night-orch 0.1.0

package/dist/discovery/discover.js

@@ -0,0 +1,98 @@
+import { isEligible } from './selector.js';
+import { triageIssue } from './triage.js';
+import { logger } from '../utils/logger.js';
+import { isKanbanIssue } from '../labels/config.js';
+/**
+ * Discover eligible issues for a repo:
+ * 1. List issues from forge (already filtered by include labels via API)
+ * 2. Apply local selector filter (include/exclude)
+ * 3. Exclude already-leased issues
+ * 4. Triage each issue
+ * 5. Sort: trivial first, then standard, architectural last
+ */
+export async function discoverEligibleIssues(repoConfig, forge, leaseManager) {
+    logger.info({ repo: repoConfig.repo }, 'Discovering eligible issues');
+    // 1. Fetch from forge
+    const rawIssues = await forge.listEligibleIssues(repoConfig);
+    logger.debug({ repo: repoConfig.repo, count: rawIssues.length }, 'Fetched issues from forge');
+    // 2. Local filter
+    const eligible = rawIssues.filter((issue) => isIssueEligibleForRepo(issue, repoConfig));
+    logger.debug({ repo: repoConfig.repo, count: eligible.length }, 'Issues after selector filter');
+    // 3. Exclude leased
+    const unleased = eligible.filter((issue) => {
+        const issueRepo = resolveIssueRepo(issue, repoConfig.repo);
+        if (leaseManager.isLeased(issueRepo, issue.number)) {
+            logger.debug({ repo: issueRepo, issue: issue.number }, 'Skipping leased issue');
+            return false;
+        }
+        return true;
+    });
+    // 4. Triage
+    const discovered = unleased.map((issue) => ({
+        issue,
+        issueRepo: resolveIssueRepo(issue, repoConfig.repo),
+        triage: triageIssue(issue),
+        repoConfig,
+    }));
+    // 5. Sort: trivial first (quick wins), standard, architectural last
+    const order = { trivial: 0, standard: 1, architectural: 2 };
+    discovered.sort((a, b) => (order[a.triage.level] ?? 1) - (order[b.triage.level] ?? 1));
+    logger.info({
+        repo: repoConfig.repo,
+        total: rawIssues.length,
+        eligible: eligible.length,
+        unleased: unleased.length,
+        triageCounts: {
+            trivial: discovered.filter((d) => d.triage.level === 'trivial').length,
+            standard: discovered.filter((d) => d.triage.level === 'standard').length,
+            architectural: discovered.filter((d) => d.triage.level === 'architectural').length,
+        },
+    }, 'Discovery complete');
+    return discovered;
+}
+export function isIssueEligibleForRepo(issue, repoConfig) {
+    return isEligible(issue, buildSelectorForIssue(repoConfig, issue));
+}
+function buildSelectorForIssue(repoConfig, issue) {
+    if (!repoConfig.kanban || !isKanbanIssue(issue.labels, repoConfig)) {
+        return repoConfig.selectors;
+    }
+    const kanbanReady = Array.isArray(repoConfig.kanban.labels.ready)
+        ? [...repoConfig.kanban.labels.ready]
+        : [repoConfig.kanban.labels.ready];
+    return {
+        includeLabelsAny: kanbanReady,
+        excludeLabelsAny: [
+            repoConfig.kanban.labels.running,
+            repoConfig.kanban.labels.blocked,
+            repoConfig.kanban.labels.needsHuman,
+            repoConfig.kanban.labels.reviewReady,
+            repoConfig.kanban.labels.error,
+            repoConfig.kanban.labels.retry,
+        ],
+    };
+}
+function resolveIssueRepo(issue, fallbackRepo) {
+    if (typeof issue.repo === 'string' && issue.repo.length > 0) {
+        return issue.repo;
+    }
+    try {
+        const pathSegments = new URL(issue.url).pathname.split('/').filter(Boolean);
+        const issuesIndex = pathSegments.lastIndexOf('issues');
+        if (issuesIndex >= 2) {
+            const owner = pathSegments[issuesIndex - 2];
+            const repo = pathSegments[issuesIndex - 1];
+            if (owner && repo)
+                return `${owner}/${repo}`;
+        }
+        const owner = pathSegments[0];
+        const repo = pathSegments[1];
+        if (owner && repo)
+            return `${owner}/${repo}`;
+    }
+    catch {
+        // Ignore parse errors and use fallback.
+    }
+    return fallbackRepo;
+}
+//# sourceMappingURL=discover.js.map

