@pome-sh/cli 0.10.0 → 0.11.0

package/node_modules/@pome-sh/twin-github/dist/src/check-pulls.js

@@ -0,0 +1,102 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// What GitHub's declared checks can assert about a PULL REQUEST (F-1075).
+//
+// Declarations only. The grammar rules they all obey are in `checks.ts`, which
+// assembles them; how the exported tree is read is in `check-state.ts`.
+import { defineCheck, repoRef } from "@pome-sh/sdk/checks";
+import { prNumber, pullRequestState, reviewState } from "./check-params.js";
+import { isMerged, resolvePullRequest } from "./check-state.js";
+export const pullRequestStateCheck = defineCheck({
+    id: "github.pr-state",
+    description: "Reads the pull request's `merged` flag for `merged`/`not merged`, and its `state` column " +
+        "for `open`/`closed`. These are DIFFERENT fields and a PR can be closed without being " +
+        "merged, so the two pairs do not imply each other. Whichever field the sentence turns on " +
+        "must be present: an export missing it is SKIPPED, because defaulting it to false would " +
+        "let `is not merged` pass against a world we cannot see.",
+    template: "Pull request #{pr} in `{repo}` is {state}",
+    params: { pr: prNumber, repo: repoRef, state: pullRequestState },
+    substrate: "final",
+    // Per-arg, and the reason polarity takes the args at all: task 05 asserts
+    // "PR #1 is merged" and "PR #2 is not merged" through this one template.
+    // "open" is the same prohibition as the issue check's.
+    polarity: ({ state }) => (state === "not merged" || state === "open" ? "negative" : "positive"),
+    subject: () => null,
+    // No falsifiable trigger, same shape as issue-state: a closed set with no
+    // guaranteed-false member, and a PR number that only resolves.
+    vacuityMutant: () => null,
+    evaluate({ pr, repo, state }, { final }) {
+        const found = resolvePullRequest(final, repo, pr);
+        if ("missing" in found)
+            return { passed: false, reason: found.missing };
+        const pull = found.found;
+        const onMergeFlag = state === "merged" || state === "not merged";
+        // The field this assertion turns on must be PRESENT. Absent, the safe
+        // default is not `false` — `merged == null` would make "is not merged" pass
+        // against a world we cannot see, which is how a merged impostor PR scores
+        // green. Skip instead, so the criterion leaves the denominator rather than
+        // fabricating a verdict.
+        const turnsOn = onMergeFlag ? pull.merged : pull.state;
+        if (turnsOn == null) {
+            return {
+                passed: false,
+                status: "skipped",
+                reason: `pull request #${pr} has no ${onMergeFlag ? "merged" : "state"} field in state_final (state_incomplete)`,
+            };
+        }
+        // Cite only the field the assertion actually turned on. Printing both
+        // (`state="undefined" merged=false`) presents an absent field as evidence
+        // for a verdict that never read it.
+        if (onMergeFlag) {
+            const merged = isMerged(pull);
+            return {
+                passed: state === "merged" ? merged : !merged,
+                reason: `pull request #${pr}: merged=${merged} (wanted "${state}")`,
+            };
+        }
+        return {
+            passed: pull.state === state,
+            reason: `pull request #${pr}: state="${pull.state}" (wanted "${state}")`,
+        };
+    },
+});
+export const pullRequestReviewExists = defineCheck({
+    id: "github.pr-review-exists",
+    description: "Asserts at least one submitted review on the pull request carries this state. It does " +
+        "not assert who reviewed, how recently, or that no other review disagrees — an APPROVED " +
+        "review alongside a CHANGES_REQUESTED one satisfies both. A pull request whose export " +
+        "carries no reviews section at all is SKIPPED, because absent is not the same as none.",
+    template: "A {review} review exists on pull request #{pr} in `{repo}`",
+    params: { review: reviewState, pr: prNumber, repo: repoRef },
+    substrate: "final",
+    polarity: () => "positive",
+    subject: () => null,
+    // A closed set with no guaranteed-false member, and a PR number that only
+    // resolves. Same reasoning as issue-state.
+    vacuityMutant: () => null,
+    evaluate({ review, pr, repo }, { final }) {
+        const found = resolvePullRequest(final, repo, pr);
+        if ("missing" in found)
+            return { passed: false, reason: found.missing };
+        // Reviews section absent (an older twin snapshot predating review export):
+        // we cannot distinguish "no review" from "not captured", so safe-skip
+        // rather than vacuously failing a correct agent. An empty array is a real
+        // "no reviews" and falls through to failed.
+        if (found.found.reviews == null) {
+            return {
+                passed: false,
+                status: "skipped",
+                reason: `pull request #${pr} has no reviews section in state_final (state_incomplete)`,
+            };
+        }
+        const states = found.found.reviews.map((row) => row.state ?? "");
+        const passed = states.includes(review);
+        return {
+            passed,
+            reason: passed
+                ? `pull request #${pr} has a ${review} review`
+                : `pull request #${pr} reviews are [${states.join(", ")}], missing a ${review} review`,
+        };
+    },
+});
+//# sourceMappingURL=check-pulls.js.map

