@open-everywhere/core 0.1.0

package/dist/agent/scm/issue-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-actions.js","sourceRoot":"","sources":["../../../agent/scm/issue-actions.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,kGAAkG;AAClG,6FAA6F;AAC7F,8FAA8F;AAC9F,qFAAqF;AACrF,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,8FAA8F;AAC9F,iGAAiG;AACjG,kFAAkF;AAClF,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,oGAAoG;AACpG,EAAE;AACF,iGAAiG;AACjG,wFAAwF;AACxF,mGAAmG;AACnG,kDAAkD;AAElD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAwB,MAAM,wBAAwB,CAAC;AAGvF,OAAO,EAAE,mBAAmB,EAAoB,MAAM,iCAAiC,CAAC;AAExF;sEACsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,EAAE,gCAAgC,CAAC,CAAC;IACzF,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;kFAEkF;AAClF,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,GAAG,GAAG,YAAY,EAAE,EACpB,YAAY,GAA8B,EAAE;IAE5C,IAAI,GAAG,EAAE,CAAC;QACR,2FAA2F;QAC3F,6EAA6E;QAC7E,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7H,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD;;;;6CAI6C;AAC7C,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,IAAY,EACZ,MAAwB,EACxB,IAA6B,EAC7B,IAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrI,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC9I,GAAG,IAAI,CAAC,KAAK;QACb,OAAO,EAAE,QAAQ;QACjB,SAAS;KACV,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzG,CAAC;AACH,CAAC;AAED;wFACwF;AACxF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAI,GAAqB,EAAE;IACpG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,KAAK,KAAK,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,IAAI,WAAW,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3H,OAAO,UAAU,IAAI,IAAI,MAAM,kBAAkB,UAAU,IAAI,CAAC;AAClE,CAAC;AAED;wDACwD;AACxD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,IAAI,GAAqB,EAAE;IACrG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,UAAU,IAAI,WAAW,MAAM,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/I,OAAO,UAAU,IAAI,IAAI,MAAM,gBAAgB,QAAQ,GAAG,CAAC;AAC7D,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAa,EAAE,IAAI,GAAqB,EAAE;IACpG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,IAAI,WAAW,MAAM,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnI,OAAO,UAAU,KAAK,qBAAqB,IAAI,IAAI,MAAM,GAAG,CAAC;AAC/D,CAAC;AAED;;;+EAG+E;AAC/E,SAAS,gBAAgB,CAAC,GAAoB,EAAE,IAAY;IAC1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,8CAA8C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI;YACrH,8DAA8D,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,GAAoB,EAAE,QAAgB;IAC/D,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,oFAAoF;AACpF;;sEAEsE;AACtE,SAAS,qBAAqB,CAAC,GAAoB,EAAE,QAAgB;IACnE,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAwB;IACtD,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,iBAAiB;IAC9B,eAAe,EAAE,qBAAqB;IACtC,QAAQ,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IAC5H,MAAM,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;IACxH,QAAQ,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;CAC7H,CAAC;AAiBF;;wBAEwB;AACxB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAkB,EAAE,IAAI,GAAqB,EAAE;IACnG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,4BAA4B,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrI,MAAM,GAAG,GAAG,MAAM,mBAAmB,CACnC,GAAG,EAAE,CACH,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,SAAS,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC;QAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;KAC/D,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,CACjE,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;IAC3D,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,sDAAsD,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC/B,GAAG,CAAC,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,sBAAsB,EAAE,MAAM,KAAK,CAAC,KAAK,IAAI;KACvD,CAAC;AACJ,CAAC;AAED;;uDAEuD;AACvD,SAAS,iBAAiB,CAAC,GAAoB;IAC7C,MAAM,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,yBAAyB,GAAwB;IAC5D,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC;IAC3D,aAAa,EAAE,iBAAiB;IAChC,MAAM,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC;CAC5D,CAAC"}

package/dist/agent/scm/mint.d.ts

@@ -0,0 +1,76 @@
+import { type KeyObject } from "node:crypto";
+import type { InstallationToken, MintPermissions } from "./types.js";
+import type { RepoCapability } from "../access/repo-capabilities.js";
+export declare const DEFAULT_PERMISSIONS: MintPermissions;
+export declare const READ_PERMISSIONS: MintPermissions;
+export declare const MEMORY_WRITE_PERMISSIONS: MintPermissions;
+export declare const PR_READ_PERMISSIONS: MintPermissions;
+export declare const CONVERSATION_READ_PERMISSIONS: MintPermissions;
+export declare const CONVERSATION_WRITE_PERMISSIONS: MintPermissions;
+export declare const ISSUE_WRITE_PERMISSIONS: MintPermissions;
+/** Permission families a capability set may never name — see rule 3 above. */
+export declare const EXPANSION_FORBIDDEN_FAMILIES: readonly string[];
+/**
+ * NAME → GitHub permission families. The closed table; the ONLY place a capability name becomes a
+ * vendor permission. Every key must exist in access/repo-capabilities.ts and vice versa — the mint
+ * test asserts both directions, so a name can never ship with no mapping.
+ */
+export declare const REPO_CAPABILITY_PERMISSIONS: Readonly<Record<RepoCapability, MintPermissions>>;
+/**
+ * THE MINT DERIVATION. Start from the plane's job set; add the families every named capability set
+ * carries, keeping the stronger grade per family. Pure and total.
