devharness 0.9.4 → 0.9.6

package/build/github/gh-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh-cli.d.ts","sourceRoot":"","sources":["../../src/github/gh-cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAGzF,MAAM,MAAM,aAAa,GACrB,kBAAkB,GAClB,sBAAsB,GACtB,YAAY,GACZ,YAAY,GACZ,WAAW,CAAC;AAEhB,qBAAa,OAAQ,SAAQ,KAAK;IAG9B,QAAQ,CAAC,IAAI,EAAE,aAAa;IAE5B,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE;IALzB,QAAQ,CAAC,IAAI,aAAa;gBAEf,IAAI,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,EACN,MAAM,GAAE,MAAW,EACnB,IAAI,GAAE,MAAM,EAAO;CAI/B;AAED,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAK5C,KAAK,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAC;AAIxF,uDAAuD;AACvD,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,GAAG,IAAI,CAE3D;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAYD;;;;;;;GAOG;AACH,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CA0F9E;AAED,wBAAsB,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAOtF;AAED,kDAAkD;AAClD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,SAAM,GAAG,MAAM,CAG1D"}

package/build/github/gh-cli.js

@@ -0,0 +1,147 @@
+/**
+ * The `gh` CLI as a bounded subprocess.
+ *
+ * Every call is time-boxed and every failure is a typed code. Bug 003 is the
+ * precedent: an unbounded wait blocked an autonomous agent for 25 minutes and
+ * destroyed its report. A clear immediate error is fine; a hang is not.
+ */
+import { spawn as nodeSpawn } from 'child_process';
+import { getProjectDir } from '../helpers/paths.js';
+export class GhError extends Error {
+    code;
+    stderr;
+    args;
+    name = 'GhError';
+    constructor(code, message, stderr = '', args = []) {
+        super(message);
+        this.code = code;
+        this.stderr = stderr;
+        this.args = args;
+    }
+}
+export const DEFAULT_GH_TIMEOUT_MS = 20_000;
+/** Grace between SIGTERM and SIGKILL. The promise has already rejected. */
+const KILL_GRACE_MS = 2_000;
+const MAX_OUTPUT_BYTES = 4 * 1024 * 1024;
+let spawnImpl = nodeSpawn;
+/** Test seam - pass null to restore the real spawn. */
+export function setGhSpawnForTests(fn) {
+    spawnImpl = fn ?? nodeSpawn;
+}
+function classify(stderr, args) {
+    if (/gh auth login|not logged (in|into)|authentication token|HTTP 401/i.test(stderr)) {
+        return new GhError('GH_NOT_AUTHENTICATED', 'Not authenticated with GitHub', stderr, args);
+    }
+    if (/none of the git remotes|not a git repository|could not determine.*repository|no git remotes/i.test(stderr)) {
+        return new GhError('GH_NO_REPO', 'No GitHub repository for this directory', stderr, args);
+    }
+    return new GhError('GH_FAILED', `gh ${args[0] ?? ''} failed`, stderr, args);
+}
+/**
+ * Run `gh` and resolve its stdout.
+ *
+ * stdin is closed immediately and unconditionally: a `gh` that decides to
+ * prompt then reads EOF and exits, instead of waiting forever on a pipe
+ * nobody will write to. The env vars kill the other hang vectors - a pager
+ * attached to a pipe, and the update-check network call.
