@urateam/core 0.1.0

package/dist/__tests__/assembler.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=assembler.test.d.ts.map

package/dist/__tests__/assembler.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembler.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/assembler.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/assembler.test.js

@@ -0,0 +1,63 @@
+import { describe, it, expect } from "vitest";
+import { assemblePrompt } from "../executor/prompt/assembler.js";
+const issue = {
+    id: "ENG-99",
+    slug: "add-feature",
+    title: "Add feature",
+    description: "Add a new feature.",
+    acceptanceCriteria: ["Feature works"],
+    labels: ["feature"],
+    priority: 2,
+};
+const repo = {
+    url: "https://github.com/acme/app",
+    defaultBranch: "main",
+    testCommand: "npm test",
+    buildCommand: "npm run build",
+};
+const handoff = {
+    runId: "run-2",
+    issueId: "ENG-99",
+    stage: "reproduce",
+    timestamp: "2026-01-02T00:00:00Z",
+    summary: "Reproduced successfully",
+    filesChanged: ["src/feature.ts"],
+    approach: "Add new module",
+    context: {
+        issueIntent: "New feature",
+        constraints: [],
+        assumptions: [],
+    },
+    tokenBudget: {
+        contextTokensUsed: 300,
+        recommendedMaxTurns: 5,
+    },
+};
+describe("assemblePrompt", () => {
+    it("assembles triage prompt", () => {
+        const result = assemblePrompt("triage", issue, repo);
+        expect(result).toContain("triage agent");
+        expect(result).toContain("<issue-data>");
+        expect(result).toContain("<repo-context>");
+    });
+    it("assembles implement prompt with handoff", () => {
+        const result = assemblePrompt("implement", issue, repo, handoff);
+        expect(result).toContain("<previous-stage-context>");
+        expect(result).toContain("Reproduced successfully");
+    });
+    it("assembles review prompt with security checklist", () => {
+        const result = assemblePrompt("review", issue, repo);
+        expect(result).toContain("INJECTION");
+        expect(result).toContain("AUTHENTICATION");
+    });
+    it("throws for await-approval", () => {
+        expect(() => assemblePrompt("await-approval", issue, repo)).toThrow("await-approval is not an agent stage — no prompt needed");
+    });
+    it("all 5 agent stages assemble without error", () => {
+        const stages = ["triage", "reproduce", "implement", "test", "review"];
+        for (const stage of stages) {
+            expect(() => assemblePrompt(stage, issue, repo)).not.toThrow();
+        }
+    });
+});
+//# sourceMappingURL=assembler.test.js.map

package/dist/__tests__/assembler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assembler.test.js","sourceRoot":"","sources":["../../src/__tests__/assembler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAGjE,MAAM,KAAK,GAAmB;IAC5B,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,oBAAoB;IACjC,kBAAkB,EAAE,CAAC,eAAe,CAAC;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC;IACnB,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,MAAM,IAAI,GAAe;IACvB,GAAG,EAAE,6BAA6B;IAClC,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,MAAM,OAAO,GAAoB;IAC/B,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,yBAAyB;IAClC,YAAY,EAAE,CAAC,gBAAgB,CAAC;IAChC,QAAQ,EAAE,gBAAgB;IAC1B,OAAO,EAAE;QACP,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;KAChB;IACD,WAAW,EAAE;QACX,iBAAiB,EAAE,GAAG;QACtB,mBAAmB,EAAE,CAAC;KACvB;CACF,CAAC;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CACV,cAAc,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,CAC9C,CAAC,OAAO,CAAC,yDAAyD,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/auth-check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-check.test.d.ts.map

package/dist/__tests__/auth-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-check.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/auth-check.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth-check.test.js

@@ -0,0 +1,88 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { isClaudeAuthValid, resetAuthCheckCache } from "../executor/auth-check.js";
+// Mock child_process.execFile
+vi.mock("node:child_process", () => ({
+    execFile: vi.fn(),
+}));
+import { execFile } from "node:child_process";
+const mockExecFile = vi.mocked(execFile);
+function simulateSuccess() {
+    mockExecFile.mockImplementation((_cmd, _args, _opts, cb) => {
+        cb(null);
+        return {};
+    });
+}
+function simulateFailure() {
+    mockExecFile.mockImplementation((_cmd, _args, _opts, cb) => {
+        cb(new Error("auth failed"));
+        return {};
+    });
+}
+describe("isClaudeAuthValid", () => {
+    beforeEach(() => {
+        resetAuthCheckCache();
+        mockExecFile.mockReset();
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it("returns true when claude auth status succeeds", async () => {
+        simulateSuccess();
+        const result = await isClaudeAuthValid();
+        expect(result).toBe(true);
