reviewflow 3.32.0 → 3.34.0

package/dist/tests/units/modules/platform-integration/interface-adapters/transport/clientIpResolver.forwardedFor.gateway.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientIpResolver.forwardedFor.gateway.test.js","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/platform-integration/interface-adapters/transport/clientIpResolver.forwardedFor.gateway.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,+GAA+G,CAAC;AAE7J,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,QAAQ,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;YAChC,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,wBAAwB;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;YAChC,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,wBAAwB;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAEpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC;YAChC,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transportGuard.middleware.test.d.ts.map

package/dist/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportGuard.middleware.test.d.ts","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.js

@@ -0,0 +1,66 @@
+import { describe, it, expect } from 'vitest';
+import { transportGuardMiddleware } from '../../../../../../modules/platform-integration/interface-adapters/controllers/webhook/transportGuard.middleware.js';
+import { ForwardedForClientIpResolver } from '../../../../../../modules/platform-integration/interface-adapters/gateways/transport/clientIpResolver.forwardedFor.gateway.js';
+const TRUSTED_HOP = '127.0.0.1';
+const config = {
+    trustedHopAddress: TRUSTED_HOP,
+    allowedCidrRanges: ['10.20.30.0/24'],
+};
+class FakeResponse {
+    statusCode = null;
+    sent = false;
+    code(status) {
+        this.statusCode = status;
+        return this;
+    }
+    send() {
+        this.sent = true;
+        return this;
+    }
+}
+function buildRequest(overrides = {}) {
+    return {
+        socket: { remoteAddress: overrides.remoteAddress ?? TRUSTED_HOP },
+        headers: {
+            'x-forwarded-proto': overrides.proto ?? 'https',
+            'x-forwarded-for': overrides.forwardedFor ?? '10.20.30.40, 127.0.0.1',
+        },
+    };
+}
+describe('transportGuardMiddleware (AC5)', () => {
+    it('calls next on a fully valid transport and never sends a rejection', () => {
+        let nextCalled = false;
+        const request = buildRequest();
+        const reply = new FakeResponse();
+        transportGuardMiddleware({ request, reply, next: () => { nextCalled = true; }, resolver: new ForwardedForClientIpResolver() }, config);
+        expect(nextCalled).toBe(true);
+        expect(reply.statusCode).toBeNull();
+        expect(reply.sent).toBe(false);
+    });
+    it('rejects with 403 and never calls next when the socket is untrusted', () => {
+        let nextCalled = false;
+        const request = buildRequest({ remoteAddress: '203.0.113.7' });
+        const reply = new FakeResponse();
+        transportGuardMiddleware({ request, reply, next: () => { nextCalled = true; }, resolver: new ForwardedForClientIpResolver() }, config);
+        expect(nextCalled).toBe(false);
+        expect(reply.statusCode).toBe(403);
+        expect(reply.sent).toBe(true);
+    });
+    it('rejects with 403 when the forwarded protocol is not https', () => {
+        let nextCalled = false;
+        const request = buildRequest({ proto: 'http' });
+        const reply = new FakeResponse();
+        transportGuardMiddleware({ request, reply, next: () => { nextCalled = true; }, resolver: new ForwardedForClientIpResolver() }, config);
+        expect(nextCalled).toBe(false);
+        expect(reply.statusCode).toBe(403);
+    });
+    it('rejects with 403 when the resolved client ip is off the allowlist', () => {
+        let nextCalled = false;
+        const request = buildRequest({ forwardedFor: '192.168.1.1' });
+        const reply = new FakeResponse();
+        transportGuardMiddleware({ request, reply, next: () => { nextCalled = true; }, resolver: new ForwardedForClientIpResolver() }, config);
+        expect(nextCalled).toBe(false);
+        expect(reply.statusCode).toBe(403);
+    });
+});
+//# sourceMappingURL=transportGuard.middleware.test.js.map

