@perrylink/dsh-github 0.4.0 → 0.6.0

package/lib/approval-gate.js

@@ -1,9 +1,12 @@
 const ACTION_BY_TOOL = {
     pr_create: 'pr.create',
+    pr_merge: 'pr.merge',
+    pr_update: 'pr.update',
     review_post: 'review.post',
     issue_open: 'issue.create',
     issue_comment: 'issue.comment',
     issue_close: 'issue.close',
+    ci_run: 'ci.run',
 };
 /** Tools the gate intercepts; everything else delegates via next(). */
 const WRITE_TOOLS = new Set(Object.keys(ACTION_BY_TOOL));
@@ -27,13 +30,35 @@ function askReason(toolName, args, state) {
     if (toolName === 'pr_create') {
         return `create GitHub pull request ${titledPreview(args)}`;
     }
+    if (toolName === 'pr_merge') {
+        const target = typeof args.pr === 'string' ? ` ${args.pr}` : '';
+        const method = typeof args.mergeMethod === 'string' ? args.mergeMethod : 'merge';
+        const deleteBranch = args.deleteBranch === true ? ' (delete head branch after merge)' : '';
+        return `merge GitHub pull request${target} via ${method}${deleteBranch}`;
+    }
+    if (toolName === 'pr_update') {
+        const target = typeof args.pr === 'string' ? ` ${args.pr}` : '';
+        const edits = [];
+        if (typeof args.title === 'string')
+            edits.push(`title "${firstLine(args.title, 60)}"`);
+        if (typeof args.state === 'string')
+            edits.push(`state ${args.state}`);
+        if (typeof args.base === 'string')
+            edits.push(`base ${args.base}`);
+        if (typeof args.body === 'string' && args.body.trim().length > 0)
+            edits.push(`body ${args.body.trim().length} chars`);
+        return `update GitHub pull request${target}${edits.length > 0 ? ` (${edits.join('; ')})` : ''}`;
+    }
     if (toolName === 'review_post') {
         if (typeof args.jobId !== 'string')
             return 'post GitHub review comments';
         const record = state.records.get(args.jobId);
+        const isModelReview = record?.report !== null && record?.report !== undefined && record.report.findings.length === 0 && record.report.summary.startsWith('model review');
         const target = record === undefined || record.report === null
             ? `job ${args.jobId}`
-            : `PR #${record.pr} (${record.report.findings.length} finding(s))`;
+            : isModelReview
+                ? `PR #${record.pr} (model review)`
+                : `PR #${record.pr} (${record.report.findings.length} finding(s))`;
         const mode = args.mode === 'inline' ? 'inline' : 'summary';
         const override = typeof args.body === 'string' && args.body.trim().length > 0
             ? `; body override: ${firstLine(args.body.trim(), 80)}`
@@ -52,11 +77,21 @@ function askReason(toolName, args, state) {
         const number = typeof args.issueNumber === 'number' ? ` #${args.issueNumber}` : '';
         return `close GitHub issue${number}`;
     }
+    if (toolName === 'ci_run') {
+        const target = typeof args.pr === 'string' ? ` ${args.pr}` : '';
+        const task = typeof args.task === 'string' ? args.task : 'review';
+        return `run CI ${task} for GitHub pull request${target} (posts review comments and a status check)`;
+    }
     return 'perform a GitHub write action';
 }
 /**
  * Register the approval gate. Registration is an effect: disposing the plugin
  * fiber removes the listener.
+ *
+ * Unattended CI runs (`DSH_GITHUB_CI_DRIVER=1`) auto-allow exactly the
+ * actions listed in `ci.autoApprove` — the composite action composes that
+ * allowlist for the write the pipeline needs. Interactive sessions always
+ * ask, and actions missing from `allowedActions` stay denied everywhere.
  * @param ctx - plugin context; the listener lives on the shared tools pipeline.
  * @param state - plugin state used to enrich approval reasons.
  * @returns the effect disposer.
