@oss-autopilot/core 0.42.6 → 0.43.1

package/dist/commands/startup.js

@@ -8,10 +8,12 @@
  */
 import * as fs from 'fs';
 import { execFile } from 'child_process';
-import { getStateManager, getGitHubToken, getCLIVersion } from '../core/index.js';
+import { getStateManager, getGitHubToken, getCLIVersion, getStatePath, getDashboardPath } from '../core/index.js';
 import { errorMessage } from '../core/errors.js';
+import { warn } from '../core/logger.js';
 import { executeDailyCheck } from './daily.js';
 import { writeDashboardFromState } from './dashboard.js';
+import { launchDashboardServer } from './dashboard-lifecycle.js';
 /**
  * Parse issueListPath from a config file's YAML frontmatter.
  * Returns the path string or undefined if not found.
@@ -93,21 +95,53 @@ export function detectIssueList() {
     }
 }
 function openInBrowser(filePath) {
-    const isWindows = process.platform === 'win32';
-    const openCmd = process.platform === 'darwin' ? 'open' : isWindows ? 'cmd' : 'xdg-open';
-    const args = isWindows ? ['/c', 'start', '', filePath] : [filePath];
+    let openCmd;
+    let args;
+    switch (process.platform) {
+        case 'darwin':
+            openCmd = 'open';
+            args = [filePath];
+            break;
+        case 'win32':
+            openCmd = 'cmd';
+            args = ['/c', 'start', '', filePath];
+            break;
+        default:
+            openCmd = 'xdg-open';
+            args = [filePath];
+            break;
+    }
     execFile(openCmd, args, (error) => {
         if (error) {
             console.error(`[STARTUP] Failed to open dashboard in browser: ${error.message}`);
         }
     });
 }
+/**
+ * Check whether the dashboard HTML file is at least as recent as state.json.
+ * Returns true when the dashboard exists and its mtime >= state mtime,
+ * meaning there is no need to regenerate it.
+ */
+function isDashboardFresh() {
+    try {
+        const dashPath = getDashboardPath();
+        if (!fs.existsSync(dashPath))
+            return false;
+        const dashMtime = fs.statSync(dashPath).mtimeMs;
+        const stateMtime = fs.statSync(getStatePath()).mtimeMs;
+        return dashMtime >= stateMtime;
+    }
+    catch (error) {
+        warn('startup', `Failed to check dashboard freshness, will regenerate: ${errorMessage(error)}`);
+        return false;
+    }
+}
 /**
  * Run startup checks and return structured output.
  * Returns StartupOutput with one of three shapes:
  * 1. Setup incomplete: { version, setupComplete: false }
  * 2. Auth failure: { version, setupComplete: true, authError: "..." }
- * 3. Success: { version, setupComplete: true, daily, dashboardPath?, issueList? }
+ * 3. Success: { version, setupComplete: true, daily, dashboardPath?, dashboardUrl?, issueList? }
  *
  * Errors from the daily check propagate to the caller.
  */
@@ -129,31 +163,56 @@ export async function runStartup() {
     }
     // 3. Run daily check
     const daily = await executeDailyCheck(token);
-    // 4. Generate dashboard from state (just saved by daily)
-    // Skip opening on first run (0 PRs) — the welcome flow handles onboarding
+    // 4. Generate static HTML dashboard (serves as fallback + snapshot).
+    //    Skip regeneration if the dashboard HTML is already newer than state.json.
     let dashboardPath;
-    let dashboardOpened = false;
     try {
-        dashboardPath = writeDashboardFromState();
-        if (daily.digest.summary.totalActivePRs > 0) {
-            openInBrowser(dashboardPath);
-            dashboardOpened = true;
+        if (isDashboardFresh()) {
+            dashboardPath = getDashboardPath();
+            console.error('[STARTUP] Dashboard HTML is fresh, skipping regeneration');
+        }
+        else {
+            dashboardPath = writeDashboardFromState();
         }
     }
     catch (error) {
         console.error('[STARTUP] Dashboard generation failed:', errorMessage(error));
     }
+    // 5. Launch interactive SPA dashboard (preferred) with static HTML fallback
+    // Skip opening on first run (0 PRs) — the welcome flow handles onboarding
+    let dashboardUrl;
+    let dashboardOpened = false;
+    if (daily.digest.summary.totalActivePRs > 0) {
+        let spaResult = null;
+        try {
+            spaResult = await launchDashboardServer();
+        }
+        catch (error) {
+            console.error('[STARTUP] SPA dashboard launch failed:', errorMessage(error));
+        }
+        if (spaResult) {
+            dashboardUrl = spaResult.url;
+            openInBrowser(spaResult.url);
+            dashboardOpened = true;
+        }
+        else if (dashboardPath) {
+            // SPA unavailable (assets not built) — fall back to static HTML
+            openInBrowser(dashboardPath);
+            dashboardOpened = true;
+        }
+    }
     // Append dashboard status to brief summary (only startup opens the browser, not daily)
     if (dashboardOpened) {
         daily.briefSummary += ' | Dashboard opened in browser';
     }
-    // 5. Detect issue list
+    // 6. Detect issue list
     const issueList = detectIssueList();
     return {
         version,
         setupComplete: true,
         daily,
         dashboardPath,
+        dashboardUrl,
         issueList,
     };
 }