+ */
+export function runGh(args, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_GH_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+        let child;
+        try {
+            child = spawnImpl('gh', args, {
+                cwd: opts.cwd ?? getProjectDir(),
+                stdio: ['pipe', 'pipe', 'pipe'],
+                env: {
+                    ...process.env,
+                    GH_PROMPT_DISABLED: '1',
+                    GH_NO_UPDATE_NOTIFIER: '1',
+                    GH_PAGER: 'cat',
+                    PAGER: 'cat',
+                    NO_COLOR: '1',
+                    CLICOLOR: '0',
+                },
+            });
+        }
+        catch (err) {
+            reject(new GhError('GH_FAILED', `Could not start gh: ${err.message}`, '', args));
+            return;
+        }
+        let stdout = '';
+        let stderr = '';
+        let settled = false;
+        let killTimer;
+        const cleanup = () => {
+            clearTimeout(timer);
+            if (killTimer)
+                clearTimeout(killTimer);
+            opts.signal?.removeEventListener('abort', onAbort);
+        };
+        /** Reject now; escalate to SIGKILL in the background. We never wait on it. */
+        const abandon = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            child.kill('SIGTERM');
+            killTimer = setTimeout(() => child.kill('SIGKILL'), KILL_GRACE_MS);
+            killTimer.unref?.();
+            reject(err);
+        };
+        const timer = setTimeout(() => {
+            abandon(new GhError('GH_TIMEOUT', `gh ${args[0] ?? ''} exceeded ${Math.round(timeoutMs / 1000)}s and was cancelled`, stderr, args));
+        }, timeoutMs);
+        const onAbort = () => abandon(new GhError('GH_FAILED', 'Cancelled', stderr, args));
+        opts.signal?.addEventListener('abort', onAbort, { once: true });
+        // Before any await point, so a prompting gh always sees EOF.
+        if (opts.stdin)
+            child.stdin?.write(opts.stdin);
+        child.stdin?.end();
+        child.stdout?.on('data', (chunk) => {
+            stdout += chunk.toString();
+            if (stdout.length > MAX_OUTPUT_BYTES) {
+                abandon(new GhError('GH_FAILED', 'gh produced more output than expected', stderr, args));
+            }
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderr += chunk.toString();
+            if (stderr.length > MAX_OUTPUT_BYTES)
+                stderr = stderr.slice(0, MAX_OUTPUT_BYTES);
+        });
+        child.on('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            reject(err.code === 'ENOENT'
+                ? new GhError('GH_NOT_INSTALLED', 'The gh CLI is not installed or not on PATH', '', args)
+                : new GhError('GH_FAILED', `Could not run gh: ${err.message}`, stderr, args));
+        });
+        child.on('close', (code) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            if (code === 0)
+                resolve(stdout);
+            else
+                reject(classify(stderr, args));
+        });
+    });
+}
+export async function runGhJson(args, opts = {}) {
+    const stdout = await runGh(args, opts);
+    try {
+        return JSON.parse(stdout);
+    }
+    catch {
+        throw new GhError('GH_FAILED', `gh ${args[0] ?? ''} returned output that is not JSON`, stdout.slice(0, 500), args);
+    }
+}
+/** Truncated stderr for a user-facing message. */
+export function ghDetail(err, limit = 500) {
+    const text = (err.stderr || err.message).trim();
+    return text.length > limit ? `${text.slice(0, limit)}…` : text;
+}
+//# sourceMappingURL=gh-cli.js.map

package/build/github/gh-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh-cli.js","sourceRoot":"","sources":["../../src/github/gh-cli.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAwC,MAAM,eAAe,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASpD,MAAM,OAAO,OAAQ,SAAQ,KAAK;IAGrB;IAEA;IACA;IALF,IAAI,GAAG,SAAS,CAAC;IAC1B,YACW,IAAmB,EAC5B,OAAe,EACN,SAAiB,EAAE,EACnB,OAAiB,EAAE;QAE5B,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,SAAI,GAAJ,IAAI,CAAe;QAEnB,WAAM,GAAN,MAAM,CAAa;QACnB,SAAI,GAAJ,IAAI,CAAe;IAG9B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,2EAA2E;AAC3E,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAIzC,IAAI,SAAS,GAAY,SAAoB,CAAC;AAE9C,uDAAuD;AACvD,MAAM,UAAU,kBAAkB,CAAC,EAAkB;IACnD,SAAS,GAAG,EAAE,IAAK,SAAqB,CAAC;AAC3C,CAAC;AAUD,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAc;IAC9C,IAAI,mEAAmE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrF,OAAO,IAAI,OAAO,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,8FAA8F,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChH,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,yCAAyC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,KAAK,CAAC,IAAc,EAAE,OAAqB,EAAE;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAE1D,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE;gBAC5B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE;gBAChC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,kBAAkB,EAAE,GAAG;oBACvB,qBAAqB,EAAE,GAAG;oBAC1B,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,KAAK;oBACZ,QAAQ,EAAE,GAAG;oBACb,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAqC,CAAC;QAE1C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC;QAEF,8EAA8E;QAC9E,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;YACnE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,CAAC,IAAI,OAAO,CACjB,YAAY,EACZ,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,qBAAqB,EACjF,MAAM,EACN,IAAI,CACL,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,6DAA6D;QAC7D,IAAI,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAEnB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,uCAAuC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;gBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA0B,EAAE,EAAE;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAC1B,CAAC,CAAC,IAAI,OAAO,CAAC,kBAAkB,EAAE,4CAA4C,EAAE,EAAE,EAAE,IAAI,CAAC;gBACzF,CAAC,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;;gBAC3B,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAI,IAAc,EAAE,OAAqB,EAAE;IACxE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,mCAAmC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,QAAQ,CAAC,GAAY,EAAE,KAAK,GAAG,GAAG;IAChD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}

package/build/github/gh-cli.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=gh-cli.test.d.ts.map

package/build/github/gh-cli.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh-cli.test.d.ts","sourceRoot":"","sources":["../../src/github/gh-cli.test.ts"],"names":[],"mappings":""}

package/build/github/gh-cli.test.js

@@ -0,0 +1,145 @@
+// @vitest-environment node
+import { describe, it, expect, afterEach, vi } from 'vitest';
+import { EventEmitter } from 'events';
+import { promises as fsp } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { runGh, runGhJson, setGhSpawnForTests, GhError, DEFAULT_GH_TIMEOUT_MS } from './gh-cli.js';
+/** A child that behaves however the test needs, recording what was done to it. */
+function fakeChild() {
+    const child = new EventEmitter();
+    child.stdout = new EventEmitter();
+    child.stderr = new EventEmitter();
+    child.stdinEnded = false;
+    child.written = '';
+    child.signals = [];
+    child.stdin = {
+        write: (s) => { child.written += s; },
+        end: () => { child.stdinEnded = true; },
+    };
+    child.kill = (sig) => { child.signals.push(sig); return true; };
+    return child;
+}
+function useChild(child, capture) {
+    setGhSpawnForTests(((_cmd, args, opts) => {
+        capture?.(args, opts);
+        return child;
+    }));
+    return child;
+}
+afterEach(() => {
+    setGhSpawnForTests(null);
+    vi.useRealTimers();
+});
+describe('runGh', () => {
+    it('resolves stdout on a clean exit', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        child.stdout.emit('data', '[]');
+        child.emit('close', 0);
+        await expect(promise).resolves.toBe('[]');
+    });
+    it('closes stdin immediately, before anything can block', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'create'], { stdin: 'body text' });
+        // Asserted before the process has exited: a prompting gh must already
+        // have seen EOF by now, not after we finish reading its output.
+        expect(child.stdinEnded).toBe(true);
+        expect(child.written).toBe('body text');
+        child.emit('close', 0);
+        await promise;
+    });
+    it('disables the pager and prompts, the two hang vectors', async () => {
+        let seen;
+        const child = useChild(fakeChild(), (_args, opts) => { seen = opts; });
+        const promise = runGh(['repo', 'view']);
+        expect(seen.env.GH_PROMPT_DISABLED).toBe('1');
+        expect(seen.env.GH_PAGER).toBe('cat');
+        expect(seen.env.GH_NO_UPDATE_NOTIFIER).toBe('1');
+        child.emit('close', 0);
+        await promise;
+    });
+    it('rejects with GH_TIMEOUT when the child never exits, then escalates to SIGKILL', async () => {
+        vi.useFakeTimers();
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        const assertion = expect(promise).rejects.toMatchObject({ code: 'GH_TIMEOUT' });
+        // The child emits nothing, ever - the bug-003 shape.
