reviewflow 3.31.0 → 3.33.0

package/dist/tests/units/services/threadActionsExecutor.egress.test.js

@@ -0,0 +1,113 @@
+import { describe, it, expect } from 'vitest';
+import { executeThreadActions, } from '../../../modules/review-execution/services/threadActionsExecutor.js';
+import { EgressScannedNoteCommentPostGateway } from '../../../modules/platform-integration/interface-adapters/gateways/egressScanned.noteCommentPost.gateway.js';
+import { createEgressScanner } from '../../../modules/platform-integration/entities/egressScan/egressScan.scanner.js';
+import { StubNoteCommentPostGateway } from '../../../tests/stubs/noteCommentPost.stub.js';
+import { StubEgressTraceGateway } from '../../../tests/stubs/egressScan.stub.js';
+const SECRET = 'glpat-abcdefghij1234567890';
+const redactConfig = {
+    secretShapeMode: 'redact',
+    lengthMode: 'redact',
+    outOfScopeMode: 'redact',
+    maxBodyLength: 10000,
+    redactionMarker: '[REDACTED]',
+    truncationMarker: '…[TRUNCATED]',
+};
+const silentLogger = {
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    debug: () => { },
+};
+function buildDecoratedSink() {
+    const sink = new StubNoteCommentPostGateway();
+    const trace = new StubEgressTraceGateway();
+    const scanner = createEgressScanner(redactConfig);
+    const gateway = new EgressScannedNoteCommentPostGateway(sink, scanner, trace);
+    return { sink, gateway };
+}
+const gitlabContext = {
+    platform: 'gitlab',
+    projectPath: 'group/app',
+    mrNumber: 7,
+    localPath: '/tmp/repo',
+};
+describe('executeThreadActions — egress routing (pentest amendment AC7/AC9)', () => {
+    it('routes a THREAD_REPLY body through the decorated sink, never the raw CLI primitive', async () => {
+        const { sink, gateway } = buildDecoratedSink();
+        const rawCalls = [];
+        const recordingExecutor = (_command, args) => {
+            rawCalls.push(args);
+        };
+        const actions = [
+            { type: 'THREAD_REPLY', threadId: 'abc', message: `fixed, token ${SECRET}` },
+        ];
+        await executeThreadActions(actions, gitlabContext, silentLogger, recordingExecutor, gateway);
+        expect(sink.calls).toHaveLength(1);
+        expect(sink.calls[0].body).toContain('[REDACTED]');
+        expect(sink.calls[0].body).not.toContain(SECRET);
+        const reachedRawNotePrimitive = rawCalls.some((args) => args.some((arg) => arg.includes(SECRET) || arg.includes('/notes')));
+        expect(reachedRawNotePrimitive).toBe(false);
+    });
+    it('routes a POST_COMMENT body through the decorated sink, never the raw CLI primitive', async () => {
+        const { sink, gateway } = buildDecoratedSink();
+        const rawCalls = [];
+        const recordingExecutor = (_command, args) => {
+            rawCalls.push(args);
+        };
+        const actions = [{ type: 'POST_COMMENT', body: `comment ${SECRET}` }];
+        await executeThreadActions(actions, gitlabContext, silentLogger, recordingExecutor, gateway);
+        expect(sink.calls).toHaveLength(1);
+        expect(sink.calls[0].body).not.toContain(SECRET);
+        const rawSecretCalls = rawCalls.filter((args) => args.some((arg) => arg.includes(SECRET)));
+        expect(rawSecretCalls).toHaveLength(0);
+    });
+    it('routes non-public-output postComment verbs (POST_INLINE_COMMENT) through the CLI primitive', async () => {
+        const { sink, gateway } = buildDecoratedSink();
+        const rawCalls = [];
+        const recordingExecutor = (_command, args) => {
+            rawCalls.push(args);
+        };
+        const actions = [
+            { type: 'POST_INLINE_COMMENT', filePath: 'src/a.ts', line: 3, body: 'inline note' },
+        ];
+        const inlineContext = {
+            ...gitlabContext,
+            diffMetadata: { baseSha: 'base', headSha: 'head', startSha: 'start' },
+        };
+        await executeThreadActions(actions, inlineContext, silentLogger, recordingExecutor, gateway);
+        expect(sink.calls).toHaveLength(0);
