@revisium/orchestrator 0.1.0-alpha.9 → 0.2.0-alpha.0

package/dist/runners/gh-identity.js

@@ -1,43 +1,14 @@
-/**
- * gh-identity.ts — pin the gh CLI to an explicit, NON-SECRET account name (0008 #1).
- *
- * Proven failure (2026-06-10 live dogfood): the integrator shelled `gh pr create` using the
- * AMBIENT active gh account. On a multi-account machine the active account flips
- * (anton62k push:false ↔ revisium-io push:true), so PR creation failed and the workflow
- * went silently to DBOS ERROR. The fix: resolve a non-secret identity NAME (default
- * `revisium-io`) → host-resolve its token (env/keyring) → spawn gh with `GH_TOKEN` pinned.
- * `GH_TOKEN` takes precedence over gh's active account, so the flip can no longer break us.
- *
- * SECRET BOUNDARY: only the non-secret account NAME is config (env `REVO_GH_ACCOUNT`).
- * The token is resolved host-side at call time and lives only in the spawned gh process env —
- * NEVER persisted to Revisium, never logged. Least-privilege: only the integrator builds a
- * pinned execGh; the LLM runners get no git/gh creds.
- *
- * DBOS-SEALED: zero @dbos-inc imports.
- */
 import { execFileSync } from 'node:child_process';
-/** Default non-secret gh account identity (push:true/admin on the org repos). */
 export const DEFAULT_GH_ACCOUNT = 'revisium-io';
 const defaultExecFile = (file, args, opts) => execFileSync(file, args, opts);
-/**
- * Resolve the NON-SECRET gh account name from config/env. Never a token.
- * Falls back to DEFAULT_GH_ACCOUNT when unset/blank.
- */
 export function resolveGhAccount(env = process.env) {
     const raw = env['REVO_GH_ACCOUNT'];
     const account = typeof raw === 'string' ? raw.trim() : '';
     return account.length > 0 ? account : DEFAULT_GH_ACCOUNT;
 }
-/** Per-account env override key, e.g. account "revisium-io" → "GH_TOKEN_REVISIUM_IO". */
 export function ghTokenEnvKey(account) {
     return `GH_TOKEN_${account.toUpperCase().replace(/[^A-Z0-9]+/g, '_')}`;
 }
-/**
- * Host-resolve the gh token for a non-secret account name (never stored in Revisium):
- *   1. explicit env override GH_TOKEN_<ACCOUNT> (CI / headless) — takes precedence.
- *   2. the gh keyring entry for that specific account (`gh auth token --user <account>`).
- * Returns undefined when no token can be resolved (caller falls back to ambient gh).
- */
 export function resolveGhToken(account, deps) {
     const env = deps?.env ?? process.env;
     const execFile = deps?.execFile ?? defaultExecFile;
@@ -52,16 +23,9 @@ export function resolveGhToken(account, deps) {
         return out.length > 0 ? out : undefined;
     }
     catch {
-        // gh missing / account not in keyring — fall back to ambient gh (returns undefined).
         return undefined;
     }
 }
-/**
- * Build an ExecGhFn that PINS the gh account by setting GH_TOKEN on the spawned gh process.
- * When `token` is undefined the gh call is left on the ambient account (degraded — logged once
- * by the caller). The OS-level timeout + maxBuffer mirror defaultExecGh (a hung/runaway gh is
- * killed; the synchronous spawn blocks the event loop so no JS timer could otherwise fire).
- */
 export function makeExecGh(opts) {
     const execFile = opts?.execFile ?? defaultExecFile;
     const baseEnv = opts?.env ?? process.env;
@@ -70,17 +34,6 @@ export function makeExecGh(opts) {
     const env = opts?.token ? { ...baseEnv, GH_TOKEN: opts.token } : baseEnv;
     return (args) => execFile('gh', args, { encoding: 'utf8', timeout, maxBuffer, env });
 }
-/**
- * Resolve the pinned gh identity into a ready-to-use ExecGhFn, or FAIL LOUD (0008 #1 hardening).
- *
- * The 2026-06-12 dogfood proved the original silent fallback was wrong: when the pinned token
- * could not be resolved (e.g. a detached/headless host where `gh auth token --user` can't reach
- * the macOS keychain), the integrator fell back to the AMBIENT gh account and opened a PR as the
- * wrong user — re-introducing the exact bug #1 exists to prevent. We now REFUSE to fall back:
- * an unresolved pinned identity returns needsHuman so the integrator blocks for a human instead
- * of opening a PR as the wrong account. The keyring-free fix is to set GH_TOKEN_<ACCOUNT> in the
- * host env (works headless), which resolveGhToken checks first.
- */
 export function resolvePinnedGh(deps) {
     const env = deps?.env ?? process.env;
     const account = resolveGhAccount(env);
@@ -97,11 +50,6 @@ export function resolvePinnedGh(deps) {
     return { execGh: makeExecGh({ token, env, execFile: deps?.execFile }) };
 }
 const TOKEN_PATTERN = /\b(?:gh[opsru]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,})\b/g;
-/**
- * Mask GitHub token shapes in a free-text string (gho_/ghp_/ghs_/ghr_/ghu_ + github_pat_).
- * redactSecrets (inbox.ts) only masks secret-shaped object KEYS; an error/lesson string that
- * happens to echo a token needs this string-level pass before it is persisted to Revisium.
- */
 export function redactTokens(text) {
     return text.replace(TOKEN_PATTERN, '[REDACTED]');
 }

