issue-flow 0.7.6 → 0.8.0

package/dist/chunk-F52S6ZGF.js

@@ -0,0 +1,447 @@
+#!/usr/bin/env node
+import {
+  resolvePackageDir
+} from "./chunk-SLHZPB3C.js";
+import {
+  getGlobalRoot,
+  webLockSchema
+} from "./chunk-BASRRXAM.js";
+import {
+  NullPublisher,
+  isoNow,
+  printInfo,
+  printWarning
+} from "./chunk-BH7DYADV.js";
+
+// src/web/lock.ts
+import { spawn as nodeSpawn } from "child_process";
+import { readFile as readFile2, rm, writeFile } from "fs/promises";
+import { join as join2 } from "path";
+import chalk2 from "chalk";
+
+// src/web/server.ts
+import { createHash } from "crypto";
+import { readFile } from "fs/promises";
+import { createServer } from "http";
+import { createRequire } from "module";
+import { join } from "path";
+import chalk from "chalk";
+var require2 = createRequire(import.meta.url);
+function readPackageVersion() {
+  try {
+    return require2("../../package.json").version;
+  } catch {
+    return "0.0.0";
+  }
+}
+var JSON_TYPE = "application/json; charset=utf-8";
+function publisherSessionSource(publisher) {
+  return {
+    list: () => {
+      const snapshot = publisher.snapshot();
+      return snapshot.sessionId === null ? [] : [snapshot];
+    },
+    get: (sessionId) => {
+      const snapshot = publisher.snapshot();
+      return snapshot.sessionId === sessionId ? snapshot : void 0;
+    }
+  };
+}
+function directorySessionSource(handle) {
+  return {
+    list: () => handle.sessions().map((entry) => entry.snapshot),
+    get: (sessionId) => handle.getSession(sessionId)?.snapshot
+  };
+}
+function resolveSessionSource(options) {
+  if (options.sessions) return directorySessionSource(options.sessions);
+  return publisherSessionSource(options.publisher ?? new NullPublisher());
+}
+var STATIC_ROUTES = {
+  "/": { file: "index.html", contentType: "text/html; charset=utf-8" },
+  "/app.css": { file: "app.css", contentType: "text/css; charset=utf-8" },
+  "/app.js": { file: "app.js", contentType: "text/javascript; charset=utf-8" }
+};
+async function loadStaticAssets(publicDir) {
+  const assets = /* @__PURE__ */ new Map();
+  if (publicDir === null) return assets;
+  for (const [route, { file, contentType }] of Object.entries(STATIC_ROUTES)) {
+    try {
+      const body = await readFile(join(publicDir, file), "utf-8");
+      assets.set(route, { body, contentType });
+    } catch {
+    }
+  }
+  return assets;
+}
+function baseHeaders(res) {
+  res.setHeader("Cache-Control", "no-store");
+  res.setHeader("X-Content-Type-Options", "nosniff");
+  res.setHeader("Referrer-Policy", "no-referrer");
+  res.setHeader("X-Robots-Tag", "noindex, nofollow");
+}
+function respond(res, status, contentType, body) {
+  res.statusCode = status;
+  res.setHeader("Content-Type", contentType);
+  res.end(body);
+}
+function respondJson(res, status, payload) {
+  respond(res, status, JSON_TYPE, JSON.stringify(payload));
+}
+async function startWebServer(options) {
+  const info = options.info ?? printInfo;
+  const warn = options.warn ?? printWarning;
+  const version = options.version ?? readPackageVersion();
+  const startedAtMs = Date.now();
+  const assets = await loadStaticAssets(
+    options.publicDir ?? resolvePackageDir(join("web", "public"))
+  );
+  const source = resolveSessionSource(options);
+  const statusCache = /* @__PURE__ */ new Map();
+  const statusPayload = (snapshot) => {
+    const key = snapshot.sessionId ?? "";
+    const body = JSON.stringify(snapshot);
+    const cached = statusCache.get(key);
+    if (cached !== void 0 && cached.body === body) return cached;
+    const etag = `"${createHash("sha1").update(body).digest("hex")}"`;
+    const entry = { body, etag };
+    statusCache.set(key, entry);
+    return entry;
+  };
+  const handleRequest = (req, res) => {
+    baseHeaders(res);
+    const requestUrl = new URL(req.url ?? "/", "http://localhost");
+    const path = requestUrl.pathname;
+    if (req.method !== "GET" && req.method !== "HEAD") {
+      respondJson(res, 404, { error: "Not found" });
+      return;
+    }
+    if (path === "/api/status" || path === "/status.json") {
+      const sessionId = requestUrl.searchParams.get("session");
+      let snapshot;
+      if (sessionId !== null) {
+        snapshot = source.get(sessionId);
+        if (snapshot === void 0) {
+          respondJson(res, 404, { error: `No active session with id '${sessionId}'.` });
+          return;
+        }
+      } else {
+        const active = source.list();
+        if (active.length === 0) {
+          respondJson(res, 404, {
+            error: "No active session. Pass ?session=<id> \u2014 see GET /api/sessions."
+          });
+          return;
+        }
+        if (active.length > 1) {
+          respondJson(res, 409, {
+            error: "Multiple active sessions; specify ?session=<id>.",
+            sessions: active.map((entry) => entry.sessionId)
+          });
+          return;
+        }
+        snapshot = active[0];
+      }
+      const { body, etag } = statusPayload(snapshot);
+      res.setHeader("ETag", etag);
+      if (req.headers["if-none-match"] === etag) {
+        res.statusCode = 304;
+        res.end();
+        return;
+      }
+      respond(res, 200, JSON_TYPE, body);
+      return;
+    }
+    if (path === "/api/sessions") {
+      respondJson(
+        res,
+        200,
+        source.list().map((snapshot) => ({
+          sessionId: snapshot.sessionId,
+          issueNumber: snapshot.issue.number,
+          status: snapshot.status,
+          startedAt: snapshot.startedAt,
+          updatedAt: snapshot.updatedAt,
+          statusUrl: `/api/status?session=${encodeURIComponent(snapshot.sessionId ?? "")}`
+        }))
+      );
+      return;
+    }
+    if (path === "/api/health") {
+      respondJson(res, 200, {
+        ok: true,
+        uptime: Math.round((Date.now() - startedAtMs) / 1e3),
+        version,
+        refreshSeconds: options.refreshSeconds ?? 5
+      });
+      return;
+    }
+    const asset = assets.get(path);
+    if (asset) {
+      respond(res, 200, asset.contentType, asset.body);
+      return;
+    }
+    respondJson(res, 404, { error: "Not found" });
+  };
+  const server = createServer((req, res) => {
+    try {
+      handleRequest(req, res);
+    } catch (err) {
+      try {
+        respondJson(res, 500, { error: err instanceof Error ? err.message : String(err) });
+      } catch {
+      }
+    }
+  });
+  const listening = await new Promise((resolve) => {
+    const onError = (err) => {
+      if (err.code === "EADDRINUSE") {
+        warn(
+          `Web monitor port ${options.port} is already in use. Continuing without the web server.`
+        );
+      } else {
+        warn(`Web monitor failed to start (${err.message}). Continuing without the web server.`);
+      }
+      resolve(false);
+    };
+    server.once("error", onError);
+    server.listen(options.port, options.host, () => {
+      server.removeListener("error", onError);
+      resolve(true);
+    });
+  });
+  if (!listening) return null;
+  if (options.unref !== false) {
+    server.unref();
+  }
+  server.on("error", (err) => {
+    warn(`Web monitor server error: ${err.message}`);
+  });
+  const address = server.address();
+  const port = address.port;
+  const displayHost = options.host === "0.0.0.0" ? "localhost" : options.host;
+  const url = `http://${displayHost}:${port}`;
+  if (options.host === "0.0.0.0") {
+    warn("Web monitor bound to 0.0.0.0: anyone on your local network can view the session state.");
+  }
+  info(`Web monitor running at ${chalk.bold.cyan(url)}`);
+  let closed = false;
+  let closePromise = null;
+  const doClose = () => new Promise((resolve) => {
+    process.removeListener("SIGINT", onSignal);
+    process.removeListener("SIGTERM", onSignal);
+    server.close(() => resolve());
+    server.closeAllConnections();
+  });
+  const close = () => {
+    if (closed) return closePromise ?? Promise.resolve();
+    closed = true;
+    closePromise = doClose();
+    return closePromise;
+  };
+  const handle = { server, host: options.host, port, url, close };
+  const onSignal = (signal) => {
+    void handle.close().finally(() => {
+      process.kill(process.pid, signal);
+    });
+  };
+  process.once("SIGINT", onSignal);
+  process.once("SIGTERM", onSignal);
+  return handle;
+}
+
+// src/web/lock.ts
+var WEB_LOCK_FILENAME = "web.lock";
+var HEALTH_PROBE_TIMEOUT_MS = 1e3;
+var LOCK_CLAIM_RETRIES = 5;
+var LOCK_CLAIM_RETRY_DELAY_MS = 100;
+function getWebLockFile(options = {}) {