+        await vi.advanceTimersByTimeAsync(DEFAULT_GH_TIMEOUT_MS + 1);
+        await assertion;
+        expect(child.signals).toEqual(['SIGTERM']);
+        await vi.advanceTimersByTimeAsync(2_001);
+        expect(child.signals).toEqual(['SIGTERM', 'SIGKILL']);
+    });
+    it('reports GH_NOT_INSTALLED when gh is missing', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        const err = Object.assign(new Error('spawn gh ENOENT'), { code: 'ENOENT' });
+        child.emit('error', err);
+        await expect(promise).rejects.toMatchObject({ code: 'GH_NOT_INSTALLED' });
+    });
+    it('reports GH_NOT_AUTHENTICATED from stderr', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        child.stderr.emit('data', 'gh: To get started with GitHub CLI, please run: gh auth login\n');
+        child.emit('close', 4);
+        await expect(promise).rejects.toMatchObject({ code: 'GH_NOT_AUTHENTICATED' });
+    });
+    it('reports GH_NO_REPO when the directory has no GitHub remote', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        child.stderr.emit('data', 'none of the git remotes configured for this repository point to a known GitHub host\n');
+        child.emit('close', 1);
+        await expect(promise).rejects.toMatchObject({ code: 'GH_NO_REPO' });
+    });
+    it('falls back to GH_FAILED and keeps stderr for the message', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'view', '9999']);
+        child.stderr.emit('data', 'GraphQL: Could not resolve to an Issue with the number of 9999.\n');
+        child.emit('close', 1);
+        await expect(promise).rejects.toMatchObject({
+            code: 'GH_FAILED',
+            stderr: expect.stringContaining('Could not resolve'),
+        });
+    });
+    it('rejects rather than throwing when stdout is not JSON', async () => {
+        const child = useChild(fakeChild());
+        const promise = runGhJson(['issue', 'list']);
+        child.stdout.emit('data', 'not json at all');
+        child.emit('close', 0);
+        await expect(promise).rejects.toBeInstanceOf(GhError);
+    });
+    it('ignores a late close after the timeout already rejected', async () => {
+        vi.useFakeTimers();
+        const child = useChild(fakeChild());
+        const promise = runGh(['issue', 'list']);
+        const assertion = expect(promise).rejects.toMatchObject({ code: 'GH_TIMEOUT' });
+        await vi.advanceTimersByTimeAsync(DEFAULT_GH_TIMEOUT_MS + 1);
+        await assertion;
+        // A SIGTERMed gh still emits close; it must not produce an unhandled
+        // resolution of an already-rejected promise.
+        expect(() => child.emit('close', 0)).not.toThrow();
+    });
+});
+describe('runGh against a real process', () => {
+    // The injected tests prove classification; only this one proves the actual
+    // spawn path cannot hang.
