forgedock 1.38.1 → 1.39.0

package/bin/engine/projector.mjs

@@ -14,12 +14,16 @@ export const MAX_LEASE_TTL_MS = 3 * 600_000;
 const PROVENANCE_QUERY = "query($owner:String!,$name:String!,$number:Int!){repository(owner:$owner,name:$name){"
   + "issue(number:$number){body authorAssociation author{login __typename} editor{login __typename}}}}";
 
-export function makeProjector(io) {
+export function makeProjector(io, { repo } = {}) {
   const gh = io.gh;
 
+  // Throws on an unreadable body: an empty string would make writeState wipe the issue (#4860).
   async function getBody(issue) {
-    const out = await gh(["issue", "view", String(issue), "--json", "body"]);
-    try { return JSON.parse(out).body ?? ""; } catch { return ""; }
+    const out = await gh(["issue", "view", String(issue), "--json", "body", ...(repo ? ["-R", repo] : [])]);
+    let body;
+    try { body = JSON.parse(out).body; } catch { throw new Error(`issue #${issue}: body read returned non-JSON output`); }
+    if (typeof body !== "string") throw new Error(`issue #${issue}: body read returned no body`);
+    return body;
   }
 
   /**
@@ -64,16 +68,21 @@ export function makeProjector(io) {
     },
 
     async writeState(issue, index) {
-      const body = upsertStateBlock(await getBody(issue), index);
-      await gh(["issue", "edit", String(issue), "--body", body]);
+      const old = await getBody(issue);
+      const body = upsertStateBlock(old, index);
+      // Each run of issue text around a FORGE:STATE block must survive on its own: the block is replaced in place, so text
+      // before and after it stays apart and a joined string would never match (#4871).
+      const dropped = old.split(/<!-- FORGE:STATE\s*[\s\S]*?-->/).map((t) => t.trim()).filter(Boolean).some((t) => !body.includes(t));
+      if (dropped) throw new Error(`issue #${issue}: refusing a state write that drops existing issue text`);
+      await gh(["issue", "edit", String(issue), "--body", body, ...(repo ? ["-R", repo] : [])]);
     },
 
     async setLabel(issue, label) {
-      await gh(["issue", "edit", String(issue), "--add-label", label]);
+      await gh(["issue", "edit", String(issue), "--add-label", label, ...(repo ? ["-R", repo] : [])]);
     },
 
     async removeLabel(issue, label) {
-      await gh(["issue", "edit", String(issue), "--remove-label", label]);
+      await gh(["issue", "edit", String(issue), "--remove-label", label, ...(repo ? ["-R", repo] : [])]);
     },
   };
 }

package/bin/engine/telemetry-seam.mjs

@@ -9,6 +9,7 @@
  *                          builder_tier/class/model/escalated 0|1, forge#4394)
  *   SANDBOX_USAGE       -> `sandbox_usage` (provider, sandbox_id, minutes, cost_usd, batch; one per settled remote lane, forge#4255)
  *   DECISION_ENGINE     -> `decision_engine` (decided, escalated, vetoed, reversed, mode, needs_human_before/after; forge#4766)
+ *   PRODWATCH_METRICS   -> `prodwatch_metrics` (source, sample, invalid, fp_rate, fix_ineffective_rate, recurrence_rate, signal_to_issue/merge/verified_ms; forge#4837)
  *   STRUCTURE_DELTA     -> `structure_delta` (edges_added/removed, import_files_added/removed, boundary_changed/loosened 0|1; forge#4159)
  *                          lean's merge-time record (forge#4165) adds milestone, the pr and string lists: deps_added and
  *                          new_edges / removed_edges as "from:to" comma-joined, top_growth "file+N", decisions "K1:lint",
@@ -84,6 +85,11 @@ export function mapRecord(rec, wallMs) {
     return { event: "decision_engine", phase: null, payload: compact({ decided: rec.decided, escalated: rec.escalated, vetoed: rec.vetoed, reversed: rec.reversed, mode: rec.mode,
       needs_human_before: rec.needs_human_before, needs_human_after: rec.needs_human_after }) };
   }
+  if (rec.event === "PRODWATCH_METRICS") { // #4837
+    return { event: "prodwatch_metrics", phase: null, payload: compact({ source: rec.source, sample: rec.sample, invalid: rec.invalid, fix_ineffective: rec.fix_ineffective, recurred: rec.recurred,
+      fp_rate: rec.fp_rate, fix_ineffective_rate: rec.fix_ineffective_rate, recurrence_rate: rec.recurrence_rate,
+      signal_to_issue_ms: rec.signal_to_issue_ms, signal_to_merge_ms: rec.signal_to_merge_ms, signal_to_verified_ms: rec.signal_to_verified_ms }) };
+  }
   if (rec.event === "CI_PENDING_WAIT") {
     return { event: "ci_pending_wait", phase: rec.phase ?? "review", payload: compact({ pr: rec.pr, minutes_waited: rec.minutes_waited, result: rec.result, polls: rec.polls, rate_limit_sleeps: rec.rate_limit_sleeps }) };
   }

