@svp-labs/talos 0.0.0 → 0.1.0

package/dist/review/assemble.js

@@ -0,0 +1,80 @@
+import { ownerApproval } from './approval.js';
+import { lastMove } from './github.js';
+import { guardedPaths, protectedPaths } from './guard.js';
+import { testIntegrity } from './integrity.js';
+import { reviewerState, waitsForPerson } from './reviewer.js';
+import { pullRules } from './rules.js';
+import { labelSetter, outsideScope, touchedPaths, typeOf } from './scope.js';
+function isTalosRepo(repo, who) {
+    return repo.toLowerCase() === who.talosRepo.toLowerCase();
+}
+/** The one issue the PR closes in this repository, when it closes exactly one. */
+export function ticketIssue(closing, repo) {
+    const [only] = closing.issues;
+    return closing.total === 1 && only?.repo.toLowerCase() === repo.toLowerCase() ? only : undefined;
+}
+function unattendedFacts(facts, touched, hit) {
+    const { issue, config } = facts;
+    const type = issue === undefined ? undefined : typeOf(issue.labels);
+    return {
+        closingCount: facts.closing.total,
+        issue: issue === undefined
+            ? undefined
+            : {
+                number: issue.number,
+                type,
+                setter: type === undefined
+                    ? 'unknown'
+                    : labelSetter(facts.issueEvents, type, facts.who.reviewer),
+            },
+        outside: issue === undefined || type === undefined
+            ? [...touched]
+            : outsideScope(touched, issue.body, type),
+        guarded: guardedPaths(touched, {
+            extensions: facts.extensions,
+            briefs: config.docs.briefs,
+            glossary: config.docs.glossary,
+        }),
+        integrity: testIntegrity(facts.files, facts.files.length >= facts.pull.changedFiles),
+        protectedPaths: hit,
+        isTalos: isTalosRepo(facts.repo, facts.who),
+    };
+}
+/** The decision's input: every condition's facts, from what was read and this run's review. */
+export function decisionInput(facts, run) {
+    const { pull, who } = facts;
+    const touched = touchedPaths(facts.files);
+    const hit = protectedPaths(touched, facts.config.protected);
+    const reviews = run?.kind === 'reviewed' ? [...facts.reviews, run.review] : facts.reviews;
+    return {
+        rules: pullRules({
+            author: pull.author,
+            headRef: pull.headRef,
+            body: pull.body,
+            prefix: facts.config.prefix,
+            repo: facts.repo,
+            closing: facts.closing.issues,
+        }),
+        reviewer: reviewerState({
+            agentsOn: facts.agentsOn,
+            reviews,
+            reviewer: who.reviewer,
+            head: pull.headSha,
+            run,
+            waitsForPerson: waitsForPerson(facts),
+        }),
+        owner: ownerApproval({
+            headSha: pull.headSha,
+            lastPushAt: lastMove(facts.pullEvents),
+            reviews,
+            commits: facts.commits,
+            commitCount: pull.commits,
+            author: pull.author,
+            owners: facts.owners.length > 0 ? facts.owners : [who.owner],
+            thea: who.thea,
+            theaCounts: hit.length === 0 && !isTalosRepo(facts.repo, who),
+        }),
+        unattended: unattendedFacts(facts, touched, hit),
+    };
+}
+//# sourceMappingURL=assemble.js.map

package/dist/review/assemble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assemble.js","sourceRoot":"","sources":["../../src/review/assemble.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAoB,cAAc,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AA4B7E,SAAS,WAAW,CAAC,IAAY,EAAE,GAAe;IAChD,OAAO,IAAI,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;AAC5D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CACzB,OAA+B,EAC/B,IAAY;IAEZ,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACnG,CAAC;AAED,SAAS,eAAe,CACtB,KAAkB,EAClB,OAA0B,EAC1B,GAAsB;IAEtB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;QACjC,KAAK,EACH,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI;gBACJ,MAAM,EACJ,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;aAC/D;QACP,OAAO,EACL,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YACvC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;YACd,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;QAC7C,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE;YAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAC1B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;SAC/B,CAAC;QACF,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;QACpF,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,KAAkB,EAAE,GAA4B;IAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1F,OAAO;QACL,KAAK,EAAE,SAAS,CAAC;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;SAC9B,CAAC;QACF,QAAQ,EAAE,aAAa,CAAC;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO;YACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,GAAG;YACH,cAAc,EAAE,cAAc,CAAC,KAAK,CAAC;SACtC,CAAC;QACF,KAAK,EAAE,aAAa,CAAC;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;YACtC,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;YAC5D,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC;SAC9D,CAAC;QACF,UAAU,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/review/codeowners.js

@@ -0,0 +1,28 @@
+import { readFileAt } from '../github/contents.js';
+/** Where GitHub looks for CODEOWNERS, in the order it looks. */
+const LOCATIONS = ['.github/CODEOWNERS', 'CODEOWNERS', 'docs/CODEOWNERS'];
+/**
+ * The default owners a CODEOWNERS file names: the people on its last `*` rule, which owns every
+ * file no later rule claims. Teams and e-mail addresses are left out: neither is one login.
