ghagga 3.0.0 → 3.2.0

package/dist/lib/cli-github-client-port.d.ts

@@ -0,0 +1,52 @@
+/**
+ * CLI-side implementation of the forge `GitHubClientPort`.
+ *
+ * The `GitHubForgeAdapter` (packages/forge) depends on an injected
+ * {@link GitHubClientPort} (dependency inversion — forge MUST NOT import any
+ * concrete HTTP client). The SERVER injects `apps/server/src/github/client.ts`.
+ * The CLI has its OWN minimal client built on the same native-fetch +
+ * {@link apiHeaders} / {@link GitHubApiError} pattern as `github-api.ts`.
+ *
+ * SCOPE (P3 — PR summary post-back only):
+ *   REAL members — the write/idempotency fns `upsertSummaryComment` folds over:
+ *     - postComment        (POST   /repos/{o}/{r}/issues/{n}/comments)
+ *     - findExistingComment(GET    /repos/{o}/{r}/issues/{n}/comments — marker match)
+ *     - deleteComment      (DELETE /repos/{o}/{r}/issues/comments/{id})
+ *     - updateComment      (PATCH  /repos/{o}/{r}/issues/comments/{id})
+ *   STUBBED members — read fns the CLI never needs (it has the diff locally and
+ *   does not consume reactions / graph in the `--pr` flow):
+ *     - fetchPRDiff, fetchPRDetails, getPRFileList, getPRCommitMessages
+ *     - addCommentReaction
+ *     - fetchGraphFromBranch, fetchGraphMetadata
+ *   Each stub THROWS so any accidental call surfaces loudly instead of silently
+ *   returning bad data. The `--pr` post-back path (find → delete → post) only
+ *   ever touches the REAL members; see pr-postback.ts + tests.
+ *
+ * The stale-comment match here mirrors the server EXACTLY: bot-authored-or-not is
+ * NOT inspected (the CLI token's own comments carry the marker), the match is the
+ * fixed `<!-- ghagga-review -->` marker substring (REVIEW_COMMENT_MARKER), latest
+ * = last in chronological order, the rest are stale. This keeps idempotency
+ * byte-compatible with the server post-back.
+ */
+import type { GitHubClientPort } from 'ghagga-forge';
+/**
+ * Resolve the GitHub NUMERIC repo id from an owner/name pair (forge identity).
+ *
+ * `GET /repos/{owner}/{repo}` → `.id`. owner/repo is the MUTABLE display path
+ * (a rename/transfer changes it but NOT the numeric id), so the numeric id is the
+ * canonical {@link RepoRef.nativeId}. This MIRRORS the GitLab `--mr` flow's
+ * {@link resolveGitLabProjectId} (one pre-construction call that turns the mutable
+ * path into the immutable id). It is NOT part of the {@link GitHubClientPort} — the
+ * adapter's actual API calls still key on owner/repo from its ctor; nativeId is
+ * identity metadata only.
+ *
+ * @returns the numeric repo id as a STRING (RepoRef.nativeId is a string,
+ *   consistent with GitLab's `String(id)`).
+ */
+export declare function resolveGitHubRepoId(owner: string, repo: string, token: string): Promise<string>;
+/**
+ * Build a {@link GitHubClientPort} backed by native fetch for the CLI `--pr`
+ * post-back. Only the comment-write members are real; read members throw.
+ */
+export declare function createCliGitHubClientPort(): GitHubClientPort;
+//# sourceMappingURL=cli-github-client-port.d.ts.map

package/dist/lib/cli-github-client-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-github-client-port.d.ts","sourceRoot":"","sources":["../../src/lib/cli-github-client-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAyB,MAAM,cAAc,CAAC;AAoC5E;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAWD;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,gBAAgB,CAoH5D"}