@@ -69,6 +104,9 @@ export function registerApprovalGate(ctx, state) {
         if (action === undefined || !state.config.allowedActions.includes(action)) {
             return { kind: 'deny', reason: `dsh-github: action "${action ?? exec.name}" is not in allowedActions` };
         }
+        if (state.isCiDriver && state.config.ci.autoApprove.includes(action)) {
+            return { kind: 'allow' };
+        }
         return { kind: 'ask', reason: `dsh-github: ${askReason(exec.name, argumentsAsRecord(exec), state)}` };
     });
 }

package/lib/approval-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-gate.js","sourceRoot":"","sources":["../src/approval-gate.ts"],"names":[],"mappings":"AAmBA,MAAM,cAAc,GAAiC;IACnD,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,cAAc;IAC1B,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;CAC3B,CAAA;AAED,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;AAExD,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,IAAmB;IAC5C,OAAO,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAoC,CAAC,CAAC,CAAC,EAAE,CAAA;AACvH,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAA;IACxE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,SAAS,CAAA;AACpF,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,KAAa,EAAE,GAAW;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5D,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,QAAgB,EAAE,IAA6B,EAAE,KAAkB;IACpF,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,8BAA8B,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,6BAA6B,CAAA;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAC3D,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE;YACrB,CAAC,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAA;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1D,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3E,CAAC,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,mCAAmC,MAAM,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAA;IACzE,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,uBAAuB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;IACrD,CAAC;IACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,OAAO,0BAA0B,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,SAAS,EAAE,CAAA;IACrG,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,OAAO,qBAAqB,MAAM,EAAE,CAAA;IACtC,CAAC;IACD,OAAO,+BAA+B,CAAA;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,KAAkB;IACnE,OAAO,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAA4B,EAAE;QAChF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,MAAM,IAAI,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAAA;QACzG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAA;IACvG,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"approval-gate.js","sourceRoot":"","sources":["../src/approval-gate.ts"],"names":[],"mappings":"AAmBA,MAAM,cAAc,GAAiC;IACnD,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,cAAc;IAC1B,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;AAExD,+EAA+E;AAC/E,SAAS,iBAAiB,CAAC,IAAmB;IAC5C,OAAO,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAoC,CAAC,CAAC,CAAC,EAAE,CAAA;AACvH,CAAC;AAED,gEAAgE;AAChE,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAA;IACxE,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAClE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,MAAM,SAAS,CAAA;AACpF,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,KAAa,EAAE,GAAW;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5D,CAAC;AAED,uEAAuE;AACvE,SAAS,SAAS,CAAC,QAAgB,EAAE,IAA6B,EAAE,KAAkB;IACpF,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,8BAA8B,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAA;QAChF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC1F,OAAO,4BAA4B,MAAM,QAAQ,MAAM,GAAG,YAAY,EAAE,CAAA;IAC1E,CAAC;IACD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;QACtF,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACrE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,CAAA;QACrH,OAAO,6BAA6B,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,6BAA6B,CAAA;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,aAAa,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAA;QACxK,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAC3D,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE;YACrB,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,OAAO,MAAM,CAAC,EAAE,iBAAiB;gBACnC,CAAC,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAA;QACtE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1D,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3E,CAAC,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE;YACvD,CAAC,CAAC,EAAE,CAAA;QACN,OAAO,mCAAmC,MAAM,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAA;IACzE,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,uBAAuB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAA;IACrD,CAAC;IACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClE,OAAO,0BAA0B,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,SAAS,EAAE,CAAA;IACrG,CAAC;IACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAClF,OAAO,qBAAqB,MAAM,EAAE,CAAA;IACtC,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC/D,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAA;QACjE,OAAO,UAAU,IAAI,2BAA2B,MAAM,6CAA6C,CAAA;IACrG,CAAC;IACD,OAAO,+BAA+B,CAAA;AACxC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,KAAkB;IACnE,OAAO,GAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAA4B,EAAE;QAChF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,EAAE,CAAA;QAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,MAAM,IAAI,IAAI,CAAC,IAAI,4BAA4B,EAAE,CAAA;QACzG,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC1B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAA;IACvG,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/lib/ci/bot.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The PR review bot: a poll-driven scanner that reviews open pull requests
+ * with the shared CI pipeline and posts idempotent inline comments plus the
+ * status-check gate.
