@wjarka/cezarion 0.14.6 → 0.14.7

package/dist/ci-wait/github.js

@@ -0,0 +1,209 @@
+import { spawn } from 'node:child_process';
+import { z } from 'zod';
+import { ciPrIdentitySchema, ciWaitRequestSchema } from '../contract/index.js';
+export const CI_QUERY_TIMEOUT_MS = 10_000;
+export const CI_QUERY_LIMIT = 4;
+export const CI_OUTPUT_LIMIT = 64 * 1024;
+export const CI_TERMINATE_MS = 2_000;
+export class CiGithubError extends Error {
+    code;
+    transient;
+    constructor(code, message, transient = false) {
+        super(message);
+        this.code = code;
+        this.transient = transient;
+    }
+}
+/** FIFO permits; aborted queued requests never consume a slot. */
+export class CiSemaphore {
+    limit;
+    active = 0;
+    queue = [];
+    constructor(limit) {
+        this.limit = limit;
+    }
+    async acquire(signal) {
+        signal.throwIfAborted();
+        if (this.active >= this.limit)
+            await new Promise((resolve, reject) => {
+                const ready = () => { signal.removeEventListener('abort', abort); resolve(); };
+                const abort = () => { const i = this.queue.indexOf(ready); if (i >= 0)
+                    this.queue.splice(i, 1); reject(signal.reason); };
+                this.queue.push(ready);
+                signal.addEventListener('abort', abort, { once: true });
+            });
+        else
+            this.active++;
+        // A slot is transferred to the oldest waiter, not released and raced for.
+        if (signal.aborted) {
+            this.release();
+            signal.throwIfAborted();
+        }
+        let released = false;
+        return () => { if (!released) {
+            released = true;
+            this.release();
+        } };
+    }
+    release() { const next = this.queue.shift(); if (next)
+        next();
+    else
+        this.active--; }
+}
+// The helper owns gh's process group and observes the controller-owned stdin pipe.
+// EOF (including controller SIGKILL) initiates termination without trusting persisted PIDs.
+// Keep this inline so the installed JS artifact carries the helper without another asset.
+export const CI_PROCESS_WRAPPER = String.raw `
+const { spawn } = require('node:child_process');
+const command = JSON.parse(process.argv[1]);
+const child = spawn(command.file, command.args, { detached: process.platform !== 'win32', stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true });
+let stopping = false, escalation, spawnFailed = false;
+function kill(force) {
+  if (!child.pid) return;
+  if (process.platform === 'win32') {
+    const args = ['/PID', String(child.pid), '/T']; if (force) args.push('/F');
+    spawn('taskkill', args, {stdio:'ignore',windowsHide:true}).on('error',()=>{});
+  } else { try { process.kill(-child.pid, force ? 'SIGKILL' : 'SIGTERM'); } catch {} }
+}
+function stop() {
+ if (stopping) return; stopping = true; kill(false);
+ escalation = setTimeout(() => kill(true), ${CI_TERMINATE_MS});
+}
+process.stdin.resume(); process.stdin.on('end', stop); process.on('SIGTERM', stop); process.on('SIGINT', stop);
+process.stdout.on('error', stop); process.stderr.on('error', stop);
+child.stdout.pipe(process.stdout); child.stderr.pipe(process.stderr);
+child.on('error', () => { spawnFailed = true; });
+// A grandchild can retain the leader's stdout after exit; close alone would wait forever.
+child.on('exit', () => kill(true));
+child.on('close', code => { clearTimeout(escalation); process.exit(spawnFailed ? 127 : code === null ? 143 : code); });
+`;
+const dryRunCommand = String.raw `
+const args = process.argv.slice(1);
+if (args[1] === 'view') {
+ const url = args[2].startsWith('https:') ? args[2] : 'https://' + args[args.indexOf('--repo')+1] + '/pull/' + args[2];
+ console.log(JSON.stringify({url, number:Number(url.split('/').pop()), headRefOid:'a'.repeat(40)}));
+} else if (!args.includes('--watch')) console.log(JSON.stringify([{name:'Dry-run checks',state:'SUCCESS',bucket:'pass',link:''}]));
+`;
+/** Environment stays inherited, matching the existing forge gh resolver (including GH_TOKEN/GITHUB_TOKEN). */
+export async function runCiCommand(command, signal, discardOutput = false, env = process.env, cwd) {
+    signal.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, ['-e', CI_PROCESS_WRAPPER, JSON.stringify(command)], { env, cwd, stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
+        let stdout = '', stderr = '', bytes = 0;
+        let failure;
+        const abort = () => { failure ??= signal.reason; child.stdin.end(); };
+        signal.addEventListener('abort', abort, { once: true });
+        // Closing stdin asks the wrapper to terminate and await the owned process tree.
+        const capture = (chunk, error) => {
+            if (!error && discardOutput)
+                return;
+            bytes += chunk.length;
+            if (bytes > CI_OUTPUT_LIMIT) {
+                failure ??= new CiGithubError('output_limit', 'GitHub output exceeded 64 KiB; narrow the PR check set and retry.');
+                child.stdin.end();
+                return;
+            }
+            if (error)
+                stderr += chunk.toString();
+            else
+                stdout += chunk.toString();
+        };
+        child.stdout.on('data', (chunk) => capture(chunk, false));
