@oss-autopilot/core 3.3.0 → 3.4.1

package/dist/core/state-persistence.js

@@ -1,6 +1,6 @@
 /**
  * State persistence layer for the OSS Contribution Agent.
- * Handles file I/O, locking, backup/restore, and schema migration (v1→v2→v3).
+ * Handles file I/O, locking, backup/restore, and schema migration (v1→v2→v3→v4).
  * No module-level mutable state — functions accept/return AgentState objects.
  */
 import * as fs from 'node:fs';
@@ -170,7 +170,7 @@ export function migrateV3ToV4(rawState) {
     return rawState;
 }
 /**
- * Create a fresh state (v3).
+ * Create a fresh state (v4).
  * Leverages Zod schema defaults to produce a complete state.
  */
 export function createFreshState() {
@@ -275,7 +275,7 @@ function tryRestoreFromBackup() {
         try {
             const data = fs.readFileSync(backupPath, 'utf8');
             let raw = JSON.parse(data);
-            // Chain migrations: v1 → v2 → v3
+            // Chain migrations: v1 → v2 → v3 → v4
             if (typeof raw === 'object' && raw !== null) {
                 const rawObj = raw;
                 if (rawObj.version === 1) {
@@ -306,8 +306,11 @@ function tryRestoreFromBackup() {
             debug(MODULE, `Backup ${backupFile} full validation errors:`, parsed.error.issues);
         }
         catch (backupErr) {
-            // This backup is also corrupted, try the next one
-            warn(MODULE, `Backup ${backupFile} is corrupted, trying next...`);
+            // This backup is also corrupted, try the next one. Include the error
+            // message in the warn so non-DEBUG users can diagnose without enabling
+            // DEBUG=1 (#1209 L7); the full stack still goes to debug.
+            const msg = backupErr instanceof Error ? backupErr.message : String(backupErr);
+            warn(MODULE, `Backup ${backupFile} is corrupted (${msg}), trying next...`);
             debug(MODULE, `Backup ${backupFile} parse failed`, backupErr);
         }
     }

package/dist/core/state-schema.js

@@ -45,18 +45,22 @@ export const StoredMergedPRSchema = z.object({
     title: z.string(),
     mergedAt: z.string(),
     /** When the raw review-comment bundle for this PR was last fetched (#867). */
-    commentsFetchedAt: z.string().optional(),
+    // ISO-8601 datetime guards against `markPRCommentsFetched(url, "garbage")`
+    // poisoning state through the stamping API (#1209 L4).
+    commentsFetchedAt: z.string().datetime().optional(),
     /** When the host last ran LLM extraction over this PR's comment bundle (#867). */
-    learningsExtractedAt: z.string().optional(),
+    learningsExtractedAt: z.string().datetime().optional(),
 });
 export const StoredClosedPRSchema = z.object({
     url: z.string(),
     title: z.string(),
     closedAt: z.string(),
     /** When the raw review-comment bundle for this PR was last fetched (#867). */
-    commentsFetchedAt: z.string().optional(),
+    // ISO-8601 datetime guards against `markPRCommentsFetched(url, "garbage")`
+    // poisoning state through the stamping API (#1209 L4).
+    commentsFetchedAt: z.string().datetime().optional(),
     /** When the host last ran LLM extraction over this PR's comment bundle (#867). */
-    learningsExtractedAt: z.string().optional(),
+    learningsExtractedAt: z.string().datetime().optional(),
 });
 export const AnalyzedIssueConversationSchema = z.object({
     url: z.string(),

package/dist/core/state.js

@@ -345,7 +345,11 @@ export class StateManager {
     async refreshFromGist() {
         if (!this.gistStore)
             return false;
-        const refreshed = await this.gistStore.refreshFromGist();
+        const result = await this.gistStore.refreshFromGist();
+        // StateManager keeps its boolean shape (callers rely on truthy-check
+        // semantics) but consults the discriminated union internally to know
+        // whether to reload state.json from the now-fresh cache (#1209 L9).
+        const refreshed = result.status === 'refreshed';
         if (refreshed) {
             const raw = this.gistStore.cachedFiles.get('state.json');
             if (!raw) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-autopilot/core",
-  "version": "3.3.0",
+  "version": "3.4.1",
   "description": "CLI and core library for managing open source contributions",
   "type": "module",
   "bin": {
@@ -54,9 +54,9 @@
   "dependencies": {
     "@octokit/plugin-throttling": "^11.0.3",
     "@octokit/rest": "^22.0.1",
-    "@oss-scout/core": "^0.7.1",
+    "@oss-scout/core": "^0.8.0",
     "commander": "^14.0.3",
-    "zod": "^4.3.6"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^25.6.0",