+        expect(mockExecFile).toHaveBeenCalledTimes(1);
+        expect(mockExecFile).toHaveBeenCalledWith("claude", ["auth", "status"], { timeout: 10_000 }, expect.any(Function));
+    });
+    it("returns false when claude auth status fails", async () => {
+        simulateFailure();
+        const result = await isClaudeAuthValid();
+        expect(result).toBe(false);
+        expect(mockExecFile).toHaveBeenCalledTimes(1);
+    });
+    it("caches result within 5 minute TTL", async () => {
+        simulateSuccess();
+        await isClaudeAuthValid();
+        await isClaudeAuthValid();
+        await isClaudeAuthValid();
+        expect(mockExecFile).toHaveBeenCalledTimes(1);
+    });
+    it("re-checks after TTL expires", async () => {
+        vi.useFakeTimers();
+        simulateSuccess();
+        await isClaudeAuthValid();
+        expect(mockExecFile).toHaveBeenCalledTimes(1);
+        // Advance past 5 minute TTL
+        vi.advanceTimersByTime(5 * 60 * 1000 + 1);
+        await isClaudeAuthValid();
+        expect(mockExecFile).toHaveBeenCalledTimes(2);
+    });
+    it("concurrent callers share a single subprocess (single-flight)", async () => {
+        let resolveCb = null;
+        mockExecFile.mockImplementation((_cmd, _args, _opts, cb) => {
+            // Delay the callback so concurrent callers overlap
+            resolveCb = () => cb(null);
+            return {};
+        });
+        resetAuthCheckCache();
+        const p1 = isClaudeAuthValid();
+        const p2 = isClaudeAuthValid();
+        const p3 = isClaudeAuthValid();
+        // Only one execFile call should have been made
+        expect(mockExecFile).toHaveBeenCalledTimes(1);
+        // Resolve the single subprocess
+        resolveCb();
+        const [r1, r2, r3] = await Promise.all([p1, p2, p3]);
+        expect(r1).toBe(true);
+        expect(r2).toBe(true);
+        expect(r3).toBe(true);
+    });
+    it("resetAuthCheckCache sets result to false (unknown)", async () => {
+        simulateSuccess();
+        await isClaudeAuthValid();
+        expect(await isClaudeAuthValid()).toBe(true);
+        resetAuthCheckCache();
+        simulateFailure();
+        expect(await isClaudeAuthValid()).toBe(false);
+    });
+});
+//# sourceMappingURL=auth-check.test.js.map

package/dist/__tests__/auth-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-check.test.js","sourceRoot":"","sources":["../../src/__tests__/auth-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEnF,8BAA8B;AAC9B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;CAClB,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEzC,SAAS,eAAe;IACtB,YAAY,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAO,EAAE,EAAE;QAC9D,EAAE,CAAC,IAAI,CAAC,CAAC;QACT,OAAO,EAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe;IACtB,YAAY,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAO,EAAE,EAAE;QAC9D,EAAE,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7B,OAAO,EAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,mBAAmB,EAAE,CAAC;QACtB,YAAY,CAAC,SAAS,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,eAAe,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,QAAQ,EACR,CAAC,MAAM,EAAE,QAAQ,CAAC,EAClB,EAAE,OAAO,EAAE,MAAM,EAAE,EACnB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,eAAe,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,eAAe,EAAE,CAAC;QAClB,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,eAAe,EAAE,CAAC;QAElB,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE9C,4BAA4B;QAC5B,EAAE,CAAC,mBAAmB,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QAE1C,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,IAAI,SAAS,GAAwB,IAAI,CAAC;QAC1C,YAAY,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAO,EAAE,EAAE;YAC9D,mDAAmD;YACnD,SAAS,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,EAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,mBAAmB,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAE/B,+CAA+C;QAC/C,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE9C,gCAAgC;QAChC,SAAU,EAAE,CAAC;QAEb,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,eAAe,EAAE,CAAC;QAClB,MAAM,iBAAiB,EAAE,CAAC;QAC1B,MAAM,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7C,mBAAmB,EAAE,CAAC;QACtB,eAAe,EAAE,CAAC;QAClB,MAAM,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/auto-merge.test.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Auto-merge decision logic tests — BEC-49
+ *
+ * Tests the four auto-merge outcomes in the pipeline runner:
+ *   1. autoMerge: true, small diff, no blocking findings → mergePRViaCli called
+ *   2. autoMerge: true, diff exceeds autoMergeMaxLines → merge skipped
+ *   3. autoMerge: true, blocking findings → merge skipped
+ *   4. autoMerge: false or not set → merge not attempted
+ *
+ * Uses the same mock strategy as e2e-pipeline.test.ts: mocks git operations
+ * and executor at the module level, then drives the pipeline through the
+ * webhook handler to exercise the full runner code path.
