reviewflow 3.31.0 → 3.33.0

package/dist/modules/platform-integration/interface-adapters/gateways/transport/clientIpResolver.forwardedFor.gateway.js

@@ -0,0 +1,16 @@
+export class ForwardedForClientIpResolver {
+    resolve(input) {
+        if (!input.socketTrusted) {
+            return null;
+        }
+        if (input.forwardedFor === null) {
+            return null;
+        }
+        const leftmost = input.forwardedFor.split(',')[0]?.trim();
+        if (!leftmost) {
+            return null;
+        }
+        return leftmost;
+    }
+}
+//# sourceMappingURL=clientIpResolver.forwardedFor.gateway.js.map

package/dist/modules/platform-integration/interface-adapters/gateways/transport/clientIpResolver.forwardedFor.gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientIpResolver.forwardedFor.gateway.js","sourceRoot":"","sources":["../../../../../../src/modules/platform-integration/interface-adapters/gateways/transport/clientIpResolver.forwardedFor.gateway.ts"],"names":[],"mappings":"AAKA,MAAM,OAAO,4BAA4B;IACvC,OAAO,CAAC,KAA8B;QACpC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/modules/platform-integration/services/autoExecutorActionFilter.d.ts

@@ -0,0 +1,9 @@
+import type { ReviewAction } from '../../../modules/review-execution/entities/reviewAction/reviewAction.js';
+export type ActionCapability = 'readMr' | 'postComment' | 'threadResolve' | 'revoke' | 'addLabel';
+export declare function capabilityForAction(action: ReviewAction): ActionCapability;
+export interface AutoExecutorActionFilterResult {
+    allowed: ReviewAction[];
+    dropped: ReviewAction[];
+}
+export declare function filterAutoExecutorActions(actions: ReviewAction[]): AutoExecutorActionFilterResult;
+//# sourceMappingURL=autoExecutorActionFilter.d.ts.map

package/dist/modules/platform-integration/services/autoExecutorActionFilter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorActionFilter.d.ts","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/autoExecutorActionFilter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kEAAkE,CAAA;AAGpG,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,aAAa,GAAG,eAAe,GAAG,QAAQ,GAAG,UAAU,CAAA;AAEjG,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAa1E;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,EAAE,YAAY,EAAE,CAAA;IACvB,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB;AASD,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,8BAA8B,CAajG"}

package/dist/modules/platform-integration/services/autoExecutorActionFilter.js

@@ -0,0 +1,33 @@
+import { AUTO_EXECUTOR_CAPABILITIES } from '../../../modules/platform-integration/entities/executorToken/executorCapability.js';
+export function capabilityForAction(action) {
+    switch (action.type) {
+        case 'FETCH_THREADS':
+            return 'readMr';
+        case 'POST_COMMENT':
+        case 'THREAD_REPLY':
+        case 'POST_INLINE_COMMENT':
+            return 'postComment';
+        case 'THREAD_RESOLVE':
+            return 'threadResolve';
+        case 'ADD_LABEL':
+            return 'addLabel';
+    }
+}
+function isAutoCapability(capability) {
+    return ((capability === 'readMr' || capability === 'postComment') &&
+        AUTO_EXECUTOR_CAPABILITIES.has(capability));
+}
+export function filterAutoExecutorActions(actions) {
+    const allowed = [];
+    const dropped = [];
+    for (const action of actions) {
+        if (isAutoCapability(capabilityForAction(action))) {
+            allowed.push(action);
+        }
+        else {
+            dropped.push(action);
+        }
+    }
+    return { allowed, dropped };
+}
+//# sourceMappingURL=autoExecutorActionFilter.js.map

package/dist/modules/platform-integration/services/autoExecutorActionFilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorActionFilter.js","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/autoExecutorActionFilter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,6EAA6E,CAAA;AAIxH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,QAAQ,CAAA;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc,CAAC;QACpB,KAAK,qBAAqB;YACxB,OAAO,aAAa,CAAA;QACtB,KAAK,gBAAgB;YACnB,OAAO,eAAe,CAAA;QACxB,KAAK,WAAW;YACd,OAAO,UAAU,CAAA;IACrB,CAAC;AACH,CAAC;AAOD,SAAS,gBAAgB,CAAC,UAA4B;IACpD,OAAO,CACL,CAAC,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,aAAa,CAAC;QACzD,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC,CAC3C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAuB;IAC/D,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,MAAM,OAAO,GAAmB,EAAE,CAAA;IAElC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC7B,CAAC"}

