@open-everywhere/core 0.1.0

package/dist/agent/scm/pr-status.js

@@ -0,0 +1,199 @@
+// A read-only GitHub PR status snapshot — the primitive both check_pr_status and
+// subscribe_pr build on. subscribe_pr's whole re-arm loop is a fired routine turn
+// calling check_pr_status again and diffing what it sees against the prompt's
+// embedded baseline (routines/routine.ts's `once` kind + create_routine's own
+// documented "just create another one-shot to check again" pattern — no new
+// dispatcher machinery needed, see tools/subscribe_pr.ts's header for the design).
+import { getGitHubApp } from "./provider.js";
+import { CONVERSATION_READ_PERMISSIONS, PR_READ_PERMISSIONS } from "./mint.js";
+import { prApiHeaders } from "./pr.js";
+import { describeActivity, fetchPrReviews, prHasActivity, summarizeReviews, } from "./pr-activity.js";
+/** Conclusions that count as a failing check for the `failing`/`describeChecks` roll-up. */
+export const CHECK_FAILURE_CONCLUSIONS = new Set([
+    "failure",
+    "timed_out",
+    "action_required",
+    "cancelled",
+    "stale",
+]);
+/** Cap on failing check-run NAMES carried in a snapshot summary (counts stay exact). */
+export const MAX_FAILING_CHECK_NAMES = 20;
+/** Roll a list of check runs up into the compact {@link PrChecksSummary}. Pure. */
+export function summarizeChecks(runs) {
+    const byConclusion = {};
+    const failing = [];
+    let pending = 0;
+    for (const r of runs) {
+        const bucket = r.conclusion ?? (r.status === "completed" ? "neutral" : "pending");
+        byConclusion[bucket] = (byConclusion[bucket] ?? 0) + 1;
+        if (r.conclusion !== null && CHECK_FAILURE_CONCLUSIONS.has(r.conclusion))
+            failing.push(r.name);
+        if (r.conclusion === null && r.status !== "completed")
+            pending++;
+    }
+    return {
+        total: runs.length,
+        byConclusion,
+        failing: failing.slice(0, MAX_FAILING_CHECK_NAMES),
+        failingTruncated: failing.length > MAX_FAILING_CHECK_NAMES,
+        pending,
+    };
+}
+/** Fetch a head's check runs via `GET /repos/{repo}/commits/{ref}/check-runs`. */
+export async function fetchCheckRuns(opts) {
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const apiBase = opts.apiBase ?? "https://api.github.com";
+    const res = await fetchFn(`${apiBase}/repos/${opts.repo}/commits/${opts.ref}/check-runs?per_page=100`, {
+        method: "GET",
+        headers: prApiHeaders(opts.token),
+    });
+    if (!res.ok) {
+        throw new Error(`GitHub check-runs lookup failed for ${opts.repo}@${opts.ref}: ${res.status} ${await res.text()}`);
+    }
+    const body = (await res.json());
+    return (body.check_runs ?? []).map((c) => ({
+        name: c.name ?? "(unnamed)",
+        status: c.status ?? "unknown",
+        conclusion: c.conclusion ?? null,
+        summary: (c.output?.summary ?? c.output?.title ?? "").trim(),
+    }));
+}
+/** Fetch one PR's current status via `GET /repos/{repo}/pulls/{number}`, plus a best-effort
+ *  compact checks roll-up at its head (skipped silently if the head sha or check-runs read is
+ *  unavailable — the checks summary must never fail the status read a subscription depends on). */
+export async function fetchPullRequestStatus(opts) {
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const apiBase = opts.apiBase ?? "https://api.github.com";
+    const res = await fetchFn(`${apiBase}/repos/${opts.repo}/pulls/${opts.number}`, {
+        method: "GET",
+        headers: prApiHeaders(opts.token),
+    });
+    if (!res.ok) {
+        throw new Error(`GitHub PR lookup failed for ${opts.repo}#${opts.number}: ${res.status} ${await res.text()}`);
+    }
+    const pr = (await res.json());
+    // Three of the five activity counts ride the payload we already have — free (OPE-61).
+    const counts = {
+        issueComments: num(pr.comments),
+        reviewComments: num(pr.review_comments),
+        commits: num(pr.commits),
+    };
+    const base = {
+        repo: opts.repo,
+        number: opts.number,
+        url: pr.html_url,
+        title: pr.title,
+        state: pr.state === "closed" ? "closed" : "open",
+        merged: Boolean(pr.merged),
+        draft: Boolean(pr.draft),
+        updatedAt: pr.updated_at,
+        activity: { reviews: 0, approvals: 0, changesRequested: 0, ...counts },
+        ...(typeof pr.base?.repo?.private === "boolean" ? { repoPrivate: pr.base.repo.private } : {}),
+    };
+    const headSha = pr.head?.sha;
+    if (!headSha)
+        return base;
+    // Checks AND the review tally are both nice-to-haves on the snapshot, both keyed off having a
+    // head, and both best-effort: a failing secondary read must not sink the status a subscription
+    // re-arm depends on. Run them together so a subscription check costs one extra round trip, not
+    // two, and settle each independently.
+    const [runs, reviews] = await Promise.all([
+        fetchCheckRuns({ repo: opts.repo, ref: headSha, token: opts.token, fetchFn, apiBase }).catch(() => null),
+        fetchPrReviews({ repo: opts.repo, number: opts.number, token: opts.token, fetchFn, apiBase }).catch(() => null),
+    ]);
+    const activity = { ...summarizeReviews(reviews ?? []), ...counts };
+    const checks = runs && runs.length > 0 ? summarizeChecks(runs) : undefined;
