pipeline-worker 0.1.0

package/dist/forge/github.d.ts

@@ -0,0 +1,30 @@
+/**
+ * GitHub REST ForgeClient. Maps GitHub concepts onto the forge-neutral
+ * shapes: pull request -> MergeRequest (iid = PR number), the set of Actions
+ * workflow runs for the PR's head SHA -> one aggregated Pipeline, workflow
+ * jobs -> PipelineJob. The token is deliberately sourced only from an
+ * environment variable — never from `.pipeline-worker.yml`.
+ */
+import type { PipelineWorkerConfig, Pipeline } from '../types.js';
+import type { ForgeClient } from './types.js';
+export interface GithubAuth {
+    apiUrl: string;
+    /** "owner/name" slug. */
+    repo: string;
+    token: string;
+}
+export declare function resolveGithubAuth(config: PipelineWorkerConfig): GithubAuth;
+export interface WorkflowRun {
+    id: number;
+    status: string;
+    conclusion: string | null;
+    html_url: string;
+}
+/**
+ * Collapses all workflow runs for one head SHA into a single Pipeline.
+ * Priority: any run still running -> running (wait for the full picture);
+ * else any failed -> failed (its id is what getFailedJobs needs); else any
+ * canceled -> canceled; else success unless every run was skipped.
+ */
+export declare function aggregateRuns(runs: WorkflowRun[]): Pipeline | undefined;
+export declare function createGithubForge(config: PipelineWorkerConfig): ForgeClient;