+        child.stderr.on('data', (chunk) => capture(chunk, true));
+        child.stdin.on('error', () => { });
+        child.on('error', () => { failure = new CiGithubError('gh_missing', 'Unable to launch GitHub CLI; install gh and retry.'); });
+        child.on('close', code => {
+            signal.removeEventListener('abort', abort);
+            if (failure)
+                reject(failure);
+            else
+                resolve({ code: code ?? 143, stdout, stderr });
+        });
+        if (signal.aborted)
+            abort();
+    });
+}
+const metadataSchema = z.object({ url: z.string(), number: z.number().int().positive(), headRefOid: z.string().regex(/^[0-9a-f]{40}$/i) });
+export const githubChecksSchema = z.array(z.object({ name: z.string(), state: z.string(), link: z.string(), bucket: z.enum(['pass', 'fail', 'pending', 'skipping', 'cancel']) }));
+function parseJson(text, schema) {
+    try {
+        return schema.parse(JSON.parse(text));
+    }
+    catch {
+        throw new CiGithubError('malformed_data', 'GitHub returned malformed structured data; update gh and retry.');
+    }
+}
+function commandError(result) {
+    // Only classify stderr: never forward potentially credential-bearing external diagnostics.
+    if (result.code === 127)
+        return new CiGithubError('gh_missing', 'GitHub CLI is unavailable; install gh and retry.');
+    if (/401|403|auth|log.?in|token/i.test(result.stderr))
+        return new CiGithubError('authentication', 'GitHub authentication failed; run gh auth login with access to this repository.');
+    if (/404|not found|could not resolve|no pull requests/i.test(result.stderr))
+        return new CiGithubError('inaccessible_pr', 'PR is inaccessible; verify its URL and repository access.');
+    return new CiGithubError('command_failed', 'GitHub query failed; check connectivity and GitHub availability, then retry.', /5\d\d|timeout|timed out|network|connection|rate limit|429|temporar/i.test(result.stderr));
+}
+export class GithubCiClient {
+    queries = new CiSemaphore(CI_QUERY_LIMIT);
+    command;
+    env;
+    cwd;
+    constructor(options = {}) {
+        this.env = options.env ?? process.env;
+        this.command = options.command ?? (this.env.CEZ_DRY_RUN === '1' ? { file: process.execPath, args: ['-e', dryRunCommand] } : { file: 'gh', args: [] });
+        this.cwd = options.cwd;
+    }
+    async query(args, signal) {
+        const bounded = AbortSignal.any([signal, AbortSignal.timeout(CI_QUERY_TIMEOUT_MS)]);
+        let release;
+        try {
+            release = await this.queries.acquire(bounded);
+            return await runCiCommand({ file: this.command.file, args: [...this.command.args, ...args] }, bounded, false, this.env, this.cwd);
+        }
+        catch (error) {
+            if (!signal.aborted && bounded.aborted)
+                throw new CiGithubError('query_timeout', 'GitHub query exceeded ten seconds; check connectivity and retry.', true);
+            throw error;
+        }
+        finally {
+            release?.();
+        }
+    }
+    async resolve(pr, signal) {
+        if (!ciWaitRequestSchema.safeParse({ pr }).success)
+            throw new CiGithubError('invalid_request', 'Provide an HTTPS GitHub pull request URL.');
+        const supplied = new URL(pr);
+        if (supplied.hostname !== 'github.com')
+            throw new CiGithubError('unsupported_host', 'This GitHub Enterprise host is not recognized by the forge configuration; use github.com or configure supported forge authentication.');
+        const response = await this.query(['pr', 'view', pr, '--json', 'url,number,headRefOid'], signal);
+        if (response.code !== 0)
+            throw commandError(response);
+        const metadata = parseJson(response.stdout, metadataSchema);
+        const validUrl = ciWaitRequestSchema.safeParse({ pr: metadata.url });
+        if (!validUrl.success)
+            throw new CiGithubError('malformed_data', 'GitHub returned an invalid canonical PR URL.');
+        const url = new URL(metadata.url);
+        const parts = url.pathname.split('/');
+        if (url.hostname !== supplied.hostname || Number(parts[4]) !== metadata.number || metadata.number !== Number(supplied.pathname.split('/')[4]))
+            throw new CiGithubError('malformed_data', 'GitHub returned inconsistent PR identity.');
+        return ciPrIdentitySchema.parse({ prUrl: metadata.url, repository: `${parts[1]}/${parts[2]}`, prNumber: metadata.number, headSha: metadata.headRefOid });
+    }
+    async head(pr, signal) { return (await this.resolve(pr.prUrl, signal)).headSha; }
+    async checks(pr, signal) {
+        const result = await this.query(['pr', 'checks', String(pr.prNumber), '--repo', `github.com/${pr.repository}`, '--json', 'name,state,link,bucket'], signal);
+        // gh documents 1 for failed checks and 8 for pending. Only validated JSON decides CI outcome.
+        if (![0, 1, 8].includes(result.code) || !result.stdout.trim()) {
+            // gh's empty-check path emits no JSON; pin the exact CLI diagnostic, never a generic exit 1.
+            if (result.code === 1 && /^no checks reported on the ['"]?.+['"]? branch\s*$/i.test(result.stderr.trim()))
+                return [];
+            throw commandError(result);