+    return checks ? { ...base, checks, activity } : { ...base, activity };
+}
+function num(v) {
+    return typeof v === "number" && Number.isFinite(v) && v > 0 ? Math.floor(v) : 0;
+}
+/** A compact one-line checks note for {@link describePrStatus}, e.g. `checks: 4 ok, 1 failing (build), 2 pending`. */
+export function describeChecks(c) {
+    const parts = [];
+    const ok = (c.byConclusion.success ?? 0) + (c.byConclusion.neutral ?? 0) + (c.byConclusion.skipped ?? 0);
+    if (ok > 0)
+        parts.push(`${ok} ok`);
+    if (c.failing.length > 0 || c.failingTruncated) {
+        const names = c.failing.length > 0 ? ` (${c.failing.join(", ")}${c.failingTruncated ? ", …" : ""})` : "";
+        const failCount = c.total - ok - c.pending;
+        parts.push(`${failCount} failing${names}`);
+    }
+    if (c.pending > 0)
+        parts.push(`${c.pending} pending`);
+    return `checks: ${parts.length > 0 ? parts.join(", ") : `${c.total} run(s)`}`;
+}
+/** One-line human summary of a snapshot — the "baseline" text a subscription embeds
+ *  in its next one-shot prompt so the re-armed check has something to diff against. */
+export function describePrStatus(s) {
+    const checks = s.checks ? ` — ${describeChecks(s.checks)}` : "";
+    const act = s.activity && prHasActivity(s.activity) ? ` — ${describeActivity(s.activity)}` : "";
+    return `${prStateLabel(s)} — "${s.title}" (updated ${s.updatedAt}) ${s.url}${checks}${act}`;
+}
+/** The OPEN/MERGED/CLOSED/draft label alone. */
+export function prStateLabel(s) {
+    return s.merged ? "MERGED" : s.state === "closed" ? "CLOSED (not merged)" : s.draft ? "OPEN (draft)" : "OPEN";
+}
+/**
+ * {@link describePrStatus} MINUS the PR title — the summary a routine PROMPT embeds (OPE-61).
+ *
+ * A PR title is third-party free text: whoever opened the PR wrote it. describePrStatus splices it
+ * into a plain sentence, which is fine for a tool result but NOT for a stored routine prompt, where
+ * it would land in trusted-instruction position in a LATER turn — the exact break-out routines/
+ * events.ts had to fix for webhook payloads (G3). subscribe_pr therefore builds its baseline from
+ * this title-free line and carries the title separately, inside an untrusted fence.
+ */
+export function describePrStatusStructural(s) {
+    const checks = s.checks ? ` — ${describeChecks(s.checks)}` : "";
+    const act = s.activity && prHasActivity(s.activity) ? ` — ${describeActivity(s.activity)}` : "";
+    return `${prStateLabel(s)} (updated ${s.updatedAt}) ${s.url}${checks}${act}`;
+}
+/** True once a PR has reached a terminal state — nothing left to watch for. */
+export function prIsSettled(s) {
+    return s.merged || s.state === "closed";
+}
+/**
+ * Resolve a READ-scoped GitHub credential for one repo: a GitHub App installation
+ * token minted with {@link PR_READ_PERMISSIONS} (never the write set open_pull_request.ts
+ * mints), falling back to a `GITHUB_TOKEN` PAT when the App isn't configured for that
+ * repo's owner. Mirrors open_pull_request.ts's resolvePrToken, read-scoped.
+ *
+ * 🔴 THE PERMISSION SET IS `PR_READ_PERMISSIONS`, NOT `READ_PERMISSIONS` (OPE-353). Every caller of
+ * this resolver starts at `GET /repos/{repo}/pulls/{number}`, and the mint narrows the token to
+ * whatever the request body asked for — so the checkout set (contents + metadata, no
+ * `pull_requests`) 403s that endpoint outright, which is what a live run saw. The two sets stay
+ * separate deliberately: this one is transient and in-memory, the checkout one is persisted into a
+ * clone's git config, and only the first may carry `pull_requests`. See scm/mint.ts.
+ */
+export async function resolveReadToken(repo, app = getGitHubApp()) {
+    return await resolveTokenWith(repo, PR_READ_PERMISSIONS, app);
+}
+/**
+ * Resolve a CONVERSATION-READ credential for one repo — {@link CONVERSATION_READ_PERMISSIONS} via
+ * the GitHub App, with the same `GITHUB_TOKEN` PAT fallback {@link resolveReadToken} takes.
+ *
+ * 🔴 IT IS A SECOND RESOLVER, NOT A WIDENING OF {@link resolveReadToken} (OPE-1019). Its callers
+ * open at `GET /repos/{repo}/issues/{number}`, which serves an issue AND a pull request, so the
+ * token has to name BOTH permission families. `resolveReadToken`'s callers open at
+ * `GET /repos/{repo}/pulls/{number}`, which serves one kind and needs `contents` for the PR diff.
+ * One resolver for both call shapes would carry every permission either shape can want. See
+ * scm/mint.ts for the measurement behind the split.
+ */
+export async function resolveConversationReadToken(repo, app = getGitHubApp()) {
+    return await resolveTokenWith(repo, CONVERSATION_READ_PERMISSIONS, app);
+}
+/** The 8-liner both resolvers above share: mint through the App, else fall back to the PAT. The
+ *  permission set is the ONLY difference between them, so it is the only parameter. */
+async function resolveTokenWith(repo, permissions, app) {
+    if (app) {
+        const { tokens, ungranted } = await app.tokensForRepos([repo], permissions);
+        if (!ungranted.length)
+            return tokens.get(repo.slice(0, repo.indexOf("/"))).token;
+    }
+    const pat = process.env.GITHUB_TOKEN;
+    if (!pat) {
+        throw new Error("no GitHub credential: configure the GitHub App (OE_GITHUB_APP_*) or set GITHUB_TOKEN.");
+    }
+    return pat;
+}
+//# sourceMappingURL=pr-status.js.map

