@reneturcios/greenlight 0.10.1 → 0.11.0

package/README.md

@@ -276,6 +276,9 @@ The Agent Policy Index field work kept finding agent bans Greenlight itself miss
 - **Scoped bans dual-class instead of collapsing.** A ban aimed at one kind of agent operation (TypeScript's "bulk, agent-driven contributions", ppt-master's "purely AI-generated PRs submitted without human review") now surfaces as both `agents_banned` for autonomous operation and `agents_disclosure` for the human-led path. An explicit prohibition (nuxt, ripgrep, zed) still stands on its own, and explicit welcome or waiver language (hyperframes welcomes AI help and waives disclosure) never reads as a ban.
 - **Friction JSON states its units.** `friction --json` now carries `outsider_merge_share` (0 to 1 fraction) and `outsider_merge_share_pct` (0 to 100), plus `signals.externalPRMergeRate_pct` next to the existing fraction field. The human-readable output is unchanged.
 
+### v0.11.0: Autopilot
+
+Open PRs were dying between babysit sweeps: a bot review sitting unanswered, a CI failure on the PR's own code, a drifted branch, a missing DCO trailer. Autopilot closes that loop. `greenlight autopilot` (report-only by default, `--apply` to fix) collects reviews, comments, and check results per open PR, verifies bot findings against the code at head (REAL, FALSE_POSITIVE with quoted counter-evidence, or NEEDS_HUMAN), and triages CI failures as introduced vs pre-existing against the base branch. The mechanical items fix themselves: DCO gaps get message-only surgery with byte-identical trees, merge conflicts resolve only when provably mechanical (lockfiles regenerated, changelogs unioned, version or counter bumps), and formatting pushes only when the diff is whitespace-only. Everything else becomes a plan, never a speculative edit. Fixes land on your fork branch with Rene's sign-off, respect the capability ledger's blocked repos, and replies queue as drafts behind the comment block instead of posting. Also exposed as the read-only `autopilot_report` MCP tool.
 ### v0.10.1: never again hardening
 
 Three failures on 2026-10-18, each paid for in full, each now structurally impossible to repeat:

package/dist/autopilot-fixes.d.ts

@@ -0,0 +1,50 @@
+export type ConflictStrategy = "lockfile" | "changelog" | "version-bump" | "manual";
+/** Decide how a conflicted file may be resolved: mechanical, or manual only. */
+export declare function conflictFileStrategy(path: string): ConflictStrategy;
+export interface ConflictHunk {
+    base: string[];
+    ours: string[];
+    theirs: string[];
+}
+/**
+ * Parse git conflict markers into hunks. Returns null when the text has no
+ * markers or a marker is malformed.
+ */
+export declare function parseConflictHunks(text: string): ConflictHunk[] | null;
+/**
+ * Mechanical single-line bump resolution (reticle's guard 13->14 class):
+ * when a hunk changed exactly one token on each side, one side kept the
+ * base value, and the other side is a strict increase (semver or integer
+ * counter), the increase wins. Anything else is not mechanical: null.
+ *
+ * The hunk's base lines are passed explicitly (git markers do not carry them).
+ */
+export declare function resolveVersionBumpHunk(hunk: ConflictHunk, baseLines: string[]): {
+    resolved: string[];
+    taken: "ours" | "theirs";
+} | null;
+/**
+ * Changelog merge: union of added lines from both sides, base lines kept in
+ * order, each side's new lines appended in the order they appear. Exact
+ * duplicate lines are not duplicated.
+ */
+export declare function resolveChangelogMerge(base: string, ours: string, theirs: string): string;
+/** Detect the package manager for lockfile regeneration from lockfile name. */
+export declare function lockfileManager(lockfileName: string): string | null;
+export interface GitRunner {
+    run: (cwd: string, args: string[], stdin?: string) => Promise<{
+        stdout: string;
+        stderr: string;
+    }>;
+}
+export declare function defaultGitRunner(): GitRunner;
+/**
+ * Formatting-only verification: after running a formatter, the diff must be
+ * whitespace-only. `git diff -w` empty means no non-whitespace changes.