+        }
+        return parseJson(result.stdout, githubChecksSchema);
+    }
+    async watch(pr, signal) {
+        const result = await runCiCommand({ file: this.command.file, args: [...this.command.args, 'pr', 'checks', String(pr.prNumber), '--repo', `github.com/${pr.repository}`, '--watch', '--interval', '10'] }, signal, true, this.env, this.cwd);
+        if (![0, 1, 8].includes(result.code) || result.stderr.trim())
+            throw commandError(result);
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/ci-wait/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/ci-wait/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAA2C,MAAM,8BAA8B,CAAC;AAEhI,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAErC,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB,IAAI;IAA6C,SAAS;IAA/E,YAAqB,IAAqB,EAAE,OAAe,EAAW,SAAS,GAAG,KAAK;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;oBAArF,IAAI;yBAA6C,SAAS;IAA4B,CAAC;CAC7G;AAED,kEAAkE;AAClE,MAAM,OAAO,WAAW;IAGO,KAAK;IAF1B,MAAM,GAAG,CAAC,CAAC;IACF,KAAK,GAAsB,EAAE,CAAC;IAC/C,YAA6B,KAAa;qBAAb,KAAK;IAAW,CAAC;IAC9C,KAAK,CAAC,OAAO,CAAC,MAAmB;QAC/B,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACzE,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/E,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;;YACE,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,0EAA0E;QAC1E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,CAAC;QAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACO,OAAO,KAAW,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI;QAAE,IAAI,EAAE,CAAC;;QAAM,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACnG;AAED,mFAAmF;AACnF,4FAA4F;AAC5F,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;6CAcC,eAAe;;;;;;;;;CAS3D,CAAC;AACF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;CAM/B,CAAC;AAIF,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB,EAAE,MAAmB,EAAE,aAAa,GAAG,KAAK,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG,EAAE,GAAY;IAC1J,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7J,IAAI,MAAM,GAAG,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC;QACxC,IAAI,OAAgB,CAAC;QACrB,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,gFAAgF;QAChF,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAc,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,IAAI,aAAa;gBAAE,OAAO;YACpC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;gBAAC,OAAO,KAAK,IAAI,aAAa,CAAC,cAAc,EAAE,mEAAmE,CAAC,CAAC;gBAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/K,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;;gBAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzE,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,aAAa,CAAC,YAAY,EAAE,oDAAoD,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACvB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC;;gBACxB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAC3I,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAElL,SAAS,SAAS,CAAI,IAAY,EAAE,MAAoB;IACtD,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,iEAAiE,CAAC,CAAC;IAAC,CAAC;AACxK,CAAC;AACD,SAAS,YAAY,CAAC,MAAuB;IAC3C,2FAA2F;IAC3F,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,aAAa,CAAC,YAAY,EAAE,kDAAkD,CAAC,CAAC;IACpH,IAAI,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,aAAa,CAAC,gBAAgB,EAAE,iFAAiF,CAAC,CAAC;IACrL,IAAI,mDAAmD,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,aAAa,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;IACtL,OAAO,IAAI,aAAa,CAAC,gBAAgB,EAAE,8EAA8E,EAAE,qEAAqE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACxN,CAAC;AACD,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAC1C,OAAO,CAAmB;IAC1B,GAAG,CAAoB;IACvB,GAAG,CAAU;IAC9B,YAAY,OAAO,GAA0E,EAAE;QAC7F,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtJ,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,IAAc,EAAE,MAAmB;QACrD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACtI,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,kEAAkE,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;gBAClL,CAAC;YAAC,OAAO,EAAE,EAAE,CAAC;QAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,MAAmB;QAC3C,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,CAAC,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,2CAA2C,CAAC,CAAC;QAC1I,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,uIAAuI,CAAC,CAAC;QAC7N,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,QAAQ,CAAC,GAAG,EAAC,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;QACjH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;QACtO,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3J,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAgB,EAAE,MAAmB,IAAqB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7H,KAAK,CAAC,MAAM,CAAC,EAAgB,EAAE,MAAmB;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,wBAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5J,8FAA8F;QAC9F,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9D,6FAA6F;YAC7F,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,qDAAqD,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrH,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAgB,EAAE,MAAmB;QAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,EAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvO,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;IACzF,CAAC;CACF"}