package/dist/commands/vet.js

@@ -3,9 +3,10 @@
  * Vets a specific issue before working on it
  */
 import { IssueDiscovery, requireGitHubToken } from '../core/index.js';
-import { validateUrl } from './validation.js';
+import { ISSUE_URL_PATTERN, validateGitHubUrl, validateUrl } from './validation.js';
 export async function runVet(options) {
     validateUrl(options.issueUrl);
+    validateGitHubUrl(options.issueUrl, ISSUE_URL_PATTERN, 'issue');
     const token = requireGitHubToken();
     const discovery = new IssueDiscovery(token);
     const candidate = await discovery.vetIssue(options.issueUrl);

package/dist/core/concurrency.d.ts

@@ -1,5 +1,6 @@
 /**
  * Runs a worker pool that processes items with bounded concurrency.
- * N workers consume from a shared index — simpler than Promise.race + splice.
+ * N workers consume from a shared index. On any worker error, remaining
+ * workers are aborted via a shared flag and the error is propagated.
  */
 export declare function runWorkerPool<T>(items: T[], worker: (item: T) => Promise<void>, concurrency: number): Promise<void>;

package/dist/core/concurrency.js

@@ -1,13 +1,23 @@
 /**
  * Runs a worker pool that processes items with bounded concurrency.
- * N workers consume from a shared index — simpler than Promise.race + splice.
+ * N workers consume from a shared index. On any worker error, remaining
+ * workers are aborted via a shared flag and the error is propagated.
  */
 export async function runWorkerPool(items, worker, concurrency) {
     let index = 0;
+    let aborted = false;
     const poolWorker = async () => {
         while (index < items.length) {
+            if (aborted)
+                break;
             const item = items[index++];
-            await worker(item);
+            try {
+                await worker(item);
+            }
+            catch (err) {
+                aborted = true;
+                throw err;
+            }
         }
     };
     const workerCount = Math.min(concurrency, items.length);

package/dist/core/pr-monitor.js

@@ -350,11 +350,7 @@ export class PRMonitor {
      * Check if PR has merge conflict
      */
     hasMergeConflict(mergeable, mergeableState) {
-        if (mergeable === false)
-            return true;
-        if (mergeableState === 'dirty')
-            return true;
-        return false;
+        return mergeable === false || mergeableState === 'dirty';
     }
     /**
      * Get CI status from combined status API and check runs.
@@ -371,6 +367,14 @@ export class PRMonitor {
                 // 404 is expected for repos without check runs configured; log other errors for debugging
                 this.octokit.checks.listForRef({ owner, repo, ref: sha }).catch((err) => {
                     const status = getHttpStatusCode(err);
+                    // Rate limit errors must propagate — matches listReviewComments pattern (#481)
+                    if (status === 429)
+                        throw err;
+                    if (status === 403) {
+                        const msg = errorMessage(err).toLowerCase();
+                        if (msg.includes('rate limit') || msg.includes('abuse detection'))
+                            throw err;
+                    }
                     if (status === 404) {
                         debug('pr-monitor', `Check runs 404 for ${owner}/${repo}@${sha.slice(0, 7)} (no checks configured)`);
                     }
@@ -400,12 +404,8 @@ export class PRMonitor {
         }
         catch (error) {
             const statusCode = getHttpStatusCode(error);
-            const errMsg = errorMessage(error);
-            if (statusCode === 401) {
-                warn('pr-monitor', `CI check failed for ${owner}/${repo}: Invalid token`);
-            }
-            else if (statusCode === 403) {
-                warn('pr-monitor', `CI check failed for ${owner}/${repo}: Rate limit exceeded`);
+            if (statusCode === 401 || statusCode === 403 || statusCode === 429) {
+                throw error;
             }
             else if (statusCode === 404) {
                 // Repo might not have CI configured, this is normal
@@ -413,7 +413,7 @@ export class PRMonitor {
                 return { status: 'unknown', failingCheckNames: [], failingCheckConclusions: new Map() };
             }
             else {
-                warn('pr-monitor', `Failed to check CI for ${owner}/${repo}@${sha.slice(0, 7)}: ${errMsg}`);
+                warn('pr-monitor', `Failed to check CI for ${owner}/${repo}@${sha.slice(0, 7)}: ${errorMessage(error)}`);
             }
             return { status: 'unknown', failingCheckNames: [], failingCheckConclusions: new Map() };
         }

