@quickchatai/quickreview 0.0.0-stage → 1.1.0

package/dist/src/operator-recovery.js

@@ -0,0 +1,172 @@
+// Operator recovery for a PR whose normal durable ownership protocol stopped
+// making progress. This is deliberately outside dispatch: it fences
+// the one sticky Pi first, repairs only that PR's command slot, then asks the
+// ordinary pump to decide what work is actually eligible.
+import { asyncCommandEffect, commandEffectKey } from "./commandeffects.js";
+import { ovSessionIdForPr } from "./memory/ovsession.js";
+import { verifiedPayload } from "./session-command-payload.js";
+/**
+ * Recover one PR through the same state machine the normal command handlers
+ * use. `rerun-round` is non-destructive and therefore refuses a live durable
+ * owner. `restart-session` is the operator's explicit destructive override:
+ * unlike automatic missing-receipt recovery, it may kill an ambiguously busy
+ * conversation, but it fences that owner, verifies the immutable payload, and
+ * transactionally preserves non-round work before releasing ownership.
+ */
+export async function recoverPrForOperator(deps, pr, mode) {
+    return asyncCommandEffect(deps.store, commandEffectKey(mode, deps.deliveryKey, pr), () => recoverPrForOperatorNow(deps, pr, mode));
+}
+async function recoverPrForOperatorNow(deps, pr, mode) {
+    const row = deps.store.getPr(pr);
+    if (!row)
+        return { ok: false, reason: `unknown PR #${pr}` };
+    if (row.state === "closed")
+        return { ok: false, reason: `PR #${pr} is closed` };
+    const blockers = deps.store.blockingSessionCommandsForPr(pr);
+    if (mode === "rerun-round") {
+        const runs = deps.workerRuns?.(pr);
+        if (runs === true || runs === null)
+            return {
+                ok: false,
+                reason: runs === true
+                    ? `PR #${pr} has a running worker; use restart-session to fence it`
+                    : `PR #${pr}: worker leases could not be read; use restart-session to fence it`,
+            };
+    }
+    if (mode === "rerun-round" && blockers.length > 0) {
+        return {
+            ok: false,
+            reason: `PR #${pr} is owned by session command ${blockers[0].id}; use restart-session to fence it`,
+            blocking_command: blockers[0].id,
+        };
+    }
+    // The worker crash-loop breaker parked this PR after repeated worker
+    // failures; either lever is the operator's word that it may run again.
+    if (deps.store.clearWorkerBreaker(pr))
+        deps.store.logEvent("worker_unparked", pr, { by: mode });
+    const failure = deps.store.openReviewFailure(pr);
+    if (mode === "rerun-round" &&
+        failure?.stage === "posting_receipt" &&
+        failure.command_id !== null &&
+        failure.round_id !== null &&
+        failure.round_no !== null &&
+        failure.head_sha !== "") {
+        const retired = deps.store.resolveExactHeadReviewedFailure({
+            pr,
+            incident_id: failure.incident_id,
+            command_id: failure.command_id,
+            round_id: failure.round_id,
+            round_no: failure.round_no,
+            head_sha: failure.head_sha,
+        });
+        if (retired.kind === "blocked")
+            return { ok: false, reason: retired.reason };
+        if (retired.kind === "resolved") {
+            return {
+                ok: true,
+                redispatched: false,
+                exact_head_retired: true,
+                restored_state: retired.restored_state,
+                recovery_hold_cleared: retired.incident_id,
+            };
+        }
+    }
+    let reset = {
+        cancelled_command_ids: [],
+        recovered_wake_ids: [],
+    };
+    if (mode === "restart-session") {
+        if (!deps.killSession)
+            return { ok: false, reason: "restart-session kill hook unavailable" };
+        const payloads = [];
+        for (const command of blockers) {
+            const read = verifiedPayload(command, `session command ${command.id} payload`);
+            if (!read.ok)
+                return { ok: false, reason: read.why };
+            const payload = read.payload;
+            const text = payload.toString("utf8");
+            if (!Buffer.from(text, "utf8").equals(payload)) {
+                return {
+                    ok: false,
+                    reason: `session command ${command.id} payload is not UTF-8; refusing byte-changing recovery`,
+                };
+            }
+            payloads.push({ command, text });
+        }
+        await deps.killSession(pr);
+        // The kill's own answer is not the proof: the lease and the process table
+        // are. A worker still running could append to the JSONL beside a fresh one.