+  return join2(getGlobalRoot(options), WEB_LOCK_FILENAME);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function probeUrl(host, port) {
+  const probeHost = host === "0.0.0.0" ? "127.0.0.1" : host;
+  return `http://${probeHost}:${port}/api/health`;
+}
+async function probeHealth(host, port) {
+  try {
+    const res = await fetch(probeUrl(host, port), {
+      signal: AbortSignal.timeout(HEALTH_PROBE_TIMEOUT_MS)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+async function readWebLock(lockFile) {
+  let raw;
+  try {
+    raw = await readFile2(lockFile, "utf-8");
+  } catch {
+    return null;
+  }
+  try {
+    const result = webLockSchema.safeParse(JSON.parse(raw));
+    return result.success ? result.data : null;
+  } catch {
+    return null;
+  }
+}
+async function removeWebLock(lockFile) {
+  try {
+    await rm(lockFile, { force: true });
+  } catch {
+  }
+}
+async function detectActiveInstance(lockFile) {
+  const lock = await readWebLock(lockFile);
+  if (lock === null) return null;
+  if (isProcessAlive(lock.pid) && await probeHealth(lock.host, lock.port)) {
+    return lock;
+  }
+  await removeWebLock(lockFile);
+  return null;
+}
+async function claimWebLock(lockFile, lock) {
+  try {
+    await writeFile(lockFile, JSON.stringify(lock, null, 2), { encoding: "utf-8", flag: "wx" });
+    return true;
+  } catch (err) {
+    if (err.code === "EEXIST") return false;
+    throw err;
+  }
+}
+function reusedHandle(lock) {
+  const displayHost = lock.host === "0.0.0.0" ? "localhost" : lock.host;
+  return {
+    host: lock.host,
+    port: lock.port,
+    url: `http://${displayHost}:${lock.port}`,
+    close: async () => {
+    }
+  };
+}
+async function ensureSingleWebServer(options, lockOptions = {}) {
+  const warn = options.warn ?? printWarning;
+  const info = options.info ?? printInfo;
+  const lockFile = getWebLockFile(lockOptions);
+  for (let attempt = 0; attempt <= LOCK_CLAIM_RETRIES; attempt++) {
+    const active = await detectActiveInstance(lockFile);
+    if (active !== null) {
+      info(`Reusing existing web monitor at ${reusedHandle(active).url}`);
+      return reusedHandle(active);
+    }
+    const handle = await startWebServer(options);
+    if (handle === null) {
+      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);
+      continue;
+    }
+    let claimed;
+    try {
+      claimed = await claimWebLock(lockFile, {
+        pid: process.pid,
+        port: handle.port,
+        host: handle.host,
+        startedAt: isoNow()
+      });
+    } catch (err) {
+      await handle.close();
+      throw err;
+    }
+    if (!claimed) {
+      await handle.close();
+      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);
+      continue;
+    }
+    const originalClose = handle.close;
+    handle.close = async () => {
+      await originalClose();
+      await removeWebLock(lockFile);
+    };
+    return handle;
+  }
+  warn("Could not determine the web monitor lock ownership. Continuing without the web server.");
+  return null;
+}
+var DETACHED_CLAIM_TIMEOUT_MS = 5e3;
+var DETACHED_CLAIM_POLL_MS = 150;
+async function ensureWebMonitor(options, monitorOptions = {}) {
+  const warn = options.warn ?? printWarning;
+  const info = options.info ?? printInfo;
+  let lockFile;
+  try {
+    lockFile = getWebLockFile(monitorOptions);
+  } catch (err) {
+    warn(
+      `Web monitor: global storage unavailable (${err instanceof Error ? err.message : String(err)}). Falling back to legacy in-process mode.`
+    );
+    return startWebServer(options);
+  }
+  const active = await detectActiveInstance(lockFile);
+  if (active !== null) {
+    info(`Reusing existing web monitor at ${reusedHandle(active).url}`);
+    return reusedHandle(active);
+  }
+  const execPath = monitorOptions.execPath ?? process.execPath;
+  const entryScript = monitorOptions.entryScript ?? process.argv[1];
+  if (entryScript === void 0) {
+    warn("Web monitor: could not determine the CLI entry point to spawn a detached server.");
+    return null;
+  }
+  const args = [
+    entryScript,
+    "web",
+    "serve",
+    "--port",
+    String(options.port),
+    "--host",
+    options.host
+  ];
+  if (options.refreshSeconds !== void 0) {
+    args.push("--refresh", String(options.refreshSeconds));
+  }
+  const spawnFn = monitorOptions.spawn ?? nodeSpawn;
+  try {
+    const child = spawnFn(execPath, args, { detached: true, stdio: "ignore" });
+    child.unref();
+  } catch (err) {
+    warn(
+      `Web monitor: failed to start the detached server (${err instanceof Error ? err.message : String(err)}). Continuing without the web server.`
+    );
+    return null;
+  }
+  const timeoutMs = monitorOptions.claimTimeoutMs ?? DETACHED_CLAIM_TIMEOUT_MS;
+  const pollMs = monitorOptions.claimPollIntervalMs ?? DETACHED_CLAIM_POLL_MS;
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const claimed = await detectActiveInstance(lockFile);
+    if (claimed !== null) {
+      info(`Web monitor running at ${chalk2.bold.cyan(reusedHandle(claimed).url)}`);
+      return reusedHandle(claimed);
+    }
+    await sleep(pollMs);
+  }
+  warn(
+    "Web monitor: the detached server did not start in time. Continuing without the web server."
+  );
+  return null;
+}
+
+export {
+  getWebLockFile,
+  readWebLock,
+  removeWebLock,
+  ensureSingleWebServer,
+  ensureWebMonitor
+};
+//# sourceMappingURL=chunk-F52S6ZGF.js.map

package/dist/chunk-F52S6ZGF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/web/lock.ts","../src/web/server.ts"],"sourcesContent":["import { type ChildProcess, spawn as nodeSpawn } from 'node:child_process';\nimport { readFile, rm, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport chalk from 'chalk';\nimport { isoNow } from '../core/state-manager.js';\nimport { type GetGlobalRootOptions, getGlobalRoot } from '../storage/paths.js';\nimport { type WebLock, webLockSchema } from '../storage/schemas.js';\nimport { printInfo, printWarning } from '../ui/logger.js';\nimport { startWebServer, type WebServerHandle, type WebServerOptions } from './server.js';\n\n/**\n * Single-instance guard for the web monitoring server (`~/.issue-flow/web.lock`).\n *\n * A machine runs at most one monitoring server. Two entry points build on top\n * of the same lock:\n *\n * - `ensureSingleWebServer` binds (or reuses) a server **in the calling\n *   process**. It is the low-level primitive, used by the `web serve` command\n *   (the standalone process that ends up owning the lock) and by this\n *   module's own tests. Nothing else should call it directly.\n * - `ensureWebMonitor` (US-002) is what `run`/`execute` call: it reuses an\n *   active instance exactly like `ensureSingleWebServer`, but when none\n *   exists it spawns `web serve` as a **detached** child instead of binding\n *   locally, so the server outlives the pipeline process. Falls back to the\n *   legacy in-process `startWebServer` (US-006) when the global storage tree\n *   itself is unreachable.\n */\n\n/** Lock file name, sibling of `config.json` at the global storage root. */\nexport const WEB_LOCK_FILENAME = 'web.lock';\n\n/** How long a health probe against a candidate instance waits before giving up. */\nconst HEALTH_PROBE_TIMEOUT_MS = 1000;\n\n/**\n * A process that loses the atomic lock creation retries this many times,\n * waiting for the winner to finish starting up, before giving up.