+ *
+ * Polling is the transport: a webhook endpoint would need a public listener
+ * (out of scope for a plugin), so the bot re-scans open PRs on
+ * `ci.pollIntervalMs` and treats every pass as event delivery — the pipeline's
+ * check-run + review-marker idempotency makes repeat deliveries harmless.
+ * `/ci scan` delivers the same "event" on demand. Concurrency inside one scan
+ * is capped by `ci.maxConcurrent`.
+ *
+ * Bot writes are plugin-internal automation, not model tool calls: they do
+ * not traverse the approval gate. They are switched by `ci.enabled` and
+ * scoped to exactly two GitHub surfaces — review comments and check runs —
+ * with the minimal-permission token resolved per operation.
+ * @module dsh-github/ci/bot
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { CommandsService } from '../types.ts';
+import type { GithubState } from '../state.ts';
+/** Live bot status surfaced by `/ci status`. */
+export interface CiBotStatus {
+    polling: boolean;
+    scanning: boolean;
+    intervalMs: number;
+    lastScanAt: number | null;
+    lastScanPrs: number;
+    lastScanNeedsChanges: number;
+    lastScanErrors: number;
+    lastScanSummary: string;
+}
+/** Shared bot state; one instance per plugin fiber. */
+export interface CiBot {
+    status(): CiBotStatus;
+    scan(signal?: AbortSignal): Promise<string>;
+    setPolling(enabled: boolean): void;
+    dispose(): void;
+}
+/**
+ * Create the polling bot and register the `/ci` command family. Everything
+ * here is an effect of the calling fiber — disposing the plugin stops the
+ * interval and removes the commands.
+ * @param ctx - plugin context (owns the effect lifetime).
+ * @param commands - the host command registry.
+ * @param state - shared plugin state.
+ * @returns the bot handle (also returned by the effect disposer path).
+ */
+export declare function registerCiBot(ctx: Context, commands: CommandsService, state: GithubState): () => void;
+//# sourceMappingURL=bot.d.ts.map

package/lib/ci/bot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../../src/ci/bot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAoC,eAAe,EAAE,MAAM,aAAa,CAAA;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAG9C,gDAAgD;AAChD,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,MAAM,CAAA;CACxB;AAOD,uDAAuD;AACvD,MAAM,WAAW,KAAK;IACpB,MAAM,IAAI,WAAW,CAAA;IACrB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,OAAO,IAAI,IAAI,CAAA;CAChB;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,GAAG,MAAM,IAAI,CAsJrG"}

package/lib/ci/bot.js

@@ -0,0 +1,168 @@
+import { runCiPipeline } from "./pipeline.js";
+const SCAN_CAP = 50;
+/**
+ * Create the polling bot and register the `/ci` command family. Everything
+ * here is an effect of the calling fiber — disposing the plugin stops the
+ * interval and removes the commands.
+ * @param ctx - plugin context (owns the effect lifetime).
+ * @param commands - the host command registry.
+ * @param state - shared plugin state.
+ * @returns the bot handle (also returned by the effect disposer path).