package/dist/modules/platform-integration/services/pinnedThreadFetchTarget.d.ts

@@ -0,0 +1,23 @@
+export interface PinnedThreadFetchTarget {
+    projectPath: string;
+    mrNumber: number;
+}
+interface ResolvedRepository {
+    projectPath: string;
+}
+export interface ResolvePinnedThreadFetchTargetInput {
+    payloadProjectPath: string;
+    payloadMrNumber: number;
+    findRepository: (projectPath: string) => ResolvedRepository | null | undefined;
+    gatedMrNumber: number | null;
+}
+/**
+ * Anchors the (projectPath, mrNumber) pair driving fetchThreads to a server-validated
+ * source (AC9). The forgeable webhook payload is never used as-is to widen scope:
+ * - projectPath MUST resolve to a configured repository.
+ * - mrNumber MUST equal the merge-request that passed the upstream trusted-actor gate.
+ * If either cannot be established, the action surface is empty (null, fail-closed).
+ */
+export declare function resolvePinnedThreadFetchTarget(input: ResolvePinnedThreadFetchTargetInput): PinnedThreadFetchTarget | null;
+export {};
+//# sourceMappingURL=pinnedThreadFetchTarget.d.ts.map

package/dist/modules/platform-integration/services/pinnedThreadFetchTarget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinnedThreadFetchTarget.d.ts","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/pinnedThreadFetchTarget.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,UAAU,kBAAkB;IAC1B,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,mCAAmC;IAClD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAA;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,uBAAuB,GAAG,IAAI,CAchC"}

package/dist/modules/platform-integration/services/pinnedThreadFetchTarget.js

@@ -0,0 +1,21 @@
+/**
+ * Anchors the (projectPath, mrNumber) pair driving fetchThreads to a server-validated
+ * source (AC9). The forgeable webhook payload is never used as-is to widen scope:
+ * - projectPath MUST resolve to a configured repository.
+ * - mrNumber MUST equal the merge-request that passed the upstream trusted-actor gate.
+ * If either cannot be established, the action surface is empty (null, fail-closed).
+ */
+export function resolvePinnedThreadFetchTarget(input) {
+    const repository = input.findRepository(input.payloadProjectPath);
+    if (!repository) {
+        return null;
+    }
+    if (input.gatedMrNumber === null || input.payloadMrNumber !== input.gatedMrNumber) {
+        return null;
+    }
+    return {
+        projectPath: repository.projectPath,
+        mrNumber: input.gatedMrNumber,
+    };
+}
+//# sourceMappingURL=pinnedThreadFetchTarget.js.map

package/dist/modules/platform-integration/services/pinnedThreadFetchTarget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinnedThreadFetchTarget.js","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/pinnedThreadFetchTarget.ts"],"names":[],"mappings":"AAgBA;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;IACjE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC;QAClF,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,QAAQ,EAAE,KAAK,CAAC,aAAa;KAC9B,CAAA;AACH,CAAC"}

package/dist/modules/platform-integration/services/scopedExecutorEnvironment.d.ts

@@ -0,0 +1,21 @@
+export declare const EXECUTOR_TOKEN_ENV_KEY = "REVIEWFLOW_EXECUTOR_TOKEN";
+export declare const ENV_ALLOWLIST: readonly ["PATH", "HOME", "GLAB_CONFIG_DIR", "LANG"];
+export type AllowlistedEnvKey = (typeof ENV_ALLOWLIST)[number];
+export type ScopedExecutorEnv = Partial<Record<AllowlistedEnvKey, string>>;
+export declare class MissingExecutorTokenError extends Error {
+    constructor();
+}
+export interface ExecutorFileWriter {
+    write(path: string, contents: string): void;
+}
+export interface BuildScopedExecutorEnvironmentInput {
+    parentEnv: Record<string, string | undefined>;
+    isolatedDir: string;
+    fileWriter: ExecutorFileWriter;
+}
+export interface ScopedExecutorEnvironment {
+    env: ScopedExecutorEnv;
+    configFilePath: string;
+}
+export declare function buildScopedExecutorEnvironment(input: BuildScopedExecutorEnvironmentInput): ScopedExecutorEnvironment;
+//# sourceMappingURL=scopedExecutorEnvironment.d.ts.map

package/dist/modules/platform-integration/services/scopedExecutorEnvironment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedExecutorEnvironment.d.ts","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/scopedExecutorEnvironment.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,8BAA8B,CAAA;AAEjE,eAAO,MAAM,aAAa,sDAAuD,CAAA;AAEjF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAA;AAE1E,qBAAa,yBAA0B,SAAQ,KAAK;;CAOnD;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5C;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,kBAAkB,CAAA;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,iBAAiB,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;CACvB;AAYD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,yBAAyB,CAwB3B"}