+ */
+export {};
+//# sourceMappingURL=auto-merge.test.d.ts.map

package/dist/__tests__/auto-merge.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-merge.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/auto-merge.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/__tests__/auto-merge.test.js

@@ -0,0 +1,428 @@
+/**
+ * Auto-merge decision logic tests — BEC-49
+ *
+ * Tests the four auto-merge outcomes in the pipeline runner:
+ *   1. autoMerge: true, small diff, no blocking findings → mergePRViaCli called
+ *   2. autoMerge: true, diff exceeds autoMergeMaxLines → merge skipped
+ *   3. autoMerge: true, blocking findings → merge skipped
+ *   4. autoMerge: false or not set → merge not attempted
+ *
+ * Uses the same mock strategy as e2e-pipeline.test.ts: mocks git operations
+ * and executor at the module level, then drives the pipeline through the
+ * webhook handler to exercise the full runner code path.
+ */
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { createHmac } from "node:crypto";
+import { Hono } from "hono";
+import { createDb } from "../db/client.js";
+import { PipelineRunner, matchesAnyPattern } from "../pipeline/runner.js";
+import { createWebhookHandler } from "../webhook/handler.js";
+import { pipelineRuns } from "../db/schema.js";
+import { eq } from "drizzle-orm";
+// ---------------------------------------------------------------------------
+// Module mocks
+// ---------------------------------------------------------------------------
+// vi.hoisted ensures these are available when vi.mock factories run (which
+// are hoisted above all other code by Vitest).
+const { mockMergePRViaCli, mockGetDiffLineCount, mockGetChangedFiles } = vi.hoisted(() => ({
+    mockMergePRViaCli: vi.fn().mockResolvedValue(true),
+    mockGetDiffLineCount: vi.fn().mockResolvedValue(50),
+    mockGetChangedFiles: vi.fn().mockResolvedValue(["src/feature.ts"]),
+}));
+let mockReviewFindings;
+function makeHandoffArtifact(runId, issueId, stage, reviewFindings) {
+    return {
+        runId,
+        issueId,
+        stage,
+        timestamp: new Date().toISOString(),
+        summary: `Completed ${stage} stage successfully`,
+        filesChanged: ["src/feature.ts"],
+        approach: `Standard ${stage} approach`,
+        context: {
+            issueIntent: "Add user search functionality",
+            constraints: ["Must not break existing tests"],
+            assumptions: ["Input is sanitised upstream"],
+            ...(reviewFindings ? { reviewFindings } : {}),
+        },
+        tokenBudget: { contextTokensUsed: 150, recommendedMaxTurns: 5 },
+    };
+}
+vi.mock("../executor/executor.js", () => ({
+    executeStage: vi.fn().mockImplementation(async ({ runId, issueId, stage, db }) => {
+        const { nanoid } = await import("nanoid");
+        const { stageRuns: stageRunsTable } = await import("../db/schema.js");
+        const { eq: drizzleEq } = await import("drizzle-orm");
+        const stageRunId = nanoid();
+        await db.insert(stageRunsTable).values({
+            id: stageRunId,
+            pipelineRunId: runId,
+            stage,
+            status: "running",
+        });
+        await db
+            .update(stageRunsTable)
+            .set({
+            status: "completed",
+            completedAt: new Date(),
+            inputTokens: 200,
+            outputTokens: 100,
+            turns: 2,
+            handoffArtifact: JSON.stringify(makeHandoffArtifact(runId, issueId, stage, mockReviewFindings)),
+        })
+            .where(drizzleEq(stageRunsTable.id, stageRunId));
+        return {
+            status: "completed",
+            inputTokens: 200,
+            outputTokens: 100,
+            turns: 2,
+            handoffArtifact: makeHandoffArtifact(runId, issueId, stage, mockReviewFindings),
+            handoffIsStructured: true,
+        };
+    }),
+}));
+vi.mock("../repo/git.js", () => ({
+    cloneRepo: vi.fn().mockResolvedValue(undefined),
+    createWorktree: vi.fn().mockResolvedValue("/tmp/auto-merge-test-worktree"),
+    createWorktreeFromRemote: vi.fn().mockResolvedValue("/tmp/auto-merge-test-worktree"),
+    deleteWorktree: vi.fn().mockResolvedValue(undefined),
+    pushBranch: vi.fn().mockResolvedValue(undefined),