+        expect(rawCalls.some((args) => args.some((arg) => arg.includes('/discussions')))).toBe(true);
+    });
+    it('drops THREAD_RESOLVE from the auto path (SPEC-196 unwire): neither sink nor CLI write', async () => {
+        const { sink, gateway } = buildDecoratedSink();
+        const rawCalls = [];
+        const recordingExecutor = (_command, args) => {
+            rawCalls.push(args);
+        };
+        const actions = [{ type: 'THREAD_RESOLVE', threadId: 'abc' }];
+        await executeThreadActions(actions, gitlabContext, silentLogger, recordingExecutor, gateway);
+        expect(sink.calls).toHaveLength(0);
+        expect(rawCalls.some((args) => args.includes('resolved=true'))).toBe(false);
+    });
+    it('AC9 — every auto-path public-output verb reaches only the decorated sink', async () => {
+        const { sink, gateway } = buildDecoratedSink();
+        const rawCalls = [];
+        const recordingExecutor = (_command, args) => {
+            rawCalls.push(args);
+        };
+        const actions = [
+            { type: 'POST_COMMENT', body: `comment ${SECRET}` },
+            { type: 'THREAD_REPLY', threadId: 't1', message: `reply ${SECRET}` },
+            { type: 'THREAD_RESOLVE', threadId: 't1' },
+        ];
+        await executeThreadActions(actions, gitlabContext, silentLogger, recordingExecutor, gateway);
+        expect(sink.calls).toHaveLength(2);
+        for (const call of sink.calls) {
+            expect(call.body).not.toContain(SECRET);
+        }
+        const rawSecretCalls = rawCalls.filter((args) => args.some((arg) => arg.includes(SECRET)));
+        expect(rawSecretCalls).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=threadActionsExecutor.egress.test.js.map

package/dist/tests/units/services/threadActionsExecutor.egress.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadActionsExecutor.egress.test.js","sourceRoot":"","sources":["../../../../src/tests/units/services/threadActionsExecutor.egress.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,oBAAoB,GAGrB,MAAM,8DAA8D,CAAC;AAEtE,OAAO,EAAE,mCAAmC,EAAE,MAAM,qGAAqG,CAAC;AAC1J,OAAO,EAAE,mBAAmB,EAAE,MAAM,0EAA0E,CAAC;AAE/G,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAE1E,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAE5C,MAAM,YAAY,GAAqB;IACrC,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,YAAY;IAC7B,gBAAgB,EAAE,cAAc;CACjC,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC;AAEF,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,mCAAmC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,aAAa,GAAqB;IACtC,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,WAAW;IACxB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,MAAM,EAAE,EAAE;SAC7E,CAAC;QAEF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,uBAAuB,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrD,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CACnE,CAAC;QACF,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC,CAAC;QAEtF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAEjD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE;SACpF,CAAC;QACF,MAAM,aAAa,GAAqB;YACtC,GAAG,aAAa;YAChB,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE;SACtE,CAAC;QAEF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAE9E,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAe,EAAE,CAAC;QAChC,MAAM,iBAAiB,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE;YACnD,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE;YACpE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3C,CAAC;QAEF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/units/services/threadActionsExecutor.test.js

@@ -1,5 +1,8 @@
 import { executeThreadActions, } from '../../../modules/review-execution/services/threadActionsExecutor.js';
-describe('executeThreadActions', () => {
+// AC6/AC7: the deprecated auto-path executor is bounded to the read+postComment
+// capability set. THREAD_RESOLVE / THREAD_REPLY / ADD_LABEL are dropped as no-ops
+// (logged, not executed, no escalation). POST_COMMENT and FETCH_THREADS remain.
