@oddessentials/odd-ai-reviewers 1.0.0

package/dist/telemetry/types.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Timeout Telemetry Type Definitions
+ *
+ * Feature: 007-pnpm-timeout-telemetry
+ * Implements: FR-009, FR-012
+ */
+import { z } from 'zod';
+/**
+ * Severity level of a timeout event.
+ * - warning: Timeout exceeded but operation completed (informational)
+ * - error: Timeout caused operation failure
+ * - critical: Timeout in critical path affecting overall result
+ */
+export declare const TimeoutSeverity: z.ZodEnum<{
+    error: "error";
+    warning: "warning";
+    critical: "critical";
+}>;
+export type TimeoutSeverity = z.infer<typeof TimeoutSeverity>;
+/**
+ * Available telemetry backend types.
+ * - console: Writes structured log lines to stdout
+ * - jsonl: Appends JSON objects to file
+ */
+export declare const TelemetryBackendType: z.ZodEnum<{
+    console: "console";
+    jsonl: "jsonl";
+}>;
+export type TelemetryBackendType = z.infer<typeof TelemetryBackendType>;
+/**
+ * Verbosity levels for telemetry output.
+ * - minimal: operation_id, duration_ms, severity only
+ * - standard: All required fields
+ * - verbose: All fields including allowed_context
+ */
+export declare const TelemetryVerbosity: z.ZodEnum<{
+    minimal: "minimal";
+    standard: "standard";
+    verbose: "verbose";
+}>;
+export type TelemetryVerbosity = z.infer<typeof TelemetryVerbosity>;
+/**
+ * Operation ID pattern: {type}_{identifier}
+ * Examples: local_llm_req_abc123, pattern_eval_a1b2c3d4, subprocess_semgrep
+ */
+export declare const OperationId: z.ZodString;
+export type OperationId = z.infer<typeof OperationId>;
+/**
+ * Allow-listed context fields for TimeoutEvent.
+ * Only these fields may appear in event context to prevent data leakage.
+ */
+export declare const AllowedContextSchema: z.ZodObject<{
+    agent_id: z.ZodOptional<z.ZodString>;
+    file_path: z.ZodOptional<z.ZodString>;
+    pattern_hash: z.ZodOptional<z.ZodString>;
+    retry_count: z.ZodOptional<z.ZodNumber>;
+    model_name: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type AllowedContext = z.infer<typeof AllowedContextSchema>;
+/**
+ * Core timeout event schema.
+ * Immutable record of a single timeout occurrence.
+ */
+export declare const TimeoutEventSchema: z.ZodObject<{
+    operation_id: z.ZodString;
+    duration_ms: z.ZodNumber;
+    threshold_ms: z.ZodNumber;
+    timestamp: z.ZodString;
+    severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+        critical: "critical";
+    }>;
+    allowed_context: z.ZodOptional<z.ZodObject<{
+        agent_id: z.ZodOptional<z.ZodString>;
+        file_path: z.ZodOptional<z.ZodString>;
+        pattern_hash: z.ZodOptional<z.ZodString>;
+        retry_count: z.ZodOptional<z.ZodNumber>;
+        model_name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export type TimeoutEvent = z.infer<typeof TimeoutEventSchema>;
+/**
+ * Configuration controlling telemetry behavior.
+ */
+export declare const TelemetryConfigSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    backends: z.ZodArray<z.ZodEnum<{
+        console: "console";
+        jsonl: "jsonl";
+    }>>;
+    jsonl_path: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verbosity: z.ZodDefault<z.ZodEnum<{
+        minimal: "minimal";
+        standard: "standard";
+        verbose: "verbose";
+    }>>;
+    buffer_size: z.ZodDefault<z.ZodNumber>;
+    flush_interval_ms: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type TelemetryConfig = z.infer<typeof TelemetryConfigSchema>;
+/**
+ * Contract for telemetry sink implementations.
+ *
+ * Error Handling Contract:
+ * - emit() MUST NOT throw; failures logged internally
+ * - emit() MUST NOT block calling thread
+ * - flush() MAY throw if write fails
+ * - Backend failure MUST NOT affect control flow (FR-014)
+ */
+export interface TelemetryBackend {
+    /** Write a single event (non-blocking, non-throwing) */
+    emit(event: TimeoutEvent): Promise<void>;
+    /** Force write of buffered events */
+    flush(): Promise<void>;
+    /** Release resources */
+    close(): Promise<void>;
+}
+/**
+ * Input type for emitting timeout events.
+ * Omits timestamp as it will be auto-generated.
+ */
+export type TimeoutEventInput = Omit<TimeoutEvent, 'timestamp'>;
+/**
+ * Partial config for updating telemetry settings.
+ */
+export type TelemetryConfigUpdate = Partial<Omit<TelemetryConfig, 'backends'>> & {
+    backends?: TelemetryBackendType[];
+};
+/**
+ * Default telemetry configuration.
+ * Telemetry is disabled by default.
+ */
+export declare const DEFAULT_TELEMETRY_CONFIG: TelemetryConfig;
+/**
+ * Creates a TimeoutEvent with auto-generated timestamp.
+ */
+export declare function createTimeoutEvent(input: TimeoutEventInput): TimeoutEvent;
+//# sourceMappingURL=types.d.ts.map