+ *
+ * Returns the job set UNCHANGED (same contents) when no capability is named — which is every
+ * binding written as a bare string, and therefore the whole of today's behaviour.
+ *
+ * Throws on a capability this build does not implement, and on any table entry that names a
+ * forbidden family. Both are code errors, not operator errors: config is validated at load
+ * (`assertBundlesValid`), so anything reaching here unknown means the two closed sets disagree.
+ * Failing loudly beats minting a token whose body nobody can explain.
+ */
+export declare function expandMintPermissions(plane: MintPermissions, capabilities?: readonly RepoCapability[], table?: Readonly<Record<string, MintPermissions>>): MintPermissions;
+/**
+ * Hosted platforms (Vercel env vars, etc.) often store the PEM with literal "\n"
+ * instead of real newlines; restore them so the key parses. (Mirrors Eve's own
+ * normalizeGitHubPrivateKey.) No-op when the PEM already has real newlines.
+ */
+export declare function normalizePrivateKeyPem(pem: string): string;
+/**
+ * Parse a GitHub App private key PEM. GitHub issues PKCS#1
+ * ("BEGIN RSA PRIVATE KEY"); node:crypto handles both PKCS#1 and PKCS#8, whereas
+ * jose.importPKCS8 would reject PKCS#1 — hence node:crypto here.
+ */
+export declare function parsePrivateKey(pem: string): KeyObject;
+/**
+ * Sign the app JWT. iat is back-dated 60s to absorb clock drift; exp is 9 min
+ * (GitHub rejects > 10). `nowSeconds` is injected so tests are deterministic.
+ */
+export declare function signAppJwt(key: KeyObject, issuer: string, nowSeconds: number): Promise<string>;
+/**
+ * Body for POST .../access_tokens — down-scoped to a repo subset (≤ 500, by name) and a
+ * permission subset. Can only narrow below the installation grant, never widen.
+ */
+export declare function buildMintBody(repoNames: readonly string[], permissions: MintPermissions): {
+    repositories: string[];
+    permissions: MintPermissions;
+};
+export type FetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text(): Promise<string>;
+    json(): Promise<unknown>;
+}>;
+/** Exchange a signed app JWT for a repo-scoped installation token (1h TTL). */
+export declare function mintInstallationToken(opts: {
+    jwt: string;
+    installationId: string;
+    repoNames: readonly string[];
+    permissions?: MintPermissions;
+    fetchFn?: FetchFn;
+    apiBase?: string;
+}): Promise<InstallationToken>;
+//# sourceMappingURL=mint.d.ts.map

package/dist/agent/scm/mint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint.d.ts","sourceRoot":"","sources":["../../../agent/scm/mint.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAKrE,eAAO,MAAM,mBAAmB,EAAE,eAIjC,CAAC;AAKF,eAAO,MAAM,gBAAgB,EAAE,eAG9B,CAAC;AAKF,eAAO,MAAM,wBAAwB,EAAE,eAGtC,CAAC;AAmBF,eAAO,MAAM,mBAAmB,EAAE,eAIjC,CAAC;AAkCF,eAAO,MAAM,6BAA6B,EAAE,eAI3C,CAAC;AAMF,eAAO,MAAM,8BAA8B,EAAE,eAI5C,CAAC;AAYF,eAAO,MAAM,uBAAuB,EAAE,eAGrC,CAAC;AA4BF,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAAiB,CAAC;AAE5E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAOzF,CAAC;AASF;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,eAAe,EACtB,YAAY,GAAE,SAAS,cAAc,EAAO,EAG5C,KAAK,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAA+B,GAC7E,eAAe,CAsBjB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAEtD;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOpG;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,WAAW,EAAE,eAAe,GAC3B;IAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,eAAe,CAAA;CAAE,CAE1D;AAGD,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,KACpE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AASjG,+EAA+E;AAC/E,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsB7B"}

package/dist/agent/scm/mint.js

@@ -0,0 +1,253 @@
+// Installation-token minting — the security-sensitive core. Two steps per GitHub's
+// docs: sign a short-lived app JWT (RS256), then exchange it for a repo-scoped
+// installation access token. The fetch is injectable so the whole path is testable
+// without network or real credentials. See docs/capabilities/source-control.md.
+import { createPrivateKey } from "node:crypto";
+import { SignJWT } from "jose";
+// The WRITE set — minted only inside the approval-gated PR flow (open_pull_request):
+// contents:write pushes the head branch, pull_requests:write opens the PR. metadata:read
+// is the implicit baseline GitHub requires.
+export const DEFAULT_PERMISSIONS = {
+    contents: "write",
+    pull_requests: "write",
+    metadata: "read",
+};
+// The READ set — what checkout_repo mints for clone/fetch. This is the credential that
+// gets persisted into the clone's git config, so it must not be able to push: writes
+// only ever transit inside the approved PR flow (see tools/open_pull_request.ts).
+export const READ_PERMISSIONS = {
+    contents: "read",
+    metadata: "read",
+};
+// The MEMORY-WRITE set — what the GitHub memory backing mints for its warm per-repo credential.
+// It reads, creates, updates and deletes files through the Contents API. It never opens or edits a
+// pull request, so it must not inherit the PR flow's `pull_requests:write` authority.
+export const MEMORY_WRITE_PERMISSIONS = {
+    contents: "write",
+    metadata: "read",
+};
+// The PR-READ set — what the pr-status resolver mints (scm/pr-status.ts resolveReadToken) for the
+// read-only PR verbs that share it: check_pr_status, get_pr_feedback, walk_pr, subscribe_pr,
+// post_pr_walkthrough and the GitHub entity re-read.
