha: checkout.headSha,
-            defaultBranch: job.ref || meta.defaultBranch,
-            isPrivate: meta.isPrivate,
-            commits,
-            threads,
-            symbols,
-            sources,
-            autoApprove: job.autoApprove ?? false,
-        });
-        const counts = {
-            headSha: checkout.headSha,
-            commits: commits.length,
-            threads: threads.length,
-            symbols: symbols.length,
-            sources: sources.length,
-        };
-        if (!job.brainId || !job.brainToken) {
-            return { jobId: "", ...counts, digest };
-        }
-        const { jobId } = await postDigest(job.brainBaseUrl ?? "https://agents.nanonets.com", job.brainId, job.brainToken, digest, deps.fetch);
-        return { jobId, ...counts };
-    }
-    finally {
-        // Always: the clone was made with an installation token and is not something
-        // to leave in /tmp.
-        checkout.cleanup();
-    }
-}
-/**
- * The repository's visibility and default branch, in one call.
- *
- * Null when the call did not answer, which is not the same as private and is
- * why this does not fold the two together: with an installation, an unanswered
- * call is a hiccup the read can carry on past; without one, it is the whole
- * decision about whether we can see this repository at all. Callers that only
- * need the fields treat null as private, because saying a repo is public when
- * it is not would leak its name onto a pre-signup screen.
- */
-async function repoMeta(owner, repo, token, fetchImpl, api) {
-    try {
-        const res = await fetchImpl(`${api}/repos/${owner}/${repo}`, { headers: ghHeaders(token) });
-        if (!res.ok)
-            return null;
-        const parsed = JSON.parse(await res.text());
-        return {
-            isPrivate: parsed.private !== false,
-            defaultBranch: (parsed.default_branch ?? "").trim(),
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * A credential for reading a public repository we are not installed on.
- *
- * Order: a token configured for exactly this, then one of our own
- * installation's, then nothing. Every step of that ladder works — the
- * difference is only the rate limit, and the drop to anonymous is a factor of
- * eighty, so it is worth two extra calls to avoid.
- */
-async function publicReadToken(deps, api) {
-    if (deps.publicToken)
-        return deps.publicToken;
-    try {
-        const id = await publicReadInstallation(deps.creds, deps.publicOwner ?? "trailhq", deps.fetch, (deps.now ?? Date.now)(), api);
-        if (id === null)
-            return "";
-        return await installationToken(deps, id, "public read", api);
-    }
-    catch {
-        return "";
-    }
-}
-/** Mint an installation token, the credential every authenticated read uses. */
-async function installationToken(deps, installationId, tag, api) {
-    const res = await deps.fetch(`${api}/app/installations/${installationId}/access_tokens`, {
-        method: "POST",
-        headers: {
-            authorization: `Bearer ${appJwt(deps.creds, (deps.now ?? Date.now)())}`,
-            accept: "application/vnd.github+json",
-            "user-agent": "graft-app",
-        },
-    });
-    if (!res.ok)
-        throw new Error(`installation token for ${tag} failed: ${res.status}`);
-    return JSON.parse(await res.text()).token;
-}
-//# sourceMappingURL=brain-build.js.map

package/dist/app/brain-build.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"brain-build.js","sourceRoot":"","sources":["../../src/app/brain-build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,MAAM,EACN,SAAS,EACT,eAAe,EACf,sBAAsB,EACtB,aAAa,GAId,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAmB,MAAM,cAAc,CAAC;AAC/G,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,aAAa,GAEd,MAAM,cAAc,CAAC;AA+DtB;;qBAEqB;AACrB,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAIpC;IAHX,YACE,OAAe;IACf,2EAA2E;IAClE,MAAqB,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;QAE9F,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,QAAG,GAAH,GAAG,CAAkF;IAGhG,CAAC;CACF;AAeD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoC,EAAE,IAAoB;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,wBAAwB,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACzH,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAE1F,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAClG,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,MAAM;QACX,MAAM,EACJ,GAAG,CAAC,MAAM,KAAK,mBAAmB;YAChC,CAAC,CAAC,yBAAyB,GAAG,CAAC,KAAK,QAAQ,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,gDAAgD;YACjH,CAAC,CAAC,6BAA6B,GAAG,CAAC,KAAK,EAAE;QAC9C,GAAG;KACJ,CAAC;AACJ,CAAC;AAwBD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAkB,EAAE,IAAoB;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,wBAAwB,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACzH,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,sEAAsE;QACtE,2CAA2C;QAC3C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAClG,MAAM,IAAI,sBAAsB,CAC9B,GAAG,CAAC,MAAM,KAAK,mBAAmB;YAChC,CAAC,CAAC,yBAAyB,GAAG,CAAC,KAAK,QAAQ,GAAG,gDAAgD;YAC/F,CAAC,CAAC,6BAA6B,GAAG,CAAC,KAAK,EAAE,EAC5C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAkB,EAAE,IAAoB;IAC/E,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAkB,EAAE,IAAoB,EAAE,IAAkB;IAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,wBAAwB,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAEzC,4EAA4E;IAC5E,iEAAiE;IACjE,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAQ,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAgB,EAAE;QAC3C,