package/bin/engine/telemetry-seam.test.mjs

@@ -27,6 +27,12 @@ describe("engine telemetry seam", () => {
     assert.equal("baseline_tokens" in q, false); assert.equal("lane_profile" in q, false);
   });
 
+  it("forge#4837: PRODWATCH_METRICS maps to prodwatch_metrics, absent values omitted", () => {
+    const m = mapRecord({ event: "PRODWATCH_METRICS", source: "memo", sample: 7, fp_rate: 0.25, signal_to_issue_ms: 1000, signal_to_merge_ms: null }, 0);
+    assert.equal(m.event, "prodwatch_metrics");
+    assert.deepEqual(m.payload, { source: "memo", sample: 7, fp_rate: 0.25, signal_to_issue_ms: 1000 });
+  });
+
   it("forge#4257: phase_attempt carries the backend, omitted when unreported", () => {
     assert.equal(mapRecord({ event: "PHASE_ATTEMPT_USAGE", phase: "build", attempt: 1, backend: "api" }, 0).payload.backend, "api");
     // #4407: the per-attempt cost and the session running total ride along; absent fields are omitted

package/bin/engine-cli.mjs

@@ -23,6 +23,7 @@ import { makeEventEmitter, probeSweepEvents, experimentEvent } from "./engine/ev
 import { readExperiment } from "./experiment.mjs";
 import { readBranches, resolveLane, isDefaultLane } from "./lean/lane.mjs";
 import { parseVerify } from "./lean/verify.mjs";
+import { viewIssue } from "./lean/gh-assoc.mjs";
 import { parseExecution, detectNeeds, placementText } from "./lean/execution.mjs";
 import { relayPrefetchCommands } from "./lean/relay.mjs";
 import { parseTurnBudgets, formatTurnSummary, TURN_BUDGET_DEFAULTS } from "./lean/budget.mjs";
@@ -1038,7 +1039,7 @@ export async function resumeStalledFromCli(argv, deps = {}) {
   await assertRepoMatchesCwd(io, repo, { sleep: deps.sleep });
   await assertLaneNotDefault(io, lane, repo);
   const dispatch = deps.dispatch ?? runFromCli;
-  const projector = makeProjector(io);
+  const projector = makeProjector(io, { repo: repo ?? undefined });
   const now = Date.now();
 