+ */
+export declare function diffIsFormattingOnly(git: GitRunner, cwd: string): Promise<boolean>;
+/** Detect a formatter path in a repo dir: npm scripts or known configs. */
+export declare function detectFormatter(files: string[], scripts: Record<string, string>): {
+    name: string;
+    cmd: string[];
+} | null;

package/dist/autopilot-fixes.js

@@ -0,0 +1,216 @@
+/**
+ * Mechanical fix resolvers for Autopilot (v0.11.0).
+ *
+ * The rule is strict: Autopilot may only resolve conflicts that are
+ * provably mechanical. Anything that touches source logic in a
+ * non-trivial way aborts the fix and reports NEEDS_HUMAN with the
+ * conflicted files. Every resolver below is a pure function, tested
+ * against fixtures, so the merge decision is reviewable before it runs.
+ */
+import { execFile } from "node:child_process";
+const LOCKFILE_NAMES = new Set([
+    "package-lock.json",
+    "pnpm-lock.yaml",
+    "yarn.lock",
+    "bun.lockb",
+    "Cargo.lock",
+    "go.sum",
+    "poetry.lock",
+    "Pipfile.lock",
+]);
+/** Decide how a conflicted file may be resolved: mechanical, or manual only. */
+export function conflictFileStrategy(path) {
+    const base = path.split("/").pop() ?? path;
+    if (LOCKFILE_NAMES.has(base))
+        return "lockfile";
+    if (/^changelog/i.test(base) || /^changes\.md$/i.test(base))
+        return "changelog";
+    return "manual";
+}
+/**
+ * Parse git conflict markers into hunks. Returns null when the text has no
+ * markers or a marker is malformed.
+ */
+export function parseConflictHunks(text) {
+    const hunks = [];
+    const lines = text.split("\n");
+    let i = 0;
+    let inConflict = false;
+    let ours = [];
+    let theirs = [];
+    let mid = false;
+    for (; i < lines.length; i++) {
+        const line = lines[i];
+        if (line.startsWith("<<<<<<<")) {
+            if (inConflict)
+                return null;
+            inConflict = true;
+            mid = false;
+            ours = [];
+            theirs = [];
+            continue;
+        }
+        if (!inConflict)
+            continue;
+        if (line.startsWith("=======")) {
+            mid = true;
+            continue;
+        }
+        if (line.startsWith(">>>>>>>")) {
+            // base is unknown at this level; the caller supplies it per hunk.
+            hunks.push({ base: [], ours, theirs });
+            inConflict = false;
+            continue;
+        }
+        (mid ? theirs : ours).push(line);
+    }
+    if (inConflict)
+        return null;
+    return hunks.length > 0 ? hunks : null;
+}
+const SEMVER = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
+function compareSemver(a, b) {
+    if (!SEMVER.test(a) || !SEMVER.test(b))
+        return null;
+    const pa = a.split(".").map((x) => Number(x));
+    const pb = b.split(".").map((x) => Number(x));
+    for (let k = 0; k < 3; k++) {
+        if (pa[k] !== pb[k])
+            return pa[k] < pb[k] ? -1 : 1;
+    }
+    return 0;
+}
+function compareCounter(a, b) {
+    if (!/^\d+$/.test(a) || !/^\d+$/.test(b))
+        return null;
+    const na = Number(a);
+    const nb = Number(b);
+    return na === nb ? 0 : na < nb ? -1 : 1;
+}
+/**
+ * Mechanical single-line bump resolution (reticle's guard 13->14 class):
+ * when a hunk changed exactly one token on each side, one side kept the
+ * base value, and the other side is a strict increase (semver or integer
+ * counter), the increase wins. Anything else is not mechanical: null.
+ *
+ * The hunk's base lines are passed explicitly (git markers do not carry them).
