@oss-autopilot/core 3.13.3 → 3.14.0

package/dist/formatters/json.d.ts

@@ -16,7 +16,22 @@ export interface JsonOutput<T = unknown> {
     error?: string;
     errorCode?: ErrorCode;
     timestamp: string;
+    /** Present when the process is gist-configured but running local-only
+     * (#1433): machine consumers of mutating --json commands must see that
+     * the mutation will not sync. Set once per process from the CLI bootstrap
+     * via {@link setEnvelopeGistWarning}; envelope-level (not data-level) so
+     * per-command output schemas are untouched.
+     *
+     * Omitted when the command's own payload already carries the same
+     * condition as a structured `warnings[{phase:'gist-init'}]` entry (#1444):
+     * commands that own a warnings[] array (`daily`) report gist degradation
+     * exactly once, there. Consumers should check `data.warnings` first and
+     * fall back to this field for commands without a warnings array. */
+    gistInitWarning?: string;
 }
+/** Set (or clear) the gist degradation warning carried by every subsequent
+ * JSON envelope. Exported for the CLI bootstrap and for test isolation. */
+export declare function setEnvelopeGistWarning(warning: string | null): void;
 /**
  * Deduplicated daily digest for JSON output (#287).
  *
@@ -51,12 +66,12 @@ export interface CompactRepoGroup {
  * See `DailyWarning` and issue #1042 for the rationale — keeping this a
  * fixed union so downstream consumers can switch on it without drift.
  */
-export type DailyWarningPhase = 'fetch' | 'repo-scores' | 'analytics' | 'scout-sync' | 'partition' | 'dismiss-filter' | 'gist-init' | 'gist-checkpoint' | 'gist-staleness' | 'state-load';
+export type DailyWarningPhase = 'fetch' | 'repo-scores' | 'analytics' | 'merge-loop' | 'partition' | 'dismiss-filter' | 'gist-init' | 'gist-checkpoint' | 'gist-staleness' | 'state-load';
 /**
  * A single non-fatal failure surfaced from the `daily` pipeline. Unlike
  * `PRCheckFailure` (which is scoped to per-PR fetch errors), this covers
  * ancillary fetches that previously demoted to a log-only `warn()` — repo
- * metadata, monthly analytics, scout sync, Gist checkpoint, etc.
+ * metadata, monthly analytics, Gist checkpoint, etc.
  *
  * `timestamp` and `details` are optional structured extensions added in
  * #1193 so staleness warnings can carry `lastSuccessfulRefresh` /
@@ -82,6 +97,23 @@ export interface StalenessLike {
     detectedAt: string;
 }
 export declare function buildStalenessWarning(info: StalenessLike): DailyWarning;
+/**
+ * One curated-list entry auto-marked done because its PR merged (#1463).
+ * Produced by the daily merge-loop reconciliation (commands/merge-loop.ts):
+ * a recently merged PR's URL was found inside a list entry's block (the
+ * entry line or an indented sub-bullet), and the entry was struck through
+ * via the same transform `list-mark-done` uses.
+ */
+export interface MergedPRListUpdate {
+    /** The merged PR whose detection triggered the auto-mark. */
+    prUrl: string;
+    /** URL on the struck entry line (usually the issue URL the PR resolved). */
+    issueUrl: string;
+    /** Curated-list file that was updated. */
+    listPath: string;
+    /** True if the parent `### repo/name` heading was also struck through. */
+    repoHeadingStruck: boolean;
+}
 export interface DailyOutput {
     digest: DailyDigestCompact;
     capacity: CapacityAssessment;
@@ -96,7 +128,7 @@ export interface DailyOutput {
     failures: PRCheckFailure[];
     /**
      * Non-fatal warnings from ancillary pipeline phases (repo metadata,
-     * analytics, scout sync, Gist checkpoint, etc.). Always an array — empty
+     * analytics, Gist checkpoint, etc.). Always an array — empty
      * on clean runs. See #1042.