package/dist/modules/platform-integration/services/scopedExecutorEnvironment.js

@@ -0,0 +1,39 @@
+export const EXECUTOR_TOKEN_ENV_KEY = 'REVIEWFLOW_EXECUTOR_TOKEN';
+export const ENV_ALLOWLIST = ['PATH', 'HOME', 'GLAB_CONFIG_DIR', 'LANG'];
+export class MissingExecutorTokenError extends Error {
+    constructor() {
+        super(`Executor service token (${EXECUTOR_TOKEN_ENV_KEY}) is absent or empty; refusing to start with the ambient token.`);
+        this.name = 'MissingExecutorTokenError';
+    }
+}
+function renderGlabConfig(token) {
+    return [
+        'hosts:',
+        '  gitlab.com:',
+        `    token: ${token}`,
+        '    api_protocol: https',
+        '',
+    ].join('\n');
+}
+export function buildScopedExecutorEnvironment(input) {
+    const token = input.parentEnv[EXECUTOR_TOKEN_ENV_KEY]?.trim();
+    if (!token) {
+        throw new MissingExecutorTokenError();
+    }
+    const home = `${input.isolatedDir}/home`;
+    const glabConfigDir = `${input.isolatedDir}/glab-config`;
+    const env = {
+        HOME: home,
+        GLAB_CONFIG_DIR: glabConfigDir,
+    };
+    const path = input.parentEnv.PATH;
+    if (path)
+        env.PATH = path;
+    const lang = input.parentEnv.LANG;
+    if (lang)
+        env.LANG = lang;
+    const configFilePath = `${glabConfigDir}/glab-cli/config.yml`;
+    input.fileWriter.write(configFilePath, renderGlabConfig(token));
+    return { env, configFilePath };
+}
+//# sourceMappingURL=scopedExecutorEnvironment.js.map

package/dist/modules/platform-integration/services/scopedExecutorEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedExecutorEnvironment.js","sourceRoot":"","sources":["../../../../src/modules/platform-integration/services/scopedExecutorEnvironment.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAA2B,CAAA;AAEjE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAU,CAAA;AAMjF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CACH,2BAA2B,sBAAsB,iEAAiE,CACnH,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAA;IACzC,CAAC;CACF;AAiBD,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO;QACL,QAAQ;QACR,eAAe;QACf,cAAc,KAAK,EAAE;QACrB,yBAAyB;QACzB,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAA;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,yBAAyB,EAAE,CAAA;IACvC,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,OAAO,CAAA;IACxC,MAAM,aAAa,GAAG,GAAG,KAAK,CAAC,WAAW,cAAc,CAAA;IAExD,MAAM,GAAG,GAAsB;QAC7B,IAAI,EAAE,IAAI;QACV,eAAe,EAAE,aAAa;KAC/B,CAAA;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAA;IACjC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAA;IACjC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAA;IAEzB,MAAM,cAAc,GAAG,GAAG,aAAa,sBAAsB,CAAA;IAC7D,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAE/D,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,CAAA;AAChC,CAAC"}

package/dist/modules/platform-integration/usecases/isTrustedActor.usecase.d.ts

@@ -0,0 +1,17 @@
+import type { MemberAccessGateway } from '../../../modules/platform-integration/entities/memberAccess/memberAccess.gateway.js';
+export interface IsTrustedActorInput {
+    username: string;
+    projectPath: string;
+}
+/**
+ * Decides whether the trigger actor is a trusted (Developer+) member of the target
+ * project (SPEC-197). Consumes the fail-closed MemberAccessGateway: any resolution
+ * failure or sub-Developer level collapses to non-trusted, so a thrown lookup never
+ * widens trust.
+ */
+export declare class IsTrustedActorUseCase {
+    private readonly memberAccessGateway;
+    constructor(memberAccessGateway: MemberAccessGateway);
+    execute(input: IsTrustedActorInput): Promise<boolean>;
+}
+//# sourceMappingURL=isTrustedActor.usecase.d.ts.map

package/dist/modules/platform-integration/usecases/isTrustedActor.usecase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isTrustedActor.usecase.d.ts","sourceRoot":"","sources":["../../../../src/modules/platform-integration/usecases/isTrustedActor.usecase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AAGxH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;gBAAnB,mBAAmB,EAAE,mBAAmB;IAE/D,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;CAQ5D"}

package/dist/modules/platform-integration/usecases/isTrustedActor.usecase.js

@@ -0,0 +1,23 @@
+import { isDeveloperOrAbove } from '../../../modules/platform-integration/entities/memberAccess/memberAccess.js';
+/**
+ * Decides whether the trigger actor is a trusted (Developer+) member of the target
+ * project (SPEC-197). Consumes the fail-closed MemberAccessGateway: any resolution
+ * failure or sub-Developer level collapses to non-trusted, so a thrown lookup never
+ * widens trust.
+ */
+export class IsTrustedActorUseCase {
+    memberAccessGateway;
+    constructor(memberAccessGateway) {
+        this.memberAccessGateway = memberAccessGateway;
+    }
+    async execute(input) {
+        try {
+            const accessLevel = await this.memberAccessGateway.resolve(input.projectPath, input.username);
+            return isDeveloperOrAbove(accessLevel);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=isTrustedActor.usecase.js.map