+ */
+export function resolveVersionBumpHunk(hunk, baseLines) {
+    if (hunk.ours.length !== 1 || hunk.theirs.length !== 1 || baseLines.length !== 1)
+        return null;
+    const [oursLine] = hunk.ours;
+    const [theirsLine] = hunk.theirs;
+    const [baseLine] = baseLines;
+    // Find the single changed token: walk from both ends.
+    const clean = (t) => t.replace(/[;,)]+$/, "");
+    const tokenOf = (oursTok, theirsTok, baseTok) => {
+        if (oursTok === theirsTok)
+            return null;
+        const oursKept = oursTok === baseTok;
+        const theirsKept = theirsTok === baseTok;
+        if (oursKept === theirsKept)
+            return null;
+        const bumped = clean(oursKept ? theirsTok : oursTok);
+        const kept = clean(oursKept ? oursTok : theirsTok);
+        const cmp = compareSemver(kept, bumped) ?? compareCounter(kept, bumped);
+        if (cmp === null || cmp >= 0)
+            return null;
+        return oursKept ? "theirs" : "ours";
+    };
+    // Tokenize on whitespace; the single differing token decides.
+    const ot = oursLine.split(/(\s+)/);
+    const tt = theirsLine.split(/(\s+)/);
+    const bt = baseLine.split(/(\s+)/);
+    if (ot.length !== tt.length || ot.length !== bt.length)
+        return null;
+    let decided = null;
+    for (let i = 0; i < ot.length; i++) {
+        const winner = tokenOf(ot[i], tt[i], bt[i]);
+        if (winner === null)
+            continue;
+        if (decided !== null && decided !== winner)
+            return null;
+        decided = winner;
+    }
+    if (decided === null)
+        return null;
+    return { resolved: decided === "ours" ? hunk.ours : hunk.theirs, taken: decided };
+}
+/**
+ * Changelog merge: union of added lines from both sides, base lines kept in
+ * order, each side's new lines appended in the order they appear. Exact
+ * duplicate lines are not duplicated.
+ */
+export function resolveChangelogMerge(base, ours, theirs) {
+    const baseLines = base.split("\n");
+    const ourLines = ours.split("\n");
+    const theirLines = theirs.split("\n");
+    const baseSet = new Set(baseLines);
+    const out = [...baseLines];
+    const seen = new Set(baseLines);
+    for (const line of [...ourLines, ...theirLines]) {
+        if (baseSet.has(line) || seen.has(line))
+            continue;
+        seen.add(line);
+        out.push(line);
+    }
+    return out.join("\n");
+}
+/** Detect the package manager for lockfile regeneration from lockfile name. */
+export function lockfileManager(lockfileName) {
+    const base = lockfileName.split("/").pop() ?? lockfileName;
+    switch (base) {
+        case "package-lock.json":
+            return "npm";
+        case "pnpm-lock.yaml":
+            return "pnpm";
+        case "yarn.lock":
+            return "yarn";
+        case "bun.lockb":
+            return "bun";
+        case "Cargo.lock":
+            return "cargo";
+        case "go.sum":
+            return "go";
+        default:
+            return null;
+    }
+}
+export function defaultGitRunner() {
+    return {
+        run: (cwd, args) => new Promise((resolve, reject) => {
+            execFile("git", args, { cwd, timeout: 120_000 }, (err, stdout, stderr) => {
+                if (err)
+                    reject(new Error(`git ${args.join(" ")} failed: ${stderr || err.message}`));
+                else
+                    resolve({ stdout: String(stdout), stderr: String(stderr) });
+            });
+        }),
+    };
+}
+/**
+ * Formatting-only verification: after running a formatter, the diff must be
+ * whitespace-only. `git diff -w` empty means no non-whitespace changes.