+describe('executeThreadActions (auto path, capability-bounded)', () => {
     const mockExecutor = vi.fn();
     const mockLogger = {
         info: vi.fn(),
@@ -17,38 +20,20 @@ describe('executeThreadActions', () => {
             mrNumber: 4658,
             localPath: '/tmp/repo',
         };
-        it('should execute THREAD_REPLY with correct glab command', async () => {
+        it('executes THREAD_REPLY (note-create, postComment capability)', async () => {
             const actions = [
                 { type: 'THREAD_REPLY', threadId: 'abc123', message: 'Fixed!' },
             ];
             await executeThreadActions(actions, gitlabContext, mockLogger, mockExecutor);
-            expect(mockExecutor).toHaveBeenCalledWith('glab', [
-                'api',
-                '--method',
-                'POST',
-                'projects/mentor-goal%2Fmain-app-v3/merge_requests/4658/discussions/abc123/notes',
-                '--field',
-                "body=Fixed!",
-            ], '/tmp/repo');
+            expect(mockExecutor).toHaveBeenCalledTimes(1);
         });
-        it('should execute THREAD_RESOLVE with correct glab command', async () => {
-            const actions = [
-                { type: 'THREAD_RESOLVE', threadId: 'abc123' },
-            ];
+        it('drops THREAD_RESOLVE without invoking the executor', async () => {
+            const actions = [{ type: 'THREAD_RESOLVE', threadId: 'abc123' }];
             await executeThreadActions(actions, gitlabContext, mockLogger, mockExecutor);
-            expect(mockExecutor).toHaveBeenCalledWith('glab', [
-                'api',
-                '--method',
-                'PUT',
-                'projects/mentor-goal%2Fmain-app-v3/merge_requests/4658/discussions/abc123',
-                '--field',
-                'resolved=true',
-            ], '/tmp/repo');
+            expect(mockExecutor).not.toHaveBeenCalled();
         });
-        it('should execute POST_COMMENT with correct glab command', async () => {
-            const actions = [
-                { type: 'POST_COMMENT', body: '## Review Complete' },
-            ];
+        it('executes POST_COMMENT with correct glab command', async () => {
+            const actions = [{ type: 'POST_COMMENT', body: '## Review Complete' }];
             await executeThreadActions(actions, gitlabContext, mockLogger, mockExecutor);
             expect(mockExecutor).toHaveBeenCalledWith('glab', [
                 'api',
@@ -59,19 +44,6 @@ describe('executeThreadActions', () => {
                 'body=## Review Complete',
             ], '/tmp/repo');
         });
-        it('should URL-encode project path with slashes', async () => {
-            const contextWithSlash = {
-                ...gitlabContext,
-                projectPath: 'group/subgroup/project',
-            };
-            const actions = [
-                { type: 'THREAD_RESOLVE', threadId: 'abc' },
-            ];
-            await executeThreadActions(actions, contextWithSlash, mockLogger, mockExecutor);
-            expect(mockExecutor).toHaveBeenCalledWith('glab', expect.arrayContaining([
-                expect.stringContaining('group%2Fsubgroup%2Fproject'),
-            ]), '/tmp/repo');
-        });
     });
     describe('GitHub platform', () => {
         const githubContext = {
@@ -80,36 +52,20 @@ describe('executeThreadActions', () => {
             mrNumber: 123,
             localPath: '/tmp/repo',
         };
-        it('should execute THREAD_RESOLVE with gh graphql mutation', async () => {
-            const actions = [
-                { type: 'THREAD_RESOLVE', threadId: 'PRRT_abc123' },
-            ];
+        it('drops THREAD_RESOLVE without invoking the executor', async () => {
+            const actions = [{ type: 'THREAD_RESOLVE', threadId: 'PRRT_abc123' }];
             await executeThreadActions(actions, githubContext, mockLogger, mockExecutor);
-            expect(mockExecutor).toHaveBeenCalledWith('gh', [
-                'api',
-                'graphql',
-                '-f',
-                'query=mutation { resolveReviewThread(input: {threadId: "PRRT_abc123"}) { thread { id isResolved } } }',
-            ], '/tmp/repo');
+            expect(mockExecutor).not.toHaveBeenCalled();
         });
-        it('should execute THREAD_REPLY with gh api command', async () => {
+        it('executes THREAD_REPLY (note-create, postComment capability)', async () => {