package/dist/forge/github.js

@@ -0,0 +1,134 @@
+/**
+ * GitHub REST ForgeClient. Maps GitHub concepts onto the forge-neutral
+ * shapes: pull request -> MergeRequest (iid = PR number), the set of Actions
+ * workflow runs for the PR's head SHA -> one aggregated Pipeline, workflow
+ * jobs -> PipelineJob. The token is deliberately sourced only from an
+ * environment variable — never from `.pipeline-worker.yml`.
+ */
+export function resolveGithubAuth(config) {
+    const apiUrl = process.env.PIPELINE_WORKER_GITHUB_API_URL || 'https://api.github.com';
+    const repo = process.env.PIPELINE_WORKER_GITHUB_REPO || config.github.repo;
+    const token = process.env.PIPELINE_WORKER_GITHUB_TOKEN || process.env.GITHUB_TOKEN;
+    if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) {
+        throw new Error('GitHub repo is not configured (set github.repo to "owner/name" in .pipeline-worker.yml or PIPELINE_WORKER_GITHUB_REPO).');
+    }
+    if (!token)
+        throw new Error('PIPELINE_WORKER_GITHUB_TOKEN (or GITHUB_TOKEN) environment variable is not set.');
+    return { apiUrl: apiUrl.replace(/\/$/, ''), repo, token };
+}
+async function githubRequest(auth, path, init) {
+    const res = await fetch(`${auth.apiUrl}/repos/${auth.repo}${path}`, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${auth.token}`,
+            Accept: 'application/vnd.github+json',
+            'X-GitHub-Api-Version': '2022-11-28',
+            'Content-Type': 'application/json',
+            ...(init?.headers ?? {}),
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`GitHub API ${init?.method ?? 'GET'} ${path} failed: ${res.status} ${res.statusText} — ${body}`);
+    }
+    return res;
+}
+function toMergeRequest(raw) {
+    return {
+        iid: raw.number,
+        webUrl: raw.html_url,
+        sourceBranch: raw.head.ref,
+        targetBranch: raw.base.ref,
+        state: raw.state,
+    };
+}
+function runStatus(run) {
+    if (run.status !== 'completed')
+        return 'running';
+    switch (run.conclusion) {
+        case 'success':
+            return 'success';
+        case 'cancelled':
+        case 'stale':
+            return 'canceled';
+        case 'skipped':
+        case 'neutral':
+            return 'skipped';
+        default: // failure, timed_out, startup_failure, action_required, …
+            return 'failed';
+    }
+}
+/**
+ * Collapses all workflow runs for one head SHA into a single Pipeline.
+ * Priority: any run still running -> running (wait for the full picture);
+ * else any failed -> failed (its id is what getFailedJobs needs); else any
+ * canceled -> canceled; else success unless every run was skipped.
+ */
+export function aggregateRuns(runs) {
+    if (runs.length === 0)
+        return undefined;
+    const byStatus = (wanted) => runs.find((run) => runStatus(run) === wanted);
+    const pick = byStatus('running') ?? byStatus('failed') ?? byStatus('canceled') ?? byStatus('success') ?? runs[0];
+    return { id: pick.id, status: runStatus(pick), webUrl: pick.html_url };
+}
+function isFailedConclusion(conclusion) {
+    return conclusion !== null && !['success', 'skipped', 'neutral'].includes(conclusion);
+}
+export function createGithubForge(config) {
+    const auth = resolveGithubAuth(config);
+    const owner = auth.repo.split('/')[0];
+    return {
+        async findExistingMr(sourceBranch) {
+            const res = await githubRequest(auth, `/pulls?head=${encodeURIComponent(`${owner}:${sourceBranch}`)}&state=open`);
+            const list = (await res.json());
+            return list.length > 0 ? toMergeRequest(list[0]) : undefined;
+        },
+        async createMergeRequest(args) {
+            const res = await githubRequest(auth, '/pulls', {
+                method: 'POST',
+                body: JSON.stringify({
+                    title: args.title,
+                    body: args.description,
+                    head: args.sourceBranch,
+                    base: args.targetBranch,
+                }),
+            });
+            return toMergeRequest(await res.json());
+        },
+        async getMrPipelines(mrIid) {
+            const prRes = await githubRequest(auth, `/pulls/${mrIid}`);
+            const pr = (await prRes.json());
+            const runsRes = await githubRequest(auth, `/actions/runs?head_sha=${pr.head.sha}&per_page=100`);
+            const { workflow_runs: runs } = (await runsRes.json());
+            const aggregate = aggregateRuns(runs);
+            return aggregate ? [aggregate] : [];
+        },
+        async getFailedJobs(pipelineId) {
+            const res = await githubRequest(auth, `/actions/runs/${pipelineId}/jobs?filter=latest&per_page=100`);
+            const { jobs } = (await res.json());
+            return jobs
+                .filter((job) => isFailedConclusion(job.conclusion))
+                .map((job) => ({ id: job.id, name: job.name, stage: job.workflow_name ?? 'workflow' }));
+        },
+        async getJobLog(jobId) {
+            // Redirects to short-lived blob storage; fetch follows it and drops the auth header cross-origin.
+            const res = await githubRequest(auth, `/actions/jobs/${jobId}/logs`);
+            return res.text();
+        },
+        async retryPipeline(pipelineId) {
+            await githubRequest(auth, `/actions/runs/${pipelineId}/rerun-failed-jobs`, { method: 'POST' });
+            const res = await githubRequest(auth, `/actions/runs/${pipelineId}`);
+            const run = (await res.json());
+            return { id: run.id, status: runStatus(run), webUrl: run.html_url };
+        },
+        async createMrNote(mrIid, body) {
+            const res = await githubRequest(auth, `/issues/${mrIid}/comments`, {
+                method: 'POST',
+                body: JSON.stringify({ body }),
+            });
+            const note = (await res.json());
+            return { id: note.id };
+        },
+    };
+}
+//# sourceMappingURL=github.js.map