package/node_modules/@pome-sh/twin-github/dist/src/check-pulls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-pulls.js","sourceRoot":"","sources":["../../src/check-pulls.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,+EAA+E;AAC/E,wEAAwE;AAExE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGhE,MAAM,CAAC,MAAM,qBAAqB,GAAuD,WAAW,CAAC;IACnG,EAAE,EAAE,iBAAiB;IACrB,WAAW,EACT,2FAA2F;QAC3F,uFAAuF;QACvF,0FAA0F;QAC1F,yFAAyF;QACzF,yDAAyD;IAC3D,QAAQ,EAAE,2CAA2C;IACrD,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAChE,SAAS,EAAE,OAAO;IAClB,0EAA0E;IAC1E,yEAAyE;IACzE,uDAAuD;IACvD,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/F,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,0EAA0E;IAC1E,+DAA+D;IAC/D,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE;QACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,MAAM,WAAW,GAAG,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,CAAC;QACjE,sEAAsE;QACtE,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,yBAAyB;QACzB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACvD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,iBAAiB,EAAE,WACzB,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAC3B,0CAA0C;aAC3C,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,0EAA0E;QAC1E,oCAAoC;QACpC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO;gBACL,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC7C,MAAM,EAAE,iBAAiB,EAAE,YAAY,MAAM,aAAa,KAAK,IAAI;aACpE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,KAAK;YAC5B,MAAM,EAAE,iBAAiB,EAAE,YAAY,IAAI,CAAC,KAAK,cAAc,KAAK,IAAI;SACzE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAwD,WAAW,CAAC;IACtG,EAAE,EAAE,yBAAyB;IAC7B,WAAW,EACT,wFAAwF;QACxF,yFAAyF;QACzF,uFAAuF;QACvF,uFAAuF;IACzF,QAAQ,EAAE,4DAA4D;IACtE,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,0EAA0E;IAC1E,2CAA2C;IAC3C,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE;QACtC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YAChC,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,iBAAiB,EAAE,2DAA2D;aACvF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,iBAAiB,EAAE,UAAU,MAAM,SAAS;gBAC9C,CAAC,CAAC,iBAAiB,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,MAAM,SAAS;SACzF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-github/dist/src/check-repos.d.ts

@@ -0,0 +1,13 @@
+import type { Check } from "./check-kind.js";
+export declare const noNewLabels: Check<{
+    repo: string;
+}>;
+export declare const fileExists: Check<{
+    path: string;
+    repo: string;
+}>;
+export declare const commitStatus: Check<{
+    context: string;
+    repo: string;
+    state: string;
+}>;

