@oss-autopilot/core 3.4.1 → 3.6.0

package/dist/core/workflow-state.js

@@ -0,0 +1,101 @@
+/**
+ * Workflow-state helpers (#1280).
+ *
+ * Centralizes the read/write logic for `state.workflowState`. Used
+ * by `draft-first-workflow.md`, `work-through-issues.md`, and
+ * `pre-commit-review.md` to record pause points and offer
+ * Resume / Restart / Discard at the next `/oss` invocation.
+ *
+ * Pure functions — callers manage state I/O. Same architectural
+ * shape as the recent #1277 (follow-up-history) helpers.
+ */
+/**
+ * Snapshot the user's current workflow position. Returns the
+ * patched state; callers persist via `StateManager.save()` (or the
+ * gist `checkpoint()` path).
+ */
+export function recordWorkflowPause(state, next, now = new Date()) {
+    const incoming = {
+        ...next,
+        lastUpdatedAt: now.toISOString(),
+    };
+    return { ...state, workflowState: incoming };
+}
+/**
+ * Read the current workflow snapshot, or null when no pause is
+ * recorded.
+ */
+export function getWorkflowState(state) {
+    return state.workflowState ?? null;
+}
+/**
+ * Discard the current pause snapshot. Used by:
+ *  - the workflow completing normally,
+ *  - the user picking "Discard and start fresh" at the resume
+ *    prompt,
+ *  - any consumer that detects the snapshot has gone stale (branch
+ *    deleted, repo no longer reachable).
+ */
+export function clearWorkflowState(state) {
+    if (!state.workflowState)
+        return state;
+    const { workflowState: _drop, ...rest } = state;
+    return rest;
+}
+/**
+ * Append a step name to `completedSteps` and update `currentStep`
+ * to the supplied next step. Convenience wrapper around the immer-
+ * style read/replace pattern. Returns the patched state.
+ */
+export function advanceWorkflowStep(state, nextStep, now = new Date()) {
+    const ws = state.workflowState;
+    if (!ws)
+        return state;
+    if (ws.currentStep === nextStep)
+        return state;
+    const completed = [...ws.completedSteps];
+    if (!completed.includes(ws.currentStep))
+        completed.push(ws.currentStep);
+    return {
+        ...state,
+        workflowState: {
+            ...ws,
+            currentStep: nextStep,
+            completedSteps: completed,
+            lastUpdatedAt: now.toISOString(),
+        },
+    };
+}
+/**
+ * Merge per-step data into `stepData` without overwriting other
+ * keys. Useful when a workflow's resume needs to restore non-trivial
+ * context (skipped compliance items, last review pass count, etc.).
+ */
+export function setStepData(state, step, data, now = new Date()) {
+    const ws = state.workflowState;
+    if (!ws)
+        return state;
+    return {
+        ...state,
+        workflowState: {
+            ...ws,
+            stepData: { ...ws.stepData, [step]: data },
+            lastUpdatedAt: now.toISOString(),
+        },
+    };
+}
+/**
+ * Read step data for a specific step, or undefined when none was
+ * stored. Callers typically narrow the unknown via a type guard.
+ */
+export function getStepData(state, step) {
+    return state.workflowState?.stepData[step];
+}
+/**
+ * Whether the recorded pause is on the supplied workflow. Useful
+ * for the router to decide whether to offer Resume vs ignore the
+ * snapshot when the current `/oss` invocation is unrelated.
+ */
+export function isPausedIn(state, workflowName) {
+    return state.workflowState?.workflowName === workflowName;
+}

package/dist/formatters/json.d.ts

@@ -97,6 +97,13 @@ export interface DailyOutput {
      * on clean runs. See #1042.
      */
     warnings: DailyWarning[];
+    /**
+     * Periodic contribution-strategy snapshot (#1270). Populated when the
+     * cadence trigger fires AND the user has crossed the merge floor. The
+     * `/oss` action menu renders this inline ahead of the action options;
+     * absent or null on runs where the gate stays silent.
+     */
+    strategySummary?: import('../core/strategy.js').StrategyResult | null;
 }
 /**
  * Compact version of DailyOutput for reduced JSON payload size (#763).
@@ -122,6 +129,8 @@ export interface CompactDailyOutput {
      * the `--compact` payload. See #1042.
      */
     warnings: DailyWarning[];
+    /** Periodic strategy snapshot, threaded through compact mode for parity. See {@link DailyOutput.strategySummary}. */
+    strategySummary?: import('../core/strategy.js').StrategyResult | null;
 }
 /**
  * Strip a full DailyOutput down to the compact subset (#763).