+ */
+export function defaultOwners(text) {
+    let owners = [];
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.replace(/(^|\s)#.*$/, '').trim();
+        const [pattern, ...rest] = line.split(/\s+/);
+        if (pattern !== '*')
+            continue;
+        owners = rest.filter((o) => /^@[\w-]+$/.test(o)).map((o) => o.slice(1));
+    }
+    return owners;
+}
+/** The default owners in the repository's CODEOWNERS at `ref`; empty when it has none. */
+export async function codeOwnersAt(gh, repo, ref) {
+    for (const path of LOCATIONS) {
+        const text = await readFileAt(gh, repo, path, ref);
+        if (text !== undefined)
+            return defaultOwners(text);
+    }
+    return [];
+}
+//# sourceMappingURL=codeowners.js.map

package/dist/review/codeowners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codeowners.js","sourceRoot":"","sources":["../../src/review/codeowners.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,gEAAgE;AAChE,MAAM,SAAS,GAAsB,CAAC,oBAAoB,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAE7F;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAC9B,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAU,EAAE,IAAY,EAAE,GAAW;IACtE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/review/conditions.js

@@ -0,0 +1,114 @@
+import { isUnattended } from './scope.js';
+export function listed(paths) {
+    const shown = paths.slice(0, 3).join(', ');
+    return paths.length > 3 ? `${shown} and ${paths.length - 3} more` : shown;
+}
+export function reviewerCondition(state) {
+    switch (state.kind) {
+        case 'off': {
+            return { met: true, line: 'the reviewer: agents are off here, so no AI review is needed' };
+        }
+        case 'approved': {
+            return { met: true, line: `the reviewer approved the head (round ${state.round})` };
+        }
+        case 'changes': {
+            const line = `the reviewer requested changes (round ${state.round}, ${state.findings} findings)`;
+            return { met: false, line };
+        }
+        case 'needs-human': {
+            return { met: false, line: 'the reviewer requested changes twice already: needs a person' };
+        }
+        case 'no-verdict': {
+            return { met: false, line: `the reviewer gave no verdict: ${state.reason}` };
+        }
+        case 'waiting': {
+            return { met: false, line: `the reviewer waits: ${state.reason}` };
+        }
+    }
+}
+function issueConditions(facts) {
+    const { issue } = facts;
+    if (issue === undefined) {
+        const line = facts.closingCount === 1
+            ? 'closes an issue of another repository; debt and chore work closes one of this one'
+            : `closes ${facts.closingCount} issues; debt and chore work closes exactly one`;
+        return [{ met: false, line }];
+    }
+    const type = issue.type ?? 'no single type';
+    const unattended = isUnattended(issue.type);
+    const setter = {
+        person: { met: true, line: `#${issue.number}'s ${type} label was set by a person` },
+        reviewer: { met: true, line: `#${issue.number}'s ${type} label was set by Talos's debt job` },
+        other: {
+            met: false,
+            line: `#${issue.number}'s ${type} label was set by an App that doesn't count`,
+        },
+        unknown: { met: false, line: `no record of who labelled #${issue.number} ${type}` },
+    };
+    return [
+        { met: true, line: `closes one issue, #${issue.number}` },
+        unattended
+            ? { met: true, line: `#${issue.number} is ${type} work` }
+            : { met: false, line: `#${issue.number} is ${type}, not chore or debt work` },
+        setter[issue.setter],
+    ];
+}
+function pathCondition(paths, none, some) {
+    return paths.length === 0
+        ? { met: true, line: none }
+        : { met: false, line: `${some}: ${listed(paths)}` };
+}
+/** The debt-and-chore conditions, each one line. */
+export function unattendedConditions(facts) {
+    return [
+        ...issueConditions(facts),
+        pathCondition(facts.outside, "stays inside its issue's Affected areas", 'touches files its issue does not name'),
+        pathCondition(facts.guarded, 'touches no guarded file', 'touches guarded files'),
+        facts.integrity.flagged