package/dist/forge/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/forge/github.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,wBAAwB,CAAC;IACtF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAEnF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;IAC7I,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IAE/G,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAgB,EAAE,IAAY,EAAE,IAAkB;IAC7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,UAAU,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;QAClE,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,MAAM,IAAI,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ;IAC9B,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,MAAM;QACf,MAAM,EAAE,GAAG,CAAC,QAAQ;QACpB,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QAC1B,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AASD,SAAS,SAAS,CAAC,GAAgB;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IACjD,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,UAAU,CAAC;QACpB,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,SAAS,0DAA0D;YACjE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC;IAE3F,MAAM,IAAI,GACR,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACtG,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAyB;IACnD,OAAO,UAAU,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,YAAoB;YACvC,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,IAAI,EACJ,eAAe,kBAAkB,CAAC,GAAG,KAAK,IAAI,YAAY,EAAE,CAAC,aAAa,CAC3E,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAU,CAAC;YACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,IAAkB;YACzC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,IAAI,EAAE,IAAI,CAAC,YAAY;iBACxB,CAAC;aACH,CAAC,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAAa;YAChC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAA8B,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,0BAA0B,EAAE,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YAChG,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAqC,CAAC;YAC3F,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,UAAkB;YACpC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,iBAAiB,UAAU,kCAAkC,CAAC,CAAC;YACrG,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqG,CAAC;YACxI,OAAO,IAAI;iBACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;iBACnD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAa;YAC3B,kGAAkG;YAClG,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC;YACrE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,UAAkB;YACpC,MAAM,aAAa,CAAC,IAAI,EAAE,iBAAiB,UAAU,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/F,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,iBAAiB,UAAU,EAAE,CAAC,CAAC;YACrE,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,IAAY;YAC5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,KAAK,WAAW,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/forge/gitlab.d.ts

@@ -0,0 +1,15 @@
+/**
+ * GitLab REST (v4) ForgeClient. The token is deliberately sourced only from
+ * an environment variable — it must never live in `.pipeline-worker.yml` or be
+ * logged. Used both by the workflow orchestrator and the MCP tool handlers,
+ * so there is exactly one place that knows how to talk to GitLab.
+ */
+import type { PipelineWorkerConfig } from '../types.js';
+import type { ForgeClient } from './types.js';
+export interface GitlabAuth {
+    host: string;
+    projectId: number;
+    token: string;
+}
+export declare function resolveGitlabAuth(config: PipelineWorkerConfig): GitlabAuth;
+export declare function createGitlabForge(config: PipelineWorkerConfig): ForgeClient;