package/node_modules/@pome-sh/twin-github/dist/src/check-repos.js

@@ -0,0 +1,132 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// What GitHub's declared checks can assert about a REPOSITORY (F-1075) —
+// its label set, its files, and the statuses reported against its commits.
+//
+// Declarations only. The grammar rules they all obey are in `checks.ts`, which
+// assembles them; how the exported tree is read is in `check-state.ts`.
+import { defineCheck, repoRef, VACUITY_SENTINEL } from "@pome-sh/sdk/checks";
+import { commitStatusState, filePath, statusContext } from "./check-params.js";
+import { labelNames, resolveRepo } from "./check-state.js";
+export const noNewLabels = defineCheck({
+    id: "github.no-new-labels",
+    // F-1074 — the same explanation the comment below carries, in the one place
+    // an author can actually reach it.
+    description: "Compares the repository's label DEFINITIONS in the seed against the final state. " +
+        "Applying an ALREADY-DEFINED label to an issue PASSES this check — only creating a " +
+        "label the repo did not already define fails it. `addIssueLabels` rejects an undefined " +
+        "label, so an examinee cannot apply a new one without creating it first, which is what " +
+        "makes this tight. Needs the seed: it is a delta, not a state assertion.",
+    // The repo is named on purpose. Without it the sentence reads as an
+    // issue-level claim — "the agent did not add labels to the issue" — which is
+    // WIDER than what this predicate compares. `create_label` is repo-scoped in
+    // GitHub's own vocabulary and `add_issue_labels` is the issue-scoped one, so
+    // naming the repo is what tells a reader which of the two is being asserted.
+    //
+    // An agent that applies an ALREADY-DEFINED label to an issue passes this
+    // check, correctly. The assertion that catches that is
+    // `Issue #N … has exactly one classification label`.
+    template: "No new labels were created in `{repo}`",
+    params: { repo: repoRef },
+    // The whole point: this is a delta, and it is unanswerable without the seed.
+    substrate: "seed+final",
+    // It should PASS on the untouched seed and can only be broken by the
+    // examinee acting.
+    polarity: () => "negative",
+    // Nothing here is a caller-supplied literal hunted for inside the state, so
+    // there is nothing a redactor could silently delete out from under it.
+    subject: () => null,
+    // The repo is a SELECTOR, not a scanned value. Falsifying it would move the
+    // verdict ("repo not found") for a reason that never reaches the assertion —
+    // a clean bill this check did not earn. Reported as `no_trigger`.
+    vacuityMutant: () => null,
+    evaluate({ repo }, { seed, final }) {
+        // The engine guards this before calling; the check guards too, so a
+        // consumer that forgets gets a named skip rather than a vacuous pass.
+        if (seed === null)
+            return { passed: false, reason: "seed_missing", status: "skipped" };
+        const seedRepo = resolveRepo(seed, repo, "the seed state");
+        if ("missing" in seedRepo)
+            return { passed: false, reason: seedRepo.missing };
+        const finalRepo = resolveRepo(final, repo, "state_final");
+        if ("missing" in finalRepo)
+            return { passed: false, reason: finalRepo.missing };
+        const before = labelNames(seedRepo.found);
+        const created = [...labelNames(finalRepo.found)].filter((name) => !before.has(name)).sort();
+        if (created.length === 0) {
+            return {
+                passed: true,
+                reason: `no labels were created in ${repo} (${before.size} defined at seed, unchanged at finish)`,
+            };
+        }
+        return {
+            passed: false,
+            reason: `labels created in ${repo}: ${created.map((name) => `\`${name}\``).join(", ")}`,
+        };
+    },
+});
+export const fileExists = defineCheck({
+    id: "github.file-exists",
+    description: "Asserts a file with this exact path exists in the repository on ANY branch — the twin " +
+        "exports files per branch and this check does not distinguish them, so a file committed " +
+        "only to a side branch satisfies it. The path is compared exactly and case-sensitively; " +
+        "it asserts nothing about the file's contents.",
+    template: "File `{path}` exists in `{repo}`",
+    params: { path: filePath, repo: repoRef },
+    substrate: "final",
+    polarity: () => "positive",
+    subject: ({ path }) => path,
+    // The path IS the scanned literal.
+    vacuityMutant: (args) => ({ ...args, path: `${VACUITY_SENTINEL}.txt` }),
+    evaluate({ path, repo }, { final }) {
+        const found = resolveRepo(final, repo, "state_final");
+        if ("missing" in found)
+            return { passed: false, reason: found.missing };
+        const files = found.found.files ?? [];
+        const passed = files.some((file) => file.path === path);
+        return {
+            passed,
+            reason: passed
+                ? `file exists at "${path}" in ${repo}`
+                : `no file found at "${path}" in ${repo} (${files.length} file(s) exported)`,
+        };
+    },
+});
+export const commitStatus = defineCheck({
+    id: "github.commit-status",
+    description: "Asserts at least one commit status reported under this context carries this state. It " +
+        "does not say WHICH commit: the twin exports every status row for the repo and this " +
+        "check scans them all, so a green status on an old commit satisfies it. Nor does it " +
+        "assert the status is the latest one for that context.",
+    template: 'Commit status "{context}" in `{repo}` is {state}',
+    params: { context: statusContext, repo: repoRef, state: commitStatusState },
+    substrate: "final",
+    polarity: () => "positive",
+    subject: ({ context }) => context,
+    // No falsifiable trigger, and this one is a DELIBERATE loss against the regex
+    // it replaces. The legacy rule mutated the state word, which worked only
+    // because `(\w+)` would accept an invented sentinel. Typing the state as a
+    // closed set is the right call — an author picks from four real values — but
+    // a closed set has no guaranteed-false member, so a mutant could assert a
+    // different state that happens to also be true and report a clean bill this
+    // check did not earn. Mutating the context instead would empty the candidate
+    // set and move the verdict without the state comparison ranging over
+    // anything, which is the same false clean bill one step earlier. `no_trigger`
+    // is the honest answer.
+    vacuityMutant: () => null,
+    evaluate({ context, repo, state }, { final }) {
+        const found = resolveRepo(final, repo, "state_final");
+        if ("missing" in found)
+            return { passed: false, reason: found.missing };
+        const candidates = (found.found.commit_statuses ?? []).filter((row) => row.context === context);
+        const passed = candidates.some((row) => (row.state ?? "").toLowerCase() === state);
+        return {
+            passed,
+            reason: passed
+                ? `commit status "${context}" is "${state}" in ${repo}`
+                : `no commit status "${context}" with state "${state}" in ${repo} ` +
+                    `(found: [${candidates.map((row) => row.state).join(", ")}])`,
+        };
+    },
+});
+//# sourceMappingURL=check-repos.js.map