+ */
+export async function diffIsFormattingOnly(git, cwd) {
+    const { stdout } = await git.run(cwd, ["diff", "-w", "--numstat"]);
+    return stdout.trim().length === 0;
+}
+/** Detect a formatter path in a repo dir: npm scripts or known configs. */
+export function detectFormatter(files, scripts) {
+    if (scripts["format"])
+        return { name: "npm run format", cmd: ["npm", "run", "format"] };
+    if (scripts["lint:fix"])
+        return { name: "npm run lint:fix", cmd: ["npm", "run", "lint:fix"] };
+    if (scripts["lint"] && /--fix/.test(scripts["lint"]))
+        return { name: "npm run lint", cmd: ["npm", "run", "lint"] };
+    const has = (n) => files.includes(n);
+    if (has(".prettierrc") ||
+        has(".prettierrc.json") ||
+        has("prettier.config.js") ||
+        has("prettier.config.cjs")) {
+        return { name: "prettier", cmd: ["npx", "--no-install", "prettier", "--write", "."] };
+    }
+    return null;
+}
+//# sourceMappingURL=autopilot-fixes.js.map

package/dist/autopilot-fixes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-fixes.js","sourceRoot":"","sources":["../src/autopilot-fixes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,mBAAmB;IACnB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;IAC3C,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAChF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,IAAI,GAAa,EAAE,CAAC;IACxB,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC5B,UAAU,GAAG,IAAI,CAAC;YAClB,GAAG,GAAG,KAAK,CAAC;YACZ,IAAI,GAAG,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,GAAG,GAAG,IAAI,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,kEAAkE;YAClE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACvC,UAAU,GAAG,KAAK,CAAC;YACnB,SAAS;QACX,CAAC;QACD,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,MAAM,GAAG,wCAAwC,CAAC;AAExD,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAkB,EAClB,SAAmB;IAEnB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9F,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC7B,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC7B,sDAAsD;IACtD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAe,EAAE,EAAE;QACtE,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,QAAQ,GAAG,OAAO,KAAK,OAAO,CAAC;QACrC,MAAM,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC;QACzC,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,QAAQ,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,MAAgB,CAAC;IAC5D,CAAC,CAAC;IACF,8DAA8D;IAC9D,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxD,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,GAAG,GAAa,CAAC,GAAG,SAAS,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC;IAC3D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,mBAAmB;YACtB,OAAO,KAAK,CAAC;QACf,KAAK,gBAAgB;YACnB,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,KAAK,CAAC;QACf,KAAK,YAAY;YACf,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC;QACd;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAMD,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CACjB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACvE,IAAI,GAAG;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;;oBAChF,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAc,EAAE,GAAW;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,OAA+B;IAE/B,IAAI,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;IACxF,IAAI,OAAO,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;IAC9F,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;IACnH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7C,IACE,GAAG,CAAC,aAAa,CAAC;QAClB,GAAG,CAAC,kBAAkB,CAAC;QACvB,GAAG,CAAC,oBAAoB,CAAC;QACzB,GAAG,CAAC,qBAAqB,CAAC,EAC1B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/autopilot-git.d.ts

@@ -0,0 +1,83 @@
+/** Rene's standing DCO identity: he authorized Tree to sign non-legal attestations in his name. */
+export declare const DCO_SIGNOFF_LINE = "Signed-off-by: Rene Turcios <95189389+CloudCorpRecords@users.noreply.github.com>";
+export interface CommitObject {
+    sha: string;
+    treeSha: string;
+    message: string;
+    parents: string[];
+    authorName: string;
+    authorEmail: string;
+    committerName: string;
+    committerEmail: string;
+}
+/** True when the message carries a DCO Signed-off-by trailer on any line. */
+export declare function hasSignoff(message: string): boolean;
+/** Append the sign-off line to a message that lacks it; leave signed messages untouched. */
+export declare function withSignoff(message: string, line?: string): string;
+export interface GitOpsDeps {
+    getCommit?: (owner: string, repo: string, sha: string) => Promise<CommitObject>;
+    createCommit?: (owner: string, repo: string, args: {
+        message: string;
+        tree: string;
+        parents: string[];
+        author: {
+            name: string;
+            email: string;
+        };
+        committer: {
+            name: string;
+            email: string;
+        };
+    }) => Promise<string>;
+    updateRef?: (owner: string, repo: string, branch: string, sha: string, force: boolean) => Promise<void>;
+    getRef?: (owner: string, repo: string, branch: string) => Promise<string | null>;
+    createBlob?: (owner: string, repo: string, content: string) => Promise<string>;
+    createTree?: (owner: string, repo: string, baseTree: string, entries: Array<{
+        path: string;
+        sha: string;
+        mode: string;
+    }>) => Promise<string>;
+}
+/**
+ * Pure planner for DCO surgery: given the PR's commit chain (oldest first),
+ * decide which commits need a rewritten message. Signed commits anchor the
+ * chain and keep their SHAs; unsigned commits get a replacement mapped
+ * old->new parent. Trees are never touched, so every replacement commit
+ * carries the exact tree of its original.