\n */\nconst LOCK_CLAIM_RETRIES = 5;\nconst LOCK_CLAIM_RETRY_DELAY_MS = 100;\n\nexport function getWebLockFile(options: GetGlobalRootOptions = {}): string {\n  return join(getGlobalRoot(options), WEB_LOCK_FILENAME);\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/** `process.kill(pid, 0)` throws ESRCH when the pid is gone, EPERM when it is\n * alive but owned by another user — only ESRCH means \"not alive\". */\nfunction isProcessAlive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (err) {\n    return (err as NodeJS.ErrnoException).code === 'EPERM';\n  }\n}\n\n/** 0.0.0.0 is not a connectable address; probe loopback instead, same mapping\n * `startWebServer` uses to build its own display URL. */\nfunction probeUrl(host: string, port: number): string {\n  const probeHost = host === '0.0.0.0' ? '127.0.0.1' : host;\n  return `http://${probeHost}:${port}/api/health`;\n}\n\nasync function probeHealth(host: string, port: number): Promise<boolean> {\n  try {\n    const res = await fetch(probeUrl(host, port), {\n      signal: AbortSignal.timeout(HEALTH_PROBE_TIMEOUT_MS),\n    });\n    return res.ok;\n  } catch {\n    return false;\n  }\n}\n\n/** Malformed content (partial write, older/newer incompatible shape) reads as\n * \"no lock\" — the same degrade-to-absent behavior as `loadGlobalConfig()`. */\nexport async function readWebLock(lockFile: string): Promise<WebLock | null> {\n  let raw: string;\n  try {\n    raw = await readFile(lockFile, 'utf-8');\n  } catch {\n    return null;\n  }\n  try {\n    const result = webLockSchema.safeParse(JSON.parse(raw));\n    return result.success ? result.data : null;\n  } catch {\n    return null;\n  }\n}\n\nexport async function removeWebLock(lockFile: string): Promise<void> {\n  try {\n    await rm(lockFile, { force: true });\n  } catch {\n    /* best-effort cleanup */\n  }\n}\n\n/**\n * A lock is only trustworthy when both signals agree: the owning process is\n * alive AND it answers `/api/health`. A dead pid is the obvious stale case;\n * a live pid that does not answer covers a process that still exists but\n * crashed before binding, was killed -9 leaving a zombie-adjacent state, or\n * whose port was reclaimed by something else entirely. Either way the lock is\n * removed so the next attempt starts clean instead of looping on it forever.\n */\nexport async function detectActiveInstance(lockFile: string): Promise<WebLock | null> {\n  const lock = await readWebLock(lockFile);\n  if (lock === null) return null;\n\n  if (isProcessAlive(lock.pid) && (await probeHealth(lock.host, lock.port))) {\n    return lock;\n  }\n\n  await removeWebLock(lockFile);\n  return null;\n}\n\n/**\n * Atomic exclusive create: `wx` fails with EEXIST when another process won\n * the race, which is what lets two concurrent invocations agree on a single\n * winner without a separate lock-of-the-lock.\n */\nasync function claimWebLock(lockFile: string, lock: WebLock): Promise<boolean> {\n  try {\n    await writeFile(lockFile, JSON.stringify(lock, null, 2), { encoding: 'utf-8', flag: 'wx' });\n    return true;\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code === 'EEXIST') return false;\n    throw err;\n  }\n}\n\n/** Handle returned when reusing an already-running instance instead of\n * binding a new one — there is no local `Server` to hold, and closing it\n * must not tear down a server another process owns. */\nfunction reusedHandle(lock: WebLock): WebServerHandle {\n  const displayHost = lock.host === '0.0.0.0' ? 'localhost' : lock.host;\n  return {\n    host: lock.host,\n    port: lock.port,\n    url: `http://${displayHost}:${lock.port}`,\n    close: async () => {},\n  };\n}\n\n/**\n * Start the web monitoring server, first checking whether a live instance\n * already owns `web.lock` and reusing it instead of binding a second one.\n *\n * The lock is claimed only *after* a successful bind, never before: claiming\n * it with the port the server is about to (but hasn't yet) listen on would\n * make that lock briefly answer no health probe at all, and a concurrent\n * invocation would misread that gap as \"stale\" and delete a perfectly good\n * lock out from under its owner. Binding first also means two invocations\n * racing for the same fixed port never both reach the claim step — the OS\n * itself lets only one `listen()` succeed. The `wx` claim then exists for the\n * remaining race: two invocations that *both* manage to bind (only possible\n * with an ephemeral port) still agree on exactly one winner. The loser closes\n * the server it just opened and defers to whichever lock exists.\n *\n * Returns null exactly when `startWebServer` would: nothing here may affect\n * the pipeline, so a lock we cannot resolve after every retry degrades to \"no\n * server\" rather than throwing.\n */\nexport async function ensureSingleWebServer(\n  options: WebServerOptions,\n  lockOptions: GetGlobalRootOptions = {},\n): Promise<WebServerHandle | null> {\n  const warn = options.warn ?? printWarning;\n  const info = options.info ?? printInfo;\n  const lockFile = getWebLockFile(lockOptions);\n\n  for (let attempt = 0; attempt <= LOCK_CLAIM_RETRIES; attempt++) {\n    const active = await detectActiveInstance(lockFile);\n    if (active !== null) {\n      info(`Reusing existing web monitor at ${reusedHandle(active).url}`);\n      return reusedHandle(active);\n    }\n\n    const handle = await startWebServer(options);\n    if (handle === null) {\n      // Could not bind. Most likely another instance's listen() won a race\n      // on the same fixed port between our detection above and this call —\n      // its lock should be visible shortly. Anything else (port taken by an\n      // unrelated process, invalid host, ...) fails the same way on the next\n      // retry too, and the loop's own limit stops it from spinning forever.\n      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);\n      continue;\n    }\n\n    let claimed: boolean;\n    try {\n      claimed = await claimWebLock(lockFile, {\n        pid: process.pid,\n        port: handle.port,\n        host: handle.host,\n        startedAt: isoNow(),\n      });\n    } catch (err) {\n      await handle.close();\n      throw err;\n    }\n\n    if (!claimed) {\n      // We bound successfully (an ephemeral port let both of us through),\n      // but another invocation's lock got written first. We are not the\n      // canonical instance: close what we just opened and defer to it.\n      await handle.close();\n      await sleep(LOCK_CLAIM_RETRY_DELAY_MS);\n      continue;\n    }\n\n    const originalClose = handle.close;\n    handle.close = async () => {\n      await originalClose();\n      await removeWebLock(lockFile);\n    };\n    return handle;\n  }\n\n  warn('Could not determine the web monitor lock ownership. Continuing without the web server.');\n  return null;\n}\n\n/** Bounded wait for a freshly spawned `web serve` child to claim the lock. */\nconst DETACHED_CLAIM_TIMEOUT_MS = 5000;\nconst DETACHED_CLAIM_POLL_MS = 150;\n\nexport interface EnsureWebMonitorOptions extends GetGlobalRootOptions {\n  /** Injectable for tests. Defaults to `node:child_process`'s `spawn`. */\n  spawn?: (\n    command: string,\n    args: string[],\n    options: { detached: true; stdio: 'ignore' },\n  ) => ChildProcess;\n  /** Node executable to spawn. Defaults to `process.execPath`. */\n  execPath?: string;\n  /** CLI entry script re-invoked as `<entry> web serve ...`. Defaults to `process.argv[1]`. */\n  entryScript?: string;\n  /** How long to wait for the spawned instance's lock to become healthy. */\n  claimTimeoutMs?: number;\n  claimPollIntervalMs?: number;\n}\n\n/**\n * Entry point for `run`/`execute`: get a web monitor without binding one in\n * this process (US-002).\n *\n * 1. Reuse a live, healthy instance exactly like `ensureSingleWebServer`.\n * 2. Otherwise, spawn `<node> <cli> web serve --port … --host … [--refresh …]`\n *    detached (`{ detached: true, stdio: 'ignore' }`) and `unref()`ed, so it\n *    survives this process exiting and never pipes its own stdio back here.\n * 3. Poll the lock file (bounded) until the spawned instance claims it, then\n *    return a *reused* handle for it — this process never owns that `Server`,\n *    the same shape `ensureSingleWebServer`'s reuse path already returns.\n *\n * Two failure modes degrade gracefully rather than affecting the pipeline:\n * the global storage tree being unreachable (no resolvable home directory)\n * falls back to `startWebServer` bound right here, exactly the pre-US-001\n * behavior (US-006); a spawn or claim failure with the storage tree otherwise\n * healthy just returns null, same contract `startWebServer` itself has.\n */\nexport async function ensureWebMonitor(\n  options: WebServerOptions,\n  monitorOptions: EnsureWebMonitorOptions = {},\n): Promise<WebServerHandle | null> {\n  const warn = options.warn ?? printWarning;\n  const info = options.info ?? printInfo;\n\n  let lockFile: string;\n  try {\n    lockFile = getWebLockFile(monitorOptions);\n  } catch (err) {\n    warn(\n      `Web monitor: global storage unavailable (${err instanceof Error ? err.message : String(err)}). Falling back to legacy in-process mode.`,\n    );\n    return startWebServer(options);\n  }\n\n  const active = await detectActiveInstance(lockFile);\n  if (active !== null) {\n    info(`Reusing existing web monitor at ${reusedHandle(active).url}`);\n    return reusedHandle(active);\n  }\n\n  const execPath = monitorOptions.execPath ?? process.execPath;\n  const entryScript = monitorOptions.entryScript ?? process.argv[1];\n  if (entryScript === undefined) {\n    warn('Web monitor: could not determine the CLI entry point to spawn a detached server.');\n    return null;\n  }\n\n  const args = [\n    entryScript,\n    'web',\n    'serve',\n    '--port',\n    String(options.port),\n    '--host',\n    options.host,\n  ];\n  if (options.refreshSeconds !