package/dist/ci-wait/injection.d.ts

@@ -0,0 +1,3 @@
+import type { AgentRunSpec } from '../core/agent-runner.ts';
+/** Runtime config has highest precedence; merge only our collision-resistant server. */
+export declare function ciOpenCodeEnv(spec: AgentRunSpec): Record<string, string> | undefined;

package/dist/ci-wait/injection.js

@@ -0,0 +1,26 @@
+import { parseConfigContent } from '../agent-config/model-settings/shared.js';
+/** Runtime config has highest precedence; merge only our collision-resistant server. */
+export function ciOpenCodeEnv(spec) {
+    if (!spec.cezarTools)
+        return spec.env;
+    const supplied = spec.env?.OPENCODE_CONFIG_CONTENT ?? process.env.OPENCODE_CONFIG_CONTENT;
+    let config = {};
+    if (supplied) {
+        try {
+            const parsed = parseConfigContent(supplied, 'jsonc');
+            if (!isObject(parsed) || (parsed.mcp !== undefined && !isObject(parsed.mcp)))
+                throw new Error();
+            config = parsed;
+        }
+        catch {
+            throw new Error('CI tool unavailable: invalid supplied OpenCode runtime configuration');
+        }
+    }
+    const { name, command, args } = spec.cezarTools;
+    const existing = isObject(config.mcp) ? config.mcp : {};
+    if (Object.hasOwn(existing, name))
+        throw new Error('CI tool unavailable: OpenCode server name collision');
+    return { ...spec.env, OPENCODE_CONFIG_CONTENT: JSON.stringify({ ...config, mcp: { ...existing, [name]: { type: 'local', command: [command, ...args], enabled: true } } }) };
+}
+function isObject(value) { return value !== null && typeof value === 'object' && !Array.isArray(value); }
+//# sourceMappingURL=injection.js.map

package/dist/ci-wait/injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.js","sourceRoot":"","sources":["../../src/ci-wait/injection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAG9E,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC1F,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAChG,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAAC,CAAC;IACtG,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC1G,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9K,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,IAAsC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/ci-wait/mcp.d.ts