+ */
+export interface DcoPlan {
+    /** Commits that need rewriting, in chain order (oldest first). */
+    rewrites: Array<{
+        sha: string;
+        treeSha: string;
+        message: string;
+        newMessage: string;
+    }>;
+    /** Commits already signed: anchors, untouched. */
+    anchors: string[];
+}
+/** The plan for one PR's commit list, given the full commit objects. */
+export declare function planDcoSurgery(commits: CommitObject[]): DcoPlan;
+export interface DcoSurgeryResult {
+    oldHead: string;
+    newHead: string;
+    fixed: number;
+    anchored: number;
+    /** Every replacement tree matched its original: the diff is byte-identical. */
+    treesIdentical: boolean;
+}
+/**
+ * Apply DCO surgery on a fork branch: message-only commit rewrites with
+ * byte-identical trees, then force-move the branch ref. Throws before the
+ * ref move if any tree would change.
+ */
+export declare function applyDcoSurgery(forkOwner: string, forkRepo: string, branch: string, commits: CommitObject[], deps?: GitOpsDeps): Promise<DcoSurgeryResult>;
+export interface GitOps {
+    getCommit: NonNullable<GitOpsDeps["getCommit"]>;
+    createCommit: NonNullable<GitOpsDeps["createCommit"]>;
+    updateRef: NonNullable<GitOpsDeps["updateRef"]>;
+    getRef: NonNullable<GitOpsDeps["getRef"]>;
+    createBlob: NonNullable<GitOpsDeps["createBlob"]>;
+    createTree: NonNullable<GitOpsDeps["createTree"]>;
+}
+export declare function defaultGitOps(): GitOps;

package/dist/autopilot-git.js

@@ -0,0 +1,164 @@
+/**
+ * Git operations for Autopilot, through the GitHub Git Data API only.
+ *
+ * Autopilot fixes must never push arbitrary code, so every mutation goes
+ * through these primitives: create a blob, a tree, a commit, and move a
+ * ref. The DCO surgery (message-only commit rewrites) and the format fix
+ * (computed merge trees) both reduce to "commit with an exact tree, then
+ * move the branch ref", which this module verifies step by step.