package/dist/modules/platform-integration/usecases/isTrustedActor.usecase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isTrustedActor.usecase.js","sourceRoot":"","sources":["../../../../src/modules/platform-integration/usecases/isTrustedActor.usecase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sEAAsE,CAAC;AAO1G;;;;;GAKG;AACH,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,mBAAwC;QAAxC,wBAAmB,GAAnB,mBAAmB,CAAqB;IAAG,CAAC;IAEzE,KAAK,CAAC,OAAO,CAAC,KAA0B;QACtC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9F,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/modules/platform-integration/usecases/transport/evaluateTransport.usecase.d.ts

@@ -0,0 +1,3 @@
+import type { TransportContext, TransportDecision } from '../../../../modules/platform-integration/entities/transport/transportContext.js';
+export declare function evaluateTransport(context: TransportContext): TransportDecision;
+//# sourceMappingURL=evaluateTransport.usecase.d.ts.map

package/dist/modules/platform-integration/usecases/transport/evaluateTransport.usecase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateTransport.usecase.d.ts","sourceRoot":"","sources":["../../../../../src/modules/platform-integration/usecases/transport/evaluateTransport.usecase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,uEAAuE,CAAC;AAK/E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,CAmB9E"}

package/dist/modules/platform-integration/usecases/transport/evaluateTransport.usecase.js

@@ -0,0 +1,18 @@
+import { isIpInCidr } from '../../../../modules/platform-integration/entities/transport/cidr.js';
+const REJECT_STATUS = 403;
+export function evaluateTransport(context) {
+    if (context.directSocketAddress !== context.trustedHopAddress) {
+        return { kind: 'reject', status: REJECT_STATUS, reason: 'untrusted-socket' };
+    }
+    if (context.forwardedProto !== 'https') {
+        return { kind: 'reject', status: REJECT_STATUS, reason: 'non-https' };
+    }
+    const clientIp = context.resolvedClientIp;
+    const allowed = clientIp !== null &&
+        context.allowedCidrRanges.some((range) => isIpInCidr(clientIp, range));
+    if (!allowed) {
+        return { kind: 'reject', status: REJECT_STATUS, reason: 'off-allowlist' };
+    }
+    return { kind: 'accept' };
+}
+//# sourceMappingURL=evaluateTransport.usecase.js.map

package/dist/modules/platform-integration/usecases/transport/evaluateTransport.usecase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateTransport.usecase.js","sourceRoot":"","sources":["../../../../../src/modules/platform-integration/usecases/transport/evaluateTransport.usecase.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,2DAA2D,CAAC;AAEvF,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,iBAAiB,CAAC,OAAyB;IACzD,IAAI,OAAO,CAAC,mBAAmB,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC1C,MAAM,OAAO,GACX,QAAQ,KAAK,IAAI;QACjB,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAEzE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC"}

package/dist/modules/review-execution/entities/actionProvenance/actionProvenance.d.ts

@@ -0,0 +1,9 @@
+export type Provenance = 'trusted' | 'untrusted';
+/**
+ * Fail-closed provenance resolver.
+ * Only the exact canonical token resolves to `trusted`; every other value
+ * (including casing, padding, non-string types, null/undefined) is `untrusted`.
+ * `trusted` is NEVER derived from a payload field.
+ */
+export declare function resolveProvenance(value: unknown): Provenance;
+//# sourceMappingURL=actionProvenance.d.ts.map

package/dist/modules/review-execution/entities/actionProvenance/actionProvenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionProvenance.d.ts","sourceRoot":"","sources":["../../../../../src/modules/review-execution/entities/actionProvenance/actionProvenance.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,WAAW,CAAA;AAIhD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE5D"}

package/dist/modules/review-execution/entities/actionProvenance/actionProvenance.js

@@ -0,0 +1,11 @@
+const CANONICAL_TRUSTED = 'trusted';
+/**
+ * Fail-closed provenance resolver.
+ * Only the exact canonical token resolves to `trusted`; every other value
+ * (including casing, padding, non-string types, null/undefined) is `untrusted`.
+ * `trusted` is NEVER derived from a payload field.
+ */
+export function resolveProvenance(value) {
+    return value === CANONICAL_TRUSTED ? 'trusted' : 'untrusted';
+}
+//# sourceMappingURL=actionProvenance.js.map

package/dist/modules/review-execution/entities/actionProvenance/actionProvenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionProvenance.js","sourceRoot":"","sources":["../../../../../src/modules/review-execution/entities/actionProvenance/actionProvenance.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,SAAS,CAAA;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAA;AAC9D,CAAC"}

package/dist/modules/review-execution/entities/threadInventory/threadInventory.gateway.d.ts