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnG,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,kBAAkB,CAAC;QAClC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,aAAa;QAClC,KAAK,EAAE,UAAU;QACjB,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,GAAG;KACJ,CAAC,CAAC;IACH,SAAS,EAAE,CAAC;IACZ,IAAI,CAAC;QACH,6EAA6E;QAC7E,2DAA2D;QAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,SAAS,EAAE,CAAC;QAEZ,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,0EAA0E;QAC1E,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,OAAO,GAA4C,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,GAAG,GAAG,0CAA0C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAClH,CAAC;QAED,WAAW,EAAE,CAAC;QAEd,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,aAAa,CAAC;YAC5B,GAAG,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC;YACtC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjC,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC/B,GAAG,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClC,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC5B,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChG,GAAG,CAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SAC3E,CAAC,CAAC;QAEH,WAAW,EAAE,CAAC;QAEd,GAAG,CACD,GAAG,GAAG,UAAU,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,MAAM,iBAAiB,CACjI,CAAC;QAEF,MAAM,MAAM,GAAG,WAAW,CAAC;YACzB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,aAAa,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,aAAa;YAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO;YACP,OAAO;YACP,OAAO;YACP,OAAO;YACP,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;SACtC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,OAAO,EAAE,OAAO,CAAC,MAAM;SACxB,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,UAAU,CAChC,GAAG,CAAC,YAAY,IAAI,6BAA6B,EACjD,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,UAAU,EACd,MAAM,EACN,IAAI,CAAC,KAAK,CACX,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,6EAA6E;QAC7E,oBAAoB;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAQD;;;;;;;;;GASG;AACH,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,SAAgB,EAAE,GAAW;IAC/F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,GAAG,UAAU,KAAK,IAAI,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmD,CAAC;QAC9F,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK;YACnC,aAAa,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SACpD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAAC,IAAoB,EAAE,GAAW;IAC9D,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,sBAAsB,CACrC,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,WAAW,IAAI,SAAS,EAC7B,IAAI,CAAC,KAAK,EACV,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EACxB,GAAG,CACJ,CAAC;QACF,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC3B,OAAO,MAAM,iBAAiB,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,iBAAiB,CAAC,IAAoB,EAAE,cAAsB,EAAE,GAAW,EAAE,GAAW;IACrG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,sBAAsB,cAAc,gBAAgB,EAAE;QACvF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACvE,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,WAAW;SAC1B;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,OAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC,KAAK,CAAC;AACnE,CAAC"}

package/dist/app/history.d.ts

@@ -1,163 +0,0 @@
-import type { GraphV1 } from "../graph/types.js";
-import { type Fetch } from "./identity.js";
-import type { HistorySource } from "./sources.js";
-/** One commit's rule-bearing content. */
-export interface HistoryCommit {
-    sha: string;
-    subject: string;
-    body: string;
-    files: string[];
-}
-/** One pull request's discussion. */
-export interface HistoryThread {
-    number: number;
-    title: string;
-    body: string;
-    mergeSha: string;
-    comments: Array<{
-        body: string;
-        path?: string;
-    }>;
-}
-/** One symbol, as the brain needs it to anchor a rule. */
-export interface HistorySymbol {
-    id: string;
-    path: string;
-    name: string;
-    kind: string;
-    signature: string;
-    fingerprint: string;
-}
-/** The whole payload posted to the brain. */
-export interface RepoDigest {
-    provider: "github";
-    owner: string;
-    name: string;
-    head_sha: string;
-    default_branch: string;
-    is_private: boolean;
-    commits: Array<{
-        sha: string;
-        subject: string;
-        body: string;
-        files: string[];
-        symbols: string[];
-    }>;
-    threads: Array<{
-        number: number;
-        title: string;
-        body: string;
-        merge_sha: string;
-        comments: Array<{
-            body: string;
-            path?: string;
-        }>;
-    }>;
-    symbols: HistorySymbol[];
-    /** Everything in the repo that is already a rule, or nearly one: instruction
-     * files, decision records, config, ownership, reverts, test names. One array
-     * rather than a field per kind, so adding a source is adding an entry. */
-    sources: HistorySource[];
-    auto_approve: boolean;
-    /** The agents `graft init` wired this repo for (claude, cursor, agents, …).
-     * Trail shows only the context files those agents read. Absent or empty
-     * means "not known", and Trail then shows every kind. */
-    agents?: string[];
-}
-/**
- * Commit subjects, bodies and touched files, oldest first.
- *
- * `--no-merges`: a merge commit's message is "Merge pull request #N from …",
- * which establishes nothing — the decision is in the commits it brings in, and
- * in the thread. `--reverse` so a later reversal reads as a reversal downstream;
- * the extraction prompt relies on that ordering.