      */
     warnings: DailyWarning[];
@@ -107,6 +139,13 @@ export interface DailyOutput {
      * absent or null on runs where the gate stays silent.
      */
     strategySummary?: import('../core/strategy.js').StrategyResult | null;
+    /**
+     * Curated-list entries auto-marked done this run because their PR merged
+     * (#1463). Present only when at least one entry was actually struck —
+     * merge-free runs (and runs with no curated list / no matching entry)
+     * omit the field entirely so existing consumers and goldens see no change.
+     */
+    listUpdates?: MergedPRListUpdate[];
 }
 /**
  * Compact version of DailyOutput for reduced JSON payload size (#763).
@@ -136,6 +175,8 @@ export interface CompactDailyOutput {
     warnings: DailyWarning[];
     /** Periodic strategy snapshot, threaded through compact mode for parity. See {@link DailyOutput.strategySummary}. */
     strategySummary?: import('../core/strategy.js').StrategyResult | null;
+    /** Curated-list entries auto-marked done this run (#1463). See {@link DailyOutput.listUpdates}. */
+    listUpdates?: MergedPRListUpdate[];
 }
 /**
  * Strip a full DailyOutput down to the compact subset (#763).
@@ -176,7 +217,7 @@ export declare const StatusOutputSchema: z.ZodObject<{
             fetch: "fetch";
             "repo-scores": "repo-scores";
             analytics: "analytics";
-            "scout-sync": "scout-sync";
+            "merge-loop": "merge-loop";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
             "gist-init": "gist-init";
@@ -392,7 +433,7 @@ export declare const DailyOutputSchema: z.ZodObject<{
             fetch: "fetch";
             "repo-scores": "repo-scores";
             analytics: "analytics";
-            "scout-sync": "scout-sync";
+            "merge-loop": "merge-loop";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
             "gist-init": "gist-init";
@@ -449,6 +490,12 @@ export declare const DailyOutputSchema: z.ZodObject<{
             avoidPatterns: z.ZodArray<z.ZodString>;
         }, z.core.$loose>;
     }, z.core.$loose>>>;
+    listUpdates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        prUrl: z.ZodString;
+        issueUrl: z.ZodString;
+        listPath: z.ZodString;
+        repoHeadingStruck: z.ZodBoolean;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const CompactDailyOutputSchema: z.ZodObject<{
     digest: z.ZodObject<{
@@ -540,7 +587,7 @@ export declare const CompactDailyOutputSchema: z.ZodObject<{
             fetch: "fetch";
             "repo-scores": "repo-scores";
             analytics: "analytics";
-            "scout-sync": "scout-sync";
+            "merge-loop": "merge-loop";
             partition: "partition";
             "dismiss-filter": "dismiss-filter";
             "gist-init": "gist-init";
@@ -597,6 +644,12 @@ export declare const CompactDailyOutputSchema: z.ZodObject<{
             avoidPatterns: z.ZodArray<z.ZodString>;
         }, z.core.$loose>;
     }, z.core.$loose>>>;
+    listUpdates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        prUrl: z.ZodString;
+        issueUrl: z.ZodString;
+        listPath: z.ZodString;
+        repoHeadingStruck: z.ZodBoolean;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export declare const SearchOutputSchema: z.ZodObject<{
     candidates: z.ZodArray<z.ZodObject<{
@@ -657,6 +710,7 @@ export declare const SearchOutputSchema: z.ZodObject<{
     aiPolicyBlocklist: z.ZodArray<z.ZodString>;
     hiddenOwnPRCount: z.ZodNumber;
     rateLimitWarning: z.ZodOptional<z.ZodString>;
+    skipListUnavailable: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export declare const FeaturesOutputSchema: z.ZodObject<{
     quickWins: z.ZodArray<z.ZodObject<{
@@ -878,10 +932,12 @@ export declare const ClaimOutputSchema: z.ZodObject<{
     commentUrl: z.ZodString;
     issueUrl: z.ZodString;
     gistSyncWarning: z.ZodOptional<z.ZodString>;