@@ -0,0 +1,13 @@
+export interface ThreadInventoryPage {
+    page: number;
+    totalPages: number;
+    threadIds: string[];
+}
+/**
+ * Authenticated, page-by-page access to the current MR's thread inventory.
+ * Each page carries its own `totalPages` so the resolver can prove completeness.
+ */
+export interface ThreadInventoryGateway {
+    fetchPage(projectPath: string, mergeRequestNumber: number, page: number): ThreadInventoryPage;
+}
+//# sourceMappingURL=threadInventory.gateway.d.ts.map

package/dist/modules/review-execution/entities/threadInventory/threadInventory.gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadInventory.gateway.d.ts","sourceRoot":"","sources":["../../../../../src/modules/review-execution/entities/threadInventory/threadInventory.gateway.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAAA;CAC9F"}

package/dist/modules/review-execution/entities/threadInventory/threadInventory.gateway.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=threadInventory.gateway.js.map

package/dist/modules/review-execution/entities/threadInventory/threadInventory.gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadInventory.gateway.js","sourceRoot":"","sources":["../../../../../src/modules/review-execution/entities/threadInventory/threadInventory.gateway.ts"],"names":[],"mappings":""}

package/dist/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.d.ts

@@ -0,0 +1,14 @@
+import type { ThreadInventoryGateway, ThreadInventoryPage } from '../../../../modules/review-execution/entities/threadInventory/threadInventory.gateway.js';
+export type CommandExecutor = (command: string) => string;
+/**
+ * Authenticated GitLab Threads (discussions) inventory access.
+ *
+ * Issues `glab api -i` so the response carries the `X-Total-Pages` header used by the
+ * resolver to prove pagination completeness (complete-or-empty, fail-closed).
+ */
+export declare class GitLabThreadInventoryGateway implements ThreadInventoryGateway {
+    private readonly executor;
+    constructor(executor: CommandExecutor);
+    fetchPage(projectPath: string, mergeRequestNumber: number, page: number): ThreadInventoryPage;
+}
+//# sourceMappingURL=threadInventory.gitlab.gateway.d.ts.map

package/dist/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadInventory.gitlab.gateway.d.ts","sourceRoot":"","sources":["../../../../../src/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,gFAAgF,CAAA;AAEvF,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;AAazD;;;;;GAKG;AACH,qBAAa,4BAA6B,YAAW,sBAAsB;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,eAAe;IAEtD,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,mBAAmB;CAkB9F"}

package/dist/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.js

@@ -0,0 +1,31 @@
+const HEADER_BODY_SEPARATOR = '\r\n\r\n';
+function parseTotalPages(headers) {
+    const match = headers.match(/x-total-pages:\s*(\d+)/i);
+    return match ? Number.parseInt(match[1], 10) : 1;
+}
+/**
+ * Authenticated GitLab Threads (discussions) inventory access.
+ *
+ * Issues `glab api -i` so the response carries the `X-Total-Pages` header used by the
+ * resolver to prove pagination completeness (complete-or-empty, fail-closed).
+ */
+export class GitLabThreadInventoryGateway {
+    executor;
+    constructor(executor) {
+        this.executor = executor;
+    }
+    fetchPage(projectPath, mergeRequestNumber, page) {
+        const encodedProject = projectPath.replace(/\//g, '%2F');
+        const raw = this.executor(`glab api -i "projects/${encodedProject}/merge_requests/${mergeRequestNumber}/discussions?page=${page}&per_page=100"`);
+        const separatorIndex = raw.indexOf(HEADER_BODY_SEPARATOR);
+        const headers = separatorIndex === -1 ? '' : raw.slice(0, separatorIndex);
+        const body = separatorIndex === -1 ? raw : raw.slice(separatorIndex + HEADER_BODY_SEPARATOR.length);
+        const discussions = JSON.parse(body);
+        return {
+            page,
+            totalPages: parseTotalPages(headers),
+            threadIds: discussions.map(discussion => discussion.id),
+        };
+    }
+}
+//# sourceMappingURL=threadInventory.gitlab.gateway.js.map

package/dist/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadInventory.gitlab.gateway.js","sourceRoot":"","sources":["../../../../../src/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.ts"],"names":[],"mappings":"AAWA,MAAM,qBAAqB,GAAG,UAAU,CAAA;AAExC,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;IACtD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA4B;IACV;IAA7B,YAA6B,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAE1D,SAAS,CAAC,WAAmB,EAAE,kBAA0B,EAAE,IAAY;QACrE,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CACvB,yBAAyB,cAAc,mBAAmB,kBAAkB,qBAAqB,IAAI,gBAAgB,CACtH,CAAA;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACzD,MAAM,OAAO,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAA;QACzE,MAAM,IAAI,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;QAEnG,MAAM,WAAW,GAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAExD,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC;YACpC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;SACxD,CAAA;IACH,CAAC;CACF"}

package/dist/modules/review-execution/services/constrainActionSurface.d.ts

@@ -0,0 +1,19 @@
+import type { ReviewAction } from '../../../modules/review-execution/entities/reviewAction/reviewAction.js';
+import type { Provenance } from '../../../modules/review-execution/entities/actionProvenance/actionProvenance.js';
+export interface ActionSurfaceConstraints {
+    provenance: Provenance;
+    threadInventory: ReadonlySet<string>;
+}
+/**
+ * Bounds the executable write surface derived from LLM output.
+ *
+ * - `POST_COMMENT` is always allowed (the only untrusted write verb).
+ * - `FETCH_THREADS` is allowed only for `trusted` provenance (read-amplification gate).
+ * - `THREAD_RESOLVE` / `THREAD_REPLY` require BOTH `trusted` provenance AND the (trimmed)
+ *   target id being a member of the authenticated MR thread inventory.
+ * - Any other verb is dropped.
+ *
+ * Membership is computed from the passed inventory only, never from token text.
+ */
+export declare function constrainActionSurface(actions: ReviewAction[], constraints: ActionSurfaceConstraints): ReviewAction[];
+//# sourceMappingURL=constrainActionSurface.d.ts.map

package/dist/modules/review-execution/services/constrainActionSurface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constrainActionSurface.d.ts","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/constrainActionSurface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kEAAkE,CAAA;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0EAA0E,CAAA;AAE1G,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,UAAU,CAAA;IACtB,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CACrC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,YAAY,EAAE,EACvB,WAAW,EAAE,wBAAwB,GACpC,YAAY,EAAE,CAwChB"}

package/dist/modules/review-execution/services/constrainActionSurface.js

@@ -0,0 +1,49 @@
+/**
+ * Bounds the executable write surface derived from LLM output.
+ *
+ * - `POST_COMMENT` is always allowed (the only untrusted write verb).
+ * - `FETCH_THREADS` is allowed only for `trusted` provenance (read-amplification gate).
+ * - `THREAD_RESOLVE` / `THREAD_REPLY` require BOTH `trusted` provenance AND the (trimmed)
+ *   target id being a member of the authenticated MR thread inventory.
+ * - Any other verb is dropped.
+ *
+ * Membership is computed from the passed inventory only, never from token text.
+ */
+export function constrainActionSurface(actions, constraints) {
+    const { provenance, threadInventory } = constraints;
+    const isTrusted = provenance === 'trusted';
+    const constrained = [];
+    for (const action of actions) {
+        switch (action.type) {
+            case 'POST_COMMENT':
+                constrained.push(action);
+                break;
+            case 'FETCH_THREADS':
+                if (isTrusted)
+                    constrained.push(action);
+                break;
+            case 'THREAD_RESOLVE': {
+                if (!isTrusted)
+                    break;
+                const target = action.threadId.trim();
+                if (threadInventory.has(target)) {
+                    constrained.push({ ...action, threadId: target });
+                }
+                break;
+            }
+            case 'THREAD_REPLY': {
+                if (!isTrusted)
+                    break;
+                const target = action.threadId.trim();
+                if (threadInventory.has(target)) {
+                    constrained.push({ ...action, threadId: target });
+                }
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    return constrained;
+}
+//# sourceMappingURL=constrainActionSurface.js.map

package/dist/modules/review-execution/services/constrainActionSurface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constrainActionSurface.js","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/constrainActionSurface.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,WAAqC;IAErC,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,WAAW,CAAA;IACnD,MAAM,SAAS,GAAG,UAAU,KAAK,SAAS,CAAA;IAE1C,MAAM,WAAW,GAAmB,EAAE,CAAA;IAEtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,cAAc;gBACjB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACxB,MAAK;YAEP,KAAK,eAAe;gBAClB,IAAI,SAAS;oBAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;gBACvC,MAAK;YAEP,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,SAAS;oBAAE,MAAK;gBACrB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;gBACrC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;gBACnD,CAAC;gBACD,MAAK;YACP,CAAC;YAED,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,IAAI,CAAC,SAAS;oBAAE,MAAK;gBACrB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;gBACrC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;gBACnD,CAAC;gBACD,MAAK;YACP,CAAC;YAED;gBACE,MAAK;QACT,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/modules/review-execution/services/contextActionsExecutor.d.ts