package/dist/discovery/discover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discover.js","sourceRoot":"","sources":["../../src/discovery/discover.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAsB,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AASnD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAsB,EACtB,KAAmB,EACnB,YAA0B;IAE1B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAA;IAErE,sBAAsB;IACtB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAA;IAC5D,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAA;IAE7F,kBAAkB;IAClB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;IACvF,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAE/F,oBAAoB;IACpB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAA;QAC1D,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAA;YAC/E,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,YAAY;IACZ,MAAM,UAAU,GAAsB,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK;QACL,SAAS,EAAE,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;QACnD,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;QAC1B,UAAU;KACX,CAAC,CAAC,CAAA;IAEH,oEAAoE;IACpE,MAAM,KAAK,GAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAA;IACnF,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAEtF,MAAM,CAAC,IAAI,CACT;QACE,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,SAAS,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,YAAY,EAAE;YACZ,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM;YACtE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM;YACxE,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,MAAM;SACnF;KACF,EACD,oBAAoB,CACrB,CAAA;IAED,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAiB,EAAE,UAAsB;IAC9E,OAAO,UAAU,CAAC,KAAK,EAAE,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAsB,EAAE,KAAiB;IACtE,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACnE,OAAO,UAAU,CAAC,SAAS,CAAA;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QACrC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEpC,OAAO;QACL,gBAAgB,EAAE,WAAW;QAC7B,gBAAgB,EAAE;YAChB,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAChC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YAChC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU;YACnC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW;YACpC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;YAC9B,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK;SAC/B;KACF,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAuC,EACvC,YAAoB;IAEpB,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3E,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;QAEtD,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;YAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;YAC1C,IAAI,KAAK,IAAI,IAAI;gBAAE,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAA;QAC9C,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,KAAK,IAAI,IAAI;YAAE,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,OAAO,YAAY,CAAA;AACrB,CAAC"}

package/dist/discovery/followup.d.ts

@@ -0,0 +1,14 @@
+import type Database from 'better-sqlite3';
+import type { RunMode } from '../loop/types.js';
+export interface FollowupContext {
+    mode: RunMode;
+    prNumber: number | null;
+    branchName: string | null;
+    previousRunId: string | null;
+}
+/**
+ * Detect whether an issue should be processed as a fresh run or a followup
+ * to an existing PR. Checks issue_links and runs tables for prior work.
+ */
+export declare function detectFollowup(db: Database.Database, repo: string, issueNumber: number): FollowupContext;
+//# sourceMappingURL=followup.d.ts.map

package/dist/discovery/followup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"followup.d.ts","sourceRoot":"","sources":["../../src/discovery/followup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAA;AAC1C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAcD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,eAAe,CA2BjB"}

package/dist/discovery/followup.js

@@ -0,0 +1,27 @@
+/**
+ * Detect whether an issue should be processed as a fresh run or a followup
+ * to an existing PR. Checks issue_links and runs tables for prior work.
+ */
+export function detectFollowup(db, repo, issueNumber) {
+    // Check issue_links for existing PR association
+    const link = db
+        .prepare('SELECT branch_name, pr_number FROM issue_links WHERE repo = ? AND issue_number = ?')
+        .get(repo, issueNumber);
+    if (!link?.pr_number) {
+        return { mode: 'fresh', prNumber: null, branchName: null, previousRunId: null };
+    }
+    // Check for a prior run in review_ready or blocked status
+    const run = db
+        .prepare("SELECT id, status, branch_name, pr_number FROM runs WHERE repo = ? AND issue_number = ? AND status IN ('review_ready', 'blocked') ORDER BY created_at DESC LIMIT 1")
+        .get(repo, issueNumber);
+    if (!run) {
+        return { mode: 'fresh', prNumber: link.pr_number, branchName: link.branch_name, previousRunId: null };
+    }
+    return {
+        mode: 'followup',
+        prNumber: link.pr_number,
+        branchName: link.branch_name ?? run.branch_name,
+        previousRunId: run.id,
+    };
+}
+//# sourceMappingURL=followup.js.map

