@ravshansbox/pi-next-issue 1.0.1 → 1.0.2

package/README.md

@@ -35,6 +35,8 @@ Each loop fetches the open issues and takes the oldest one with saved state, els
 
 An issue that cannot go on gets `status:needs-human` and a comment with the reason. Its worktree stays for you to look at.
 
+The implementer and the reviewer read the issue title, the body and the comments. They get only comments by the owner, members and collaborators of the repository. The body is passed as it is, and its author can edit it after you add the label, so check the body before you add the label.
+
 Each agent is a pi session in the worktree. It uses the model and thinking level from your pi settings, and loads all of your extensions except this one.
 
 The state of each issue is saved in `.worktrees/<n>.json`. The extension adds `/.worktrees/` to `.git/info/exclude`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ravshansbox/pi-next-issue",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Pi extension that works through GitHub issues in the background",
   "license": "MIT",
   "type": "module",

package/src/github.ts

@@ -9,6 +9,7 @@ type Check = { name: string; bucket: string; link: string };
 const POLL_MS = 15_000;
 const GRACE_MS = 60_000;
 const READ_TRIES = 3;
+const TRUSTED = ['OWNER', 'MEMBER', 'COLLABORATOR'];
 
 function gh(repo: Repo, args: string[], input?: string): Promise<string> {
   return must('gh', [...args, '--repo', repo.slug], {
@@ -58,9 +59,11 @@ export async function openIssues(repo: Repo): Promise<Issue[]> {
 export async function comments(repo: Repo, issue: number): Promise<string[]> {
   const raw = await gh(repo, ['issue', 'view', String(issue), '--json', 'comments']);
   const parsed = JSON.parse(raw) as {
-    comments: Array<{ author: { login: string }; body: string }>;
+    comments: Array<{ author: { login: string }; authorAssociation: string; body: string }>;
   };
-  return parsed.comments.map((comment) => `@${comment.author.login}: ${comment.body}`);
+  return parsed.comments
+    .filter((comment) => TRUSTED.includes(comment.authorAssociation))
+    .map((comment) => `@${comment.author.login}: ${comment.body}`);
 }
 
 export async function setLabel(