+            ? { met: false, line: `test integrity: ${facts.integrity.reasons.join('; ')}` }
+            : { met: true, line: 'test integrity: nothing flagged' },
+        pathCondition(facts.protectedPaths, 'touches no protected path', 'touches protected paths'),
+        facts.isTalos
+            ? { met: false, line: 'the Talos repository: every PR needs the owner' }
+            : { met: true, line: 'not the Talos repository' },
+    ];
+}
+const BLOCKING = new Set([
+    'changes',
+    'needs-human',
+    'no-verdict',
+]);
+function titleOf(state, input, reviewer) {
+    const rule = input.rules.find((c) => !c.met);
+    if (rule !== undefined)
+        return `Fails: ${rule.line}`;
+    if (state === 'fail')
+        return `Fails: ${reviewer.line}`;
+    if (state === 'wait') {
+        return reviewer.met ? "Waits for the owner's approval" : `Waits: ${reviewer.line}`;
+    }
+    return input.owner.approved
+        ? 'Passes: the owner approved'
+        : 'Passes as debt or chore work, without the owner';
+}
+export function decide(input) {
+    const reviewer = reviewerCondition(input.reviewer);
+    const owner = { met: input.owner.approved, line: input.owner.line };
+    const unattended = unattendedConditions(input.unattended);
+    const rulesMet = input.rules.every((c) => c.met);
+    const unattendedMet = unattended.every((c) => c.met);
+    let state = 'wait';
+    if (rulesMet && reviewer.met && (owner.met || unattendedMet))
+        state = 'pass';
+    else if (!rulesMet || BLOCKING.has(input.reviewer.kind))
+        state = 'fail';
+    return {
+        state,
+        title: titleOf(state, input, reviewer),
+        rules: input.rules,
+        reviewer,
+        owner,
+        unattended,
+    };
+}
+//# sourceMappingURL=conditions.js.map

package/dist/review/conditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.js","sourceRoot":"","sources":["../../src/review/conditions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAoB,MAAM,YAAY,CAAC;AAoD5D,MAAM,UAAU,MAAM,CAAC,KAAwB;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAoB;IACpD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,8DAA8D,EAAE,CAAC;QAC7F,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,yCAAyC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACtF,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,yCAAyC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,YAAY,CAAC;YACjG,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,8DAA8D,EAAE,CAAC;QAC9F,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAsB;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,GACR,KAAK,CAAC,YAAY,KAAK,CAAC;YACtB,CAAC,CAAC,mFAAmF;YACrF,CAAC,CAAC,UAAU,KAAK,CAAC,YAAY,iDAAiD,CAAC;QACpF,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAA6C;QACvD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,MAAM,IAAI,4BAA4B,EAAE;QACnF,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,MAAM,IAAI,oCAAoC,EAAE;QAC7F,KAAK,EAAE;YACL,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,MAAM,IAAI,6CAA6C;SAC9E;QACD,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE;KACpF,CAAC;IACF,OAAO;QACL,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,KAAK,CAAC,MAAM,EAAE,EAAE;QACzD,UAAU;YACR,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,OAAO,IAAI,OAAO,EAAE;YACzD,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,OAAO,IAAI,0BAA0B,EAAE;QAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAwB,EAAE,IAAY,EAAE,IAAY;IACzE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,oBAAoB,CAAC,KAAsB;IACzD,OAAO;QACL,GAAG,eAAe,CAAC,KAAK,CAAC;QACzB,aAAa,CACX,KAAK,CAAC,OAAO,EACb,yCAAyC,EACzC,uCAAuC,CACxC;QACD,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,CAAC;QAChF,KAAK,CAAC,SAAS,CAAC,OAAO;YACrB,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YAC/E,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,iCAAiC,EAAE;QAC1D,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,2BAA2B,EAAE,yBAAyB,CAAC;QAC3F,KAAK,CAAC,OAAO;YACX,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,gDAAgD,EAAE;YACxE,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B,EAAE;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAuC,IAAI,GAAG,CAAC;IAC3D,SAAS;IACT,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,KAAoB,EAAE,KAAoB,EAAE,QAAmB;IAC9E,