package/dist/agent/scm/pr-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-status.js","sourceRoot":"","sources":["../../../agent/scm/pr-status.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,kFAAkF;AAClF,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,mFAAmF;AAGnF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAkB,MAAM,SAAS,CAAC;AACvD,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,GAEjB,MAAM,kBAAkB,CAAC;AAoD1B,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,WAAW;IACX,OAAO;CACR,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClF,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,EAAE,CAAC;IACnE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;QAClD,gBAAgB,EAAE,OAAO,CAAC,MAAM,GAAG,uBAAuB;QAC1D,OAAO;KACR,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,GAAG,0BAA0B,EAAE;QACrG,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,WAAW;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;QAC7B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;QAChC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;KAC7D,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;mGAEmG;AACnG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAM5C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;QAC9E,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAa3B,CAAC;IACF,sFAAsF;IACtF,MAAM,MAAM,GAAG;QACb,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QAC/B,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC;QACvC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC;KACzB,CAAC;IACF,MAAM,IAAI,GAAqB;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,EAAE,CAAC,QAAQ;QAChB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QAChD,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;QACxB,SAAS,EAAE,EAAE,CAAC,UAAU;QACxB,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE;QACtE,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,8FAA8F;IAC9F,+FAA+F;IAC/F,+FAA+F;IAC/F,sCAAsC;IACtC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxC,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACxG,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAChH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAsB,EAAE,GAAG,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,cAAc,CAAC,CAAkB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACzG,IAAI,EAAE,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,WAAW,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC;IACtD,OAAO,WAAW,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;AAChF,CAAC;AAED;uFACuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;AAC9F,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,CAAmB;IAC9C,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;AAChH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,CAAmB;IAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,CAAmB;IAC7C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAG,GAAqB,YAAY,EAAE;IACzF,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,IAAY,EACZ,GAAG,GAAqB,YAAY,EAAE;IAEtC,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC;AAC1E,CAAC;AAED;uFACuF;AACvF,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,WAA4B,EAC5B,GAAqB;IAErB,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IACpF,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent/scm/pr-watch.d.ts