@@ -275,6 +284,50 @@ export declare const DailyOutputSchema: z.ZodObject<{
         timestamp: z.ZodOptional<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>;
+    strategySummary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        profile: z.ZodObject<{
+            style: z.ZodEnum<{
+                maintainer: "maintainer";
+                explorer: "explorer";
+                specialist: "specialist";
+                generalist: "generalist";
+            }>;
+            totalPRs: z.ZodNumber;
+            mergedCount: z.ZodNumber;
+            mergeRate: z.ZodNumber;
+            primaryLanguages: z.ZodArray<z.ZodString>;
+            favoriteRepos: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+        capacity: z.ZodObject<{
+            openPRCount: z.ZodNumber;
+            dormantPRCount: z.ZodNumber;
+            dormantRepoCount: z.ZodNumber;
+            overExtended: z.ZodBoolean;
+            suggestedAction: z.ZodUnion<readonly [z.ZodLiteral<"open_more">, z.ZodLiteral<"follow_up_dormant">, z.ZodLiteral<"wait_on_maintainers">, z.ZodNull]>;
+        }, z.core.$loose>;
+        patterns: z.ZodObject<{
+            prTypeDistribution: z.ZodObject<{
+                docs: z.ZodNumber;
+                fixes: z.ZodNumber;
+                features: z.ZodNumber;
+                refactors: z.ZodNumber;
+                tests: z.ZodNumber;
+                other: z.ZodNumber;
+            }, z.core.$loose>;
+            trajectoryDirection: z.ZodEnum<{
+                growing: "growing";
+                steady: "steady";
+                declining: "declining";
+            }>;
+            averagePRSize: z.ZodNumber;
+        }, z.core.$loose>;
+        recommendations: z.ZodObject<{
+            languages: z.ZodArray<z.ZodString>;
+            repos: z.ZodArray<z.ZodString>;
+            issueTypes: z.ZodArray<z.ZodString>;
+            avoidPatterns: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+    }, z.core.$loose>>>;
 }, z.core.$strip>;
 export declare const CompactDailyOutputSchema: z.ZodObject<{
     digest: z.ZodObject<{
@@ -371,6 +424,50 @@ export declare const CompactDailyOutputSchema: z.ZodObject<{
         timestamp: z.ZodOptional<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>>;
+    strategySummary: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        profile: z.ZodObject<{
+            style: z.ZodEnum<{
+                maintainer: "maintainer";
+                explorer: "explorer";
+                specialist: "specialist";
+                generalist: "generalist";
+            }>;
+            totalPRs: z.ZodNumber;
+            mergedCount: z.ZodNumber;
+            mergeRate: z.ZodNumber;
+            primaryLanguages: z.ZodArray<z.ZodString>;
+            favoriteRepos: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+        capacity: z.ZodObject<{
+            openPRCount: z.ZodNumber;
+            dormantPRCount: z.ZodNumber;
+            dormantRepoCount: z.ZodNumber;
+            overExtended: z.ZodBoolean;
+            suggestedAction: z.ZodUnion<readonly [z.ZodLiteral<"open_more">, z.ZodLiteral<"follow_up_dormant">, z.ZodLiteral<"wait_on_maintainers">, z.ZodNull]>;
+        }, z.core.$loose>;
+        patterns: z.ZodObject<{
+            prTypeDistribution: z.ZodObject<{
+                docs: z.ZodNumber;
+                fixes: z.ZodNumber;
+                features: z.ZodNumber;
+                refactors: z.ZodNumber;
+                tests: z.ZodNumber;
+                other: z.ZodNumber;
+            }, z.core.$loose>;
+            trajectoryDirection: z.ZodEnum<{
+                growing: "growing";
+                steady: "steady";
+                declining: "declining";
+            }>;
+            averagePRSize: z.ZodNumber;
+        }, z.core.$loose>;
+        recommendations: z.ZodObject<{
+            languages: z.ZodArray<z.ZodString>;
+            repos: z.ZodArray<z.ZodString>;
+            issueTypes: z.ZodArray<z.ZodString>;
+            avoidPatterns: z.ZodArray<z.ZodString>;
+        }, z.core.$loose>;
+    }, z.core.$loose>>>;
 }, z.core.$strip>;
 export declare const SearchOutputSchema: z.ZodObject<{
     candidates: z.ZodArray<z.ZodObject<{
@@ -454,6 +551,14 @@ export declare const ListMoveTierOutputSchema: z.ZodObject<{