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,UAAU,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,UAAU,QAAQ,CAAC,IAAI,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ;QACzB,CAAC,CAAC,4BAA4B;QAC9B,CAAC,CAAC,iDAAiD,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAoB;IACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAc,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/E,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,GAAkB,MAAM,CAAC;IAClC,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC;QAAE,KAAK,GAAG,MAAM,CAAC;SACxE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,KAAK,GAAG,MAAM,CAAC;IACxE,OAAO;QACL,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;QACtC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,KAAK;QACL,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/review/github.js

@@ -0,0 +1,206 @@
+import { z } from 'zod';
+import { propertyValuesSchema } from '../github/repos.js';
+/**
+ * The REST and GraphQL reads `talos/review` makes, and the review it submits. Each validates
+ * what it relies on; unknown fields are dropped and a missing one is an error, never a guess.
+ */
+const user = z.object({ login: z.string(), type: z.string().optional() }).nullable().optional();
+const pullSchema = z.object({
+    number: z.number().int().positive(),
+    state: z.string(),
+    draft: z.boolean().optional(),
+    title: z.string(),
+    body: z.string().nullable().optional(),
+    user,
+    author_association: z.string().optional(),
+    head: z.object({ sha: z.string(), ref: z.string() }),
+    base: z.object({ ref: z.string() }),
+    commits: z.number().int().nonnegative(),
+    changed_files: z.number().int().nonnegative(),
+    labels: z.array(z.object({ name: z.string() })).default([]),
+});
+export async function getPull(gh, repo, n) {
+    const raw = pullSchema.parse(await gh.request('GET', `repos/${repo}/pulls/${n}`));
+    return {
+        number: raw.number,
+        state: raw.state,
+        draft: raw.draft ?? false,
+        title: raw.title,
+        body: raw.body ?? '',
+        author: raw.user?.login,
+        association: raw.author_association,
+        headSha: raw.head.sha,
+        headRef: raw.head.ref,
+        baseRef: raw.base.ref,
+        commits: raw.commits,
+        changedFiles: raw.changed_files,
+        labels: raw.labels.map((label) => label.name),
+    };
+}
+const fileSchema = z.object({
+    filename: z.string(),
+    status: z.string(),
+    previous_filename: z.string().optional(),
+    changes: z.number().int().nonnegative(),
+    patch: z.string().optional(),
+});
+/** The PR's changed files with their patches; GitHub lists at most 3000. */
+export async function listPullFiles(gh, repo, n) {
+    const raw = await gh.paginate(`repos/${repo}/pulls/${n}/files`);
+    return z
+        .array(fileSchema)
+        .parse(raw)
+        .map((file) => ({
+        path: file.filename,
+        status: file.status,
+        previousPath: file.previous_filename,
+        changes: file.changes,
+        patch: file.patch,
+    }));
+}
+const reviewSchema = z.object({
+    user,
+    state: z.string(),
+    commit_id: z.string().nullable().optional(),
+    submitted_at: z.string().nullable().optional(),
+    body: z.string().nullable().optional(),
+});
+function toReview(raw) {
+    return {
+        author: raw.user?.login,
+        state: raw.state,
+        commitId: raw.commit_id ?? undefined,
+        submittedAt: raw.submitted_at ?? undefined,
+        body: raw.body ?? '',
+    };
+}
+/** Every review on the PR, oldest first. */
+export async function listReviews(gh, repo, n) {
+    const raw = await gh.paginate(`repos/${repo}/pulls/${n}/reviews`);
+    return z.array(reviewSchema).parse(raw).map(toReview);
+}
+const commitSchema = z.object({
+    sha: z.string(),
+    commit: z.object({
+        verification: z.object({ verified: z.boolean() }).nullable().optional(),
+    }),
+    author: user,
+    committer: user,
+});
+/** The PR's commits; GitHub lists at most 250. */
+export async function listPullCommits(gh, repo, n) {
+    const raw = await gh.paginate(`repos/${repo}/pulls/${n}/commits`);
+    return z
+        .array(commitSchema)
+        .parse(raw)
+        .map((c) => ({
+        sha: c.sha,
