@straiffi/archon 1.8.6 → 1.8.8

package/dist/server/index.js

@@ -8,6 +8,8 @@ import { createHash, randomUUID } from 'crypto';
 import cors from 'cors';
 import { adjectives, animals, uniqueNamesGenerator } from 'unique-names-generator';
 import db from './db.js';
+import { pruneAllRepositoryGraphScans } from './lib/repositoryGraphRetention.js';
+import { registerRepositoryGraphRoutes } from './lib/repositoryGraphRoutes.js';
 import { deleteChatSession, getChatSession, listChatSessions } from './lib/chats.js';
 import { deleteSpecSession, getCreatedTicketIdsForSnapshot, getSpecSession, getSpecSnapshot, listSpecSessions } from './lib/specs.js';
 import { createChatAttachment, createSpecAttachment, getAttachmentById, deleteChatAttachment, deleteProjectAttachments, deleteSpecSessionAttachment, getChatAttachmentForSession, getChatAttachmentLinkedMessageId, getSpecAttachmentForSession, getSpecAttachmentLinkedMessageId, MAX_CHAT_ATTACHMENTS_PER_TURN, MAX_CHAT_ATTACHMENT_SIZE_BYTES, MAX_SPEC_ATTACHMENTS_PER_TURN, MAX_SPEC_ATTACHMENT_SIZE_BYTES, readChatAttachmentContent, readSpecAttachmentContent, validateImageAttachment, } from './lib/attachments.js';
@@ -19,7 +21,7 @@ import { resolveSessionTargetForExecution } from './lib/sessionTargets.js';
 import { createChatMessage, getChatMessage, updateChatMessageContent } from './lib/chatMessages.js';
 import { attachChatTicketProposalsToMessageContent } from './lib/chatTicketProposals.js';
 import { createCorsOriginResolver, parseCorsOrigins } from './lib/cors.js';
-import { abortGitOperation, branchExistsLocally, commitGitChanges, createWorktreeAsync, deleteWorktree, getBundleReviewDiffForCwd, getGitDiffData, getGitDiffFiles, getGitStatus, getGitUnifiedDiff, getLocalProjectBranch, getProjectBranch, getProjectBranchSuggestions, getSelectedGitUnifiedDiff, getUnpushedCommitDiffForCwd, getUnpushedCommitSummaryForCwd, hasKnownBranchRef, listUnpushedCommitsForCwd, pullGitBranch, pushCurrentBranch, rebaseGitBranchOntoBase, resolveExistingWorktreePath, resolveWorktreePath, squashUnpushedCommitsForCwd, summarizeTicketDiffFiles, switchProjectBranch, syncWorktreeFilesAsync, undoLatestUnpushedCommitForCwd, UnpushedCommitDiffSelectionError } from './lib/git.js';
+import { abortGitOperation, branchExistsLocally, commitGitChanges, createWorktreeAsync, deleteWorktree, getBundleReviewDiffForCwd, getGitDiffDataAsync, getGitDiffFiles, getGitStatus, getGitStatusAsync, getGitUnifiedDiff, getGitUnifiedDiffAsync, getLocalProjectBranch, getProjectBranch, getProjectBranchSuggestions, getSelectedGitUnifiedDiff, getUnpushedCommitDiffForCwd, getUnpushedCommitSummaryForCwd, getUnpushedCommitSummaryForCwdAsync, hasKnownBranchRef, listUnpushedCommitsForCwd, pullGitBranch, pushCurrentBranch, rebaseGitBranchOntoBase, resolveExistingWorktreePath, resolveWorktreePath, squashUnpushedCommitsForCwd, summarizeTicketDiffFiles, switchProjectBranch, syncWorktreeFilesAsync, undoLatestUnpushedCommitForCwd, UnpushedCommitDiffSelectionError } from './lib/git.js';
 import config from './lib/config.js';
 import { autoConfigProject, ProjectAutoConfigError } from './lib/projectAutoConfig.js';
 import { analyzeRepoPath, createInitialCommit, ensureInitialCommitForWorktrees, initializeGitRepo, isInitialCommitRequiredError, } from './lib/projectRepos.js';
@@ -70,7 +72,7 @@ import { ExecutionArtifactCleanupError, reconcileExecutionArtifactRegistrationIn
 import { closeHttpServer, shutdownRealtimeServer } from './lib/shutdown.js';
 import { resolveClientBuildPaths, shouldServeClientApp, STATIC_CLIENT_DIRECTORY_OPTIONS, STATIC_CLIENT_INDEX_OPTIONS, } from './lib/staticClient.js';
 import { deleteIntegrationConnection, getGitHubConnectionConfig, getJiraConnectionConfig, listIntegrationConnections, upsertIntegrationConnection, } from './lib/integrations/index.js';