+//
+// WHY IT EXISTS (OPE-353). Those verbs all begin at `GET /repos/{owner}/{repo}/pulls/{number}`, and
+// GitHub's installation-token mint NARROWS TO THE REQUEST BODY: a token minted without
+// `pull_requests` is refused on that endpoint — 403 "Resource not accessible by integration" —
+// however wide the INSTALLATION's own grant is. The grant was never the problem; the mint body was.
+// Until this set existed the resolver passed READ_PERMISSIONS, which has no `pull_requests` at all,
+// so every PR read through the App path 403'd and only a `GITHUB_TOKEN` PAT fallback ever worked.
+//
+// 🔴 IT IS A SEPARATE CONSTANT, NOT A WIDENING OF READ_PERMISSIONS, AND THAT IS THE POINT.
+// READ_PERMISSIONS is the credential checkout_repo PERSISTS into the clone's git config (scm/git.ts
+// — the one token in this plane that outlives its call), so it must stay the narrowest thing that
+// can clone. A token minted here is held in memory for a single api.github.com call and is written
+// nowhere; widening the persisted set to serve the transient one would trade a real fence for a
+// keystroke. Anything that clones keeps asking for READ_PERMISSIONS.
+export const PR_READ_PERMISSIONS = {
+    contents: "read",
+    pull_requests: "read",
+    metadata: "read",
+};
+// ── THE CONVERSATION SETS (OPE-1019 / OPE-1020) ────────────────────────────────────────────────
+//
+// A GitHub CONVERSATION is an issue OR a pull request. The chat plane addresses both through the
+// same endpoints — `GET /repos/{r}/issues/{n}`, `GET|POST /repos/{r}/issues/{n}/comments` — because
+// GitHub's own API model makes every PR an issue. The PERMISSION does not follow that model: GitHub
+// lists those endpoints under BOTH the `issues` and the `pull_requests` repository permission, and
+// a token that names only one of the two is refused on the OTHER resource kind with 403 "Resource
+// not accessible by integration".
+//
+// MEASURED, twice, on deploy #118 with one App installation and one repo:
+//   • a token minted `{contents, pull_requests, metadata}` READ 403'd on a plain issue (OPE-1019);
+//   • a token minted `{issues: write}` POSTED 201 on a plain issue and 403'd on a pull request
+//     (OPE-1020) — the agent was MUTE on every PR thread.
+// Each half was the other's control: one session, one repo, minutes apart, only the mint body
+// different. No `github.token_mint_failed` row appeared, so the mint itself succeeded both times.
+//
+// 🔴 A SET THAT SERVES BOTH KINDS MUST NAME BOTH FAMILIES. That is the whole rule these two
+// constants exist to hold. It is the OPE-353 class one endpoint over: a call site moved and its
+// mint body did not follow. `github-mint-scope-test.ts` joins each call site's URLs to its mint
+// body so the next move cannot pass silently.
+//
+// The narrower alternative is a KIND-AWARE mint — pick `issues` or `pull_requests` from the
+// conversation kind. The kind IS known at the wake (github-identity.ts `conversationKind`), but it
+// rides neither `UnifiedWakeOrigin` nor `ReplyTarget` nor an edit locus, so a kind-aware mint would
+// add a field to three core contracts and double the warm-credential cache. Both sets below stay
+// far narrower than DEFAULT_PERMISSIONS: neither can touch `contents`, so neither can push code.
+// The CONVERSATION-READ set — what the chat/work read of an issue-or-PR conversation mints
+// (scm/pr-status.ts resolveConversationReadToken): the GitHub read adapter and the entity re-read.
+// It carries NO `contents`: a conversation read fetches an issue, its comments and a PR's review
+// comments, and never a file. So it is narrower than PR_READ_PERMISSIONS on one axis and wider on
+// the other, which is why it is a separate constant rather than a widening of that one.
+export const CONVERSATION_READ_PERMISSIONS = {
+    issues: "read",
+    pull_requests: "read",
+    metadata: "read",
+};
+// The CONVERSATION-WRITE set — what the GitHub post arm mints for a comment on an issue OR a pull
+// request (providers/github channels/github-post-arm.ts: the comment POST, the comment PATCH and
+// the reaction POST). `pull_requests: write` lets the token change a PR's own metadata, which is
+// the price of a reply arm that is not mute on PR threads. It still cannot push code.
+export const CONVERSATION_WRITE_PERMISSIONS = {
+    issues: "write",
+    pull_requests: "write",
+    metadata: "read",
+};
+// The ISSUE-WRITE set — minted only inside the ticket-action verbs (scm/issue-actions.ts:
+// set_state/assign/add_label and create_ticket, OPE-39). Deliberately narrower than
+// DEFAULT_PERMISSIONS: these verbs mutate an issue's state/assignees/labels via the Issues REST
+// API, never contents or PR metadata, so the token can't push code or open a PR even if it leaked.
+//
+// ⚠️ KNOWN LIMIT, FILED AS OPE-1021. The three mutation endpoints are ALSO listed under GitHub's
+// Pull requests permission, so this set is predicted to 403 on a PULL REQUEST for the same reason
+// OPE-1020 measured. It is NOT widened here: unlike the reply arm, nothing measured a break, and
+// the widening trades the PR-metadata fence this comment states. OPE-1021 carries the drive that
+// settles it. `create_ticket` (`POST /repos/{r}/issues`) is issues-only and is unaffected.