package/dist/forge/gitlab.js

@@ -0,0 +1,99 @@
+/**
+ * GitLab REST (v4) ForgeClient. The token is deliberately sourced only from
+ * an environment variable — it must never live in `.pipeline-worker.yml` or be
+ * logged. Used both by the workflow orchestrator and the MCP tool handlers,
+ * so there is exactly one place that knows how to talk to GitLab.
+ */
+export function resolveGitlabAuth(config) {
+    const host = process.env.PIPELINE_WORKER_GITLAB_HOST || config.gitlab.host;
+    const projectIdEnv = process.env.PIPELINE_WORKER_GITLAB_PROJECT_ID;
+    const projectId = projectIdEnv ? Number(projectIdEnv) : config.gitlab.projectId;
+    const token = process.env.PIPELINE_WORKER_GITLAB_TOKEN;
+    if (!host)
+        throw new Error('GitLab host is not configured (set gitlab.host in .pipeline-worker.yml or PIPELINE_WORKER_GITLAB_HOST).');
+    if (!projectId)
+        throw new Error('GitLab projectId is not configured (set gitlab.projectId in .pipeline-worker.yml or PIPELINE_WORKER_GITLAB_PROJECT_ID).');
+    if (!token)
+        throw new Error('PIPELINE_WORKER_GITLAB_TOKEN environment variable is not set.');
+    return { host, projectId, token };
+}
+async function gitlabRequest(auth, path, init) {
+    const url = `${auth.host.replace(/\/$/, '')}/api/v4/projects/${auth.projectId}${path}`;
+    const res = await fetch(url, {
+        ...init,
+        headers: {
+            'PRIVATE-TOKEN': auth.token,
+            'Content-Type': 'application/json',
+            ...(init?.headers ?? {}),
+        },
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(`GitLab API ${init?.method ?? 'GET'} ${path} failed: ${res.status} ${res.statusText} — ${body}`);
+    }
+    return res;
+}
+function toMergeRequest(raw) {
+    return {
+        iid: raw.iid,
+        webUrl: raw.web_url,
+        sourceBranch: raw.source_branch,
+        targetBranch: raw.target_branch,
+        state: raw.state,
+    };
+}
+function toPipeline(raw) {
+    return { id: raw.id, status: raw.status, webUrl: raw.web_url };
+}
+function toPipelineJob(raw) {
+    return { id: raw.id, name: raw.name, stage: raw.stage };
+}
+export function createGitlabForge(config) {
+    const auth = resolveGitlabAuth(config);
+    return {
+        async findExistingMr(sourceBranch) {
+            const res = await gitlabRequest(auth, `/merge_requests?source_branch=${encodeURIComponent(sourceBranch)}&state=opened`);
+            const list = (await res.json());
+            return list.length > 0 ? toMergeRequest(list[0]) : undefined;
+        },
+        async createMergeRequest(args) {
+            const res = await gitlabRequest(auth, '/merge_requests', {
+                method: 'POST',
+                body: JSON.stringify({
+                    source_branch: args.sourceBranch,
+                    target_branch: args.targetBranch,
+                    title: args.title,
+                    description: args.description,
+                }),
+            });
+            return toMergeRequest(await res.json());
+        },
+        async getMrPipelines(mrIid) {
+            const res = await gitlabRequest(auth, `/merge_requests/${mrIid}/pipelines`);
+            const list = (await res.json());
+            return list.map(toPipeline);
+        },
+        async getFailedJobs(pipelineId) {
+            const res = await gitlabRequest(auth, `/pipelines/${pipelineId}/jobs?scope[]=failed`);
+            const list = (await res.json());
+            return list.map(toPipelineJob);
+        },
+        async getJobLog(jobId) {
+            const res = await gitlabRequest(auth, `/jobs/${jobId}/trace`);
+            return res.text();
+        },
+        async retryPipeline(pipelineId) {
+            const res = await gitlabRequest(auth, `/pipelines/${pipelineId}/retry`, { method: 'POST' });
+            return toPipeline(await res.json());
+        },
+        async createMrNote(mrIid, body) {
+            const res = await gitlabRequest(auth, `/merge_requests/${mrIid}/notes`, {
+                method: 'POST',
+                body: JSON.stringify({ body }),
+            });
+            const note = (await res.json());
+            return { id: note.id };
+        },
+    };
+}
+//# sourceMappingURL=gitlab.js.map

package/dist/forge/gitlab.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitlab.js","sourceRoot":"","sources":["../../src/forge/gitlab.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;IAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC;IACnE,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;IAChF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;IAEvD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IACtI,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;IAC3J,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAE7F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAgB,EAAE,IAAY,EAAE,IAAkB;IAC7E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;IACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,GAAG,IAAI;QACP,OAAO,EAAE;YACP,eAAe,EAAE,IAAI,CAAC,KAAK;YAC3B,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;SACzB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,MAAM,IAAI,KAAK,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,MAAM,IAAI,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ;IAC9B,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ;IAC1B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEvC,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,YAAoB;YACvC,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,IAAI,EACJ,iCAAiC,kBAAkB,CAAC,YAAY,CAAC,eAAe,CACjF,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAU,CAAC;YACzC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,IAAkB;YACzC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE;gBACvD,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,aAAa,EAAE,IAAI,CAAC,YAAY;oBAChC,aAAa,EAAE,IAAI,CAAC,YAAY;oBAChC,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CAAC;aACH,CAAC,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAAa;YAChC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,mBAAmB,KAAK,YAAY,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAU,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,UAAkB;YACpC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,cAAc,UAAU,sBAAsB,CAAC,CAAC;YACtF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAU,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAa;YAC3B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC;YAC9D,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,UAAkB;YACpC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,cAAc,UAAU,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5F,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,IAAY;YAC5C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,mBAAmB,KAAK,QAAQ,EAAE;gBACtE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmB,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/forge/index.d.ts