+ */
+import { apiGet, apiPost } from "./github.js";
+/** Rene's standing DCO identity: he authorized Tree to sign non-legal attestations in his name. */
+export const DCO_SIGNOFF_LINE = "Signed-off-by: Rene Turcios <95189389+CloudCorpRecords@users.noreply.github.com>";
+const str = (v) => (typeof v === "string" ? v : "");
+/** True when the message carries a DCO Signed-off-by trailer on any line. */
+export function hasSignoff(message) {
+    return message
+        .split("\n")
+        .some((line) => /^Signed-off-by:\s*\S/i.test(line.trim()));
+}
+/** Append the sign-off line to a message that lacks it; leave signed messages untouched. */
+export function withSignoff(message, line = DCO_SIGNOFF_LINE) {
+    if (hasSignoff(message))
+        return message;
+    return `${message.replace(/\n+$/, "")}\n\n${line}`;
+}
+async function defaultGetCommit(owner, repo, sha) {
+    const c = (await apiGet(`/repos/${owner}/${repo}/git/commits/${sha}`));
+    return {
+        sha,
+        treeSha: str(c.tree?.sha),
+        message: str(c.message),
+        parents: (c.parents ?? []).map((p) => str(p.sha)).filter(Boolean),
+        authorName: str(c.author?.name),
+        authorEmail: str(c.author?.email),
+        committerName: str(c.committer?.name),
+        committerEmail: str(c.committer?.email),
+    };
+}
+async function defaultCreateCommit(owner, repo, args) {
+    const c = (await apiPost(`/repos/${owner}/${repo}/git/commits`, args));
+    const sha = str(c.sha);
+    if (!sha)
+        throw new Error("Git Data API did not return a commit sha");
+    return sha;
+}
+async function defaultUpdateRef(owner, repo, branch, sha, force) {
+    await apiPost(`/repos/${owner}/${repo}/git/refs/heads/${branch}`, { sha, force });
+}
+async function defaultGetRef(owner, repo, branch) {
+    try {
+        const r = (await apiGet(`/repos/${owner}/${repo}/git/ref/heads/${branch}`));
+        const sha = str(r.object?.sha);
+        return sha || null;
+    }
+    catch {
+        return null;
+    }
+}
+async function defaultCreateBlob(owner, repo, content) {
+    const b = (await apiPost(`/repos/${owner}/${repo}/git/blobs`, {
+        content,
+        encoding: "utf-8",
+    }));
+    return str(b.sha);
+}
+async function defaultCreateTree(owner, repo, baseTree, entries) {
+    const t = (await apiPost(`/repos/${owner}/${repo}/git/trees`, {
+        base_tree: baseTree,
+        tree: entries.map((e) => ({ path: e.path, mode: e.mode, type: "blob", sha: e.sha })),
+    }));
+    return str(t.sha);
+}
+/** The plan for one PR's commit list, given the full commit objects. */
+export function planDcoSurgery(commits) {
+    const rewrites = [];
+    const anchors = [];
+    for (const c of commits) {
+        if (hasSignoff(c.message)) {
+            anchors.push(c.sha);
+        }
+        else {
+            rewrites.push({
+                sha: c.sha,
+                treeSha: c.treeSha,
+                message: c.message,
+                newMessage: withSignoff(c.message),
+            });
+        }
+    }
+    return { rewrites, anchors };
+}
+/**
+ * Apply DCO surgery on a fork branch: message-only commit rewrites with
+ * byte-identical trees, then force-move the branch ref. Throws before the
+ * ref move if any tree would change.
+ */
+export async function applyDcoSurgery(forkOwner, forkRepo, branch, commits, deps = {}) {
+    const getCommit = deps.getCommit ?? defaultGetCommit;
+    const createCommit = deps.createCommit ?? defaultCreateCommit;
+    const updateRef = deps.updateRef ?? defaultUpdateRef;
+    const plan = planDcoSurgery(commits);
+    if (plan.rewrites.length === 0) {
+        const head = commits.length > 0 ? commits[commits.length - 1].sha : "";
+        return { oldHead: head, newHead: head, fixed: 0, anchored: plan.anchors.length, treesIdentical: true };
+    }
+    const full = new Map(commits.map((c) => [c.sha, c]));
+    const shaToNew = new Map();
+    let lastNewParent = "";
+    for (const c of commits) {
+        if (hasSignoff(c.message)) {
+            shaToNew.set(c.sha, c.sha);
+            lastNewParent = c.sha;
+            continue;
+        }
+        const orig = full.get(c.sha) ?? (await getCommit(forkOwner, forkRepo, c.sha));
+        const newParents = orig.parents.map((p) => shaToNew.get(p) ?? p);
+        // The very first unsigned commit parents a signed anchor; keep going.
+        const newSha = await createCommit(forkOwner, forkRepo, {
+            message: withSignoff(orig.message),
+            tree: orig.treeSha,
+            parents: newParents.length > 0 ? newParents : [],
+            author: { name: orig.authorName, email: orig.authorEmail },
+            committer: { name: orig.committerName, email: orig.committerEmail },
+        });
+        shaToNew.set(c.sha, newSha);
+        lastNewParent = newSha;
+    }
+    // Verify: every replacement tree equals its original tree.