== undefined) {\n    args.push('--refresh', String(options.refreshSeconds));\n  }\n\n  const spawnFn = monitorOptions.spawn ?? nodeSpawn;\n  try {\n    const child = spawnFn(execPath, args, { detached: true, stdio: 'ignore' });\n    child.unref();\n  } catch (err) {\n    warn(\n      `Web monitor: failed to start the detached server (${err instanceof Error ? err.message : String(err)}). Continuing without the web server.`,\n    );\n    return null;\n  }\n\n  const timeoutMs = monitorOptions.claimTimeoutMs ?? DETACHED_CLAIM_TIMEOUT_MS;\n  const pollMs = monitorOptions.claimPollIntervalMs ?? DETACHED_CLAIM_POLL_MS;\n  const deadline = Date.now() + timeoutMs;\n  while (Date.now() < deadline) {\n    const claimed = await detectActiveInstance(lockFile);\n    if (claimed !== null) {\n      info(`Web monitor running at ${chalk.bold.cyan(reusedHandle(claimed).url)}`);\n      return reusedHandle(claimed);\n    }\n    await sleep(pollMs);\n  }\n\n  warn(\n    'Web monitor: the detached server did not start in time. Continuing without the web server.',\n  );\n  return null;\n}\n","import { createHash } from 'node:crypto';\nimport { readFile } from 'node:fs/promises';\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';\nimport { createRequire } from 'node:module';\nimport type { AddressInfo } from 'node:net';\nimport { join } from 'node:path';\nimport chalk from 'chalk';\nimport { resolvePackageDir } from '../core/prompt-resolver.js';\nimport {\n  NullPublisher,\n  type SessionPublisher,\n  type SessionSnapshot,\n} from '../core/session-state.js';\nimport { printInfo, printWarning } from '../ui/logger.js';\nimport type { SessionDirectoryHandle } from './session-directory.js';\n\n/**\n * HTTP server for the web monitoring mode. Plain node:http — no new runtime\n * dependencies. Serves the publisher's in-memory snapshot (it never re-reads\n * issues/N/session.json) and the static UI assets.\n *\n * Resilience contract: nothing here may ever affect the pipeline. Listen\n * failures (EADDRINUSE included) log a warning and the execution continues\n * without a server; the server is unref()'d so it cannot keep the process\n * alive; request handling is wrapped so a handler error answers 500 instead\n * of crashing the process.\n */\n\nconst require = createRequire(import.meta.url);\n\nfunction readPackageVersion(): string {\n  try {\n    return (require('../../package.json') as { version: string }).version;\n  } catch {\n    return '0.0.0';\n  }\n}\n\nexport interface WebServerOptions {\n  /**\n   * Legacy single-session mode (pre-US-003, still used by the US-006\n   * fallback): serves this publisher's in-memory snapshot directly, with no\n   * directory scan and no lock file involved. Mutually exclusive with\n   * `sessions` — when both are given, `sessions` wins.\n   */\n  publisher?: SessionPublisher;\n  /**\n   * Multi-session mode: sessions discovered by polling the global storage\n   * tree (`web/session-directory.ts`). This is what every current entry\n   * point (`web serve`) passes; `publisher` only exists for the legacy path.\n   */\n  sessions?: SessionDirectoryHandle;\n  port: number;\n  host: string;\n  /** Suggested UI polling interval, exposed via /api/health. */\n  refreshSeconds?: number;\n  /** Package version reported by /api/health. Default: read from package.json. */\n  version?: string;\n  /** Directory holding index.html/app.css/app.js. Default: auto-resolved. */\n  publicDir?: string;\n  /** Info logger. Default: printInfo. */\n  info?: (message: string) => void;\n  /** Warning logger. Default: printWarning. */\n  warn?: (message: string) => void;\n  /**\n   * Whether to `unref()` the underlying socket so it never keeps the process\n   * alive on its own. Default `true`, matching the historical contract for a\n   * server bound inline in the pipeline process. The standalone `web serve`\n   * process (the detached server itself) passes `false`: it has nothing else\n   * to do, so staying alive for as long as the server is bound *is* the job.\n   */\n  unref?: boolean;\n}\n\nexport interface WebServerHandle {\n  /**\n   * Absent when this handle represents an existing instance reused through\n   * `ensureSingleWebServer` (`web/lock.ts`) instead of one bound locally.\n   */\n  server?: Server;\n  /** Host the server is bound to. */\n  host: string;\n  /** Actual bound port (relevant when options.port is 0). */\n  port: number;\n  /** Human-facing access URL. */\n  url: string;\n  /** Close the server and release signal handlers. Idempotent, never rejects. */\n  close(): Promise<void>;\n}\n\ninterface StaticAsset {\n  body: string;\n  contentType: string;\n}\n\nconst JSON_TYPE = 'application/json; charset=utf-8';\n\n/**\n * Uniform view over \"whatever sessions this server knows about\", so the route\n * handlers below never care whether they are backed by a single in-memory\n * publisher (legacy mode) or by the global directory scan (US-003/US-004).\n */\ninterface SessionSource {\n  /** Every session currently considered active, in no particular order. */\n  list(): SessionSnapshot[];\n  /** A specific session by id, or undefined when it is not currently active. */\n  get(sessionId: string): SessionSnapshot | undefined;\n}\n\nfunction publisherSessionSource(publisher: SessionPublisher): SessionSource {\n  return {\n    list: () => {\n      const snapshot = publisher.snapshot();\n      return snapshot.sessionId === null ? [] : [snapshot];\n    },\n    get: (sessionId) => {\n      const snapshot = publisher.snapshot();\n      return snapshot.sessionId === sessionId ? snapshot : undefined;\n    },\n  };\n}\n\nfunction directorySessionSource(handle: SessionDirectoryHandle): SessionSource {\n  return {\n    list: () => handle.sessions().map((entry) => entry.snapshot),\n    get: (sessionId) => handle.getSession(sessionId)?.snapshot,\n  };\n}\n\nfunction resolveSessionSource(options: WebServerOptions): SessionSource {\n  if (options.sessions) return directorySessionSource(options.sessions);\n  return publisherSessionSource(options.publisher ?? new NullPublisher());\n}\n\nconst STATIC_ROUTES: Record<string, { file: string; contentType: string }> = {\n  '/': { file: 'index.html', contentType: 'text/html; charset=utf-8' },\n  '/app.css': { file: 'app.css', contentType: 'text/css; charset=utf-8' },\n  '/app.js': { file: 'app.js', contentType: 'text/javascript; charset=utf-8' },\n};\n\n/** Assets are read once at startup; missing files simply 404. */\nasync function loadStaticAssets(publicDir: string | null): Promise<Map<string, StaticAsset>> {\n  const assets = new Map<string, StaticAsset>();\n  if (publicDir === null) return assets;\n  for (const [route, { file, contentType }] of Object.entries(STATIC_ROUTES)) {\n    try {\n      const body = await readFile(join(publicDir, file), 'utf-8');\n      assets.set(route, { body, contentType });\n    } catch {\n      // Asset not present (e.g. UI not built yet) — route answers 404.\n    }\n  }\n  return assets;\n}\n\n/** Headers applied to every response, including 304s and errors. */\nfunction baseHeaders(res: ServerResponse): void {\n  res.setHeader('Cache-Control', 'no-store');\n  res.setHeader('X-Content-Type-Options', 'nosniff');\n  res.setHeader('Referrer-Policy', 'no-referrer');\n  res.setHeader('X-Robots-Tag', 'noindex, nofollow');\n}\n\nfunction respond(res: ServerResponse, status: number, contentType: string, body: string): void {\n  res.statusCode = status;\n  res.setHeader('Content-Type', contentType);\n  res.end(body);\n}\n\nfunction respondJson(res: ServerResponse, status: number, payload: unknown): void {\n  respond(res, status, JSON_TYPE, JSON.stringify(payload));\n}\n\n/**\n * Start the monitoring HTTP server. Returns null when the server could not\n * listen (port in use, invalid host, ...) — the pipeline continues without\n * monitoring, it is never brought down by the server.\n */\nexport async function startWebServer(options: WebServerOptions): Promise<WebServerHandle | null> {\n  const info = options.info ?? printInfo;\n  const warn = options.warn ?? printWarning;\n  const version = options.version ?? readPackageVersion();\n  const startedAtMs = Date.now();\n\n  // The UI ships at the package root as web/public/ (sibling of prompts/),\n  // resolved the same way from src/ and from the published dist/ layout.