+ */
+export function registerCiBot(ctx, commands, state) {
+    let polling = state.config.ci.pollIntervalMs > 0;
+    let scanning = false;
+    let lastScanAt = null;
+    let lastScanPrs = 0;
+    let lastScanNeedsChanges = 0;
+    let lastScanErrors = 0;
+    let lastScanSummary = 'no scan yet';
+    const status = () => ({
+        polling,
+        scanning,
+        intervalMs: state.config.ci.pollIntervalMs,
+        lastScanAt,
+        lastScanPrs,
+        lastScanNeedsChanges,
+        lastScanErrors,
+        lastScanSummary,
+    });
+    const setPolling = (enabled) => {
+        polling = enabled;
+    };
+    /** One pass over the open PRs: pipeline per PR under the concurrency cap. */
+    const scan = async (signal) => {
+        if (scanning)
+            return 'a scan is already running';
+        scanning = true;
+        const started = Date.now();
+        let needsChanges = 0;
+        let errors = 0;
+        let reviewed = 0;
+        try {
+            const token = await state.resolveToken(signal);
+            if (!token.ok) {
+                lastScanErrors += 1;
+                lastScanSummary = `scan failed: ${token.error.message}`;
+                ctx.logger.warn(`dsh-github ci bot: ${token.error.message}`);
+                return lastScanSummary;
+            }
+            const client = state.client(token.token.value);
+            const repo = await state.resolveRepo(undefined, signal);
+            if (!repo.ok) {
+                lastScanErrors += 1;
+                lastScanSummary = `scan failed: ${repo.message}`;
+                ctx.logger.warn(`dsh-github ci bot: ${repo.message}`);
+                return lastScanSummary;
+            }
+            const open = await client.requestJson('GET', `/repos/${repo.repo}/pulls?state=open&per_page=${SCAN_CAP}`, { signal });
+            const prs = open.data.filter(item => item.number !== undefined).slice(0, SCAN_CAP);
+            const cap = state.config.ci.maxConcurrent;
+            const queue = [...prs];
+            const workers = Array.from({ length: Math.min(cap, queue.length) }, async () => {
+                for (;;) {
+                    const item = queue.shift();
+                    if (item === undefined)
+                        return;
+                    try {
+                        const outcome = await runCiPipeline(state, { repo: repo.repo, pr: item.number, task: 'review', signal });
+                        if (outcome.status === 'error') {
+                            errors += 1;
+                            ctx.logger.warn(`dsh-github ci bot: PR #${item.number} review failed: ${outcome.message}`);
+                        }
+                        else {
+                            reviewed += 1;
+                            if (outcome.verdict === 'needs-changes')
+                                needsChanges += 1;
+                            ctx.logger.info(`dsh-github ci bot: PR #${item.number} → ${outcome.verdict}${outcome.alreadyReviewed ? ' (already reviewed)' : ''}`);
+                        }
+                    }
+                    catch (error) {
+                        errors += 1;
+                        ctx.logger.warn(`dsh-github ci bot: PR #${item.number} review threw: ${error instanceof Error ? error.message : String(error)}`);
+                    }
+                }
+            });
+            await Promise.all(workers);
+            lastScanAt = Date.now();
+            lastScanPrs = reviewed;
+            lastScanNeedsChanges = needsChanges;
+            lastScanErrors = errors;
+            lastScanSummary = `scanned ${prs.length} open PR(s) in ${repo.repo}: ${reviewed} reviewed, ${needsChanges} needs-changes, ${errors} error(s) (${Date.now() - started}ms)`;
+            return lastScanSummary;
+        }
+        finally {
+            scanning = false;
+        }
+    };
+    const timer = state.config.ci.pollIntervalMs > 0
+        ? setInterval(() => {
+            if (polling)
+                void scan().catch(() => { });
+        }, state.config.ci.pollIntervalMs)
+        : undefined;
+    timer?.unref?.();
+    const register = (name, description, hint, handler) => commands.register({ name, description, input: { hint }, handler });
+    const disposers = [
+        register('ci', 'CI review bot: scan PRs, publish reviews and the status-check gate', 'scan | status | start | stop | run <pr>', async (invocation) => {
+            const [sub, ...rest] = invocation.rawInput.trim().split(/\s+/);
+            if (sub === undefined || sub.length === 0) {
+                const current = status();
+                return { kind: 'success', text: `CI bot: polling ${current.polling ? `on (every ${current.intervalMs}ms)` : 'off'}\n${current.lastScanSummary}\nUsage: /ci scan | status | start | stop | run <pr>` };