package/dist/telemetry/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/telemetry/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;;EAA2C,CAAC;AACxE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;EAA+B,CAAC;AACjE,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;EAA6C,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAMpE;;;GAGG;AACH,eAAO,MAAM,WAAW,aAGmE,CAAC;AAC5F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAgBtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAa7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBA2B/B,CAAC;AACJ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,qCAAqC;IACrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,wBAAwB;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAMD;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,GAAG;IAC/E,QAAQ,CAAC,EAAE,oBAAoB,EAAE,CAAC;CACnC,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,eAOtC,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,YAAY,CAKzE"}

package/dist/telemetry/types.js

@@ -0,0 +1,133 @@
+/**
+ * Timeout Telemetry Type Definitions
+ *
+ * Feature: 007-pnpm-timeout-telemetry
+ * Implements: FR-009, FR-012
+ */
+import { z } from 'zod';
+// =============================================================================
+// Enums
+// =============================================================================
+/**
+ * Severity level of a timeout event.
+ * - warning: Timeout exceeded but operation completed (informational)
+ * - error: Timeout caused operation failure
+ * - critical: Timeout in critical path affecting overall result
+ */
+export const TimeoutSeverity = z.enum(['warning', 'error', 'critical']);
+/**
+ * Available telemetry backend types.
+ * - console: Writes structured log lines to stdout
+ * - jsonl: Appends JSON objects to file
+ */
+export const TelemetryBackendType = z.enum(['console', 'jsonl']);
+/**
+ * Verbosity levels for telemetry output.
+ * - minimal: operation_id, duration_ms, severity only
+ * - standard: All required fields
+ * - verbose: All fields including allowed_context
+ */
+export const TelemetryVerbosity = z.enum(['minimal', 'standard', 'verbose']);
+// =============================================================================
+// Core Schemas
+// =============================================================================
+/**
+ * Operation ID pattern: {type}_{identifier}
+ * Examples: local_llm_req_abc123, pattern_eval_a1b2c3d4, subprocess_semgrep
+ */
+export const OperationId = z
+    .string()
+    .min(1)
+    .regex(/^[a-z_]+_[a-zA-Z0-9_-]+$/, 'Operation ID must match pattern {type}_{identifier}');
+/**
+ * Allow-listed context fields for TimeoutEvent.
+ * Only these fields may appear in event context to prevent data leakage.
+ */
+export const AllowedContextSchema = z
+    .object({
+    /** Agent that triggered the timeout */
+    agent_id: z.string().min(1).optional(),
+    /** File being processed (if applicable) */
+    file_path: z.string().min(1).optional(),
+    /** SHA-256 hash of pattern (first 16 chars, no raw patterns) */
+    pattern_hash: z
+        .string()
+        .regex(/^[a-f0-9]{16}$/)
+        .optional(),
+    /** Number of retries attempted before timeout */
+    retry_count: z.number().int().min(0).optional(),
+    /** LLM model identifier (if applicable) */
+    model_name: z.string().min(1).optional(),
+})
+    .strict(); // Reject unknown fields
+/**
+ * Core timeout event schema.
+ * Immutable record of a single timeout occurrence.
+ */
+export const TimeoutEventSchema = z.object({
+    /** Unique identifier for the operation (pattern: {type}_{identifier}) */
+    operation_id: OperationId,
+    /** Actual elapsed time in milliseconds */
+    duration_ms: z.number().min(0),
+    /** Configured timeout threshold in milliseconds */
+    threshold_ms: z.number().positive(),
+    /** ISO-8601 datetime when timeout was detected */
+    timestamp: z.string().datetime(),
+    /** Severity classification */
+    severity: TimeoutSeverity,
+    /** Optional allow-listed metadata */
+    allowed_context: AllowedContextSchema.optional(),
+});
+/**
+ * Configuration controlling telemetry behavior.
+ */
+export const TelemetryConfigSchema = z
+    .object({
+    /** Master switch for telemetry emission */
+    enabled: z.boolean(),
+    /** List of active backends */
+    backends: z.array(TelemetryBackendType).min(1),
+    /** File path for JSONL backend output (required if jsonl backend used) */
+    jsonl_path: z.string().min(1).nullable().optional(),
+    /** Verbosity level for output */
+    verbosity: TelemetryVerbosity.default('standard'),
+    /** Max events to buffer before flush (JSONL only) */
+    buffer_size: z.number().int().min(1).max(10000).default(100),
+    /** Periodic flush interval in ms (JSONL only) */
+    flush_interval_ms: z.number().int().min(100).max(60000).default(5000),
+})
+    .refine((config) => {
+    // If jsonl backend is enabled, jsonl_path must be provided
+    if (config.backends.includes('jsonl')) {
+        return config.jsonl_path != null && config.jsonl_path.length > 0;
+    }
+    return true;
+}, {
+    message: 'jsonl_path is required when jsonl backend is enabled',
+    path: ['jsonl_path'],
+});
+// =============================================================================
+// Default Configuration
+// =============================================================================
+/**
+ * Default telemetry configuration.
+ * Telemetry is disabled by default.
+ */
+export const DEFAULT_TELEMETRY_CONFIG = {
+    enabled: false,
+    backends: ['console'],
+    jsonl_path: null,
+    verbosity: 'standard',
+    buffer_size: 100,
+    flush_interval_ms: 5000,
+};
+/**
+ * Creates a TimeoutEvent with auto-generated timestamp.
+ */
+export function createTimeoutEvent(input) {
+    return TimeoutEventSchema.parse({
+        ...input,
+        timestamp: new Date().toISOString(),
+    });
+}
+//# sourceMappingURL=types.js.map