\n  const assets = await loadStaticAssets(\n    options.publicDir ?? resolvePackageDir(join('web', 'public')),\n  );\n\n  const source = resolveSessionSource(options);\n\n  // JSON serialization memoized per session id: an unchanged poll answers 304\n  // with an empty body. Content-hashed rather than counter-based, unlike the\n  // pre-multi-session version — a directory-backed session has no in-process\n  // publisher to hand out a monotonic version(), and a hash works uniformly\n  // for both sources.\n  const statusCache = new Map<string, { body: string; etag: string }>();\n  const statusPayload = (snapshot: SessionSnapshot): { body: string; etag: string } => {\n    const key = snapshot.sessionId ?? '';\n    const body = JSON.stringify(snapshot);\n    const cached = statusCache.get(key);\n    if (cached !== undefined && cached.body === body) return cached;\n    const etag = `\"${createHash('sha1').update(body).digest('hex')}\"`;\n    const entry = { body, etag };\n    statusCache.set(key, entry);\n    return entry;\n  };\n\n  const handleRequest = (req: IncomingMessage, res: ServerResponse): void => {\n    baseHeaders(res);\n\n    const requestUrl = new URL(req.url ?? '/', 'http://localhost');\n    const path = requestUrl.pathname;\n\n    // POST /api/control/* is reserved for future write operations (pause,\n    // retry, ...); intentionally NOT registered — the v1 surface is\n    // read-only (snapshot.readOnly is true and capabilities is empty).\n    if (req.method !== 'GET' && req.method !== 'HEAD') {\n      respondJson(res, 404, { error: 'Not found' });\n      return;\n    }\n\n    if (path === '/api/status' || path === '/status.json') {\n      const sessionId = requestUrl.searchParams.get('session');\n      let snapshot: SessionSnapshot | undefined;\n      if (sessionId !== null) {\n        snapshot = source.get(sessionId);\n        if (snapshot === undefined) {\n          respondJson(res, 404, { error: `No active session with id '${sessionId}'.` });\n          return;\n        }\n      } else {\n        // Back-compat shorthand (US-005): with exactly one active session,\n        // GET /api/status with no query string still answers it directly, the\n        // same behavior a single-session run always had. Zero or several\n        // active sessions is genuinely ambiguous without an id and answers an\n        // explicit error instead of guessing.\n        const active = source.list();\n        if (active.length === 0) {\n          respondJson(res, 404, {\n            error: 'No active session. Pass ?session=<id> — see GET /api/sessions.',\n          });\n          return;\n        }\n        if (active.length > 1) {\n          respondJson(res, 409, {\n            error: 'Multiple active sessions; specify ?session=<id>.',\n            sessions: active.map((entry) => entry.sessionId),\n          });\n          return;\n        }\n        snapshot = active[0];\n      }\n\n      const { body, etag } = statusPayload(snapshot);\n      res.setHeader('ETag', etag);\n      if (req.headers['if-none-match'] === etag) {\n        res.statusCode = 304;\n        res.end();\n        return;\n      }\n      respond(res, 200, JSON_TYPE, body);\n      return;\n    }\n\n    if (path === '/api/sessions') {\n      respondJson(\n        res,\n        200,\n        source.list().map((snapshot) => ({\n          sessionId: snapshot.sessionId,\n          issueNumber: snapshot.issue.number,\n          status: snapshot.status,\n          startedAt: snapshot.startedAt,\n          updatedAt: snapshot.updatedAt,\n          statusUrl: `/api/status?session=${encodeURIComponent(snapshot.sessionId ?? '')}`,\n        })),\n      );\n      return;\n    }\n\n    if (path === '/api/health') {\n      respondJson(res, 200, {\n        ok: true,\n        uptime: Math.round((Date.now() - startedAtMs) / 1000),\n        version,\n        refreshSeconds: options.refreshSeconds ?? 5,\n      });\n      return;\n    }\n\n    const asset = assets.get(path);\n    if (asset) {\n      respond(res, 200, asset.contentType, asset.body);\n      return;\n    }\n\n    respondJson(res, 404, { error: 'Not found' });\n  };\n\n  const server = createServer((req, res) => {\n    try {\n      handleRequest(req, res);\n    } catch (err) {\n      try {\n        respondJson(res, 500, { error: err instanceof Error ? err.message : String(err) });\n      } catch {\n        // Response already destroyed — nothing to do, never crash the process.\n      }\n    }\n  });\n\n  const listening = await new Promise<boolean>((resolve) => {\n    const onError = (err: NodeJS.ErrnoException): void => {\n      if (err.code === 'EADDRINUSE') {\n        warn(\n          `Web monitor port ${options.port} is already in use. Continuing without the web server.`,\n        );\n      } else {\n        warn(`Web monitor failed to start (${err.message}). Continuing without the web server.`);\n      }\n      resolve(false);\n    };\n    server.once('error', onError);\n    server.listen(options.port, options.host, () => {\n      server.removeListener('error', onError);\n      resolve(true);\n    });\n  });\n\n  if (!listening) return null;\n\n  // Never keep the process alive on its own, unless explicitly told not to\n  // unref: the pipeline ending must end the process. The one exception is the\n  // detached `web serve` process (options.unref === false) — it has no other\n  // work, so staying alive for as long as the server is bound is the point.\n  if (options.unref !== false) {\n    server.unref();\n  }\n  // Post-listen errors must never become uncaught exceptions.\n  server.on('error', (err) => {\n    warn(`Web monitor server error: ${err.message}`);\n  });\n\n  const address = server.address() as AddressInfo;\n  const port = address.port;\n  const displayHost = options.host === '0.0.0.0' ? 'localhost' : options.host;\n  const url = `http://${displayHost}:${port}`;\n\n  if (options.host === '0.0.0.0') {\n    warn('Web monitor bound to 0.0.0.0: anyone on your local network can view the session state.');\n  }\n  info(`Web monitor running at ${chalk.bold.cyan(url)}`);\n\n  let closed = false;\n  let closePromise: Promise<void> | null = null;\n\n  const doClose = (): Promise<void> =>\n    new Promise<void>((resolve) => {\n      process.removeListener('SIGINT', onSignal);\n      process.removeListener('SIGTERM', onSignal);\n      server.close(() => resolve());\n      // Drop idle keep-alive connections so close() never hangs.\n      server.closeAllConnections();\n    });\n\n  const close = (): Promise<void> => {\n    if (closed) return closePromise ?? Promise.resolve();\n    closed = true;\n    closePromise = doClose();\n    return closePromise;\n  };\n\n  // `handle.close` is built here, but ensureSingleWebServer/ensureWebMonitor\n  // and the `web serve` command each wrap it afterwards (to also remove the\n  // lock file, stop the session-directory poller, ...). onSignal below calls\n  // `handle.close()` — the *current* value of the property — rather than the\n  // `close` closed over here, so a `kill -TERM <pid>` (including `issue-flow\n  // web stop`) always runs the fully wrapped shutdown, not just this raw\n  // socket close. Capturing `close` directly here was a real bug: the wrapped\n  // behavior only ever ran for an *explicit* `handle.close()` call, leaving\n  // the lock file (and the poller) behind on every signal-driven shutdown.\n  const handle: WebServerHandle = { server, host: options.host, port, url, close };\n\n  // Explicit close on SIGINT/SIGTERM, then re-raise so the default\n  // termination behavior still applies.