   // Collect candidate issue numbers from all non-terminal workflow labels
@@ -1254,7 +1255,7 @@ async function addToBatch({ id, tokens, root, io, viaDaemon = null, print = (l)
   for (const n of new Set(ints)) {
     let st = null;
     let v = null;
-    try { v = JSON.parse(await io.gh(["issue", "view", String(n), ...(repo ? ["-R", repo] : []), "--json", "state,body,author,authorAssociation"])); st = v?.state ?? null; } catch { st = null; }
+    try { v = await viewIssue(io.gh, repo, n, "state,body,author"); st = v?.state ?? null; } catch { st = null; }
     state.set(n, st); records.set(n, v);
   }
   const open = [];
@@ -1861,8 +1862,8 @@ export async function runBatch({ argv, cwd: callerCwd = process.cwd(), env: call
         sink.line(`cross-lane: #${e.issue} (${e.lane}) depends on #${e.dependency} (${e.dependencyLane}); its fix will not be on ${e.lane}: re-milestone #${e.dependency} or wait for a milestone sync`);
       },
       readBody: maint || registry || hybrid
-        ? async (n) => { const v = JSON.parse(await leanIo.gh(["issue", "view", String(n), "-R", repo, "--json", "body,labels,comments,author,authorAssociation"])); trustedOf.set(n, bodyTrusted(v)); labelsOf.set(n, (v.labels ?? []).map((x) => x.name)); needsOf.set(n, detectNeeds(placementText(v), execForNeeds)); if (execForNeeds?.relay) prefetchOf.set(n, relayPrefetchCommands(v, execForNeeds.relay)); return v.body; }
-        : async (n) => { const v = JSON.parse(await leanIo.gh(["issue", "view", String(n), "-R", repo, "--json", "body,comments,author,authorAssociation"])); trustedOf.set(n, bodyTrusted(v)); needsOf.set(n, detectNeeds(placementText(v), execForNeeds)); if (execForNeeds?.relay) prefetchOf.set(n, relayPrefetchCommands(v, execForNeeds.relay)); return v.body; }, // #4785: decisions and the frozen contract's validate commands too
+        ? async (n) => { const v = await viewIssue(leanIo.gh, repo, n, "body,labels,comments,author"); trustedOf.set(n, bodyTrusted(v)); labelsOf.set(n, (v.labels ?? []).map((x) => x.name)); needsOf.set(n, detectNeeds(placementText(v), execForNeeds)); if (execForNeeds?.relay) prefetchOf.set(n, relayPrefetchCommands(v, execForNeeds.relay)); return v.body; }
+        : async (n) => { const v = await viewIssue(leanIo.gh, repo, n, "body,comments,author"); trustedOf.set(n, bodyTrusted(v)); needsOf.set(n, detectNeeds(placementText(v), execForNeeds)); if (execForNeeds?.relay) prefetchOf.set(n, relayPrefetchCommands(v, execForNeeds.relay)); return v.body; }, // #4785: decisions and the frozen contract's validate commands too
       onUpdate: (r) => sink.row(r),
     });
   } finally { for (const [sig, f] of Object.entries(handlers)) off(sig, f); }
@@ -2226,7 +2227,7 @@ export async function schedFromCli(argv, deps = {}) {
   throw new Error(usage);
 }
 
-/** #4773: is the author of a `gh issue view --json author,authorAssociation` record trusted (the engine admission's `isTrustedActor`)? */
+/** #4773: is the author of a `viewIssue` record (author plus the REST association, #4859) trusted (the engine admission's `isTrustedActor`)? */
 const bodyTrusted = (v) => isTrustedActor({ association: v?.authorAssociation, type: v?.author?.is_bot ? "Bot" : "User", login: v?.author?.login });
 
 /**

package/bin/forgedock.mjs

@@ -3360,6 +3360,7 @@ function help() {
     ["npx forgedock milestone train <slug...> [--parallel-milestones N] | --resume <id> | --insert <id> <slug> [--before s|--after s] | --show <id>", "Unattended multi-milestone train: one durable state file (order, active set, lifecycle), typed STOP reasons, resumable; never edits forge.yaml"],
     ["npx forgedock guards list [--path p] [--json] | backfill --since <date> [--dry-run]", "Fix guards: list the FORGE:GUARD records (test files + protected hunks of merged fixes) covering a path, or build them for already-merged lean lanes"],
     ["npx forgedock issue-watch run [--name <w>] [--repo owner/repo] [--once] [--dry-run] | status [--name <w>]", "Named, scoped, capped watches (forge.yaml issue_watch.watches) that claim matching open issues into lanes or one long-lived orchestrate batch, or (mode: release) pool them and cut themed releases; see docs/ISSUE-WATCH.md"],
+    ["npx forgedock prod-watch run [--repo owner/repo] [--once] [--interval <s>] [--dry-run] | status", "Production-side watcher (forge.yaml prod_watch): read-only signal sources -> triage -> governor -> issues, kill-switch file, owner digest; see docs/PROD-WATCH.md"],
     ["npx forgedock limits show | clear <id>|--all", "Show or clear per-account usage-limit holds shared by orchestrate batches"],
     ["npx forgedock decisions list [--stale] [--refresh]", "List anchored decisions (FORGE:DECISION); --stale shows those with an anchor missing on the base"],
     ["npx forgedock sched show | cap <N>|--clear | weight <owner/repo> <N>|--clear", "Show the host lane registry, set the host-wide lane cap shared by orchestrate batches, or set a repo's share of slots within a priority (default equal)"],
@@ -3946,7 +3947,7 @@ async function watch() {
 const SPLASH_COMMANDS = new Set(["run", "bootstrap", "run-issue", "orchestrate", "triage", "probe", "gc", "resume-stalled", "demo", "doctor", "watch", "help", "--help", "-h"]);
 const KNOWN_COMMANDS = new Set([
   "install", "init", "enable", "disable", "status", "uninstall", "update",
-  "run", "bootstrap", "backend-check", "run-issue", "orchestrate", "milestone", "milestone-sync", "guards", "triage", "probe", "review-staging", "gc", "resume-stalled", "demo", "doctor", "watch", "issue-watch", "labels", "config", "stats", "limits", "decisions", "sched", "schedd", "pool", "check", "help", "--help", "-h",
+  "run", "bootstrap", "backend-check", "run-issue", "orchestrate", "milestone", "milestone-sync", "guards", "triage", "probe", "review-staging", "gc", "resume-stalled", "demo", "doctor", "watch", "issue-watch", "prod-watch", "labels", "config", "stats", "limits", "decisions", "sched", "schedd", "pool", "check", "help", "--help", "-h",
   "version", "--version", "-v",
 ]);
 if (SPLASH_COMMANDS.has(command) || !KNOWN_COMMANDS.has(command)) splash(command);
@@ -4217,6 +4218,16 @@ switch (command) {
     }
     break;
   }
+  case "prod-watch": {
+    const { prodWatchFromCli } = await import("./lean/prodwatch.mjs");
+    try {
+      await prodWatchFromCli(restArgs);
+    } catch (err) {
+      process.stderr.write(`${RED}${err.message}${RESET}\n`);
+      exitCode = 1;
+    }
+    break;
+  }
   case "limits": {
     const { limitsFromCli } = await import("./engine-cli.mjs");
     try {

package/bin/lean/batch.test.mjs

@@ -538,7 +538,7 @@ describe("#4408: issues added to a running batch (forgedock orchestrate --add)",
     assert.deepEqual(b.readAdded(), [2, 3, 5]);
     assert.deepEqual(b.unrunAdds(), [2, 3, 5]);
     const views = [];
-    const io = { gh: async (a) => { views.push(a); if (a[2] === "8") throw new Error("gh down"); return JSON.stringify({ state: a[2] === "7" ? "CLOSED" : "OPEN" }); } };
+    const io = { gh: async (a) => { if (a[0] === "api") return "OWNER\n"; views.push(a); if (a[2] === "8") throw new Error("gh down"); return JSON.stringify({ state: a[2] === "7" ? "CLOSED" : "OPEN" }); } };
     const res = await quiet(() => orchestrateFromCli(["--add", "b1", "6", "7", "8", "3", "x"], { batchRoot: root, io }));
     assert.deepEqual(res.added, [6]);
     assert.deepEqual(res.skipped.map((x) => [x.issue, x.reason]).sort(), [[3, "already in batch"], [7, "closed"], [8, "unreadable"], ["x", "not an integer"]]);
@@ -553,7 +553,7 @@ describe("#4408: issues added to a running batch (forgedock orchestrate --add)",
     b.writePlan({ argv: [], repo: "o/r" }); // no issues: the resume stops with the usage error after its adds
     b.store.save({ order: [1] });
     const views = [];
-    const io = { gh: async (a) => { views.push(a[2]); return JSON.stringify({ state: "OPEN" }); } };
+    const io = { gh: async (a) => { if (a[0] === "api") return "OWNER\n"; views.push(a[2]); return JSON.stringify({ state: "OPEN" }); } };
     await assert.rejects(quiet(() => orchestrateFromCli(["--resume", "b1", "--parallel", "5"], { batchRoot: root, io })), /usage/);
     assert.deepEqual(views, [], "no issue read for a flag value");
     assert.deepEqual(b.readAdded(), []);

