@open-mercato/cezar 0.9.1 → 0.9.2-pr710.1256

package/dist/server/capabilities.d.ts

@@ -19,12 +19,22 @@
  * deliberately constrained to the launch project when `CEZ_SINGLE_PROJECT=1`.
  * Like the other opt-in capabilities, activation is strict: no other spelling
  * enables it.
+ *
+ * `automations` (spec 2026-07-25-github-automations, #801): GitHub automations
+ * are **opt-in** via `CEZ_AUTOMATIONS=1` and off by default. Off, the
+ * `Automations` nav item is gone everywhere it is rendered, the
+ * `/automations*` endpoints refuse, and the workspace scheduler never polls
+ * GitHub — the flag removes the behavior, not only the UI. Activation is
+ * strict, like the two capabilities above. Nothing on disk is touched:
+ * definitions, receipts and high-watermarks survive the flag being off, so
+ * unsetting it and restarting restores the feature wholesale.
+ *
+ * Usage presentation: token counts and monetary cost stay visible by default.
+ * `CEZ_HIDE_TOKEN_USAGE=1` and `CEZ_HIDE_COST=1` hide them independently;
+ * legacy `CEZ_HIDE_TOKEN_METRICS=1` remains the master hide-all switch. None
+ * changes collection, persistence, events, or API run records.
  */
-export interface Capabilities {
-    localHandoff: boolean;
-    followups: boolean;
-    singleProject: boolean;
-}
+import type { Capabilities } from '../contract/index.js';
 /** Canonical hostname of an authority: port and IPv6 brackets removed, IPv6
  *  expanded, zone id and FQDN trailing dot dropped, lowercased.
  *  `[::1]:4321` → `0:0:0:0:0:0:0:1`, `localhost.:4321` → `localhost`.
@@ -46,10 +56,15 @@ export declare function isLoopbackHost(host: string | undefined): boolean;
 export declare function isLoopbackHostHeader(host: string | null | undefined): boolean;
 /** `CEZ_REMOTE=1` or a non-loopback bind host ⇒ hosted mode (no local handoff).
  *  `CEZ_FOLLOWUPS=1` ⇒ the follow-up inbox exists (#471).
+ *  `CEZ_AUTOMATIONS=1` ⇒ GitHub automations exist (#801).
  *
  *  Read per request — cheap, and tests/ops can flip `CEZ_REMOTE` live. `followups` is honest
  *  per request too, but flipping it ON at runtime is only half a switch: the per-dataDir
  *  todos watch (step 2.3) is created by an SSE subscription, so connections opened while the
  *  flag was off never subscribed and get no live inbox updates until they reconnect. Hence
- *  the UI's "set CEZ_FOLLOWUPS=1 and restart cezar" wording — treat it as a boot-time flag. */
+ *  the UI's "set CEZ_FOLLOWUPS=1 and restart cezar" wording — treat it as a boot-time flag.
+ *
+ *  `automations` carries the same caveat and for the same reason: the workspace scheduler is
+ *  started once, on the server's `listening` event, so flipping the flag on afterwards gates
+ *  the routes open without ever starting the poller. Boot-time flag, same wording. */
 export declare function resolveCapabilities(env?: NodeJS.ProcessEnv, bindHost?: string): Capabilities;

package/dist/server/capabilities.js

@@ -19,6 +19,20 @@
  * deliberately constrained to the launch project when `CEZ_SINGLE_PROJECT=1`.
  * Like the other opt-in capabilities, activation is strict: no other spelling
  * enables it.
+ *
+ * `automations` (spec 2026-07-25-github-automations, #801): GitHub automations
+ * are **opt-in** via `CEZ_AUTOMATIONS=1` and off by default. Off, the
+ * `Automations` nav item is gone everywhere it is rendered, the
+ * `/automations*` endpoints refuse, and the workspace scheduler never polls
+ * GitHub — the flag removes the behavior, not only the UI. Activation is
+ * strict, like the two capabilities above. Nothing on disk is touched:
+ * definitions, receipts and high-watermarks survive the flag being off, so
+ * unsetting it and restarting restores the feature wholesale.
+ *
+ * Usage presentation: token counts and monetary cost stay visible by default.
+ * `CEZ_HIDE_TOKEN_USAGE=1` and `CEZ_HIDE_COST=1` hide them independently;
+ * legacy `CEZ_HIDE_TOKEN_METRICS=1` remains the master hide-all switch. None
+ * changes collection, persistence, events, or API run records.