package/dist/runners/gh-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"gh-identity.js","sourceRoot":"","sources":["../../src/runners/gh-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAShD,MAAM,eAAe,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEzF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC3D,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,YAAY,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,IAAyD;IAEzD,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,eAAe,CAAC;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEvF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;YAC/D,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAM1B;IACC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,eAAe,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,OAAO,CAAC,IAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AACjG,CAAC;AAKD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,IAAyD;IACvF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EACJ,wDAAwD,OAAO,2CAA2C;gBAC1G,kFAAkF,aAAa,CAAC,OAAO,CAAC,MAAM;gBAC9G,6FAA6F,OAAO,QAAQ;gBAC5G,qBAAqB;SACxB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,aAAa,GAAG,kEAAkE,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"gh-identity.js","sourceRoot":"","sources":["../../src/runners/gh-identity.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAShD,MAAM,eAAe,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAIzF,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC3D,CAAC;AAGD,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,YAAY,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC;AACzE,CAAC;AAMD,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,IAAyD;IAEzD,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,eAAe,CAAC;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEvF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;YAC/D,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAMD,MAAM,UAAU,UAAU,CAAC,IAM1B;IACC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,eAAe,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,IAAI,MAAM,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,OAAO,CAAC,IAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AACjG,CAAC;AAcD,MAAM,UAAU,eAAe,CAAC,IAAyD;IACvF,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EACJ,wDAAwD,OAAO,2CAA2C;gBAC1G,kFAAkF,aAAa,CAAC,OAAO,CAAC,MAAM;gBAC9G,6FAA6F,OAAO,QAAQ;gBAC5G,qBAAqB;SACxB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,aAAa,GAAG,kEAAkE,CAAC;AAKzF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC"}

package/dist/runners/integrator-branch-naming.js

@@ -1,10 +1,3 @@
-/**
- * integrator-branch-naming — deterministic feature-branch naming from a task.
- *
- * `branchName` is the contract between the worktree manager and the integrator (plan 0017): the
- * worktree is created already checked out on the SAME branch the integrator commits/pushes on, so the
- * two must derive an identical name from (taskId, title). Lifted from integrator.ts.
- */
 const SLUG_MAX = 40;
 function slugify(text) {
     return text
@@ -14,25 +7,29 @@ function slugify(text) {
         .filter((seg) => seg.length > 0)
         .join('-')
         .slice(0, SLUG_MAX)
-        .replace(/-+$/, ''); // slice() may cut mid-separator — never leave a trailing '-' (invalid-looking ref)
+        .replace(/-+$/, '');
 }
-// The unique tail of a machine taskId is the segment after the LAST '_'
-// (`task_<stamp>_<titleSlug>_<idSuffix>` → `<idSuffix>`). Falls back to a sanitized
-// whole id when there is no usable trailing segment, so the branch stays unique + a valid ref.
 function shortId(taskId) {
-    const tail = taskId.slice(taskId.lastIndexOf('_') + 1); // lastIndexOf -1 → whole id (no underscore)
+    const tail = taskId.slice(taskId.lastIndexOf('_') + 1);
     return slugify(tail) || slugify(taskId) || 'task';
 }
-/** Derive deterministic feature branch name from taskId + title. Exported so the worktree manager
- *  checks out the SAME branch the integrator commits/pushes on (plan 0017). */
-export function branchName(taskId, title) {
+function issueBoundSlug(title, issueRef) {
+    const issueSlug = `issue-${issueRef.number}`;
+    const titleSlug = slugify(title);
+    if (!titleSlug)
+        return issueSlug;
+    const titleMax = Math.max(0, SLUG_MAX - issueSlug.length - 1);
+    const titlePart = titleSlug.slice(0, titleMax).replace(/-+$/, '');
+    return titlePart ? `${issueSlug}-${titlePart}` : issueSlug;
+}
+export function branchName(taskId, title, issueRef) {
     const id = shortId(taskId);
     const slug = slugify(title);
-    return slug ? `feat/${id}-${slug}` : `feat/${id}`; // drop empty slug so no trailing '-'
+    if (issueRef) {
+        return `feat/${id}-${issueBoundSlug(title, issueRef)}`;
+    }
+    return slug ? `feat/${id}-${slug}` : `feat/${id}`;
 }
-/** The `feat/<shortId>-` prefix shared by every branch `branchName(taskId, *)` can produce.
- *  Use this in emulators/assertions to scope gh-call lookups to a specific task without knowing
- *  the title. */
 export function taskBranchPrefix(taskId) {
     return `feat/${shortId(taskId)}-`;
 }