@@ -1,6 +1,7 @@
 import type { ReviewContext } from '../../../modules/review-execution/entities/reviewContext/reviewContext.js';
 import type { ReviewAction } from '../../../modules/review-execution/entities/reviewAction/reviewAction.js';
 import type { ExecutionResult, CommandExecutor } from '../../../modules/review-execution/entities/reviewAction/reviewAction.gateway.js';
+import type { NoteCommentPostGateway } from '../../../modules/platform-integration/entities/noteComment/noteCommentPost.gateway.js';
 /**
  * @deprecated Use ReviewContextAction from reviewAction entity instead
  */
@@ -15,5 +16,5 @@ interface Logger {
 /**
  * @deprecated Use GitLabReviewActionCliGateway or GitHubReviewActionCliGateway directly
  */
-export declare function executeActionsFromContext(context: ReviewContext, localPath: string, _logger: Logger, executor: CommandExecutor, baseUrl?: string | null): Promise<ExecutionResult>;
+export declare function executeActionsFromContext(context: ReviewContext, localPath: string, logger: Logger, executor: CommandExecutor, baseUrl?: string | null, postGateway?: NoteCommentPostGateway | null): Promise<ExecutionResult>;
 //# sourceMappingURL=contextActionsExecutor.d.ts.map

package/dist/modules/review-execution/services/contextActionsExecutor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contextActionsExecutor.d.ts","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/contextActionsExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oEAAoE,CAAA;AACvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kEAAkE,CAAA;AAGpG,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0EAA0E,CAAA;AAEhI;;GAEG;AACH,YAAY,EAAE,YAAY,IAAI,mBAAmB,EAAE,CAAA;AAEnD,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAEhD,UAAU,MAAM;IACd,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAC1C;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE,MAAM,GAAG,IAAW,GAC5B,OAAO,CAAC,eAAe,CAAC,CAe1B"}
+{"version":3,"file":"contextActionsExecutor.d.ts","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/contextActionsExecutor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oEAAoE,CAAA;AACvG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kEAAkE,CAAA;AAGpG,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,0EAA0E,CAAA;AAChI,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gFAAgF,CAAA;AAI5H;;GAEG;AACH,YAAY,EAAE,YAAY,IAAI,mBAAmB,EAAE,CAAA;AAEnD,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;AAEhD,UAAU,MAAM;IACd,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACzC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAC1C;AAED;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,aAAa,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE,MAAM,GAAG,IAAW,EAC7B,WAAW,GAAE,sBAAsB,GAAG,IAAW,GAChD,OAAO,CAAC,eAAe,CAAC,CA4C1B"}

package/dist/modules/review-execution/services/contextActionsExecutor.js

@@ -1,9 +1,11 @@
 import { GitLabReviewActionCliGateway } from '../../../modules/review-execution/interface-adapters/gateways/cli/reviewAction.gitlab.cli.gateway.js';
 import { GitHubReviewActionCliGateway } from '../../../modules/review-execution/interface-adapters/gateways/cli/reviewAction.github.cli.gateway.js';
+import { executePublicOutput, isPublicOutputAction } from '../../../modules/review-execution/services/publicOutputExecutor.js';
+import { filterAutoExecutorActions } from '../../../modules/platform-integration/services/autoExecutorActionFilter.js';
 /**
  * @deprecated Use GitLabReviewActionCliGateway or GitHubReviewActionCliGateway directly
  */
-export async function executeActionsFromContext(context, localPath, _logger, executor, baseUrl = null) {
+export async function executeActionsFromContext(context, localPath, logger, executor, baseUrl = null, postGateway = null) {
     const gatewayContext = {
         projectPath: context.projectPath,
         mrNumber: context.mergeRequestNumber,
@@ -11,9 +13,25 @@ export async function executeActionsFromContext(context, localPath, _logger, exe
         diffMetadata: context.diffMetadata,
         baseUrl,
     };
+    const { allowed, dropped } = filterAutoExecutorActions(context.actions);
+    if (dropped.length > 0) {
+        logger.warn({ droppedTypes: dropped.map(action => action.type) }, 'Auto executor dropped write-capable actions outside the read+postComment capability set');
+    }
     const gateway = context.platform === 'gitlab'
         ? new GitLabReviewActionCliGateway(executor)
         : new GitHubReviewActionCliGateway(executor);
-    return gateway.execute(context.actions, gatewayContext);
+    if (postGateway === null) {
+        return gateway.execute(allowed, gatewayContext);
+    }
+    const publicOutputActions = allowed.filter(isPublicOutputAction);
+    const remainingActions = allowed.filter(action => !isPublicOutputAction(action));
+    await executePublicOutput(publicOutputActions, { projectPath: context.projectPath, mrNumber: context.mergeRequestNumber }, postGateway);
+    const cliResult = await gateway.execute(remainingActions, gatewayContext);
+    return {
+        total: allowed.length,
+        succeeded: cliResult.succeeded + publicOutputActions.length,
+        failed: cliResult.failed,
+        skipped: cliResult.skipped,
+    };
 }
 //# sourceMappingURL=contextActionsExecutor.js.map