  */
 import { followupsEnabled } from '../handoff.js';
 /** Every IPv4 address in 127.0.0.0/8, anchored. Anchoring is load-bearing: a
@@ -108,19 +122,31 @@ export function isLoopbackHostHeader(host) {
 }
 /** `CEZ_REMOTE=1` or a non-loopback bind host ⇒ hosted mode (no local handoff).
  *  `CEZ_FOLLOWUPS=1` ⇒ the follow-up inbox exists (#471).
+ *  `CEZ_AUTOMATIONS=1` ⇒ GitHub automations exist (#801).
  *
  *  Read per request — cheap, and tests/ops can flip `CEZ_REMOTE` live. `followups` is honest
  *  per request too, but flipping it ON at runtime is only half a switch: the per-dataDir
  *  todos watch (step 2.3) is created by an SSE subscription, so connections opened while the
  *  flag was off never subscribed and get no live inbox updates until they reconnect. Hence
- *  the UI's "set CEZ_FOLLOWUPS=1 and restart cezar" wording — treat it as a boot-time flag. */
+ *  the UI's "set CEZ_FOLLOWUPS=1 and restart cezar" wording — treat it as a boot-time flag.
+ *
+ *  `automations` carries the same caveat and for the same reason: the workspace scheduler is
+ *  started once, on the server's `listening` event, so flipping the flag on afterwards gates
+ *  the routes open without ever starting the poller. Boot-time flag, same wording. */
 export function resolveCapabilities(env = process.env, bindHost) {
+    const hideAllUsage = env.CEZ_HIDE_TOKEN_METRICS === '1';
+    const tokenUsageMetrics = !hideAllUsage && env.CEZ_HIDE_TOKEN_USAGE !== '1';
+    const costMetrics = !hideAllUsage && env.CEZ_HIDE_COST !== '1';
     return {
         localHandoff: env.CEZ_REMOTE !== '1' && isLoopbackHost(bindHost),
         // Deliberately not re-derived here: RunManager enforces the same predicate,
         // and two spellings of "is the inbox on" would eventually disagree.
         followups: followupsEnabled(env),
         singleProject: env.CEZ_SINGLE_PROJECT === '1',
+        automations: env.CEZ_AUTOMATIONS === '1',
+        tokenMetrics: tokenUsageMetrics && costMetrics,
+        tokenUsageMetrics,
+        costMetrics,
     };
 }
 //# sourceMappingURL=capabilities.js.map

package/dist/server/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/server/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAQjD;;;0CAG0C;AAC1C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,kEAAkE;AAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;;YAMY;AACZ,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;oFAOoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/E,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvF,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,CAAC,CAAC,qCAAqC;AAClD,CAAC;AAED;0EAC0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;+CAC+C;AAC/C,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,WAAW,CAAC;AAC5F,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;6DAG6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,IAA+B;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;+FAO+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,QAAiB;IACzF,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC;QAChE,4EAA4E;QAC5E,oEAAoE;QACpE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAChC,aAAa,EAAE,GAAG,CAAC,kBAAkB,KAAK,GAAG;KAC9C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/server/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD;;;0CAG0C;AAC1C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,kEAAkE;AAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;;YAMY;AACZ,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,MAAgB,CAAC;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;oFAOoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,SAAS;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/E,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvF,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7D,OAAO,EAAE,CAAC,CAAC,qCAAqC;AAClD,CAAC;AAED;0EAC0E;AAC1E,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;+CAC+C;AAC/C,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,WAAW,CAAC;AAC5F,CAAC;AAED;;;wEAGwE;AACxE,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;6DAG6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,IAA+B;IAClE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;sFAYsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,QAAiB;IACzF,MAAM,YAAY,GAAG,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;IACxD,MAAM,iBAAiB,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,oBAAoB,KAAK,GAAG,CAAC;IAC5E,MAAM,WAAW,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC;IAC/D,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC;QAChE,4EAA4E;QAC5E,oEAAoE;QACpE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAChC,aAAa,EAAE,GAAG,CAAC,kBAAkB,KAAK,GAAG;QAC7C,WAAW,EAAE,GAAG,CAAC,eAAe,KAAK,GAAG;QACxC,YAAY,EAAE,iBAAiB,IAAI,WAAW;QAC9C,iBAAiB;QACjB,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/server/forge/github.d.ts

@@ -1,5 +1,14 @@
 import { z } from 'zod';
-import type { DraftPrInput, DraftPrOutcome, ForgeAvailability, ForgeComment, ForgeCommentsData, ForgeDriver, ForgeItem, ForgeTimelineEvent, ForgeTimelineEventKind } from './types.js';
+import type { DraftPrInput, DraftPrOutcome, ForgeAvailability, ForgeComment, ForgeCommentsData, ForgeDriver, ForgeItem, ForgePrMergeState, ForgePrDiffResult, ForgeTimelineEvent, ForgeTimelineEventKind } from './types.ts';