@@ -0,0 +1,4 @@
+import type { PipelineWorkerConfig } from '../types.js';
+import type { ForgeClient } from './types.js';
+/** Picks the forge named in config (.pipeline-worker.yml / PIPELINE_WORKER_FORGE). No runtime fallback. */
+export declare function createForge(config: PipelineWorkerConfig): ForgeClient;

package/dist/forge/index.js

@@ -0,0 +1,12 @@
+import { createGitlabForge } from './gitlab.js';
+import { createGithubForge } from './github.js';
+/** Picks the forge named in config (.pipeline-worker.yml / PIPELINE_WORKER_FORGE). No runtime fallback. */
+export function createForge(config) {
+    switch (config.forge) {
+        case 'gitlab':
+            return createGitlabForge(config);
+        case 'github':
+            return createGithubForge(config);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/forge/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/forge/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,MAA4B;IACtD,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/forge/types.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Forge-neutral client interface. "MR" naming follows GitLab; the GitHub
+ * implementation maps pull requests / workflow runs / jobs onto the same
+ * shapes so the workflow and MCP server never branch on the forge.
+ */
+import type { MergeRequest, Pipeline, PipelineJob } from '../types.js';
+export interface CreateMrArgs {
+    sourceBranch: string;
+    targetBranch: string;
+    title: string;
+    description: string;
+}
+export interface ForgeClient {
+    /** Idempotency check: finds an already-open MR/PR for this branch, if any. */
+    findExistingMr(sourceBranch: string): Promise<MergeRequest | undefined>;
+    createMergeRequest(args: CreateMrArgs): Promise<MergeRequest>;
+    /** Latest-first pipelines (GitHub: workflow runs aggregated into one) for an MR/PR. */
+    getMrPipelines(mrIid: number): Promise<Pipeline[]>;
+    getFailedJobs(pipelineId: number): Promise<PipelineJob[]>;
+    getJobLog(jobId: number): Promise<string>;
+    retryPipeline(pipelineId: number): Promise<Pipeline>;
+    createMrNote(mrIid: number, body: string): Promise<{
+        id: number;
+    }>;
+}

package/dist/forge/types.js

@@ -0,0 +1,7 @@
+/**
+ * Forge-neutral client interface. "MR" naming follows GitLab; the GitHub
+ * implementation maps pull requests / workflow runs / jobs onto the same
+ * shapes so the workflow and MCP server never branch on the forge.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/forge/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/forge/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/git/commit.d.ts

@@ -0,0 +1,8 @@
+/** Thin git plumbing wrappers used against the isolated worktree. */
+export declare function stageAll(worktreePath: string): Promise<void>;
+export declare function commit(worktreePath: string, message: string): Promise<void>;
+export declare function push(worktreePath: string, remote: string, branch: string): Promise<void>;
+/** True when the worktree has staged, unstaged, or untracked changes. */
+export declare function hasChanges(worktreePath: string): Promise<boolean>;
+export declare function currentSha(worktreePath: string): Promise<string>;
+export declare function currentBranch(cwd: string): Promise<string>;

package/dist/git/commit.js

@@ -0,0 +1,27 @@
+/** Thin git plumbing wrappers used against the isolated worktree. */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+export async function stageAll(worktreePath) {
+    await execFileAsync('git', ['add', '-A'], { cwd: worktreePath });
+}
+export async function commit(worktreePath, message) {
+    await execFileAsync('git', ['commit', '-m', message], { cwd: worktreePath });
+}
+export async function push(worktreePath, remote, branch) {
+    await execFileAsync('git', ['push', '--set-upstream', remote, branch], { cwd: worktreePath });
+}
+/** True when the worktree has staged, unstaged, or untracked changes. */
+export async function hasChanges(worktreePath) {
+    const { stdout } = await execFileAsync('git', ['status', '--porcelain'], { cwd: worktreePath });
+    return stdout.trim().length > 0;
+}
+export async function currentSha(worktreePath) {
+    const { stdout } = await execFileAsync('git', ['rev-parse', 'HEAD'], { cwd: worktreePath });
+    return stdout.trim();
+}
+export async function currentBranch(cwd) {
+    const { stdout } = await execFileAsync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd });
+    return stdout.trim();
+}
+//# sourceMappingURL=commit.js.map

