@toon-protocol/rig 5.3.0 → 5.4.0

package/dist/{chunk-KQ4NQV7T.js → chunk-Z3XRZ5E5.js}

@@ -4,6 +4,7 @@ import {
   CI_SERVICE_REQUEST_KIND,
   CI_SERVICE_STOP_KIND,
   CI_STATUS_USAGE,
+  CI_TRUST_ORDER,
   CI_WORKFLOW_PROGRESS_KIND,
   CI_WORKFLOW_RESULT_KIND,
   GitRepoReader,
@@ -27,11 +28,13 @@ import {
   earliestUniqueCommit,
   emitCliError,
   encryptSecretUpdate,
+  evaluateCiGate,
   executePush,
   generateSecretsKey,
   getGitRemoteUrls,
   hexToNpub,
   initGitRepository,
+  isCiTrustLevel,
   isRelayUrl,
   isSafeRefname,
   listGitRemotes,
@@ -58,13 +61,13 @@ import {
   updateRef,
   writeGitObjects,
   writeToonConfig
-} from "./chunk-DGF7WCRW.js";
+} from "./chunk-MIK7SRWE.js";
 import {
   PREFERRED_GATEWAY,
   mirrorGatewaysFor,
   readGateways,
   shaResolverFor
-} from "./chunk-UXRWMKXV.js";
+} from "./chunk-QSUO7J4H.js";
 import {
   COMMENT_KIND,
   DEFAULT_KEYSTORE_PASSWORD,
@@ -93,7 +96,7 @@ import {
   resolveIdentity,
   revisionRootId,
   selectRevision
-} from "./chunk-OVZJ5P6E.js";
+} from "./chunk-3KS6S4S5.js";
 import {
   ChannelMapStore,
   channelStatus,
@@ -322,7 +325,7 @@ function loadPaidSession(deps, relayUrl) {
   });
 }
 var defaultLoadStandalone = async (options) => {
-  const mod = await import("./standalone-mode-E7TNMWGO.js");
+  const mod = await import("./standalone-mode-LUWNCDPL.js");
   return mod.createStandaloneContext(options);
 };
 function identityReport(ctx) {
@@ -2520,7 +2523,7 @@ async function runCi(args, deps) {
     case "status":
       return runCiStatus(rest, deps);
     case "serve":
-      return (await import("./ci-serve-R7ZQ7GJQ.js")).runCiServe(rest, deps);
+      return (await import("./ci-serve-4RJCKEPV.js")).runCiServe(rest, deps);
     case "--help":
     case "-h":
     case "help":
@@ -2796,7 +2799,7 @@ import {
   PATCH_KIND as PATCH_KIND3,
   REPOSITORY_ANNOUNCEMENT_KIND as REPOSITORY_ANNOUNCEMENT_KIND3,
   STATUS_APPLIED_KIND as STATUS_APPLIED_KIND3,
-  STATUS_CLOSED_KIND as STATUS_CLOSED_KIND2,
+  STATUS_CLOSED_KIND as STATUS_CLOSED_KIND3,
   STATUS_DRAFT_KIND as STATUS_DRAFT_KIND2,
   STATUS_OPEN_KIND as STATUS_OPEN_KIND2
 } from "@toon-protocol/core/nip34";
@@ -2811,7 +2814,8 @@ import { promisify } from "util";
 import {
   PATCH_KIND as PATCH_KIND2,
   REPOSITORY_ANNOUNCEMENT_KIND as REPOSITORY_ANNOUNCEMENT_KIND2,
-  STATUS_APPLIED_KIND as STATUS_APPLIED_KIND2
+  STATUS_APPLIED_KIND as STATUS_APPLIED_KIND2,
+  STATUS_CLOSED_KIND as STATUS_CLOSED_KIND2
 } from "@toon-protocol/core/nip34";
 
 // src/cli/fetch.ts
@@ -3649,6 +3653,12 @@ reported as a partial success; retry with \`rig pr status <patch-id> applied\`.