@@ -0,0 +1,26 @@
+import { type PrStatusSnapshot } from "./pr-status.js";
+/** Fingerprint grammar version — bump when a FIELD's meaning changes, so an in-flight chain
+ *  carrying an older line is treated as "no baseline" (silence) rather than misread. */
+export declare const PR_FINGERPRINT_VERSION = "v1";
+/**
+ * Hard cap on how many checks ONE subscription chain may run before it retires itself and tells the
+ * channel to re-subscribe. 96 = a day of the 15-minute default. Deliberately a COUNT: the interval
+ * is caller-chosen (5 min … 24 h), so a wall-clock cap would mean something different at each end,
+ * whereas the cost being bounded — one model turn per check — is per-check either way.
+ */
+export declare const MAX_CHECKS_PER_SUBSCRIPTION = 96;
+/** Compact opaque line, e.g. `v1 st=open mg=0 dr=0 ti=1k2j3h rv=1 ap=1 … ck=4/1/0`. The title is
+ *  HASHED, never carried: a fingerprint rides a routine prompt, and third-party text doesn't. */
+export declare function prFingerprint(s: PrStatusSnapshot): string;
+/** Parse a fingerprint back to its fields, or null if it isn't one of ours (wrong version, empty,
+ *  reworded by the model, a summary line pasted by mistake). */
+export declare function parsePrFingerprint(fp: string | undefined): Record<string, string> | null;
+/**
+ * What changed between a previous fingerprint and the current snapshot, as short human labels the
+ * fired check can post verbatim. Empty = nothing to say (and an absent/unparseable `prev` is
+ * deliberately empty too — a subscription that can't tell should stay QUIET, not invent an event).
+ */
+export declare function diffPrFingerprint(prev: string | undefined, s: PrStatusSnapshot): string[];
+/** True when {@link diffPrFingerprint} found anything worth posting. */
+export declare function prChangedSince(prev: string | undefined, s: PrStatusSnapshot): boolean;
+//# sourceMappingURL=pr-watch.d.ts.map

package/dist/agent/scm/pr-watch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-watch.d.ts","sourceRoot":"","sources":["../../../agent/scm/pr-watch.ts"],"names":[],"mappings":"AAkBA,OAAO,EAA6B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElF;wFACwF;AACxF,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAyB9C;iGACiG;AACjG,wBAAgB,aAAa,CAAC,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAGzD;AAED;gEACgE;AAChE,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CASxF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAmCzF;AAED,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAErF"}