package/dist/git/commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../src/git/commit.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAErE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,YAAoB;IACjD,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,YAAoB,EAAE,OAAe;IAChE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,YAAoB,EAAE,MAAc,EAAE,MAAc;IAC7E,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,YAAoB;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,YAAoB;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC"}

package/dist/git/diff.d.ts

@@ -0,0 +1,11 @@
+/** Reads the caller's in-progress change set without touching their working tree. */
+export interface CapturedDiff {
+    diffText: string;
+    untrackedFiles: string[];
+}
+/**
+ * Captures staged+unstaged changes (`git diff HEAD`) plus the list of
+ * untracked files (which `git diff` never includes) so both can be carried
+ * into an isolated worktree.
+ */
+export declare function captureDiff(repoRoot: string): Promise<CapturedDiff>;

package/dist/git/diff.js

@@ -0,0 +1,22 @@
+/** Reads the caller's in-progress change set without touching their working tree. */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+/**
+ * Captures staged+unstaged changes (`git diff HEAD`) plus the list of
+ * untracked files (which `git diff` never includes) so both can be carried
+ * into an isolated worktree.
+ */
+export async function captureDiff(repoRoot) {
+    const { stdout: diffText } = await execFileAsync('git', ['diff', 'HEAD'], {
+        cwd: repoRoot,
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    const { stdout: statusOut } = await execFileAsync('git', ['status', '--porcelain'], { cwd: repoRoot });
+    const untrackedFiles = statusOut
+        .split('\n')
+        .filter((line) => line.startsWith('?? '))
+        .map((line) => line.slice(3).trim());
+    return { diffText, untrackedFiles };
+}
+//# sourceMappingURL=diff.js.map

package/dist/git/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/git/diff.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAO1C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB;IAChD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;QACxE,GAAG,EAAE,QAAQ;QACb,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IAEH,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvG,MAAM,cAAc,GAAG,SAAS;SAC7B,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACtC,CAAC"}

package/dist/git/worktree.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Isolated git worktree management. The caller's own working directory is
+ * never touched — all workflow steps run inside a disposable worktree that
+ * is always removed afterward (see workflow/orchestrate.ts's finally block).
+ */
+export declare function generateTempBranchName(): string;
+/** Creates a new worktree off HEAD on a fresh branch, returning its path. */
+export declare function createWorktree(repoRoot: string, branchName: string): Promise<string>;
+/**
+ * Applies a captured diff (staged+unstaged) and copies untracked files into
+ * the worktree, so it ends up with exactly the caller's original change set.
+ */
+export declare function applyDiffToWorktree(worktreePath: string, diffText: string, untrackedFiles: string[], repoRoot: string): Promise<void>;
+/** Renames the worktree's current branch (used once the agent has proposed a real name). */
+export declare function renameBranch(worktreePath: string, newBranchName: string): Promise<void>;
+/**
+ * Removes the worktree and the mkdtemp parent directory createWorktree put it
+ * in. Tolerates its own failures (logs + continues) so a cleanup problem
+ * never masks the real error from the workflow that called it.
+ */
+export declare function removeWorktree(repoRoot: string, worktreePath: string): Promise<void>;