+        verified: c.commit.verification?.verified === true,
+        author: c.author?.login,
+        committer: c.committer?.login,
+    }));
+}
+const eventSchema = z.object({
+    event: z.string(),
+    label: z.object({ name: z.string() }).nullable().optional(),
+    actor: user,
+    created_at: z.string().nullable().optional(),
+});
+/** An issue's or a PR's events, oldest first: labelling, force-pushes, base changes. */
+export async function listIssueEvents(gh, repo, n) {
+    const raw = await gh.paginate(`repos/${repo}/issues/${n}/events`);
+    return z
+        .array(eventSchema)
+        .parse(raw)
+        .map((e) => ({
+        event: e.event,
+        label: e.label?.name,
+        actor: e.actor?.login,
+        actorType: e.actor?.type,
+        createdAt: e.created_at ?? undefined,
+    }));
+}
+const propertySchema = propertyValuesSchema;
+/**
+ * Whether the repository's `talos-agents` property is on. Read from the properties endpoint,
+ * which refuses a token that can't see them, rather than from the repository's own record, which
+ * leaves them out silently and would read as off.
+ */
+export async function agentsOn(gh, repo) {
+    const raw = await gh.request('GET', `repos/${repo}/properties/values`);
+    const values = propertySchema.parse(raw);
+    return values.some((p) => p.property_name === 'talos-agents' && p.value === 'true');
+}
+const MOVES = new Set(['head_ref_force_pushed', 'base_ref_changed']);
+/**
+ * When the PR's head last moved in a way its sha alone doesn't show: a force-push (which can
+ * bring back a commit reviewed before) or a change of base (which changes the diff).
+ */
+export function lastMove(events) {
+    let latest;
+    for (const event of events) {
+        const at = event.createdAt;
+        if (!MOVES.has(event.event) || at === undefined)
+            continue;
+        if (latest === undefined || Date.parse(at) > Date.parse(latest))
+            latest = at;
+    }
+    return latest;
+}
+const CLOSING_QUERY = `query($owner: String!, $name: String!, $number: Int!) {
+  repository(owner: $owner, name: $name) {
+    pullRequest(number: $number) {
+      closingIssuesReferences(first: 10) {
+        totalCount
+        nodes { number repository { nameWithOwner } }
+      }
+    }
+  }
+}`;
+const closingSchema = z.object({
+    repository: z
+        .object({
+        pullRequest: z
+            .object({
+            closingIssuesReferences: z.object({
+                totalCount: z.number().int().nonnegative(),
+                nodes: z.array(z
+                    .object({
+                    number: z.number().int().positive(),
+                    repository: z.object({ nameWithOwner: z.string() }),
+                })
+                    .nullable()),
+            }),
+        })
+            .nullable(),
+    })
+        .nullable(),
+});
+/** The issues the PR closes when it merges, as GitHub links them, and how many there are. */
+export async function closingIssues(gh, repo, n) {
+    const [owner = '', name = ''] = repo.split('/');
+    const data = closingSchema.parse(await gh.graphql(CLOSING_QUERY, { owner, name, number: n }));
+    const refs = data.repository?.pullRequest?.closingIssuesReferences;
+    if (refs === undefined)
+        return { issues: [], total: 0 };
+    const issues = refs.nodes.flatMap((node) => node === null ? [] : [{ number: node.number, repo: node.repository.nameWithOwner }]);
+    return { issues, total: Math.max(refs.totalCount, issues.length) };
+}
+/** Submits a review with its inline comments, each on the head's side of the diff. */
+export async function submitReview(gh, repo, n, review) {
+    const raw = await gh.request('POST', `repos/${repo}/pulls/${n}/reviews`, {
+        body: {
+            commit_id: review.commitId,
+            event: review.event,
+            body: review.body,
+            comments: review.comments.map((c) => ({
+                path: c.path,
+                line: c.line,
+                side: 'RIGHT',
+                body: c.body,
+            })),
+        },
+    });
+    return toReview(reviewSchema.parse(raw));
+}
+//# sourceMappingURL=github.js.map