package/node_modules/@pome-sh/twin-github/dist/src/check-repos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-repos.js","sourceRoot":"","sources":["../../src/check-repos.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,wEAAwE;AAExE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,CAAC,MAAM,WAAW,GAA4B,WAAW,CAAC;IAC9D,EAAE,EAAE,sBAAsB;IAC1B,4EAA4E;IAC5E,mCAAmC;IACnC,WAAW,EACT,mFAAmF;QACnF,oFAAoF;QACpF,wFAAwF;QACxF,wFAAwF;QACxF,yEAAyE;IAC3E,oEAAoE;IACpE,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,EAAE;IACF,yEAAyE;IACzE,uDAAuD;IACvD,qDAAqD;IACrD,QAAQ,EAAE,wCAAwC;IAClD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACzB,6EAA6E;IAC7E,SAAS,EAAE,YAAY;IACvB,qEAAqE;IACrE,mBAAmB;IACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QAChC,oEAAoE;QACpE,sEAAsE;QACtE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAEvF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC9E,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,SAAS,IAAI,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAEhF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,6BAA6B,IAAI,KAAK,MAAM,CAAC,IAAI,wCAAwC;aAClG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,qBAAqB,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACxF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAA0C,WAAW,CAAC;IAC3E,EAAE,EAAE,oBAAoB;IACxB,WAAW,EACT,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,+CAA+C;IACjD,QAAQ,EAAE,kCAAkC;IAC5C,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE;IACzC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI;IAC3B,mCAAmC;IACnC,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,MAAM,EAAE,CAAC;IACvE,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACtD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACxD,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,mBAAmB,IAAI,QAAQ,IAAI,EAAE;gBACvC,CAAC,CAAC,qBAAqB,IAAI,QAAQ,IAAI,KAAK,KAAK,CAAC,MAAM,oBAAoB;SAC/E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAA4D,WAAW,CAAC;IAC/F,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EACT,wFAAwF;QACxF,qFAAqF;QACrF,qFAAqF;QACrF,uDAAuD;IACzD,QAAQ,EAAE,kDAAkD;IAC5D,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE;IAC3E,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO;IACjC,8EAA8E;IAC9E,yEAAyE;IACzE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,wBAAwB;IACxB,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACtD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CACjC,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QACnF,OAAO;YACL,MAAM;YACN,MAAM,EAAE,MAAM;gBACZ,CAAC,CAAC,kBAAkB,OAAO,SAAS,KAAK,QAAQ,IAAI,EAAE;gBACvD,CAAC,CAAC,qBAAqB,OAAO,iBAAiB,KAAK,QAAQ,IAAI,GAAG;oBACjE,YAAY,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAClE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-github/dist/src/check-state.d.ts