package/dist/lib/cli-github-client-port.js

@@ -0,0 +1,199 @@
+/**
+ * CLI-side implementation of the forge `GitHubClientPort`.
+ *
+ * The `GitHubForgeAdapter` (packages/forge) depends on an injected
+ * {@link GitHubClientPort} (dependency inversion — forge MUST NOT import any
+ * concrete HTTP client). The SERVER injects `apps/server/src/github/client.ts`.
+ * The CLI has its OWN minimal client built on the same native-fetch +
+ * {@link apiHeaders} / {@link GitHubApiError} pattern as `github-api.ts`.
+ *
+ * SCOPE (P3 — PR summary post-back only):
+ *   REAL members — the write/idempotency fns `upsertSummaryComment` folds over:
+ *     - postComment        (POST   /repos/{o}/{r}/issues/{n}/comments)
+ *     - findExistingComment(GET    /repos/{o}/{r}/issues/{n}/comments — marker match)
+ *     - deleteComment      (DELETE /repos/{o}/{r}/issues/comments/{id})
+ *     - updateComment      (PATCH  /repos/{o}/{r}/issues/comments/{id})
+ *   STUBBED members — read fns the CLI never needs (it has the diff locally and
+ *   does not consume reactions / graph in the `--pr` flow):
+ *     - fetchPRDiff, fetchPRDetails, getPRFileList, getPRCommitMessages
+ *     - addCommentReaction
+ *     - fetchGraphFromBranch, fetchGraphMetadata
+ *   Each stub THROWS so any accidental call surfaces loudly instead of silently
+ *   returning bad data. The `--pr` post-back path (find → delete → post) only
+ *   ever touches the REAL members; see pr-postback.ts + tests.
+ *
+ * The stale-comment match here mirrors the server EXACTLY: bot-authored-or-not is
+ * NOT inspected (the CLI token's own comments carry the marker), the match is the
+ * fixed `<!-- ghagga-review -->` marker substring (REVIEW_COMMENT_MARKER), latest
+ * = last in chronological order, the rest are stale. This keeps idempotency
+ * byte-compatible with the server post-back.
+ */
+import { REVIEW_COMMENT_MARKER } from 'ghagga-core';
+import { GitHubApiError } from './github-api.js';
+// The fixed marker the summary body carries. SINGLE SOURCE OF TRUTH: imported
+// from ghagga-core (REVIEW_COMMENT_MARKER) so the stale-comment match here can
+// never drift from the marker the body actually carries.
+const REVIEW_MARKER = REVIEW_COMMENT_MARKER;
+const API_BASE = 'https://api.github.com';
+/**
+ * Per-request timeout for the CLI's GitHub fetch calls. Mirrors the server
+ * client's `AbortSignal.timeout(10_000)` so a slow/hung GitHub can never hang a
+ * CI job indefinitely — the fetch aborts and surfaces as a thrown error.
+ */
+const REQUEST_TIMEOUT_MS = 10_000;
+/** Shared auth/version headers — same shape as github-api.ts apiHeaders. */
+function apiHeaders(token) {
+    return {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/vnd.github+json',
+        'X-GitHub-Api-Version': '2022-11-28',
+        'Content-Type': 'application/json',
+    };
+}
+async function failOn(res, action) {
+    const body = await res.text();
+    throw new GitHubApiError(`GitHub API error ${action}: ${res.status} ${res.statusText}`, res.status, body);
+}
+/**
+ * Resolve the GitHub NUMERIC repo id from an owner/name pair (forge identity).
+ *
+ * `GET /repos/{owner}/{repo}` → `.id`. owner/repo is the MUTABLE display path
+ * (a rename/transfer changes it but NOT the numeric id), so the numeric id is the
+ * canonical {@link RepoRef.nativeId}. This MIRRORS the GitLab `--mr` flow's
+ * {@link resolveGitLabProjectId} (one pre-construction call that turns the mutable
+ * path into the immutable id). It is NOT part of the {@link GitHubClientPort} — the
+ * adapter's actual API calls still key on owner/repo from its ctor; nativeId is
+ * identity metadata only.
+ *
+ * @returns the numeric repo id as a STRING (RepoRef.nativeId is a string,
+ *   consistent with GitLab's `String(id)`).
+ */
+export async function resolveGitHubRepoId(owner, repo, token) {
+    const url = `${API_BASE}/repos/${owner}/${repo}`;
+    const res = await fetch(url, {
+        headers: apiHeaders(token),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        await failOn(res, 'resolving repo id');
+    const data = (await res.json());
+    if (typeof data.id !== 'number') {
+        throw new GitHubApiError(`GitHub API error resolving repo id: response had no numeric "id" for "${owner}/${repo}"`, res.status, JSON.stringify(data));
+    }
+    return String(data.id);
+}
+/** Thrown by every stubbed port member so an accidental call is loud, not silent. */
+function unsupported(member) {
+    throw new Error(`CliGitHubClientPort.${member} is not supported in CLI context — the CLI only ` +
+        'posts the PR summary comment (postComment/findExistingComment/deleteComment/' +
+        'updateComment). The diff/commits/file-list/graph are sourced locally.');
+}
+/**
+ * Build a {@link GitHubClientPort} backed by native fetch for the CLI `--pr`
+ * post-back. Only the comment-write members are real; read members throw.
+ */
+export function createCliGitHubClientPort() {
+    return {
+        // ── REAL: PR/issue comment writes (the upsert fold) ──────────
+        async postComment(owner, repo, prNumber, body, token) {
+            const url = `${API_BASE}/repos/${owner}/${repo}/issues/${prNumber}/comments`;
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: apiHeaders(token),
+                body: JSON.stringify({ body }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (!res.ok)
+                await failOn(res, 'posting PR comment');
+            const data = (await res.json());
+            return { id: data.id };
+        },
+        async findExistingComment(owner, repo, prNumber, token) {
+            const baseUrl = `${API_BASE}/repos/${owner}/${repo}/issues/${prNumber}/comments`;
+            // Paginate until exhausted (a page with < 100 items is the last page).
+            // MAX_PAGES is a safety upper bound (50 × 100 = 5000 comments) so a
+            // pathological PR can't loop forever; if hit we log rather than silently
+            // truncate, since a stale marker beyond the bound would yield a DUPLICATE
+            // comment. (Was 5 pages / 500 items — backlog #6.)
+            const MAX_PAGES = 50;
+            const allMatchIds = [];
+            for (let page = 1; page <= MAX_PAGES; page++) {
+                const url = `${baseUrl}?per_page=100&page=${page}`;
+                const res = await fetch(url, {
+                    headers: apiHeaders(token),
+                    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+                });
+                if (!res.ok)
+                    await failOn(res, 'listing PR comments');
+                const comments = (await res.json());
+                for (const comment of comments) {
+                    if (comment.body.includes(REVIEW_MARKER)) {
+                        allMatchIds.push(comment.id);
+                    }
+                }
+                if (comments.length < 100)
+                    break;
+                if (page === MAX_PAGES) {
+                    console.warn(`[ghagga] findExistingComment hit MAX_PAGES (${MAX_PAGES}) for ${owner}/${repo}#${prNumber}; comment listing may be truncated`);
+                }
+            }
+            if (allMatchIds.length === 0)
+                return null;
+            // Latest = last (GitHub returns oldest first); the rest are stale.
+            const latestId = allMatchIds[allMatchIds.length - 1];
+            if (latestId == null)
+                return null;
+            const staleIds = allMatchIds.slice(0, -1);
+            return { latestId, staleIds };
+        },
+        async deleteComment(owner, repo, commentId, token) {
+            const url = `${API_BASE}/repos/${owner}/${repo}/issues/comments/${commentId}`;
+            const res = await fetch(url, {
+                method: 'DELETE',
+                headers: apiHeaders(token),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            // The adapter's upsert tolerates delete failures (best-effort), but we still
+            // surface a non-2xx so `deleted[]` only reflects genuinely-removed ids.
+            if (!res.ok && res.status !== 404)
+                await failOn(res, 'deleting PR comment');
+        },
+        async updateComment(owner, repo, commentId, body, token) {
+            const url = `${API_BASE}/repos/${owner}/${repo}/issues/comments/${commentId}`;
+            const res = await fetch(url, {
+                method: 'PATCH',
+                headers: apiHeaders(token),
+                body: JSON.stringify({ body }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (!res.ok)
+                await failOn(res, 'updating PR comment');
+        },
+        // ── STUBBED: read/reaction/graph members (never hit in --pr flow) ──
+        // Declared `async` so the throw surfaces as a REJECTED promise (not a sync
+        // throw): callers `await` these, and a rejected promise is the contract-true
+        // failure shape — also keeps test spies/`.rejects` well-behaved.
+        async fetchPRDiff() {
+            return unsupported('fetchPRDiff');
+        },
+        async fetchPRDetails() {
+            return unsupported('fetchPRDetails');
+        },
+        async getPRFileList() {
+            return unsupported('getPRFileList');
+        },
+        async getPRCommitMessages() {
+            return unsupported('getPRCommitMessages');
+        },
+        async addCommentReaction(_owner, _repo, _commentId, _reaction, _token) {
+            return unsupported('addCommentReaction');
+        },
+        async fetchGraphFromBranch() {
+            return unsupported('fetchGraphFromBranch');
+        },
+        async fetchGraphMetadata() {
+            return unsupported('fetchGraphMetadata');
+        },
+    };
+}
+//# sourceMappingURL=cli-github-client-port.js.map

