reflectt-node 0.1.0

package/dist/portability.js

@@ -0,0 +1,292 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (c) Reflectt AI
+/**
+ * Portability Module — One-click config + secrets export/import
+ *
+ * Escape hatch for users: export everything needed to move to self-hosted
+ * or another reflectt-node instance. No lock-in.
+ *
+ * Export bundle includes:
+ *   - Team config (TEAM.md, TEAM-ROLES.yaml, TEAM-STANDARDS.md)
+ *   - Server config (config.json — cloud credentials redacted)
+ *   - Encrypted secrets (vault export — ciphertext only, requires HMK)
+ *   - Webhook routes + delivery config
+ *   - Provisioning state (hostId, cloud URL — credentials redacted)
+ *
+ * Import path re-hydrates a fresh ~/.reflectt/ from a bundle.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync, statSync } from 'node:fs';
+import { join, basename, relative } from 'node:path';
+import { REFLECTT_HOME } from './config.js';
+import { getProvisioningManager } from './provisioning.js';
+import { getWebhookDeliveryManager } from './webhooks.js';
+// Files to include in custom files export
+const EXPORTABLE_EXTENSIONS = ['.md', '.yaml', '.yml', '.json', '.toml', '.txt'];
+const EXCLUDED_DIRS = ['data', 'secrets', 'logs', 'cache', 'node_modules', '.git'];
+const EXCLUDED_FILES = ['config.json', 'provisioning.json', 'server.pid'];
+// ── Export ──
+export function exportBundle(vault) {
+    const provisioning = getProvisioningManager();
+    const webhookDelivery = getWebhookDeliveryManager();
+    const provStatus = provisioning.getStatus();
+    // Team config files
+    const teamMd = safeRead(join(REFLECTT_HOME, 'TEAM.md'));
+    const teamRolesYaml = safeRead(join(REFLECTT_HOME, 'TEAM-ROLES.yaml'));
+    const teamStandardsMd = safeRead(join(REFLECTT_HOME, 'TEAM-STANDARDS.md'));
+    // Server config (redact credentials)
+    let serverConfig = null;
+    const configPath = join(REFLECTT_HOME, 'config.json');
+    if (existsSync(configPath)) {
+        try {
+            const raw = JSON.parse(readFileSync(configPath, 'utf-8'));
+            serverConfig = redactConfig(raw);
+        }
+        catch { }
+    }
+    // Vault export (encrypted — requires HMK to decrypt)
+    let vaultExport = null;
+    let secretCount = 0;
+    if (vault?.isInitialized()) {
+        vaultExport = vault.export('portability-export');
+        secretCount = vault.getStats().secretCount;
+    }
+    // Webhook routes + config
+    const webhookRoutes = provisioning.getWebhooks().map(w => ({
+        id: w.id,
+        provider: w.provider,
+        path: w.path,
+        events: w.events,
+        active: w.active,
+        // secret intentionally omitted — stored in vault
+    }));
+    // Custom files (anything in REFLECTT_HOME that's not excluded)
+    const customFiles = collectCustomFiles(REFLECTT_HOME);
+    return {
+        version: '1.0.0',
+        format: 'reflectt-export',
+        exportedAt: new Date().toISOString(),
+        exportedFrom: {
+            hostId: provStatus.hostId,
+            hostName: provStatus.hostName,
+            reflecttHome: REFLECTT_HOME,
+        },
+        teamConfig: {
+            teamMd,
+            teamRolesYaml,
+            teamStandardsMd,
+        },
+        serverConfig,
+        secrets: {
+            vaultExport,
+            secretCount,
+            note: 'Secrets are encrypted with the Host Master Key (HMK). To import on a new host, you need the HMK file (~/.reflectt/secrets/host.key) from the source host.',
+        },
+        webhooks: {
+            routes: webhookRoutes,
+            deliveryConfig: webhookDelivery.getConfig(),
+        },
+        provisioning: {
+            phase: provStatus.phase,
+            hostId: provStatus.hostId,
+            hostName: provStatus.hostName,
+            cloudUrl: provStatus.cloudUrl,
+            webhookCount: provStatus.webhooks.length,
+        },
+        customFiles,
+    };
+}
+// ── Import ──
+export function importBundle(bundle, options = {}) {
+    const warnings = [];
+    const imported = {
+        teamConfig: false,
+        serverConfig: false,
+        webhookConfig: false,
+        customFiles: 0,
+    };
+    // Validate bundle format
+    if (bundle.format !== 'reflectt-export' || !bundle.version) {
+        return {
+            success: false,
+            message: 'Invalid export bundle format',
+            imported,
+            warnings: ['Bundle missing format or version field'],
+        };
+    }
+    // Ensure REFLECTT_HOME exists
+    if (!existsSync(REFLECTT_HOME)) {
+        mkdirSync(REFLECTT_HOME, { recursive: true });