+            }
+            if (sub === 'scan') {
+                const result = await scan(invocation.signal);
+                return { kind: 'success', text: result };
+            }
+            if (sub === 'status') {
+                const current = status();
+                return {
+                    kind: 'success',
+                    text: `polling: ${current.polling ? `on (every ${current.intervalMs}ms)` : 'off'}\n`
+                        + `last scan: ${current.lastScanAt === null ? 'never' : new Date(current.lastScanAt).toISOString()}\n`
+                        + `${current.lastScanSummary}`,
+                };
+            }
+            if (sub === 'start') {
+                if (state.config.ci.pollIntervalMs === 0) {
+                    return { kind: 'error', text: 'ci.pollIntervalMs is 0: set a positive interval in cordis.yml to enable polling (or keep using /ci scan on demand).' };
+                }
+                setPolling(true);
+                return { kind: 'success', text: `CI bot polling enabled (every ${state.config.ci.pollIntervalMs}ms). Set ci.pollIntervalMs to 0 to disable at boot.` };
+            }
+            if (sub === 'stop') {
+                setPolling(false);
+                return { kind: 'success', text: 'CI bot polling disabled; /ci scan still runs on demand.' };
+            }
+            if (sub === 'run') {
+                const target = rest.join(' ').trim();
+                if (target.length === 0)
+                    return { kind: 'error', text: 'Usage: /ci run <pr> (number, #number, owner/repo#number, or pull URL)' };
+                const ref = state.parsePrRef(target);
+                if (ref === null)
+                    return { kind: 'error', text: `"${target}" is not a PR reference. Use a number, "#number", "owner/repo#number", or a pull URL.` };
+                const repoResult = ref.repo !== undefined ? { ok: true, repo: ref.repo } : await state.resolveRepo(undefined, invocation.signal);
+                if (!repoResult.ok)
+                    return { kind: 'error', text: `${repoResult.message}. ${repoResult.guidance}` };
+                const outcome = await runCiPipeline(state, { repo: repoResult.repo, pr: ref.number, task: 'review', signal: invocation.signal });
+                if (outcome.status === 'error')
+                    return { kind: 'error', text: `${outcome.message}${outcome.guidance !== undefined ? `\n${outcome.guidance}` : ''}` };
+                return {
+                    kind: 'success',
+                    text: `PR #${outcome.pr} (${outcome.repo}): verdict ${outcome.verdict}${outcome.alreadyReviewed ? ' (already reviewed at this head commit)' : ''}\n${outcome.summary}`
+                        + `${outcome.checkRun !== undefined ? `\ncheck: ${outcome.checkRun.url} (${outcome.checkRun.conclusion})` : ''}`
+                        + `${outcome.review !== undefined && outcome.review.url.length > 0 ? `\nreview: ${outcome.review.url}` : ''}`
+                        + `${outcome.files !== undefined ? `\nreports: ${outcome.files.json} · ${outcome.files.markdown}` : ''}`,
+                };
+            }
+            return { kind: 'error', text: `unknown /ci subcommand "${sub}". Usage: /ci scan | status | start | stop | run <pr>` };
+        }),
+    ];
+    return () => {
+        if (timer !== undefined)
+            clearInterval(timer);
+        for (const dispose of disposers)
+            dispose();
+    };
+}
+//# sourceMappingURL=bot.js.map

package/lib/ci/bot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot.js","sourceRoot":"","sources":["../../src/ci/bot.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AA2B7C,MAAM,QAAQ,GAAG,EAAE,CAAA;AAEnB;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,QAAyB,EAAE,KAAkB;IACvF,IAAI,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,CAAC,CAAA;IAChD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,UAAU,GAAkB,IAAI,CAAA;IACpC,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,oBAAoB,GAAG,CAAC,CAAA;IAC5B,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,eAAe,GAAG,aAAa,CAAA;IAEnC,MAAM,MAAM,GAAG,GAAgB,EAAE,CAAC,CAAC;QACjC,OAAO;QACP,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc;QAC1C,UAAU;QACV,WAAW;QACX,oBAAoB;QACpB,cAAc;QACd,eAAe;KAChB,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAQ,EAAE;QAC5C,OAAO,GAAG,OAAO,CAAA;IACnB,CAAC,CAAA;IAED,6EAA6E;IAC7E,MAAM,IAAI,GAAG,KAAK,EAAE,MAAoB,EAAmB,EAAE;QAC3D,IAAI,QAAQ;YAAE,OAAO,2BAA2B,CAAA;QAChD,QAAQ,GAAG,IAAI,CAAA;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1B,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC9C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,cAAc,IAAI,CAAC,CAAA;gBACnB,eAAe,GAAG,gBAAgB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAA;gBACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC5D,OAAO,eAAe,CAAA;YACxB,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,cAAc,IAAI,CAAC,CAAA;gBACnB,eAAe,GAAG,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAA;gBAChD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;gBACrD,OAAO,eAAe,CAAA;YACxB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAoB,KAAK,EAAE,UAAU,IAAI,CAAC,IAAI,8BAA8B,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACxI,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;YAClF,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAA;YACzC,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;YACtB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;gBAC7E,SAAS,CAAC;oBACR,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;oBAC1B,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAM;oBAC9B,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;wBAClH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;4BAC/B,MAAM,IAAI,CAAC,CAAA;4BACX,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,MAAM,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;wBAC5F,CAAC;6BAAM,CAAC;4BACN,QAAQ,IAAI,CAAC,CAAA;4BACb,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe;gCAAE,YAAY,IAAI,CAAC,CAAA;4BAC1D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,MAAM,MAAM,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;wBACtI,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,IAAI,CAAC,CAAA;wBACX,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,MAAM,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;oBAClI,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;YACF,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YAC1B,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACvB,WAAW,GAAG,QAAQ,CAAA;YACtB,oBAAoB,GAAG,YAAY,CAAA;YACnC,cAAc,GAAG,MAAM,CAAA;YACvB,eAAe,GAAG,WAAW,GAAG,CAAC,MAAM,kBAAkB,IAAI,CAAC,IAAI,KAAK,QAAQ,cAAc,YAAY,mBAAmB,MAAM,cAAc,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,KAAK,CAAA;YACzK,OAAO,eAAe,CAAA;QACxB,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,CAAC;QAC9C,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE;YACf,IAAI,OAAO;gBAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC1C,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC;QACpC,CAAC,CAAC,SAAS,CAAA;IACb,KAAK,EAAE,KAAK,EAAE,EAAE,CAAA;IAEhB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,IAAY,EAAE,OAAkF,EAAc,EAAE,CACnK,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;IAEpE,MAAM,SAAS,GAAG;QAChB,QAAQ,CAAC,IAAI,EAAE,oEAAoE,EAAE,yCAAyC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACnJ,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YAC9D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAA;gBACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,eAAe,sDAAsD,EAAE,CAAA;YACvM,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;gBAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;YAC1C,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAA;gBACxB,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,YAAY,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;0BAChF,cAAc,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,IAAI;0BACpG,GAAG,OAAO,CAAC,eAAe,EAAE;iBACjC,CAAA;YACH,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;oBACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,qHAAqH,EAAE,CAAA;gBACvJ,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,CAAA;gBAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iCAAiC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,qDAAqD,EAAE,CAAA;YACxJ,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,UAAU,CAAC,KAAK,CAAC,CAAA;gBACjB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,yDAAyD,EAAE,CAAA;YAC7F,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,uEAAuE,EAAE,CAAA;gBAChI,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;gBACpC,IAAI,GAAG,KAAK,IAAI;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,MAAM,uFAAuF,EAAE,CAAA;gBACnJ,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;gBACzI,IAAI,CAAC,UAAU,CAAC,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,OAAO,KAAK,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAA;gBACnG,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;gBAChI,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;oBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAA;gBACpJ,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,OAAO,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,cAAc,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE;0BAClK,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;0BAC9G,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;0BAC3G,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;iBAC3G,CAAA;YACH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,2BAA2B,GAAG,uDAAuD,EAAE,CAAA;QACvH,CAAC,CAAC;KACH,CAAA;IAED,OAAO,GAAG,EAAE;QACV,IAAI,KAAK,KAAK,SAAS;YAAE,aAAa,CAAC,KAAK,CAAC,CAAA;QAC7C,KAAK,MAAM,OAAO,IAAI,SAAS;YAAE,OAAO,EAAE,CAAA;IAC5C,CAAC,CAAA;AACH,CAAC"}