package/bin/lean/effects.mjs

@@ -298,7 +298,7 @@ export function makeLeanIo({ repo, subagentModel = readSubagentModel() }) {
   const run = (bin) => async (args, opts = {}) => (await pexec(bin, args, { cwd: opts.cwd, maxBuffer: 100 * 1024 * 1024, timeout: 120000, ...(opts.env ? { env: { ...process.env, ...opts.env } } : {}) })).stdout;
   return {
     ghCache: (root) => makeGhCache({ root }),
-    gh: run("gh"), git: run("git"), docker: run("docker"), killGroup: async (pid, marker) => killLedgerPid(pid, marker), ledger: (opts) => makeLedger(opts), runTmp: makeRunTmp(), host: makeHostProbe(), heavy: makeHeavyIo({ host: makeHostProbe() }), projector: makeProjector({ gh: base.gh }), runner: makeLeanRunner({ subagentModel }), waitCiGreen: base.waitCiGreen,
+    gh: run("gh"), git: run("git"), docker: run("docker"), killGroup: async (pid, marker) => killLedgerPid(pid, marker), ledger: (opts) => makeLedger(opts), runTmp: makeRunTmp(), host: makeHostProbe(), heavy: makeHeavyIo({ host: makeHostProbe() }), projector: makeProjector({ gh: base.gh }, { repo }), runner: makeLeanRunner({ subagentModel }), waitCiGreen: base.waitCiGreen,
     /** Shared dependency cache (#4220): the repo's own package manager, argv only, bounded by the cache's timeout. */
     deps: makeDepCache({ exec: async (cmd, args, { cwd, env, timeoutMs } = {}) => String((await pexec(cmd, args, { cwd, env: { ...process.env, ...(env ?? {}) }, timeout: timeoutMs ?? 0, maxBuffer: 100 * 1024 * 1024 })).stdout) }),
     /** Names of the checks the base branch requires: classic protection plus rulesets (#4158). [] when neither has any. */

package/bin/lean/fixtures/prodwatch/expected.json

@@ -0,0 +1,85 @@
+{
+ "memos": 70,
+ "clusters": [
+  {
+   "name": "pg-conn",
+   "class": "defect",
+   "count": 15
+  },
+  {
+   "name": "api-5xx",
+   "class": "incident",
+   "count": 1
+  },
+  {
+   "name": "queue-lag",
+   "class": "defect",
+   "count": 1
+  },
+  {
+   "name": "cert",
+   "class": "defect",
+   "count": 1
+  },
+  {
+   "name": "disk",
+   "class": "defect",
+   "count": 1
+  },
+  {
+   "name": "deploy",
+   "class": "deploy-fallout",
+   "count": 1
+  },
+  {
+   "name": "mon-bug",
+   "class": "monitoring-bug",
+   "count": 1
+  },
+  {
+   "name": "mem-leak",
+   "class": "defect",
+   "count": 1
+  },
+  {
+   "name": "t1",
+   "class": "transient",
+   "count": 1
+  },
+  {
+   "name": "t2",
+   "class": "transient",
+   "count": 1
+  },
+  {
+   "name": "t3",
+   "class": "transient",
+   "count": 1
+  },
+  {
+   "name": "t4",
+   "class": "transient",
+   "count": 1
+  },
+  {
+   "name": "e1",
+   "class": "expected-class",
+   "count": 11
+  },
+  {
+   "name": "e2",
+   "class": "expected-class",
+   "count": 11
+  },
+  {
+   "name": "e3",
+   "class": "expected-class",
+   "count": 11
+  },
+  {
+   "name": "e4",
+   "class": "expected-class",
+   "count": 11
+  }
+ ]
+}