+    }
+    // Import team config
+    if (bundle.teamConfig) {
+        const teamFiles = [
+            ['TEAM.md', bundle.teamConfig.teamMd],
+            ['TEAM-ROLES.yaml', bundle.teamConfig.teamRolesYaml],
+            ['TEAM-STANDARDS.md', bundle.teamConfig.teamStandardsMd],
+        ];
+        for (const [filename, content] of teamFiles) {
+            if (content) {
+                const filePath = join(REFLECTT_HOME, filename);
+                if (existsSync(filePath) && !options.overwrite) {
+                    warnings.push(`Skipped ${filename} (already exists, use overwrite=true)`);
+                }
+                else {
+                    writeFileSync(filePath, content, 'utf-8');
+                    imported.teamConfig = true;
+                }
+            }
+        }
+    }
+    // Import server config (without credentials — user must re-enroll)
+    if (bundle.serverConfig && !options.skipConfig) {
+        const configPath = join(REFLECTT_HOME, 'config.json');
+        if (existsSync(configPath) && !options.overwrite) {
+            warnings.push('Skipped config.json (already exists)');
+        }
+        else {
+            // Merge with existing if present, otherwise write fresh
+            let existing = {};
+            if (existsSync(configPath)) {
+                try {
+                    existing = JSON.parse(readFileSync(configPath, 'utf-8'));
+                }
+                catch { }
+            }
+            // Don't overwrite cloud credentials from bundle (they're redacted anyway)
+            const merged = { ...bundle.serverConfig };
+            if (existing.cloud) {
+                merged.cloud = existing.cloud;
+            }
+            writeFileSync(configPath, JSON.stringify(merged, null, 2), 'utf-8');
+            imported.serverConfig = true;
+            warnings.push('Cloud credentials not imported — re-enroll this host with a new join token');
+        }
+    }
+    // Import webhook config
+    if (bundle.webhooks?.routes?.length) {
+        const provisioning = getProvisioningManager();
+        for (const route of bundle.webhooks.routes) {
+            provisioning.addWebhookRoute({
+                provider: route.provider,
+                path: route.path || `/webhooks/${route.provider}`,
+                events: route.events || [],
+                active: route.active !== false,
+            });
+        }
+        imported.webhookConfig = true;
+    }
+    // Import webhook delivery config
+    if (bundle.webhooks?.deliveryConfig) {
+        const webhookDelivery = getWebhookDeliveryManager();
+        webhookDelivery.updateConfig(bundle.webhooks.deliveryConfig);
+    }
+    // Import custom files
+    if (bundle.customFiles?.length) {
+        for (const file of bundle.customFiles) {
+            const filePath = join(REFLECTT_HOME, file.path);
+            const dir = join(filePath, '..');
+            if (!existsSync(dir)) {
+                mkdirSync(dir, { recursive: true });
+            }
+            if (existsSync(filePath) && !options.overwrite) {
+                warnings.push(`Skipped ${file.path} (already exists)`);
+            }
+            else {
+                writeFileSync(filePath, file.content, 'utf-8');
+                imported.customFiles++;
+            }
+        }
+    }
+    // Secrets note
+    if (bundle.secrets?.secretCount && bundle.secrets.secretCount > 0) {
+        warnings.push(`${bundle.secrets.secretCount} encrypted secrets in bundle. ` +
+            'To import: copy host.key from source host to ~/.reflectt/secrets/host.key, ' +
+            'then POST /secrets/import with the vault export data.');
+    }
+    return {
+        success: true,
+        message: `Import complete. ${warnings.length} warning(s).`,
+        imported,
+        warnings,
+    };
+}
+// ── Helpers ──
+function safeRead(filePath) {
+    try {
+        if (existsSync(filePath)) {
+            return readFileSync(filePath, 'utf-8');
+        }
+    }
+    catch { }
+    return null;
+}
+function redactConfig(config) {
+    const redacted = { ...config };
+    // Redact cloud credentials
+    if (redacted.cloud && typeof redacted.cloud === 'object') {
+        const cloud = { ...redacted.cloud };
+        if (cloud.credential)
+            cloud.credential = '[REDACTED]';
+        if (cloud.hostId)
+            cloud.hostId = '[REDACTED — re-enroll on new host]';
+        redacted.cloud = cloud;
+    }
+    // Redact any keys that look like secrets
+    for (const key of Object.keys(redacted)) {
