@oss-autopilot/core 3.2.0 → 3.4.0

package/dist/cli.js

@@ -32,9 +32,23 @@ program.hook('preAction', async (thisCommand, actionCommand) => {
         enableDebug();
         debug('cli', `Running command: ${actionCommand.name()}`);
     }
-    // actionCommand is the command being executed (e.g., 'status', 'daily')
-    const commandName = actionCommand.name();
-    if (!localOnlySet.has(commandName)) {
+    // actionCommand is the command being executed (e.g., 'status', 'daily').
+    // For subcommand groups (e.g. `guidelines view`), Commander returns the
+    // leaf name `view` — but the registry sets `localOnly` on the parent
+    // entry `guidelines`. Walk the parent chain so a `localOnly` ancestor
+    // covers all its leaves (#1208 M2). Without this, `guidelines view` —
+    // which works fine in local mode (returns storageMode: 'local-unavailable')
+    // — would still hit the auth gate and fail.
+    let cmd = actionCommand;
+    let isLocalOnly = false;
+    while (cmd) {
+        if (localOnlySet.has(cmd.name())) {
+            isLocalOnly = true;
+            break;
+        }
+        cmd = cmd.parent;
+    }
+    if (!isLocalOnly) {
         const token = await getGitHubTokenAsync();
         if (!token) {
             // Honor --json at the CLI boundary so machine consumers (plugins, MCP

package/dist/commands/check-integration.js

@@ -2,8 +2,8 @@
  * Check integration command (#83)
  * Detects new files in the current branch that aren't referenced elsewhere
  */
-import * as path from 'path';
-import { execFileSync } from 'child_process';
+import * as path from 'node:path';
+import { execFileSync } from 'node:child_process';
 import { debug } from '../core/index.js';
 import { errorMessage } from '../core/errors.js';
 /** File extensions we consider "code" that should be imported/referenced */
@@ -71,8 +71,8 @@ export async function runCheckIntegration(options) {
     let newFiles;
     try {
         const output = execFileSync('git', ['diff', '--name-only', '--diff-filter=A', `${base}...HEAD`], {
-            encoding: 'utf-8',
-            timeout: 10000,
+            encoding: 'utf8',
+            timeout: 10_000,
         }).trim();
         newFiles = output ? output.split('\n').filter(Boolean) : [];
     }
@@ -94,8 +94,8 @@ export async function runCheckIntegration(options) {
     let allFiles;
     try {
         allFiles = execFileSync('git', ['ls-files'], {
-            encoding: 'utf-8',
-            timeout: 10000,
+            encoding: 'utf8',
+            timeout: 10_000,
         })
             .trim()
             .split('\n')
@@ -124,8 +124,8 @@ export async function runCheckIntegration(options) {
         for (const pattern of patterns) {
             try {
                 const grepOutput = execFileSync('git', ['grep', '-l', '--', pattern], {
-                    encoding: 'utf-8',
-                    timeout: 10000,
+                    encoding: 'utf8',
+                    timeout: 10_000,
                 }).trim();
                 if (grepOutput) {
                     const matches = grepOutput.split('\n').filter((f) => f !== newFile);

package/dist/commands/comments.js

@@ -7,6 +7,7 @@ import { ValidationError } from '../core/errors.js';
 import { warn } from '../core/logger.js';
 const MODULE = 'comments';
 import { paginateAll } from '../core/pagination.js';
+import { buildStalenessWarning } from '../formatters/json.js';
 import { validateUrl, validateMessage, validateGitHubUrl, PR_URL_PATTERN, ISSUE_OR_PR_URL_PATTERN, ISSUE_URL_PATTERN, } from './validation.js';
 /**
  * Fetch all comments, reviews, and inline review comments for a PR.
@@ -76,6 +77,7 @@ export async function runComments(options) {
     const relevantReviews = reviews
         .filter((r) => filterComment(r) && r.body && r.body.trim())
         .sort((a, b) => new Date(b.submitted_at || 0).getTime() - new Date(a.submitted_at || 0).getTime());
+    const staleness = stateManager.getStateStaleness();
     return {
         pr: {
             title: pr.title,
@@ -107,6 +109,7 @@ export async function runComments(options) {
             inlineCommentCount: relevantReviewComments.length,
             discussionCommentCount: relevantIssueComments.length,
         },
+        ...(staleness ? { warnings: [buildStalenessWarning(staleness)] } : {}),
     };
 }
 /**