+export const ISSUE_WRITE_PERMISSIONS = {
+    issues: "write",
+    metadata: "read",
+};
+// ── THE CAPABILITY EXPANSION (OPE-1024) ────────────────────────────────────────────────────────
+//
+// Everything above is a JOB SET: what one plane of work needs, declared narrow, uniform across every
+// repo and every domain. That stays the DEFAULT and it stays what a binding gets with no config.
+//
+// A domain binding may opt one repo into MORE, by naming a capability set (access/repo-capabilities.ts).
+// This is where a name becomes vendor permission families, and it is the only place that mapping
+// exists. Three rules hold it:
+//
+//  1. THE TABLE IS CLOSED IN CODE. Config names a set; it can never write a permission string. So
+//     the reachable families are exactly what this table lists, no matter how wide the App
+//     installation is, and no matter what a config author writes.
+//  2. EXPANSION IS A JOIN, NEVER AN ASSIGNMENT. `expandMintPermissions` unions the job set with the
+//     named sets and keeps the STRONGER of two grades for a family. So an expansion can only ever
+//     add to what the plane already declared — it cannot silently downgrade a family the job needs.
+//  3. 🔴 NO EXPANSION MAY TOUCH `contents`. `READ_PERMISSIONS` is the one token in this plane that
+//     OUTLIVES ITS CALL — checkout_repo persists it into the clone's git config (scm/git.ts). A
+//     capability that could raise `contents` would hand a pushable credential to cloned code, which
+//     is the exact fence the READ/PR_READ split above exists to keep. The rule is asserted at
+//     runtime rather than left to review, because the table is the kind of thing a later change
+//     extends without re-reading this comment.
+//
+// The App installation stays the one GLOBAL ceiling and is never restated here: GitHub refuses a
+// mint that asks past it, and that refusal is audited (`github.token_mint_failed`). That is the
+// always-on backstop for drift. The ask-time check (scm/capability-fit.ts) is the UX half.
+/** Permission families a capability set may never name — see rule 3 above. */
+export const EXPANSION_FORBIDDEN_FAMILIES = ["contents"];
+/**
+ * NAME → GitHub permission families. The closed table; the ONLY place a capability name becomes a
+ * vendor permission. Every key must exist in access/repo-capabilities.ts and vice versa — the mint
+ * test asserts both directions, so a name can never ship with no mapping.
+ */
+export const REPO_CAPABILITY_PERMISSIONS = {
+    // OPE-1021: GitHub lists the issue-mutation endpoints under the Pull requests permission too, so
+    // an `issues`-only token is refused on a PULL REQUEST. This is what lets a domain act on PRs.
+    "pr-admin": { pull_requests: "write" },
+    // GitHub refuses a push that adds or changes `.github/workflows/**` unless the token carries the
+    // Workflows permission, whatever `contents` says.
+    workflows: { workflows: "write" },
+};
+/** Is `a` at least as strong as `b`? "write" beats "read"; an absent family is weakest. */
+function atLeast(a, b) {
+    if (b === undefined)
+        return true;
+    if (a === undefined)
+        return false;
+    return a === "write" || a === b;
+}
+/**
+ * THE MINT DERIVATION. Start from the plane's job set; add the families every named capability set
+ * carries, keeping the stronger grade per family. Pure and total.
+ *
+ * Returns the job set UNCHANGED (same contents) when no capability is named — which is every
+ * binding written as a bare string, and therefore the whole of today's behaviour.
+ *
+ * Throws on a capability this build does not implement, and on any table entry that names a
+ * forbidden family. Both are code errors, not operator errors: config is validated at load
+ * (`assertBundlesValid`), so anything reaching here unknown means the two closed sets disagree.
+ * Failing loudly beats minting a token whose body nobody can explain.
+ */
+export function expandMintPermissions(plane, capabilities = [], 
+// The table is a PARAMETER so the forbidden-family guard is drivable in a test. Production never
+// passes it: there is exactly one table, and it is the one above.
+table = REPO_CAPABILITY_PERMISSIONS) {
+    if (capabilities.length === 0)
+        return plane;
+    const out = { ...plane };
+    for (const cap of capabilities) {
+        const add = table[cap];
+        if (!add) {
+            throw new Error(`unknown repo capability "${cap}" — this build maps ${Object.keys(table).sort().join(", ")}. ` +
+                `A capability is a NAME this deployment implements, never a raw GitHub permission string.`);
+        }
+        for (const [family, grade] of Object.entries(add)) {
+            if (EXPANSION_FORBIDDEN_FAMILIES.includes(family)) {
+                throw new Error(`repo capability "${cap}" maps to the forbidden permission family "${family}" — a capability expansion may never raise it. ` +
+                    `READ_PERMISSIONS is persisted into a clone's git config, so a raisable "contents" would hand cloned code a pushable token.`);
+            }
+            if (!atLeast(out[family], grade))
+                out[family] = grade;
+        }
+    }
+    return out;
+}
+/**
+ * Hosted platforms (Vercel env vars, etc.) often store the PEM with literal "\n"
+ * instead of real newlines; restore them so the key parses. (Mirrors Eve's own
+ * normalizeGitHubPrivateKey.) No-op when the PEM already has real newlines.