package/dist/telemetry/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/telemetry/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,QAAQ;AACR,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAGxE;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAGjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAG7E,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,KAAK,CAAC,0BAA0B,EAAE,qDAAqD,CAAC,CAAC;AAG5F;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,uCAAuC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,2CAA2C;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,gEAAgE;IAChE,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,KAAK,CAAC,gBAAgB,CAAC;SACvB,QAAQ,EAAE;IACb,iDAAiD;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,2CAA2C;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC,CAAC,wBAAwB;AAGrC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,yEAAyE;IACzE,YAAY,EAAE,WAAW;IACzB,0CAA0C;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,mDAAmD;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,kDAAkD;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,8BAA8B;IAC9B,QAAQ,EAAE,eAAe;IACzB,qCAAqC;IACrC,eAAe,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,2CAA2C;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,8BAA8B;IAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,0EAA0E;IAC1E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,iCAAiC;IACjC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC;IACjD,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5D,iDAAiD;IACjD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACtE,CAAC;KACD,MAAM,CACL,CAAC,MAAM,EAAE,EAAE;IACT,2DAA2D;IAC3D,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EAAE,sDAAsD;IAC/D,IAAI,EAAE,CAAC,YAAY,CAAC;CACrB,CACF,CAAC;AA0CJ,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,UAAU;IACrB,WAAW,EAAE,GAAG;IAChB,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,GAAG,KAAK;QACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/trust.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Trust Module
+ * Validates whether a PR should be reviewed based on trust rules
+ */
+import type { Config } from './config.js';
+export interface PullRequestContext {
+    /** PR number */
+    number: number;
+    /** Source repository full name (owner/repo) */
+    headRepo: string;
+    /** Target repository full name (owner/repo) */
+    baseRepo: string;
+    /** Author's username */
+    author: string;
+    /** Whether the PR is from a fork */
+    isFork: boolean;
+    /** Whether the PR is marked as draft */
+    isDraft: boolean;
+}
+export interface TrustResult {
+    trusted: boolean;
+    reason?: string;
+}
+/**
+ * Check if a PR is trusted and should be reviewed
+ */
+export declare function checkTrust(context: PullRequestContext, config: Config): TrustResult;
+/**
+ * Build PR context from GitHub event payload
+ */
+export declare function buildPRContext(payload: GitHubPullRequestPayload): PullRequestContext;
+export interface GitHubPullRequestPayload {
+    pull_request: {
+        number: number;
+        draft?: boolean;
+        user: {
+            login: string;
+        };
+        head: {
+            sha: string;
+            ref: string;
+            repo?: {
+                full_name: string;
+            };
+        };
+        base: {
+            sha: string;
+            ref: string;
+            repo: {
+                full_name: string;
+            };
+        };
+    };
+}
+/**
+ * Build PR context from Azure DevOps environment variables
+ * Returns null if not running in an ADO PR context
+ */
+export declare function buildADOPRContext(env: Record<string, string | undefined>): PullRequestContext | null;
+/**
+ * Check if a PR is in draft status via ADO API
+ * ADO doesn't expose draft status in environment variables
+ */
+export declare function isPRDraft(organization: string, project: string, repositoryId: string, pullRequestId: number, token: string): Promise<boolean>;
+//# sourceMappingURL=trust.d.ts.map