+        if (deps.workerRuns && deps.workerRuns(pr) !== false)
+            return {
+                ok: false,
+                reason: `PR #${pr}: a worker still runs after the fence; ownership unchanged`,
+            };
+        // Keep the blocker in SQLite until the old session is rotated away; if
+        // the exact blocker set changed while kill was in flight, the CAS below
+        // refuses and the rotation is put back.
+        let unrotate;
+        try {
+            if (deps.rotateSession)
+                unrotate = await deps.rotateSession(pr);
+            reset = deps.store.cancelBlockingSessionCommandsForOperator(pr, payloads
+                .filter(({ command }) => command.kind !== "round" && command.kind !== "answer")
+                .map(({ command, text }) => ({ id: command.id, payload: text })), "restart-session", blockers.map((command) => command.id));
+        }
+        catch (error) {
+            unrotate?.();
+            throw error;
+        }
+    }
+    const current = deps.store.getPr(pr) ?? row;
+    const migrationMarkRepaired = failure?.stage === "posting_receipt"
+        ? deps.store.repairMigrationPrecheckReviewedHead(pr)
+        : false;
+    const cancelled = deps.store.cancelRunningRounds(pr, mode);
+    const recoveredFailure = deps.store.recoverReviewFailure(pr, mode);
+    const successor = deps.store.successorFor(pr);
+    if (successor)
+        deps.store.promoteSuccessor(pr);
+    // A human may explicitly retrigger the unchanged head while old receipt debt
+    // waits for recovery — or while restart-session awaited the kill. It is
+    // already queued; replacing its timestamp and provenance with an
+    // operator-system trigger would erase that new request. Read the row as it
+    // is now, not as it was before the kill.
+    else if (!(current.state === "queued" &&
+        current.trigger_ts !== null &&
+        current.trigger_provenance === "human")) {
+        deps.store.queuePrForOperatorRecovery(pr, (deps.now ?? (() => new Date()))().toISOString());
+    }
+    await deps.pump();
+    const after = deps.store.getPr(pr);
+    const redispatched = deps.store.hasRunningRound(pr);
+    const base = {
+        requeued: pr,
+        redispatched,
+        ...(recoveredFailure ? { recovery_hold_cleared: recoveredFailure.incident_id } : {}),
+        ...(migrationMarkRepaired ? { migration_precheck_mark_repaired: true } : {}),
+        ...(cancelled.length > 0 ? { cancelled_rounds: cancelled } : {}),
+        ...(reset.cancelled_command_ids.length > 0
+            ? { cancelled_session_commands: reset.cancelled_command_ids }
+            : {}),
+        ...(reset.recovered_wake_ids.length > 0
+            ? { recovered_wakes: reset.recovered_wake_ids.length }
+            : {}),
+    };
+    if (!redispatched) {
+        const blocker = deps.store.blockingSessionCommand(ovSessionIdForPr(pr));
+        const held = deps.store.heldWakes(pr).length;
+        return {
+            ok: false,
+            ...base,
+            reason: blocker
+                ? `PR #${pr} remains queued behind session command ${blocker.id} (${blocker.status})`
+                : held > 0
+                    ? `PR #${pr} remains queued behind ${held} held conversational wake(s)`
+                    : `PR #${pr} has no running round after ${mode} (state=${after?.state ?? "missing"})`,
+            no_op_state: after?.state ?? "missing",
+            ...(blocker ? { blocking_command: blocker.id } : {}),
+        };
+    }
+    return { ok: true, ...base };
+}
+//# sourceMappingURL=operator-recovery.js.map