-import { createGitHubPullRequest, createOrFindGitHubPullRequest, findOpenGitHubPullRequest, findOpenGitHubPullRequestByHeadBranch, getGitHubPullRequestComments, getGitHubPullRequestReviews, getGitHubPullRequest, GitHubApiError, hasGitHubRemoteBranch, resolveGitHubRepository, validateGitHubConnection, } from './lib/integrations/github.js';
+import { createGitHubPullRequest, createOrFindGitHubPullRequest, findOpenGitHubPullRequest, findOpenGitHubPullRequestByHeadBranch, getGitHubPullRequestComments, getGitHubPullRequestReviews, getGitHubPullRequest, GitHubApiError, hasGitHubRemoteBranch, hasGitHubRemoteBranchAsync, resolveGitHubRepository, validateGitHubConnection, } from './lib/integrations/github.js';
 import { importJiraIssue, JiraApiError, prepareJiraIssueImport, validateJiraConnection } from './lib/integrations/jira.js';
 import { importGitHubIssue, prepareGitHubIssueImport } from './lib/integrations/github-issues.js';
 import { buildImportedIssueSessionTitle, importProviderHostedIssueImages } from './lib/integrations/importedIssueImages.js';
@@ -91,6 +93,7 @@ import { getCheckAttemptDiagnosticResponse, getCheckBatchDiagnosticResponse } fr
 import { getCheckDefinitionFingerprint } from './lib/checkDefinitions.js';
 import { getCheckGateEvaluation, hydrateCheckGatePresentApplicability } from './lib/checkGateEvaluations.js';
 import { captureCheckWorkspaceIdentity } from './lib/checkWorkspaceIdentity.js';
+import { hasActiveBundleRepositoryGraphScan, hasActiveProjectRepositoryGraphScan } from './lib/repositoryGraphStore.js';
 import { resolveEffectiveRequiredCheckPolicyMembership, resolveRequiredCheckPolicy } from './lib/requiredCheckPolicy.js';
 import { getBundleBuildBlockerResponse, shouldStartBundleBuildNow, transitionTicketState, } from './lib/ticketWorkflowOperations.js';
 import { submitPlanTicketFollowUp, submitTicketFollowUp, } from './lib/ticketFollowUpOperations.js';
@@ -1443,8 +1446,8 @@ const bundlePullRequestDiscoveryErrorTimestamps = new Map();
 const bundlePullRequestSyncInFlight = new Map();
 const bundlePullRequestSyncErrorTimestamps = new Map();
 const getBundlePullRequestDiscoveryKey = (projectId, bundleId) => `${projectId}:${bundleId}`;
-const startPassiveGitHubWork = (label, callback) => {
-    setImmediate(() => {
+const startPassiveGitHubWork = (response, label, callback) => {
+    const start = () => setImmediate(() => {
         try {
             callback();
         }
@@ -1452,6 +1455,11 @@ const startPassiveGitHubWork = (label, callback) => {
             console.warn(`[integrations] github passive work failed ${label}`, error);
         }
     });
+    if (response.writableFinished) {
+        start();
+        return;
+    }
+    response.once('finish', start);
 };
 const isBundlePullRequestDiscoveryCoolingDown = (timestamps, key, cooldownMs) => {
     const lastAttemptAt = timestamps.get(key);
@@ -1475,9 +1483,6 @@ const shouldDiscoverBundlePullRequestOnOpen = (project, bundle) => {
     if (tickets.some(ticket => ticket.agent_status === 'running')) {
         return false;
     }
-    if (!hasGitHubRemoteBranch(project.repo_path, bundle.branch)) {
-        return false;
-    }
     const key = getBundlePullRequestDiscoveryKey(project.id, bundle.id);
     if (bundlePullRequestDiscoveryInFlight.has(key)) {
         return false;
@@ -1491,6 +1496,9 @@ const startBundlePullRequestDiscoveryIfNeeded = (project, bundle) => {
     const key = getBundlePullRequestDiscoveryKey(project.id, bundle.id);
     const task = (async () => {
         try {
+            if (!await hasGitHubRemoteBranchAsync(project.repo_path, bundle.branch)) {
+                return;
+            }
             const discoveredPullRequest = await discoverOpenBundlePullRequest(project, bundle);
             if (!discoveredPullRequest) {
                 bundlePullRequestDiscoveryMissTimestamps.set(key, Date.now());
@@ -1498,7 +1506,7 @@ const startBundlePullRequestDiscoveryIfNeeded = (project, bundle) => {
             }
             bundlePullRequestDiscoveryMissTimestamps.delete(key);
             bundlePullRequestDiscoveryErrorTimestamps.delete(key);