\n  const onSignal = (signal: NodeJS.Signals): void => {\n    void handle.close().finally(() => {\n      process.kill(process.pid, signal);\n    });\n  };\n  process.once('SIGINT', onSignal);\n  process.once('SIGTERM', onSignal);\n\n  return handle;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAA4B,SAAS,iBAAiB;AACtD,SAAS,YAAAA,WAAU,IAAI,iBAAiB;AACxC,SAAS,QAAAC,aAAY;AACrB,OAAOC,YAAW;;;ACHlB,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,oBAA4E;AACrF,SAAS,qBAAqB;AAE9B,SAAS,YAAY;AACrB,OAAO,WAAW;AAsBlB,IAAMC,WAAU,cAAc,YAAY,GAAG;AAE7C,SAAS,qBAA6B;AACpC,MAAI;AACF,WAAQA,SAAQ,oBAAoB,EAA0B;AAAA,EAChE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA2DA,IAAM,YAAY;AAclB,SAAS,uBAAuB,WAA4C;AAC1E,SAAO;AAAA,IACL,MAAM,MAAM;AACV,YAAM,WAAW,UAAU,SAAS;AACpC,aAAO,SAAS,cAAc,OAAO,CAAC,IAAI,CAAC,QAAQ;AAAA,IACrD;AAAA,IACA,KAAK,CAAC,cAAc;AAClB,YAAM,WAAW,UAAU,SAAS;AACpC,aAAO,SAAS,cAAc,YAAY,WAAW;AAAA,IACvD;AAAA,EACF;AACF;AAEA,SAAS,uBAAuB,QAA+C;AAC7E,SAAO;AAAA,IACL,MAAM,MAAM,OAAO,SAAS,EAAE,IAAI,CAAC,UAAU,MAAM,QAAQ;AAAA,IAC3D,KAAK,CAAC,cAAc,OAAO,WAAW,SAAS,GAAG;AAAA,EACpD;AACF;AAEA,SAAS,qBAAqB,SAA0C;AACtE,MAAI,QAAQ,SAAU,QAAO,uBAAuB,QAAQ,QAAQ;AACpE,SAAO,uBAAuB,QAAQ,aAAa,IAAI,cAAc,CAAC;AACxE;AAEA,IAAM,gBAAuE;AAAA,EAC3E,KAAK,EAAE,MAAM,cAAc,aAAa,2BAA2B;AAAA,EACnE,YAAY,EAAE,MAAM,WAAW,aAAa,0BAA0B;AAAA,EACtE,WAAW,EAAE,MAAM,UAAU,aAAa,iCAAiC;AAC7E;AAGA,eAAe,iBAAiB,WAA6D;AAC3F,QAAM,SAAS,oBAAI,IAAyB;AAC5C,MAAI,cAAc,KAAM,QAAO;AAC/B,aAAW,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,KAAK,OAAO,QAAQ,aAAa,GAAG;AAC1E,QAAI;AACF,YAAM,OAAO,MAAM,SAAS,KAAK,WAAW,IAAI,GAAG,OAAO;AAC1D,aAAO,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAAA,IACzC,QAAQ;AAAA,IAER;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,YAAY,KAA2B;AAC9C,MAAI,UAAU,iBAAiB,UAAU;AACzC,MAAI,UAAU,0BAA0B,SAAS;AACjD,MAAI,UAAU,mBAAmB,aAAa;AAC9C,MAAI,UAAU,gBAAgB,mBAAmB;AACnD;AAEA,SAAS,QAAQ,KAAqB,QAAgB,aAAqB,MAAoB;AAC7F,MAAI,aAAa;AACjB,MAAI,UAAU,gBAAgB,WAAW;AACzC,MAAI,IAAI,IAAI;AACd;AAEA,SAAS,YAAY,KAAqB,QAAgB,SAAwB;AAChF,UAAQ,KAAK,QAAQ,WAAW,KAAK,UAAU,OAAO,CAAC;AACzD;AAOA,eAAsB,eAAe,SAA4D;AAC/F,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,UAAU,QAAQ,WAAW,mBAAmB;AACtD,QAAM,cAAc,KAAK,IAAI;AAI7B,QAAM,SAAS,MAAM;AAAA,IACnB,QAAQ,aAAa,kBAAkB,KAAK,OAAO,QAAQ,CAAC;AAAA,EAC9D;AAEA,QAAM,SAAS,qBAAqB,OAAO;AAO3C,QAAM,cAAc,oBAAI,IAA4C;AACpE,QAAM,gBAAgB,CAAC,aAA8D;AACnF,UAAM,MAAM,SAAS,aAAa;AAClC,UAAM,OAAO,KAAK,UAAU,QAAQ;AACpC,UAAM,SAAS,YAAY,IAAI,GAAG;AAClC,QAAI,WAAW,UAAa,OAAO,SAAS,KAAM,QAAO;AACzD,UAAM,OAAO,IAAI,WAAW,MAAM,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK,CAAC;AAC9D,UAAM,QAAQ,EAAE,MAAM,KAAK;AAC3B,gBAAY,IAAI,KAAK,KAAK;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,CAAC,KAAsB,QAA8B;AACzE,gBAAY,GAAG;AAEf,UAAM,aAAa,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AAC7D,UAAM,OAAO,WAAW;AAKxB,QAAI,IAAI,WAAW,SAAS,IAAI,WAAW,QAAQ;AACjD,kBAAY,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAC5C;AAAA,IACF;AAEA,QAAI,SAAS,iBAAiB,SAAS,gBAAgB;AACrD,YAAM,YAAY,WAAW,aAAa,IAAI,SAAS;AACvD,UAAI;AACJ,UAAI,cAAc,MAAM;AACtB,mBAAW,OAAO,IAAI,SAAS;AAC/B,YAAI,aAAa,QAAW;AAC1B,sBAAY,KAAK,KAAK,EAAE,OAAO,8BAA8B,SAAS,KAAK,CAAC;AAC5E;AAAA,QACF;AAAA,MACF,OAAO;AAML,cAAM,SAAS,OAAO,KAAK;AAC3B,YAAI,OAAO,WAAW,GAAG;AACvB,sBAAY,KAAK,KAAK;AAAA,YACpB,OAAO;AAAA,UACT,CAAC;AACD;AAAA,QACF;AACA,YAAI,OAAO,SAAS,GAAG;AACrB,sBAAY,KAAK,KAAK;AAAA,YACpB,OAAO;AAAA,YACP,UAAU,OAAO,IAAI,CAAC,UAAU,MAAM,SAAS;AAAA,UACjD,CAAC;AACD;AAAA,QACF;AACA,mBAAW,OAAO,CAAC;AAAA,MACrB;AAEA,YAAM,EAAE,MAAM,KAAK,IAAI,cAAc,QAAQ;AAC7C,UAAI,UAAU,QAAQ,IAAI;AAC1B,UAAI,IAAI,QAAQ,eAAe,MAAM,MAAM;AACzC,YAAI,aAAa;AACjB,YAAI,IAAI;AACR;AAAA,MACF;AACA,cAAQ,KAAK,KAAK,WAAW,IAAI;AACjC;AAAA,IACF;AAEA,QAAI,SAAS,iBAAiB;AAC5B;AAAA,QACE;AAAA,QACA;AAAA,QACA,OAAO,KAAK,EAAE,IAAI,CAAC,cAAc;AAAA,UAC/B,WAAW,SAAS;AAAA,UACpB,aAAa,SAAS,MAAM;AAAA,UAC5B,QAAQ,SAAS;AAAA,UACjB,WAAW,SAAS;AAAA,UACpB,WAAW,SAAS;AAAA,UACpB,WAAW,uBAAuB,mBAAmB,SAAS,aAAa,EAAE,CAAC;AAAA,QAChF,EAAE;AAAA,MACJ;AACA;AAAA,IACF;AAEA,QAAI,SAAS,eAAe;AAC1B,kBAAY,KAAK,KAAK;AAAA,QACpB,IAAI;AAAA,QACJ,QAAQ,KAAK,OAAO,KAAK,IAAI,IAAI,eAAe,GAAI;AAAA,QACpD;AAAA,QACA,gBAAgB,QAAQ,kBAAkB;AAAA,MAC5C,CAAC;AACD;AAAA,IACF;AAEA,UAAM,QAAQ,OAAO,IAAI,IAAI;AAC7B,QAAI,OAAO;AACT,cAAQ,KAAK,KAAK,MAAM,aAAa,MAAM,IAAI;AAC/C;AAAA,IACF;AAEA,gBAAY,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EAC9C;AAEA,QAAM,SAAS,aAAa,CAAC,KAAK,QAAQ;AACxC,QAAI;AACF,oBAAc,KAAK,GAAG;AAAA,IACxB,SAAS,KAAK;AACZ,UAAI;AACF,oBAAY,KAAK,KAAK,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE,CAAC;AAAA,MACnF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,YAAY,MAAM,IAAI,QAAiB,CAAC,YAAY;AACxD,UAAM,UAAU,CAAC,QAAqC;AACpD,UAAI,IAAI,SAAS,cAAc;AAC7B;AAAA,UACE,oBAAoB,QAAQ,IAAI;AAAA,QAClC;AAAA,MACF,OAAO;AACL,aAAK,gCAAgC,IAAI,OAAO,uCAAuC;AAAA,MACzF;AACA,cAAQ,KAAK;AAAA,IACf;AACA,WAAO,KAAK,SAAS,OAAO;AAC5B,WAAO,OAAO,QAAQ,MAAM,QAAQ,MAAM,MAAM;AAC9C,aAAO,eAAe,SAAS,OAAO;AACtC,cAAQ,IAAI;AAAA,IACd,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,UAAW,QAAO;AAMvB,MAAI,QAAQ,UAAU,OAAO;AAC3B,WAAO,MAAM;AAAA,EACf;AAEA,SAAO,GAAG,SAAS,CAAC,QAAQ;AAC1B,SAAK,6BAA6B,IAAI,OAAO,EAAE;AAAA,EACjD,CAAC;AAED,QAAM,UAAU,OAAO,QAAQ;AAC/B,QAAM,OAAO,QAAQ;AACrB,QAAM,cAAc,QAAQ,SAAS,YAAY,cAAc,QAAQ;AACvE,QAAM,MAAM,UAAU,WAAW,IAAI,IAAI;AAEzC,MAAI,QAAQ,SAAS,WAAW;AAC9B,SAAK,wFAAwF;AAAA,EAC/F;AACA,OAAK,0BAA0B,MAAM,KAAK,KAAK,GAAG,CAAC,EAAE;AAErD,MAAI,SAAS;AACb,MAAI,eAAqC;AAEzC,QAAM,UAAU,MACd,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAQ,eAAe,UAAU,QAAQ;AACzC,YAAQ,eAAe,WAAW,QAAQ;AAC1C,WAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,WAAO,oBAAoB;AAAA,EAC7B,CAAC;AAEH,QAAM,QAAQ,MAAqB;AACjC,QAAI,OAAQ,QAAO,gBAAgB,QAAQ,QAAQ;AACnD,aAAS;AACT,mBAAe,QAAQ;AACvB,WAAO;AAAA,EACT;AAWA,QAAM,SAA0B,EAAE,QAAQ,MAAM,QAAQ,MAAM,MAAM,KAAK,MAAM;AAI/E,QAAM,WAAW,CAAC,WAAiC;AACjD,SAAK,OAAO,MAAM,EAAE,QAAQ,MAAM;AAChC,cAAQ,KAAK,QAAQ,KAAK,MAAM;AAAA,IAClC,CAAC;AAAA,EACH;AACA,UAAQ,KAAK,UAAU,QAAQ;AAC/B,UAAQ,KAAK,WAAW,QAAQ;AAEhC,SAAO;AACT;;;AD/WO,IAAM,oBAAoB;AAGjC,IAAM,0BAA0B;AAMhC,IAAM,qBAAqB;AAC3B,IAAM,4BAA4B;AAE3B,SAAS,eAAe,UAAgC,CAAC,GAAW;AACzE,SAAOC,MAAK,cAAc,OAAO,GAAG,iBAAiB;AACvD;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAIA,SAAS,eAAe,KAAsB;AAC5C,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,WAAQ,IAA8B,SAAS;AAAA,EACjD;AACF;AAIA,SAAS,SAAS,MAAc,MAAsB;AACpD,QAAM,YAAY,SAAS,YAAY,cAAc;AACrD,SAAO,UAAU,SAAS,IAAI,IAAI;AACpC;AAEA,eAAe,YAAY,MAAc,MAAgC;AACvE,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,SAAS,MAAM,IAAI,GAAG;AAAA,MAC5C,QAAQ,YAAY,QAAQ,uBAAuB;AAAA,IACrD,CAAC;AACD,WAAO,IAAI;AAAA,EACb,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,YAAY,UAA2C;AAC3E,MAAI;AACJ,MAAI;AACF,UAAM,MAAMC,UAAS,UAAU,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,SAAS,cAAc,UAAU,KAAK,MAAM,GAAG,CAAC;AACtD,WAAO,OAAO,UAAU,OAAO,OAAO;AAAA,EACxC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,cAAc,UAAiC;AACnE,MAAI;AACF,UAAM,GAAG,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,EACpC,QAAQ;AAAA,EAER;AACF;AAUA,eAAsB,qBAAqB,UAA2C;AACpF,QAAM,OAAO,MAAM,YAAY,QAAQ;AACvC,MAAI,SAAS,KAAM,QAAO;AAE1B,MAAI,eAAe,KAAK,GAAG,KAAM,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,GAAI;AACzE,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,QAAQ;AAC5B,SAAO;AACT;AAOA,eAAe,aAAa,UAAkB,MAAiC;AAC7E,MAAI;AACF,UAAM,UAAU,UAAU,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,KAAK,CAAC;AAC1F,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAK,IAA8B,SAAS,SAAU,QAAO;AAC7D,UAAM;AAAA,EACR;AACF;AAKA,SAAS,aAAa,MAAgC;AACpD,QAAM,cAAc,KAAK,SAAS,YAAY,cAAc,KAAK;AACjE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX,KAAK,UAAU,WAAW,IAAI,KAAK,IAAI;AAAA,IACvC,OAAO,YAAY;AAAA,IAAC;AAAA,EACtB;AACF;AAqBA,eAAsB,sBACpB,SACA,cAAoC,CAAC,GACJ;AACjC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,WAAW,eAAe,WAAW;AAE3C,WAAS,UAAU,GAAG,WAAW,oBAAoB,WAAW;AAC9D,UAAM,SAAS,MAAM,qBAAqB,QAAQ;AAClD,QAAI,WAAW,MAAM;AACnB,WAAK,mCAAmC,aAAa,MAAM,EAAE,GAAG,EAAE;AAClE,aAAO,aAAa,MAAM;AAAA,IAC5B;AAEA,UAAM,SAAS,MAAM,eAAe,OAAO;AAC3C,QAAI,WAAW,MAAM;AAMnB,YAAM,MAAM,yBAAyB;AACrC;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,aAAa,UAAU;AAAA,QACrC,KAAK,QAAQ;AAAA,QACb,MAAM,OAAO;AAAA,QACb,MAAM,OAAO;AAAA,QACb,WAAW,OAAO;AAAA,MACpB,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,YAAM,OAAO,MAAM;AACnB,YAAM;AAAA,IACR;AAEA,QAAI,CAAC,SAAS;AAIZ,YAAM,OAAO,MAAM;AACnB,YAAM,MAAM,yBAAyB;AACrC;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO;AAC7B,WAAO,QAAQ,YAAY;AACzB,YAAM,cAAc;AACpB,YAAM,cAAc,QAAQ;AAAA,IAC9B;AACA,WAAO;AAAA,EACT;AAEA,OAAK,wFAAwF;AAC7F,SAAO;AACT;AAGA,IAAM,4BAA4B;AAClC,IAAM,yBAAyB;AAoC/B,eAAsB,iBACpB,SACA,iBAA0C,CAAC,GACV;AACjC,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAE7B,MAAI;AACJ,MAAI;AACF,eAAW,eAAe,cAAc;AAAA,EAC1C,SAAS,KAAK;AACZ;AAAA,MACE,4CAA4C,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9F;AACA,WAAO,eAAe,OAAO;AAAA,EAC/B;AAEA,QAAM,SAAS,MAAM,qBAAqB,QAAQ;AAClD,MAAI,WAAW,MAAM;AACnB,SAAK,mCAAmC,aAAa,MAAM,EAAE,GAAG,EAAE;AAClE,WAAO,aAAa,MAAM;AAAA,EAC5B;AAEA,QAAM,WAAW,eAAe,YAAY,QAAQ;AACpD,QAAM,cAAc,eAAe,eAAe,QAAQ,KAAK,CAAC;AAChE,MAAI,gBAAgB,QAAW;AAC7B,SAAK,kFAAkF;AACvF,WAAO;AAAA,EACT;AAEA,QAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,QAAQ,IAAI;AAAA,IACnB;AAAA,IACA,QAAQ;AAAA,EACV;AACA,MAAI,QAAQ,mBAAmB,QAAW;AACxC,SAAK,KAAK,aAAa,OAAO,QAAQ,cAAc,CAAC;AAAA,EACvD;AAEA,QAAM,UAAU,eAAe,SAAS;AACxC,MAAI;AACF,UAAM,QAAQ,QAAQ,UAAU,MAAM,EAAE,UAAU,MAAM,OAAO,SAAS,CAAC;AACzE,UAAM,MAAM;AAAA,EACd,SAAS,KAAK;AACZ;AAAA,MACE,qDAAqD,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACvG;AACA,WAAO;AAAA,EACT;AAEA,QAAM,YAAY,eAAe,kBAAkB;AACnD,QAAM,SAAS,eAAe,uBAAuB;AACrD,QAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,UAAM,UAAU,MAAM,qBAAqB,QAAQ;AACnD,QAAI,YAAY,MAAM;AACpB,WAAK,0BAA0BC,OAAM,KAAK,KAAK,aAAa,OAAO,EAAE,GAAG,CAAC,EAAE;AAC3E,aAAO,aAAa,OAAO;AAAA,IAC7B;AACA,UAAM,MAAM,MAAM;AAAA,EACpB;AAEA;AAAA,IACE;AAAA,EACF;AACA,SAAO;AACT;","names":["readFile","join","chalk","require","join","readFile","chalk"]}