package/dist/runners/integrator-branch-naming.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrator-branch-naming.js","sourceRoot":"","sources":["../../src/runners/integrator-branch-naming.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/B,IAAI,CAAC,GAAG,CAAC;SACT,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,mFAAmF;AAC5G,CAAC;AAED,wEAAwE;AACxE,oFAAoF;AACpF,+FAA+F;AAC/F,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,4CAA4C;IACpG,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AACpD,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa;IACtD,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,qCAAqC;AAC1F,CAAC;AAED;;iBAEiB;AACjB,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,QAAQ,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACpC,CAAC"}
+{"version":3,"file":"integrator-branch-naming.js","sourceRoot":"","sources":["../../src/runners/integrator-branch-naming.ts"],"names":[],"mappings":"AAOA,MAAM,QAAQ,GAAG,EAAE,CAAC;AAEpB,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;SAC/B,IAAI,CAAC,GAAG,CAAC;SACT,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAkB;IACvD,MAAM,SAAS,GAAG,SAAS,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa,EAAE,QAAmB;IAC3E,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,EAAE,IAAI,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;AACpD,CAAC;AAGD,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,QAAQ,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;AACpC,CAAC"}

package/dist/runners/integrator-git.js

@@ -1,25 +1,10 @@
-/**
- * integrator-git — git-binary resolution + the pure git primitives the integrator needs
- * (branch existence, ahead-count). Lifted from integrator.ts. `resolveExecutable` is also imported by
- * the worktree manager, so integrator.ts re-exports it to keep that import path stable.
- */
 import { existsSync, statSync } from 'node:fs';
 import { join, delimiter } from 'node:path';
-/**
- * Resolve a bare executable name to its first absolute path on PATH.
- * Uses only node:fs + node:path — no child_process, no spawning.
- *
- * @param name  - bare executable name, e.g. "git"
- * @param pathEnv - override for PATH (defaults to process.env.PATH); injectable for tests
- * @returns absolute path to the executable
- * @throws Error if not found on PATH
- */
 export function resolveExecutable(name, pathEnv = process.env['PATH'] ?? '') {
     if (!pathEnv) {
         throw new Error(`cannot resolve executable "${name}" on PATH: PATH is empty or unset`);
     }
     const dirs = pathEnv.split(delimiter);
-    // On win32 also check common executable extensions; on posix the plain name suffices.
     const candidates = process.platform === 'win32'
         ? [name, `${name}.exe`, `${name}.cmd`, `${name}.bat`]
         : [name];
@@ -34,13 +19,11 @@ export function resolveExecutable(name, pathEnv = process.env['PATH'] ?? '') {
                 }
             }
             catch {
-                // dir may be unreadable — skip silently
             }
         }
     }
     throw new Error(`cannot resolve executable "${name}" on PATH`);
 }
-// Lazily resolved once per process — avoids resolving on module load (safe for tests).
 let _gitAbsPath;
 export function gitAbsPath() {
     if (_gitAbsPath === undefined) {
@@ -48,7 +31,6 @@ export function gitAbsPath() {
     }
     return _gitAbsPath;
 }
-/** Branch existence check — returns true if the branch exists locally. */
 export function branchExists(execGit, cwd, branch) {
     try {
         execGit(['rev-parse', '--verify', branch], cwd);
@@ -58,11 +40,6 @@ export function branchExists(execGit, cwd, branch) {
         return false;
     }
 }
-/**
- * Count commits on branch ahead of origin/<base>.
- * Returns 0 only for expected "no upstream / unknown revision / ambiguous argument" errors
- * (these mean the branch is not ahead). Rethrows other errors so DBOS can retry transient failures.
- */
 export function countAhead(execGit, cwd, branch, base) {
     try {
         const raw = execGit(['rev-list', '--count', `origin/${base}..${branch}`], cwd).trim();
@@ -70,14 +47,12 @@ export function countAhead(execGit, cwd, branch, base) {
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
-        // Expected: branch or upstream not yet known to git (not a transient failure).
         if (msg.includes('unknown revision') ||
             msg.includes('ambiguous argument') ||
             msg.includes('no upstream') ||
             msg.includes('does not have any commits yet')) {
             return 0;
         }
-        // Transient failure (network, lock, etc.) — rethrow so DBOS retries.
         throw err;
     }
 }