+    stateSaveWarning: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const InitOutputSchema: z.ZodObject<{
     username: z.ZodString;
     message: z.ZodString;
+    gistSyncWarning: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const ManifestOutputSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<1>;
@@ -899,6 +955,7 @@ export declare const SetupOutputSchema: z.ZodUnion<readonly [z.ZodObject<{
     success: z.ZodLiteral<true>;
     settings: z.ZodRecord<z.ZodString, z.ZodString>;
     warnings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    gistSyncWarning: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     setupComplete: z.ZodLiteral<true>;
     config: z.ZodObject<{
@@ -933,6 +990,7 @@ export declare const ConfigCommandOutputSchema: z.ZodUnion<readonly [z.ZodObject
     success: z.ZodLiteral<true>;
     key: z.ZodString;
     value: z.ZodString;
+    gistSyncWarning: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     keys: z.ZodArray<z.ZodObject<{}, z.core.$loose>>;
 }, z.core.$strip>]>;
@@ -995,6 +1053,7 @@ export declare const RepoVetOutputSchema: z.ZodObject<{
         proceed_with_caution: "proceed_with_caution";
         avoid: "avoid";
     }>;
+    historyScore: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 /**
  * The CLI wrapper renames the core function's `repo` metadata object to
@@ -1239,6 +1298,12 @@ export interface SearchOutput {
     hiddenOwnPRCount: number;
     /** Present when rate limits affected the search — either low pre-flight quota or mid-search rate limit hits (#100). */
     rateLimitWarning?: string;
+    /**
+     * Set when the configured skipped-issues file exists but could not be read
+     * (#1448). The search ran with an EMPTY skip list, so explicitly-skipped
+     * issues may appear in `candidates`. Absent on success.
+     */
+    skipListUnavailable?: boolean;
 }
 /** Horizon classification stamped on each features-mode candidate. */
 export type FeaturesHorizon = 'quick-win' | 'bigger-bet';
@@ -1276,6 +1341,13 @@ export interface IssueListInfo {
     availableCount: number;
     completedCount: number;
     skippedIssuesPath?: string;
+    /**
+     * Set when the issue list file was detected but could not be read (#1448).
+     * In that case `availableCount`/`completedCount` are 0 because the content
+     * was unreadable, NOT because the list is empty — consumers should not
+     * treat the counts as authoritative. Absent on success.
+     */
+    readError?: string;
 }
 /**
  * Output of the startup command (combines auth, setup, daily, dashboard, issue list).
@@ -1389,6 +1461,11 @@ export interface VetListOutput {
     };
     pruneResult?: {
         removedCount: number;
+        /**
+         * Set when the prune read/write failed (#1448); `removedCount` is 0 in
+         * that case and the list file is unchanged. Absent on a successful prune.
+         */
+        error?: string;
     };
 }
 /** Output of the vet command */
@@ -1491,6 +1568,12 @@ export interface ClaimOutput {
     issueUrl: string;
     /** Set when the post-mutation Gist checkpoint failed; the local mutation succeeded (#1370). */
     gistSyncWarning?: string;
+    /**
+     * Set when the claim comment posted to GitHub but saving the tracked issue
+     * to local state threw (#1448) — the claim is live but UNTRACKED, so daily
+     * runs will not monitor it. Absent on success.
+     */
+    stateSaveWarning?: string;
 }
 /** Info about a local git clone (#84) */
 export interface LocalRepoInfo {

package/dist/formatters/json.js

@@ -4,6 +4,15 @@
  */
 import { z } from 'zod';
 import { fenceFetchedPR } from '../core/untrusted-content.js';
+// Process-level gist degradation warning threaded into every JSON envelope
+// (#1433). The CLI preAction bootstrap sets it; one-shot processes never
+// clear it (the whole invocation runs degraded or it doesn't).