package/dist/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,gBAAgB;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAmBnF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,wBAAwB,GAAG,kBAAkB,CAWpF;AAGD,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QACxB,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAA;aAAE,CAAC;SAC9B,CAAC;QACF,IAAI,EAAE;YACJ,GAAG,EAAE,MAAM,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,EAAE;gBAAE,SAAS,EAAE,MAAM,CAAA;aAAE,CAAC;SAC7B,CAAC;KACH,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GACtC,kBAAkB,GAAG,IAAI,CAe3B;AAED;;;GAGG;AACH,wBAAsB,SAAS,CAC7B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAkBlB"}

package/dist/trust.js

@@ -0,0 +1,78 @@
+/**
+ * Trust Module
+ * Validates whether a PR should be reviewed based on trust rules
+ */
+/**
+ * Check if a PR is trusted and should be reviewed
+ */
+export function checkTrust(context, config) {
+    // Skip draft PRs
+    if (context.isDraft) {
+        return {
+            trusted: false,
+            reason: 'Skipping draft PR',
+        };
+    }
+    // If trusted_only is enabled, block fork PRs
+    if (config.trusted_only && context.isFork) {
+        return {
+            trusted: false,
+            reason: `Fork PRs are not trusted (${context.headRepo} → ${context.baseRepo})`,
+        };
+    }
+    // All checks passed
+    return { trusted: true };
+}
+/**
+ * Build PR context from GitHub event payload
+ */
+export function buildPRContext(payload) {
+    const pr = payload.pull_request;
+    return {
+        number: pr.number,
+        headRepo: pr.head.repo?.full_name ?? '',
+        baseRepo: pr.base.repo.full_name,
+        author: pr.user.login,
+        isFork: pr.head.repo?.full_name !== pr.base.repo.full_name,
+        isDraft: pr.draft ?? false,
+    };
+}
+/**
+ * Build PR context from Azure DevOps environment variables
+ * Returns null if not running in an ADO PR context
+ */
+export function buildADOPRContext(env) {
+    const prId = env['SYSTEM_PULLREQUEST_PULLREQUESTID'];
+    if (!prId)
+        return null; // Not a PR build
+    const sourceRepoUri = env['SYSTEM_PULLREQUEST_SOURCEREPOSITORYURI'] ?? '';
+    const targetRepoUri = env['BUILD_REPOSITORY_URI'] ?? '';
+    return {
+        number: parseInt(prId, 10),
+        headRepo: sourceRepoUri,
+        baseRepo: targetRepoUri,
+        author: env['BUILD_REQUESTEDFOR'] ?? 'unknown',
+        isFork: sourceRepoUri !== '' && sourceRepoUri !== targetRepoUri,
+        isDraft: false, // Default - requires API call to enrich
+    };
+}
+/**
+ * Check if a PR is in draft status via ADO API
+ * ADO doesn't expose draft status in environment variables
+ */
+export async function isPRDraft(organization, project, repositoryId, pullRequestId, token) {
+    try {
+        const response = await fetch(`https://dev.azure.com/${organization}/${project}/_apis/git/repositories/${repositoryId}/pullRequests/${pullRequestId}?api-version=7.1`, { headers: { Authorization: `Bearer ${token}` } });
+        if (!response.ok) {
+            console.warn(`[trust] Failed to fetch PR details: ${response.status}`);
+            return false; // Fail open - assume not draft
+        }
+        const pr = (await response.json());
+        return pr.isDraft === true;
+    }
+    catch (error) {
+        console.warn(`[trust] Error checking draft status: ${error}`);
+        return false; // Fail open - assume not draft
+    }
+}
+//# sourceMappingURL=trust.js.map