package/dist/lib/cli-github-client-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-github-client-port.js","sourceRoot":"","sources":["../../src/lib/cli-github-client-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,8EAA8E;AAC9E,+EAA+E;AAC/E,yDAAyD;AACzD,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAE5C,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAE1C;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,4EAA4E;AAC5E,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO;QACL,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAa,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,cAAc,CACtB,oBAAoB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,EAC7D,GAAG,CAAC,MAAM,EACV,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,MAAM,GAAG,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,IAAI,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;IAClD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,yEAAyE,KAAK,IAAI,IAAI,GAAG,EACzF,GAAG,CAAC,MAAM,EACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,kDAAkD;QAC7E,8EAA8E;QAC9E,uEAAuE,CAC1E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,gEAAgE;QAChE,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK;YAClD,MAAM,GAAG,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,IAAI,WAAW,QAAQ,WAAW,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,KAAK;YAEL,MAAM,OAAO,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,IAAI,WAAW,QAAQ,WAAW,CAAC;YACjF,uEAAuE;YACvE,oEAAoE;YACpE,yEAAyE;YACzE,0EAA0E;YAC1E,mDAAmD;YACnD,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,MAAM,WAAW,GAAa,EAAE,CAAC;YAEjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,GAAG,OAAO,sBAAsB,IAAI,EAAE,CAAC;gBACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;oBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;gBAEtD,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwC,CAAC;gBAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;wBACzC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;gBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM;gBACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CACV,+CAA+C,SAAS,SAAS,KAAK,IAAI,IAAI,IAAI,QAAQ,oCAAoC,CAC/H,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,mEAAmE;YACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,QAAQ,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;YAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;YAC/C,MAAM,GAAG,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,IAAI,oBAAoB,SAAS,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,6EAA6E;YAC7E,wEAAwE;YACxE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;YACrD,MAAM,GAAG,GAAG,GAAG,QAAQ,UAAU,KAAK,IAAI,IAAI,oBAAoB,SAAS,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACxD,CAAC;QAED,sEAAsE;QACtE,2EAA2E;QAC3E,6EAA6E;QAC7E,iEAAiE;QACjE,KAAK,CAAC,WAAW;YACf,OAAO,WAAW,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,OAAO,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,aAAa;YACjB,OAAO,WAAW,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,mBAAmB;YACvB,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,KAAa,EACb,UAAkB,EAClB,SAAgC,EAChC,MAAc;YAEd,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,oBAAoB;YACxB,OAAO,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,CAAC,kBAAkB;YACtB,OAAO,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/cli-github-client-port.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * resolveGitHubRepoId — numeric repo id resolution for RepoRef.nativeId.
+ *
+ * The CLI `--pr` flow resolves the IMMUTABLE numeric GitHub repo id once before
+ * the post-back (mirroring the GitLab `--mr` flow's resolveGitLabProjectId). We
+ * mock ONLY `fetch` (the network seam) so this exercises the genuine GET
+ * /repos/{owner}/{repo} → .id call + its error handling.
+ */
+export {};
+//# sourceMappingURL=cli-github-client-port.test.d.ts.map