package/dist/commands/config.js

@@ -44,25 +44,29 @@ export async function runConfig(options) {
     const value = options.value;
     // Handle specific config keys
     switch (options.key) {
-        case 'username':
+        case 'username': {
             stateManager.updateConfig({ githubUsername: validateGitHubUsername(value) });
             break;
-        case 'add-language':
+        }
+        case 'add-language': {
             if (!currentConfig.languages.includes(value)) {
                 stateManager.updateConfig({ languages: [...currentConfig.languages, value] });
             }
             break;
-        case 'add-label':
+        }
+        case 'add-label': {
             if (!currentConfig.labels.includes(value)) {
                 stateManager.updateConfig({ labels: [...currentConfig.labels, value] });
             }
             break;
-        case 'remove-label':
+        }
+        case 'remove-label': {
             if (!currentConfig.labels.includes(value)) {
                 throw new Error(`Label "${value}" is not currently configured. Current labels: ${currentConfig.labels.join(', ')}`);
             }
             stateManager.updateConfig({ labels: currentConfig.labels.filter((l) => l !== value) });
             break;
+        }
         case 'add-scope': {
             const scope = validateScope(value);
             const currentScopes = currentConfig.scope ?? [];
@@ -111,9 +115,10 @@ export async function runConfig(options) {
             }
             break;
         }
-        case 'issueListPath':
+        case 'issueListPath': {
             stateManager.updateConfig({ issueListPath: value || undefined });
             break;
+        }
         case 'diffTool': {
             if (!DIFF_TOOLS.includes(value)) {
                 throw new Error(`Invalid diffTool "${value}". Valid options: ${DIFF_TOOLS.join(', ')}`);
@@ -121,13 +126,15 @@ export async function runConfig(options) {
             stateManager.updateConfig({ diffTool: value });
             break;
         }
-        case 'diffToolCustomCommand':
+        case 'diffToolCustomCommand': {
             stateManager.updateConfig({
                 diffToolCustomCommand: value || undefined,
             });
             break;
-        default:
+        }
+        default: {
             throw new ValidationError(formatUnknownKeyError(options.key, 'config'));
+        }
     }
     return { success: true, key: options.key, value };
 }

package/dist/commands/daily-render.js

@@ -20,16 +20,21 @@ import { formatRelativeTime } from '../core/dates.js';
  */
 export function formatActionHint(hint) {
     switch (hint) {
-        case 'demo_requested':
+        case 'demo_requested': {
             return 'demo/screenshot requested';
-        case 'tests_requested':
+        }
+        case 'tests_requested': {
             return 'tests requested';
-        case 'changes_requested':
+        }
+        case 'changes_requested': {
             return 'code changes requested';
-        case 'docs_requested':
+        }
+        case 'docs_requested': {
             return 'documentation requested';
-        case 'rebase_requested':
+        }
+        case 'rebase_requested': {
             return 'rebase requested';
+        }
     }
 }
 /**

package/dist/commands/daily.d.ts

@@ -6,17 +6,11 @@
  * Domain logic lives in src/core/daily-logic.ts; this file is a thin
  * orchestration layer that wires up the phases and handles I/O.
  */
-import { type DailyDigest, type CommentedIssue, type PRCheckFailure, type RepoGroup, type AgentState, type StarFilter } from '../core/index.js';
+import { type DailyDigest, type CommentedIssue, type PRCheckFailure, type RepoGroup } from '../core/index.js';
 import { type DailyOutput, type DailyWarning, type CapacityAssessment, type ActionableIssue, type ActionMenu } from '../formatters/json.js';
 export { applyStatusOverrides, computeRepoSignals, groupPRsByRepo, assessCapacity, collectActionableIssues, computeActionMenu, toShelvedPRRef, formatBriefSummary, formatSummary, printDigest, CRITICAL_STATUSES, } from '../core/index.js';
-/**
- * Build a star filter from state for use in fetchUserPRCounts.
- * Returns undefined if no star data is available (first run).
- *
- * @param state - Current agent state (read-only)
- * @returns Star filter with minimum threshold and known counts, or undefined on first run
- */
-export declare function buildStarFilter(state: Readonly<AgentState>): StarFilter | undefined;
+import { buildStarFilter } from '../core/daily-logic.js';
+export { buildStarFilter };
 /**
  * Internal result of the daily check, using full (non-deduplicated) types.
  * Consumed by printDigest() (text mode) and converted to DailyOutput (JSON mode)