package/dist/review/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/review/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;;GAGG;AAEH,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;AAEhG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,IAAI;IACJ,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAU,EAAE,IAAY,EAAE,CAAS;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,CAAU,KAAK,EAAE,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK;QACzB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK;QACvB,WAAW,EAAE,GAAG,CAAC,kBAAkB;QACnC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QACrB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QACrB,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU,EAAE,IAAY,EAAE,CAAS;IACrE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAU,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzE,OAAO,CAAC;SACL,KAAK,CAAC,UAAU,CAAC;SACjB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,QAAQ;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,iBAAiB;QACpC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI;IACJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,GAAiC;IACjD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK;QACvB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACpC,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,SAAS;QAC1C,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAU,EAAE,IAAY,EAAE,CAAS;IACnE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAU,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACxE,CAAC;IACF,MAAM,EAAE,IAAI;IACZ,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,IAAY,EAAE,CAAS;IACvE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAU,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3E,OAAO,CAAC;SACL,KAAK,CAAC,YAAY,CAAC;SACnB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,KAAK,IAAI;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK;QACvB,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK;KAC9B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,IAAY,EAAE,CAAS;IACvE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAU,SAAS,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IAC3E,OAAO,CAAC;SACL,KAAK,CAAC,WAAW,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK;QACrB,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI;QACxB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;KACrC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,cAAc,GAAG,oBAAoB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAU,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAU,KAAK,EAAE,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,cAAc,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE1F;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,MAA6B;IACpD,IAAI,MAA0B,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS;QAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,aAAa,GAAG;;;;;;;;;EASpB,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,WAAW,EAAE,CAAC;aACX,MAAM,CAAC;YACN,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;gBAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC;qBACE,MAAM,CAAC;oBACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBACnC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;iBACpD,CAAC;qBACD,QAAQ,EAAE,CACd;aACF,CAAC;SACH,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU,EACV,IAAY,EACZ,CAAS;IAET,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAC9B,MAAM,EAAE,CAAC,OAAO,CAAU,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CACrE,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,uBAAuB,CAAC;IACnE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,CACpF,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC;AAWD,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,IAAY,EACZ,CAAS,EACT,MAAwB;IAExB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAU,MAAM,EAAE,SAAS,IAAI,UAAU,CAAC,UAAU,EAAE;QAChF,IAAI,EAAE;YACJ,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;SACJ;KACF,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/review/guard.js

@@ -0,0 +1,119 @@
+import picomatch from 'picomatch';
+import { isDeclaringFile } from '../checks/runtime/declarations.js';
+import { DEPTRAC_PROJECT } from '../langs/php/deptrac-config.js';
+/**
+ * The guard list: files a debt or chore PR may never touch to land without the owner, because
+ * they steer the gate, the review, the supply chain, the runtime or the agents themselves.