package/dist/lib/cli-github-client-port.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-github-client-port.test.d.ts","sourceRoot":"","sources":["../../src/lib/cli-github-client-port.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/lib/cli-github-client-port.test.js

@@ -0,0 +1,47 @@
+/**
+ * resolveGitHubRepoId — numeric repo id resolution for RepoRef.nativeId.
+ *
+ * The CLI `--pr` flow resolves the IMMUTABLE numeric GitHub repo id once before
+ * the post-back (mirroring the GitLab `--mr` flow's resolveGitLabProjectId). We
+ * mock ONLY `fetch` (the network seam) so this exercises the genuine GET
+ * /repos/{owner}/{repo} → .id call + its error handling.
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { resolveGitHubRepoId } from './cli-github-client-port.js';
+const mockFetch = vi.fn();
+vi.stubGlobal('fetch', mockFetch);
+function jsonResponse(status, body) {
+    return {
+        ok: status >= 200 && status < 300,
+        status,
+        statusText: status === 200 ? 'OK' : 'ERR',
+        text: () => Promise.resolve(JSON.stringify(body)),
+        json: () => Promise.resolve(body),
+    };
+}
+describe('resolveGitHubRepoId (numeric repo id resolution → RepoRef.nativeId)', () => {
+    beforeEach(() => mockFetch.mockReset());
+    it('GET /repos/{owner}/{repo} → numeric id as string', async () => {
+        mockFetch.mockResolvedValueOnce(jsonResponse(200, { id: 555000111, full_name: 'acme/widgets' }));
+        const id = await resolveGitHubRepoId('acme', 'widgets', 'ghp');
+        // Stringified to match RepoRef.nativeId's string type (consistent with GitLab).
+        expect(id).toBe('555000111');
+        const [url] = mockFetch.mock.calls[0];
+        expect(url).toBe('https://api.github.com/repos/acme/widgets');
+    });
+    it('passes an AbortSignal (timeout) so CI cannot hang', async () => {
+        mockFetch.mockResolvedValueOnce(jsonResponse(200, { id: 1 }));
+        await resolveGitHubRepoId('acme', 'widgets', 'ghp');
+        const [, init] = mockFetch.mock.calls[0];
+        expect(init.signal).toBeInstanceOf(AbortSignal);
+    });
+    it('throws on a non-ok response (e.g. 404)', async () => {
+        mockFetch.mockResolvedValueOnce(jsonResponse(404, { message: 'Not Found' }));
+        await expect(resolveGitHubRepoId('nope', 'nope', 'ghp')).rejects.toThrow(/resolving repo id/);
+    });
+    it('throws when the response has no numeric "id"', async () => {
+        mockFetch.mockResolvedValueOnce(jsonResponse(200, { full_name: 'acme/widgets' }));
+        await expect(resolveGitHubRepoId('acme', 'widgets', 'ghp')).rejects.toThrow(/no numeric "id"/);
+    });
+});
+//# sourceMappingURL=cli-github-client-port.test.js.map