+        if (/token|secret|password|credential|key/i.test(key) && typeof redacted[key] === 'string') {
+            redacted[key] = '[REDACTED]';
+        }
+    }
+    return redacted;
+}
+function collectCustomFiles(root) {
+    const files = [];
+    function walk(dir) {
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(dir, entry);
+            const relPath = relative(root, fullPath);
+            // Skip excluded dirs
+            if (EXCLUDED_DIRS.some(d => relPath.startsWith(d)))
+                continue;
+            try {
+                const stat = statSync(fullPath);
+                if (stat.isDirectory()) {
+                    walk(fullPath);
+                    continue;
+                }
+                if (!stat.isFile())
+                    continue;
+                // Skip excluded files
+                if (EXCLUDED_FILES.includes(basename(fullPath)))
+                    continue;
+                // Skip files already handled (team config)
+                if (['TEAM.md', 'TEAM-ROLES.yaml', 'TEAM-STANDARDS.md'].includes(basename(fullPath)))
+                    continue;
+                // Only include text files with exportable extensions
+                const ext = basename(fullPath).includes('.')
+                    ? '.' + basename(fullPath).split('.').pop()
+                    : '';
+                if (!EXPORTABLE_EXTENSIONS.includes(ext))
+                    continue;
+                // Size limit: 1MB per file
+                if (stat.size > 1_000_000)
+                    continue;
+                const content = readFileSync(fullPath, 'utf-8');
+                files.push({ path: relPath, content });
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+    }
+    walk(root);
+    return files;
+}
+//# sourceMappingURL=portability.js.map

package/dist/portability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.js","sourceRoot":"","sources":["../src/portability.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,4BAA4B;AAE5B;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAgB,MAAM,SAAS,CAAA;AACjH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAA;AAsDzD,0CAA0C;AAC1C,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAChF,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;AAClF,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAA;AAEzE,eAAe;AAEf,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAA;IAC7C,MAAM,eAAe,GAAG,yBAAyB,EAAE,CAAA;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,EAAE,CAAA;IAE3C,oBAAoB;IACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAA;IACvD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACtE,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAA;IAE1E,qCAAqC;IACrC,IAAI,YAAY,GAAmC,IAAI,CAAA;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;IACrD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;YACzD,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,qDAAqD;IACrD,IAAI,WAAW,GAA6C,IAAI,CAAA;IAChE,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;QAC3B,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAChD,WAAW,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAA;IAC5C,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,iDAAiD;KAClD,CAAC,CAAC,CAAA;IAEH,+DAA+D;IAC/D,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;IAErD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,YAAY,EAAE;YACZ,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,aAAa;SAC5B;QACD,UAAU,EAAE;YACV,MAAM;YACN,aAAa;YACb,eAAe;SAChB;QACD,YAAY;QACZ,OAAO,EAAE;YACP,WAAW;YACX,WAAW;YACX,IAAI,EAAE,2JAA2J;SAClK;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,aAAa;YACrB,cAAc,EAAE,eAAe,CAAC,SAAS,EAAwC;SAClF;QACD,YAAY,EAAE;YACZ,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;SACzC;QACD,WAAW;KACZ,CAAA;AACH,CAAC;AAED,eAAe;AAEf,MAAM,UAAU,YAAY,CAC1B,MAAoB,EACpB,UAII,EAAE;IAEN,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,KAAK;QACjB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,KAAK;QACpB,WAAW,EAAE,CAAC;KACf,CAAA;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,8BAA8B;YACvC,QAAQ;YACR,QAAQ,EAAE,CAAC,wCAAwC,CAAC;SACrD,CAAA;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,SAAS,GAAmC;YAChD,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YACrC,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;YACpD,CAAC,mBAAmB,EAAE,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;SACzD,CAAA;QAED,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,SAAS,EAAE,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAA;gBAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CAAC,WAAW,QAAQ,uCAAuC,CAAC,CAAA;gBAC3E,CAAC;qBAAM,CAAC;oBACN,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