package/dist/agent/scm/pr-watch.js

@@ -0,0 +1,165 @@
+// PR-WATCH DIFF (OPE-61) — what actually changed on a PR since the last check, decided in CODE.
+//
+// A subscription's re-arm chain is instructional: each one-shot check carries the previous check's
+// findings in its own prompt (tools/subscribe_pr.ts). Until now that meant the MODEL diffed two
+// prose summaries and decided whether to speak — which is both unreliable (a reworded line reads as
+// a change; a new approval buried in a counts note reads as noise) and untestable.
+//
+// So the prompt carries a FINGERPRINT instead: a compact, versioned, delimiter-free key=value line
+// the tool emits and the next check passes back as `since`. The tool then reports the diff itself,
+// as a list of plain-English labels, and the model's only job is to relay them. The fingerprint is
+// NOT a security boundary — it is model-visible and model-returned, and the worst a mangled one can
+// do is produce a wrong "nothing changed" (handled: an unparseable `since` yields NO changes, so
+// the failure mode is silence, never a fabricated event).
+//
+// It also caps the chain: {@link MAX_CHECKS_PER_SUBSCRIPTION}. Every fired check is a real model
+// turn, so an open-forever PR would otherwise poll (and bill) indefinitely — the count, not the
+// wall-clock, is the thing worth bounding, because the interval is the caller's choice.
+import { CHECK_FAILURE_CONCLUSIONS } from "./pr-status.js";
+/** Fingerprint grammar version — bump when a FIELD's meaning changes, so an in-flight chain
+ *  carrying an older line is treated as "no baseline" (silence) rather than misread. */
+export const PR_FINGERPRINT_VERSION = "v1";
+/**
+ * Hard cap on how many checks ONE subscription chain may run before it retires itself and tells the
+ * channel to re-subscribe. 96 = a day of the 15-minute default. Deliberately a COUNT: the interval
+ * is caller-chosen (5 min … 24 h), so a wall-clock cap would mean something different at each end,
+ * whereas the cost being bounded — one model turn per check — is per-check either way.
+ */
+export const MAX_CHECKS_PER_SUBSCRIPTION = 96;
+/** The diffable field set. Order is fixed so the rendered line is stable for equal snapshots. */
+function fingerprintFields(s) {
+    const a = s.activity;
+    const c = s.checks;
+    let failing = 0;
+    for (const [conclusion, count] of Object.entries(c?.byConclusion ?? {})) {
+        if (CHECK_FAILURE_CONCLUSIONS.has(conclusion))
+            failing += count;
+    }
+    return {
+        st: s.state,
+        mg: s.merged ? "1" : "0",
+        dr: s.draft ? "1" : "0",
+        ti: shortHash(s.title),
+        rv: String(a?.reviews ?? 0),
+        ap: String(a?.approvals ?? 0),
+        cr: String(a?.changesRequested ?? 0),
+        ic: String(a?.issueComments ?? 0),
+        rc: String(a?.reviewComments ?? 0),
+        cm: String(a?.commits ?? 0),
+        ck: `${c?.total ?? 0}/${failing}/${c?.pending ?? 0}`,
+    };
+}
+/** Compact opaque line, e.g. `v1 st=open mg=0 dr=0 ti=1k2j3h rv=1 ap=1 … ck=4/1/0`. The title is
+ *  HASHED, never carried: a fingerprint rides a routine prompt, and third-party text doesn't. */
+export function prFingerprint(s) {
+    const fields = fingerprintFields(s);
+    return [PR_FINGERPRINT_VERSION, ...Object.entries(fields).map(([k, v]) => `${k}=${v}`)].join(" ");
+}
+/** Parse a fingerprint back to its fields, or null if it isn't one of ours (wrong version, empty,
+ *  reworded by the model, a summary line pasted by mistake). */
+export function parsePrFingerprint(fp) {
+    const parts = (fp ?? "").trim().split(/\s+/).filter(Boolean);
+    if (parts.length < 2 || parts[0] !== PR_FINGERPRINT_VERSION)
+        return null;
+    const out = {};
+    for (const p of parts.slice(1)) {
+        const eq = p.indexOf("=");
+        if (eq > 0)
+            out[p.slice(0, eq)] = p.slice(eq + 1);
+    }
+    return Object.keys(out).length > 0 ? out : null;
+}
+/**
+ * What changed between a previous fingerprint and the current snapshot, as short human labels the
+ * fired check can post verbatim. Empty = nothing to say (and an absent/unparseable `prev` is
+ * deliberately empty too — a subscription that can't tell should stay QUIET, not invent an event).
+ */
+export function diffPrFingerprint(prev, s) {
+    const before = parsePrFingerprint(prev);
+    if (!before)
+        return [];
+    const now = fingerprintFields(s);
+    const grew = (k) => {
+        const a = Number(before[k]);
+        const b = Number(now[k]);
+        return Number.isFinite(a) && Number.isFinite(b) && b > a ? b - a : 0;
+    };
+    const out = [];
+    if (now.mg === "1" && before.mg !== "1")
+        out.push("MERGED");
+    else if (now.st === "closed" && before.st !== "closed")
+        out.push("CLOSED without merging");
+    if (before.dr === "1" && now.dr === "0")
+        out.push("marked ready for review");
+    if (before.dr === "0" && now.dr === "1")
+        out.push("converted back to draft");
+    if (before.ti !== now.ti)
+        out.push("title changed");
+    const approvals = grew("ap");
+    const changes = grew("cr");
+    if (approvals > 0)
+        out.push(withReviewer(`${count(approvals, "new approval")}`, s, "APPROVED"));
+    if (changes > 0)
+        out.push(withReviewer(`${count(changes, "new change request")}`, s, "CHANGES_REQUESTED"));
+    // Reviews that were neither an approval nor a change request (a plain commenting review).
+    const otherReviews = grew("rv") - approvals - changes;
+    if (otherReviews > 0)
+        out.push(count(otherReviews, "new review"));
+    const issueComments = grew("ic");
+    if (issueComments > 0)
+        out.push(count(issueComments, "new comment"));
+    const reviewComments = grew("rc");
+    if (reviewComments > 0)
+        out.push(count(reviewComments, "new inline review comment"));
+    const commits = grew("cm");
+    if (commits > 0)
+        out.push(`${count(commits, "new commit")} pushed`);
+    const checks = diffChecks(before.ck, now.ck, s);
+    if (checks)
+        out.push(checks);
+    return out;
+}
+/** True when {@link diffPrFingerprint} found anything worth posting. */
+export function prChangedSince(prev, s) {
+    return diffPrFingerprint(prev, s).length > 0;
+}
+function count(n, one) {
+    return `${n} ${n === 1 ? one : `${one}s`}`;
+}
+/** Name the reviewer only when the LATEST review matches the transition we're describing — a
+ *  same-check batch of two approvals shouldn't get attributed to whoever happened to be last. */
+function withReviewer(label, s, state) {
+    const latest = s.activity?.latestReview;
+    return latest && latest.state === state ? `${label} (${latest.author})` : label;
+}
+/** Report only the CI TRANSITIONS worth a message — went red, went green — never the steady state,
+ *  which would post on every check while a build churns. */
+function diffChecks(beforeCk, nowCk, s) {
+    const b = triple(beforeCk);
+    const a = triple(nowCk);
+    if (!b || !a)
+        return null;
+    if (a.failing > 0 && b.failing === 0) {
+        const names = s.checks?.failing ?? [];
+        return `checks FAILING${names.length > 0 ? ` (${names.join(", ")})` : ""}`;
+    }
+    if (a.failing === 0 && a.pending === 0 && a.total > 0 && (b.failing > 0 || b.pending > 0)) {
+        return "checks now green";
+    }
+    return null;
+}
+function triple(v) {
+    const parts = (v ?? "").split("/");
+    if (parts.length !== 3)
+        return null;
+    const [total, failing, pending] = parts.map(Number);
+    return [total, failing, pending].every(Number.isFinite) ? { total, failing, pending } : null;
+}
+/** djb2, base36 — a short stable digest for the title field. Change detection only, not a MAC. */
+function shortHash(s) {
+    let h = 5381;
+    for (let i = 0; i < s.length; i++)
+        h = ((h << 5) + h + s.charCodeAt(i)) >>> 0;
+    return h.toString(36);
+}
+//# sourceMappingURL=pr-watch.js.map