package/dist/lib/cli-github-client-port.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-github-client-port.test.js","sourceRoot":"","sources":["../../src/lib/cli-github-client-port.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAElC,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QACjC,MAAM;QACN,UAAU,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACzC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,qEAAqE,EAAE,GAAG,EAAE;IACnF,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAExC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,SAAS,CAAC,qBAAqB,CAC7B,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/D,gFAAgF;QAChF,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,SAAS,CAAC,qBAAqB,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/cli-gitlab-client-port.d.ts

@@ -0,0 +1,62 @@
+/**
+ * CLI-side implementation of the forge `GitLabClientPort` + numeric-project-id
+ * resolution for the `ghagga review --mr N` MR summary post-back.
+ *
+ * The `GitLabForgeAdapter` (packages/forge) depends on an injected
+ * {@link GitLabClientPort} (dependency inversion — forge MUST NOT import any
+ * concrete HTTP client). The CLI provides the real native-fetch implementation
+ * here, on the same `AbortSignal.timeout` + error-class pattern as
+ * `cli-github-client-port.ts`.
+ *
+ * AUTH: we send ONLY the `PRIVATE-TOKEN: <pat>` header — GitLab's recommended
+ * header for Personal/Project/Group Access Tokens (the kind `ghagga` uses). We do
+ * NOT also send `Authorization: Bearer`, which is for OAuth2 access tokens; mixing
+ * both is unnecessary and the PAT header is the canonical PAT auth path.
+ *
+ * HOST: the API base is derived from the resolved GitLab host
+ * (`https://<host>/api/v4`) so self-managed instances work, with a `GITLAB_HOST`
+ * env override for the rare case the API host differs from the git remote host.
+ *
+ * SCOPE (P4 — MR summary post-back): the four note members the adapter's
+ * `upsertSummaryComment` folds over (list/create/delete/update) plus
+ * `publishInline` (create). All four route through the NUMERIC project id (the
+ * canonical R-GITLAB identity). `resolveGitLabProjectId` is the pre-construction
+ * step that turns the mutable group/project path into that numeric id.
+ */
+import type { GitLabClientPort } from 'ghagga-forge';
+/**
+ * Resolve the GitLab API base (`https://<host>/api/v4`) for a remote host.
+ *
+ * Precedence:
+ *   1. `GITLAB_API_BASE` — a FULL API base override. Required for a self-managed
+ *      GitLab served under a SUBPATH (e.g. `https://example.com/gitlab`), where a
+ *      host-only value cannot express the `/gitlab` prefix. Used verbatim (only a
+ *      trailing slash is trimmed); supply the complete `.../api/v4` URL.
+ *   2. `GITLAB_HOST` — a host-only override (for when the API host differs from
+ *      the git remote host, e.g. a reverse proxy on a different hostname).
+ *   3. the host parsed from the git remote.
+ * For (2)/(3) a bare host is expected; a stray scheme/trailing slash is tolerated.
+ */
+export declare function resolveGitLabApiBase(host: string, env?: NodeJS.ProcessEnv): string;
+/**
+ * Resolve the GitLab NUMERIC project id from a group/project path (R-GITLAB).
+ *
+ * `GET /projects/:url-encoded-path` → `.id`. The path is mutable, so the numeric
+ * id is the canonical `RepoRef.nativeId`. This runs ONCE before constructing the
+ * adapter; it is NOT part of the {@link GitLabClientPort} (the adapter only ever
+ * speaks numeric ids).
+ *
+ * @param apiBase the resolved API base (`https://<host>/api/v4`) — see
+ *   {@link resolveGitLabApiBase}. Defaults to gitlab.com for back-compat callers.
+ * @returns the numeric project id as a STRING (RepoRef.nativeId is a string).
+ */
+export declare function resolveGitLabProjectId(path: string, token: string, apiBase?: string): Promise<string>;
+/**
+ * Build a {@link GitLabClientPort} backed by native fetch for the CLI `--mr`
+ * post-back. All members route through the numeric project id.
+ *
+ * @param apiBase the resolved API base (`https://<host>/api/v4`) — see
+ *   {@link resolveGitLabApiBase}. Defaults to gitlab.com for back-compat callers.
+ */
+export declare function createCliGitLabClientPort(apiBase?: string): GitLabClientPort;
+//# sourceMappingURL=cli-gitlab-client-port.d.ts.map