+    it('kills a real gh that never exits', async () => {
+        const dir = await fsp.mkdtemp(join(tmpdir(), 'gh-stub-'));
+        const stub = join(dir, 'gh');
+        await fsp.writeFile(stub, '#!/bin/sh\nsleep 300\n', { mode: 0o755 });
+        const originalPath = process.env.PATH;
+        process.env.PATH = `${dir}:${originalPath}`;
+        try {
+            const started = Date.now();
+            await expect(runGh(['issue', 'list'], { timeoutMs: 750 }))
+                .rejects.toMatchObject({ code: 'GH_TIMEOUT' });
+            expect(Date.now() - started).toBeLessThan(5_000);
+        }
+        finally {
+            process.env.PATH = originalPath;
+            await fsp.rm(dir, { recursive: true, force: true });
+        }
+    }, 10_000);
+});
+//# sourceMappingURL=gh-cli.test.js.map

package/build/github/gh-cli.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh-cli.test.js","sourceRoot":"","sources":["../../src/github/gh-cli.test.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEnG,kFAAkF;AAClF,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,IAAI,YAAY,EAAS,CAAC;IACxC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,KAAK,CAAC,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;IAClC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;IACzB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,CAAC,OAAO,GAAG,EAAc,CAAC;IAC/B,KAAK,CAAC,KAAK,GAAG;QACZ,KAAK,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;KACxC,CAAC;IACF,KAAK,CAAC,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAU,EAAE,OAA6C;IACzE,kBAAkB,CAAC,CAAC,CAAC,IAAY,EAAE,IAAc,EAAE,IAAS,EAAE,EAAE;QAC9D,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC,CAAQ,CAAC,CAAC;IACX,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,EAAE,CAAC,aAAa,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACnE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,IAAI,IAAS,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,OAAO,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAEhF,qDAAqD;QACrD,MAAM,EAAE,CAAC,wBAAwB,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE3C,MAAM,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,iEAAiE,CAAC,CAAC;QAC7F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,uFAAuF,CAAC,CAAC;QACnH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,mEAAmE,CAAC,CAAC;QAC/F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;YAC1C,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC;SACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAChF,MAAM,EAAE,CAAC,wBAAwB,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,CAAC;QAChB,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,2EAA2E;IAC3E,0BAA0B;IAC1B,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,YAAY,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;iBACvD,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;YAChC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/build/github/gh-issues.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Typed `gh` operations for issues, and the pure policy that decides what a
+ * sync should do. The policy is separated so the truth table is testable
+ * without a subprocess.
+ */
+import { type RunGhOptions } from './gh-cli.js';
+import { type IssueClosedReason, type IssueStatus, type TrackedIssue } from '../issue-tracker.js';
+export interface RemoteComment {
+    id: string;
+    body: string;
+    author: string;
+    createdAt: string;
+}
+export interface RemoteIssue {
+    number: number;
+    title: string;
+    body: string;
+    author: string;
+    state: 'OPEN' | 'CLOSED';
+    stateReason?: string | null;
+    labels: string[];
+    updatedAt: string;
+    url: string;
+    comments: RemoteComment[];
+}
+/** The subset `gh issue list` returns - no body, no comments. */
+export type RemoteIssueSummary = Omit<RemoteIssue, 'body' | 'title' | 'comments' | 'author'>;
+export declare function ghRepoName(repo?: string, opts?: RunGhOptions): Promise<string>;
+export declare function ghExistingLabels(repo?: string, opts?: RunGhOptions): Promise<Set<string>>;
+export declare function ghCreateLabel(name: string, repo?: string, opts?: RunGhOptions): Promise<void>;
+/** `gh issue create` has no --json; it prints the URL. */
+export declare function ghCreateIssue(params: {
+    title: string;
+    body: string;
+    labels: string[];
+    repo?: string;
+}, opts?: RunGhOptions): Promise<{
+    number: number;
+    url: string;
+} | {
+    number: null;
+    url: string;
+    raw: string;
+}>;
+export declare function ghViewIssue(number: number, repo?: string, opts?: RunGhOptions): Promise<RemoteIssue>;
+/** The login gh is authenticated as - the yardstick for "did someone else
+ *  write this". */
+export declare function ghCurrentUser(opts?: RunGhOptions): Promise<string>;
+export declare function ghListIssues(repo?: string, opts?: RunGhOptions): Promise<RemoteIssueSummary[]>;
+export declare function ghEditBody(number: number, body: string, repo?: string, opts?: RunGhOptions): Promise<void>;
+export declare function ghAddComment(number: number, body: string, repo?: string, opts?: RunGhOptions): Promise<void>;
+export declare function ghCloseIssue(number: number, reason: IssueClosedReason, repo?: string, opts?: RunGhOptions): Promise<void>;
+export declare function markComment(id: string, body: string): string;
+export declare function commentGithubId(text: string): string | null;
+export declare function stripCommentMarker(text: string): string;
+export declare function stripLocalMarker(body: string): string;
+export declare function bodyHash(body: string): string;
+export declare function closedReasonFrom(stateReason: string | null | undefined): IssueClosedReason;
+export type SyncAction = {
+    kind: 'none';
+} | {
+    kind: 'pull';
+} | {
+    kind: 'push';
+} | {
+    kind: 'conflict';
+} | {
+    kind: 'missing-upstream';
+};
+export interface SyncClassification {
+    action: SyncAction['kind'];
+    localChanged: boolean;
+    remoteChanged: boolean;
+    /** First sync for this issue - adopt rather than claim a conflict. */
+    firstSync: boolean;
+}
+/**
+ * Which side moved since the two last agreed.