;oBACzC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAA;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAA;QACrD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QACvD,CAAC;aAAM,CAAC;YACN,wDAAwD;YACxD,IAAI,QAAQ,GAA4B,EAAE,CAAA;YAC1C,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC;oBAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YAC3E,CAAC;YAED,0EAA0E;YAC1E,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAA;YACzC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAA;YAC/B,CAAC;YAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACnE,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAA;YAC5B,QAAQ,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,sBAAsB,EAAE,CAAA;QAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3C,YAAY,CAAC,eAAe,CAAC;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAkB;gBAClC,IAAI,EAAE,KAAK,CAAC,IAAc,IAAI,aAAa,KAAK,CAAC,QAAQ,EAAE;gBAC3D,MAAM,EAAG,KAAK,CAAC,MAAmB,IAAI,EAAE;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,KAAK;aAC/B,CAAC,CAAA;QACJ,CAAC;QACD,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAA;IAC/B,CAAC;IAED,iCAAiC;IACjC,IAAI,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,yBAAyB,EAAE,CAAA;QACnD,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAqB,CAAC,CAAA;IACrE,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;YAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrC,CAAC;YACD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,mBAAmB,CAAC,CAAA;YACxD,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC9C,QAAQ,CAAC,WAAW,EAAE,CAAA;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,gCAAgC;YAC7D,6EAA6E;YAC7E,uDAAuD,CACxD,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,oBAAoB,QAAQ,CAAC,MAAM,cAAc;QAC1D,QAAQ;QACR,QAAQ;KACT,CAAA;AACH,CAAC;AAED,gBAAgB;AAEhB,SAAS,QAAQ,CAAC,QAAgB;IAChC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAA;IAE9B,2BAA2B;IAC3B,IAAI,QAAQ,CAAC,KAAK,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,EAAE,GAAI,QAAQ,CAAC,KAAiC,EAAE,CAAA;QAChE,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,YAAY,CAAA;QACrD,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,oCAAoC,CAAA;QACrE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAA;IACxB,CAAC;IAED,yCAAyC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,IAAI,uCAAuC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3F,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAA;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,KAAK,GAA6C,EAAE,CAAA;IAE1D,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAExC,qBAAqB;YACrB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAQ;YAE5D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;gBAE/B,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,IAAI,CAAC,QAAQ,CAAC,CAAA;oBACd,SAAQ;gBACV,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAAE,SAAQ;gBAE5B,sBAAsB;gBACtB,IAAI,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAAE,SAAQ;gBAEzD,2CAA2C;gBAC3C,IAAI,CAAC,SAAS,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAAE,SAAQ;gBAE9F,qDAAqD;gBACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAC1C,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;oBAC3C,CAAC,CAAC,EAAE,CAAA;gBACN,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAElD,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;oBAAE,SAAQ;gBAEnC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;gBAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAA;IACV,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/pr-integrity.d.ts

@@ -0,0 +1,45 @@
+export interface PrIntegrityInput {
+    /** GitHub PR URL (e.g. https://github.com/org/repo/pull/123) */
+    pr_url: string;
+    /** Commit SHA from the review packet */
+    packet_commit: string;
+    /** Changed files from the review packet */
+    packet_changed_files: string[];
+}
+export interface PrIntegrityResult {
+    valid: boolean;
+    /** Live PR head SHA (if fetched successfully) */
+    live_head_sha: string | null;
+    /** Live PR changed files (if fetched successfully) */
+    live_changed_files: string[] | null;
+    errors: PrIntegrityError[];
+    /** Whether the check was skipped (e.g. gh CLI not available) */
+    skipped: boolean;
+    skip_reason?: string;
+}
+export interface PrIntegrityError {
+    field: 'commit' | 'changed_files';
+    message: string;
+    expected?: string;
+    actual?: string;
+    /** Files in packet but not in live PR */
+    extra_files?: string[];
+    /** Files in live PR but not in packet */
+    missing_files?: string[];
+}
+/**
+ * Extract owner/repo and PR number from a GitHub PR URL.