@@ -0,0 +1,97 @@
+import { z } from 'zod';
+export declare const ciToolDefinition: {
+    name: string;
+    description: string;
+    inputSchema: {
+        $schema?: "https://json-schema.org/draft/2020-12/schema" | "http://json-schema.org/draft-07/schema#" | "http://json-schema.org/draft-04/schema#";
+        $id?: string;
+        $anchor?: string;
+        $ref?: string;
+        $dynamicRef?: string;
+        $dynamicAnchor?: string;
+        $vocabulary?: Record<string, boolean>;
+        $comment?: string;
+        $defs?: Record<string, z.core.JSONSchema.JSONSchema>;
+        additionalItems?: z.core.JSONSchema._JSONSchema;
+        unevaluatedItems?: z.core.JSONSchema._JSONSchema;
+        prefixItems?: z.core.JSONSchema._JSONSchema[];
+        items?: z.core.JSONSchema._JSONSchema | z.core.JSONSchema._JSONSchema[];
+        contains?: z.core.JSONSchema._JSONSchema;
+        additionalProperties?: z.core.JSONSchema._JSONSchema;
+        unevaluatedProperties?: z.core.JSONSchema._JSONSchema;
+        properties?: Record<string, z.core.JSONSchema._JSONSchema>;
+        patternProperties?: Record<string, z.core.JSONSchema._JSONSchema>;
+        dependentSchemas?: Record<string, z.core.JSONSchema._JSONSchema>;
+        propertyNames?: z.core.JSONSchema._JSONSchema;
+        if?: z.core.JSONSchema._JSONSchema;
+        then?: z.core.JSONSchema._JSONSchema;
+        else?: z.core.JSONSchema._JSONSchema;
+        allOf?: z.core.JSONSchema.JSONSchema[];
+        anyOf?: z.core.JSONSchema.JSONSchema[];
+        oneOf?: z.core.JSONSchema.JSONSchema[];
+        not?: z.core.JSONSchema._JSONSchema;
+        multipleOf?: number;
+        maximum?: number;
+        exclusiveMaximum?: number | boolean;
+        minimum?: number;
+        exclusiveMinimum?: number | boolean;
+        maxLength?: number;
+        minLength?: number;
+        pattern?: string;
+        maxItems?: number;
+        minItems?: number;
+        uniqueItems?: boolean;
+        maxContains?: number;
+        minContains?: number;
+        maxProperties?: number;
+        minProperties?: number;
+        required?: string[];
+        dependentRequired?: Record<string, string[]>;
+        enum?: Array<string | number | boolean | null>;
+        const?: string | number | boolean | null;
+        id?: string;
+        title?: string;
+        description?: string;
+        default?: unknown;
+        deprecated?: boolean;
+        readOnly?: boolean;
+        writeOnly?: boolean;
+        nullable?: boolean;
+        examples?: unknown[];
+        format?: string;
+        contentMediaType?: string;
+        contentEncoding?: string;
+        contentSchema?: z.core.JSONSchema.JSONSchema;
+        _prefault?: unknown;
+        "~standard": z.core.ZodStandardSchemaWithJSON<z.ZodObject<{
+            pr: z.ZodString;
+            timeout_seconds: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+        type: 'object';
+    };
+};
+export declare function invokeCiTool(input: unknown): Promise<{
+    content: {
+        type: 'text';
+        text: string;
+    }[];
+    details: {
+        prUrl: string;
+        repository: string;
+        prNumber: number;
+        headSha: string;
+        waitId: string;
+        registeredAt: string;
+        deadline: string;
+        phase: "delivered" | "parked" | "registered" | "wake-pending" | "withdrawn";
+    };
+    isError?: undefined;
+} | {
+    isError: boolean;
+    content: {
+        type: 'text';
+        text: string;
+    }[];
+    details: {};
+}>;
+export declare function serveCiMcp(): Promise<void>;