+    let treesIdentical = true;
+    for (const c of commits) {
+        if (hasSignoff(c.message))
+            continue;
+        const replacement = await getCommit(forkOwner, forkRepo, shaToNew.get(c.sha) ?? "");
+        const original = full.get(c.sha) ?? (await getCommit(forkOwner, forkRepo, c.sha));
+        if (replacement.treeSha !== original.treeSha) {
+            treesIdentical = false;
+            break;
+        }
+    }
+    if (!treesIdentical) {
+        throw new Error("DCO surgery aborted: a replacement tree differs from its original");
+    }
+    const oldHead = commits[commits.length - 1].sha;
+    const newHead = shaToNew.get(oldHead) ?? oldHead;
+    await updateRef(forkOwner, forkRepo, branch, newHead, true);
+    return {
+        oldHead,
+        newHead,
+        fixed: plan.rewrites.length,
+        anchored: plan.anchors.length,
+        treesIdentical: true,
+    };
+}
+export function defaultGitOps() {
+    return {
+        getCommit: defaultGetCommit,
+        createCommit: defaultCreateCommit,
+        updateRef: defaultUpdateRef,
+        getRef: defaultGetRef,
+        createBlob: defaultCreateBlob,
+        createTree: defaultCreateTree,
+    };
+}
+//# sourceMappingURL=autopilot-git.js.map

package/dist/autopilot-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopilot-git.js","sourceRoot":"","sources":["../src/autopilot-git.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE9C,mGAAmG;AACnG,MAAM,CAAC,MAAM,gBAAgB,GAC3B,kFAAkF,CAAC;AAsBrF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAErE,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAe,gBAAgB;IAC1E,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC;AACrD,CAAC;AAqBD,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;IACtE,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,gBAAgB,GAAG,EAAE,CAAC,CAAqB,CAAC;IAC3F,OAAO;QACL,GAAG;QACH,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC;QACzB,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACjE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC;QAC/B,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;QACjC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC;QACrC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAa,EACb,IAAY,EACZ,IAMC;IAED,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,cAAc,EAAE,IAAI,CAAC,CAAsB,CAAC;IAC5F,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAa,EACb,IAAY,EACZ,MAAc,EACd,GAAW,EACX,KAAc;IAEd,MAAM,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,mBAAmB,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,MAAc;IACtE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,kBAAkB,MAAM,EAAE,CAAC,CAEzE,CAAC;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe;IAC3E,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,EAAE;QAC5D,OAAO;QACP,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAsB,CAAC;IACzB,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,KAAa,EACb,IAAY,EACZ,QAAgB,EAChB,OAA2D;IAE3D,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,YAAY,EAAE;QAC5D,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;KACrF,CAAC,CAAsB,CAAC;IACzB,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAgBD,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAiB,EACjB,QAAgB,EAChB,MAAc,EACd,OAAuB,EACvB,OAAmB,EAAE;IAErB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAErD,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3B,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,sEAAsE;QACtE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE;YACrD,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,OAAO,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAChD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;YAC1D,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE;SACpE,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,2DAA2D;IAC3D,IAAI,cAAc,GAAG,IAAI,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QACpC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,WAAW,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC7C,cAAc,GAAG,KAAK,CAAC;YACvB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;IACjD,MAAM,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO;QACL,OAAO;QACP,OAAO;QACP,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC3B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;QAC7B,cAAc,EAAE,IAAI;KACrB,CAAC;AACJ,CAAC;AAWD,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,SAAS,EAAE,gBAAgB;QAC3B,YAAY,EAAE,mBAAmB;QACjC,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,iBAAiB;KAC9B,CAAC;AACJ,CAAC"}

package/dist/autopilot-triage.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Autopilot feedback classification (v0.11.0).