+ */
+export declare function parsePrUrl(url: string): {
+    repo: string;
+    number: number;
+} | null;
+/**
+ * Validate a review packet's commit SHA and changed files against the live PR.
+ *
+ * Returns `valid: true` if both match.
+ * Returns `skipped: true` if gh CLI is unavailable, PR can't be fetched,
+ * or we're in a test environment.
+ */
+export declare function validatePrIntegrity(input: PrIntegrityInput): PrIntegrityResult;
+//# sourceMappingURL=pr-integrity.d.ts.map

package/dist/pr-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-integrity.d.ts","sourceRoot":"","sources":["../src/pr-integrity.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAA;IACrB,2CAA2C;IAC3C,oBAAoB,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAA;IACd,iDAAiD;IACjD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,sDAAsD;IACtD,kBAAkB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IACnC,MAAM,EAAE,gBAAgB,EAAE,CAAA;IAC1B,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,QAAQ,GAAG,eAAe,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAID;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAI/E;AAiCD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CAgG9E"}

package/dist/pr-integrity.js

@@ -0,0 +1,124 @@
+// SPDX-License-Identifier: Apache-2.0
+// PR Integrity Validation — validates review-packet commit SHA and changed_files
+// against the live GitHub PR state before accepting a validating transition.
+import { execSync } from 'child_process';
+// ── Parse ──
+/**
+ * Extract owner/repo and PR number from a GitHub PR URL.
+ */
+export function parsePrUrl(url) {
+    const match = url.match(/^https:\/\/github\.com\/([^/]+\/[^/]+)\/pull\/(\d+)/);
+    if (!match)
+        return null;
+    return { repo: match[1], number: parseInt(match[2], 10) };
+}
+function fetchPrState(repo, prNumber) {
+    try {
+        // Fetch head SHA
+        const headJson = execSync(`gh pr view ${prNumber} --repo ${repo} --json headRefOid`, { timeout: 15_000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        const { headRefOid } = JSON.parse(headJson);
+        // Fetch changed files
+        const filesJson = execSync(`gh pr view ${prNumber} --repo ${repo} --json files --jq '[.files[].path]'`, { timeout: 15_000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        const files = JSON.parse(filesJson);
+        return { headRefOid, files };
+    }
+    catch {
+        return null;
+    }
+}
+// ── Core validation ──
+/**
+ * Validate a review packet's commit SHA and changed files against the live PR.
+ *
+ * Returns `valid: true` if both match.
+ * Returns `skipped: true` if gh CLI is unavailable, PR can't be fetched,
+ * or we're in a test environment.