+ *
+ * With no baseline this is a first sync: adopt whichever side has content
+ * rather than reporting a conflict on an issue nobody has actually edited.
+ */
+export declare function classifySync(local: Pick<TrackedIssue, 'body' | 'githubBodyHash' | 'githubSyncedAt'>, remote: {
+    updatedAt: string;
+} | undefined, strippedLocalBody: string): SyncClassification;
+export interface StatusResolution {
+    status?: IssueStatus;
+    closedReason?: IssueClosedReason;
+    resolvedAt?: Date;
+    /** Upstream is open while we think it is closed - close it up there. */
+    closeUpstream?: IssueClosedReason;
+    reopened?: boolean;
+}
+/**
+ * How local status and upstream state reconcile.
+ *
+ * devharness closes issues upstream but never reopens them; GitHub can do
+ * both locally. That asymmetry is what keeps an automated sync from undoing
+ * a human's decision on a public issue.
+ */
+export declare function resolveStatus(local: Pick<TrackedIssue, 'type' | 'status' | 'closedReason' | 'startedAt' | 'resolvedAt'>, remote: Pick<RemoteIssueSummary, 'state' | 'stateReason'>, now: Date): StatusResolution;
+/** Upstream labels are added, never removed - a replace would delete exactly
+ *  the local-only tags that carry the triage meaning. */
+export declare function unionLabels(local: string[], remote: string[]): string[];
+//# sourceMappingURL=gh-issues.d.ts.map

package/build/github/gh-issues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh-issues.d.ts","sourceRoot":"","sources":["../../src/github/gh-issues.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,iEAAiE;AACjE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAa7F,wBAAsB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAIpF;AAED,wBAAsB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAK/F;AAED,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnG;AAED,0DAA0D;AAC1D,wBAAsB,aAAa,CACjC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EACxE,IAAI,CAAC,EAAE,YAAY,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAUvF;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAwB1G;AAED;mBACmB;AACnB,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAED,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAepG;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhH;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAElH;AAED,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,GAC5E,OAAO,CAAC,IAAI,CAAC,CAGf;AAWD,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAOD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAMD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,CAI1F;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAEjC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,sEAAsE;IACtE,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,EACvE,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EACzC,iBAAiB,EAAE,MAAM,GACxB,kBAAkB,CAmBpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,wEAAwE;IACxE,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,cAAc,GAAG,WAAW,GAAG,YAAY,CAAC,EAC1F,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,OAAO,GAAG,aAAa,CAAC,EACzD,GAAG,EAAE,IAAI,GACR,gBAAgB,CAwBlB;AAED;yDACyD;AACzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAIvE"}

package/build/github/gh-issues.js

@@ -0,0 +1,199 @@
+/**
+ * Typed `gh` operations for issues, and the pure policy that decides what a
+ * sync should do. The policy is separated so the truth table is testable
+ * without a subprocess.