+export declare const GH_PR_DIFF_FILE_CAP = 300;
+export declare const GH_PR_PATCH_CAP: number;
+export declare const GH_PR_DIFF_JSON_CAP: number;
+export declare class GithubPrNotFoundError extends Error {
+}
+export type PrFilesPageRunner = (page: number) => Promise<string>;
+/** Fetch no more than the three GitHub pages represented by the public 300-file response cap. */
+export declare function fetchPrFilePages(runPage: PrFilesPageRunner): Promise<unknown[]>;
+export declare function fetchGithubPrDiff(repoRoot: string, number: number, refresh?: boolean): Promise<ForgePrDiffResult>;
 /** One GitHub issue or pull request, flattened for the cockpit's GitHub tab. */
 export type GithubItem = ForgeItem;
 export interface GithubData {
@@ -19,28 +28,12 @@ export declare const ghCheckRunSchema: z.ZodObject<{
     state: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     conclusion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    state?: string | null | undefined;
-    status?: string | null | undefined;
-    conclusion?: string | null | undefined;
-}, {
-    state?: string | null | undefined;
-    status?: string | null | undefined;
-    conclusion?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 declare const ghStatusCheckRollup: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
     state: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     status: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     conclusion: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    state?: string | null | undefined;
-    status?: string | null | undefined;
-    conclusion?: string | null | undefined;
-}, {
-    state?: string | null | undefined;
-    status?: string | null | undefined;
-    conclusion?: string | null | undefined;
-}>, "many">>>;
+}, z.core.$strip>>>>;
 /** Exported for unit tests (#400) — collapses a zod-validated `statusCheckRollup` array down to
  *  the single enum the GitHub tab (list rows + detail badge) renders. */
 export declare function rollupToChecks(rollup: z.infer<typeof ghStatusCheckRollup>): GithubItem['checks'];
@@ -104,13 +97,7 @@ export declare const ghTimelineEventSchema: z.ZodObject<{
     actor: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         login: z.ZodString;
         avatar_url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        login: string;
-        avatar_url?: string | null | undefined;
-    }, {
-        login: string;
-        avatar_url?: string | null | undefined;
-    }>>>;
+    }, z.core.$strip>>>;
     url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     html_url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     sha: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -118,145 +105,27 @@ export declare const ghTimelineEventSchema: z.ZodObject<{
     author: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         date: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        name?: string | null | undefined;
-        date?: string | null | undefined;
-    }, {
-        name?: string | null | undefined;
-        date?: string | null | undefined;
-    }>>>;
+    }, z.core.$strip>>>;
     label: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         name: z.ZodString;
         color: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        color?: string | null | undefined;
-    }, {
-        name: string;
-        color?: string | null | undefined;
-    }>>>;
+    }, z.core.$strip>>>;
     assignee: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         login: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        login: string;
-    }, {
-        login: string;
-    }>>>;
+    }, z.core.$strip>>>;
     rename: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         from: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         to: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    }, "strip", z.ZodTypeAny, {
-        from?: string | null | undefined;
-        to?: string | null | undefined;
-    }, {
-        from?: string | null | undefined;
-        to?: string | null | undefined;
-    }>>>;
+    }, z.core.$strip>>>;
     source: z.ZodOptional<z.ZodNullable<z.ZodObject<{
         issue: z.ZodOptional<z.ZodNullable<z.ZodObject<{
             number: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             title: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             html_url: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             pull_request: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
-        }, "strip", z.ZodTypeAny, {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        }, {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        }>>>;
-    }, "strip", z.ZodTypeAny, {
-        issue?: {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        } | null | undefined;
-    }, {
-        issue?: {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        } | null | undefined;
-    }>>>;
-}, "strip", z.ZodTypeAny, {
-    event: string;
-    id?: number | null | undefined;
-    node_id?: string | null | undefined;
-    created_at?: string | null | undefined;
-    actor?: {
-        login: string;
-        avatar_url?: string | null | undefined;
-    } | null | undefined;