+ */
+export function validatePrIntegrity(input) {
+    // Parse URL first (always validate, even in test env)
+    const parsed = parsePrUrl(input.pr_url);
+    if (!parsed) {
+        return {
+            valid: false,
+            live_head_sha: null,
+            live_changed_files: null,
+            errors: [{ field: 'commit', message: `Invalid PR URL: ${input.pr_url}` }],
+            skipped: false,
+        };
+    }
+    // Skip live PR check in test environments (REFLECTT_HOME under temp dirs)
+    const home = process.env.REFLECTT_HOME || '';
+    if (home.includes('/tmp/') || home.includes('/var/folders/') || home.startsWith('/tmp')) {
+        return {
+            valid: true,
+            live_head_sha: null,
+            live_changed_files: null,
+            errors: [],
+            skipped: true,
+            skip_reason: 'Test environment detected (REFLECTT_HOME is temp dir)',
+        };
+    }
+    // Check gh CLI availability
+    try {
+        execSync('gh --version', { timeout: 5_000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
+    }
+    catch {
+        return {
+            valid: true, // soft-pass: can't verify
+            live_head_sha: null,
+            live_changed_files: null,
+            errors: [],
+            skipped: true,
+            skip_reason: 'gh CLI not available',
+        };
+    }
+    const prState = fetchPrState(parsed.repo, parsed.number);
+    if (!prState) {
+        return {
+            valid: true, // soft-pass: PR fetch failed (maybe private, auth issue, etc.)
+            live_head_sha: null,
+            live_changed_files: null,
+            errors: [],
+            skipped: true,
+            skip_reason: `Failed to fetch PR #${parsed.number} from ${parsed.repo}`,
+        };
+    }
+    const errors = [];
+    // 1. Commit SHA validation
+    const liveHead = prState.headRefOid;
+    const packetCommit = input.packet_commit.trim().toLowerCase();
+    const liveHeadNorm = liveHead.toLowerCase();
+    // Support short SHA comparison (7+ chars)
+    const shortLen = Math.min(packetCommit.length, liveHeadNorm.length);
+    const packetShort = packetCommit.slice(0, shortLen);
+    const liveShort = liveHeadNorm.slice(0, shortLen);
+    if (packetShort !== liveShort) {
+        errors.push({
+            field: 'commit',
+            message: `Review packet commit (${input.packet_commit}) does not match live PR head (${liveHead.slice(0, 12)})`,
+            expected: liveHead,
+            actual: input.packet_commit,
+        });
+    }
+    // 2. Changed files validation
+    const liveFiles = new Set(prState.files.map(f => f.trim()));
+    const packetFiles = new Set(input.packet_changed_files.map(f => f.trim()));
+    const extraFiles = [...packetFiles].filter(f => !liveFiles.has(f));
+    const missingFiles = [...liveFiles].filter(f => !packetFiles.has(f));
+    if (extraFiles.length > 0 || missingFiles.length > 0) {
+        errors.push({
+            field: 'changed_files',
+            message: `Review packet changed_files do not match live PR (${extraFiles.length} extra, ${missingFiles.length} missing)`,
+            extra_files: extraFiles.length > 0 ? extraFiles : undefined,
+            missing_files: missingFiles.length > 0 ? missingFiles : undefined,
+        });
+    }
+    return {
+        valid: errors.length === 0,
+        live_head_sha: liveHead,
+        live_changed_files: prState.files,
+        errors,
+        skipped: false,
+    };
+}
+//# sourceMappingURL=pr-integrity.js.map

package/dist/pr-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-integrity.js","sourceRoot":"","sources":["../src/pr-integrity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iFAAiF;AACjF,6EAA6E;AAE7E,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAoCxC,cAAc;AAEd;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAA;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAA;AAC3D,CAAC;AASD,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,IAAI,CAAC;QACH,iBAAiB;QACjB,MAAM,QAAQ,GAAG,QAAQ,CACvB,cAAc,QAAQ,WAAW,IAAI,oBAAoB,EACzD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxE,CAAC,IAAI,EAAE,CAAA;QACR,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAE3C,sBAAsB;QACtB,MAAM,SAAS,GAAG,QAAQ,CACxB,cAAc,QAAQ,WAAW,IAAI,sCAAsC,EAC3E,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxE,CAAC,IAAI,EAAE,CAAA;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAa,CAAA;QAE/C,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,wBAAwB;AAExB;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,sDAAsD;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzE,OAAO,EAAE,KAAK;SACf,CAAA;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAA;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,KAAK,EAAE,IAAI;YACX,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