package/dist/runners/integrator-git.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrator-git.js","sourceRoot":"","sources":["../../src/runners/integrator-git.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG5C;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;IACjF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,mCAAmC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEtC,sFAAsF;IACtF,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC;QACrD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,uFAAuF;AACvF,IAAI,WAA+B,CAAC;AACpC,MAAM,UAAU,UAAU;IACxB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,GAAW,EAAE,MAAc;IACvE,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW,EAAE,MAAc,EAAE,IAAY;IACnF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,KAAK,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,+EAA+E;QAC/E,IACE,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAC7C,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,qEAAqE;QACrE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"integrator-git.js","sourceRoot":"","sources":["../../src/runners/integrator-git.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAU5C,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;IACjF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,mCAAmC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEtC,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC;QACrD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,IAAI,WAA+B,CAAC;AACpC,MAAM,UAAU,UAAU;IACxB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAGD,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,GAAW,EAAE,MAAc;IACvE,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAKD,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW,EAAE,MAAc,EAAE,IAAY;IACnF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,KAAK,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IACE,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAClC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAC7C,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/runners/integrator-remote.js

@@ -1,5 +1,3 @@
-// Owner and repo: GitHub-safe chars only ([A-Za-z0-9._-]); trailing .git stripped; no trailing paths.
-// Non-greedy repo segment (+?) allows the (?:\.git)? suffix to back-trim a trailing ".git".
 const GITHUB_SSH_RE = /^git@github\.com:([A-Za-z0-9._-]+\/[A-Za-z0-9._-]+?)(?:\.git)?$/;
 const GITHUB_HTTPS_RE = /^https?:\/\/github\.com\/([A-Za-z0-9._-]+\/[A-Za-z0-9._-]+?)(?:\.git)?$/;
 export function parseOwnerRepo(remoteUrl) {

package/dist/runners/integrator-remote.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrator-remote.js","sourceRoot":"","sources":["../../src/runners/integrator-remote.ts"],"names":[],"mappings":"AAMA,sGAAsG;AACtG,4FAA4F;AAC5F,MAAM,aAAa,GAAG,iEAAiE,CAAC;AACxF,MAAM,eAAe,GAAG,yEAAyE,CAAC;AAElG,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,GAAW;IAEX,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EACJ,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,8EAA8E,SAAS,GAAG;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}
+{"version":3,"file":"integrator-remote.js","sourceRoot":"","sources":["../../src/runners/integrator-remote.ts"],"names":[],"mappings":"AAIA,MAAM,aAAa,GAAG,iEAAiE,CAAC;AACxF,MAAM,eAAe,GAAG,yEAAyE,CAAC;AAElG,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,GAAW;IAEX,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EACJ,wGAAwG;SAC3G,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,8EAA8E,SAAS,GAAG;SACnG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}

package/dist/runners/integrator-types.js

@@ -1,9 +1,2 @@
-/**
- * integrator-types — the foundational shapes every integrator module shares.
- *
- * Lifted out of integrator.ts so the extracted git / remote helpers can take these by type without
- * importing back into the orchestrator (which would form a cycle). integrator.ts re-exports them, so
- * the public import path ('./integrator.js') — used by the test kit and fake-integrator — is unchanged.
- */
 export {};
 //# sourceMappingURL=integrator-types.js.map

package/dist/runners/integrator-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrator-types.js","sourceRoot":"","sources":["../../src/runners/integrator-types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}
+{"version":3,"file":"integrator-types.js","sourceRoot":"","sources":["../../src/runners/integrator-types.ts"],"names":[],"mappings":""}