package/dist/lib/cli-gitlab-client-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-gitlab-client-port.d.ts","sourceRoot":"","sources":["../../src/lib/cli-gitlab-client-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAc,MAAM,cAAc,CAAC;AAUjE;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAU/F;AAwBD;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,SAA8B,GACpC,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,SAA8B,GAAG,gBAAgB,CA2GjG"}

package/dist/lib/cli-gitlab-client-port.js

@@ -0,0 +1,209 @@
+/**
+ * CLI-side implementation of the forge `GitLabClientPort` + numeric-project-id
+ * resolution for the `ghagga review --mr N` MR summary post-back.
+ *
+ * The `GitLabForgeAdapter` (packages/forge) depends on an injected
+ * {@link GitLabClientPort} (dependency inversion — forge MUST NOT import any
+ * concrete HTTP client). The CLI provides the real native-fetch implementation
+ * here, on the same `AbortSignal.timeout` + error-class pattern as
+ * `cli-github-client-port.ts`.
+ *
+ * AUTH: we send ONLY the `PRIVATE-TOKEN: <pat>` header — GitLab's recommended
+ * header for Personal/Project/Group Access Tokens (the kind `ghagga` uses). We do
+ * NOT also send `Authorization: Bearer`, which is for OAuth2 access tokens; mixing
+ * both is unnecessary and the PAT header is the canonical PAT auth path.
+ *
+ * HOST: the API base is derived from the resolved GitLab host
+ * (`https://<host>/api/v4`) so self-managed instances work, with a `GITLAB_HOST`
+ * env override for the rare case the API host differs from the git remote host.
+ *
+ * SCOPE (P4 — MR summary post-back): the four note members the adapter's
+ * `upsertSummaryComment` folds over (list/create/delete/update) plus
+ * `publishInline` (create). All four route through the NUMERIC project id (the
+ * canonical R-GITLAB identity). `resolveGitLabProjectId` is the pre-construction
+ * step that turns the mutable group/project path into that numeric id.
+ */
+import { GitLabApiError } from './gitlab-api.js';
+/**
+ * Per-request timeout for the CLI's GitLab fetch calls. Mirrors the GitHub CLI
+ * port's `AbortSignal.timeout(10_000)` so a slow/hung GitLab can never hang a CI
+ * job indefinitely.
+ */
+const REQUEST_TIMEOUT_MS = 10_000;
+/**
+ * Resolve the GitLab API base (`https://<host>/api/v4`) for a remote host.
+ *
+ * Precedence:
+ *   1. `GITLAB_API_BASE` — a FULL API base override. Required for a self-managed
+ *      GitLab served under a SUBPATH (e.g. `https://example.com/gitlab`), where a
+ *      host-only value cannot express the `/gitlab` prefix. Used verbatim (only a
+ *      trailing slash is trimmed); supply the complete `.../api/v4` URL.
+ *   2. `GITLAB_HOST` — a host-only override (for when the API host differs from
+ *      the git remote host, e.g. a reverse proxy on a different hostname).
+ *   3. the host parsed from the git remote.
+ * For (2)/(3) a bare host is expected; a stray scheme/trailing slash is tolerated.
+ */
+export function resolveGitLabApiBase(host, env = process.env) {
+    const apiBaseOverride = env.GITLAB_API_BASE?.trim();
+    if (apiBaseOverride) {
+        return apiBaseOverride.replace(/\/+$/, '');
+    }
+    const hostOverride = env.GITLAB_HOST?.trim();
+    const chosen = hostOverride || host;
+    // Tolerate an override that includes a scheme and/or trailing slash.
+    const bare = chosen.replace(/^https?:\/\//i, '').replace(/\/+$/, '');
+    return `https://${bare}/api/v4`;
+}
+/** Auth headers — PRIVATE-TOKEN only (GitLab's recommended header for PATs). */
+function apiHeaders(token) {
+    return {
+        'PRIVATE-TOKEN': token,
+        'Content-Type': 'application/json',
+    };
+}
+async function failOn(res, action) {
+    const body = await res.text();
+    throw new GitLabApiError(`GitLab API error ${action}: ${res.status} ${res.statusText}`, res.status, body);
+}
+/** Encode a path segment that itself contains slashes (group/subgroup/project). */
+function encodeProjectPath(path) {
+    return encodeURIComponent(path);
+}
+/**
+ * Resolve the GitLab NUMERIC project id from a group/project path (R-GITLAB).
+ *
+ * `GET /projects/:url-encoded-path` → `.id`. The path is mutable, so the numeric
+ * id is the canonical `RepoRef.nativeId`. This runs ONCE before constructing the
+ * adapter; it is NOT part of the {@link GitLabClientPort} (the adapter only ever
+ * speaks numeric ids).
+ *
+ * @param apiBase the resolved API base (`https://<host>/api/v4`) — see
+ *   {@link resolveGitLabApiBase}. Defaults to gitlab.com for back-compat callers.
+ * @returns the numeric project id as a STRING (RepoRef.nativeId is a string).
+ */
+export async function resolveGitLabProjectId(path, token, apiBase = 'https://gitlab.com/api/v4') {
+    const url = `${apiBase}/projects/${encodeProjectPath(path)}`;
+    const res = await fetch(url, {
+        headers: apiHeaders(token),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        await failOn(res, 'resolving project id');
+    const data = (await res.json());
+    if (typeof data.id !== 'number') {
+        throw new GitLabApiError(`GitLab API error resolving project id: response had no numeric "id" for path "${path}"`, res.status, JSON.stringify(data));
+    }
+    return String(data.id);
+}
+/**
+ * Build a {@link GitLabClientPort} backed by native fetch for the CLI `--mr`