,uDAAuD;SACrE,CAAA;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,CAAC;QACH,QAAQ,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,KAAK,EAAE,IAAI,EAAE,0BAA0B;YACvC,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,sBAAsB;SACpC,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,IAAI,EAAE,+DAA+D;YAC5E,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,uBAAuB,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,IAAI,EAAE;SACxE,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAuB,EAAE,CAAA;IAErC,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAA;IACnC,MAAM,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAA;IAE3C,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IACnE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAEjD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,yBAAyB,KAAK,CAAC,aAAa,kCAAkC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAC/G,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,KAAK,CAAC,aAAa;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC3D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAE1E,MAAM,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAClE,MAAM,YAAY,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAEpE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,qDAAqD,UAAU,CAAC,MAAM,WAAW,YAAY,CAAC,MAAM,WAAW;YACxH,WAAW,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC3D,aAAa,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,aAAa,EAAE,QAAQ;QACvB,kBAAkB,EAAE,OAAO,CAAC,KAAK;QACjC,MAAM;QACN,OAAO,EAAE,KAAK;KACf,CAAA;AACH,CAAC"}

package/dist/prAutoMerge.d.ts

@@ -0,0 +1,62 @@
+import type { Task } from './types.js';
+export interface PrMergeability {
+    mergeable: boolean;
+    reason: string;
+    state: 'OPEN' | 'MERGED' | 'CLOSED' | 'UNKNOWN';
+    reviewDecision: string;
+    checksStatus: 'passing' | 'failing' | 'pending' | 'unknown';
+    failingChecks: string[];
+}
+export interface MergeAttemptResult {
+    success: boolean;
+    error: string | null;
+    mergeCommitSha: string | null;
+}
+export interface CloseGateResult {
+    populated: boolean;
+    fields: string[];
+    error: string | null;
+}
+export interface AutoCloseResult {
+    closed: boolean;
+    reason: string;
+    failedGates: string[];
+}
+export interface MergeAttemptLog {
+    taskId: string;
+    prUrl: string;
+    timestamp: number;
+    action: 'merge_attempted' | 'merge_success' | 'merge_failed' | 'merge_skipped' | 'auto_close' | 'close_gate_fail';
+    detail: string;
+}
+export declare function getMergeAttemptLog(): MergeAttemptLog[];
+export declare function _clearMergeabilityCache(): void;
+export declare function parsePrUrl(prUrl: string): {
+    repo: string;
+    prNumber: number;
+} | null;
+export declare function checkPrMergeability(prUrl: string): PrMergeability;
+export declare function attemptAutoMerge(prUrl: string): MergeAttemptResult;
+export declare function autoPopulateCloseGate(taskId: string, prUrl?: string): CloseGateResult;
+export declare function tryAutoCloseTask(taskId: string): AutoCloseResult;
+/**
+ * Called by the execution sweeper during each cycle.
+ * For each validating task with a PR, checks mergeability and attempts merge.
+ * After merge, auto-populates close gates and tries to auto-close.
+ */
+export declare function processAutoMerge(tasks: Task[]): {
+    mergeAttempts: number;
+    mergeSuccesses: number;
+    autoCloses: number;
+    skipped: number;
+};
+/**
+ * Generate exact remediation instructions for a drift issue.
+ */
+export declare function generateRemediation(params: {
+    taskId: string;
+    issue: string;
+    prUrl?: string;
+    meta?: Record<string, unknown>;
+}): string;
+//# sourceMappingURL=prAutoMerge.d.ts.map

package/dist/prAutoMerge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prAutoMerge.d.ts","sourceRoot":"","sources":["../src/prAutoMerge.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAKtC,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC/C,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IAC3D,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,iBAAiB,GAAG,eAAe,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,iBAAiB,CAAA;IACjH,MAAM,EAAE,MAAM,CAAA;CACf;AAcD,wBAAgB,kBAAkB,IAAI,eAAe,EAAE,CAEtD;AAMD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAID,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMnF;AAID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CA4FjE;AAID,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAiClE;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAqFrF;AAID,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CA2GhE;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG;IAC/C,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;CAChB,CAwGA;AA4BD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B,GAAG,MAAM,CA4BT"}