-            reconcileBundleTicketsAfterPullRequestSync(project.id, bundle.id);
+            emitBundlePullRequestUpdated(project.id, bundle.id);
         }
         catch (error) {
             bundlePullRequestDiscoveryErrorTimestamps.set(key, Date.now());
@@ -1587,9 +1595,10 @@ const startTrackedBundlePullRequestSyncIfNeeded = (project, bundle, options = {}
     const key = getBundlePullRequestDiscoveryKey(project.id, bundle.id);
     const task = (async () => {
         try {
-            await syncTrackedBundlePullRequestIfNeeded(project, bundle, { ...options, rethrow: true });
+            const nextPullRequest = await syncTrackedBundlePullRequestIfNeeded(project, bundle, { ...options, rethrow: true });
             bundlePullRequestSyncErrorTimestamps.delete(key);
-            reconcileBundleTicketsAfterPullRequestSync(project.id, bundle.id);
+            emitBundlePullRequestUpdated(project.id, bundle.id);
+            scheduleBundleTicketReconciliationIfTerminal(project.id, bundle.id, nextPullRequest?.state ?? null);
         }
         catch (error) {
             bundlePullRequestSyncErrorTimestamps.set(key, Date.now());
@@ -1666,6 +1675,26 @@ const reconcileBundleTicketsAfterPullRequestSync = (projectId, bundleId) => {
         }
     }
 };
+const emitBundlePullRequestUpdated = (projectId, bundleId) => {
+    io.emit('bundle-pull-request:updated', {
+        project_id: projectId,
+        bundle_id: bundleId,
+        pull_request: serializeBundlePullRequest(getBundlePullRequestRecord(bundleId, projectId)),
+    });
+};
+const scheduleBundleTicketReconciliationIfTerminal = (projectId, bundleId, nextState) => {
+    if (nextState !== 'merged' && nextState !== 'closed') {
+        return;
+    }
+    setImmediate(() => {
+        try {
+            reconcileBundleTicketsAfterPullRequestSync(projectId, bundleId);
+        }
+        catch (error) {
+            console.warn(`[integrations] github pr ticket reconciliation failed project=${projectId} bundle=${bundleId}`, error);
+        }
+    });
+};
 const syncProjectBundlePullRequestsIfNeeded = async (project, bundles, options = {}) => {
     let startedCount = 0;
     for (const bundle of bundles) {
@@ -1995,7 +2024,7 @@ const buildBundleTickets = (projectId, bundleId, broadcaster) => {
         value: details,
     };
 };
-const getCurrentReviewWorkspaceSignature = (ticket) => {
+const getCurrentReviewWorkspaceSignature = async (ticket) => {
     if (!ticket) {
         return null;
     }
@@ -2003,9 +2032,9 @@ const getCurrentReviewWorkspaceSignature = (ticket) => {
     if ('error' in workspace) {
         return null;
     }
-    return getGitStatus(workspace.cwd, workspace.branch, workspace.project).workspace_signature ?? null;
+    return (await getGitStatusAsync(workspace.cwd, workspace.branch, workspace.project)).workspace_signature ?? null;
 };
-const getCurrentReviewDiffSignature = (ticket) => {
+const getCurrentReviewDiffSignature = async (ticket) => {
     if (!ticket) {
         return null;
     }
@@ -2013,9 +2042,9 @@ const getCurrentReviewDiffSignature = (ticket) => {
     if ('error' in workspace) {
         return null;
     }
-    return computeDiffSignature(getGitUnifiedDiff(workspace.cwd));
+    return computeDiffSignature(await getGitUnifiedDiffAsync(workspace.cwd));
 };
-const getBundleReviewFindings = (projectId, bundleId) => {
+const getBundleReviewFindings = async (projectId, bundleId) => {
     const bundle = getBundle(bundleId, projectId);
     if (!bundle) {
         return null;
@@ -2046,13 +2075,13 @@ const getBundleReviewFindings = (projectId, bundleId) => {
     return buildReviewFindingsResponse({
         context,
         isContextRunning: tickets.some(ticket => ticket.agent_status === 'running'),
-        currentWorkspaceSignature: getCurrentReviewWorkspaceSignature(representativeTicket),
+        currentWorkspaceSignature: await getCurrentReviewWorkspaceSignature(representativeTicket),