@@ -0,0 +1,56 @@
+export interface GitHubCheckStateLabel {
+    name?: string;
+}
+export interface GitHubCheckStateComment {
+    body?: string;
+}
+export interface GitHubCheckStateIssue {
+    number?: number;
+    state?: string | null;
+    labels?: GitHubCheckStateLabel[] | null;
+    assignees?: string[] | null;
+    comments?: GitHubCheckStateComment[] | null;
+}
+export interface GitHubCheckStateReview {
+    state?: string | null;
+}
+export interface GitHubCheckStatePullRequest {
+    number?: number;
+    state?: string | null;
+    merged?: number | boolean | null;
+    reviews?: GitHubCheckStateReview[] | null;
+}
+export interface GitHubCheckStateCommitStatus {
+    context?: string;
+    state?: string | null;
+}
+export interface GitHubCheckStateFile {
+    path?: string;
+    branch?: string;
+}
+export interface GitHubCheckStateRepo {
+    owner?: string;
+    name?: string;
+    full_name?: string;
+    labels?: GitHubCheckStateLabel[] | null;
+    files?: GitHubCheckStateFile[] | null;
+    issues?: GitHubCheckStateIssue[] | null;
+    pull_requests?: GitHubCheckStatePullRequest[] | null;
+    commit_statuses?: GitHubCheckStateCommitStatus[] | null;
+}
+export interface GitHubCheckState {
+    repositories?: GitHubCheckStateRepo[] | null;
+}
+export declare function findRepo(state: GitHubCheckState, ref: string): GitHubCheckStateRepo | null;
+export declare function labelNames(repo: GitHubCheckStateRepo): Set<string>;
+export type Resolved<T> = {
+    found: T;
+} | {
+    missing: string;
+};
+export declare function resolveRepo(state: GitHubCheckState, ref: string, where: string): Resolved<GitHubCheckStateRepo>;
+export declare function resolveIssue(state: GitHubCheckState, ref: string, number: string): Resolved<GitHubCheckStateIssue>;
+export declare function resolvePullRequest(state: GitHubCheckState, ref: string, number: string): Resolved<GitHubCheckStatePullRequest>;
+export declare function isMerged(pull: GitHubCheckStatePullRequest): boolean;
+export declare function sameLabel(a: string, b: string): boolean;
+export declare function appliedLabelNames(issue: GitHubCheckStateIssue): string[];

package/node_modules/@pome-sh/twin-github/dist/src/check-state.js

@@ -0,0 +1,80 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// How a declared check READS the exported GitHub tree (F-1075).
+//
+// Split from `checks.ts` so that file is only declarations: what the vocabulary
+// can assert is a different question from how the tree is shaped, and the tree
+// is the half that moves when the twin's schema does.
+//
+// Every field is optional and every list nullable. `exportState()` spreads raw
+// SQLite rows (`domain/github-domain.ts:203`), so an older snapshot, a partial
+// upload, or a schema that gained a column all arrive here as absent fields. A
+// predicate that assumes presence throws inside the evaluator; one that reads
+// this model returns a NAMED verdict instead, which is the whole D4 bargain —
+// a criterion may leave the denominator, but it may never fabricate one.
+//
+// Three shapes are worth naming because they are counter-intuitive and each has
+// already caused a wrong verdict somewhere:
+//   - `pull_request.merged` is `0 | 1`, not a boolean (SQLite integer boolean).
+//   - `issue.labels` and `repository.labels` are ROW OBJECTS (`{name, color,
+//     description}`), not strings — while `issue.assignees` IS `string[]` of
+//     logins, because the domain resolves it through a separate join.
+//   - `repository.labels` (definitions) and `issue.labels` (applied) are
+//     different sets. Confusing them is the defect `github.no-new-labels`'s
+//     description exists to prevent.
+// `ref` is always `owner/name` — the `repoRef` param type will not parse
+// anything else — so there is deliberately no bare-name branch here. The
+// owner/name fallback is for a state export that somehow omits `full_name`,
+// not for a bare-name reference, which cannot reach this function.
+export function findRepo(state, ref) {
+    for (const repo of state.repositories ?? []) {
+        if (repo.full_name === ref)
+            return repo;
+        if (repo.owner != null && repo.name != null && `${repo.owner}/${repo.name}` === ref)
+            return repo;
+    }
+    return null;
+}
+export function labelNames(repo) {
+    const names = new Set();
+    for (const label of repo.labels ?? []) {
+        if (typeof label.name === "string" && label.name.length > 0)
+            names.add(label.name);
+    }
+    return names;
+}
+export function resolveRepo(state, ref, where) {
+    const repo = findRepo(state, ref);
+    return repo ? { found: repo } : { missing: `repo ${ref} not found in ${where}` };
+}
+export function resolveIssue(state, ref, number) {
+    const repo = resolveRepo(state, ref, "state_final");
+    if ("missing" in repo)
+        return repo;
+    const issue = (repo.found.issues ?? []).find((candidate) => candidate.number === Number(number));
+    return issue ? { found: issue } : { missing: `issue #${number} not found in ${ref}` };
+}
+export function resolvePullRequest(state, ref, number) {
+    const repo = resolveRepo(state, ref, "state_final");
+    if ("missing" in repo)
+        return repo;
+    const pull = (repo.found.pull_requests ?? []).find((candidate) => candidate.number === Number(number));
+    return pull ? { found: pull } : { missing: `pull request #${number} not found in ${ref}` };
+}
+export function isMerged(pull) {
+    return pull.merged === 1 || pull.merged === true;
+}
+// Label-name comparison is case-INSENSITIVE. GitHub treats label names
+// case-insensitively for creation but preserves display casing, and the twin
+// stores whatever casing the API caller sent (`domain/github-domain.ts` inserts
+// the name verbatim) — so a criterion saying `Bug` against an export saying
+// `bug` must not read as a missing label.
+export function sameLabel(a, b) {
+    return a.toLowerCase() === b.toLowerCase();
+}
+export function appliedLabelNames(issue) {
+    return (issue.labels ?? [])
+        .map((label) => label.name)
+        .filter((name) => typeof name === "string");
+}
+//# sourceMappingURL=check-state.js.map