package/dist/commands/daily.js

@@ -12,7 +12,7 @@ import { warn } from '../core/logger.js';
 import { emptyPRCountsResult } from '../core/github-stats.js';
 import { createAutopilotScout } from './scout-bridge.js';
 import { updateMonthlyAnalytics } from './dashboard-data.js';
-import { deduplicateDigest, compactActionableIssues, compactRepoGroups, } from '../formatters/json.js';
+import { deduplicateDigest, compactActionableIssues, compactRepoGroups, buildStalenessWarning, } from '../formatters/json.js';
 const MODULE = 'daily';
 /**
  * Record a non-fatal failure: push a structured entry into the run's warnings
@@ -39,26 +39,12 @@ function nonFatalCatchWithWarning(opts) {
 // Re-export domain functions so existing consumers (tests, dashboard, startup)
 // can continue importing from './daily.js' without changes.
 export { applyStatusOverrides, computeRepoSignals, groupPRsByRepo, assessCapacity, collectActionableIssues, computeActionMenu, toShelvedPRRef, formatBriefSummary, formatSummary, printDigest, CRITICAL_STATUSES, } from '../core/index.js';
-/**
- * Build a star filter from state for use in fetchUserPRCounts.
- * Returns undefined if no star data is available (first run).
- *
- * @param state - Current agent state (read-only)
- * @returns Star filter with minimum threshold and known counts, or undefined on first run
- */
-export function buildStarFilter(state) {
-    const minStars = state.config.minStars ?? 50;
-    const knownStarCounts = new Map();
-    for (const [repo, score] of Object.entries(state.repoScores)) {
-        if (score.stargazersCount !== undefined) {
-            knownStarCounts.set(repo, score.stargazersCount);
-        }
-    }
-    // Only filter if we have some star data to work with
-    if (knownStarCounts.size === 0)
-        return undefined;
-    return { minStars, knownStarCounts };
-}
+// buildStarFilter moved to core/daily-logic.ts so the dashboard layer can
+// reuse it without crossing the commands → sibling-command boundary
+// (#1208 M7). Re-exported here for backward compatibility with anyone
+// importing from this module.
+import { buildStarFilter } from '../core/daily-logic.js';
+export { buildStarFilter };
 // ---------------------------------------------------------------------------
 // Phase functions
 // ---------------------------------------------------------------------------
@@ -504,6 +490,11 @@ async function executeDailyCheckInternal(token) {
     // One collector shared by every phase — threaded through explicitly so the
     // callgraph documents which phases can produce non-fatal warnings. See #1042.
     const warnings = [];
+    // Surface Gist staleness up-front so consumers see it even if Phase 1 fails (#1193).
+    const staleness = getStateManager().getStateStaleness();
+    if (staleness) {
+        warnings.push(buildStalenessWarning(staleness));
+    }
     // Phase 1: Fetch all PR data from GitHub
     const { prs, failures, mergedCounts, closedCounts, monthlyCounts, monthlyClosedCounts, openedFromMerged, openedFromClosed, recentlyClosedPRs, recentlyMergedPRs, commentedIssues, } = await fetchPRData(prMonitor, token, warnings);
     // Phase 2: Update repo scores (signals, star counts, trust sync)

package/dist/commands/dashboard-data.js

@@ -9,7 +9,7 @@ import { warn } from '../core/logger.js';
 import { emptyPRCountsResult, fetchMergedPRsSince, fetchClosedPRsSince } from '../core/github-stats.js';
 import { parseGitHubUrl } from '../core/urls.js';
 import { isBelowMinStars, } from '../core/types.js';
-import { toShelvedPRRef, buildStarFilter } from './daily.js';
+import { toShelvedPRRef, buildStarFilter } from '../core/index.js';
 const MODULE = 'dashboard-data';
 export function buildDashboardStats(digest, state, storedMergedCount, storedClosedCount) {
     const summary = digest.summary || {