package/lib/ci/pipeline.d.ts

@@ -0,0 +1,84 @@
+import type { Finding } from '../review.ts';
+import { type GithubState, type RateLimitValue } from '../state.ts';
+/** The gate verdict: pass, needs changes, or skipped by the filters. */
+export type CiVerdict = 'pass' | 'needs-changes' | 'skipped';
+/** Tasks the pipeline (and the `ci_run` tool) understands. */
+export type CiTask = 'review' | 'analyze' | 'publish';
+export interface CheckRunValue {
+    id: number;
+    url: string;
+    conclusion: string;
+}
+export interface ReviewPostValue {
+    url: string;
+    inlineComments: number;
+}
+/** Successful pipeline result — the canonical JSON the `ci_run` tool returns. */
+export interface CiRunResult {
+    status: 'ok';
+    repo: string;
+    pr: number;
+    headSha: string;
+    verdict: CiVerdict;
+    engine: 'static' | 'model';
+    findings: Finding[];
+    summary: string;
+    truncated: boolean;
+    /** A previous run for this head commit already published its outcome. */
+    alreadyReviewed: boolean;
+    /** Present when the diff text was requested (analyze task). */
+    diffText?: string;
+    checkRun?: CheckRunValue;
+    review?: ReviewPostValue;
+    files?: {
+        json: string;
+        markdown: string;
+    };
+    rateLimit: RateLimitValue;
+}
+/** Structured failure — token-free by construction. */
+export interface CiRunError {
+    status: 'error';
+    code: string;
+    message: string;
+    guidance?: string;
+    rateLimit?: RateLimitValue;
+}
+export type CiRunOutcome = CiRunResult | CiRunError;
+export interface CiRunOptions {
+    repo: string;
+    pr: number;
+    task: CiTask;
+    /** Diff cap for this run; defaults to the plugin config. */
+    maxDiffChars?: number;
+    /** Review-body override (model-authored, publish task). */
+    body?: string;
+    /** Extra findings authored by the model (publish task); merged with static ones. */
+    findings?: Finding[];
+    /** Post review comments; defaults to `ci.postComments`. */
+    postComments?: boolean;
+    /** Publish the status check; defaults to true for review/publish. */
+    postCheck?: boolean;
+    signal?: AbortSignal;
+}
+/** First line of the review body — the idempotency marker. */
+export declare function reviewMarker(headSha: string): string;
+/** Whether a review body carries our marker for the given head commit. */
+export declare function hasReviewMarker(body: string | undefined, headSha: string): boolean;
+/** Conclude the verdict from the findings under the configured `failOn` policy. */
+export declare function verdictFor(findings: readonly Finding[], failOn: 'error' | 'warning'): CiVerdict;
+/** Markdown report body written next to the JSON result. */
+export declare function formatMarkdownReport(result: CiRunResult, options: {
+    blocking: boolean;
+    checkName: string;
+}): string;
+/**
+ * Run one CI pass over a pull request. Pure in the sense that every GitHub
+ * interaction goes through the per-operation token and the shared client;
+ * callers (bot, tool) own their own concurrency control.
+ * @param state - shared plugin state.
+ * @param options - target repo/PR, task, caps, and overrides.
+ * @returns the structured outcome; failures are token-free error variants.
+ */
+export declare function runCiPipeline(state: GithubState, options: CiRunOptions): Promise<CiRunOutcome>;
+//# sourceMappingURL=pipeline.d.ts.map

package/lib/ci/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/ci/pipeline.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAG3C,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AAEnF,wEAAwE;AACxE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,eAAe,GAAG,SAAS,CAAA;AAE5D,8DAA8D;AAC9D,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;AAErD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,IAAI,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,yEAAyE;IACzE,eAAe,EAAE,OAAO,CAAA;IACxB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,SAAS,EAAE,cAAc,CAAA;CAC1B;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,cAAc,CAAA;CAC3B;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,UAAU,CAAA;AAEnD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;IACpB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAmCD,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAElF;AAQD,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAI/F;AAsBD,4DAA4D;AAC5D,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAsBnH;AA8CD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CA6MpG"}