+    pushBranchForce: vi.fn().mockResolvedValue(undefined),
+    // Pure function — provide real implementation so push-strategy logic works correctly
+    choosePushStrategy: (branch, rebaseConflict) => {
+        if (rebaseConflict || branch.startsWith("agent/"))
+            return "force-with-lease";
+        return "standard";
+    },
+    rebaseBranch: vi.fn().mockResolvedValue({ success: true, hasConflicts: false }),
+    abortRebase: vi.fn().mockResolvedValue(undefined),
+    autoCommitChanges: vi.fn().mockResolvedValue(false),
+    getAgentCommits: vi.fn().mockResolvedValue([]),
+    createPRViaCli: vi
+        .fn()
+        .mockResolvedValue("https://github.com/test/repo/pull/42"),
+    mergePRViaCli: mockMergePRViaCli,
+    getDiffLineCount: mockGetDiffLineCount,
+    getChangedFiles: mockGetChangedFiles,
+    checkDuplicateBranch: vi.fn().mockResolvedValue(null),
+    cleanupWorktrees: vi.fn().mockResolvedValue([]),
+    branchName: vi
+        .fn()
+        .mockImplementation((identifier, slug) => `agent/${identifier}-${slug}`),
+    gitExecSafe: vi.fn().mockResolvedValue(""),
+    gitExecRaw: vi.fn().mockResolvedValue(""),
+    gitExec: vi.fn().mockResolvedValue(""),
+}));
+vi.mock("../repo/tech-stack.js", () => ({
+    detectTechStack: vi.fn().mockResolvedValue({
+        languages: ["typescript"],
+        frameworks: [],
+        buildSystems: ["pnpm"],
+    }),
+}));
+vi.mock("../repo/devcontainer.js", () => ({
+    shouldUseDevcontainer: vi.fn().mockResolvedValue(false),
+    devcontainerUp: vi.fn().mockResolvedValue(undefined),
+    devcontainerDown: vi.fn().mockResolvedValue(undefined),
+}));
+vi.mock("../pm/coordination.js", () => ({
+    upsertActiveWork: vi.fn().mockResolvedValue(undefined),
+    removeActiveWork: vi.fn().mockResolvedValue(undefined),
+    checkFileOverlap: vi.fn().mockResolvedValue({ hasOverlap: false, overlappingFiles: [], conflictingRunIds: [] }),
+    getModifiedFiles: vi.fn().mockResolvedValue([]),
+}));
+// ---------------------------------------------------------------------------
+// Test helpers
+// ---------------------------------------------------------------------------
+const WEBHOOK_SECRET = "test-auto-merge-secret";
+function signPayload(body) {
+    return createHmac("sha256", WEBHOOK_SECRET).update(body).digest("hex");
+}
+let issueCounter = 0;
+function buildPayload(identifier) {
+    const id = identifier ?? `AM-${++issueCounter}`;
+    return JSON.stringify({
+        action: "update",
+        type: "Issue",
+        data: {
+            id: `issue-uuid-${id}`,
+            identifier: id,
+            title: "Auto-merge test issue",
+            description: "Test auto-merge logic",
+            priority: 2,
+            state: { id: "state-todo-uuid", name: "Todo" },
+            teamId: "team-am",
+            labels: [{ name: "auto-implement" }],
+        },
+        updatedFrom: { stateId: "state-backlog-uuid" },
+    });
+}
+async function postWebhook(app, body) {
+    const sig = signPayload(body);
+    const res = await app.fetch(new Request("http://localhost/webhooks/linear", {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "Linear-Signature": sig,
+        },
+        body,
+    }));
+    return { status: res.status, json: (await res.json()) };
+}
+async function waitForPipeline(db, issueId, timeoutMs = 8_000) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const rows = await db
+            .select()
+            .from(pipelineRuns)
+            .where(eq(pipelineRuns.issueId, issueId));
+        if (rows.length > 0) {
+            const run = rows[0];
+            if (run.status === "completed" || run.status === "failed" || run.status === "aborted") {
+                return run;
+            }
+        }
+        await new Promise((r) => setTimeout(r, 50));
+    }
+    throw new Error(`Pipeline for issue ${issueId} did not complete within ${timeoutMs}ms`);
+}
+// ---------------------------------------------------------------------------
+// Test configs
+// ---------------------------------------------------------------------------
+const REPO_CONFIG = {
+    url: "https://github.com/test/test-repo.git",
+    defaultBranch: "main",
+    testCommand: "pnpm test",
+    buildCommand: "pnpm build",