package/dist/ci-wait/mcp.js

@@ -0,0 +1,35 @@
+import { pathToFileURL } from 'node:url';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { ciWaitRequestSchema } from '../contract/index.js';
+import { z } from 'zod';
+import { callCiWait, monitorCiOwner } from './client.js';
+export const ciToolDefinition = {
+    name: 'cezar_wait_for_ci',
+    description: 'Register a bounded CI wait for a GitHub pull request. End your turn after registration; Cezar resumes you with an observation. No marker is needed. Passing reported checks does not prove all expected workflows appeared and is not merge approval.',
+    inputSchema: { ...z.toJSONSchema(ciWaitRequestSchema, { io: 'input' }), type: 'object' },
+};
+export async function invokeCiTool(input) {
+    try {
+        const receipt = await callCiWait(input);
+        return { content: [{ type: 'text', text: `${JSON.stringify(receipt)}\nRegistered. Please end your turn to wait; no marker is needed. This observation is not merge approval.` }], details: receipt };
+    }
+    catch (error) {
+        return { isError: true, content: [{ type: 'text', text: error instanceof Error ? error.message : 'CI tool unavailable' }], details: {} };
+    }
+}
+export async function serveCiMcp() {
+    const server = new Server({ name: 'cezar-ci', version: '1.0.0' }, { capabilities: { tools: {} } });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: [ciToolDefinition] }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => request.params.name === ciToolDefinition.name ? invokeCiTool(request.params.arguments) : { isError: true, content: [{ type: 'text', text: 'Unknown tool' }] });
+    const finish = () => { void server.close().finally(() => process.exit(0)); };
+    const stop = monitorCiOwner(finish);
+    process.stdin.once('end', finish);
+    server.onclose = () => { stop(); process.stdin.removeListener('end', finish); };
+    await server.connect(new StdioServerTransport());
+}
+// The module also supplies Pi with the same contract/renderer; importing it must not start stdio.
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
+    await serveCiMcp();
+//# sourceMappingURL=mcp.js.map

package/dist/ci-wait/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/ci-wait/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,mBAAmB;IACzB,WAAW,EAAE,uPAAuP;IACpQ,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE;CAClG,CAAC;AACF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAc;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,0GAA0G,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAChN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpJ,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAChO,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AACD,kGAAkG;AAClG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAAE,MAAM,UAAU,EAAE,CAAC"}

package/dist/ci-wait/resources.d.ts

@@ -0,0 +1,7 @@
+import { CiToolController } from './controller.ts';
+import { CiWatcherSupervisor } from './supervisor.ts';
+export declare function acquireCiResources(workspace: object): {
+    supervisor: CiWatcherSupervisor;
+    controller: () => Promise<CiToolController | undefined>;
+    release(): void;
+};

package/dist/ci-wait/resources.js

@@ -0,0 +1,32 @@
+import { CiToolController } from './controller.js';
+import { CiWatcherSupervisor } from './supervisor.js';
+/** The workspace semaphore is shared by cockpit projects; headless callers have one too. */
+const workspaces = new WeakMap();
+export function acquireCiResources(workspace) {
+    let resource = workspaces.get(workspace);
+    if (!resource) {
+        resource = { refs: 0, supervisor: new CiWatcherSupervisor() };
+        workspaces.set(workspace, resource);
+    }
+    const shared = resource;
+    shared.refs++;
+    let released = false;
+    return {
+        supervisor: shared.supervisor,
+        controller: () => shared.controller ??= CiToolController.start().catch(() => {
+            console.warn('[cez] CI-wait tool unavailable; ordinary runs remain enabled.');
+            return undefined;
+        }),
+        release() {
+            if (released)
+                return;
+            released = true;
+            if (--shared.refs !== 0)
+                return;
+            workspaces.delete(workspace);
+            shared.supervisor.close();
+            void shared.controller?.then(controller => controller?.close()).catch(() => { });
+        },
+    };
+}
+//# sourceMappingURL=resources.js.map

package/dist/ci-wait/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/ci-wait/resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,4FAA4F;AAC5F,MAAM,UAAU,GAAG,IAAI,OAAO,EAI1B,CAAC;AAEL,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,mBAAmB,EAAE,EAAE,CAAC;QAC9D,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC;IACxB,MAAM,CAAC,IAAI,EAAE,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,gBAAgB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1E,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,OAAO;YAChC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7B,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ci-wait/supervisor.d.ts