     count: z.ZodNumber;
     reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const ListMarkDoneOutputSchema: z.ZodObject<{
+    marked: z.ZodBoolean;
+    filePath: z.ZodString;
+    url: z.ZodString;
+    repoHeadingStruck: z.ZodBoolean;
+    remainingUnderRepo: z.ZodNumber;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const PostOutputSchema: z.ZodObject<{
     commentUrl: z.ZodString;
     url: z.ZodString;
@@ -534,6 +639,134 @@ export declare const PRTemplateOutputSchema: z.ZodObject<{
     source: z.ZodNullable<z.ZodString>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const RepoVetOutputSchema: z.ZodObject<{
+    repoSlug: z.ZodString;
+    fetchedAt: z.ZodString;
+    repoMeta: z.ZodObject<{
+        stars: z.ZodNumber;
+        forks: z.ZodNumber;
+        openIssues: z.ZodNumber;
+        watchers: z.ZodNumber;
+        isArchived: z.ZodBoolean;
+        lastPushed: z.ZodString;
+        createdAt: z.ZodString;
+    }, z.core.$strip>;
+    prMergeTime: z.ZodObject<{
+        avgDays: z.ZodNullable<z.ZodNumber>;
+        medianDays: z.ZodNullable<z.ZodNumber>;
+        sampleSize: z.ZodNumber;
+        sourceWindowDays: z.ZodLiteral<90>;
+    }, z.core.$strip>;
+    mergeRate: z.ZodObject<{
+        merged: z.ZodNumber;
+        opened: z.ZodNumber;
+        percent: z.ZodNullable<z.ZodNumber>;
+        windowDays: z.ZodLiteral<90>;
+    }, z.core.$strip>;
+    maintainerActivity: z.ZodObject<{
+        lastCommitISO: z.ZodNullable<z.ZodString>;
+        contributorsLast90d: z.ZodNumber;
+        lastReleaseISO: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    communityHealth: z.ZodObject<{
+        contributing: z.ZodBoolean;
+        issueTemplates: z.ZodBoolean;
+        prTemplate: z.ZodBoolean;
+        codeOfConduct: z.ZodBoolean;
+        incomplete: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    rubricScore: z.ZodNumber;
+    rubricVerdict: z.ZodEnum<{
+        recommended: "recommended";
+        proceed_with_caution: "proceed_with_caution";
+        avoid: "avoid";
+    }>;
+}, z.core.$strip>;
+/**
+ * The CLI wrapper renames the core function's `repo` metadata object to
+ * `repoMeta` so the top-level slug doesn't collide with it. The TS type
+ * is derived from the Zod schema so any drift between schema and type
+ * fails at compile time.
+ */
+export type RepoVetOutput = z.infer<typeof RepoVetOutputSchema>;
+export declare const ComplianceScoreOutputSchema: z.ZodObject<{
+    pr: z.ZodObject<{
+        repo: z.ZodString;
+        number: z.ZodNumber;
+        title: z.ZodString;
+        url: z.ZodString;
+    }, z.core.$strip>;
+    score: z.ZodNumber;
+    rating: z.ZodEnum<{
+        ready: "ready";
+        minor: "minor";
+        fix_first: "fix_first";
+        significant_work: "significant_work";
+    }>;
+    emoji: z.ZodEnum<{
+        "\uD83C\uDF1F": "🌟";
+        "\u2705": "✅";
+        "\u26A0\uFE0F": "⚠️";
+        "\u274C": "❌";
+    }>;
+    checks: z.ZodObject<{
+        issueReference: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+        description: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+        focusedChanges: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+        tests: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+        title: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+        branch: z.ZodObject<{
+            status: z.ZodEnum<{
+                fail: "fail";
+                pass: "pass";
+                warn: "warn";
+            }>;
+            weight: z.ZodNumber;
+            detail: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ComplianceScoreOutput = z.infer<typeof ComplianceScoreOutputSchema>;
 export declare const ParseIssueListOutputSchema: z.ZodObject<{
     available: z.ZodArray<z.ZodObject<{
         repo: z.ZodString;
@@ -696,6 +929,25 @@ export interface StartupOutput {
      * a structured signal to surface or recover from the failure.
      */
     dashboardError?: string;
+    /**
+     * Status of the dashboard SPA build that ran (or didn't) before this
+     * startup invocation (#1293). Populated by the workflow shell via
+     * `OSS_DASHBOARD_BUILD_STATUS`; absent when the CLI is invoked outside
+     * the plugin workflow:
+     * - `'fresh'` — built artifact was up-to-date, no rebuild attempted.