package/bin/lean/fixtures/prodwatch/memos.json

@@ -0,0 +1,282 @@
+[
+ {
+  "id": "memo-001",
+  "text": "# Postgres connection pool exhausted on db-2.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T01:01:00Z\n\nPool at 17 of 17 connections, request 3c6ef362 waited 17s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-002",
+  "text": "# Postgres connection pool exhausted on db-3.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T02:02:00Z\n\nPool at 24 of 24 connections, request 78dde6c4 waited 24s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-003",
+  "text": "# Postgres connection pool exhausted on db-4.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T03:03:00Z\n\nPool at 31 of 31 connections, request b54cda26 waited 31s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-004",
+  "text": "# Postgres connection pool exhausted on db-5.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T04:04:00Z\n\nPool at 38 of 38 connections, request f1bbcd88 waited 38s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-005",
+  "text": "# Postgres connection pool exhausted on db-1.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T05:05:00Z\n\nPool at 45 of 45 connections, request 2e2ac0ea waited 45s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-006",
+  "text": "# Postgres connection pool exhausted on db-2.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T06:06:00Z\n\nPool at 52 of 52 connections, request 6a99b44c waited 52s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-007",
+  "text": "# Postgres connection pool exhausted on db-3.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T07:07:00Z\n\nPool at 59 of 59 connections, request a708a7ae waited 59s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-008",
+  "text": "# Postgres connection pool exhausted on db-4.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T08:08:00Z\n\nPool at 66 of 66 connections, request e3779b10 waited 66s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-009",
+  "text": "# Postgres connection pool exhausted on db-5.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T09:09:00Z\n\nPool at 73 of 73 connections, request 1fe68e72 waited 73s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-010",
+  "text": "# Postgres connection pool exhausted on db-1.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T10:10:00Z\n\nPool at 80 of 80 connections, request 5c5581d4 waited 80s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-011",
+  "text": "# Postgres connection pool exhausted on db-2.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T11:11:00Z\n\nPool at 87 of 87 connections, request 98c47536 waited 87s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-012",
+  "text": "# Postgres connection pool exhausted on db-3.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T12:12:00Z\n\nPool at 94 of 94 connections, request d5336898 waited 94s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-013",
+  "text": "# Postgres connection pool exhausted on db-4.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T13:13:00Z\n\nPool at 101 of 101 connections, request 11a25bfa waited 101s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-014",
+  "text": "# Postgres connection pool exhausted on db-5.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T14:14:00Z\n\nPool at 108 of 108 connections, request 4e114f5c waited 108s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-015",
+  "text": "# Postgres connection pool exhausted on db-1.internal.example\nseverity: P1\nowner: db\nseen: 2026-10-29T15:15:00Z\n\nPool at 115 of 115 connections, request 8a8042be waited 115s; queries are queuing.\n"
+ },
+ {
+  "id": "memo-016",
+  "text": "# Public API unavailable for tenant group 38\nseverity: P0\nowner: api\nseen: 2026-10-29T04:04:00Z\n\nService down: gateway returned 503 for 38 requests, trace 5c5581d4.\n"
+ },
+ {
+  "id": "memo-017",
+  "text": "# Job queue lag growing in worker pool\nseverity: P2\nowner: jobs\nseen: 2026-10-29T07:07:00Z\n\nOldest job is 59 minutes old, worker d5336898 idle.\n"
+ },
+ {
+  "id": "memo-018",
+  "text": "# TLS certificate for edge host nearing expiry\nseverity: P2\nowner: infra\nseen: 2026-10-29T10:10:00Z\n\nCertificate expires in 80 days on db-1.internal.example.\n"
+ },
+ {
+  "id": "memo-019",
+  "text": "# Disk usage above threshold on storage node\nseverity: P1\nowner: infra\nseen: 2026-10-29T13:13:00Z\n\nVolume at 101 percent on db-4.internal.example.\n"
+ },
+ {
+  "id": "memo-020",
+  "text": "# Error rate up after the deploy of release v1.122\nseverity: P1\nowner: web\nseen: 2026-10-29T16:16:00Z\n\nErrors in checkout handler 3fcd1ce4 began after the deploy.\n"
+ },
+ {
+  "id": "memo-021",
+  "text": "# Disk alert is a false positive\nseverity: P2\nowner: obs\nseen: 2026-10-29T19:19:00Z\n\nAlert fires although the metric source b8ab03a8 reports a stale metric of 143.\n"
+ },
+ {
+  "id": "memo-022",
+  "text": "# Memory growth in indexer process\nseverity: P2\nowner: search\nseen: 2026-10-29T22:22:00Z\n\nRSS grew 164 MB over the last hour, pid 3188ea6c.\n"
+ },
+ {
+  "id": "memo-023",
+  "text": "# Transient timeout calling vendor API\nseverity: P3\nowner: api\nseen: 2026-10-29T01:25:00Z\n\nRetry succeeded after 185ms, request aa66d130.\n"
+ },
+ {
+  "id": "memo-024",
+  "text": "# Transient DNS lookup failure\nseverity: P3\nowner: infra\nseen: 2026-10-29T04:28:00Z\n\nSelf-recovered after 206 seconds on db-4.internal.example.\n"
+ },
+ {
+  "id": "memo-025",
+  "text": "# Transient lock wait on billing table\nseverity: P3\nowner: db\nseen: 2026-10-29T07:31:00Z\n\nRetry succeeded, wait 227ms, tx 9c229eb8.\n"
+ },
+ {
+  "id": "memo-026",
+  "text": "# Transient cache eviction spike\nseverity: P3\nowner: cache\nseen: 2026-10-29T10:34:00Z\n\nSelf-recovered within 248 seconds, node 1500857c.\n"
+ },
+ {
+  "id": "memo-027",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T13:37:00Z\n\nExpected: backup 8dde6c40 completed in 269 minutes.\n"
+ },
+ {
+  "id": "memo-028",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T14:38:00Z\n\nExpected: backup ca4d5fa2 completed in 276 minutes.\n"
+ },
+ {
+  "id": "memo-029",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T15:39:00Z\n\nExpected: backup 06bc5304 completed in 283 minutes.\n"
+ },
+ {