+ * post-back. All members route through the numeric project id.
+ *
+ * @param apiBase the resolved API base (`https://<host>/api/v4`) — see
+ *   {@link resolveGitLabApiBase}. Defaults to gitlab.com for back-compat callers.
+ */
+export function createCliGitLabClientPort(apiBase = 'https://gitlab.com/api/v4') {
+    return {
+        async listMrNotes(projectId, mrIid, token) {
+            // Paginate until exhausted (a page with < 100 items is the last page),
+            // like the GitHub port. MAX_PAGES is a safety upper bound (50 × 100 = 5000
+            // notes) so a pathological MR can't loop forever; if hit we log rather
+            // than silently truncate, since a stale marker beyond the bound would
+            // yield a DUPLICATE note. (Was 5 pages / 500 items — backlog #6.)
+            const baseUrl = `${apiBase}/projects/${projectId}/merge_requests/${mrIid}/notes`;
+            const MAX_PAGES = 50;
+            const out = [];
+            for (let page = 1; page <= MAX_PAGES; page++) {
+                const url = `${baseUrl}?per_page=100&page=${page}&sort=asc&order_by=created_at`;
+                const res = await fetch(url, {
+                    headers: apiHeaders(token),
+                    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+                });
+                if (!res.ok)
+                    await failOn(res, 'listing MR notes');
+                const notes = (await res.json());
+                for (const note of notes) {
+                    out.push({ id: note.id, body: note.body });
+                }
+                if (notes.length < 100)
+                    break;
+                if (page === MAX_PAGES) {
+                    console.warn(`[ghagga] listMrNotes hit MAX_PAGES (${MAX_PAGES}) for project ${projectId} MR !${mrIid}; note listing may be truncated`);
+                }
+            }
+            return out;
+        },
+        async createMrNote(projectId, mrIid, body, token) {
+            const url = `${apiBase}/projects/${projectId}/merge_requests/${mrIid}/notes`;
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: apiHeaders(token),
+                body: JSON.stringify({ body }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (!res.ok)
+                await failOn(res, 'creating MR note');
+            const data = (await res.json());
+            return { id: data.id };
+        },
+        async deleteMrNote(projectId, mrIid, noteId, token) {
+            const url = `${apiBase}/projects/${projectId}/merge_requests/${mrIid}/notes/${noteId}`;
+            const res = await fetch(url, {
+                method: 'DELETE',
+                headers: apiHeaders(token),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            // The adapter's upsert tolerates delete failures (best-effort), but we
+            // still surface a non-2xx (except 404) so `deleted[]` only reflects
+            // genuinely-removed ids.
+            if (!res.ok && res.status !== 404)
+                await failOn(res, 'deleting MR note');
+        },
+        async createMrDiscussion(projectId, mrIid, body, position, token) {
+            // True diff-anchored discussion: POST /merge_requests/:iid/discussions with
+            // position[position_type]=text + the three SHAs + old/new path + line(s).
+            const url = `${apiBase}/projects/${projectId}/merge_requests/${mrIid}/discussions`;
+            const payload = {
+                body,
+                position: {
+                    position_type: 'text',
+                    base_sha: position.baseSha,
+                    head_sha: position.headSha,
+                    start_sha: position.startSha,
+                    old_path: position.oldPath,
+                    new_path: position.newPath,
+                    ...(position.oldLine != null ? { old_line: position.oldLine } : {}),
+                    ...(position.newLine != null ? { new_line: position.newLine } : {}),
+                },
+            };
+            const res = await fetch(url, {
+                method: 'POST',
+                headers: apiHeaders(token),
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (!res.ok)
+                await failOn(res, 'creating MR discussion');
+            // The discussion response nests its notes; box the FIRST note's id so the
+            // result matches the createMrNote contract ({ id: number }).
+            const data = (await res.json());
+            const firstNoteId = data.notes?.[0]?.id;
+            if (typeof firstNoteId !== 'number') {
+                throw new GitLabApiError('GitLab API error creating MR discussion: response had no numeric notes[0].id', res.status, JSON.stringify(data));
+            }
+            return { id: firstNoteId };
+        },
+        async updateMrNote(projectId, mrIid, noteId, body, token) {
+            const url = `${apiBase}/projects/${projectId}/merge_requests/${mrIid}/notes/${noteId}`;
+            const res = await fetch(url, {
+                method: 'PUT',
+                headers: apiHeaders(token),
+                body: JSON.stringify({ body }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+            if (!res.ok)
+                await failOn(res, 'updating MR note');
+        },
+    };
+}
+//# sourceMappingURL=cli-gitlab-client-port.js.map