+ */
+export function normalizePrivateKeyPem(pem) {
+    return pem.includes("\\n") && !pem.includes("\n") ? pem.replace(/\\n/g, "\n") : pem;
+}
+/**
+ * Parse a GitHub App private key PEM. GitHub issues PKCS#1
+ * ("BEGIN RSA PRIVATE KEY"); node:crypto handles both PKCS#1 and PKCS#8, whereas
+ * jose.importPKCS8 would reject PKCS#1 — hence node:crypto here.
+ */
+export function parsePrivateKey(pem) {
+    return createPrivateKey(normalizePrivateKeyPem(pem));
+}
+/**
+ * Sign the app JWT. iat is back-dated 60s to absorb clock drift; exp is 9 min
+ * (GitHub rejects > 10). `nowSeconds` is injected so tests are deterministic.
+ */
+export async function signAppJwt(key, issuer, nowSeconds) {
+    return new SignJWT({})
+        .setProtectedHeader({ alg: "RS256", typ: "JWT" })
+        .setIssuedAt(nowSeconds - 60)
+        .setExpirationTime(nowSeconds + 9 * 60)
+        .setIssuer(issuer)
+        .sign(key);
+}
+/**
+ * Body for POST .../access_tokens — down-scoped to a repo subset (≤ 500, by name) and a
+ * permission subset. Can only narrow below the installation grant, never widen.
+ */
+export function buildMintBody(repoNames, permissions) {
+    return { repositories: [...new Set(repoNames)].slice(0, 500), permissions };
+}
+/** Exchange a signed app JWT for a repo-scoped installation token (1h TTL). */
+export async function mintInstallationToken(opts) {
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const apiBase = opts.apiBase ?? "https://api.github.com";
+    const res = await fetchFn(`${apiBase}/app/installations/${opts.installationId}/access_tokens`, {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${opts.jwt}`,
+            accept: "application/vnd.github+json",
+            "x-github-api-version": "2022-11-28",
+            "content-type": "application/json",
+        },
+        body: JSON.stringify(buildMintBody(opts.repoNames, opts.permissions ?? DEFAULT_PERMISSIONS)),
+    });
+    if (!res.ok) {
+        throw new Error(`installation token mint failed: ${res.status} ${await res.text()}`);
+    }
+    const json = (await res.json());
+    return {
+        token: json.token,
+        expiresAt: json.expires_at,
+        repositories: (json.repositories ?? []).map((r) => r.full_name),
+    };
+}
+//# sourceMappingURL=mint.js.map

package/dist/agent/scm/mint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint.js","sourceRoot":"","sources":["../../../agent/scm/mint.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,+EAA+E;AAC/E,mFAAmF;AACnF,gFAAgF;AAEhF,OAAO,EAAE,gBAAgB,EAAkB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAI/B,qFAAqF;AACrF,yFAAyF;AACzF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,QAAQ,EAAE,OAAO;IACjB,aAAa,EAAE,OAAO;IACtB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,uFAAuF;AACvF,qFAAqF;AACrF,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,gGAAgG;AAChG,mGAAmG;AACnG,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,kGAAkG;AAClG,6FAA6F;AAC7F,qDAAqD;AACrD,EAAE;AACF,oGAAoG;AACpG,uFAAuF;AACvF,+FAA+F;AAC/F,oGAAoG;AACpG,oGAAoG;AACpG,kGAAkG;AAClG,EAAE;AACF,2FAA2F;AAC3F,oGAAoG;AACpG,kGAAkG;AAClG,mGAAmG;AACnG,gGAAgG;AAChG,qEAAqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAoB;IAClD,QAAQ,EAAE,MAAM;IAChB,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,kGAAkG;AAClG,EAAE;AACF,iGAAiG;AACjG,oGAAoG;AACpG,oGAAoG;AACpG,mGAAmG;AACnG,kGAAkG;AAClG,kCAAkC;AAClC,EAAE;AACF,0EAA0E;AAC1E,mGAAmG;AACnG,+FAA+F;AAC/F,0DAA0D;AAC1D,8FAA8F;AAC9F,kGAAkG;AAClG,EAAE;AACF,4FAA4F;AAC5F,gGAAgG;AAChG,gGAAgG;AAChG,8CAA8C;AAC9C,EAAE;AACF,4FAA4F;AAC5F,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,iGAAiG;AAEjG,2FAA2F;AAC3F,mGAAmG;AACnG,iGAAiG;AACjG,kGAAkG;AAClG,wFAAwF;AACxF,MAAM,CAAC,MAAM,6BAA6B,GAAoB;IAC5D,MAAM,EAAE,MAAM;IACd,aAAa,EAAE,MAAM;IACrB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,kGAAkG;AAClG,iGAAiG;AACjG,iGAAiG;AACjG,sFAAsF;AACtF,MAAM,CAAC,MAAM,8BAA8B,GAAoB;IAC7D,MAAM,EAAE,OAAO;IACf,aAAa,EAAE,OAAO;IACtB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,0FAA0F;AAC1F,oFAAoF;AACpF,gGAAgG;AAChG,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,iGAAiG;AACjG,iGAAiG;AACjG,2FAA2F;AAC3F,MAAM,CAAC,MAAM,uBAAuB,GAAoB;IACtD,MAAM,EAAE,OAAO;IACf,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,kGAAkG;AAClG,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,EAAE;AACF,yGAAyG;AACzG,iGAAiG;AACjG,+BAA+B;AAC/B,EAAE;AACF,kGAAkG;AAClG,2FAA2F;AAC3F,kEAAkE;AAClE,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,mGAAmG;AACnG,gGAAgG;AAChG,oGAAoG;AACpG,8FAA8F;AAC9F,gGAAgG;AAChG,+CAA+C;AAC/C,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,2FAA2F;AAE3F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAsB,CAAC,UAAU,CAAC,CAAC;AAE5E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsD;IAC5F,iGAAiG;IACjG,8FAA8F;IAC9F,UAAU,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;IACtC,iGAAiG;IACjG,kDAAkD;IAClD,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE;CAClC,CAAC;AAEF,2FAA2F;AAC3F,SAAS,OAAO,CAAC,CAAqB,EAAE,CAAqB;IAC3D,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAsB,EACtB,YAAY,GAA8B,EAAE;AAC5C,iGAAiG;AACjG,kEAAkE;AAClE,KAAK,GAA8C,2