+  "id": "memo-030",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T16:40:00Z\n\nExpected: backup 432b4666 completed in 290 minutes.\n"
+ },
+ {
+  "id": "memo-031",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T17:41:00Z\n\nExpected: backup 7f9a39c8 completed in 297 minutes.\n"
+ },
+ {
+  "id": "memo-032",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T18:42:00Z\n\nExpected: backup bc092d2a completed in 304 minutes.\n"
+ },
+ {
+  "id": "memo-033",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T19:43:00Z\n\nExpected: backup f878208c completed in 311 minutes.\n"
+ },
+ {
+  "id": "memo-034",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T20:44:00Z\n\nExpected: backup 34e713ee completed in 318 minutes.\n"
+ },
+ {
+  "id": "memo-035",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T21:45:00Z\n\nExpected: backup 71560750 completed in 325 minutes.\n"
+ },
+ {
+  "id": "memo-036",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T22:46:00Z\n\nExpected: backup adc4fab2 completed in 332 minutes.\n"
+ },
+ {
+  "id": "memo-037",
+  "text": "# Nightly backup completed\nseverity: P3\nowner: db\nseen: 2026-10-29T23:47:00Z\n\nExpected: backup ea33ee14 completed in 339 minutes.\n"
+ },
+ {
+  "id": "memo-038",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T16:40:00Z\n\nRoutine heartbeat 34e713ee from db-1.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-039",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T17:41:00Z\n\nRoutine heartbeat 71560750 from db-2.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-040",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T18:42:00Z\n\nRoutine heartbeat adc4fab2 from db-3.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-041",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T19:43:00Z\n\nRoutine heartbeat ea33ee14 from db-4.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-042",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T20:44:00Z\n\nRoutine heartbeat 26a2e176 from db-5.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-043",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T21:45:00Z\n\nRoutine heartbeat 6311d4d8 from db-1.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-044",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T22:46:00Z\n\nRoutine heartbeat 9f80c83a from db-2.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-045",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T23:47:00Z\n\nRoutine heartbeat dbefbb9c from db-3.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-046",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T00:48:00Z\n\nRoutine heartbeat 185eaefe from db-4.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-047",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T01:49:00Z\n\nRoutine heartbeat 54cda260 from db-5.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-048",
+  "text": "# Scheduled maintenance window heartbeat\nseverity: P3\nowner: infra\nseen: 2026-10-29T02:50:00Z\n\nRoutine heartbeat 913c95c2 from db-1.internal.example, no action needed.\n"
+ },
+ {
+  "id": "memo-049",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T19:43:00Z\n\nRoutine: 311 requests rejected, client dbefbb9c.\n"
+ },
+ {
+  "id": "memo-050",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T20:44:00Z\n\nRoutine: 318 requests rejected, client 185eaefe.\n"
+ },
+ {
+  "id": "memo-051",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T21:45:00Z\n\nRoutine: 325 requests rejected, client 54cda260.\n"
+ },
+ {
+  "id": "memo-052",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T22:46:00Z\n\nRoutine: 332 requests rejected, client 913c95c2.\n"
+ },
+ {
+  "id": "memo-053",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T23:47:00Z\n\nRoutine: 339 requests rejected, client cdab8924.\n"
+ },
+ {
+  "id": "memo-054",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T00:48:00Z\n\nRoutine: 346 requests rejected, client 0a1a7c86.\n"
+ },
+ {
+  "id": "memo-055",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T01:49:00Z\n\nRoutine: 353 requests rejected, client 46896fe8.\n"
+ },
+ {
+  "id": "memo-056",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T02:50:00Z\n\nRoutine: 360 requests rejected, client 82f8634a.\n"
+ },
+ {
+  "id": "memo-057",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T03:51:00Z\n\nRoutine: 367 requests rejected, client bf6756ac.\n"
+ },
+ {
+  "id": "memo-058",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T04:52:00Z\n\nRoutine: 374 requests rejected, client fbd64a0e.\n"
+ },
+ {
+  "id": "memo-059",
+  "text": "# Expected rate-limit rejections from load test\nseverity: P3\nowner: api\nseen: 2026-10-29T05:53:00Z\n\nRoutine: 381 requests rejected, client 38453d70.\n"
+ },
+ {
+  "id": "memo-060",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T22:46:00Z\n\nExpected output size 332 rows, run 82f8634a.\n"
+ },
+ {
+  "id": "memo-061",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T23:47:00Z\n\nExpected output size 339 rows, run bf6756ac.\n"
+ },
+ {
+  "id": "memo-062",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T00:48:00Z\n\nExpected output size 346 rows, run fbd64a0e.\n"
+ },
+ {
+  "id": "memo-063",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T01:49:00Z\n\nExpected output size 353 rows, run 38453d70.\n"
+ },
+ {
+  "id": "memo-064",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T02:50:00Z\n\nExpected output size 360 rows, run 74b430d2.\n"
+ },
+ {
+  "id": "memo-065",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T03:51:00Z\n\nExpected output size 367 rows, run b1232434.\n"
+ },
+ {
+  "id": "memo-066",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T04:52:00Z\n\nExpected output size 374 rows, run ed921796.\n"
+ },
+ {
+  "id": "memo-067",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T05:53:00Z\n\nExpected output size 381 rows, run 2a010af8.\n"
+ },
+ {
+  "id": "memo-068",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T06:54:00Z\n\nExpected output size 388 rows, run 666ffe5a.\n"
+ },
+ {
+  "id": "memo-069",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T07:55:00Z\n\nExpected output size 395 rows, run a2def1bc.\n"
+ },
+ {
+  "id": "memo-070",
+  "text": "# Scheduled report job finished\nseverity: P3\nowner: data\nseen: 2026-10-29T08:56:00Z\n\nExpected output size 402 rows, run df4de51e.\n"
+ }
+]