package/dist/{chunk-CD7BMWXW.js → chunk-HSGTZ3CT.js}

@@ -5,7 +5,7 @@ import {
   resolveIssuePaths,
   resolveProjectPaths,
   run
-} from "./chunk-5NLLEWJD.js";
+} from "./chunk-BASRRXAM.js";
 import {
   isoNow,
   issueMetadataSchema,
@@ -13,7 +13,7 @@ import {
   printInfo,
   printWarning,
   writeFileAtomic
-} from "./chunk-5Q2TMW7K.js";
+} from "./chunk-BH7DYADV.js";
 
 // src/issues/registry.ts
 var providers = /* @__PURE__ */ new Map();
@@ -753,4 +753,4 @@ export {
   issuePlaceholders,
   resolveCommandIssue
 };
-//# sourceMappingURL=chunk-CD7BMWXW.js.map
+//# sourceMappingURL=chunk-HSGTZ3CT.js.map

package/dist/{chunk-QLVAEDVD.js → chunk-J3PJBZXJ.js}

@@ -9,11 +9,11 @@ import {
   normalizeRemoteUrl,
   run,
   stripRemoteUrlCredentials
-} from "./chunk-5NLLEWJD.js";
+} from "./chunk-BASRRXAM.js";
 import {
   NullPublisher,
   isoNow
-} from "./chunk-5Q2TMW7K.js";
+} from "./chunk-BH7DYADV.js";
 
 // src/core/session-git.ts
 async function listPullRequests(branch) {
@@ -109,4 +109,4 @@ export {
   listPullRequests,
   publishGitState
 };
-//# sourceMappingURL=chunk-QLVAEDVD.js.map
+//# sourceMappingURL=chunk-J3PJBZXJ.js.map

package/dist/{chunk-DWF46N65.js → chunk-J4SICTAN.js}

@@ -1,25 +1,27 @@
 #!/usr/bin/env node
 import {
   runPhaseWithRetry
-} from "./chunk-D56VWHSM.js";
+} from "./chunk-RQW5W4XC.js";
 import {
   issuePlaceholders,
   resolveCommandIssue
-} from "./chunk-CD7BMWXW.js";
+} from "./chunk-HSGTZ3CT.js";
 import {
   isTransientFailure
 } from "./chunk-HDV3YDTG.js";
 import {
   runHeadless
-} from "./chunk-DF7SUHT5.js";
+} from "./chunk-JWZKV3CL.js";
 import {
-  applyPlaceholders,
-  loadPrompt,
   publishPhaseMetrics
-} from "./chunk-I7FTA5FI.js";
+} from "./chunk-QO2MWMAZ.js";
+import {
+  applyPlaceholders,
+  loadPrompt
+} from "./chunk-SLHZPB3C.js";
 import {
   resolveIssuePaths
-} from "./chunk-5NLLEWJD.js";
+} from "./chunk-BASRRXAM.js";
 import {
   getGlobalTimeout,
   isoNow,
@@ -27,7 +29,7 @@ import {
   printError,
   printSuccess,
   saveTaskPlan
-} from "./chunk-5Q2TMW7K.js";
+} from "./chunk-BH7DYADV.js";
 
 // src/commands/pr.ts
 import { execa } from "execa";
@@ -132,4 +134,4 @@ async function runPr(issue, resolvedIssue) {
 export {
   runPr
 };
-//# sourceMappingURL=chunk-DWF46N65.js.map
+//# sourceMappingURL=chunk-J4SICTAN.js.map

package/dist/{chunk-DWF46N65.js.map → chunk-J4SICTAN.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/pr.ts"],"sourcesContent":["import { execa } from 'execa';\nimport { runHeadless } from '../core/headless.js';\nimport { runPhaseWithRetry } from '../core/phase-runner.js';\nimport { applyPlaceholders, loadPrompt } from '../core/prompt-resolver.js';\nimport { publishPhaseMetrics } from '../core/session-metrics.js';\nimport { isoNow, loadTaskPlan, saveTaskPlan } from '../core/state-manager.js';\nimport { getGlobalTimeout } from '../core/verbose.js';\nimport { issuePlaceholders, resolveCommandIssue } from '../issues/context.js';\nimport type { Issue, ResolvedIssue } from '../issues/types.js';\nimport { resolveIssuePaths } from '../storage/resolve.js';\nimport { printError, printSuccess } from '../ui/logger.js';\nimport { isTransientFailure } from '../utils/retry.js';\n\n/**\n * Extract a PR URL from headless output.\n */\nfunction parsePrUrl(output: string): string | null {\n  const match = output.match(/(https:\\/\\/github\\.com\\/[^\\s]+\\/pull\\/\\d+)/);\n  return match?.[1] ?? null;\n}\n\n/**\n * The numeric id inside a PR URL, so later phases (`pr-review`) address the\n * Pull Request without querying GitHub again.\n */\nfunction parsePrNumber(url: string): number | null {\n  const match = url.match(/\\/pull\\/(\\d+)/);\n  return match?.[1] === undefined ? null : Number(match[1]);\n}\n\n/**\n * The `Closes #N` line for the PR body, empty when the Issue has no remote\n * counterpart: GitHub only understands the reference for Issues it hosts, and\n * an invented `#N` would silently point at an unrelated Issue.\n */\nfunction issueClosesLine(issue: Issue, fallbackId: string): string {\n  if (issue.remoteRef === null) {\n    return '';\n  }\n  return `Closes #${issue.number ?? fallbackId}`;\n}\n\nexport async function runPr(issue: string, resolvedIssue?: ResolvedIssue): Promise<number> {\n  const issueNumber = issue.replace(/^#/, '');\n  const paths = await resolveIssuePaths(issueNumber);\n  const tasksPath = paths.tasksFile;\n\n  const resolution = await resolveCommandIssue(issueNumber, resolvedIssue);\n  if (!resolution.ok) {\n    return resolution.code;\n  }\n\n  // Get current branch\n  let branchName: string;\n  try {\n    const proc = await execa('git', ['branch', '--show-current'], { reject: false });\n    branchName = proc.stdout?.toString().trim() ?? '';\n    if (!branchName) {\n      printError('Could not determine current branch');\n      return 1;\n    }\n  } catch {\n    printError('Failed to get current branch');\n    return 1;\n  }\n\n  const template = await loadPrompt('pr');\n  const prompt = applyPlaceholders(template, {\n    __ISSUE_NUMBER__: issueNumber,\n    __BRANCH_NAME__: branchName,\n    __TASKS_PATH__: tasksPath,\n    __ISSUE_CLOSES__: issueClosesLine(resolution.resolved.issue, issueNumber),\n    ...issuePlaceholders(resolution.resolved),\n  });\n\n  let headlessOutput = '';\n\n  const outcome = await runPhaseWithRetry({\n    phase: 'pr',\n    attempt: async () => {\n      const startedAtMs = Date.now();\n      const result = await runHeadless({\n        prompt,\n        maxTurns: 15,\n        timeout: getGlobalTimeout() ?? 300_000,\n        // json (not text) so the CLI reports usage: the envelope's `result`\n        // field carries the same assistant text parsePrUrl() already consumed.\n        outputFormat: 'json',\n        allowedTools: ['Bash', 'Read', 'Glob', 'Grep'],\n        addDirs: [paths.issueDir],\n        statusMessage: `Creating PR for issue #${issueNumber}...`,\n      });\n      // One event per attempt; the reducer sums them into the phase total.\n      publishPhaseMetrics('pr', result.cost, startedAtMs);\n\n      if (!result.success) {\n        return {\n          ok: false,\n          transient: isTransientFailure(1, result.error ?? ''),\n          error: `PR creation failed: ${result.error}`,\n        };\n      }\n\n      headlessOutput = result.result;\n      return { ok: true };\n    },\n  });\n\n  if (!outcome.ok) {\n    printError(outcome.error ?? `PR creation failed for issue #${issueNumber}`);\n    return 1;\n  }\n\n  const prUrl = parsePrUrl(headlessOutput);\n\n  // Update pipeline state\n  try {\n    const plan = await loadTaskPlan(tasksPath);\n    plan.pipeline.prCreated = true;\n    const prNumber = prUrl === null ? null : parsePrNumber(prUrl);\n    // Without a URL the PR is still assumed created (the phase succeeded), but\n    // there is nothing trustworthy to record: an invented number would send\n    // `pr-review` at an unrelated Pull Request.\n    if (prUrl !== null && prNumber !== null) {\n      plan.pullRequest = {\n        number: prNumber,\n        url: prUrl,\n        headBranch: branchName,\n        createdAt: isoNow(),\n      };\n    }\n    await saveTaskPlan(tasksPath, plan);\n  } catch {\n    // tasks.json may not exist\n  }\n\n  if (prUrl) {\n    printSuccess(`PR created: ${prUrl}`);\n  } else {\n    printSuccess('PR creation completed');\n  }\n  return 