BAA2B;IAE9E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,GAAG,GAAuC,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,uBAAuB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAC5F,0FAA0F,CAC7F,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,4BAA4B,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CACb,oBAAoB,GAAG,8CAA8C,MAAM,iDAAiD;oBAC1H,4HAA4H,CAC/H,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,GAAsB,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACtF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,gBAAgB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAc,EAAE,MAAc,EAAE,UAAkB;IACjF,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;SACnB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAChD,WAAW,CAAC,UAAU,GAAG,EAAE,CAAC;SAC5B,iBAAiB,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC;SACtC,SAAS,CAAC,MAAM,CAAC;SACjB,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,SAA4B,EAC5B,WAA4B;IAE5B,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;AAC9E,CAAC;AAeD,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAO3C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA4B,CAAC;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,sBAAsB,IAAI,CAAC,cAAc,gBAAgB,EAAE;QAC7F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;KAC7F,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAChD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,UAAU;QAC1B,YAAY,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/agent/scm/pr-activity.d.ts

@@ -0,0 +1,50 @@
+import { type PrFetchFn } from "./pr.js";
+/** Counts-only PR activity — no bodies, no authors beyond the single latest reviewer. */
+export interface PrActivitySummary {
+    /** Submitted reviews (PENDING drafts excluded — they belong to their author, not the PR). */
+    readonly reviews: number;
+    readonly approvals: number;
+    readonly changesRequested: number;
+    /** The most recent submitted review, as structure only (login + state), for the diff label. */
+    readonly latestReview?: {
+        readonly author: string;
+        readonly state: string;
+    };
+    /** Issue-thread comments on the PR (`comments` on the PR payload). */
+    readonly issueComments: number;
+    /** Inline diff comments (`review_comments` on the PR payload). */
+    readonly reviewComments: number;
+    readonly commits: number;
+}
+export declare const EMPTY_PR_ACTIVITY: PrActivitySummary;
+/** Only the review fields — what {@link summarizeReviews} derives from the reviews list. */
+export type PrReviewTally = Pick<PrActivitySummary, "reviews" | "approvals" | "changesRequested" | "latestReview">;
+/** The review shape we read (GitHub returns much more). */
+export interface RawPrReview {
+    readonly user?: {
+        readonly login?: string;
+    };
+    readonly state?: string;
+}
+/**
+ * Tally submitted reviews. PENDING is an unsubmitted draft visible only to its author — never
+ * anyone's feedback — so it is dropped, exactly as fetchPrFeedback drops it. GitHub returns
+ * reviews oldest-first, so the LAST submitted one is the latest.
+ */
+export declare function summarizeReviews(raw: readonly RawPrReview[]): PrReviewTally;
+/** Fetch a PR's submitted reviews via `GET /repos/{repo}/pulls/{number}/reviews`. Throws on a bad
+ *  response — the CALLER decides whether that is fatal (fetchPullRequestStatus treats it as
+ *  best-effort, the same way it treats check-runs). */
+export declare function fetchPrReviews(opts: {
+    repo: string;
+    number: number;
+    token: string;
+    fetchFn?: PrFetchFn;
+    apiBase?: string;
+}): Promise<RawPrReview[]>;
+/** Has anything happened on this PR at all? An all-zero roll-up adds nothing to a summary line. */
+export declare function prHasActivity(a: PrActivitySummary): boolean;
+/** Compact one-line activity note for a status summary, e.g.
+ *  `activity: 1 approval, 3 comments, 2 inline, 5 commits`. Empty string when nothing happened. */
+export declare function describeActivity(a: PrActivitySummary): string;
+//# sourceMappingURL=pr-activity.d.ts.map

package/dist/agent/scm/pr-activity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-activity.d.ts","sourceRoot":"","sources":["../../../agent/scm/pr-activity.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvD,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,+FAA+F;IAC/F,QAAQ,CAAC,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5E,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,iBAAiB,EAAE,iBAO/B,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,WAAW,GAAG,kBAAkB,GAAG,cAAc,CAAC,CAAC;AAEnH,2DAA2D;AAC3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAUD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,SAAS,WAAW,EAAE,GAAG,aAAa,CAc3E;AAED;;uDAEuD;AACvD,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAczB;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAE3D;AAMD;mGACmG;AACnG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAU7D"}

package/dist/agent/scm/pr-activity.js

@@ -0,0 +1,102 @@
+// PR ACTIVITY (OPE-61) — the review/comment/commit signal a STATUS-only subscription misses.