package/dist/commands/dashboard-lifecycle.js

@@ -3,7 +3,7 @@
  * Handles launching the interactive SPA dashboard as a background process
  * and detecting whether a server is already running.
  */
-import { spawn } from 'child_process';
+import { spawn } from 'node:child_process';
 import { findRunningDashboardServer, isDashboardServerRunning, readDashboardServerInfo, removeDashboardServerInfo, } from './dashboard-process.js';
 import { resolveAssetsDir } from './dashboard.js';
 import { getCLIVersion } from '../core/index.js';

package/dist/commands/dashboard-process.js

@@ -2,9 +2,9 @@
  * Dashboard server process management.
  * PID file operations, health probes, and running server detection.
  */
-import * as http from 'http';
-import * as fs from 'fs';
-import * as path from 'path';
+import * as http from 'node:http';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 import { getDataDir } from '../core/index.js';
 import { warn } from '../core/logger.js';
 const MODULE = 'dashboard-server';
@@ -17,7 +17,7 @@ export function writeDashboardServerInfo(info) {
 }
 export function readDashboardServerInfo() {
     try {
-        const content = fs.readFileSync(getDashboardPidPath(), 'utf-8');
+        const content = fs.readFileSync(getDashboardPidPath(), 'utf8');
         const parsed = JSON.parse(content);
         if (typeof parsed !== 'object' ||
             parsed === null ||

package/dist/commands/dashboard-server.js

@@ -5,10 +5,10 @@
  *
  * Uses Node's built-in http module — no Express/Fastify.
  */
-import * as http from 'http';
-import * as fs from 'fs';
-import * as path from 'path';
-import * as crypto from 'crypto';
+import * as http from 'node:http';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
 import { getStateManager, getGitHubToken, getCLIVersion, applyStatusOverrides } from '../core/index.js';
 import { errorMessage, ValidationError } from '../core/errors.js';
 import { warn } from '../core/logger.js';
@@ -44,7 +44,7 @@ function readVettedIssues() {
         const info = detectIssueList();
         if (!info)
             return null;
-        const content = fs.readFileSync(info.path, 'utf-8');
+        const content = fs.readFileSync(info.path, 'utf8');
         return parseIssueList(content);
     }
     catch (error) {
@@ -148,7 +148,7 @@ function readBody(req, maxBytes = MAX_BODY_BYTES) {
         });
         req.on('end', () => {
             if (!aborted)
-                resolve(Buffer.concat(chunks).toString('utf-8'));
+                resolve(Buffer.concat(chunks).toString('utf8'));
         });
         req.on('error', (err) => {
             if (!aborted)
@@ -265,6 +265,11 @@ export async function startDashboardServer(options) {
     // not disappear when /api/data rebuilds after a state change or after a
     // POST /api/action completes.
     let cachedPartialFailures = undefined;
+    // Tracks the last background-refresh failure so /api/data can surface
+    // staleness to the SPA via the X-Dashboard-Stale header (#1205). Cleared
+    // when a refresh succeeds. Without this, token expiry / GitHub outage
+    // produces silent stale data hours old with no client-visible signal.
+    let lastBackgroundRefreshError = null;
     if (!cachedDigest) {
         throw new Error('No dashboard data available. Run the daily check first: GITHUB_TOKEN=$(gh auth token) npm start -- daily');
     }
@@ -327,6 +332,14 @@ export async function startDashboardServer(options) {
                         res.setHeader('X-Dashboard-Stale', '1');
                     }
                 }
+                // Surface staleness from a failed background refresh too (#1205) so
+                // token expiry / GitHub outage produces a client-visible signal
+                // rather than silent stale data. Only set the header when a failure
+                // is recorded — successful refreshes clear it.
+                if (lastBackgroundRefreshError !== null) {
+                    res.setHeader('X-Dashboard-Stale', '1');
+                    res.setHeader('X-Dashboard-Stale-Reason', `background-refresh-failed: ${lastBackgroundRefreshError}`);
+                }
                 sendJson(res, 200, cachedJsonData);
                 return;
             }
@@ -598,10 +611,16 @@ export async function startDashboardServer(options) {
             cachedPartialFailures = result.partialFailures.length > 0 ? result.partialFailures : undefined;
             cachedJsonData = buildDashboardJson(cachedDigest, stateManager.getState(), cachedCommentedIssues, result.allMergedPRs, result.allClosedPRs, cachedPartialFailures);
             cachedIssueListMtimeMs = getIssueListMtimeMs();
+            // Successful refresh clears any prior failure signal (#1205).
+            lastBackgroundRefreshError = null;
             warn(MODULE, 'Background data refresh complete');
+            return;
         })
             .catch((error) => {
-            warn(MODULE, `Background data refresh failed (serving cached data): ${errorMessage(error)}`);
+            // Capture so /api/data can surface staleness via X-Dashboard-Stale
+            // header — previously the catch only logged to stderr (#1205).
+            lastBackgroundRefreshError = errorMessage(error);
+            warn(MODULE, `Background data refresh failed (serving cached data): ${lastBackgroundRefreshError}`);
         });
     }
     // ── Open browser ─────────────────────────────────────────────────────────