         currentDiffSignature: latestReviewRun && latestReviewRun.workspace_signature === null
-            ? getCurrentReviewDiffSignature(representativeTicket)
+            ? await getCurrentReviewDiffSignature(representativeTicket)
             : null,
     });
 };
-const getTicketReviewFindings = (ticketId) => {
+const getTicketReviewFindings = async (ticketId) => {
     const ticket = getTicketRouteContext(ticketId);
     if (!ticket) {
         return null;
@@ -2066,9 +2095,9 @@ const getTicketReviewFindings = (ticketId) => {
     return buildReviewFindingsResponse({
         context,
         isContextRunning: ticket.agent_status === 'running',
-        currentWorkspaceSignature: getCurrentReviewWorkspaceSignature(ticket),
+        currentWorkspaceSignature: await getCurrentReviewWorkspaceSignature(ticket),
         currentDiffSignature: latestReviewRun && latestReviewRun.workspace_signature === null
-            ? getCurrentReviewDiffSignature(ticket)
+            ? await getCurrentReviewDiffSignature(ticket)
             : null,
     });
 };
@@ -2426,6 +2455,7 @@ const emitRunStateForContext = (ticket, isRunningValue) => {
     }
 };
 app.use(express.json({ limit: '5mb' }));
+registerRepositoryGraphRoutes(app, { emitter: io });
 const requireDesktopMobileAccessRequest = (req, res) => {
     const rejectionReason = validateDesktopMobileAccessRequest(req);
     if (!rejectionReason) {
@@ -2714,7 +2744,7 @@ app.post('/projects/:id/chat-sessions/:sessionId/stop', async (req, res) => {
     }
     return res.status(result.status).json(result.value);
 });
-app.get('/projects/:id/chat-sessions/:sessionId/diff', (req, res) => {
+app.get('/projects/:id/chat-sessions/:sessionId/diff', async (req, res) => {
     const project = getProjectById(req.params.id);
     if (!project) {
         return res.status(404).json({ error: 'Not found' });
@@ -2727,14 +2757,14 @@ app.get('/projects/:id/chat-sessions/:sessionId/diff', (req, res) => {
     if (!workspace.target_available || !workspace.cwd) {
         return res.status(409).json({ error: workspace.target_unavailable_reason ?? 'Chat target is unavailable.' });
     }
-    const diffData = getGitDiffData(workspace.cwd);
+    const diffData = await getGitDiffDataAsync(workspace.cwd);
     return res.json({
         stats: summarizeTicketDiffFiles(diffData.files),
         files: diffData.files,
         diff: diffData.diff,
     });
 });
-app.get('/projects/:id/chat-sessions/:sessionId/git-status', (req, res) => {
+app.get('/projects/:id/chat-sessions/:sessionId/git-status', async (req, res) => {
     const project = getProjectById(req.params.id);
     if (!project) {
         return res.status(404).json({ error: 'Not found' });
@@ -2747,7 +2777,7 @@ app.get('/projects/:id/chat-sessions/:sessionId/git-status', (req, res) => {
     if (!workspace.target_available || !workspace.cwd) {
         return res.status(409).json({ error: workspace.target_unavailable_reason ?? 'Chat target is unavailable.' });
     }
-    return res.json(getGitStatus(workspace.cwd, workspace.branch, project));
+    return res.json(await getGitStatusAsync(workspace.cwd, workspace.branch, project));
 });
 app.delete('/projects/:id/chat-sessions/:sessionId', (req, res) => {
     const project = getProjectById(req.params.id);
@@ -3328,14 +3358,14 @@ app.get('/tickets/:id', async (req, res) => {
     res.json(ticket);
     if (passivePullRequestContext) {
         const { project, bundle } = passivePullRequestContext;
-        startPassiveGitHubWork('ticket-open-pr-sync', () => {
+        startPassiveGitHubWork(res, 'ticket-open-pr-sync', () => {
             startTrackedBundlePullRequestSyncIfNeeded(project, bundle);
             startBundlePullRequestDiscoveryIfNeeded(project, bundle);
         });
     }
     return;
 });
-app.get('/tickets/:id/review-findings', (req, res) => {
+app.get('/tickets/:id/review-findings', async (req, res) => {
     const ticket = getTicketRouteContext(req.params.id);
