@remogram/core 0.1.0-beta.1 → 0.1.0-beta.2

package/auth-classes.js

@@ -0,0 +1,44 @@
+/** Per-command auth requirements for structured provider capabilities. */
+export const AUTH_CLASS = {
+  NONE: 'none',
+  GIT_ONLY: 'git_only',
+  TOKEN_REQUIRED: 'token_required',
+};
+
+const AUTH_CLASS_VALUES = new Set(Object.values(AUTH_CLASS));
+
+/** Runtime auth requirements for fully implemented API providers. */
+export const API_PROVIDER_COMMAND_AUTH = {
+  repo_status: AUTH_CLASS.NONE,
+  ref_compare: AUTH_CLASS.GIT_ONLY,
+  pr_status: AUTH_CLASS.TOKEN_REQUIRED,
+  pr_checks: AUTH_CLASS.TOKEN_REQUIRED,
+  merge_plan: AUTH_CLASS.TOKEN_REQUIRED,
+  sync_plan: AUTH_CLASS.GIT_ONLY,
+};
+
+export function commandCapability(name, { implemented = true } = {}) {
+  const auth_class = API_PROVIDER_COMMAND_AUTH[name];
+  if (!auth_class) {
+    throw new Error(`Unknown command: ${name}`);
+  }
+  return { name, implemented, auth_class };
+}
+
+export function apiProviderCommands() {
+  return Object.keys(API_PROVIDER_COMMAND_AUTH).map((name) =>
+    commandCapability(name, { implemented: true }),
+  );
+}
+
+export function stubProviderCommands() {
+  return Object.keys(API_PROVIDER_COMMAND_AUTH).map((name) =>
+    commandCapability(name, { implemented: false }),
+  );
+}
+
+export function assertAuthClass(value) {
+  if (!AUTH_CLASS_VALUES.has(value)) {
+    throw new Error(`Invalid auth_class: ${value}`);
+  }
+}

package/git-local.js

@@ -24,6 +24,14 @@ export function gitCurrentBranch(cwd) {
   }
 }
 
+export function gitRepoRoot(cwd) {
+  try {
+    return gitExec(cwd, ['rev-parse', '--show-toplevel']);
+  } catch {
+    return null;
+  }
+}
+
 export function gitAheadBehind(cwd, base, head) {
   assertGitRef(base, 'base');
   assertGitRef(head, 'head');

package/index.js

@@ -12,7 +12,15 @@ export {
   forgeIngestCapabilityFacts,
 } from './caps.js';
 export { assertGitRef, assertGitRemote } from './git-args.js';
-export { gitRevParse, gitCurrentBranch, gitAheadBehind } from './git-local.js';
+export { gitRevParse, gitCurrentBranch, gitAheadBehind, gitRepoRoot } from './git-local.js';
+export {
+  localHeadShaForPr,
+  staleHeadDetails,
+  staleHeadForgeError,
+  staleHeadForgeError as staleHeadError,
+  STALE_HEAD_MESSAGE,
+  throwIfStaleHeadByNumber,
+} from './pr-head-reconcile.js';
 export { parseConfigFile, configSchema } from './config-schema.js';
 export {
   findConfigPath,
@@ -25,3 +33,11 @@ export {
   forgeContext,
 } from './resolve.js';
 export { fetchWithTimeout, fetchJson, fetchJsonWithMeta, parseLinkHeader, fetchTextCapped } from './http.js';
+export {
+  AUTH_CLASS,
+  API_PROVIDER_COMMAND_AUTH,
+  commandCapability,
+  apiProviderCommands,
+  stubProviderCommands,
+  assertAuthClass,
+} from './auth-classes.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remogram/core",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.2",
   "description": "Remogram forge envelope, config, caps, and HTTP utilities",
   "type": "module",
   "license": "MIT",