+let envelopeGistWarning = null;
+/** Set (or clear) the gist degradation warning carried by every subsequent
+ * JSON envelope. Exported for the CLI bootstrap and for test isolation. */
+export function setEnvelopeGistWarning(warning) {
+    envelopeGistWarning = warning;
+}
 export function buildStalenessWarning(info) {
     return {
         phase: 'gist-staleness',
@@ -33,6 +42,7 @@ export function toCompactDailyOutput(output) {
         failureCount: output.failures.length,
         warnings: output.warnings,
         strategySummary: output.strategySummary,
+        listUpdates: output.listUpdates,
     };
 }
 /**
@@ -87,7 +97,7 @@ const DailyWarningPhaseSchema = z.enum([
     'fetch',
     'repo-scores',
     'analytics',
-    'scout-sync',
+    'merge-loop',
     'partition',
     'dismiss-filter',
     'gist-init',
@@ -283,6 +293,13 @@ export const AttentionSummarySchema = z.object({
     dormantFollowup: z.number().int().nonnegative(),
     waiting: z.number().int().nonnegative(),
 });
+/** Mirrors {@link MergedPRListUpdate} (#1463). */
+const MergedPRListUpdateSchema = z.object({
+    prUrl: z.string(),
+    issueUrl: z.string(),
+    listPath: z.string(),
+    repoHeadingStruck: z.boolean(),
+});
 export const DailyOutputSchema = z.object({
     digest: DailyDigestCompactSchema,
     capacity: CapacityAssessmentSchema,
@@ -296,6 +313,7 @@ export const DailyOutputSchema = z.object({
     failures: z.array(PRCheckFailurePassthroughSchema),
     warnings: z.array(DailyWarningSchema),
     strategySummary: StrategyResultSchema.nullable().optional(),
+    listUpdates: z.array(MergedPRListUpdateSchema).optional(),
 });
 export const CompactDailyOutputSchema = z.object({
     digest: DailyDigestCompactSchema,
@@ -308,6 +326,7 @@ export const CompactDailyOutputSchema = z.object({
     failureCount: z.number().int().nonnegative(),
     warnings: z.array(DailyWarningSchema),
     strategySummary: StrategyResultSchema.nullable().optional(),
+    listUpdates: z.array(MergedPRListUpdateSchema).optional(),
 });
 // ── Search output schema (#1147) ─────────────────────────────────────
 const SearchPrioritySchema = z.enum(['merged_pr', 'preferred_org', 'starred', 'normal']);
@@ -368,6 +387,9 @@ export const SearchOutputSchema = z.object({
     aiPolicyBlocklist: z.array(z.string()),
     hiddenOwnPRCount: z.number().int().nonnegative(),
     rateLimitWarning: z.string().optional(),
+    // Skip file unreadable — search ran with an empty skip list (#1448).
+    // Optional: absent on clean runs.
+    skipListUnavailable: z.boolean().optional(),
 });
 // ── Features output schema (scout 0.9.0 #97/#98/#99) ─────────────────
 //
@@ -473,10 +495,15 @@ export const ClaimOutputSchema = z.object({
     issueUrl: z.string(),
     // Post-mutation Gist checkpoint failure (#1370). Optional: absent on clean runs.
     gistSyncWarning: z.string().optional(),
+    // Claim comment posted but local state save threw — claim is live but
+    // untracked (#1448). Optional: absent on clean runs.
+    stateSaveWarning: z.string().optional(),
 });
 export const InitOutputSchema = z.object({
     username: z.string(),
     message: z.string(),
+    // Post-mutation Gist checkpoint failure (#1440). Optional: absent on clean runs.
+    gistSyncWarning: z.string().optional(),
 });
 // ── #1190: plugin → CLI contract ─────────────────────────────────────
 //
@@ -499,6 +526,8 @@ const SetupSetOutputSchema = z.object({
     success: z.literal(true),
     settings: z.record(z.string(), z.string()),
     warnings: z.array(z.string()).optional(),
+    // Post-mutation Gist checkpoint failure (#1440). Optional: absent on clean runs.
+    gistSyncWarning: z.string().optional(),
 });
 const SetupCompleteOutputSchema = z.object({
     setupComplete: z.literal(true),
@@ -535,6 +564,8 @@ const ConfigSetOutputSchema = z.object({
     success: z.literal(true),
     key: z.string(),
     value: z.string(),
+    // Post-mutation Gist checkpoint failure (#1440). Optional: absent on clean runs.