+ */
+import { createHash } from 'crypto';
+import { runGh, runGhJson } from './gh-cli.js';
+import { completedStatusFor, isCompletedStatus, } from '../issue-tracker.js';
+function repoArgs(repo) {
+    return repo ? ['--repo', repo] : [];
+}
+function normaliseLabels(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    return raw
+        .map(l => (typeof l === 'string' ? l : l?.name))
+        .filter((l) => typeof l === 'string' && l.length > 0);
+}
+export async function ghRepoName(repo, opts) {
+    if (repo)
+        return repo;
+    const result = await runGhJson(['repo', 'view', '--json', 'nameWithOwner'], opts);
+    return result.nameWithOwner;
+}
+export async function ghExistingLabels(repo, opts) {
+    const raw = await runGhJson(['label', 'list', '--limit', '200', '--json', 'name', ...repoArgs(repo)], opts);
+    return new Set(raw.map(l => l.name));
+}
+export async function ghCreateLabel(name, repo, opts) {
+    await runGh(['label', 'create', name, ...repoArgs(repo)], opts);
+}
+/** `gh issue create` has no --json; it prints the URL. */
+export async function ghCreateIssue(params, opts) {
+    const args = ['issue', 'create', '--title', params.title, '--body-file', '-', ...repoArgs(params.repo)];
+    for (const label of params.labels)
+        args.push('--label', label);
+    const stdout = await runGh(args, { ...opts, stdin: params.body });
+    const match = stdout.match(/\/issues\/(\d+)\s*$/m);
+    const url = stdout.trim().split(/\s+/).pop() ?? stdout.trim();
+    // The issue exists either way - an unparseable number is a stamping
+    // problem, never a create failure.
+    return match ? { number: parseInt(match[1], 10), url } : { number: null, url, raw: stdout };
+}
+export async function ghViewIssue(number, repo, opts) {
+    const raw = await runGhJson([
+        'issue', 'view', String(number),
+        '--json', 'number,title,body,author,state,stateReason,labels,updatedAt,url,comments',
+        ...repoArgs(repo),
+    ], opts);
+    return {
+        number: raw.number,
+        title: raw.title ?? '',
+        body: raw.body ?? '',
+        author: raw.author?.login ?? '',
+        state: raw.state === 'CLOSED' ? 'CLOSED' : 'OPEN',
+        stateReason: raw.stateReason ?? null,
+        labels: normaliseLabels(raw.labels),
+        updatedAt: raw.updatedAt,
+        url: raw.url,
+        comments: (raw.comments ?? []).map((c) => ({
+            id: String(c.id ?? c.url ?? ''),
+            body: c.body ?? '',
+            author: c.author?.login ?? '',
+            createdAt: c.createdAt ?? '',
+        })),
+    };
+}
+/** The login gh is authenticated as - the yardstick for "did someone else
+ *  write this". */
+export async function ghCurrentUser(opts) {
+    const out = await runGh(['api', 'user', '--jq', '.login'], opts);
+    return out.trim();
+}
+export async function ghListIssues(repo, opts) {
+    const raw = await runGhJson([
+        'issue', 'list', '--state', 'all', '--limit', '200',
+        '--json', 'number,state,stateReason,labels,updatedAt,url',
+        ...repoArgs(repo),
+    ], opts);
+    return raw.map(r => ({
+        number: r.number,
+        state: r.state === 'CLOSED' ? 'CLOSED' : 'OPEN',
+        stateReason: r.stateReason ?? null,
+        labels: normaliseLabels(r.labels),
+        updatedAt: r.updatedAt,
+        url: r.url,
+    }));
+}
+export async function ghEditBody(number, body, repo, opts) {
+    await runGh(['issue', 'edit', String(number), '--body-file', '-', ...repoArgs(repo)], { ...opts, stdin: body });
+}
+export async function ghAddComment(number, body, repo, opts) {
+    await runGh(['issue', 'comment', String(number), '--body-file', '-', ...repoArgs(repo)], { ...opts, stdin: body });
+}
+export async function ghCloseIssue(number, reason, repo, opts) {
+    const ghReason = reason === 'not_planned' ? 'not planned' : reason;
+    await runGh(['issue', 'close', String(number), '--reason', ghReason, ...repoArgs(repo)], opts);
+}
+// =============================================================================
+// Comment identity
+// =============================================================================