package/dist/commands/dashboard.js

@@ -1,8 +1,8 @@
 /**
  * Dashboard command — serves the interactive Preact SPA dashboard.
  */
-import * as fs from 'fs';
-import * as path from 'path';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 import { getGitHubToken } from '../core/index.js';
 /**
  * Resolve the SPA assets directory from packages/dashboard/dist/.

package/dist/commands/detect-formatters.js

@@ -3,8 +3,8 @@
  * Scans a local repository for configured formatters/linters.
  * Optionally diagnoses CI log output for formatting failures.
  */
-import * as fs from 'fs';
-import * as path from 'path';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 import { detectFormatters, diagnoseCIFormatterFailure } from '../core/formatter-detection.js';
 import { errorMessage } from '../core/errors.js';
 export async function runDetectFormatters(options) {
@@ -13,7 +13,7 @@ export async function runDetectFormatters(options) {
     if (options.ciLog) {
         let logContent;
         try {
-            logContent = fs.readFileSync(path.resolve(options.ciLog), 'utf-8');
+            logContent = fs.readFileSync(path.resolve(options.ciLog), 'utf8');
         }
         catch (err) {
             throw new Error(`Failed to read CI log file: ${errorMessage(err)}`, { cause: err });

package/dist/commands/doctor.js

@@ -9,10 +9,10 @@
  * Each `check*` function is exported individually so tests can mock its
  * external dependencies in isolation.
  */
-import * as fs from 'fs';
-import * as path from 'path';
-import { execFile } from 'child_process';
-import { promisify } from 'util';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
 import { getGitHubTokenAsync, getOctokit, getStatePath } from '../core/index.js';
 import { AgentStateSchema } from '../core/state-schema.js';
 import { errorMessage } from '../core/errors.js';
@@ -195,7 +195,7 @@ export function checkStateFile(options) {
         };
     }
     try {
-        const raw = fs.readFileSync(statePath, 'utf-8');
+        const raw = fs.readFileSync(statePath, 'utf8');
         const parsed = JSON.parse(raw);
         const result = AgentStateSchema.safeParse(parsed);
         if (!result.success) {

package/dist/commands/guidelines.d.ts

@@ -27,6 +27,16 @@ export interface FetchCorpusOutput {
     prCount: number;
     /** PRs skipped because `commentsFetchedAt` is already set (without --force). */
     skipped: number;
+    /**
+     * PRs that were attempted but errored (404, rate limit, transient API
+     * failure). Surfaced so the host can decide whether to retry or warn the
+     * user that the corpus is partial. Empty array when all attempted fetches
+     * succeeded. (#1209 L8)
+     */
+    failures: Array<{
+        prUrl: string;
+        error: string;
+    }>;
 }
 interface RepoOption {
     repo: string;