package/dist/discovery/followup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"followup.js","sourceRoot":"","sources":["../../src/discovery/followup.ts"],"names":[],"mappings":"AAsBA;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,IAAY,EACZ,WAAmB;IAEnB,gDAAgD;IAChD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,oFAAoF,CAAC;SAC7F,GAAG,CAAC,IAAI,EAAE,WAAW,CAA6B,CAAA;IAErD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IACjF,CAAC;IAED,0DAA0D;IAC1D,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN,oKAAoK,CACrK;SACA,GAAG,CAAC,IAAI,EAAE,WAAW,CAAuB,CAAA;IAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAA;IACvG,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,UAAU,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;QAC/C,aAAa,EAAE,GAAG,CAAC,EAAE;KACtB,CAAA;AACH,CAAC"}

package/dist/discovery/roles.d.ts

@@ -0,0 +1,15 @@
+import type { RepoConfig } from '../config/schema.js';
+export type AgentRole = 'planner' | 'coder' | 'reviewer';
+export type AgentName = 'claude' | 'codex';
+export interface ResolvedRoles {
+    planner: AgentName;
+    coder: AgentName;
+    reviewer: AgentName;
+}
+/**
+ * Resolve agent roles from issue labels, falling back to repo defaults.
+ * Label format: plan:claude, code:codex, review:claude
+ * Throws on conflicting labels (e.g., both plan:claude and plan:codex).
+ */
+export declare function resolveRoles(issueLabels: string[], repoDefaults: RepoConfig['defaults']): ResolvedRoles;
+//# sourceMappingURL=roles.d.ts.map

package/dist/discovery/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/discovery/roles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAErD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAA;AACxD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE1C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,SAAS,CAAA;IAClB,KAAK,EAAE,SAAS,CAAA;IAChB,QAAQ,EAAE,SAAS,CAAA;CACpB;AASD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,EAAE,EACrB,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,GACnC,aAAa,CA8Bf"}

package/dist/discovery/roles.js

@@ -0,0 +1,36 @@
+const VALID_AGENTS = new Set(['claude', 'codex']);
+const ROLE_LABEL_PREFIXES = {
+    planner: 'plan:',
+    coder: 'code:',
+    reviewer: 'review:',
+};
+/**
+ * Resolve agent roles from issue labels, falling back to repo defaults.
+ * Label format: plan:claude, code:codex, review:claude
+ * Throws on conflicting labels (e.g., both plan:claude and plan:codex).
+ */
+export function resolveRoles(issueLabels, repoDefaults) {
+    const result = {
+        planner: repoDefaults.planner,
+        coder: repoDefaults.coder,
+        reviewer: repoDefaults.reviewer,
+    };
+    for (const role of ['planner', 'coder', 'reviewer']) {
+        const prefix = ROLE_LABEL_PREFIXES[role];
+        const matches = issueLabels
+            .filter((l) => l.startsWith(prefix))
+            .map((l) => l.slice(prefix.length));
+        if (matches.length === 0)
+            continue;
+        if (matches.length > 1) {
+            throw new Error(`Conflicting labels for ${role}: ${matches.map((m) => `${prefix}${m}`).join(', ')}`);
+        }
+        const agentName = matches[0];
+        if (!VALID_AGENTS.has(agentName)) {
+            throw new Error(`Unknown agent "${agentName}" in label "${prefix}${agentName}". Valid: ${[...VALID_AGENTS].join(', ')}`);
+        }
+        result[role] = agentName;
+    }
+    return result;
+}
+//# sourceMappingURL=roles.js.map

package/dist/discovery/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../src/discovery/roles.ts"],"names":[],"mappings":"AAWA,MAAM,YAAY,GAAgB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;AAC9D,MAAM,mBAAmB,GAA8B;IACrD,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,SAAS;CACpB,CAAA;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,WAAqB,EACrB,YAAoC;IAEpC,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;QACzB,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAA;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAU,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,OAAO,GAAG,WAAW;aACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAErC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAElC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;QAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,eAAe,MAAM,GAAG,SAAS,aAAa,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC1H,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,SAAsB,CAAA;IACvC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/discovery/selector.d.ts