package/dist/src/operator-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-recovery.js","sourceRoot":"","sources":["../../src/operator-recovery.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,oEAAoE;AACpE,8EAA8E;AAC9E,0DAA0D;AAC1D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AA6C/D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAA0B,EAC1B,EAAU,EACV,IAA0B;IAE1B,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CACvF,uBAAuB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,IAA0B,EAC1B,EAAU,EACV,IAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IAC5D,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;IAEhF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAChC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,IAAI,KAAK,IAAI;oBACX,CAAC,CAAC,OAAO,EAAE,wDAAwD;oBACnE,CAAC,CAAC,OAAO,EAAE,oEAAoE;aACpF,CAAC;IACN,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,OAAO,EAAE,gCAAgC,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE,mCAAmC;YACnG,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAE,CAAC,EAAE;SAClC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhG,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACjD,IACE,IAAI,KAAK,aAAa;QACtB,OAAO,EAAE,KAAK,KAAK,iBAAiB;QACpC,OAAO,CAAC,UAAU,KAAK,IAAI;QAC3B,OAAO,CAAC,QAAQ,KAAK,IAAI;QACzB,OAAO,CAAC,QAAQ,KAAK,IAAI;QACzB,OAAO,CAAC,QAAQ,KAAK,EAAE,EACvB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC;YACzD,EAAE;YACF,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7E,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,YAAY,EAAE,KAAK;gBACnB,kBAAkB,EAAE,IAAI;gBACxB,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,qBAAqB,EAAE,OAAO,CAAC,WAAW;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,KAAK,GAAsE;QAC7E,qBAAqB,EAAE,EAAE;QACzB,kBAAkB,EAAE,EAAE;KACvB,CAAC;IACF,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;QAE7F,MAAM,QAAQ,GAAgE,EAAE,CAAC;QACjF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,mBAAmB,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;YAC/E,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/C,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,mBAAmB,OAAO,CAAC,EAAE,wDAAwD;iBAC9F,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,KAAK;YAClD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,OAAO,EAAE,4DAA4D;aAC9E,CAAC;QAEJ,uEAAuE;QACvE,wEAAwE;QACxE,wCAAwC;QACxC,IAAI,QAAkC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,aAAa;gBAAE,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAChE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wCAAwC,CACzD,EAAE,EACF,QAAQ;iBACL,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAC9E,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAClE,iBAAiB,EACjB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CACtC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,EAAE,EAAE,CAAC;YACb,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC;IAC5C,MAAM,qBAAqB,GACzB,OAAO,EAAE,KAAK,KAAK,iBAAiB;QAClC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,SAAS;QAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/C,6EAA6E;IAC7E,wEAAwE;IACxE,iEAAiE;IACjE,2EAA2E;IAC3E,yCAAyC;SACpC,IAAI,CAAC,CACR,OAAO,CAAC,KAAK,KAAK,QAAQ;QAC1B,OAAO,CAAC,UAAU,KAAK,IAAI;QAC3B,OAAO,CAAC,kBAAkB,KAAK,OAAO,CACvC,EAAE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,EAAE;QACZ,YAAY;QACZ,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,gCAAgC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,EAAE,0BAA0B,EAAE,KAAK,CAAC,qBAAqB,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACrC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG,IAAI;YACP,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,OAAO,EAAE,0CAA0C,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG;gBACrF,CAAC,CAAC,IAAI,GAAG,CAAC;oBACR,CAAC,CAAC,OAAO,EAAE,0BAA0B,IAAI,8BAA8B;oBACvE,CAAC,CAAC,OAAO,EAAE,+BAA+B,IAAI,WAAW,KAAK,EAAE,KAAK,IAAI,SAAS,GAAG;YACzF,WAAW,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS;YACtC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;AAC/B,CAAC"}

package/dist/src/operatormessage.js

@@ -0,0 +1,44 @@
+// The operator's message to an idle PR, as the answer worker receives it
+// (rule 9's second exception).