package/dist/core/utils.d.ts

@@ -144,10 +144,9 @@ export declare function daysBetween(from: Date, to?: Date): number;
 /**
  * Splits an `"owner/repo"` string into its owner and repo components.
  *
- * Does not validate the input format; if no `/` is present, `repo` will be `undefined`.
- *
  * @param repoFullName - Full repository name in `"owner/repo"` format
  * @returns Object with `owner` and `repo` string properties
+ * @throws {Error} If the input does not contain both an owner and repo separated by `/`
  *
  * @example
  * splitRepo('facebook/react')

package/dist/core/utils.js

@@ -215,10 +215,9 @@ export function daysBetween(from, to = new Date()) {
 /**
  * Splits an `"owner/repo"` string into its owner and repo components.
  *
- * Does not validate the input format; if no `/` is present, `repo` will be `undefined`.
- *
  * @param repoFullName - Full repository name in `"owner/repo"` format
  * @returns Object with `owner` and `repo` string properties
+ * @throws {Error} If the input does not contain both an owner and repo separated by `/`
  *
  * @example
  * splitRepo('facebook/react')
@@ -226,6 +225,9 @@ export function daysBetween(from, to = new Date()) {
  */
 export function splitRepo(repoFullName) {
     const [owner, repo] = repoFullName.split('/');
+    if (!owner || !repo) {
+        throw new Error(`Invalid repo format: expected "owner/repo", got "${repoFullName}"`);
+    }
     return { owner, repo };
 }
 /**

package/dist/formatters/json.d.ts

@@ -200,7 +200,7 @@ export interface IssueListInfo {
  * Three valid shapes:
  * 1. Setup incomplete: { version, setupComplete: false }
  * 2. Auth failure: { version, setupComplete: true, authError: "..." }
- * 3. Success: { version, setupComplete: true, daily, dashboardPath?, issueList? }
+ * 3. Success: { version, setupComplete: true, daily, dashboardPath?, dashboardUrl?, issueList? }
  */
 export interface StartupOutput {
     version: string;
@@ -208,6 +208,8 @@ export interface StartupOutput {
     authError?: string;
     daily?: DailyOutput;
     dashboardPath?: string;
+    /** URL of the interactive SPA dashboard server, when running (e.g., "http://localhost:3000") */
+    dashboardUrl?: string;
     issueList?: IssueListInfo;
 }
 /** A single parsed issue from a markdown list (#82) */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-autopilot/core",
-  "version": "0.42.6",
+  "version": "0.43.1",
   "description": "CLI and core library for managing open source contributions",
   "type": "module",
   "bin": {
@@ -60,7 +60,7 @@
   },
   "scripts": {
     "build": "tsc",
-    "bundle": "esbuild src/cli.ts --bundle --platform=node --target=node20 --format=cjs --outfile=dist/cli.bundle.cjs",
+    "bundle": "esbuild src/cli.ts --bundle --platform=node --target=node20 --format=cjs --minify --outfile=dist/cli.bundle.cjs",
     "start": "tsx src/cli.ts",
     "dev": "tsx watch src/cli.ts",
     "typecheck": "tsc --noEmit",