+};
+function makePipelineConfig(overrides = {}) {
+    return {
+        name: "Auto Implement",
+        stages: ["triage", "implement"],
+        retry: { maxAttempts: 0, strategy: "fail-fast" },
+        review: { requiredApprovals: 0 },
+        prStrategy: "ready",
+        validateHandoffs: false,
+        ralphIterations: 0,
+        reviewFixIterations: 0,
+        ...overrides,
+    };
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe("Auto-merge decision logic", () => {
+    let db;
+    let notifier;
+    let humanReviewCalls;
+    beforeEach(async () => {
+        mockMergePRViaCli.mockClear().mockResolvedValue(true);
+        mockGetDiffLineCount.mockClear().mockResolvedValue(50);
+        mockGetChangedFiles.mockClear().mockResolvedValue(["src/feature.ts"]);
+        mockReviewFindings = undefined;
+        humanReviewCalls = [];
+        db = await createDb({ driver: "sqlite", connectionString: ":memory:" });
+        notifier = {
+            onPipelineStart: vi.fn(async () => { }),
+            onStageComplete: vi.fn(async () => { }),
+            onPipelineComplete: vi.fn(async () => { }),
+            onPipelineFailed: vi.fn(async () => { }),
+            onHumanReviewNeeded: vi.fn(async (run, prUrl, reason) => {
+                humanReviewCalls.push({ run, prUrl, reason });
+            }),
+        };
+    });
+    function buildApp(pipelineConfig) {
+        const runner = new PipelineRunner({
+            db,
+            notifier,
+            concurrency: 2,
+            agentRunDir: "/tmp/auto-merge-agent-runs",
+            repoCloneDir: "/tmp/auto-merge-repos",
+        });
+        const app = new Hono();
+        const webhookApp = createWebhookHandler({
+            webhookSecret: WEBHOOK_SECRET,
+            runner,
+            pipelineConfigs: { "auto-implement": pipelineConfig },
+            repoConfigs: { "team-am": REPO_CONFIG },
+        });
+        app.route("/", webhookApp);
+        return app;
+    }
+    // 1. autoMerge: true, small diff, no blocking findings -> merge called
+    it("auto-merges when enabled, diff is small, and no blocking findings", async () => {
+        const config = makePipelineConfig({ autoMerge: true, autoMergeMaxLines: 200 });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).toHaveBeenCalled();
+        expect(humanReviewCalls).toHaveLength(0);
+    });
+    // 2. autoMerge: true, diff exceeds autoMergeMaxLines -> merge skipped
+    it("skips auto-merge when diff exceeds autoMergeMaxLines", async () => {
+        mockGetDiffLineCount.mockResolvedValue(500);
+        const config = makePipelineConfig({ autoMerge: true, autoMergeMaxLines: 200 });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(humanReviewCalls).toHaveLength(1);
+        expect(humanReviewCalls[0].reason).toMatch(/Diff too large/);
+    });
+    // 3. autoMerge: true, blocking findings -> merge skipped
+    it("skips auto-merge when blocking review findings exist", async () => {
+        mockReviewFindings = [
+            {
+                severity: "blocking",
+                file: "src/feature.ts",
+                line: 10,
+                category: "security",
+                description: "SQL injection vulnerability",
+                fix: "Use parameterized queries",
+            },
+        ];
+        const config = makePipelineConfig({ autoMerge: true, autoMergeMaxLines: 200 });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(humanReviewCalls).toHaveLength(1);
+        expect(humanReviewCalls[0].reason).toMatch(/blocking finding/);
+    });
+    // 4. autoMerge: false -> merge not attempted
+    it("does not attempt merge when autoMerge is false", async () => {
+        const config = makePipelineConfig({ autoMerge: false });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(mockGetDiffLineCount).not.toHaveBeenCalled();
+    });
+    // 4b. autoMerge not set -> merge not attempted
+    it("does not attempt merge when autoMerge is not set", async () => {
+        const config = makePipelineConfig(); // no autoMerge property
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(mockGetDiffLineCount).not.toHaveBeenCalled();
+    });
+    // Edge case: uses default autoMergeMaxLines of 200