@@ -0,0 +1,13 @@
+import type { ForgeIssue } from '../forge/types.js';
+export interface IssueSelector {
+    includeLabelsAny: string[];
+    excludeLabelsAny: string[];
+}
+/**
+ * Check if an issue is eligible based on label selectors.
+ * - Must have at least one of includeLabelsAny (empty = match all)
+ * - Must have none of excludeLabelsAny (empty = exclude nothing)
+ */
+export declare function isEligible(issue: ForgeIssue, selector: IssueSelector): boolean;
+export declare function filterEligible(issues: ForgeIssue[], selector: IssueSelector): ForgeIssue[];
+//# sourceMappingURL=selector.d.ts.map

package/dist/discovery/selector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector.d.ts","sourceRoot":"","sources":["../../src/discovery/selector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,GAAG,OAAO,CAkB9E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,aAAa,GAAG,UAAU,EAAE,CAE1F"}

package/dist/discovery/selector.js

@@ -0,0 +1,27 @@
+/**
+ * Check if an issue is eligible based on label selectors.
+ * - Must have at least one of includeLabelsAny (empty = match all)
+ * - Must have none of excludeLabelsAny (empty = exclude nothing)
+ */
+export function isEligible(issue, selector) {
+    const issueLabels = new Set(issue.labels);
+    // Exclude check (takes priority)
+    if (selector.excludeLabelsAny.length > 0) {
+        for (const excluded of selector.excludeLabelsAny) {
+            if (issueLabels.has(excluded))
+                return false;
+        }
+    }
+    // Include check
+    if (selector.includeLabelsAny.length === 0)
+        return true;
+    for (const included of selector.includeLabelsAny) {
+        if (issueLabels.has(included))
+            return true;
+    }
+    return false;
+}
+export function filterEligible(issues, selector) {
+    return issues.filter((issue) => isEligible(issue, selector));
+}
+//# sourceMappingURL=selector.js.map

package/dist/discovery/selector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector.js","sourceRoot":"","sources":["../../src/discovery/selector.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB,EAAE,QAAuB;IACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAEzC,iCAAiC;IACjC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACjD,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAA;QAC7C,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEvD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACjD,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;IAC5C,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,QAAuB;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC9D,CAAC"}

package/dist/discovery/triage.d.ts

@@ -0,0 +1,29 @@
+import type { ForgeIssue } from '../forge/types.js';
+export type TriageLevel = 'trivial' | 'standard' | 'architectural';
+export interface TriageResult {
+    level: TriageLevel;
+    reason: string;
+}
+/**
+ * Classify issue complexity using heuristics (no LLM).
+ * - trivial: short body + bug/typo label
+ * - architectural: breaking/refactor label or 5+ file references
+ * - standard: everything else
+ */
+export declare function triageIssue(issue: ForgeIssue): TriageResult;
+export interface TriageAdjustedLimits {
+    maxReviewIterations: number;
+    maxTotalAgentPasses: number;
+    workerTimeoutSeconds: number;
+}
+/**
+ * Adjust loop/timeout limits based on triage level.
+ */
+export declare function adjustLimitsForTriage(baseLimits: {
+    maxReviewIterations: number;
+    maxTotalAgentPasses: number;
+}, baseTimeout: number, triage: TriageResult, absoluteMax?: {
+    iterations: number;
+    timeout: number;
+}): TriageAdjustedLimits;
+//# sourceMappingURL=triage.d.ts.map

package/dist/discovery/triage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.d.ts","sourceRoot":"","sources":["../../src/discovery/triage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,CAAA;AAElE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;CACf;AAQD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CA2B3D;AAED,MAAM,WAAW,oBAAoB;IACnC,mBAAmB,EAAE,MAAM,CAAA;IAC3B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,oBAAoB,EAAE,MAAM,CAAA;CAC7B;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,EACxE,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,YAAY,EACpB,WAAW;;;CAAoC,GAC9C,oBAAoB,CA+BtB"}