package/dist/agent/scm/pr-watch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-watch.js","sourceRoot":"","sources":["../../../agent/scm/pr-watch.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,mGAAmG;AACnG,gGAAgG;AAChG,oGAAoG;AACpG,mFAAmF;AACnF,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,0DAA0D;AAC1D,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,wFAAwF;AAExF,OAAO,EAAE,yBAAyB,EAAyB,MAAM,gBAAgB,CAAC;AAElF;wFACwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAE9C,iGAAiG;AACjG,SAAS,iBAAiB,CAAC,CAAmB;IAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,IAAI,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,KAAK,CAAC;IAClE,CAAC;IACD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,KAAK;QACX,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACxB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QACvB,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QACtB,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;QAC3B,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,gBAAgB,IAAI,CAAC,CAAC;QACpC,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC;QACjC,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,cAAc,IAAI,CAAC,CAAC;QAClC,EAAE,EAAE,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;QAC3B,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE;KACrD,CAAC;AACJ,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,aAAa,CAAC,CAAmB;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,sBAAsB,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpG,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,EAAsB;IACvD,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,sBAAsB;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,EAAE,GAAG,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwB,EAAE,CAAmB;IAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;SACvD,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEpD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAChG,IAAI,OAAO,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3G,0FAA0F;IAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC;IACtD,IAAI,YAAY,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;IAElE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,aAAa,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,cAAc,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAwB,EAAE,CAAmB;IAC1E,OAAO,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,GAAW;IACnC,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED;iGACiG;AACjG,SAAS,YAAY,CAAC,KAAa,EAAE,CAAmB,EAAE,KAAa;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC;IACxC,OAAO,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAClF,CAAC;AAED;4DAC4D;AAC5D,SAAS,UAAU,CAAC,QAA4B,EAAE,KAAa,EAAE,CAAmB;IAClF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;QACtC,OAAO,iBAAiB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,MAAM,CAAC,CAAqB;IACnC,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/F,CAAC;AAED,kGAAkG;AAClG,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/agent/scm/pr.d.ts

@@ -0,0 +1,42 @@
+import { type RetryPolicy } from "../channels/rate-limit-retry.js";
+/** Minimal fetch shape (mirrors mint.ts FetchFn, but GETs carry no body). */
+export type PrFetchFn = (url: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    text(): Promise<string>;
+    json(): Promise<unknown>;
+}>;
+export interface PrOutcome {
+    url: string;
+    number: number;
+    /** True when the head already had an open PR — the approved push updated it. */
+    updated: boolean;
+}
+/** The standard GitHub REST v3 auth+accept headers — shared with pr-status.ts's read calls. */
+export declare function prApiHeaders(token: string): Record<string, string>;
+/**
+ * POST the PR; on 422 "A pull request already exists" for that head, resolve the existing open PR
+ * (GET /pulls?head=owner:branch), PATCH its title/body to the frozen values (OPE-102 — the approval
+ * card the human read is the authority, so the live PR must show that copy, not its stale original),
+ * and report it as updated. Any other failure — including a 422 whose existing PR can't be found, or
+ * a failing PATCH — surfaces as an error.
+ */
+export declare function createOrUpdatePullRequest(opts: {
+    repo: string;
+    head: string;
+    base: string;
+    title: string;
+    body: string;
+    token: string;
+    fetchFn?: PrFetchFn;
+    apiBase?: string;
+    /** Tightens or drives the 429 backoff (OPE-1253) — a test injects a stub `sleep`; a caller with a
+     *  tighter latency budget may narrow `maxAttempts`/`capMs`/`totalBudgetMs`. Omitted takes the
+     *  shared defaults from `channels/rate-limit-retry.ts`. */
+    retry?: RetryPolicy;
+}): Promise<PrOutcome>;
+//# sourceMappingURL=pr.d.ts.map

package/dist/agent/scm/pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.d.ts","sourceRoot":"","sources":["../../../agent/scm/pr.ts"],"names":[],"mappings":"AAcA,OAAO,EAAuB,KAAK,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAExF,6EAA6E;AAC7E,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KACrE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAEjG,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlE;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;+DAE2D;IAC3D,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,CAuDrB"}