+ */
+/** Dependency manifests, lock files and package-manager settings, by file name. */
+const MANIFESTS = new Set([
+    'package.json',
+    'package-lock.json',
+    'npm-shrinkwrap.json',
+    'pnpm-lock.yaml',
+    'pnpm-workspace.yaml',
+    'yarn.lock',
+    'bun.lock',
+    'bun.lockb',
+    'deno.json',
+    'deno.jsonc',
+    'deno.lock',
+    '.npmrc',
+    '.yarnrc',
+    '.yarnrc.yml',
+    'pyproject.toml',
+    'setup.py',
+    'setup.cfg',
+    'Pipfile',
+    'Pipfile.lock',
+    'poetry.lock',
+    'uv.lock',
+    'uv.toml',
+    'pdm.lock',
+    'composer.json',
+    'composer.lock',
+    'Cargo.toml',
+    'Cargo.lock',
+    'go.sum',
+    'Gemfile',
+    'Gemfile.lock',
+    'pom.xml',
+    'build.gradle',
+    'build.gradle.kts',
+    'gradle.lockfile',
+    'packages.lock.json',
+    'Directory.Packages.props',
+    'luarocks.lock',
+]);
+/**
+ * Version files the runtime check doesn't read, by file name; every file it reads (Dockerfiles,
+ * `.nvmrc` and the rest) is guarded through the same predicate the check uses.
+ */
+const RUNTIMES = new Set(['.ruby-version', '.tool-versions']);
+/**
+ * Agent instructions, decision records and the project's architecture rules that a tool runs as
+ * written rather than through a generated base, by file name, wherever they sit.
+ */
+const INSTRUCTIONS = new Set([
+    'CLAUDE.md',
+    'DECISIONS.md',
+    'CODEOWNERS',
+    DEPTRAC_PROJECT,
+]);
+const PATTERNS = [
+    /^\.github\//,
+    /^\.claude\//,
+    /(?:^|\/)requirements[^/]*\.(?:txt|in)$/,
+    /(?:^|\/)requirements\/[^/]+\.(?:txt|in)$/,
+    /(?:^|\/)constraints[^/]*\.txt$/,
+    /\.(?:rockspec|gemspec|csproj|fsproj|vbproj)$/,
+];
+/** Every tool-config extension file the packs declare, each once. */
+export function extensionFiles(packs) {
+    const paths = packs.flatMap((pack) => (pack.generated ?? []).flatMap((file) => file.extension === undefined ? [] : [file.extension.path]));
+    return [...new Set(paths)].sort((a, b) => a.localeCompare(b));
+}
+function basename(path) {
+    return path.slice(path.lastIndexOf('/') + 1);
+}
+function withoutTrailingSlash(path) {
+    let end = path.length;
+    while (end > 0 && path[end - 1] === '/')
+        end -= 1;
+    return path.slice(0, end);
+}
+function under(path, dir) {
+    const prefix = withoutTrailingSlash(dir);
+    return prefix !== '' && (path === prefix || path.startsWith(`${prefix}/`));
+}
+/**
+ * Whether a path is on the guard list. Extension files count at any depth, since a component may
+ * sit anywhere; so do manifests, Dockerfiles and agent instructions.
+ */
+export function isGuarded(path, ctx) {
+    const name = basename(path);
+    if (path === 'talos.yml' || path === ctx.glossary || under(path, ctx.briefs))
+        return true;
+    if (MANIFESTS.has(name) || RUNTIMES.has(name) || INSTRUCTIONS.has(name))
+        return true;
+    if (isDeclaringFile(path))
+        return true;
+    if (ctx.extensions.some((ext) => path === ext || path.endsWith(`/${ext}`)))
+        return true;
+    return PATTERNS.some((pattern) => pattern.test(path));
+}
+export function guardedPaths(paths, ctx) {
+    return paths.filter((path) => isGuarded(path, ctx));
+}
+/**
+ * The paths among `paths` that `talos.yml`'s `protected` globs match. A glob without wildcards
+ * names a file or a whole folder.