package/dist/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportGuard.middleware.test.js","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/platform-integration/interface-adapters/transport/transportGuard.middleware.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,oGAAoG,CAAC;AAC9I,OAAO,EAAE,4BAA4B,EAAE,MAAM,+GAA+G,CAAC;AAG7J,MAAM,WAAW,GAAG,WAAW,CAAC;AAEhC,MAAM,MAAM,GAAyB;IACnC,iBAAiB,EAAE,WAAW;IAC9B,iBAAiB,EAAE,CAAC,eAAe,CAAC;CACrC,CAAC;AAOF,MAAM,YAAY;IAChB,UAAU,GAAkB,IAAI,CAAC;IACjC,IAAI,GAAG,KAAK,CAAC;IAEb,IAAI,CAAC,MAAc;QACjB,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,YAAqF,EAAE;IAC3G,OAAO;QACL,MAAM,EAAE,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,WAAW,EAAE;QACjE,OAAO,EAAE;YACP,mBAAmB,EAAE,SAAS,CAAC,KAAK,IAAI,OAAO;YAC/C,iBAAiB,EAAE,SAAS,CAAC,YAAY,IAAI,wBAAwB;SACtE;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,wBAAwB,CACtB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,4BAA4B,EAAE,EAAE,EACpG,MAAM,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,wBAAwB,CACtB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,4BAA4B,EAAE,EAAE,EACpG,MAAM,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,wBAAwB,CACtB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,4BAA4B,EAAE,EAAE,EACpG,MAAM,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,wBAAwB,CACtB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,4BAA4B,EAAE,EAAE,EACpG,MAAM,CACP,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=autoExecutorActionFilter.test.d.ts.map

package/dist/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorActionFilter.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.js

@@ -0,0 +1,38 @@
+import { describe, it, expect } from 'vitest';
+import { filterAutoExecutorActions, capabilityForAction, } from '../../../../../modules/platform-integration/services/autoExecutorActionFilter.js';
+describe('auto executor action filter (AC6/AC7)', () => {
+    it('maps each action type to its required capability (AC5)', () => {
+        expect(capabilityForAction({ type: 'FETCH_THREADS' })).toBe('readMr');
+        expect(capabilityForAction({ type: 'POST_COMMENT', body: 'x' })).toBe('postComment');
+        expect(capabilityForAction({ type: 'THREAD_REPLY', threadId: '1', message: 'x' })).toBe('postComment');
+        expect(capabilityForAction({ type: 'POST_INLINE_COMMENT', filePath: 'a', line: 1, body: 'x' })).toBe('postComment');
+        expect(capabilityForAction({ type: 'THREAD_RESOLVE', threadId: '1' })).toBe('threadResolve');
+        expect(capabilityForAction({ type: 'ADD_LABEL', label: 'x' })).toBe('addLabel');
+    });
+    it('AC6: drops THREAD_RESOLVE from the auto action set', () => {
+        const actions = [
+            { type: 'POST_COMMENT', body: 'hello' },
+            { type: 'THREAD_RESOLVE', threadId: '42' },
+        ];
+        const { allowed, dropped } = filterAutoExecutorActions(actions);
+        expect(allowed).toEqual([{ type: 'POST_COMMENT', body: 'hello' }]);
+        expect(dropped).toEqual([{ type: 'THREAD_RESOLVE', threadId: '42' }]);
+    });
+    it('AC7: keeps POST_COMMENT and FETCH_THREADS, drops THREAD_RESOLVE, no throw', () => {
+        const actions = [
+            { type: 'POST_COMMENT', body: 'one' },
+            { type: 'THREAD_RESOLVE', threadId: '7' },
+            { type: 'FETCH_THREADS' },
+        ];
+        const { allowed, dropped } = filterAutoExecutorActions(actions);
+        expect(allowed).toEqual([{ type: 'POST_COMMENT', body: 'one' }, { type: 'FETCH_THREADS' }]);
+        expect(dropped).toEqual([{ type: 'THREAD_RESOLVE', threadId: '7' }]);
+    });
+    it('AC6: drops ADD_LABEL since it exceeds the read+postComment set', () => {
+        const actions = [{ type: 'ADD_LABEL', label: 'reviewed' }];
+        const { allowed, dropped } = filterAutoExecutorActions(actions);
+        expect(allowed).toEqual([]);
+        expect(dropped).toEqual([{ type: 'ADD_LABEL', label: 'reviewed' }]);
+    });
+});
+//# sourceMappingURL=autoExecutorActionFilter.test.js.map