package/dist/git/worktree.js

@@ -0,0 +1,75 @@
+/**
+ * Isolated git worktree management. The caller's own working directory is
+ * never touched — all workflow steps run inside a disposable worktree that
+ * is always removed afterward (see workflow/orchestrate.ts's finally block).
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { mkdtempSync, mkdirSync, cpSync, writeFileSync, unlinkSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { randomUUID } from 'node:crypto';
+import { join, dirname } from 'node:path';
+const execFileAsync = promisify(execFile);
+export function generateTempBranchName() {
+    return `pipeline-worker/tmp-${randomUUID().slice(0, 8)}`;
+}
+/** Creates a new worktree off HEAD on a fresh branch, returning its path. */
+export async function createWorktree(repoRoot, branchName) {
+    const parentDir = mkdtempSync(join(tmpdir(), 'pipeline-worker-'));
+    const worktreePath = join(parentDir, 'worktree');
+    await execFileAsync('git', ['worktree', 'add', '-b', branchName, worktreePath, 'HEAD'], { cwd: repoRoot });
+    return worktreePath;
+}
+/**
+ * Applies a captured diff (staged+unstaged) and copies untracked files into
+ * the worktree, so it ends up with exactly the caller's original change set.
+ */
+export async function applyDiffToWorktree(worktreePath, diffText, untrackedFiles, repoRoot) {
+    if (diffText.trim().length > 0) {
+        const diffFile = join(tmpdir(), `pipeline-worker-diff-${randomUUID()}.patch`);
+        writeFileSync(diffFile, diffText, 'utf-8');
+        try {
+            await execFileAsync('git', ['apply', '--index', diffFile], { cwd: worktreePath });
+        }
+        finally {
+            unlinkSync(diffFile);
+        }
+    }
+    for (const relativePath of untrackedFiles) {
+        const src = join(repoRoot, relativePath);
+        const dest = join(worktreePath, relativePath);
+        mkdirSync(dirname(dest), { recursive: true });
+        cpSync(src, dest, { recursive: true });
+    }
+    if (untrackedFiles.length > 0) {
+        await execFileAsync('git', ['add', '-A'], { cwd: worktreePath });
+    }
+}
+/** Renames the worktree's current branch (used once the agent has proposed a real name). */
+export async function renameBranch(worktreePath, newBranchName) {
+    await execFileAsync('git', ['branch', '-m', newBranchName], { cwd: worktreePath });
+}
+/**
+ * Removes the worktree and the mkdtemp parent directory createWorktree put it
+ * in. Tolerates its own failures (logs + continues) so a cleanup problem
+ * never masks the real error from the workflow that called it.
+ */
+export async function removeWorktree(repoRoot, worktreePath) {
+    try {
+        await execFileAsync('git', ['worktree', 'remove', '--force', worktreePath], { cwd: repoRoot });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`Warning: failed to remove worktree ${worktreePath}: ${message}`);
+    }
+    // createWorktree puts worktreePath inside a dedicated mkdtemp parent dir
+    // (<tmp>/pipeline-worker-XXXX/worktree) precisely so it can be discarded wholesale here.
+    try {
+        rmSync(dirname(worktreePath), { recursive: true, force: true });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        console.error(`Warning: failed to remove temp dir for worktree ${worktreePath}: ${message}`);
+    }
+}
+//# sourceMappingURL=worktree.js.map

package/dist/git/worktree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.js","sourceRoot":"","sources":["../../src/git/worktree.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,UAAU,sBAAsB;IACpC,OAAO,uBAAuB,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACvE,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACjD,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3G,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,QAAgB,EAChB,cAAwB,EACxB,QAAgB;IAEhB,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9E,aAAa,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACT,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,cAAc,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC9C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB,EAAE,aAAqB;IAC5E,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,YAAoB;IACzE,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,sCAAsC,YAAY,KAAK,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,yEAAyE;IACzE,yFAAyF;IACzF,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,CAAC,KAAK,CAAC,mDAAmD,YAAY,KAAK,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}

package/dist/mcp/server.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Custom forge MCP server (GitLab or GitHub, per config) using stdio
+ * transport. Exposes the minimum tool set an agent needs to drive steps 7-8
+ * of the pipeline-worker workflow (open an MR/PR, watch its pipeline, inspect
+ * failures, leave a human-escalation note). Every tool response is
+ * TOON-encoded via toon/envelope.ts to minimize the tokens an agent spends
+ * reading forge state.
+ */
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function createServer(): Promise<McpServer>;
+export declare function startServer(): Promise<void>;