package/dist/commands/guidelines.js

@@ -11,7 +11,7 @@
  * Standalone-mode users see "not available" on store/reset/fetch-corpus
  * because per-repo guidelines require Gist persistence to be useful.
  */
-import { getStateManager, requireGitHubToken, getOctokit, GuidelinesNotAvailableError } from '../core/index.js';
+import { getStateManager, requireGitHubToken, getOctokit, GuidelinesNotAvailableError, maybeCheckpoint, } from '../core/index.js';
 import { fetchPRCommentBundlesBatch } from '../core/pr-comments-fetcher.js';
 import { warn } from '../core/logger.js';
 const MODULE = 'guidelines';
@@ -36,7 +36,7 @@ export async function runGuidelinesView(options) {
     return {
         repo: options.repo,
         content,
-        byteSize: content === null ? 0 : Buffer.byteLength(content, 'utf-8'),
+        byteSize: content === null ? 0 : Buffer.byteLength(content, 'utf8'),
         exists: content !== null,
         storageMode: sm.isGuidelinesAvailable() ? 'gist' : 'local-unavailable',
     };
@@ -54,9 +54,13 @@ export async function runGuidelinesStore(options) {
     const sm = getStateManager();
     // Throws GuidelinesNotAvailableError or GuidelinesTooLargeError on failure.
     sm.setGuidelines(options.repo, options.content);
+    // Push to Gist — autoSave only writes the local state-cache mirror in Gist
+    // mode, so without this checkpoint the change never propagates across
+    // machines (#1200).
+    await maybeCheckpoint(sm, MODULE);
     return {
         repo: options.repo,
-        byteSize: Buffer.byteLength(options.content, 'utf-8'),
+        byteSize: Buffer.byteLength(options.content, 'utf8'),
         stored: true,
     };
 }
@@ -70,6 +74,8 @@ export async function runGuidelinesReset(options) {
     const existed = sm.getGuidelines(options.repo) !== null;
     if (existed) {
         sm.deleteGuidelines(options.repo);
+        // Push to Gist — see runGuidelinesStore note (#1200).
+        await maybeCheckpoint(sm, MODULE);
     }
     return { repo: options.repo, deleted: existed };
 }
@@ -102,7 +108,11 @@ export async function runFetchCorpus(options) {
     const eligible = candidates.filter((c) => {
         if (!c.url.startsWith(repoUrlPrefix))
             return false;
-        if (Date.parse(c.timestamp || '') < cutoffMs)
+        // Date.parse('') is NaN, and `NaN < cutoffMs` is false — the previous
+        // form silently passed PRs with empty/malformed timestamps through the
+        // recency cliff (#1204). Number.isFinite filters those out explicitly.
+        const ts = Date.parse(c.timestamp || '');
+        if (!Number.isFinite(ts) || ts < cutoffMs)
             return false;
         return true;
     });
@@ -112,10 +122,12 @@ export async function runFetchCorpus(options) {
     const skipped = options.forceRefetch ? 0 : eligible.filter((c) => c.alreadyFetched).length;
     const toFetch = (options.forceRefetch ? eligible : eligible.filter((c) => !c.alreadyFetched))
         // Most-recent first so the host always sees the freshest signal in its corpus window.
+        // After the eligibility filter (#1204), every entry has a finite Date.parse,
+        // so the comparator is well-defined.
         .sort((a, b) => Date.parse(b.timestamp || '') - Date.parse(a.timestamp || ''))
         .slice(0, limit);
     if (toFetch.length === 0) {
-        return { repo: options.repo, bundles: [], prCount: 0, skipped };
+        return { repo: options.repo, bundles: [], prCount: 0, skipped, failures: [] };
     }
     const token = requireGitHubToken();
     const octokit = getOctokit(token);
@@ -123,7 +135,7 @@ export async function runFetchCorpus(options) {
     if (!username) {
         warn(MODULE, 'githubUsername is not set; bot/own-comment filtering will be incomplete');
     }
-    const bundles = await fetchPRCommentBundlesBatch(octokit, toFetch.map((c) => c.url), username);
+    const { bundles, failures } = await fetchPRCommentBundlesBatch(octokit, toFetch.map((c) => c.url), username);
     // Stamp commentsFetchedAt on each PR we successfully fetched — the bundle
     // list mirrors the input order until paginateAll fan-out, so we mark on
     // a per-bundle basis to be safe.
@@ -131,11 +143,18 @@ export async function runFetchCorpus(options) {
     for (const bundle of bundles) {
         sm.markPRCommentsFetched(bundle.prUrl, now);
     }
+    // Push commentsFetchedAt stamps to Gist so other machines don't re-fetch
+    // the same PRs forever. autoSave only writes the local mirror in Gist
+    // mode (#1200).
+    if (bundles.length > 0) {
+        await maybeCheckpoint(sm, MODULE);
+    }
     return {
         repo: options.repo,
         bundles,
         prCount: bundles.length,
         skipped,
+        failures,
     };
 }
 function clampLimit(limit) {