     if (!ticket) {
         return res.status(404).json({ error: 'Not found' });
@@ -3343,7 +3373,7 @@ app.get('/tickets/:id/review-findings', (req, res) => {
     if (!matchesTicketProjectContext(ticket, req)) {
         return res.status(404).json({ error: 'Not found' });
     }
-    const response = getTicketReviewFindings(ticket.id);
+    const response = await getTicketReviewFindings(ticket.id);
     if (!response) {
         return res.status(404).json({ error: 'Not found' });
     }
@@ -3359,7 +3389,7 @@ app.get('/tickets/:id/agent-runs', (req, res) => {
     }
     return res.json({ runs: listAgentRunsForParent('ticket', ticket.id) });
 });
-app.get('/tickets/:id/diff', (req, res) => {
+app.get('/tickets/:id/diff', async (req, res) => {
     const ticket = getTicketRouteContext(req.params.id);
     if (!ticket) {
         return res.status(404).json({ error: 'Not found' });
@@ -3372,7 +3402,7 @@ app.get('/tickets/:id/diff', (req, res) => {
         const { status, error } = workspace;
         return res.status(status).json({ error });
     }
-    const diffData = getGitDiffData(workspace.cwd);
+    const diffData = await getGitDiffDataAsync(workspace.cwd);
     return res.json({
         stats: summarizeTicketDiffFiles(diffData.files),
         files: diffData.files,
@@ -3393,7 +3423,7 @@ app.get('/tickets/:id/committed-diff', (req, res) => {
     }
     return sendUnpushedCommitDiff(res, workspace, getCommitHashQuery(req));
 });
-app.get('/tickets/:id/git-status', (req, res) => {
+app.get('/tickets/:id/git-status', async (req, res) => {
     const ticket = getTicketRouteContext(req.params.id);
     if (!ticket) {
         return res.status(404).json({ error: 'Not found' });
@@ -3406,9 +3436,9 @@ app.get('/tickets/:id/git-status', (req, res) => {
         return res.status(workspace.status).json({ error: workspace.error });
     }
     const refreshRemote = req.query.refresh_remote === 'true';
-    return res.json(getGitStatus(workspace.cwd, workspace.branch, workspace.project, { refreshRemote }));
+    return res.json(await getGitStatusAsync(workspace.cwd, workspace.branch, workspace.project, { refreshRemote }));
 });
-app.get('/tickets/:id/git-commits', (req, res) => {
+app.get('/tickets/:id/git-commits', async (req, res) => {
     const ticket = getTicketRouteContext(req.params.id);
     if (!ticket) {
         return res.status(404).json({ error: 'Not found' });
@@ -3420,7 +3450,7 @@ app.get('/tickets/:id/git-commits', (req, res) => {
     if ('error' in workspace) {
         return res.status(workspace.status).json({ error: workspace.error });
     }
-    const summary = getUnpushedCommitSummaryForCwd(workspace.cwd, workspace.branch, workspace.project);
+    const summary = await getUnpushedCommitSummaryForCwdAsync(workspace.cwd, workspace.branch, workspace.project);
     return res.json({ commits: summary.commits, total_count: summary.totalCount });
 });
 app.get('/bundles', async (req, res) => {
@@ -3440,7 +3470,7 @@ app.get('/bundles', async (req, res) => {
     timing.mark('serialize_bundles');
     timing.end({ count: serializedBundles.length });
     res.json(serializedBundles);
-    startPassiveGitHubWork('project-bundle-pr-sync', () => {
+    startPassiveGitHubWork(res, 'project-bundle-pr-sync', () => {
         startProjectBundlePullRequestSyncIfNeeded(result.project, bundles);
     });
 });
@@ -3468,16 +3498,16 @@ app.get('/bundles/:id/conversation', (req, res) => {
     }
     const payload = serializeBundleConversationDetails(result.project, bundle);
     res.json(payload);
-    startPassiveGitHubWork('bundle-conversation-pr-discovery', () => {
+    startPassiveGitHubWork(res, 'bundle-conversation-pr-discovery', () => {
         startBundlePullRequestDiscoveryIfNeeded(result.project, bundle);
     });
 });
-app.get('/bundles/:id/review-findings', (req, res) => {
+app.get('/bundles/:id/review-findings', async (req, res) => {
     const result = getRequiredProject(req);