             const actions = [
                 { type: 'THREAD_REPLY', threadId: '12345', message: 'Fixed!' },
             ];
             await executeThreadActions(actions, githubContext, mockLogger, mockExecutor);
-            expect(mockExecutor).toHaveBeenCalledWith('gh', [
-                'api',
-                '--method',
-                'POST',
-                'repos/owner/repo/pulls/123/comments/12345/replies',
-                '--field',
-                'body=Fixed!',
-            ], '/tmp/repo');
+            expect(mockExecutor).toHaveBeenCalledTimes(1);
         });
-        it('should execute POST_COMMENT with gh api command', async () => {
-            const actions = [
-                { type: 'POST_COMMENT', body: '## Review Complete' },
-            ];
+        it('executes POST_COMMENT with gh api command', async () => {
+            const actions = [{ type: 'POST_COMMENT', body: '## Review Complete' }];
             await executeThreadActions(actions, githubContext, mockLogger, mockExecutor);
             expect(mockExecutor).toHaveBeenCalledWith('gh', [
                 'api',
@@ -122,7 +78,7 @@ describe('executeThreadActions', () => {
         });
     });
     describe('FETCH_THREADS action', () => {
-        it('should be a no-op (placeholder for future implementation)', async () => {
+        it('is a read-allowed no-op at the gateway (skipped)', async () => {
             const actions = [{ type: 'FETCH_THREADS' }];
             const context = {
                 platform: 'gitlab',
@@ -135,57 +91,42 @@ describe('executeThreadActions', () => {
             expect(result.skipped).toBe(1);
         });
     });
-    describe('execution order and error handling', () => {
+    describe('error handling on the allowed (postComment) path', () => {
         const context = {
             platform: 'gitlab',
             projectPath: 'test/project',
             mrNumber: 1,
             localPath: '/tmp/repo',
         };
-        it('should execute actions in order', async () => {
-            const executionOrder = [];
-            const trackingExecutor = vi.fn((_cmd, args) => {
-                const threadId = args.find((a) => a.includes('discussions/'))?.split('discussions/')[1]?.split('/')[0];
-                executionOrder.push(threadId || 'unknown');
-            });
-            const actions = [
-                { type: 'THREAD_REPLY', threadId: 'first', message: 'msg' },
-                { type: 'THREAD_RESOLVE', threadId: 'second' },
-                { type: 'THREAD_REPLY', threadId: 'third', message: 'msg' },
-            ];
-            await executeThreadActions(actions, context, mockLogger, trackingExecutor);
-            expect(executionOrder).toEqual(['first', 'second', 'third']);
-        });
-        it('should continue execution after API error', async () => {
+        it('continues execution after an API error on a postComment', async () => {
             const failingExecutor = vi.fn()
                 .mockImplementationOnce(() => { throw new Error('API 404'); })
                 .mockImplementationOnce(() => { });
             const actions = [
-                { type: 'THREAD_RESOLVE', threadId: 'invalid' },
-                { type: 'THREAD_RESOLVE', threadId: 'valid' },
+                { type: 'POST_COMMENT', body: 'first' },
+                { type: 'POST_COMMENT', body: 'second' },
             ];
             const result = await executeThreadActions(actions, context, mockLogger, failingExecutor);
             expect(failingExecutor).toHaveBeenCalledTimes(2);
             expect(result.failed).toBe(1);
             expect(result.succeeded).toBe(1);
         });
-        it('should return execution summary', async () => {
+        it('summarises a mixed stream: dropped write verbs never reach the executor', async () => {
             const actions = [
                 { type: 'THREAD_RESOLVE', threadId: 'a' },
-                { type: 'THREAD_RESOLVE', threadId: 'b' },
+                { type: 'POST_COMMENT', body: 'note' },
                 { type: 'FETCH_THREADS' },
             ];
             const result = await executeThreadActions(actions, context, mockLogger, mockExecutor);
-            expect(result).toEqual({
-                total: 3,
-                succeeded: 2,
-                failed: 0,
-                skipped: 1,
-            });
+            // THREAD_RESOLVE filtered out entirely; gateway sees POST_COMMENT + FETCH_THREADS.