package/dist/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorActionFilter.test.js","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/autoExecutorActionFilter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,qEAAqE,CAAA;AAG5E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrE,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QACpF,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CACrF,aAAa,CACd,CAAA;QACD,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAClG,aAAa,CACd,CAAA;QACD,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC5F,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;YACvC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;SAC3C,CAAA;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QAClE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE;YACrC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE;YACzC,EAAE,IAAI,EAAE,eAAe,EAAE;SAC1B,CAAA;QACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAA;QAC3F,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAA;QAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3B,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=autoExecutorCapabilityGate.test.d.ts.map

package/dist/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorCapabilityGate.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.js

@@ -0,0 +1,40 @@
+import { describe, it, expect } from 'vitest';
+import { EXECUTOR_CAPABILITY_TABLE, AUTO_EXECUTOR_CAPABILITIES, } from '../../../../../modules/platform-integration/entities/executorToken/executorCapability.js';
+import { capabilityForAction, filterAutoExecutorActions, } from '../../../../../modules/platform-integration/services/autoExecutorActionFilter.js';
+import { reviewActionSchema } from '../../../../../modules/review-execution/entities/reviewAction/reviewAction.schema.js';
+// AC8 — merge-blocking privilege contract gate.
+// This structural test pins the production auto-executor capability set to exactly
+// {readMr, postComment}. Re-wiring revoke/THREAD_RESOLVE into the auto path, or
+// widening the token's capability set, turns this red.
+describe('auto executor capability gate (AC8)', () => {
+    it('freezes the auto capability set to exactly {readMr, postComment}', () => {
+        expect([...AUTO_EXECUTOR_CAPABILITIES].sort()).toEqual(['postComment', 'readMr']);
+    });
+    it('keeps threadResolve and revoke declared as non-auto in the source-of-truth table', () => {
+        expect(EXECUTOR_CAPABILITY_TABLE.threadResolve.autoPath).toBe(false);
+        expect(EXECUTOR_CAPABILITY_TABLE.revoke.autoPath).toBe(false);
+    });
+    it('lets every parseable review action verb through the production filter only if its capability is auto', () => {
+        const sampleByType = {
+            FETCH_THREADS: { type: 'FETCH_THREADS' },
+            POST_COMMENT: { type: 'POST_COMMENT', body: 'b' },
+            THREAD_REPLY: { type: 'THREAD_REPLY', threadId: '1', message: 'm' },
+            POST_INLINE_COMMENT: { type: 'POST_INLINE_COMMENT', filePath: 'f', line: 1, body: 'b' },
+            THREAD_RESOLVE: { type: 'THREAD_RESOLVE', threadId: '1' },
+            ADD_LABEL: { type: 'ADD_LABEL', label: 'l' },
+        };
+        const allUnionTypes = reviewActionSchema.options.map(option => option.shape.type.value);
+        // Guard: the gate must cover every verb the schema can parse.
+        expect(Object.keys(sampleByType).sort()).toEqual([...allUnionTypes].sort());
+        const actions = Object.values(sampleByType);
+        const { allowed, dropped } = filterAutoExecutorActions(actions);
+        const autoVerbs = ['FETCH_THREADS', 'POST_COMMENT', 'THREAD_REPLY', 'POST_INLINE_COMMENT'];
+        const nonAutoVerbs = ['THREAD_RESOLVE', 'ADD_LABEL'];
+        expect(allowed.map(a => a.type).sort()).toEqual([...autoVerbs].sort());
+        expect(dropped.map(a => a.type).sort()).toEqual([...nonAutoVerbs].sort());
+        for (const action of allowed) {
+            expect(['readMr', 'postComment']).toContain(capabilityForAction(action));
+        }
+    });
+});
+//# sourceMappingURL=autoExecutorCapabilityGate.test.js.map