     if ('error' in result) {
         return res.status(400).json({ error: result.error });
     }
-    const response = getBundleReviewFindings(result.project.id, req.params.id);
+    const response = await getBundleReviewFindings(result.project.id, req.params.id);
     if (!response) {
         return res.status(404).json({ error: 'Bundle not found' });
     }
@@ -3641,6 +3671,7 @@ app.post('/bundles/:id/pull-request', async (req, res) => {
             headBranch: bundle.branch,
         });
         upsertBundlePullRequestFromGitHub(result.project.id, bundle.id, githubConfig, nextPullRequest);
+        emitBundlePullRequestUpdated(result.project.id, bundle.id);
         return res.json(serializeBundleDetails(result.project, bundle));
     }
     catch (error) {
@@ -3668,7 +3699,7 @@ app.post('/bundles/:id/pull-request/sync', async (req, res) => {
     if (!trackedPullRequest) {
         try {
             trackedPullRequest = await discoverOpenBundlePullRequest(result.project, bundle);
-            reconcileBundleTicketsAfterPullRequestSync(result.project.id, bundle.id);
+            emitBundlePullRequestUpdated(result.project.id, bundle.id);
             return res.json(serializeBundleDetails(result.project, bundle));
         }
         catch (error) {
@@ -3681,8 +3712,9 @@ app.post('/bundles/:id/pull-request/sync', async (req, res) => {
     }
     try {
         const nextPullRequest = await getGitHubPullRequest(githubConfig, trackedPullRequest.number);
-        upsertBundlePullRequestFromGitHub(result.project.id, bundle.id, githubConfig, nextPullRequest);
-        reconcileBundleTicketsAfterPullRequestSync(result.project.id, bundle.id);
+        const nextRecord = upsertBundlePullRequestFromGitHub(result.project.id, bundle.id, githubConfig, nextPullRequest);
+        emitBundlePullRequestUpdated(result.project.id, bundle.id);
+        scheduleBundleTicketReconciliationIfTerminal(result.project.id, bundle.id, nextRecord?.state ?? null);
         console.info(`[integrations] github pr sync completed project=${result.project.id} bundle=${bundle.id} pr=${trackedPullRequest.number}`);
         return res.json(serializeBundleDetails(result.project, bundle));
     }
@@ -3825,6 +3857,9 @@ app.delete('/bundles/:id', (req, res) => {
     if (hasActiveBundleSpecWork(result.project.id, bundle.id)) {
         return res.status(409).json({ error: 'Cannot delete a bundle while Spec work is active' });
     }
+    if (hasActiveBundleRepositoryGraphScan(result.project.id, bundle.id)) {
+        return res.status(409).json({ error: 'Cannot delete a bundle while a repository graph scan is active' });
+    }
     if (countBundleTickets(bundle.id, result.project.id) > 0) {
         return res.status(409).json({ error: 'Cannot delete a bundle that is still used by tickets' });
     }
@@ -6843,7 +6878,7 @@ app.post('/projects/:id/git-abort', async (req, res) => {
         return res.status(500).json({ error: 'Unable to determine project branch' });
     }
 });
-app.get('/projects/:id/diff', (req, res) => {
+app.get('/projects/:id/diff', async (req, res) => {
     const project = getProjectById(req.params.id);
     if (!project) {
         return res.status(404).json({ error: 'Not found' });
@@ -6852,7 +6887,7 @@ app.get('/projects/:id/diff', (req, res) => {
     if ('error' in workspace) {
         return res.status(workspace.status).json({ error: workspace.error });
     }
-    const diffData = getGitDiffData(workspace.cwd);
+    const diffData = await getGitDiffDataAsync(workspace.cwd);
     return res.json({
         stats: summarizeTicketDiffFiles(diffData.files),
         files: diffData.files,
@@ -6870,7 +6905,7 @@ app.get('/projects/:id/committed-diff', (req, res) => {
     }
     return sendUnpushedCommitDiff(res, workspace, getCommitHashQuery(req));
 });
-app.get('/projects/:id/git-status', (req, res) => {
+app.get('/projects/:id/git-status', async (req, res) => {
     const project = getProjectById(req.params.id);