+    gistSyncWarning: z.string().optional(),
 });
 const ConfigListKeysOutputSchema = z.object({
     keys: z.array(ConfigKeyDefSchema),
@@ -617,6 +648,21 @@ export const RepoVetOutputSchema = z.object({
     }),
     rubricScore: z.number(),
     rubricVerdict: z.enum(['recommended', 'proceed_with_caution', 'avoid']),
+    /**
+     * Score components (#1465): two distinct 1–10 numbers share this envelope.
+     * `rubricScore` above is the fresh HEALTH score (the repo's current public
+     * signals, weighted per docs/repo-scores.md §Health score — the name
+     * predates the split and is kept for back-compat). `historyScore` is the
+     * cached HISTORY score: the user's own merge outcomes in this repo, from
+     * `state.repoScores` (repo-score-manager.ts). Absent when the user has no
+     * cached score for the repo. They diverge whenever repo health changed
+     * since the user's last merge there — consumers must never present one as
+     * the other. Deliberately unbounded like the persisted RepoScore.score
+     * source (state-schema validates plain z.number(); v1-era state was
+     * migrated verbatim) — bounds here would turn a legacy out-of-range
+     * stored score into a hard --json contract throw (#1465 review).
+     */
+    historyScore: z.number().optional(),
 });
 const ComplianceCheckSchema = z.object({
     status: z.enum(['pass', 'warn', 'fail']),
@@ -721,6 +767,22 @@ export function toCompactStartupOutput(output) {
         issueList: output.issueList,
     };
 }
+/**
+ * True when the command's own payload already reports gist-init degradation
+ * as a structured `warnings[{phase:'gist-init'}]` entry (#1444). The same
+ * condition used to be double-reported in a single `daily --json` payload —
+ * `envelope.gistInitWarning` AND `data.warnings` carried it in two prose
+ * variants — so the envelope suppresses its duplicate when the structured
+ * entry is present. Keyed on the warning's phase (not its prose) so the two
+ * surfaces cannot drift apart again.
+ */
+function dataCarriesGistInitWarning(data) {
+    if (data === null || typeof data !== 'object')
+        return false;
+    const warnings = data.warnings;
+    return (Array.isArray(warnings) &&
+        warnings.some((w) => w !== null && typeof w === 'object' && w.phase === 'gist-init'));
+}
 /**
  * Wrap data in a standard JSON output envelope
  */
@@ -729,6 +791,7 @@ export function jsonSuccess(data) {
         success: true,
         data,
         timestamp: new Date().toISOString(),
+        ...(envelopeGistWarning && !dataCarriesGistInitWarning(data) ? { gistInitWarning: envelopeGistWarning } : {}),
     };
 }
 /**
@@ -740,6 +803,7 @@ export function jsonError(message, errorCode) {
         error: message,
         errorCode,
         timestamp: new Date().toISOString(),
+        ...(envelopeGistWarning ? { gistInitWarning: envelopeGistWarning } : {}),
     };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-autopilot/core",
-  "version": "3.13.3",
+  "version": "3.14.0",
   "description": "CLI and core library for managing open source contributions",
   "type": "module",
   "bin": {
@@ -61,7 +61,7 @@
   "devDependencies": {
     "@types/node": "^25.9.3",
     "@vitest/coverage-v8": "^4.1.8",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
     "tsx": "^4.22.4",
     "typedoc": "^0.28.19",
     "typescript": "^5.9.3",

package/dist/commands/shelve.d.ts

@@ -1,45 +0,0 @@
-/**
- * Shelve/Unshelve commands
- * Manages shelving PRs to exclude them from capacity and actionable issues.
- * Shelved PRs are auto-unshelved when a maintainer engages.
- *
- * Note: The CLI and MCP shelve/unshelve commands delegate to runMove(),
- * which also clears status overrides. These functions match that behavior
- * to keep the library API consistent.