 Options:
   --target <branch>    branch to merge onto (default: the patch's branch-name
                        tag, else the repo's default branch)
+  --require-ci-trust <level>
+                       refuse the merge, before paying, unless the patch
+                       series' head commit has a concluded green CI run at or
+                       above this trust level (same gate as \`rig ci status\`)
+  --closes <issue-id>  after a successful merge, publish closed (kind:1632)
+                       for this issue; repeatable
   --yes                skip the confirmation prompt
   --json               machine-readable output (without --yes: estimate only)
   --relay <url>        ad-hoc relay override (bypasses git remotes)
@@ -3666,6 +3676,8 @@ function parseMergeArgs(args) {
       remote: { type: "string" },
       "repo-id": { type: "string" },
       owner: { type: "string" },
+      "require-ci-trust": { type: "string" },
+      closes: { type: "string", multiple: true },
       standalone: { type: "boolean", default: false },
       "no-daemon": { type: "boolean", default: false },
       help: { type: "boolean", short: "h", default: false }
@@ -3687,8 +3699,23 @@ function parseMergeArgs(args) {
     patchId,
     yes: values.yes === true,
     json: values.json === true,
-    relay: values.relay ?? []
+    relay: values.relay ?? [],
+    closes: [...new Set(values.closes ?? [])]
   };
+  for (const id of flags.closes) {
+    if (!HEX64_RE3.test(id)) {
+      throw new Error("--closes must be a 64-character lowercase hex issue id");
+    }
+  }
+  const level = values["require-ci-trust"];
+  if (level !== void 0) {
+    if (!isCiTrustLevel(level)) {
+      throw new Error(
+        `--require-ci-trust must be one of ${CI_TRUST_ORDER.join(" | ")} (got ${JSON.stringify(level)})`
+      );
+    }
+    flags.requireTrust = level;
+  }
   if (values.target !== void 0) flags.target = values.target;
   if (values.remote !== void 0) flags.remote = values.remote;
   if (values["repo-id"] !== void 0) flags.repoId = values["repo-id"];
@@ -3915,6 +3942,23 @@ async function runPrMerge(args, deps) {
         email: `${hexToNpub(identity.pubkey)}@nostr`
       }
     );
+    if (flags.requireTrust !== void 0) {
+      const headCommit = (latest.tags.filter((t) => t[0] === "commit").at(-1)?.[1] ?? applied.newHead).toLowerCase();
+      const gate = await evaluateCiGate({
+        relays,
+        owner,
+        repoId,
+        commit: headCommit,
+        webSocketFactory,
+        requireTrust: flags.requireTrust
+      });
+      if (!gate.ok) {
+        throw new PrMergeError(
+          "ci_gate_failed",
+          `no qualifying green CI run (trust >= ${flags.requireTrust}) for ${headCommit.slice(0, 12)}: ${gate.reason ?? "not green"}. Nothing was pushed, published, or paid.`
+        );
+      }
+    }
     const overlay = new OverlayReader(repoRoot, {
       refname,
       sha: applied.newHead
@@ -3929,12 +3973,17 @@ async function runPrMerge(args, deps) {
       force: false
     });
     const plan = serializePushPlan(pushPlan);
-    const total = BigInt(plan.estimate.totalFee) + feeRates.eventFee;
+    const total = BigInt(plan.estimate.totalFee) + feeRates.eventFee * BigInt(1 + flags.closes.length);
     if (!flags.json) {
       for (const line of renderPlan(plan)) io.out(line);
       io.out(
         `  status    kind:1631 applied (${applied.commits.length} commit${applied.commits.length === 1 ? "" : "s"})   ${feeRates.eventFee}`
       );
+      if (flags.closes.length > 0) {
+        io.out(
+          `  closes    kind:1632 closed (${flags.closes.length} issue${flags.closes.length === 1 ? "" : "s"})   ${feeRates.eventFee * BigInt(flags.closes.length)}`
+        );
+      }
       io.out(`  total with status       ${total}`);
       io.out(renderIdentityLine(identity));
     }
@@ -3999,6 +4048,25 @@ async function runPrMerge(args, deps) {
     } catch (err) {
       statusError = err instanceof Error ? err.message : String(err);
     }
+    const closed = [];
+    const closeErrors = [];
+    for (const issueId of flags.closes) {
+      try {
+        await ctx.publisher.publishEvent(
+          buildStatus(owner, repoId, issueId, STATUS_CLOSED_KIND2),
+          relays
+        );
+        closed.push(issueId);
+      } catch (err) {
+        closeErrors.push({
+          issueId,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+    }
+    const closeRetryHints = closeErrors.map(
+      (e) => `rig issue close ${e.issueId}`
+    );
     const retryHint = `rig pr status ${root.id} applied`;
     if (flags.json) {
       io.emitJson({
@@ -4010,6 +4078,8 @@ async function runPrMerge(args, deps) {
         revisionId: latest.id,
         target: refname,
         mergedShas: applied.commits,
+        closed,
+        ...closeErrors.length > 0 ? { closeErrors } : {},