+/** Hidden marker naming the upstream comment a local comment came from. It
+ *  lives inside the comment text, so it needs no schema change and survives
+ *  the existing parse/serialize round trip. */
+const GH_COMMENT_MARKER_RE = /^<!-- gh: (.+?) -->\r?\n?/;
+export function markComment(id, body) {
+    return `<!-- gh: ${id} -->\n${body}`;
+}
+export function commentGithubId(text) {
+    const match = text.match(GH_COMMENT_MARKER_RE);
+    return match ? match[1] : null;
+}
+export function stripCommentMarker(text) {
+    return text.replace(GH_COMMENT_MARKER_RE, '');
+}
+/** The `<!-- devharness: local #N -->` marker publish appends to the GitHub
+ *  body. It is upstream-only metadata: strip it from anything stored or
+ *  hashed locally, or a pull-then-push cycle accretes one marker per sync. */
+const LOCAL_MARKER_RE = /\n*<!--\s*devharness: local #\d+\s*-->/g;
+export function stripLocalMarker(body) {
+    return body.replace(LOCAL_MARKER_RE, '');
+}
+// =============================================================================
+// Sync policy (pure)
+// =============================================================================
+export function bodyHash(body) {
+    return createHash('sha256').update(body, 'utf8').digest('hex').slice(0, 16);
+}
+export function closedReasonFrom(stateReason) {
+    const value = (stateReason ?? '').toLowerCase().replace(/\s+/g, '_');
+    if (value === 'not_planned' || value === 'duplicate')
+        return value;
+    return 'completed';
+}
+/**
+ * Which side moved since the two last agreed.
+ *
+ * With no baseline this is a first sync: adopt whichever side has content
+ * rather than reporting a conflict on an issue nobody has actually edited.
+ */
+export function classifySync(local, remote, strippedLocalBody) {
+    if (!remote) {
+        return { action: 'missing-upstream', localChanged: false, remoteChanged: false, firstSync: false };
+    }
+    const firstSync = !local.githubSyncedAt || !local.githubBodyHash;
+    if (firstSync) {
+        return { action: 'pull', localChanged: false, remoteChanged: true, firstSync: true };
+    }
+    const localChanged = bodyHash(strippedLocalBody) !== local.githubBodyHash;
+    const remoteChanged = new Date(remote.updatedAt).getTime() > local.githubSyncedAt.getTime();
+    let action = 'none';
+    if (localChanged && remoteChanged)
+        action = 'conflict';
+    else if (remoteChanged)
+        action = 'pull';
+    else if (localChanged)
+        action = 'push';
+    return { action, localChanged, remoteChanged, firstSync: false };
+}
+/**
+ * How local status and upstream state reconcile.
+ *
+ * devharness closes issues upstream but never reopens them; GitHub can do
+ * both locally. That asymmetry is what keeps an automated sync from undoing
+ * a human's decision on a public issue.
+ */
+export function resolveStatus(local, remote, now) {
+    const localClosed = isCompletedStatus(local.status);
+    if (remote.state === 'CLOSED') {
+        const closedReason = closedReasonFrom(remote.stateReason);
+        if (localClosed)
+            return { closedReason };
+        return { status: completedStatusFor(local.type), closedReason, resolvedAt: now };
+    }
+    // Upstream is open.
+    if (!localClosed)
+        return {};
+    // Closed here and open there. If we had recorded a close, GitHub reopened
+    // it - follow. Otherwise this close has not reached GitHub yet.
+    if (local.closedReason) {
+        return {
+            status: local.startedAt ? 'in_progress' : 'acknowledged',
+            closedReason: undefined,
+            resolvedAt: undefined,
+            reopened: true,
+        };
+    }
+    return { closeUpstream: 'completed' };
+}
+/** Upstream labels are added, never removed - a replace would delete exactly
+ *  the local-only tags that carry the triage meaning. */
+export function unionLabels(local, remote) {
+    const merged = [...local];
+    for (const label of remote)
+        if (!merged.includes(label))
+            merged.push(label);
+    return merged;
+}
+//# sourceMappingURL=gh-issues.js.map