+     * - `'rebuilt'` — rebuild ran and succeeded.
+     * - `'failed'` — rebuild ran and failed; `dashboardUrl` may serve stale
+     *    or missing assets until the build is fixed.
+     * - `'missing-pnpm'` — rebuild was needed but pnpm (required for the
+     *    workspace dependency) was unavailable.
+     */
+    dashboardBuildStatus?: 'fresh' | 'rebuilt' | 'failed' | 'missing-pnpm';
+    /**
+     * Last few lines of the dashboard build log when `dashboardBuildStatus`
+     * is `'failed'` or `'missing-pnpm'`. Surfaced by the workflow as a
+     * one-line warning so the user sees what broke without leaving `/oss`.
+     */
+    dashboardBuildErrorTail?: string;
     issueList?: IssueListInfo;
 }
 /**

package/dist/formatters/json.js

@@ -30,6 +30,7 @@ export function toCompactDailyOutput(output) {
         commentedIssues: output.commentedIssues,
         failureCount: output.failures.length,
         warnings: output.warnings,
+        strategySummary: output.strategySummary,
     };
 }
 /**
@@ -198,6 +199,65 @@ const CompactRepoGroupSchema = z.object({
 });
 // DailyWarning schemas were hoisted above StatusOutputSchema (#1193) so the
 // status output can reference them without `z.lazy()`.
+// Mirrors {@link StrategyResult} in core/strategy.ts. Kept passthrough on the
+// inner objects so additive shape changes there don't break Zod validation
+// before the schema catches up — drift on required keys still fails.
+const StrategyResultSchema = z
+    .object({
+    profile: z
+        .object({
+        style: z.enum(['maintainer', 'explorer', 'specialist', 'generalist']),
+        totalPRs: z.number().int().nonnegative(),
+        mergedCount: z.number().int().nonnegative(),
+        mergeRate: z.number(),
+        primaryLanguages: z.array(z.string()),
+        favoriteRepos: z.array(z.string()),
+    })
+        .passthrough(),
+    capacity: z
+        .object({
+        openPRCount: z.number().int().nonnegative(),
+        dormantPRCount: z.number().int().nonnegative(),
+        dormantRepoCount: z.number().int().nonnegative(),
+        overExtended: z.boolean(),
+        suggestedAction: z.union([
+            z.literal('open_more'),
+            z.literal('follow_up_dormant'),
+            z.literal('wait_on_maintainers'),
+            z.null(),
+        ]),
+    })
+        .passthrough(),
+    patterns: z
+        .object({
+        // Closed set on the six required PR-type buckets — drift on any
+        // of these breaks the snapshot rendering. `.passthrough()` allows
+        // additive growth (e.g., a future 'security' bucket) without a
+        // schema bump, but a typo on `features` → `feauters` fails here.
+        prTypeDistribution: z
+            .object({
+            docs: z.number(),
+            fixes: z.number(),
+            features: z.number(),
+            refactors: z.number(),
+            tests: z.number(),
+            other: z.number(),
+        })
+            .passthrough(),
+        trajectoryDirection: z.enum(['growing', 'steady', 'declining']),
+        averagePRSize: z.number(),
+    })
+        .passthrough(),
+    recommendations: z
+        .object({
+        languages: z.array(z.string()),
+        repos: z.array(z.string()),
+        issueTypes: z.array(z.string()),
+        avoidPatterns: z.array(z.string()),
+    })
+        .passthrough(),
+})
+    .passthrough();
 export const DailyOutputSchema = z.object({
     digest: DailyDigestCompactSchema,
     capacity: CapacityAssessmentSchema,
@@ -209,6 +269,7 @@ export const DailyOutputSchema = z.object({
     repoGroups: z.array(CompactRepoGroupSchema),
     failures: z.array(PRCheckFailurePassthroughSchema),
     warnings: z.array(DailyWarningSchema),
+    strategySummary: StrategyResultSchema.nullable().optional(),
 });
 export const CompactDailyOutputSchema = z.object({
     digest: DailyDigestCompactSchema,
@@ -219,6 +280,7 @@ export const CompactDailyOutputSchema = z.object({
     commentedIssues: z.array(CommentedIssuePassthroughSchema),
     failureCount: z.number().int().nonnegative(),
     warnings: z.array(DailyWarningSchema),
+    strategySummary: StrategyResultSchema.nullable().optional(),
 });
 // ── Search output schema (#1147) ─────────────────────────────────────
 const SearchPrioritySchema = z.enum(['merged_pr', 'preferred_org', 'starred', 'normal']);
@@ -287,6 +349,18 @@ export const ListMoveTierOutputSchema = z.object({
     count: z.number().int().nonnegative(),
     reason: z.string().optional(),
 });
+// list-mark-done (#1299): mirrors {@link MarkDoneOutput} from the command
+// module. Strict shape — additional keys must be added here AND in the
+// command output, otherwise the validator's `parse()` rejects the response
+// before it reaches consumers.