package/dist/modules/review-execution/services/contextActionsExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"contextActionsExecutor.js","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/contextActionsExecutor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,+FAA+F,CAAA;AAC5I,OAAO,EAAE,4BAA4B,EAAE,MAAM,+FAA+F,CAAA;AAiB5I;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAsB,EACtB,SAAiB,EACjB,OAAe,EACf,QAAyB,EACzB,UAAyB,IAAI;IAE7B,MAAM,cAAc,GAAG;QACrB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,kBAAkB;QACpC,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO;KACR,CAAA;IAED,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC,CAAA;IAEhD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAyB,EAAE,cAAc,CAAC,CAAA;AAC3E,CAAC"}
+{"version":3,"file":"contextActionsExecutor.js","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/contextActionsExecutor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,+FAA+F,CAAA;AAC5I,OAAO,EAAE,4BAA4B,EAAE,MAAM,+FAA+F,CAAA;AAG5I,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAA;AACvH,OAAO,EAAE,yBAAyB,EAAE,MAAM,qEAAqE,CAAA;AAgB/G;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAsB,EACtB,SAAiB,EACjB,MAAc,EACd,QAAyB,EACzB,UAAyB,IAAI,EAC7B,cAA6C,IAAI;IAEjD,MAAM,cAAc,GAAG;QACrB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,kBAAkB;QACpC,SAAS;QACT,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,OAAO;KACR,CAAA;IAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,CAAC,OAAyB,CAAC,CAAA;IAEzF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EACpD,yFAAyF,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,IAAI,4BAA4B,CAAC,QAAQ,CAAC,CAAA;IAEhD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACjD,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;IAChE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAA;IAEhF,MAAM,mBAAmB,CACvB,mBAAmB,EACnB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,kBAAkB,EAAE,EAC1E,WAAW,CACZ,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAA;IAEzE,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,SAAS,EAAE,SAAS,CAAC,SAAS,GAAG,mBAAmB,CAAC,MAAM;QAC3D,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAA;AACH,CAAC"}

package/dist/modules/review-execution/services/dispatchConstrainedActions.d.ts

@@ -0,0 +1,30 @@
+import type { ReviewAction } from '../../../modules/review-execution/entities/reviewAction/reviewAction.js';
+import type { Provenance } from '../../../modules/review-execution/entities/actionProvenance/actionProvenance.js';
+import type { ThreadInventoryGateway } from '../../../modules/review-execution/entities/threadInventory/threadInventory.gateway.js';
+import { type ExecutionContext, type ExecutionResult, type CommandExecutor } from '../../../modules/review-execution/services/threadActionsExecutor.js';
+import type { NoteCommentPostGateway } from '../../../modules/platform-integration/entities/noteComment/noteCommentPost.gateway.js';
+interface DispatchLogger {
+    info: (obj: object, message: string) => void;
+    warn: (obj: object, message: string) => void;
+    error: (obj: object, message: string) => void;
+    debug: (obj: object, message: string) => void;
+}
+export interface DispatchOptions {
+    context: ExecutionContext;
+    provenance: Provenance;
+    inventoryGateway: ThreadInventoryGateway;
+    logger: DispatchLogger;
+    executor: CommandExecutor;
+    postGateway?: NoteCommentPostGateway | null;
+}
+/**
+ * Single chokepoint between parsed LLM actions and live write commands.
+ *
+ * Resolves the authenticated MR thread inventory (fail-closed), bounds the action
+ * surface against provenance + that inventory, then dispatches only the surviving
+ * actions to the executor. Forged or out-of-MR thread ids never reach a live write.
+ * Public-output verbs that survive are routed through the scanned post sink.
+ */
+export declare function dispatchConstrainedActions(actions: ReviewAction[], options: DispatchOptions): Promise<ExecutionResult>;
+export {};
+//# sourceMappingURL=dispatchConstrainedActions.d.ts.map

package/dist/modules/review-execution/services/dispatchConstrainedActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchConstrainedActions.d.ts","sourceRoot":"","sources":["../../../../src/modules/review-execution/services/dispatchConstrainedActions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kEAAkE,CAAA;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0EAA0E,CAAA;AAC1G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gFAAgF,CAAA;AAG5H,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,8DAA8D,CAAA;AACrE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gFAAgF,CAAA;AAE5H,UAAU,cAAc;IACtB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC5C,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7C,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,gBAAgB,EAAE,sBAAsB,CAAA;IACxC,MAAM,EAAE,cAAc,CAAA;IACtB,QAAQ,EAAE,eAAe,CAAA;IACzB,WAAW,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAA;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,YAAY,EAAE,EACvB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,eAAe,CAAC,CAc1B"}