     if (!project) {
         return res.status(404).json({ error: 'Not found' });
@@ -6880,9 +6915,9 @@ app.get('/projects/:id/git-status', (req, res) => {
         return res.status(workspace.status).json({ error: workspace.error });
     }
     const refreshRemote = req.query.refresh_remote === 'true';
-    return res.json(getGitStatus(workspace.cwd, workspace.branch, workspace.project, { refreshRemote }));
+    return res.json(await getGitStatusAsync(workspace.cwd, workspace.branch, workspace.project, { refreshRemote }));
 });
-app.get('/projects/:id/git-commits', (req, res) => {
+app.get('/projects/:id/git-commits', async (req, res) => {
     const project = getProjectById(req.params.id);
     if (!project) {
         return res.status(404).json({ error: 'Not found' });
@@ -6891,7 +6926,7 @@ app.get('/projects/:id/git-commits', (req, res) => {
     if ('error' in workspace) {
         return res.status(workspace.status).json({ error: workspace.error });
     }
-    const summary = getUnpushedCommitSummaryForCwd(workspace.cwd, workspace.branch, workspace.project);
+    const summary = await getUnpushedCommitSummaryForCwdAsync(workspace.cwd, workspace.branch, workspace.project);
     return res.json({ commits: summary.commits, total_count: summary.totalCount });
 });
 app.post('/projects/:id/git-commit', async (req, res) => {
@@ -7248,6 +7283,9 @@ const assertProjectDeletionEligible = (projectId, claimId) => {
     if (hasActiveProjectCheckBatch(projectId)) {
         throw new ProjectDeletionError(409, 'Cannot delete a project while checks are active');
     }
+    if (!claimId && hasActiveProjectRepositoryGraphScan(projectId)) {
+        throw new ProjectDeletionError(409, 'Cannot delete a project while a repository graph scan is active');
+    }
 };
 const completeClaimedProjectDeletion = async (projectId, claimId) => {
     await runExclusiveExecutionArtifactMaintenance(() => reconcileProjectExecutionArtifacts(projectId, {
@@ -9082,6 +9120,15 @@ const runExecutionEvidenceCleanup = () => {
     catch (error) {
         console.error('Failed to clean up expired execution evidence', error);
     }
+    try {
+        const result = pruneAllRepositoryGraphScans();
+        if (result.total > 0) {
+            console.log(`Pruned ${result.total} repository graph scan(s): ${result.completed} completed, ${result.non_completed} non-completed`);
+        }
+    }
+    catch (error) {
+        console.error('Failed to prune repository graph scans', error);
+    }
 };
 const startExecutionEvidenceCleanupTimer = () => {
     if (executionEvidenceCleanupTimer) {
@@ -9155,6 +9202,13 @@ export const startServer = ({ port = DEFAULT_PORT, host } = {}) => {
         releaseInterruptedProjectDeletionClaims();
         await resumeInterruptedProjectDeletions();
         await reconcileStartupExecutions({ getGitHubConfig: getGitHubConnectionConfig });
+        const repositoryGraphSchemaExists = db.prepare(`
+      SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'repository_graph_scans'
+    `).get();
+        if (repositoryGraphSchemaExists) {
+            const graphScans = await import('./lib/repositoryGraphScan.js');
+            graphScans.openRepositoryGraphScanAdmissions();
+        }
         throwIfShutdownRequested();
         await runExecutionArtifactCleanup('startup');
         throwIfShutdownRequested();
@@ -9215,6 +9269,12 @@ export const shutdownServer = async (signal) => {
         }
         await executionArtifactCleanupPromise;
         await stopMobileAccess();
+        const repositoryGraphSchemaExists = db.prepare(`
+      SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'repository_graph_scans'
+    `).get();
+        if (repositoryGraphSchemaExists) {
+            await (await import('./lib/repositoryGraphScan.js')).shutdownRepositoryGraphScans();
+        }
         await shutdownCheckRunner();
         await clearAllTestSessions(io);
         await clearAllGitHubActionsSessions();