package/dist/discovery/triage.js

@@ -0,0 +1,61 @@
+const TRIVIAL_LABELS = new Set(['bug', 'typo', 'chore', 'docs']);
+const ARCHITECTURAL_LABELS = new Set(['breaking', 'refactor', 'architecture', 'rfc']);
+// Match file-like references: path/to/file.ext or file.ext
+const FILE_REFERENCE_PATTERN = /(?:^|\s|[`"'])[\w./\\-]+\.\w{1,10}(?:\s|$|[,;:`"'])/gm;
+/**
+ * Classify issue complexity using heuristics (no LLM).
+ * - trivial: short body + bug/typo label
+ * - architectural: breaking/refactor label or 5+ file references
+ * - standard: everything else
+ */
+export function triageIssue(issue) {
+    const labels = new Set(issue.labels.map((l) => l.toLowerCase()));
+    // Check architectural first (takes priority over trivial)
+    for (const label of ARCHITECTURAL_LABELS) {
+        if (labels.has(label)) {
+            return { level: 'architectural', reason: `Label "${label}" indicates architectural change` };
+        }
+    }
+    const bodyWithoutCode = issue.body.replace(/```[\s\S]*?```/g, '').replace(/`[^`]+`/g, '');
+    const fileRefs = bodyWithoutCode.match(FILE_REFERENCE_PATTERN);
+    if (fileRefs && fileRefs.length >= 5) {
+        return {
+            level: 'architectural',
+            reason: `${fileRefs.length} file references suggest a wide-reaching change`,
+        };
+    }
+    // Check trivial
+    const bodyLength = issue.body.trim().length;
+    const hasTrivialLabel = [...TRIVIAL_LABELS].some((l) => labels.has(l));
+    if (hasTrivialLabel && bodyLength < 200) {
+        return { level: 'trivial', reason: 'Short body with trivial label' };
+    }
+    return { level: 'standard', reason: 'Standard issue' };
+}
+/**
+ * Adjust loop/timeout limits based on triage level.
+ */
+export function adjustLimitsForTriage(baseLimits, baseTimeout, triage, absoluteMax = { iterations: 20, timeout: 7200 }) {
+    switch (triage.level) {
+        case 'trivial':
+            return {
+                maxReviewIterations: Math.max(1, Math.floor(baseLimits.maxReviewIterations / 2)),
+                maxTotalAgentPasses: Math.max(2, Math.floor(baseLimits.maxTotalAgentPasses / 2)),
+                workerTimeoutSeconds: Math.max(1, Math.floor(baseTimeout * 0.6)),
+            };
+        case 'architectural':
+            return {
+                maxReviewIterations: Math.min(Math.ceil(baseLimits.maxReviewIterations * 1.5), absoluteMax.iterations),
+                maxTotalAgentPasses: Math.min(Math.ceil(baseLimits.maxTotalAgentPasses * 1.5), absoluteMax.iterations),
+                workerTimeoutSeconds: Math.min(Math.max(1, Math.ceil(baseTimeout * 1.5)), absoluteMax.timeout),
+            };
+        case 'standard':
+        default:
+            return {
+                maxReviewIterations: baseLimits.maxReviewIterations,
+                maxTotalAgentPasses: baseLimits.maxTotalAgentPasses,
+                workerTimeoutSeconds: Math.max(1, baseTimeout),
+            };
+    }
+}
+//# sourceMappingURL=triage.js.map

package/dist/discovery/triage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage.js","sourceRoot":"","sources":["../../src/discovery/triage.ts"],"names":[],"mappings":"AASA,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAChE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAA;AAErF,2DAA2D;AAC3D,MAAM,sBAAsB,GAAG,uDAAuD,CAAA;AAEtF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAEhE,0DAA0D;IAC1D,KAAK,MAAM,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,KAAK,kCAAkC,EAAE,CAAA;QAC9F,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IACzF,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IAC9D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,iDAAiD;SAC5E,CAAA;IACH,CAAC;IAED,gBAAgB;IAChB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAA;IAC3C,MAAM,eAAe,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACtE,IAAI,eAAe,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAA;IACtE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;AACxD,CAAC;AAQD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAwE,EACxE,WAAmB,EACnB,MAAoB,EACpB,WAAW,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAE/C,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO;gBACL,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;gBAChF,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;gBAChF,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;aACjE,CAAA;QACH,KAAK,eAAe;YAClB,OAAO;gBACL,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,EAC/C,WAAW,CAAC,UAAU,CACvB;gBACD,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,GAAG,GAAG,CAAC,EAC/C,WAAW,CAAC,UAAU,CACvB;gBACD,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,EACzC,WAAW,CAAC,OAAO,CACpB;aACF,CAAA;QACH,KAAK,UAAU,CAAC;QAChB;YACE,OAAO;gBACL,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;gBACnD,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;gBACnD,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC;aAC/C,CAAA;IACL,CAAC;AACH,CAAC"}