+//
+// The daemon writes the message into the command's payload (the bytes the
+// worker verifies against the sha256 recorded at dispatch) so the one thing that
+// decides what the worker may do, `may_post`, rides the same sealed bytes as the
+// words. The first line is the header; a payload without it is read as a message
+// that may NOT post. The operator's own text follows the daemon's framing and
+// cannot reach the header: it is composed after it.
+//
+// Neutral by fence: shapes and two small functions, no engine, no pi, no store.
+/** The longest reply kept, in characters: the answer's result file and the worker's
+ * `done` event (the wire line is 1 MiB). */
+export const MAX_REPLY_CHARS = 100_000;
+const HEADER_RE = /^<!-- qcr-operator-message may_post=(0|1) -->\n/;
+/** The opening both briefs share: what kind of message this is. */
+const FRAMING = "This is a message from the human operator to you, the PR's reviewer. It is not a round, a wake or a verdict. Answer it in this conversation.";
+/** What the session is told when the operator did not let it post. */
+const READ_ONLY_BRIEF = [
+    FRAMING,
+    "",
+    "Your tools are read-only (read, grep, find, ls and memory lookups). You cannot post to GitHub, run a command or change a file, and nothing you write reaches the PR: your reply goes to the operator alone. You have no lens tool and you commit no verdict.",
+].join("\n");
+/** What the session is told when the operator marked the message may-post. */
+const MAY_POST_BRIEF = [
+    FRAMING,
+    "",
+    "The operator has marked this message may-post: you also have the bash tool, for the post scripts only (scripts/post-review.sh, scripts/reply-thread.sh and scripts/approve-pr.sh). Post, reply or approve only what the message below asks for, never anything else; the approval keeps its guards and a refusal stands. You have no lens tool and you commit no verdict. Say in your reply what you posted, or that you posted nothing.",
+].join("\n");
+/** The payload for one operator message. */
+export function operatorMessagePayload(text, mayPost) {
+    const brief = mayPost ? MAY_POST_BRIEF : READ_ONLY_BRIEF;
+    return `<!-- qcr-operator-message may_post=${mayPost ? 1 : 0} -->\n${brief}\n\n--- the operator's message ---\n${text.trimEnd()}\n`;
+}
+/** Whether a payload is an operator's message that may post. Anything else,
+ * including a payload with no header, may not. */
+export function operatorMayPost(payload) {
+    return HEADER_RE.exec(payload)?.[1] === "1";
+}
+/** Whether `payload` is an operator message payload at all. */
+export function isOperatorMessage(payload) {
+    return HEADER_RE.test(payload);
+}
+//# sourceMappingURL=operatormessage.js.map

package/dist/src/operatormessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operatormessage.js","sourceRoot":"","sources":["../../src/operatormessage.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,iFAAiF;AACjF,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,oDAAoD;AACpD,EAAE;AACF,gFAAgF;AAEhF;4CAC4C;AAC5C,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,MAAM,SAAS,GAAG,iDAAiD,CAAC;AAEpE,mEAAmE;AACnE,MAAM,OAAO,GACX,8IAA8I,CAAC;AAEjJ,sEAAsE;AACtE,MAAM,eAAe,GAAG;IACtB,OAAO;IACP,EAAE;IACF,8PAA8P;CAC/P,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,8EAA8E;AAC9E,MAAM,cAAc,GAAG;IACrB,OAAO;IACP,EAAE;IACF,0aAA0a;CAC3a,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,4CAA4C;AAC5C,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAgB;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;IACzD,OAAO,sCAAsC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,uCAAuC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC;AACtI,CAAC;AAED;kDACkD;AAClD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}