package/dist/commands/list-move-tier.js

@@ -10,8 +10,8 @@
  *
  * No GitHub calls — pure read/transform/write of a local file.
  */
-import * as fs from 'fs';
-import * as path from 'path';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
 import { errorMessage } from '../core/errors.js';
 const TIER_HEADERS = {
     pursue: '## Pursue',
@@ -47,7 +47,7 @@ function findIssueBlocks(lines, issueUrl) {
     for (let i = 0; i < lines.length; i++) {
         const line = lines[i];
         // Top-level list item — `- `, `* `, `+ `, or `1.` at the start (with no leading whitespace).
-        const isTopLevelListItem = /^[-*+]\s|^\d+\.\s/.test(line);
+        const isTopLevelListItem = /^[*+-]\s|^\d+\.\s/.test(line);
         if (!isTopLevelListItem || !line.includes(issueUrl))
             continue;
         // Capture indented sub-bullets that follow this line.
@@ -166,7 +166,7 @@ export async function runListMoveTier(options) {
     }
     let content;
     try {
-        content = fs.readFileSync(filePath, 'utf-8');
+        content = fs.readFileSync(filePath, 'utf8');
     }
     catch (error) {
         throw new Error(`Failed to read file: ${errorMessage(error)}`, { cause: error });
@@ -174,7 +174,7 @@ export async function runListMoveTier(options) {
     const result = moveIssueToTier(content, options.issueUrl, options.tier);
     if (result.moved) {
         try {
-            fs.writeFileSync(filePath, result.content, 'utf-8');
+            fs.writeFileSync(filePath, result.content, 'utf8');
         }
         catch (error) {
             throw new Error(`Failed to write file: ${errorMessage(error)}`, { cause: error });

package/dist/commands/local-repos.js

@@ -2,10 +2,10 @@
  * Local repos command (#84)
  * Scans configurable directories for local git clones and caches results
  */
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import { execFileSync } from 'child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { execFileSync } from 'node:child_process';
 import { getStateManager, debug } from '../core/index.js';
 import { errorMessage } from '../core/errors.js';
 /** Default directories to scan for local clones */
@@ -21,7 +21,7 @@ const DEFAULT_SCAN_PATHS = [
 function getGitHubRemote(repoPath) {
     try {
         const remoteUrl = execFileSync('git', ['-C', repoPath, 'remote', 'get-url', 'origin'], {
-            encoding: 'utf-8',
+            encoding: 'utf8',
             timeout: 5000,
             stdio: ['pipe', 'pipe', 'pipe'],
         }).trim();
@@ -30,7 +30,7 @@ function getGitHubRemote(repoPath) {
         if (httpsMatch)
             return httpsMatch[1];
         // Match SSH: git@github.com:owner/repo.git
-        const sshMatch = remoteUrl.match(/github\.com[:/]([^/]+\/[^/]+?)(?:\.git)?$/);
+        const sshMatch = remoteUrl.match(/github\.com[/:]([^/]+\/[^/]+?)(?:\.git)?$/);
         if (sshMatch)
             return sshMatch[1];
         return null;
@@ -45,7 +45,7 @@ function getGitHubRemote(repoPath) {
 function getCurrentBranch(repoPath) {
     try {
         return (execFileSync('git', ['-C', repoPath, 'branch', '--show-current'], {
-            encoding: 'utf-8',
+            encoding: 'utf8',
             timeout: 5000,
             stdio: ['pipe', 'pipe', 'pipe'],
         }).trim() || null);
@@ -66,8 +66,8 @@ export function scanForRepos(scanPaths) {
         let gitDirs;
         try {
             const output = execFileSync('find', [scanPath, '-maxdepth', '4', '-name', '.git', '-type', 'd'], {
-                encoding: 'utf-8',
-                timeout: 30000,
+                encoding: 'utf8',
+                timeout: 30_000,
                 stdio: ['pipe', 'pipe', 'pipe'],
             }).trim();
             gitDirs = output ? output.split('\n').filter(Boolean) : [];