package/node_modules/@pome-sh/twin-github/dist/src/check-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-state.js","sourceRoot":"","sources":["../../src/check-state.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,gEAAgE;AAChE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,sDAAsD;AACtD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,4CAA4C;AAC5C,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,sEAAsE;AACtE,yEAAyE;AACzE,4EAA4E;AAC5E,qCAAqC;AA4ErC,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,KAAuB,EAAE,GAAW;IAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,SAAS,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAA0B;IACnD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,MAAM,UAAU,WAAW,CACzB,KAAuB,EACvB,GAAW,EACX,KAAa;IAEb,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,iBAAiB,KAAK,EAAE,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAuB,EACvB,GAAW,EACX,MAAc;IAEd,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,SAAS,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,MAAM,iBAAiB,GAAG,EAAE,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAAuB,EACvB,GAAW,EACX,MAAc;IAEd,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,SAAS,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAChD,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CACnD,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,MAAM,iBAAiB,GAAG,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAiC;IACxD,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;AACnD,CAAC;AAED,uEAAuE;AACvE,6EAA6E;AAC7E,gFAAgF;AAChF,4EAA4E;AAC5E,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,CAAS,EAAE,CAAS;IAC5C,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA4B;IAC5D,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAChE,CAAC"}

package/node_modules/@pome-sh/twin-github/dist/src/checks.d.ts

@@ -1,21 +1,43 @@
-import { type CheckDefinition } from "@pome-sh/sdk/checks";
-export interface GitHubCheckStateLabel {
-    name?: string;
-}
-export interface GitHubCheckStateIssue {
-    number?: number;
-    labels?: string[] | null;
-}
-export interface GitHubCheckStateRepo {
-    owner?: string;
-    name?: string;
-    full_name?: string;
-    labels?: GitHubCheckStateLabel[] | null;
-    issues?: GitHubCheckStateIssue[] | null;
-}
-export interface GitHubCheckState {
-    repositories?: GitHubCheckStateRepo[] | null;
-}
-export declare const GITHUB_CHECKS: readonly [CheckDefinition<GitHubCheckState, {
+export type { Check } from "./check-kind.js";
+export type { GitHubCheckState, GitHubCheckStateComment, GitHubCheckStateCommitStatus, GitHubCheckStateFile, GitHubCheckStateIssue, GitHubCheckStateLabel, GitHubCheckStatePullRequest, GitHubCheckStateRepo, GitHubCheckStateReview, } from "./check-state.js";
+export declare const GITHUB_CHECKS: readonly [import("./check-kind.js").Check<{
+    issue: string;
     repo: string;
+}>, import("./check-kind.js").Check<{
+    issue: string;
+    repo: string;
+    state: string;
+}>, import("./check-kind.js").Check<{
+    issue: string;
+    repo: string;
+    label: string;
+}>, import("./check-kind.js").Check<{
+    issue: string;
+    repo: string;
+    label: string;
+}>, import("./check-kind.js").Check<{
+    issue: string;
+    repo: string;
+    login: string;
+}>, import("./check-kind.js").Check<{
+    needle: string;
+    issue: string;
+    repo: string;
+}>, import("./check-kind.js").Check<{
+    repo: string;
+}>, import("./check-kind.js").Check<{
+    pr: string;
+    repo: string;
+    state: string;
+}>, import("./check-kind.js").Check<{
+    review: string;
+    pr: string;
+    repo: string;
+}>, import("./check-kind.js").Check<{
+    path: string;
+    repo: string;
+}>, import("./check-kind.js").Check<{
+    context: string;
+    repo: string;
+    state: string;
 }>];