package/dist/lib/cli-gitlab-client-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-gitlab-client-port.js","sourceRoot":"","sources":["../../src/lib/cli-gitlab-client-port.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,eAAe,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,YAAY,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC;IACpC,qEAAqE;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,OAAO,WAAW,IAAI,SAAS,CAAC;AAClC,CAAC;AAED,gFAAgF;AAChF,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO;QACL,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAa,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,cAAc,CACtB,oBAAoB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,EAC7D,GAAG,CAAC,MAAM,EACV,IAAI,CACL,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,KAAa,EACb,OAAO,GAAG,2BAA2B;IAErC,MAAM,GAAG,GAAG,GAAG,OAAO,aAAa,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,MAAM,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;IAClD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,iFAAiF,IAAI,GAAG,EACxF,GAAG,CAAC,MAAM,EACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAO,GAAG,2BAA2B;IAC7E,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK;YACvC,uEAAuE;YACvE,2EAA2E;YAC3E,uEAAuE;YACvE,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,OAAO,GAAG,GAAG,OAAO,aAAa,SAAS,mBAAmB,KAAK,QAAQ,CAAC;YACjF,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,MAAM,GAAG,GAAiB,EAAE,CAAC;YAC7B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7C,MAAM,GAAG,GAAG,GAAG,OAAO,sBAAsB,IAAI,+BAA+B,CAAC;gBAChF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;oBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBACnD,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwC,CAAC;gBACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7C,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM;gBAC9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CACV,uCAAuC,SAAS,iBAAiB,SAAS,QAAQ,KAAK,iCAAiC,CACzH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK;YAC9C,MAAM,GAAG,GAAG,GAAG,OAAO,aAAa,SAAS,mBAAmB,KAAK,QAAQ,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK;YAChD,MAAM,GAAG,GAAG,GAAG,OAAO,aAAa,SAAS,mBAAmB,KAAK,UAAU,MAAM,EAAE,CAAC;YACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,uEAAuE;YACvE,oEAAoE;YACpE,yBAAyB;YACzB,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC3E,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK;YAC9D,4EAA4E;YAC5E,0EAA0E;YAC1E,MAAM,GAAG,GAAG,GAAG,OAAO,aAAa,SAAS,mBAAmB,KAAK,cAAc,CAAC;YACnF,MAAM,OAAO,GAA4B;gBACvC,IAAI;gBACJ,QAAQ,EAAE;oBACR,aAAa,EAAE,MAAM;oBACrB,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,SAAS,EAAE,QAAQ,CAAC,QAAQ;oBAC5B,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE;aACF,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACzD,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;YACrE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACxC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,cAAc,CACtB,8EAA8E,EAC9E,GAAG,CAAC,MAAM,EACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CACrB,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;YACtD,MAAM,GAAG,GAAG,GAAG,OAAO,aAAa,SAAS,mBAAmB,KAAK,UAAU,MAAM,EAAE,CAAC;YACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC;gBAC1B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC9B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/cli-gitlab-client-port.test.d.ts

@@ -0,0 +1,9 @@
+/**
+ * R-GITLAB / R-LEAK-PUBLISH: the `--mr` post-back routes through the REAL
+ * GitLabForgeAdapter folding over the CLI's own GitLabClientPort. We mock ONLY
+ * `fetch` (the network seam), so this exercises the genuine adapter
+ * find→delete→repost idempotency AND the genuine CLI port REST calls — a
+ * faithful simulation against a mocked GitLab.
+ */
+export {};
+//# sourceMappingURL=cli-gitlab-client-port.test.d.ts.map

package/dist/lib/cli-gitlab-client-port.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-gitlab-client-port.test.d.ts","sourceRoot":"","sources":["../../src/lib/cli-gitlab-client-port.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}