+ *
+ * Every actionable item on a PR gets a kind, and every bot finding gets a
+ * validity verdict that is VERIFIED against the code at the PR head before
+ * Autopilot touches anything:
+ *
+ *   REAL          the flagged code or pattern exists at head as described
+ *   FALSE_POSITIVE the flagged code or pattern does not exist at head,
+ *                 with the counter-evidence quoted
+ *   NEEDS_HUMAN   the finding cannot be resolved deterministically
+ *
+ * Deterministic verification comes first. The optional LLM layer is only
+ * consulted where the codebase already wires it, and stays off by default.
+ */
+import type { AuthorKind } from "./review-triage.js";
+import { authorKindOf, type ClassifiedFinding } from "./review-triage.js";
+import type { ClassifiedCheck } from "./ci-triage.js";
+export type FeedbackKind = "ci_failure" | "review_change_request" | "bot_finding" | "merge_conflict" | "dco_gap" | "maintainer_question" | "approval" | "other";
+export type FindingVerdict = "REAL" | "FALSE_POSITIVE" | "NEEDS_HUMAN";
+export interface FeedbackItem {
+    /** Stable identity for watermarks: e.g. "review:12345", "check:build". */
+    id: string;
+    kind: FeedbackKind;
+    title: string;
+    body: string;
+    author: string;
+    authorKind: AuthorKind;
+    url?: string;
+    path?: string;
+    line?: number;
+    verdict?: FindingVerdict;
+    /** The evidence for the verdict: quoted code, or why it cannot be resolved. */
+    evidence?: string;
+    /** Draft reply for a human to post. Autopilot never posts comments. */
+    draftReply?: string;
+}
+export interface VerifyDeps {
+    /** File contents at the PR head. Returns null when the file is absent. */
+    fetchFileAtHead?: (path: string) => Promise<string | null>;
+}
+/**
+ * Pull candidate file paths and short code quotes out of a bot finding body.
+ * Review comments usually name the file explicitly (backticked paths or
+ * file names) or ship a diff hunk; both are usable for verification.
+ */
+export declare function extractCandidates(body: string, anchoredPath?: string): {
+    paths: string[];
+    quotes: string[];
+};
+/**
+ * Deterministically verify one bot finding against the code at head.
+ * REAL when the flagged pattern exists as described; FALSE_POSITIVE when
+ * it demonstrably does not (counter-evidence quoted); NEEDS_HUMAN when the
+ * files cannot be resolved or the claim is not checkable this way.
+ */
+export declare function verifyBotFinding(item: {
+    body: string;
+    path?: string;
+}, deps?: VerifyDeps): Promise<{
+    verdict: FindingVerdict;
+    evidence: string;
+}>;
+/** Kind-only classification for review items, before any verification. */
+export declare function classifyReviewItem(input: {
+    body: string;
+    author: string;
+    authorKind: AuthorKind;
+    reviewState?: string;
+}): FeedbackKind;
+/**
+ * Build Autopilot feedback items from review-triage findings, keeping the
+ * triage class and the ready reply draft. Bot findings keep kind
+ * "bot_finding" so the verifier can adjudicate them.
+ */
+export declare function feedbackFromReviewFindings(findings: ClassifiedFinding[], prAuthor: string): FeedbackItem[];
+/**
+ * Build feedback items from CI triage. Only failures the classifier leans
+ * "yours" or cannot place (indeterminate) become fix candidates; pre-existing
+ * and external blockers are reported but never touched.
+ */
+export declare function feedbackFromCiChecks(checks: ClassifiedCheck[]): FeedbackItem[];
+export interface TriageSummary {
+    total: number;
+    byKind: Record<FeedbackKind, number>;
+    botFindingsReal: number;
+    botFindingsFalsePositive: number;
+    botFindingsNeedsHuman: number;
+    ciIntroduced: number;
+    ciPreExistingOrExternal: number;
+}
+export declare function summarizeFeedback(items: FeedbackItem[]): TriageSummary;
+export { authorKindOf };