- */
-export declare function readCommits(root: string, max?: number): HistoryCommit[];
-/** How many threads' comments are fetched at once. Two requests per pull
- * request, so this is the real cost of a repository read. A pool of 24 (so at
- * most 48 requests in flight) stays well under GitHub's secondary limit on
- * concurrent requests, and a slow thread no longer holds up the seven that
- * happened to share its batch. */
-export declare const THREAD_FETCH_CONCURRENCY = 24;
-/**
- * What one push has already asked GitHub, shared between its reads.
- *
- * The early upload reads the newest pull requests and the full read reads them
- * again as part of the 200. Promises rather than results, so a full read that
- * starts while the early one is still in flight waits on the same request
- * instead of sending a second — and threads with no discussion are remembered
- * too, which a map of finished threads could not say.
- */
-export interface ThreadReadCache {
-    /** Pages of the closed-pull-request list, by page number. */
-    pages: Map<number, Promise<PullListItem[] | null>>;
-    /** One pull request's discussion, by number; null when it had none. */
-    threads: Map<number, Promise<HistoryThread | null>>;
-}
-export declare function newThreadReadCache(): ThreadReadCache;
-/** Run `fn` over `items` with at most `limit` in flight, results in input order. */
-export declare function mapPool<T, R>(items: readonly T[], limit: number, fn: (item: T, index: number) => Promise<R>): Promise<R[]>;
-export interface PullListItem {
-    number?: number;
-    title?: string;
-    body?: string | null;
-    merge_commit_sha?: string | null;
-}
-/**
- * Closed pull requests and their discussion, most-discussed first.
- *
- * Closed only: an open PR's discussion has not concluded, so mining a rule out
- * of it would record a proposal as a decision.
- *
- * Comment counts have to be discovered by fetching, not by reading the list.
- * GitHub's `GET /pulls` list response carries NO `comments` or
- * `review_comments` field — those exist only on the single-PR GET — so an
- * earlier version that pre-filtered on them read `undefined` for every pull
- * request, scored them all zero and skipped the lot. The failure was silent and
- * total: every repository came back with no discussion at all. So the comments
- * are fetched for the most recently updated closed pull requests, and the
- * ranking happens afterwards, on counts that are real.
- *
- * Bot comments are dropped. A CI bot posting a coverage table is the single
- * largest source of text in a busy repo's threads and it establishes nothing.
- */
-export declare function readThreads(owner: string, repo: string, token: string, fetchImpl: Fetch, api?: string, max?: number, known?: ReadonlyMap<number, HistoryThread>, cache?: ThreadReadCache): Promise<HistoryThread[]>;
-/**
- * Exported symbols from the graph, with the body hash that makes an anchored
- * rule self-invalidating.
- *
- * Exported only, and biggest first: an internal helper is not what a team's
- * rules are about, and the budget is better spent on the surface a rule is
- * likely to govern.
- */
-export declare function readSymbols(graph: GraphV1 | null, max?: number): HistorySymbol[];
-/**
- * Assemble the digest.
- *
- * Each commit carries the symbol ids its files touched, so a rule mined from a
- * commit message can be anchored even when the message names no symbol — which
- * is most of the time.
- */
-export declare function buildDigest(input: {
-    owner: string;
-    name: string;
-    headSha: string;
-    defaultBranch: string;
-    isPrivate: boolean;
-    commits: HistoryCommit[];
-    threads: HistoryThread[];
-    symbols: HistorySymbol[];
-    sources: HistorySource[];
-    autoApprove: boolean;
-    agents?: string[];
-}): RepoDigest;
-/**
- * Post the digest to a brain.
- *
- * Returns the job id so the caller can hand it back to whoever asked for the
- * build, which is what the onboarding screen polls.
- */
-export declare function postDigest(baseUrl: string, brainId: string, brainToken: string, digest: RepoDigest, fetchImpl: Fetch): Promise<{
-    jobId: string;
-}>;
-//# sourceMappingURL=history.d.ts.map

package/dist/app/history.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/app/history.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAa,KAAK,KAAK,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,qCAAqC;AACrC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACnG,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB;;8EAE0E;IAC1E,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB;;6DAEyD;IACzD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAuBD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAc,GAAG,aAAa,EAAE,CA0B5E;AAKD;;;;kCAIkC;AAClC,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnD,uEAAuE;IACvE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC;CACrD;AAED,wBAAgB,kBAAkB,IAAI,eAAe,CAEpD;AAED,oFAAoF;AACpF,wBAAsB,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAYhI;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAQD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,KAAK,EAChB,GAAG,SAA2B,EAC9B,GAAG,SAAc,EAGjB,KAAK,GAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAa,EAGrD,KAAK,GAAE,eAAsC,GAC5C,OAAO,CAAC,aAAa,EAAE,CAAC,CA4E1B;AAiCD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,EAAE,GAAG,SAAc,GAAG,aAAa,EAAE,CAcrF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,GAAG,UAAU,CAoCb;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,KAAK,GACf,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgB5B"}