package/dist/environment/bootstrap.d.ts

@@ -0,0 +1,19 @@
+import { type CommandSpec } from '../utils/command.js';
+export type BootstrapWhen = 'always' | 'dedicated' | 'shared';
+export interface BootstrapCommand {
+    command: CommandSpec;
+    when: BootstrapWhen;
+    failureHints?: BootstrapFailureHint[];
+}
+interface BootstrapFailureHint {
+    contains: string;
+    message: string;
+    output?: 'combined' | 'stdout' | 'stderr';
+}
+/**
+ * Run bootstrap commands sequentially in the worktree directory.
+ * Respects `when` filter. Fails fast on non-zero exit.
+ */
+export declare function runBootstrapCommands(worktreePath: string, commands: BootstrapCommand[], mode: 'shared' | 'dedicated'): Promise<void>;
+export {};
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/environment/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/environment/bootstrap.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAIxE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAA;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,WAAW,CAAA;IACpB,IAAI,EAAE,aAAa,CAAA;IACnB,YAAY,CAAC,EAAE,oBAAoB,EAAE,CAAA;CACtC;AAED,UAAU,oBAAoB;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAC1C;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,gBAAgB,EAAE,EAC5B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAC3B,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/environment/bootstrap.js

@@ -0,0 +1,89 @@
+import { execa } from 'execa';
+import { logger } from '../utils/logger.js';
+import { parseCommandSpec } from '../utils/command.js';
+import { buildBootstrapEnv } from '../workers/env.js';
+import { sanitizeErrorMessage } from '../utils/sanitize-error.js';
+/**
+ * Run bootstrap commands sequentially in the worktree directory.
+ * Respects `when` filter. Fails fast on non-zero exit.
+ */
+export async function runBootstrapCommands(worktreePath, commands, mode) {
+    for (const cmd of commands) {
+        if (cmd.when !== 'always' && cmd.when !== mode) {
+            logger.debug({ command: formatCommand(cmd.command), when: cmd.when, mode }, 'Skipping bootstrap command');
+            continue;
+        }
+        const commandLabel = formatCommand(cmd.command);
+        logger.info({ command: commandLabel, worktreePath }, 'Running bootstrap command');
+        const { binary, args } = parseCommandSpec(cmd.command);
+        // Bootstrap commands run inside an attacker-influenced worktree and
+        // MUST NOT inherit the daemon's env (forge tokens, SMTP creds, etc).
+        // Scrub stdout/stderr of any token shapes before we log them at error
+        // level so an echoed secret doesn't bypass the redaction layer.
+        const result = await execa(binary, args, {
+            cwd: worktreePath,
+            timeout: 300_000, // 5 min timeout for bootstrap commands
+            reject: false,
+            extendEnv: false,
+            env: buildBootstrapEnv(),
+        });
+        if (result.exitCode !== 0) {
+            logger.error({
+                command: commandLabel,
+                exitCode: result.exitCode,
+                stdout: sanitizeErrorMessage(result.stdout ?? ''),
+                stderr: sanitizeErrorMessage(result.stderr ?? ''),
+            }, 'Bootstrap command failed');
+            throw new Error(formatBootstrapFailure(commandLabel, result, cmd.failureHints));
+        }
+        logger.debug({ command: commandLabel }, 'Bootstrap command succeeded');
+    }
+}
+function formatCommand(command) {
+    return Array.isArray(command) ? command.join(' ') : command;
+}
+const OUTPUT_TAIL_LIMIT = 4000;
+function formatBootstrapFailure(commandLabel, result, failureHints) {
+    const lines = [
+        `Bootstrap command failed: ${commandLabel}`,
+        `Exit code: ${result.exitCode}`,