package/dist/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwBH;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAA2B,EAAE,MAAc;IACpE,iBAAiB;IACjB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;SAC5B,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,IAAI,MAAM,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,6BAA6B,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,QAAQ,GAAG;SAC/E,CAAC;IACJ,CAAC;IAED,oBAAoB;IACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAiC;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAEhC,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE;QACvC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;QAChC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK;QACrB,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;QAC1D,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK;KAC3B,CAAC;AACJ,CAAC;AAqBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAuC;IAEvC,MAAM,IAAI,GAAG,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAEzC,MAAM,aAAa,GAAG,GAAG,CAAC,wCAAwC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,aAAa,GAAG,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC;IAExD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS;QAC9C,MAAM,EAAE,aAAa,KAAK,EAAE,IAAI,aAAa,KAAK,aAAa;QAC/D,OAAO,EAAE,KAAK,EAAE,wCAAwC;KACzD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,YAAoB,EACpB,OAAe,EACf,YAAoB,EACpB,aAAqB,EACrB,KAAa;IAEb,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,yBAAyB,YAAY,IAAI,OAAO,2BAA2B,YAAY,iBAAiB,aAAa,kBAAkB,EACvI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAClD,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC,CAAC,+BAA+B;QAC/C,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC5D,OAAO,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,wCAAwC,KAAK,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAC/C,CAAC;AACH,CAAC"}

package/dist/types/assert-never.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Exhaustive switch utility for discriminated unions
+ *
+ * Use in the default branch of switch statements to ensure all cases are handled.
+ * TypeScript will produce a compile error if any case is missing.
+ *
+ * @example
+ * ```typescript
+ * type Status = 'success' | 'failure' | 'skipped';
+ *
+ * function handle(status: Status): string {
+ *   switch (status) {
+ *     case 'success':
+ *       return 'ok';
+ *     case 'failure':
+ *       return 'failed';
+ *     case 'skipped':
+ *       return 'skip';
+ *     default:
+ *       return assertNever(status); // Compile error if case missing
+ *   }
+ * }
+ * ```
+ *
+ * @param x - The value that should be of type `never` if all cases are handled
+ * @param message - Optional custom error message
+ * @throws Error if called at runtime (indicates missing switch case)
+ */
+export declare function assertNever(x: never, message?: string): never;
+//# sourceMappingURL=assert-never.d.ts.map

package/dist/types/assert-never.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-never.d.ts","sourceRoot":"","sources":["../../src/types/assert-never.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,CAE7D"}

package/dist/types/assert-never.js

@@ -0,0 +1,32 @@
+/**
+ * Exhaustive switch utility for discriminated unions
+ *
+ * Use in the default branch of switch statements to ensure all cases are handled.
+ * TypeScript will produce a compile error if any case is missing.
+ *
+ * @example
+ * ```typescript
+ * type Status = 'success' | 'failure' | 'skipped';
+ *
+ * function handle(status: Status): string {
+ *   switch (status) {
+ *     case 'success':
+ *       return 'ok';
+ *     case 'failure':
+ *       return 'failed';
+ *     case 'skipped':
+ *       return 'skip';
+ *     default:
+ *       return assertNever(status); // Compile error if case missing
+ *   }
+ * }
+ * ```
+ *
+ * @param x - The value that should be of type `never` if all cases are handled
+ * @param message - Optional custom error message
+ * @throws Error if called at runtime (indicates missing switch case)
+ */
+export function assertNever(x, message) {
+    throw new Error(message ?? `Unexpected value: ${JSON.stringify(x)}`);
+}
+//# sourceMappingURL=assert-never.js.map

package/dist/types/assert-never.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-never.js","sourceRoot":"","sources":["../../src/types/assert-never.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,WAAW,CAAC,CAAQ,EAAE,OAAgB;IACpD,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}