- */
-import { PR_URL_PATTERN } from './validation.js';
-export interface ShelveOutput {
-    shelved: boolean;
-    url: string;
-    /** Set when the post-mutation Gist checkpoint failed; the local mutation succeeded (#1370). */
-    gistSyncWarning?: string;
-}
-export interface UnshelveOutput {
-    unshelved: boolean;
-    url: string;
-    /** Set when the post-mutation Gist checkpoint failed; the local mutation succeeded (#1370). */
-    gistSyncWarning?: string;
-}
-export { PR_URL_PATTERN };
-/**
- * Shelve a PR, hiding it from daily digest and capacity calculations.
- *
- * @param options - Shelve options
- * @param options.prUrl - Full GitHub PR URL
- * @returns Whether the PR was newly shelved (false if already shelved)
- * @throws {ValidationError} If the URL is not a valid GitHub PR URL
- */
-export declare function runShelve(options: {
-    prUrl: string;
-}): Promise<ShelveOutput>;
-/**
- * Unshelve a PR, restoring it to the daily digest.
- *
- * @param options - Unshelve options
- * @param options.prUrl - Full GitHub PR URL
- * @returns Whether the PR was removed from the shelf (false if not shelved)
- * @throws {ValidationError} If the URL is not a valid GitHub PR URL
- */
-export declare function runUnshelve(options: {
-    prUrl: string;
-}): Promise<UnshelveOutput>;

package/dist/commands/shelve.js

@@ -1,54 +0,0 @@
-/**
- * Shelve/Unshelve commands
- * Manages shelving PRs to exclude them from capacity and actionable issues.
- * Shelved PRs are auto-unshelved when a maintainer engages.
- *
- * Note: The CLI and MCP shelve/unshelve commands delegate to runMove(),
- * which also clears status overrides. These functions match that behavior
- * to keep the library API consistent.
- */
-import { getStateManager, maybeCheckpoint } from '../core/index.js';
-import { PR_URL_PATTERN, validateGitHubUrl, validateUrl } from './validation.js';
-const MODULE = 'shelve';
-// Re-export for backward compatibility with tests
-export { PR_URL_PATTERN };
-/**
- * Shelve a PR, hiding it from daily digest and capacity calculations.
- *
- * @param options - Shelve options
- * @param options.prUrl - Full GitHub PR URL
- * @returns Whether the PR was newly shelved (false if already shelved)
- * @throws {ValidationError} If the URL is not a valid GitHub PR URL
- */
-export async function runShelve(options) {
-    validateUrl(options.prUrl);
-    validateGitHubUrl(options.prUrl, PR_URL_PATTERN, 'PR');
-    const stateManager = getStateManager();
-    let added = false;
-    stateManager.batch(() => {
-        added = stateManager.shelvePR(options.prUrl);
-        stateManager.clearStatusOverride(options.prUrl);
-    });
-    const gistSyncWarning = await maybeCheckpoint(stateManager, MODULE);
-    return { shelved: added, url: options.prUrl, ...(gistSyncWarning ? { gistSyncWarning } : {}) };
-}
-/**
- * Unshelve a PR, restoring it to the daily digest.
- *
- * @param options - Unshelve options
- * @param options.prUrl - Full GitHub PR URL
- * @returns Whether the PR was removed from the shelf (false if not shelved)
- * @throws {ValidationError} If the URL is not a valid GitHub PR URL
- */
-export async function runUnshelve(options) {
-    validateUrl(options.prUrl);
-    validateGitHubUrl(options.prUrl, PR_URL_PATTERN, 'PR');
-    const stateManager = getStateManager();
-    let removed = false;
-    stateManager.batch(() => {
-        removed = stateManager.unshelvePR(options.prUrl);
-        stateManager.clearStatusOverride(options.prUrl);
-    });
-    const gistSyncWarning = await maybeCheckpoint(stateManager, MODULE);
-    return { unshelved: removed, url: options.prUrl, ...(gistSyncWarning ? { gistSyncWarning } : {}) };
-}