+    ];
+    const stdoutTail = tail(sanitizeErrorMessage(result.stdout ?? ''));
+    if (stdoutTail) {
+        lines.push('stdout:', stdoutTail);
+    }
+    const stderrTail = tail(sanitizeErrorMessage(result.stderr ?? ''));
+    if (stderrTail) {
+        lines.push('stderr:', stderrTail);
+    }
+    const hint = detectBootstrapHint(result, failureHints);
+    if (hint) {
+        lines.push('hint:', hint);
+    }
+    return lines.join('\n');
+}
+function tail(output) {
+    if (!output)
+        return '';
+    if (output.length <= OUTPUT_TAIL_LIMIT)
+        return output;
+    const omitted = output.length - OUTPUT_TAIL_LIMIT;
+    return `... (truncated, ${omitted} chars omitted)\n${output.slice(-OUTPUT_TAIL_LIMIT)}`;
+}
+function detectBootstrapHint(result, failureHints) {
+    if (!failureHints || failureHints.length === 0)
+        return null;
+    for (const hint of failureHints) {
+        const output = hint.output ?? 'combined';
+        const haystack = output === 'stdout'
+            ? result.stdout ?? ''
+            : output === 'stderr'
+                ? result.stderr ?? ''
+                : [result.stdout, result.stderr].filter(Boolean).join('\n');
+        if (haystack.includes(hint.contains)) {
+            return hint.message;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/environment/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/environment/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAoB,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAgBjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,QAA4B,EAC5B,IAA4B;IAE5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAA;YACzG,SAAQ;QACV,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,2BAA2B,CAAC,CAAA;QACjF,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEtD,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YACvC,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,OAAO,EAAE,uCAAuC;YACzD,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,iBAAiB,EAAE;SACzB,CAAC,CAAA;QAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,KAAK,CACV;gBACE,OAAO,EAAE,YAAY;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;gBACjD,MAAM,EAAE,oBAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;aAClD,EACD,0BAA0B,CAC3B,CAAA;YACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAA;QACjF,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,6BAA6B,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAoB;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAC7D,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAE9B,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,MAA2E,EAC3E,YAAgD;IAEhD,MAAM,KAAK,GAAa;QACtB,6BAA6B,YAAY,EAAE;QAC3C,cAAc,MAAM,CAAC,QAAQ,EAAE;KAChC,CAAA;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAClE,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACnC,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAA;IAClE,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,IAAI,CAAC,MAA0B;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAA;IACtB,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB;QAAE,OAAO,MAAM,CAAA;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,iBAAiB,CAAA;IACjD,OAAO,mBAAmB,OAAO,oBAAoB,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAA;AACzF,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA4C,EAC5C,YAAgD;IAEhD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAE3D,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAA;QACxC,MAAM,QAAQ,GACZ,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;YACrB,CAAC,CAAC,MAAM,KAAK,QAAQ;gBACnB,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;gBACrB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,OAAO,CAAA;QACrB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/environment/dedicated.d.ts