0;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAa;AAgBtB,SAAS,WAAW,QAA+B;AACjD,QAAM,QAAQ,OAAO,MAAM,4CAA4C;AACvE,SAAO,QAAQ,CAAC,KAAK;AACvB;AAMA,SAAS,cAAc,KAA4B;AACjD,QAAM,QAAQ,IAAI,MAAM,eAAe;AACvC,SAAO,QAAQ,CAAC,MAAM,SAAY,OAAO,OAAO,MAAM,CAAC,CAAC;AAC1D;AAOA,SAAS,gBAAgB,OAAc,YAA4B;AACjE,MAAI,MAAM,cAAc,MAAM;AAC5B,WAAO;AAAA,EACT;AACA,SAAO,WAAW,MAAM,UAAU,UAAU;AAC9C;AAEA,eAAsB,MAAM,OAAe,eAAgD;AACzF,QAAM,cAAc,MAAM,QAAQ,MAAM,EAAE;AAC1C,QAAM,QAAQ,MAAM,kBAAkB,WAAW;AACjD,QAAM,YAAY,MAAM;AAExB,QAAM,aAAa,MAAM,oBAAoB,aAAa,aAAa;AACvE,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO,WAAW;AAAA,EACpB;AAGA,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,OAAO,CAAC,UAAU,gBAAgB,GAAG,EAAE,QAAQ,MAAM,CAAC;AAC/E,iBAAa,KAAK,QAAQ,SAAS,EAAE,KAAK,KAAK;AAC/C,QAAI,CAAC,YAAY;AACf,iBAAW,oCAAoC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,eAAW,8BAA8B;AACzC,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,MAAM,WAAW,IAAI;AACtC,QAAM,SAAS,kBAAkB,UAAU;AAAA,IACzC,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,IACjB,gBAAgB;AAAA,IAChB,kBAAkB,gBAAgB,WAAW,SAAS,OAAO,WAAW;AAAA,IACxE,GAAG,kBAAkB,WAAW,QAAQ;AAAA,EAC1C,CAAC;AAED,MAAI,iBAAiB;AAErB,QAAM,UAAU,MAAM,kBAAkB;AAAA,IACtC,OAAO;AAAA,IACP,SAAS,YAAY;AACnB,YAAM,cAAc,KAAK,IAAI;AAC7B,YAAM,SAAS,MAAM,YAAY;AAAA,QAC/B;AAAA,QACA,UAAU;AAAA,QACV,SAAS,iBAAiB,KAAK;AAAA;AAAA;AAAA,QAG/B,cAAc;AAAA,QACd,cAAc,CAAC,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC7C,SAAS,CAAC,MAAM,QAAQ;AAAA,QACxB,eAAe,0BAA0B,WAAW;AAAA,MACtD,CAAC;AAED,0BAAoB,MAAM,OAAO,MAAM,WAAW;AAElD,UAAI,CAAC,OAAO,SAAS;AACnB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,WAAW,mBAAmB,GAAG,OAAO,SAAS,EAAE;AAAA,UACnD,OAAO,uBAAuB,OAAO,KAAK;AAAA,QAC5C;AAAA,MACF;AAEA,uBAAiB,OAAO;AACxB,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AAAA,EACF,CAAC;AAED,MAAI,CAAC,QAAQ,IAAI;AACf,eAAW,QAAQ,SAAS,iCAAiC,WAAW,EAAE;AAC1E,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,WAAW,cAAc;AAGvC,MAAI;AACF,UAAM,OAAO,MAAM,aAAa,SAAS;AACzC,SAAK,SAAS,YAAY;AAC1B,UAAM,WAAW,UAAU,OAAO,OAAO,cAAc,KAAK;AAI5D,QAAI,UAAU,QAAQ,aAAa,MAAM;AACvC,WAAK,cAAc;AAAA,QACjB,QAAQ;AAAA,QACR,KAAK;AAAA,QACL,YAAY;AAAA,QACZ,WAAW,OAAO;AAAA,MACpB;AAAA,IACF;AACA,UAAM,aAAa,WAAW,IAAI;AAAA,EACpC,QAAQ;AAAA,EAER;AAEA,MAAI,OAAO;AACT,iBAAa,eAAe,KAAK,EAAE;AAAA,EACrC,OAAO;AACL,iBAAa,uBAAuB;AAAA,EACtC;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/commands/pr.ts"],"sourcesContent":["import { execa } from 'execa';\nimport { runHeadless } from '../core/headless.js';\nimport { runPhaseWithRetry } from '../core/phase-runner.js';\nimport { applyPlaceholders, loadPrompt } from '../core/prompt-resolver.js';\nimport { publishPhaseMetrics } from '../core/session-metrics.js';\nimport { isoNow, loadTaskPlan, saveTaskPlan } from '../core/state-manager.js';\nimport { getGlobalTimeout } from '../core/verbose.js';\nimport { issuePlaceholders, resolveCommandIssue } from '../issues/context.js';\nimport type { Issue, ResolvedIssue } from '../issues/types.js';\nimport { resolveIssuePaths } from '../storage/resolve.js';\nimport { printError, printSuccess } from '../ui/logger.js';\nimport { isTransientFailure } from '../utils/retry.js';\n\n/**\n * Extract a PR URL from headless output.\n */\nfunction parsePrUrl(output: string): string | null {\n  const match = output.match(/(https:\\/\\/github\\.com\\/[^\\s]+\\/pull\\/\\d+)/);\n  return match?.[1] ?? null;\n}\n\n/**\n * The numeric id inside a PR URL, so later phases (`pr-review`) address the\n * Pull Request without querying GitHub again.\n */\nfunction parsePrNumber(url: string): number | null {\n  const match = url.match(/\\/pull\\/(\\d+)/);\n  return match?.[1] === undefined ? null : Number(match[1]);\n}\n\n/**\n * The `Closes #N` line for the PR body, empty when the Issue has no remote\n * counterpart: GitHub only understands the reference for Issues it hosts, and\n * an invented `#N` would silently point at an unrelated Issue.\n */\nfunction issueClosesLine(issue: Issue, fallbackId: string): string {\n  if (issue.remoteRef === null) {\n    return '';\n  }\n  return `Closes #${issue.number ?? fallbackId}`;\n}\n\nexport async function runPr(issue: string, resolvedIssue?: ResolvedIssue): Promise<number> {\n  const issueNumber = issue.replace(/^#/, '');\n  const paths = await resolveIssuePaths(issueNumber);\n  const tasksPath = paths.tasksFile;\n\n  const resolution = await resolveCommandIssue(issueNumber, resolvedIssue);\n  if (!resolution.ok) {\n    return resolution.code;\n  }\n\n  // Get current branch\n  let branchName: string;\n  try {\n    const proc = await execa('git', ['branch', '--show-current'], { reject: false });\n    branchName = proc.stdout?.toString().trim() ?? '';\n    if (!branchName) {\n      printError('Could not determine current branch');\n      return 1;\n    }\n  } catch {\n    printError('Failed to get current branch');\n    return 1;\n  }\n\n  const template = await loadPrompt('pr');\n  const prompt = applyPlaceholders(template, {\n    __ISSUE_NUMBER__: issueNumber,\n    __BRANCH_NAME__: branchName,\n    __TASKS_PATH__: tasksPath,\n    __ISSUE_CLOSES__: issueClosesLine(resolution.resolved.issue, issueNumber),\n    ...issuePlaceholders(resolution.resolved),\n  });\n\n  let headlessOutput = '';\n\n  const outcome = await runPhaseWithRetry({\n    phase: 'pr',\n    attempt: async () => {\n      const startedAtMs = Date.now();\n      const result = await runHeadless({\n        prompt,\n        maxTurns: 15,\n        timeout: getGlobalTimeout() ?? 300_000,\n        // json (not text) so the CLI reports usage: the envelope's `result`\n        // field carries the same assistant text parsePrUrl() already consumed.\n        outputFormat: 'json',\n        allowedTools: ['Bash', 'Read', 'Glob', 'Grep'],\n        addDirs: [paths.issueDir],\n        statusMessage: `Creating PR for issue #${issueNumber}...`,\n      });\n      // One event per attempt; the reducer sums them into the phase total.\n      publishPhaseMetrics('pr', result.cost, startedAtMs);\n\n      if (!result.success) {\n        return {\n          ok: false,\n          transient: isTransientFailure(1, result.error ?? ''),\n          error: `PR creation failed: ${result.error}`,\n        };\n      }\n\n      headlessOutput = result.result;\n      return { ok: true };\n    },\n  });\n\n  if (!outcome.ok) {\n    printError(outcome.error ?? `PR creation failed for issue #${issueNumber}`);\n    return 1;\n  }\n\n  const prUrl = parsePrUrl(headlessOutput);\n\n  // Update pipeline state\n  try {\n    const plan = await loadTaskPlan(tasksPath);\n    plan.pipeline.prCreated = true;\n    const prNumber = prUrl === null ? null : parsePrNumber(prUrl);\n    // Without a URL the PR is still assumed created (the phase succeeded), but\n    // there is nothing trustworthy to record: an invented number would send\n    // `pr-review` at an unrelated Pull Request.\n    if (prUrl !== null && prNumber !== null) {\n      plan.pullRequest = {\n        number: prNumber,\n        url: prUrl,\n        headBranch: branchName,\n        createdAt: isoNow(),\n      };\n    }\n    await saveTaskPlan(tasksPath, plan);\n  } catch {\n    // tasks.json may not exist\n  }\n\n  if (prUrl) {\n    printSuccess(`PR created: ${prUrl}`);\n  } else {\n    printSuccess('PR creation completed');\n  }\n  return 0;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,aAAa;AAgBtB,SAAS,WAAW,QAA+B;AACjD,QAAM,QAAQ,OAAO,MAAM,4CAA4C;AACvE,SAAO,QAAQ,CAAC,KAAK;AACvB;AAMA,SAAS,cAAc,KAA4B;AACjD,QAAM,QAAQ,IAAI,MAAM,eAAe;AACvC,SAAO,QAAQ,CAAC,MAAM,SAAY,OAAO,OAAO,MAAM,CAAC,CAAC;AAC1D;AAOA,SAAS,gBAAgB,OAAc,YAA4B;AACjE,MAAI,MAAM,cAAc,MAAM;AAC5B,WAAO;AAAA,EACT;AACA,SAAO,WAAW,MAAM,UAAU,UAAU;AAC9C;AAEA,eAAsB,MAAM,OAAe,eAAgD;AACzF,QAAM,cAAc,MAAM,QAAQ,MAAM,EAAE;AAC1C,QAAM,QAAQ,MAAM,kBAAkB,WAAW;AACjD,QAAM,YAAY,MAAM;AAExB,QAAM,aAAa,MAAM,oBAAoB,aAAa,aAAa;AACvE,MAAI,CAAC,WAAW,IAAI;AAClB,WAAO,WAAW;AAAA,EACpB;AAGA,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,MAAM,OAAO,CAAC,UAAU,gBAAgB,GAAG,EAAE,QAAQ,MAAM,CAAC;AAC/E,iBAAa,KAAK,QAAQ,SAAS,EAAE,KAAK,KAAK;AAC/C,QAAI,CAAC,YAAY;AACf,iBAAW,oCAAoC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AACN,eAAW,8BAA8B;AACzC,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,MAAM,WAAW,IAAI;AACtC,QAAM,SAAS,kBAAkB,UAAU;AAAA,IACzC,kBAAkB;AAAA,IAClB,iBAAiB;AAAA,IACjB,gBAAgB;AAAA,IAChB,kBAAkB,gBAAgB,WAAW,SAAS,OAAO,WAAW;AAAA,IACxE,GAAG,kBAAkB,WAAW,QAAQ;AAAA,EAC1C,CAAC;AAED,MAAI,iBAAiB;AAErB,QAAM,UAAU,MAAM,kBAAkB;AAAA,IACtC,OAAO;AAAA,IACP,SAAS,YAAY;AACnB,YAAM,cAAc,KAAK,IAAI;AAC7B,YAAM,SAAS,MAAM,YAAY;AAAA,QAC/B;AAAA,QACA,UAAU;AAAA,QACV,SAAS,iBAAiB,KAAK;AAAA;AAAA;AAAA,QAG/B,cAAc;AAAA,QACd,cAAc,CAAC,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC7C,SAAS,CAAC,MAAM,QAAQ;AAAA,QACxB,eAAe,0BAA0B,WAAW;AAAA,MACtD,CAAC;AAED,0BAAoB,MAAM,OAAO,MAAM,WAAW;AAElD,UAAI,CAAC,OAAO,SAAS;AACnB,eAAO;AAAA,UACL,IAAI;AAAA,UACJ,WAAW,mBAAmB,GAAG,OAAO,SAAS,EAAE;AAAA,UACnD,OAAO,uBAAuB,OAAO,KAAK;AAAA,QAC5C;AAAA,MACF;AAEA,uBAAiB,OAAO;AACxB,aAAO,EAAE,IAAI,KAAK;AAAA,IACpB;AAAA,EACF,CAAC;AAED,MAAI,CAAC,QAAQ,IAAI;AACf,eAAW,QAAQ,SAAS,iCAAiC,WAAW,EAAE;AAC1E,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,WAAW,cAAc;AAGvC,MAAI;AACF,UAAM,OAAO,MAAM,aAAa,SAAS;AACzC,SAAK,SAAS,YAAY;AAC1B,UAAM,WAAW,UAAU,OAAO,OAAO,cAAc,KAAK;AAI5D,QAAI,UAAU,QAAQ,aAAa,MAAM;AACvC,WAAK,cAAc;AAAA,QACjB,QAAQ;AAAA,QACR,KAAK;AAAA,QACL,YAAY;AAAA,QACZ,WAAW,OAAO;AAAA,MACpB;AAAA,IACF;AACA,UAAM,aAAa,WAAW,IAAI;AAAA,EACpC,QAAQ;AAAA,EAER;AAEA,MAAI,OAAO;AACT,iBAAa,eAAe,KAAK,EAAE;AAAA,EACrC,OAAO;AACL,iBAAa,uBAAuB;AAAA,EACtC;AACA,SAAO;AACT;","names":[]}