+    it("uses default autoMergeMaxLines of 200 when not specified", async () => {
+        mockGetDiffLineCount.mockResolvedValue(199);
+        const config = makePipelineConfig({ autoMerge: true }); // no autoMergeMaxLines
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).toHaveBeenCalled();
+    });
+    // 5. autoMergeExcludePatterns: changed file matches pattern -> merge skipped
+    it("skips auto-merge when a changed file matches an exclusion pattern", async () => {
+        mockGetChangedFiles.mockResolvedValue(["db/migrations/0001_initial.sql", "src/feature.ts"]);
+        const config = makePipelineConfig({
+            autoMerge: true,
+            autoMergeExcludePatterns: ["**/migrations/**"],
+        });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(humanReviewCalls).toHaveLength(1);
+        expect(humanReviewCalls[0].reason).toMatch(/exclusion pattern/);
+        expect(run.autoMerged).toBeFalsy();
+        expect(run.autoMergeReason).toMatch(/exclusion pattern/);
+    });
+    // 6. autoMergeExcludePatterns: no changed file matches -> merge proceeds
+    it("merges when changed files do not match exclusion patterns", async () => {
+        mockGetChangedFiles.mockResolvedValue(["src/feature.ts", "src/utils.ts"]);
+        const config = makePipelineConfig({
+            autoMerge: true,
+            autoMergeExcludePatterns: ["**/migrations/**", "infra/**"],
+        });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).toHaveBeenCalled();
+        expect(humanReviewCalls).toHaveLength(0);
+    });
+    // 7. Audit log: autoMerged and autoMergeReason are persisted to DB
+    it("persists autoMerged=true and reason to DB on successful auto-merge", async () => {
+        const config = makePipelineConfig({ autoMerge: true });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).toHaveBeenCalled();
+        expect(run.autoMerged).toBeTruthy();
+        expect(run.autoMergeReason).toMatch(/auto-merged successfully/);
+    });
+    // 8. Audit log: autoMerged=false and reason stored when merge is skipped
+    it("persists autoMerged=false and skip reason to DB when diff is too large", async () => {
+        mockGetDiffLineCount.mockResolvedValue(500);
+        const config = makePipelineConfig({ autoMerge: true, autoMergeMaxLines: 200 });
+        const app = buildApp(config);
+        const issueId = `AM-${++issueCounter}`;
+        const body = buildPayload(issueId);
+        await postWebhook(app, body);
+        const run = await waitForPipeline(db, issueId);
+        expect(run.status).toBe("completed");
+        expect(mockMergePRViaCli).not.toHaveBeenCalled();
+        expect(run.autoMerged).toBeFalsy();
+        expect(run.autoMergeReason).toMatch(/Diff too large/);
+    });
+});
+// ---------------------------------------------------------------------------
+// Unit tests for matchesAnyPattern helper
+// ---------------------------------------------------------------------------
+describe("matchesAnyPattern", () => {
+    it("matches simple filename pattern", () => {
+        expect(matchesAnyPattern("src/foo.ts", ["**/*.ts"])).toBe(true);
+        expect(matchesAnyPattern("src/foo.js", ["**/*.ts"])).toBe(false);
+    });
+    it("matches ** glob across multiple path segments", () => {
+        expect(matchesAnyPattern("db/migrations/0001_init.sql", ["**/migrations/**"])).toBe(true);
+        expect(matchesAnyPattern("src/feature.ts", ["**/migrations/**"])).toBe(false);
+    });
+    it("matches prefix wildcard", () => {
+        expect(matchesAnyPattern("infra/terraform/main.tf", ["infra/**"])).toBe(true);
+        expect(matchesAnyPattern("src/infra.ts", ["infra/**"])).toBe(false);
+    });
+    it("returns false for empty patterns array", () => {
+        expect(matchesAnyPattern("src/anything.ts", [])).toBe(false);
+    });
+    it("matches any pattern in the list", () => {
+        expect(matchesAnyPattern("src/db/schema.sql", ["**/migrations/**", "**/*.sql", "infra/**"])).toBe(true);
+    });
+    it("handles ? single-character wildcard", () => {
+        expect(matchesAnyPattern("src/foo.ts", ["src/f?o.ts"])).toBe(true);
+        expect(matchesAnyPattern("src/fooo.ts", ["src/f?o.ts"])).toBe(false);
+    });
+});
+//# sourceMappingURL=auto-merge.test.js.map