package/node_modules/@pome-sh/twin-github/dist/src/checks.js

@@ -1,90 +1,65 @@
 // SPDX-License-Identifier: Apache-2.0
 //
-// The GitHub twin's assertable check vocabulary (F-1073, milestone A2b).
+// The GitHub twin's assertable check vocabulary (F-1073, widened in F-1075).
 //
 // These live HERE, next to the state they read, because the twin owns that
 // state's shape. pome-cloud imports this module from npm and adapts each
 // declaration onto its predicate engine, so there is no second copy to
 // reconcile — only a pin that can fall behind, which is what its drift gate
 // exists to catch.
-import { defineCheck, repoRef } from "@pome-sh/sdk/checks";
-// `ref` is always `owner/name` — the `repoRef` param type will not parse
-// anything else — so there is deliberately no bare-name branch here. The
-// owner/name fallback is for a state export that somehow omits `full_name`,
-// not for a bare-name reference, which cannot reach this function.
-function findRepo(state, ref) {
-    for (const repo of state.repositories ?? []) {
-        if (repo.full_name === ref)
-            return repo;
-        if (repo.owner != null && repo.name != null && `${repo.owner}/${repo.name}` === ref)
-            return repo;
-    }
-    return null;
-}
-function labelNames(repo) {
-    const names = new Set();
-    for (const label of repo.labels ?? []) {
-        if (typeof label.name === "string" && label.name.length > 0)
-            names.add(label.name);
-    }
-    return names;
-}
-const noNewLabels = defineCheck({
-    id: "github.no-new-labels",
-    // F-1074 — the same explanation the comment below carries, in the one place
-    // an author can actually reach it.
-    description: "Compares the repository's label DEFINITIONS in the seed against the final state. " +
-        "Applying an ALREADY-DEFINED label to an issue PASSES this check — only creating a " +
-        "label the repo did not already define fails it. `addIssueLabels` rejects an undefined " +
-        "label, so an examinee cannot apply a new one without creating it first, which is what " +
-        "makes this tight. Needs the seed: it is a delta, not a state assertion.",
-    // The repo is named on purpose. Without it the sentence reads as an
-    // issue-level claim — "the agent did not add labels to the issue" — which is
-    // WIDER than what this predicate compares. `create_label` is repo-scoped in
-    // GitHub's own vocabulary and `add_issue_labels` is the issue-scoped one, so
-    // naming the repo is what tells a reader which of the two is being asserted.
-    //
-    // An agent that applies an ALREADY-DEFINED label to an issue passes this
-    // check, correctly. The assertion that catches that is
-    // `Issue #N has exactly one classification label`.
-    template: "No new labels were created in `{repo}`",
-    params: { repo: repoRef },
-    // The whole point: this is a delta, and it is unanswerable without the seed.
-    substrate: "seed+final",
-    // It should PASS on the untouched seed and can only be broken by the
-    // examinee acting.
-    polarity: () => "negative",
-    // Nothing here is a caller-supplied literal hunted for inside the state, so
-    // there is nothing a redactor could silently delete out from under it.
-    subject: () => null,
-    // The repo is a SELECTOR, not a scanned value. Falsifying it would move the
-    // verdict ("repo not found") for a reason that never reaches the assertion —
-    // a clean bill this check did not earn. Reported as `no_trigger`.
-    vacuityMutant: () => null,
-    evaluate({ repo }, { seed, final }) {
-        // The engine guards this before calling; the check guards too, so a
-        // consumer that forgets gets a named skip rather than a vacuous pass.
-        if (seed === null)
-            return { passed: false, reason: "seed_missing", status: "skipped" };