@@ -0,0 +1,21 @@
+import { type CiPrIdentity, type CiWait, type CiWaitResult } from '../contract/index.js';
+import { GithubCiClient } from './github.ts';
+export declare const CI_WATCHER_LIMIT = 4;
+export declare const CI_PROBE_MS = 10000;
+export declare const CI_DISCOVERY_MS = 60000;
+export declare const CI_RETRY_MS: readonly [1000, 5000, 15000];
+export declare const CI_RESULT_LIMIT: number;
+/** One shared instance per workspace; queues watchers FIFO without extending their deadlines. */
+export declare class CiWatcherSupervisor {
+    private readonly lifetime;
+    private readonly slots;
+    private readonly github;
+    private readonly current;
+    constructor(options?: {
+        github?: GithubCiClient;
+    });
+    resolve(pr: string, signal?: AbortSignal): Promise<CiPrIdentity>;
+    watch(wait: CiWait, signal: AbortSignal): Promise<CiWaitResult>;
+    close(): void;
+    private run;
+}

package/dist/ci-wait/supervisor.js

@@ -0,0 +1,163 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { ciWaitSchema, ciWaitResultSchema } from '../contract/index.js';
+import { CiGithubError, CiSemaphore, GithubCiClient } from './github.js';
+export const CI_WATCHER_LIMIT = 4;
+export const CI_PROBE_MS = 10_000;
+export const CI_DISCOVERY_MS = 60_000;
+export const CI_RETRY_MS = [1_000, 5_000, 15_000];
+export const CI_RESULT_LIMIT = 32 * 1024;
+function clean(value, max) {
+    return value.replace(/\x1b\][^\x07]*(?:\x07|\x1b\\)/g, '').replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, '').replace(/[\x00-\x1f\x7f-\x9f]/g, '').slice(0, max);
+}
+function safeLink(value) {
+    if (value.length > 2048 || /[\x00-\x20\x7f]/.test(value))
+        return '';
+    try {
+        const url = new URL(value);
+        if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash)
+            return '';
+        return url.href.length <= 2048 ? url.href : '';
+    }
+    catch {
+        return '';
+    }
+}
+function outcome(checks) {
+    if (!checks.length || checks.some(c => c.bucket === 'pending'))
+        return undefined;
+    if (checks.some(c => c.bucket === 'fail'))
+        return 'failed';
+    if (checks.some(c => c.bucket === 'cancel'))
+        return 'cancelled';
+    if (checks.some(c => c.bucket === 'skipping'))
+        return 'skipped';
+    return 'passed';
+}
+function observation(wait, result, rows, extra = {}) {
+    const checks = rows.slice(0, 100).map(row => ({ name: clean(row.name, 256), state: clean(row.state, 256), link: safeLink(row.link) }));
+    const value = { outcome: result, headSha: wait.headSha, observedAt: new Date().toISOString(), checks, totalChecks: rows.length, truncated: rows.length > checks.length || rows.some((row, i) => i < checks.length && (row.name !== checks[i].name || row.state !== checks[i].state || row.link !== checks[i].link)), ...extra };
+    while (Buffer.byteLength(JSON.stringify(value)) > CI_RESULT_LIMIT && checks.length) {
+        checks.pop();
+        value.truncated = true;
+    }
+    return ciWaitResultSchema.parse(value);
+}
+/** One shared instance per workspace; queues watchers FIFO without extending their deadlines. */
+export class CiWatcherSupervisor {
+    lifetime = new AbortController();
+    slots = new CiSemaphore(CI_WATCHER_LIMIT);
+    github;
+    current = new Map();
+    constructor(options = {}) { this.github = options.github ?? new GithubCiClient(); }
+    async resolve(pr, signal) {
+        const bounded = AbortSignal.any([this.lifetime.signal, ...(signal ? [signal] : []), AbortSignal.timeout(10_000)]);
+        try {
+            return await this.github.resolve(pr, bounded);
+        }
+        catch (error) {
+            if (bounded.aborted && !this.lifetime.signal.aborted && !signal?.aborted)
+                throw new CiGithubError('query_timeout', 'PR registration exceeded ten seconds; retry when GitHub is available.');
+            throw error;
+        }
+    }
+    watch(wait, signal) {
+        const existing = this.current.get(wait.id);
+        if (existing)
+            return existing;
+        const task = this.run(wait, signal).finally(() => { this.current.delete(wait.id); });
+        this.current.set(wait.id, task);
+        return task;
+    }
+    close() { this.lifetime.abort(); }
+    async run(wait, caller) {
+        const remaining = Date.parse(wait.deadline) - Date.now();
+        if (!ciWaitSchema.safeParse(wait).success)
+            return observation({ ...wait, headSha: /^[0-9a-f]{40}$/i.test(wait.headSha ?? '') ? wait.headSha : '0'.repeat(40) }, 'error', [], { diagnostic: 'malformed_data: Persisted CI wait is invalid; an all-zero head denotes an unavailable original identity. Register a new wait.' });
+        const deadline = AbortSignal.timeout(Math.max(0, Math.min(remaining, 7_200_000)));