+//
+// subscribe_pr watched a PR's STATUS (open/closed/merged/draft/title, plus the OPE-103 checks
+// roll-up). But the thing people actually want to hear about — "someone approved it", "Alice
+// requested changes", "there are three new comments", "they pushed again" — was invisible: none
+// of it moves any of those fields. That is the gap between the shipped tool and the issue's own
+// title ("PR-ACTIVITY subscription"), and it is what the static config-as-code webhook path
+// (routines/events.ts, `pull_request_review` / `issue_comment` deliveries) already covered.
+//
+// This module is the counts-only roll-up that closes it, deliberately SMALLER than the
+// get_pr_feedback digest (scm/pr-feedback.ts): a subscription needs to know THAT feedback
+// arrived, not WHAT it said — the model calls get_pr_feedback when it wants to read it. So no
+// bodies ever land here, which is also why a subscription's roll-up is cheap enough to re-read
+// every check and safe enough to embed in a routine prompt.
+//
+// COST: three of the five counts (issue comments, inline review comments, commits) come FREE
+// off the single-PR payload fetchPullRequestStatus already reads. Only the review tally needs
+// its own call, and it rides the same best-effort block as the check-runs read.
+import { prApiHeaders } from "./pr.js";
+export const EMPTY_PR_ACTIVITY = {
+    reviews: 0,
+    approvals: 0,
+    changesRequested: 0,
+    issueComments: 0,
+    reviewComments: 0,
+    commits: 0,
+};
+/** GitHub logins are `[A-Za-z0-9-]`, ≤39 chars — but this one ends up inside a routine PROMPT, so
+ *  narrow it to that alphabet HERE rather than trusting the API to have enforced it. Never a body. */
+const MAX_LOGIN_CHARS = 39;
+function safeLogin(login) {
+    const s = (login ?? "").replace(/[^A-Za-z0-9._-]/g, "").slice(0, MAX_LOGIN_CHARS);
+    return s.length > 0 ? s : "(unknown)";
+}
+/**
+ * Tally submitted reviews. PENDING is an unsubmitted draft visible only to its author — never
+ * anyone's feedback — so it is dropped, exactly as fetchPrFeedback drops it. GitHub returns
+ * reviews oldest-first, so the LAST submitted one is the latest.
+ */
+export function summarizeReviews(raw) {
+    let reviews = 0;
+    let approvals = 0;
+    let changesRequested = 0;
+    let latestReview;
+    for (const r of raw) {
+        const state = (r.state ?? "COMMENTED").toUpperCase();
+        if (state === "PENDING")
+            continue;
+        reviews++;
+        if (state === "APPROVED")
+            approvals++;
+        if (state === "CHANGES_REQUESTED")
+            changesRequested++;
+        latestReview = { author: safeLogin(r.user?.login), state };
+    }
+    return latestReview ? { reviews, approvals, changesRequested, latestReview } : { reviews, approvals, changesRequested };
+}
+/** Fetch a PR's submitted reviews via `GET /repos/{repo}/pulls/{number}/reviews`. Throws on a bad
+ *  response — the CALLER decides whether that is fatal (fetchPullRequestStatus treats it as
+ *  best-effort, the same way it treats check-runs). */
+export async function fetchPrReviews(opts) {
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const apiBase = opts.apiBase ?? "https://api.github.com";
+    const res = await fetchFn(`${apiBase}/repos/${opts.repo}/pulls/${opts.number}/reviews?per_page=100`, {
+        method: "GET",
+        headers: prApiHeaders(opts.token),
+    });
+    if (!res.ok) {
+        throw new Error(`GitHub reviews lookup failed for ${opts.repo}#${opts.number}: ${res.status} ${await res.text()}`);
+    }
+    const body = (await res.json());
+    // The single-PR endpoint and this one differ in shape; a stub/proxy that answers both with the
+    // PR object must not be read as a review list.
+    return Array.isArray(body) ? body : [];
+}
+/** Has anything happened on this PR at all? An all-zero roll-up adds nothing to a summary line. */
+export function prHasActivity(a) {
+    return a.reviews > 0 || a.issueComments > 0 || a.reviewComments > 0 || a.commits > 0;
+}
+function plural(n, one, many = `${one}s`) {
+    return `${n} ${n === 1 ? one : many}`;
+}
+/** Compact one-line activity note for a status summary, e.g.