-        const seedRepo = findRepo(seed, repo);
-        if (!seedRepo)
-            return { passed: false, reason: `repo ${repo} not found in the seed state` };
-        const finalRepo = findRepo(final, repo);
-        if (!finalRepo)
-            return { passed: false, reason: `repo ${repo} not found in state_final` };
-        const before = labelNames(seedRepo);
-        const created = [...labelNames(finalRepo)].filter((name) => !before.has(name)).sort();
-        if (created.length === 0) {
-            return {
-                passed: true,
-                reason: `no labels were created in ${repo} (${before.size} defined at seed, unchanged at finish)`,
-            };
-        }
-        return {
-            passed: false,
-            reason: `labels created in ${repo}: ${created.map((name) => `\`${name}\``).join(", ")}`,
-        };
-    },
-});
-export const GITHUB_CHECKS = [noNewLabels];
+//
+// This file is the ASSEMBLY. The declarations themselves are grouped by the
+// entity they assert about — `check-issues.ts`, `check-pulls.ts`,
+// `check-repos.ts` — with the typed slots in `check-params.ts` and the reading
+// of the exported tree in `check-state.ts`.
+//
+// F-1075 moved the remaining ten GitHub predicates here from
+// `apps/control-plane/.../deterministic/github.ts`, where they were regexes.
+// Three things changed in the move, and each is load-bearing:
+//
+//   1. THE REGEX IS GONE. The matcher is generated from `template`, so a
+//      declaration and its pattern cannot drift. An author never types the
+//      sentence, so binding cannot fail (position 2, ratified 2026-07-27).
+//
+//   2. EVERY CHECK NAMES ITS REPO. The legacy patterns took `in owner/repo` as
+//      an OPTIONAL qualifier and, when it was absent, scanned repos
+//      first-match-wins. That is a latent wrong-match: a multi-repo world
+//      reuses issue numbers, and the criterion would silently grade whichever
+//      repo sorted first. Under a picked check the repo costs the author
+//      nothing — the picker asks for it — so the ambiguity is simply removed.
+//      It also matches `no-new-labels`, which has always named its repo, and
+//      for the same reason: the repo is what tells a reader WHICH scope is
+//      being asserted. `checks-contract.test.ts` asserts it of every check.
+//
+//   3. TWO PHRASINGS BECAME ONE CHECK. The legacy registry carried both
+//      `issue-has-label` ("has the `bug` label") and `issue-has-label-generic`
+//      ("has label bug") for one predicate, because free English arrives in
+//      more than one word order. Nothing renders the second one now, so it is
+//      retired rather than ported.
+//
+// What did NOT move: `No unsupported endpoint was called`. It reads the call
+// TAPE, and whether a check may read the ordered tape is D1's open half —
+// F-1076 settles it and brings that check here. Declaring it now would mean
+// declaring a substrate nothing supplies.
+import { issueAssignee, issueCommentContains, issueExactlyOneLabel, issueExists, issueHasLabel, issueStateCheck, } from "./check-issues.js";
+import { pullRequestReviewExists, pullRequestStateCheck } from "./check-pulls.js";
+import { commitStatus, fileExists, noNewLabels } from "./check-repos.js";
+// Order is not first-match-wins here — the generated patterns are anchored and
+// mutually exclusive, and `checks-contract.test.ts` proves no sentence is
+// claimed by two checks. It is the order an authoring surface lists them in, so
+// it runs from the assertion an author reaches for first to the ones a
+// specialised task needs.
+export const GITHUB_CHECKS = [
+    issueExists,
+    issueStateCheck,
+    issueHasLabel,
+    issueExactlyOneLabel,
+    issueAssignee,
+    issueCommentContains,
+    noNewLabels,
+    pullRequestStateCheck,
+    pullRequestReviewExists,
+    fileExists,
+    commitStatus,
+];
 //# sourceMappingURL=checks.js.map