+            expect(mockExecutor).toHaveBeenCalledTimes(1);
+            expect(result.total).toBe(2);
+            expect(result.succeeded).toBe(1);
+            expect(result.skipped).toBe(1);
         });
     });
     describe('empty actions', () => {
-        it('should return zero counts for empty actions array', async () => {
+        it('returns zero counts for an empty actions array', async () => {
             const context = {
                 platform: 'gitlab',
                 projectPath: 'test/project',
@@ -193,12 +134,7 @@ describe('executeThreadActions', () => {
                 localPath: '/tmp/repo',
             };
             const result = await executeThreadActions([], context, mockLogger, mockExecutor);
-            expect(result).toEqual({
-                total: 0,
-                succeeded: 0,
-                failed: 0,
-                skipped: 0,
-            });
+            expect(result).toEqual({ total: 0, succeeded: 0, failed: 0, skipped: 0 });
             expect(mockExecutor).not.toHaveBeenCalled();
         });
     });

package/dist/tests/units/services/threadActionsExecutor.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"threadActionsExecutor.test.js","sourceRoot":"","sources":["../../../../src/tests/units/services/threadActionsExecutor.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAGrB,MAAM,8DAA8D,CAAA;AAGrE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,MAAM,YAAY,GAAoB,EAAE,CAAC,EAAE,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACf,CAAA;IAED,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,yBAAyB;YACtC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;aAChE,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,iFAAiF;gBACjF,SAAS;gBACT,aAAa;aACd,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE;aAC/C,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN;gBACE,KAAK;gBACL,UAAU;gBACV,KAAK;gBACL,2EAA2E;gBAC3E,SAAS;gBACT,eAAe;aAChB,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE;aACrD,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,8DAA8D;gBAC9D,SAAS;gBACT,yBAAyB;aAC1B,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,gBAAgB,GAAqB;gBACzC,GAAG,aAAa;gBAChB,WAAW,EAAE,wBAAwB;aACtC,CAAA;YACD,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5C,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE/E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN,MAAM,CAAC,eAAe,CAAC;gBACrB,MAAM,CAAC,gBAAgB,CAAC,4BAA4B,CAAC;aACtD,CAAC,EACF,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE;aACpD,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,IAAI,EACJ;gBACE,KAAK;gBACL,SAAS;gBACT,IAAI;gBACJ,uGAAuG;aACxG,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;aAC/D,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,IAAI,EACJ;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,mDAAmD;gBACnD,SAAS;gBACT,aAAa;aACd,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE;aACrD,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,IAAI,EACJ;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,sCAAsC;gBACtC,SAAS;gBACT,yBAAyB;aAC1B,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAqB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,WAAW;aACvB,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAErF,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,MAAM,OAAO,GAAqB;YAChC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,cAAc,GAAa,EAAE,CAAA;YACnC,MAAM,gBAAgB,GAAoB,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;gBAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC9G,cAAc,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;YAEF,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC3D,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC9C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;aAC5D,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAA;YAE1E,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,eAAe,GAAoB,EAAE,CAAC,EAAE,EAAE;iBAC7C,sBAAsB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC;iBAC5D,sBAAsB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAEnC,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC/C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE;aAC9C,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;YAExF,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YAC/C,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACzC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACzC,EAAE,IAAI,EAAE,eAAe,EAAE;aAC1B,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAErF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;aACX,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,OAAO,GAAqB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,WAAW;aACvB,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAEhF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;gBACrB,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;aACX,CAAC,CAAA;YACF,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"threadActionsExecutor.test.js","sourceRoot":"","sources":["../../../../src/tests/units/services/threadActionsExecutor.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAGrB,MAAM,8DAA8D,CAAA;AAGrE,gFAAgF;AAChF,kFAAkF;AAClF,gFAAgF;AAChF,QAAQ,CAAC,sDAAsD,EAAE,GAAG,EAAE;IACpE,MAAM,YAAY,GAAoB,EAAE,CAAC,EAAE,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACf,CAAA;IAED,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,yBAAyB;YACtC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;aAChE,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;YAEhF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;YAEtF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,EACN;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,8DAA8D;gBAC9D,SAAS;gBACT,yBAAyB;aAC1B,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAA;YAErF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;aAC/D,CAAA;YAED,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;YAEtF,MAAM,oBAAoB,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAE5E,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,IAAI,EACJ;gBACE,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,sCAAsC;gBACtC,SAAS;gBACT,yBAAyB;aAC1B,EACD,WAAW,CACZ,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAqB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,WAAW;aACvB,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAErF,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;YAC3C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAChE,MAAM,OAAO,GAAqB;YAChC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,cAAc;YAC3B,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,WAAW;SACvB,CAAA;QAED,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,eAAe,GAAoB,EAAE,CAAC,EAAE,EAAE;iBAC7C,sBAAsB,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA,CAAC,CAAC,CAAC;iBAC5D,sBAAsB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAEnC,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;gBACvC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAA;YAExF,MAAM,CAAC,eAAe,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC7B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,MAAM,OAAO,GAAmB;gBAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACzC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE;gBACtC,EAAE,IAAI,EAAE,eAAe,EAAE;aAC1B,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAErF,mFAAmF;YACnF,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC5B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAqB;gBAChC,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,cAAc;gBAC3B,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,WAAW;aACvB,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;YAEhF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;YACzE,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reviewflow",
-  "version": "3.31.0",
+  "version": "3.33.0",
   "description": "AI-powered code review automation for GitLab/GitHub using Claude Code",
   "type": "module",
   "main": "dist/main/server.js",