+ *  `activity: 1 approval, 3 comments, 2 inline, 5 commits`. Empty string when nothing happened. */
+export function describeActivity(a) {
+    const parts = [];
+    if (a.approvals > 0)
+        parts.push(plural(a.approvals, "approval"));
+    if (a.changesRequested > 0)
+        parts.push(plural(a.changesRequested, "change request"));
+    const otherReviews = a.reviews - a.approvals - a.changesRequested;
+    if (otherReviews > 0)
+        parts.push(plural(otherReviews, "review"));
+    if (a.issueComments > 0)
+        parts.push(plural(a.issueComments, "comment"));
+    if (a.reviewComments > 0)
+        parts.push(`${a.reviewComments} inline`);
+    if (a.commits > 0)
+        parts.push(plural(a.commits, "commit"));
+    return parts.length > 0 ? `activity: ${parts.join(", ")}` : "";
+}
+//# sourceMappingURL=pr-activity.js.map

package/dist/agent/scm/pr-activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-activity.js","sourceRoot":"","sources":["../../../agent/scm/pr-activity.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,8FAA8F;AAC9F,6FAA6F;AAC7F,gGAAgG;AAChG,gGAAgG;AAChG,4FAA4F;AAC5F,4FAA4F;AAC5F,EAAE;AACF,uFAAuF;AACvF,0FAA0F;AAC1F,8FAA8F;AAC9F,+FAA+F;AAC/F,4DAA4D;AAC5D,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,gFAAgF;AAEhF,OAAO,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AAiBvD,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,CAAC;IACZ,gBAAgB,EAAE,CAAC;IACnB,aAAa,EAAE,CAAC;IAChB,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC;CACX,CAAC;AAWF;sGACsG;AACtG,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,SAAS,SAAS,CAAC,KAAyB;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA2B;IAC1D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,YAA2D,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,OAAO,EAAE,CAAC;QACV,IAAI,KAAK,KAAK,UAAU;YAAE,SAAS,EAAE,CAAC;QACtC,IAAI,KAAK,KAAK,mBAAmB;YAAE,gBAAgB,EAAE,CAAC;QACtD,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;AAC1H,CAAC;AAED;;uDAEuD;AACvD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,MAAM,uBAAuB,EAAE;QACnG,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;IAC3C,+FAA+F;IAC/F,+CAA+C;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,CAAoB;IAChD,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,MAAM,CAAC,CAAS,EAAE,GAAW,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG;IACtD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;mGACmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,CAAoB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,gBAAgB,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,gBAAgB,CAAC;IAClE,IAAI,YAAY,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,aAAa,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC,cAAc,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,cAAc,SAAS,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/agent/scm/pr-diff.d.ts

@@ -0,0 +1,61 @@
+import { type PrFetchFn } from "./pr.js";
+/**
+ * Char cap on the unified diff carried into a review surface. A diff past this is reported clipped.
+ *
+ * Set BELOW `access/result-cap.ts`'s {@link DEFAULT_MAX_RESULT_CHARS} (120k) on purpose: the diff
+ * reaches the model inside an untrusted envelope, and `wrapUntrusted` caps that envelope too. If
+ * this cap were the larger of the two, the second one would silently clip the diff again — and the
+ * clip a reader was TOLD about would not be the clip that happened.
+ */
+export declare const MAX_DIFF_CHARS = 100000;
+export interface PrDiffSnapshot {
+    readonly repo: string;
+    readonly number: number;
+    readonly headSha: string;
+    readonly baseRef: string;
+    /** The unified diff, possibly clipped — UNTRUSTED third-party text. */
+    readonly diff: string;
+    /** True when {@link diff} was clipped at {@link MAX_DIFF_CHARS}. */
+    readonly diffClipped: boolean;
+    /** Total chars GitHub returned, before clipping. */
+    readonly diffChars: number;
+    /** Paths the diff touches, sorted, possibly capped at {@link MAX_DIFF_FILES}. */
+    readonly files: readonly string[];
+    /** True when {@link files} was capped — so "this PR touches no config" must not be concluded from it. */
+    readonly filesCapped: boolean;
+    /** `base.repo.private` as GitHub reports it on the PR object {@link fetchPrDiff} ALREADY fetches —
+     *  the source-tier table's deciding fact for the `github` row (OPE-331), so `walk_pr`'s known
+     *  under-taint row states a REAL verdict instead of the fail-closed guess. BASE, never HEAD: a
+     *  fork's `head.repo` is public while the repository under review is the base one. `undefined`
+     *  only when GitHub omitted it, which keeps the table fail-closed. NO extra API call. */
+    readonly repoPrivate?: boolean;
+}
+/**
+ * Extract the touched paths from a unified diff's `diff --git a/X b/Y` headers.
+ *
+ * BOTH sides are collected, so a RENAME contributes its old and its new path. That matters for the
+ * trigger question: renaming a file OUT of `agent/` still moves the resolved config, and a reading
+ * that only took the `b/` side would call such a PR "touches no config".
+ *
+ * Quoted paths (git quotes a path containing a space or a non-ASCII byte) are NOT unquoted here —
+ * they are carried with their quotes, which makes them fail a glob match rather than match the
+ * wrong glob. Erring toward "unmatched" is the wrong direction for the trigger check, so callers
+ * treat a capped/odd file list as a reason not to conclude `not-triggered`; see {@link filesCapped}.
+ */
+export declare function filesFromUnifiedDiff(diff: string): string[];
+/**
+ * Fetch the PR's unified diff + refs.
+ *
+ * The diff comes from the same `pulls/{n}` endpoint with `Accept: application/vnd.github.v3.diff`,
+ * which GitHub answers with `text/plain`. A PR too large for GitHub to render as a diff answers 406;
+ * that is surfaced as an error rather than an empty diff, because an empty diff would let a
+ * walkthrough claim it reviewed a change it never saw.
+ */
+export declare function fetchPrDiff(opts: {
+    repo: string;
+    number: number;
+    token: string;
+    fetchFn?: PrFetchFn;
+    apiBase?: string;
+}): Promise<PrDiffSnapshot>;
+//# sourceMappingURL=pr-diff.d.ts.map

package/dist/agent/scm/pr-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-diff.d.ts","sourceRoot":"","sources":["../../../agent/scm/pr-diff.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAEvD;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,SAAU,CAAC;AAKtC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,yGAAyG;IACzG,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B;;;;6FAIyF;IACzF,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAO3D;AAwBD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,cAAc,CAAC,CA6B1B"}