+        const signal = AbortSignal.any([caller, this.lifetime.signal, deadline]);
+        let rows = [];
+        let release;
+        let retry = 0;
+        const discoveryDeadline = Math.min(Date.parse(wait.deadline), Date.now() + CI_DISCOVERY_MS);
+        const stopped = () => observation(wait, caller.aborted || this.lifetime.signal.aborted ? 'cancelled' : 'deadline', rows);
+        if (remaining <= 0 || signal.aborted)
+            return stopped();
+        const snapshot = async () => {
+            const before = await this.github.head(wait, signal);
+            if (before !== wait.headSha)
+                return observation(wait, 'head_changed', rows, { observedHeadSha: before });
+            const observed = await this.github.checks(wait, signal);
+            const after = await this.github.head(wait, signal);
+            if (after !== wait.headSha)
+                return observation(wait, 'head_changed', rows, { observedHeadSha: after });
+            rows = observed;
+            const settled = outcome(rows);
+            return settled ? observation(wait, settled, rows) : undefined;
+        };
+        try {
+            release = await this.slots.acquire(signal);
+            while (!signal.aborted) {
+                try {
+                    const settled = await snapshot();
+                    if (settled)
+                        return settled;
+                    if (!rows.length) {
+                        if (Date.now() >= discoveryDeadline)
+                            return observation(wait, 'no_checks', rows);
+                        await delay(Math.min(CI_PROBE_MS, discoveryDeadline - Date.now()), undefined, { signal });
+                        continue;
+                    }
+                    const watchAbort = new AbortController();
+                    const watchSignal = AbortSignal.any([signal, watchAbort.signal]);
+                    // Attach a rejection handler immediately; the watcher may finish during a head probe.
+                    const watcher = this.github.watch(wait, watchSignal).then(() => ({ done: true }), error => ({ done: true, error }));
+                    try {
+                        while (!signal.aborted) {
+                            const tick = new AbortController();
+                            const next = await Promise.race([watcher, delay(CI_PROBE_MS, { done: false }, { signal: AbortSignal.any([signal, tick.signal]) }).catch(() => ({ done: false }))]);
+                            tick.abort();
+                            signal.throwIfAborted();
+                            if (next.done) {
+                                if ('error' in next)
+                                    throw next.error;
+                                const final = await snapshot();
+                                if (final)
+                                    return final;
+                                // A stale CLI watch completion never turns a pending snapshot into success.
+                                await delay(CI_PROBE_MS, undefined, { signal });
+                                break;
+                            }
+                            const head = await this.github.head(wait, signal);
+                            if (head !== wait.headSha)
+                                return observation(wait, 'head_changed', rows, { observedHeadSha: head });
+                        }
+                    }
+                    finally {
+                        watchAbort.abort();
+                        // Capacity is retained until the owned child (including forced termination) exits.
+                        await watcher;
+                    }
+                }
+                catch (error) {
+                    if (signal.aborted)
+                        return stopped();
+                    if (error instanceof CiGithubError && error.transient && retry < CI_RETRY_MS.length) {
+                        await delay(CI_RETRY_MS[retry++], undefined, { signal });
+                        continue;
+                    }
+                    return observation(wait, 'error', rows, { diagnostic: error instanceof CiGithubError ? `${error.code}: ${error.message}` : 'unavailable: CI watcher failed; register a new wait.' });
+                }
+            }
+            return stopped();
+        }
+        catch (error) {
+            if (signal.aborted)
+                return stopped();
+            return observation(wait, 'error', rows, { diagnostic: error instanceof CiGithubError ? `${error.code}: ${error.message}` : 'unavailable: CI watcher failed; register a new wait.' });
+        }
+        finally {
+            release?.();
+        }
+    }
+}
+//# sourceMappingURL=supervisor.js.map