@@ -0,0 +1,17 @@
+import { type CommandSpec } from '../utils/command.js';
+export interface DedicatedStackParams {
+    worktreePath: string;
+    composeFile: string;
+    services: string[];
+    projectName: string;
+    healthcheck?: CommandSpec;
+}
+/**
+ * Start a dedicated Docker Compose stack for an issue worktree.
+ */
+export declare function startDedicatedStack(params: DedicatedStackParams): Promise<void>;
+/**
+ * Stop and remove a dedicated Docker Compose stack.
+ */
+export declare function stopDedicatedStack(worktreePath: string, composeFile: string, projectName: string): Promise<void>;
+//# sourceMappingURL=dedicated.d.ts.map

package/dist/environment/dedicated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated.d.ts","sourceRoot":"","sources":["../../src/environment/dedicated.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGxE,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,WAAW,CAAA;CAC1B;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CrF;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/environment/dedicated.js

@@ -0,0 +1,68 @@
+import { execa } from 'execa';
+import { logger } from '../utils/logger.js';
+import { parseCommandSpec } from '../utils/command.js';
+import { buildBootstrapEnv } from '../workers/env.js';
+/**
+ * Start a dedicated Docker Compose stack for an issue worktree.
+ */
+export async function startDedicatedStack(params) {
+    const { worktreePath, composeFile, services, projectName, healthcheck } = params;
+    const args = [
+        'compose',
+        '-p', projectName,
+        '-f', composeFile,
+        'up', '-d',
+        ...services,
+    ];
+    logger.info({ projectName, services }, 'Starting dedicated Docker Compose stack');
+    // Compose files are user-authored and run inside an attacker-influenced
+    // worktree. Strip the daemon env so tokens don't leak into container env.
+    await execa('docker', args, {
+        cwd: worktreePath,
+        timeout: 120_000,
+        extendEnv: false,
+        env: buildBootstrapEnv(),
+    });
+    // Run healthcheck if configured
+    if (healthcheck) {
+        const commandLabel = Array.isArray(healthcheck) ? healthcheck.join(' ') : healthcheck;
+        logger.debug({ healthcheck: commandLabel }, 'Running dedicated stack healthcheck');
+        // Retry healthcheck a few times with backoff
+        let lastError = null;
+        for (let attempt = 0; attempt < 10; attempt++) {
+            try {
+                const parsed = parseCommandSpec(healthcheck);
+                await execa(parsed.binary, parsed.args, {
+                    timeout: 5_000,
+                    extendEnv: false,
+                    env: buildBootstrapEnv(),
+                });
+                logger.info({ healthcheck: commandLabel }, 'Dedicated stack healthcheck passed');
+                return;
+            }
+            catch (err) {
+                lastError = err;
+                await new Promise((r) => setTimeout(r, 2000));
+            }
+        }
+        throw new Error(`Dedicated stack healthcheck failed after retries: ${commandLabel}\n${lastError?.message}`);
+    }
+}
+/**
+ * Stop and remove a dedicated Docker Compose stack.
+ */
+export async function stopDedicatedStack(worktreePath, composeFile, projectName) {
+    logger.info({ projectName }, 'Stopping dedicated Docker Compose stack');
+    try {
+        await execa('docker', ['compose', '-p', projectName, '-f', composeFile, 'down', '-v'], {
+            cwd: worktreePath,
+            timeout: 60_000,
+            extendEnv: false,
+            env: buildBootstrapEnv(),
+        });
+    }
+    catch (err) {
+        logger.warn({ projectName, err }, 'Failed to stop dedicated stack (may already be stopped)');
+    }
+}
+//# sourceMappingURL=dedicated.js.map

package/dist/environment/dedicated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedicated.js","sourceRoot":"","sources":["../../src/environment/dedicated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAoB,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAUrD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAA4B;IACpE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAA;IAEhF,MAAM,IAAI,GAAG;QACX,SAAS;QACT,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,IAAI;QACV,GAAG,QAAQ;KACZ,CAAA;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,yCAAyC,CAAC,CAAA;IACjF,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;QAC1B,GAAG,EAAE,YAAY;QACjB,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,KAAK;QAChB,GAAG,EAAE,iBAAiB,EAAE;KACzB,CAAC,CAAA;IAEF,gCAAgC;IAChC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;QACrF,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,qCAAqC,CAAC,CAAA;QAClF,6CAA6C;QAC7C,IAAI,SAAS,GAAiB,IAAI,CAAA;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAA;gBAC5C,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;oBACtC,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,KAAK;oBAChB,GAAG,EAAE,iBAAiB,EAAE;iBACzB,CAAC,CAAA;gBACF,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,oCAAoC,CAAC,CAAA;gBAChF,OAAM;YACR,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAY,CAAA;gBACxB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,YAAY,KAAK,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;IAC7G,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,WAAmB,EACnB,WAAmB;IAEnB,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,yCAAyC,CAAC,CAAA;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,CACT,QAAQ,EACR,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAC/D;YACE,GAAG,EAAE,YAAY;YACjB,OAAO,EAAE,MAAM;YACf,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,iBAAiB,EAAE;SACzB,CACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,yDAAyD,CAAC,CAAA;IAC9F,CAAC;AACH,CAAC"}

package/dist/environment/env-file.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Copy base .env and apply overrides with marked section.
+ * Inspired by the Vendis bin/worktree pattern.
+ */
+export declare function setupEnvFile(params: {
+    worktreePath: string;
+    repoLocalPath: string;
+    copyFrom: string;
+    overrides: Record<string, string>;
+    overrideFiles: string[];
+    usedPorts: number[];
+}): {
+    envOverrides: Record<string, string>;
+    allocatedPort: number | null;
+};
+//# sourceMappingURL=env-file.d.ts.map

package/dist/environment/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../src/environment/env-file.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACnC,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA4DzE"}