+ */
+export function protectedPaths(paths, globs) {
+    if (globs.length === 0)
+        return [];
+    const expanded = globs.flatMap((glob) => [glob, `${withoutTrailingSlash(glob)}/**`]);
+    const matches = picomatch(expanded, { dot: true });
+    return paths.filter((path) => matches(path));
+}
+//# sourceMappingURL=guard.js.map

package/dist/review/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/review/guard.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE;;;GAGG;AAEH,mFAAmF;AACnF,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC;IAC7C,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,gBAAgB;IAChB,qBAAqB;IACrB,WAAW;IACX,UAAU;IACV,WAAW;IACX,WAAW;IACX,YAAY;IACZ,WAAW;IACX,QAAQ;IACR,SAAS;IACT,aAAa;IACb,gBAAgB;IAChB,UAAU;IACV,WAAW;IACX,SAAS;IACT,cAAc;IACd,aAAa;IACb,SAAS;IACT,SAAS;IACT,UAAU;IACV,eAAe;IACf,eAAe;IACf,YAAY;IACZ,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,cAAc;IACd,SAAS;IACT,cAAc;IACd,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,0BAA0B;IAC1B,eAAe;CAChB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEnF;;;GAGG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,WAAW;IACX,cAAc;IACd,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAsB;IAClC,aAAa;IACb,aAAa;IACb,wCAAwC;IACxC,0CAA0C;IAC1C,gCAAgC;IAChC,8CAA8C;CAC/C,CAAC;AAUF,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,KAAyC;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAC1D,CACF,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,IAAI,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW;IACtC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,GAAiB;IACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,GAAG,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAwB,EAAE,GAAiB;IACtE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAwB,EAAE,KAAwB;IAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/review/header.js

@@ -0,0 +1,61 @@
+import { markerFields } from '../status/markers.js';
+import { clip } from '../ticket/payload.js';
+/**
+ * The reviewer's review body. Its first line is `talos-review/1`, which Thea's hub turns into an
+ * event; the rest lists the findings, so the event carries enough to start the next round.
+ */
+const REVIEW_MARKER = 'talos-review/1';
+/** Breaks a mention without changing how it reads. */
+const ZERO_WIDTH_SPACE = '\u200B';
+const SUMMARY_MAX = 400;
+const FINDING_MAX = 200;
+const LISTED = 20;
+export function headerLine(header) {
+    return `${REVIEW_MARKER} verdict=${header.verdict} round=${header.round} findings=${header.findings}`;
+}
+const COUNT = /^\d{1,4}$/;
+/**
+ * The header of a reviewer review, or `undefined` when its first line is no such header: a
+ * `talos-review/1` line whose verdict, round and count of findings are all there.
+ */
+export function parseHeader(body) {
+    const fields = markerFields(body, REVIEW_MARKER);
+    const verdict = fields?.verdict;
+    const round = fields?.round ?? '';
+    const findings = fields?.findings ?? '';
+    if (verdict !== 'APPROVE' && verdict !== 'REQUEST_CHANGES')
+        return undefined;
+    if (!COUNT.test(round) || !COUNT.test(findings))
+        return undefined;
+    return { verdict, round: Number(round), findings: Number(findings) };
+}
+/**
+ * The model's words, made safe to post: no mentions that would notify anyone, no approval
+ * marker for anything to mistake, no control characters.
+ */
+export function defused(text) {
+    return text
+        .replaceAll(/[^\P{Cc}\t\n\r]/gu, '')
+        .replaceAll(/talos-approve/gi, 'talos approve')
+        .replaceAll(/(^|[^\w`])@(?=[A-Za-z0-9])/g, `$1@${ZERO_WIDTH_SPACE}`);
+}
+function oneLine(text, max) {
+    return clip(defused(text).replaceAll(/\s+/g, ' ').trim(), max);
+}
+function place(finding) {
+    if (finding.path === undefined)
+        return '';
+    const where = finding.line === undefined ? finding.path : `${finding.path}:${finding.line}`;
+    return `\`${where.replaceAll('`', "'")}\` `;
+}
+/** The whole review body: the header line, the summary, and the findings, capped. */
+export function reviewBody(header, summary, findings) {
+    const lines = [headerLine(header), '', oneLine(summary, SUMMARY_MAX)];
+    if (findings.length > 0) {
+        lines.push('', ...findings.slice(0, LISTED).map((f) => `- ${place(f)}${oneLine(f.body, FINDING_MAX)}`));
+        if (findings.length > LISTED)
+            lines.push(`- and ${findings.length - LISTED} more`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=header.js.map