package/pr-head-reconcile.js

@@ -0,0 +1,38 @@
+import { assertGitRemote } from './git-args.js';
+import { ERROR_CODES, forgeError } from './contracts/errors.js';
+import { gitRevParse } from './git-local.js';
+
+export const STALE_HEAD_MESSAGE =
+  'Forge PR head SHA diverges from locally resolved git; fetch or refresh before trusting head_sha';
+
+export function localHeadShaForPr(cwd, remoteName, headRef) {
+  if (!headRef) return null;
+  assertGitRemote(remoteName, 'remote');
+  const trackingRef = `${remoteName}/${headRef}`;
+  return gitRevParse(cwd, trackingRef) ?? gitRevParse(cwd, headRef);
+}
+
+export function staleHeadDetails(cwd, remoteName, headRef, forgeHeadSha) {
+  if (!headRef || !forgeHeadSha) return null;
+  const localHeadSha = localHeadShaForPr(cwd, remoteName, headRef);
+  if (!localHeadSha) return null;
+  if (localHeadSha.toLowerCase() === String(forgeHeadSha).toLowerCase()) return null;
+  return {
+    head_ref: headRef,
+    head_sha: forgeHeadSha,
+    local_head_sha: localHeadSha,
+  };
+}
+
+export function staleHeadForgeError() {
+  return forgeError(ERROR_CODES.STALE_HEAD, STALE_HEAD_MESSAGE);
+}
+
+export function throwIfStaleHeadByNumber(ctx, packetType, body, headRef, forgeHeadSha) {
+  const details = staleHeadDetails(ctx.cwd, ctx.config?.remote ?? ctx.remoteName, headRef, forgeHeadSha);
+  if (!details) return;
+  const err = new Error(STALE_HEAD_MESSAGE);
+  err.forgeError = staleHeadForgeError();
+  err.staleHeadPacket = { type: packetType, body: { ...body, ...details } };
+  throw err;
+}

package/resolve.js

@@ -1,20 +1,35 @@
 import { execFileSync } from 'node:child_process';
-import { readFileSync, existsSync } from 'node:fs';
-import { dirname, join } from 'node:path';
+import { readFileSync, existsSync, realpathSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
 import { parseConfigFile } from './config-schema.js';
 import { ERROR_CODES, forgeError } from './contracts/errors.js';
 import { assertGitRemote } from './git-args.js';
+import { gitRepoRoot } from './git-local.js';
 
 const HOST_ALIASES = new Map([
   ['localhost:3000', '127.0.0.1:3000'],
   ['127.0.0.1:3000', 'localhost:3000'],
 ]);
 
+function samePath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return resolve(a) === resolve(b);
+  }
+}
+
 export function findConfigPath(startDir = process.cwd()) {
+  const repoRoot = gitRepoRoot(startDir);
   let dir = startDir;
   while (true) {
     const candidate = join(dir, '.remogram.json');
     if (existsSync(candidate)) return candidate;
+    if (repoRoot) {
+      if (samePath(dir, repoRoot)) break;
+    } else {
+      break;
+    }
     const parent = dirname(dir);
     if (parent === dir) break;
     dir = parent;

package/stub-provider.js

@@ -1,4 +1,5 @@
 import { ERROR_CODES, forgeError } from './contracts/errors.js';
+import { stubProviderCommands } from './auth-classes.js';
 
 export function createStubProvider(id) {
   function unsupported() {
@@ -8,14 +9,7 @@ export function createStubProvider(id) {
   }
   function providerCapabilities() {
     return {
-      commands: [
-        { name: 'repo_status', implemented: false },
-        { name: 'ref_compare', implemented: false },
-        { name: 'pr_status', implemented: false },
-        { name: 'pr_checks', implemented: false },
-        { name: 'merge_plan', implemented: false },
-        { name: 'sync_plan', implemented: false },
-      ],
+      commands: stubProviderCommands(),
       auth_envs: [],
       check_sources: [],
       mergeability_confidence: 'unknown',