         result,
         ...statusEventId !== void 0 ? { statusEventId } : {},
         ...statusError !== void 0 ? {
@@ -4017,6 +4087,11 @@ async function runPrMerge(args, deps) {
           error: "status_publish_failed",
           detail: statusError,
           hint: `the push succeeded but the applied status was not published \u2014 retry with \`${retryHint}\``
+        } : closeErrors.length > 0 ? {
+          partial: true,
+          error: "close_publish_failed",
+          detail: closeErrors.map((e) => `${e.issueId}: ${e.error}`).join("; "),
+          hint: `the push succeeded but some issues were not closed \u2014 retry with ${closeRetryHints.map((h) => `\`${h}\``).join(", ")}`
         } : {}
       });
     } else {
@@ -4027,14 +4102,24 @@ async function runPrMerge(args, deps) {
         );
       }
     }
+    if (!flags.json && closed.length > 0) {
+      io.out(`Closed ${closed.length} issue(s): ${closed.join(", ")}`);
+    }
     if (statusError !== void 0) {
       io.err(
         `partial success: the push succeeded but publishing the applied status failed: ${statusError}`
       );
       io.err(`retry the status with: ${retryHint}`);
-      return 1;
     }
-    return 0;
+    if (closeErrors.length > 0) {
+      for (const e of closeErrors) {
+        io.err(
+          `partial success: the push succeeded but closing issue ${e.issueId} failed: ${e.error}`
+        );
+      }
+      for (const h of closeRetryHints) io.err(`retry the close with: ${h}`);
+    }
+    return statusError !== void 0 || closeErrors.length > 0 ? 1 : 0;
   } catch (err) {
     return emitCliError(io, flags.json, "pr merge", err);
   } finally {
@@ -4819,7 +4904,7 @@ async function runPrCreate(rest, deps) {
 var STATUS_KIND_BY_VALUE = {
   open: STATUS_OPEN_KIND2,
   applied: STATUS_APPLIED_KIND3,
-  closed: STATUS_CLOSED_KIND2,
+  closed: STATUS_CLOSED_KIND3,
   draft: STATUS_DRAFT_KIND2
 };
 function isStatusValue(value) {
@@ -5202,11 +5287,15 @@ Options:
   --json               machine-readable envelope (per-chain results array)
   -h, --help           show this help`;
 var SHARED_DEVNET_SUFFIX = ".devnet.toonprotocol.dev";
+var SHARED_DEVNET_HOSTS = /* @__PURE__ */ new Set([
+  "toonprotocol.dev",
+  "relay.toonprotocol.dev"
+]);
 function devnetHost(url) {
   if (!url) return void 0;
   try {
     const { hostname } = new URL(url);
-    if (hostname.endsWith(SHARED_DEVNET_SUFFIX) || hostname === SHARED_DEVNET_SUFFIX.slice(1)) {
+    if (hostname.endsWith(SHARED_DEVNET_SUFFIX) || hostname === SHARED_DEVNET_SUFFIX.slice(1) || SHARED_DEVNET_HOSTS.has(hostname)) {
       return url;
     }
   } catch {
@@ -5400,7 +5489,8 @@ async function runFund(args, deps) {
     }
     const timeoutEnv = env["TOON_CLIENT_FAUCET_TIMEOUT_MS"];
     const timeoutFor = () => {
-      if (timeoutEnv && Number.isFinite(Number(timeoutEnv))) return Number(timeoutEnv);
+      if (timeoutEnv && Number.isFinite(Number(timeoutEnv)))
+        return Number(timeoutEnv);
       if (file.faucetTimeoutMs !== void 0) return file.faucetTimeoutMs;
       return 9e4;
     };
@@ -5428,10 +5518,15 @@ async function runFund(args, deps) {
       }
       const started = Date.now();
       try {
-        const { response } = await client.fundWallet(faucetUrl, address, chain, {
-          timeout: timeoutFor(),
-          ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}
-        });
+        const { response } = await client.fundWallet(
+          faucetUrl,
+          address,
+          chain,
+          {
+            timeout: timeoutFor(),
+            ...deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}
+          }
+        );
         return {
           chain,
           funded: true,
@@ -5477,7 +5572,9 @@ async function runFund(args, deps) {
       }
     }
     io.out(renderIdentityLine(identity));
-    io.out("Re-check with `rig balance` (a drip can take a few blocks to land).");
+    io.out(
+      "Re-check with `rig balance` (a drip can take a few blocks to land)."
+    );
     return allFunded ? 0 : 1;
   } catch (err) {
     return emitCliError(io, json, "fund", err);
@@ -5929,7 +6026,7 @@ import {
   PATCH_KIND as PATCH_KIND4,
   REPOSITORY_ANNOUNCEMENT_KIND as REPOSITORY_ANNOUNCEMENT_KIND4,
   STATUS_APPLIED_KIND as STATUS_APPLIED_KIND4,
-  STATUS_CLOSED_KIND as STATUS_CLOSED_KIND3,
+  STATUS_CLOSED_KIND as STATUS_CLOSED_KIND4,
   STATUS_DRAFT_KIND as STATUS_DRAFT_KIND3,
   STATUS_OPEN_KIND as STATUS_OPEN_KIND3
 } from "@toon-protocol/core/nip34";
@@ -6047,7 +6144,7 @@ Options:
 var STATUS_KINDS2 = [
   STATUS_OPEN_KIND3,
   STATUS_APPLIED_KIND4,
-  STATUS_CLOSED_KIND3,
+  STATUS_CLOSED_KIND4,
   STATUS_DRAFT_KIND3
 ];
 var CI_KINDS = [
@@ -9253,4 +9350,4 @@ export {
   rigVersion,
   dispatch
 };
-//# sourceMappingURL=chunk-KQ4NQV7T.js.map
+//# sourceMappingURL=chunk-Z3XRZ5E5.js.map