+export const ListMarkDoneOutputSchema = z.object({
+    marked: z.boolean(),
+    filePath: z.string(),
+    url: z.string(),
+    repoHeadingStruck: z.boolean(),
+    remainingUnderRepo: z.number().int().nonnegative(),
+    reason: z.string().optional(),
+});
 // ── #1155: Zod coverage for remaining CLI commands ───────────────────
 export const PostOutputSchema = z.object({
     commentUrl: z.string(),
@@ -376,6 +450,85 @@ export const PRTemplateOutputSchema = z.object({
     source: z.string().nullable(),
     error: z.string().optional(),
 });
+/**
+ * Output of the `repo-vet` CLI command (#1271, follow-up to #1242).
+ *
+ * Validates the full nested shape so a refactor that drops or
+ * mis-types one of these fields trips `outputJsonValidated` rather
+ * than silently shipping a broken envelope (#1245 contract pattern,
+ * matching `ComplianceScoreOutputSchema` below).
+ */
+const RepoVetMetaSchema = z.object({
+    stars: z.number(),
+    forks: z.number(),
+    openIssues: z.number(),
+    watchers: z.number(),
+    isArchived: z.boolean(),
+    lastPushed: z.string(),
+    createdAt: z.string(),
+});
+export const RepoVetOutputSchema = z.object({
+    repoSlug: z.string(),
+    fetchedAt: z.string(),
+    repoMeta: RepoVetMetaSchema,
+    prMergeTime: z.object({
+        avgDays: z.number().nullable(),
+        medianDays: z.number().nullable(),
+        sampleSize: z.number().int().nonnegative(),
+        sourceWindowDays: z.literal(90),
+    }),
+    mergeRate: z.object({
+        merged: z.number().int().nonnegative(),
+        opened: z.number().int().nonnegative(),
+        percent: z.number().nullable(),
+        windowDays: z.literal(90),
+    }),
+    maintainerActivity: z.object({
+        lastCommitISO: z.string().nullable(),
+        contributorsLast90d: z.number().int().nonnegative(),
+        lastReleaseISO: z.string().nullable(),
+    }),
+    communityHealth: z.object({
+        contributing: z.boolean(),
+        issueTemplates: z.boolean(),
+        prTemplate: z.boolean(),
+        codeOfConduct: z.boolean(),
+        /**
+         * True when at least one community-health probe failed for a non-404
+         * reason (auth, rate-limit, 5xx). The boolean flags above stay
+         * `false` for unprobed paths in that case, so consumers should treat
+         * the false flags as "could not determine" rather than "confirmed
+         * absent" when this is set.
+         */
+        incomplete: z.boolean().optional(),
+    }),
+    rubricScore: z.number(),
+    rubricVerdict: z.enum(['recommended', 'proceed_with_caution', 'avoid']),
+});
+const ComplianceCheckSchema = z.object({
+    status: z.enum(['pass', 'warn', 'fail']),
+    weight: z.number(),
+    detail: z.string(),
+});
+export const ComplianceScoreOutputSchema = z.object({
+    pr: z.object({
+        repo: z.string(),
+        number: z.number().int().nonnegative(),
+        title: z.string(),
+        url: z.string(),
+    }),
+    score: z.number().int().min(0).max(100),
+    rating: z.enum(['ready', 'minor', 'fix_first', 'significant_work']),
+    emoji: z.enum(['🌟', '✅', '⚠️', '❌']),
+    checks: z.object({
+        issueReference: ComplianceCheckSchema,
+        description: ComplianceCheckSchema,
+        focusedChanges: ComplianceCheckSchema,
+        tests: ComplianceCheckSchema,
+        title: ComplianceCheckSchema,
+        branch: ComplianceCheckSchema,
+    }),
+});
 const ParsedIssueItemSchema = z.object({
     repo: z.string(),
     number: z.number(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oss-autopilot/core",
-  "version": "3.4.1",
+  "version": "3.6.0",
   "description": "CLI and core library for managing open source contributions",
   "type": "module",
   "bin": {