package/dist/agent/scm/pr.js

@@ -0,0 +1,73 @@
+// Pull-request creation via the GitHub REST API, factored out of the tool so the
+// 422-already-exists fallback is unit-testable with an injected fetch. A follow-up
+// push to a PR branch flows through the SAME approval-gated tool: the push has already
+// delivered the commits by the time we get here, so "a PR already exists for that
+// head" is the UPDATE case, not an error — we find the open PR and return it.
+//
+// 429/`Retry-After` BACKOFF (OPE-1253): every call this file makes goes through `withRetryAfterLoose`
+// (channels/rate-limit-retry.ts) — the SAME shared primitive the GitHub write seam
+// (providers/github/agent/channels/github-post-arm.ts) uses, adapted for `PrFetchFn`'s response
+// shape, which carries no `headers` accessor of its own (see that primitive's doc comment for why
+// `PrFetchFn` is not widened to add one — it also types eight read-only modules this ticket does not
+// touch). At runtime the real `fetch` response `PrFetchFn` stands in for always has `headers`, so
+// production calls get the real `Retry-After` wait.
+import { withRetryAfterLoose } from "../channels/rate-limit-retry.js";
+/** The standard GitHub REST v3 auth+accept headers — shared with pr-status.ts's read calls. */
+export function prApiHeaders(token) {
+    return {
+        authorization: `Bearer ${token}`,
+        accept: "application/vnd.github+json",
+        "x-github-api-version": "2022-11-28",
+    };
+}
+/**
+ * POST the PR; on 422 "A pull request already exists" for that head, resolve the existing open PR
+ * (GET /pulls?head=owner:branch), PATCH its title/body to the frozen values (OPE-102 — the approval
+ * card the human read is the authority, so the live PR must show that copy, not its stale original),
+ * and report it as updated. Any other failure — including a 422 whose existing PR can't be found, or
+ * a failing PATCH — surfaces as an error.
+ */
+export async function createOrUpdatePullRequest(opts) {
+    const fetchFn = opts.fetchFn ?? globalThis.fetch;
+    const apiBase = opts.apiBase ?? "https://api.github.com";
+    const res = await withRetryAfterLoose(() => fetchFn(`${apiBase}/repos/${opts.repo}/pulls`, {
+        method: "POST",
+        headers: prApiHeaders(opts.token),
+        body: JSON.stringify({ title: opts.title, body: opts.body, head: opts.head, base: opts.base }),
+    }), { ...opts.retry, surface: "github", operation: "pulls.create" });
+    if (res.ok) {
+        const pr = (await res.json());
+        return { url: pr.html_url, number: pr.number, updated: false };
+    }
+    const text = await res.text();
+    if (res.status === 422 && text.includes("A pull request already exists")) {
+        const owner = opts.repo.slice(0, opts.repo.indexOf("/"));
+        const q = await withRetryAfterLoose(() => fetchFn(`${apiBase}/repos/${opts.repo}/pulls?head=${encodeURIComponent(`${owner}:${opts.head}`)}&state=open`, {
+            method: "GET",
+            headers: prApiHeaders(opts.token),
+        }), { ...opts.retry, surface: "github", operation: "pulls.list" });
+        if (q.ok) {
+            const list = (await q.json());
+            if (list.length) {
+                // OPE-102: a re-propose freezes the model's NEW title/body onto the approval card, and the
+                // human approved exactly that copy — the card is the authority. The approved commits have
+                // already landed on the branch (executePrOpen fast-forwarded refs/heads before this call),
+                // but the existing PR still shows its ORIGINAL title/body, so an approver would be reading
+                // copy that never reaches GitHub. PATCH the open PR to the frozen title/body so what
+                // GitHub shows matches what was approved. (Precedent: credentials/binding-pr.ts openOrReopen.)
+                const number = list[0].number;
+                const patch = await withRetryAfterLoose(() => fetchFn(`${apiBase}/repos/${opts.repo}/pulls/${number}`, {
+                    method: "PATCH",
+                    headers: prApiHeaders(opts.token),
+                    body: JSON.stringify({ title: opts.title, body: opts.body }),
+                }), { ...opts.retry, surface: "github", operation: "pulls.update" });
+                if (!patch.ok)
+                    throw new Error(`GitHub PR update failed: ${patch.status} ${await patch.text()}`);
+                const pr = (await patch.json());
+                return { url: pr.html_url, number: pr.number, updated: true };
+            }
+        }
+    }
+    throw new Error(`GitHub PR creation failed: ${res.status} ${text}`);
+}
+//# sourceMappingURL=pr.js.map