package/bin/lean/gh-assoc.mjs

@@ -0,0 +1,37 @@
+// SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// #4859: `gh issue view|list --json` has no `authorAssociation` field (gh 2.97: `Unknown JSON field`); it exists on
+// comments and in REST as `author_association`. Trust reads take it from REST and fail closed (undefined = untrusted).
+
+/** The fields `gh issue view|list --json` lists in gh 2.97. `authorAssociation` is deliberately absent. */
+export const ISSUE_JSON_FIELDS = Object.freeze([
+  "assignees", "author", "body", "closed", "closedAt", "closedByPullRequestsReferences", "comments", "createdAt", "id",
+  "isPinned", "labels", "milestone", "number", "projectCards", "projectItems", "reactionGroups", "state", "stateReason",
+  "title", "updatedAt", "url",
+]);
+
+const repoPath = (repo) => repo || "{owner}/{repo}"; // gh api fills the placeholders from the cwd checkout
+
+/** The issue author's association (OWNER, MEMBER, ...) via REST, or undefined when it cannot be read. */
+export async function issueAssociation(gh, repo, n) {
+  try { return String(await gh(["api", `repos/${repoPath(repo)}/issues/${n}`, "--jq", ".author_association"])).trim() || undefined; } catch { return undefined; }
+}
+
+/** Map issue number to author association for the repo's open issues (one paginated REST list); empty on failure. */
+export async function listAssociations(gh, repo) {
+  const out = new Map();
+  try {
+    const text = String(await gh(["api", `repos/${repoPath(repo)}/issues?state=open&per_page=100`, "--paginate", "--jq", '.[] | "\\(.number)\\t\\(.author_association)"']));
+    for (const line of text.split("\n")) { const [n, a] = line.trim().split("\t"); if (/^\d+$/.test(n) && a) out.set(Number(n), a); }
+  } catch { /* unreadable: every author is untrusted */ }
+  return out;
+}
+
+/** `gh issue view --json <fields>` parsed, with `authorAssociation` merged in from REST. A failed view throws; a failed association leaves it unset. */
+export async function viewIssue(gh, repo, n, fields) {
+  const [raw, authorAssociation] = await Promise.all([
+    gh(["issue", "view", String(n), ...(repo ? ["-R", repo] : []), "--json", fields]),
+    issueAssociation(gh, repo, n),
+  ]);
+  return { ...JSON.parse(raw), authorAssociation };
+}