-    url?: string | null | undefined;
-    html_url?: string | null | undefined;
-    sha?: string | null | undefined;
-    message?: string | null | undefined;
-    author?: {
-        name?: string | null | undefined;
-        date?: string | null | undefined;
-    } | null | undefined;
-    label?: {
-        name: string;
-        color?: string | null | undefined;
-    } | null | undefined;
-    assignee?: {
-        login: string;
-    } | null | undefined;
-    rename?: {
-        from?: string | null | undefined;
-        to?: string | null | undefined;
-    } | null | undefined;
-    source?: {
-        issue?: {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        } | null | undefined;
-    } | null | undefined;
-}, {
-    event: string;
-    id?: number | null | undefined;
-    node_id?: string | null | undefined;
-    created_at?: string | null | undefined;
-    actor?: {
-        login: string;
-        avatar_url?: string | null | undefined;
-    } | null | undefined;
-    url?: string | null | undefined;
-    html_url?: string | null | undefined;
-    sha?: string | null | undefined;
-    message?: string | null | undefined;
-    author?: {
-        name?: string | null | undefined;
-        date?: string | null | undefined;
-    } | null | undefined;
-    label?: {
-        name: string;
-        color?: string | null | undefined;
-    } | null | undefined;
-    assignee?: {
-        login: string;
-    } | null | undefined;
-    rename?: {
-        from?: string | null | undefined;
-        to?: string | null | undefined;
-    } | null | undefined;
-    source?: {
-        issue?: {
-            number?: number | null | undefined;
-            title?: string | null | undefined;
-            html_url?: string | null | undefined;
-            pull_request?: unknown;
-        } | null | undefined;
-    } | null | undefined;
-}>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
 /** First 200 thread entries, then `truncated`; each body sliced to 8 000 chars (same cap as
  *  item bodies). */
 export declare const THREAD_ENTRY_CAP = 200;
@@ -349,6 +218,38 @@ export declare const COMMIT_CHECKS_CHUNK = 50;
  * `runGraphql` is injected so this is testable without shelling out.
  */
 export declare function fetchCommitChecks(runGraphql: GraphqlRunner, owner: string, name: string, shas: string[], chunkSize?: number): Promise<Record<string, ForgeTimelineEvent['checks']>>;
+/** The single enum a PR row's checks glyph renders (never `undefined` on the wire). */
+export type ChecksGlyph = 'passing' | 'failing' | 'pending' | null;
+export type GithubChecksData = {
+    available: true;
+    checks: Record<number, ChecksGlyph>;
+} | {
+    available: false;
+    reason: string;
+};
+/** PR numbers per checks query. Aliases resolve independently (a failed chunk costs only its own
+ *  glyphs); bounded so an unbounded number list can't blow the query size limit. Also the route's
+ *  hard cap on how many PRs one request may ask about. */
+export declare const GH_CHECKS_MAX = 100;
+/**
+ * Rolled-up CI state per PR number, as a `number → glyph` map.
+ *
+ * Batched and aliased so a 100-PR window costs one subprocess, not a hundred. Each alias resolves
+ * independently and an unknown number comes back `null` (alias resolved null → left absent), so
+ * partial results degrade cleanly. Degrades to an empty map on any failure — exactly as
+ * `fetchCommitChecks` does. Exported for tests; `runGraphql` is injected so this is testable
+ * without shelling out.
+ */
+export declare function fetchPrChecks(runGraphql: GraphqlRunner, owner: string, name: string, numbers: number[], chunkSize?: number): Promise<Record<number, ChecksGlyph>>;
+/** Test hook — the per-PR checks cache would otherwise leak state across cases in one process. */
+export declare function __clearChecksCacheForTests(): void;
+/**
+ * Lazy checks glyphs for the given PR numbers (route-facing). Resolves the repo handle once,
+ * serves fresh cache entries, queries only the misses, and degrades to `{ available: false,
+ * reason }` when `gh` or the handle is unavailable — never a throw, never a 5xx (plan rule 7).
+ * Numbers are de-duplicated, validated, and capped at `GH_CHECKS_MAX`.
+ */
+export declare function fetchGithubChecks(repoRoot: string, numbers: number[]): Promise<GithubChecksData>;
 /**
  * The conversation thread for one issue/PR, lazily. `{owner}`/`{repo}` in the gh api paths are
  * filled from the worktree's remote by gh itself, so no extra handle lookup. Everything degrades:
@@ -380,6 +281,12 @@ export declare function buildPrBody(handoffText: string, task: string): string;
  * dropping `forge.available` and blinking the sidebar item out until the background probe warmed.
  */
 export declare function detectGithubCached(repoRoot: string): ForgeAvailability | null;
+export declare function normalizeMergeState(raw: unknown, policyRaw: unknown, requirements?: {
+    readable: boolean;
+    requiredChecks: string[];
+}): ForgePrMergeState;
+export declare function evictGithubProjectCaches(repoRoot: string): void;
+export declare function mergePreflightAllowed(current: ForgePrMergeState, overrideRules?: boolean): boolean;
 /** owner/repo parsed out of the origin remote — feeds `viewUrl`. */
 export interface GithubRepoRef {
     owner: string;