package/dist/agent/scm/pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.js","sourceRoot":"","sources":["../../../agent/scm/pr.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,uFAAuF;AACvF,kFAAkF;AAClF,8EAA8E;AAC9E,EAAE;AACF,sGAAsG;AACtG,mFAAmF;AACnF,gGAAgG;AAChG,kGAAkG;AAClG,qGAAqG;AACrG,kGAAkG;AAClG,oDAAoD;AAEpD,OAAO,EAAE,mBAAmB,EAAoB,MAAM,iCAAiC,CAAC;AAexF,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO;QACL,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;KACrC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAa/C;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAK,UAAU,CAAC,KAA8B,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC;IAEzD,MAAM,GAAG,GAAG,MAAM,mBAAmB,CACnC,GAAG,EAAE,CACH,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,QAAQ,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;KAC/F,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAChE,CAAC;IACF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;QACtE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,MAAM,mBAAmB,CACjC,GAAG,EAAE,CACH,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,eAAe,kBAAkB,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE;YAC5G,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;SAClC,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAC9D,CAAC;QACF,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA2C,CAAC;YACxE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,2FAA2F;gBAC3F,0FAA0F;gBAC1F,2FAA2F;gBAC3F,2FAA2F;gBAC3F,qFAAqF;gBACrF,+FAA+F;gBAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC9B,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,GAAG,EAAE,CACH,OAAO,CAAC,GAAG,OAAO,UAAU,IAAI,CAAC,IAAI,UAAU,MAAM,EAAE,EAAE;oBACvD,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC7D,CAAC,EACJ,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,CAChE,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,MAAM,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACjG,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAyC,CAAC;gBACxE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC"}

package/dist/agent/scm/provider.d.ts

@@ -0,0 +1,13 @@
+import { GitHubApp } from "./app.js";
+/**
+ * The configured GitHubApp, or null if source control isn't set up. Memoized — but the memo is
+ * INVALIDATED when the webhook-discovered installation map changes (scm/installations.ts), so an
+ * org that installs the App mid-process is picked up on the next call instead of being stuck
+ * behind a snapshot taken at boot.
+ */
+export declare function getGitHubApp(): GitHubApp | null;
+/** Test seam: drop the memoized app (re-reads env on next getGitHubApp). */
+export declare function resetGitHubApp(): void;
+/** True iff `repo` ("owner/repo") is in the session's granted set. Pure. */
+export declare function repoAllowed(repo: string, granted: readonly string[]): boolean;
+//# sourceMappingURL=provider.d.ts.map

package/dist/agent/scm/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../agent/scm/provider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAWrC;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,SAAS,GAAG,IAAI,CAY/C;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,IAAI,IAAI,CAGrC;AAED,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE7E"}

package/dist/agent/scm/provider.js

@@ -0,0 +1,39 @@
+// The source-control plane's entry point for the rest of OpenEverywhere: a memoized
+// GitHubApp built from env config, or null when the plane isn't configured (optional).
+// Plus the pure repo-allowlist guard the checkout tool fails closed on.
+import { loadGitHubAppConfig } from "./config.js";
+import { GitHubApp } from "./app.js";
+import { discoveredGitHubInstallations, discoveredInstallationsGeneration, hydrateGitHubInstallations, } from "./installations.js";
+let cached;
+/** The discovered-installations generation `cached` was built against — see getGitHubApp. */
+let cachedGeneration = -1;
+/**
+ * The configured GitHubApp, or null if source control isn't set up. Memoized — but the memo is
+ * INVALIDATED when the webhook-discovered installation map changes (scm/installations.ts), so an
+ * org that installs the App mid-process is picked up on the next call instead of being stuck
+ * behind a snapshot taken at boot.
+ */
+export function getGitHubApp() {
+    const generation = discoveredInstallationsGeneration();
+    if (cached !== undefined && cachedGeneration === generation)
+        return cached;
+    const config = loadGitHubAppConfig();
+    cached = config
+        ? new GitHubApp(config, {
+            discovered: (owner) => discoveredGitHubInstallations()[owner],
+            hydrate: () => hydrateGitHubInstallations(),
+        })
+        : null;
+    cachedGeneration = generation;
+    return cached;
+}
+/** Test seam: drop the memoized app (re-reads env on next getGitHubApp). */
+export function resetGitHubApp() {
+    cached = undefined;
+    cachedGeneration = -1;
+}
+/** True iff `repo` ("owner/repo") is in the session's granted set. Pure. */
+export function repoAllowed(repo, granted) {
+    return granted.includes(repo);
+}
+//# sourceMappingURL=provider.js.map

package/dist/agent/scm/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../agent/scm/provider.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,uFAAuF;AACvF,wEAAwE;AAExE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EACL,6BAA6B,EAC7B,iCAAiC,EACjC,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAE5B,IAAI,MAAoC,CAAC;AACzC,6FAA6F;AAC7F,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,UAAU,GAAG,iCAAiC,EAAE,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IAC3E,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,GAAG,MAAM;QACb,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE;YACpB,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC;YAC7D,OAAO,EAAE,GAAG,EAAE,CAAC,0BAA0B,EAAE;SAC5C,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,gBAAgB,GAAG,UAAU,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,SAAS,CAAC;IACnB,gBAAgB,GAAG,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAA0B;IAClE,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC"}