package/dist/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autoExecutorCapabilityGate.test.js","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/autoExecutorCapabilityGate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,6EAA6E,CAAA;AACpF,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,qEAAqE,CAAA;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,yEAAyE,CAAA;AAG5G,gDAAgD;AAChD,mFAAmF;AACnF,gFAAgF;AAChF,uDAAuD;AACvD,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,CAAC,GAAG,0BAA0B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,CAAC,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sGAAsG,EAAE,GAAG,EAAE;QAC9G,MAAM,YAAY,GAAiC;YACjD,aAAa,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE;YACxC,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE;YACjD,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE;YACnE,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YACvF,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE;YACzD,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE;SAC7C,CAAA;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvF,8DAA8D;QAC9D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAE3E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAA;QAE/D,MAAM,SAAS,GAAG,CAAC,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAA;QAC1F,MAAM,YAAY,GAAG,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAA;QAEpD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACtE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QAEzE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pinnedThreadFetchTarget.test.d.ts.map

package/dist/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinnedThreadFetchTarget.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.js

@@ -0,0 +1,76 @@
+import { describe, it, expect } from 'vitest';
+import { resolvePinnedThreadFetchTarget } from '../../../../../modules/platform-integration/services/pinnedThreadFetchTarget.js';
+class RecordingThreadFetch {
+    calls = [];
+    fetchThreads = (projectPath, mrNumber) => {
+        this.calls.push({ projectPath, mrNumber });
+        return [];
+    };
+}
+describe('pinned thread-fetch target provenance (AC9)', () => {
+    it('resolves the validated pair when project is configured and mrNumber matches the gated MR', () => {
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'group/proj',
+            payloadMrNumber: 5,
+            findRepository: () => ({ projectPath: 'group/proj', localPath: '/repo' }),
+            gatedMrNumber: 5,
+        });
+        expect(target).toEqual({ projectPath: 'group/proj', mrNumber: 5 });
+    });
+    it('fails closed (null) when projectPath is not in the registry', () => {
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'attacker/unknown',
+            payloadMrNumber: 5,
+            findRepository: () => null,
+            gatedMrNumber: 5,
+        });
+        expect(target).toBeNull();
+    });
+    it('fails closed (null) when payload mrNumber differs from the gated MR', () => {
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'group/proj',
+            payloadMrNumber: 999,
+            findRepository: () => ({ projectPath: 'group/proj', localPath: '/repo' }),
+            gatedMrNumber: 5,
+        });
+        expect(target).toBeNull();
+    });
+    it('AC9(1): unrecognized project means fetchThreads is never called', () => {
+        const fetch = new RecordingThreadFetch();
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'attacker/unknown',
+            payloadMrNumber: 5,
+            findRepository: () => null,
+            gatedMrNumber: 5,
+        });
+        if (target)
+            fetch.fetchThreads(target.projectPath, target.mrNumber);
+        expect(fetch.calls).toHaveLength(0);
+    });
+    it('AC9(2): forged mrNumber never retargets fetchThreads at the foreign MR', () => {
+        const fetch = new RecordingThreadFetch();
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'group/proj',
+            payloadMrNumber: 999,
+            findRepository: () => ({ projectPath: 'group/proj', localPath: '/repo' }),
+            gatedMrNumber: 5,
+        });
+        if (target)
+            fetch.fetchThreads(target.projectPath, target.mrNumber);
+        expect(fetch.calls.find(c => c.mrNumber === 999)).toBeUndefined();
+        expect(fetch.calls).toHaveLength(0);
+    });
+    it('uses the configured projectPath, never the raw payload, to fetch', () => {
+        const fetch = new RecordingThreadFetch();
+        const target = resolvePinnedThreadFetchTarget({
+            payloadProjectPath: 'group/proj',
+            payloadMrNumber: 5,
+            findRepository: () => ({ projectPath: 'group/proj-canonical', localPath: '/repo' }),
+            gatedMrNumber: 5,
+        });
+        if (target)
+            fetch.fetchThreads(target.projectPath, target.mrNumber);
+        expect(fetch.calls).toEqual([{ projectPath: 'group/proj-canonical', mrNumber: 5 }]);
+    });
+});
+//# sourceMappingURL=pinnedThreadFetchTarget.test.js.map

package/dist/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pinnedThreadFetchTarget.test.js","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/pinnedThreadFetchTarget.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,8BAA8B,EAAE,MAAM,oEAAoE,CAAA;AAEnH,MAAM,oBAAoB;IACR,KAAK,GAAqD,EAAE,CAAA;IAC5E,YAAY,GAAG,CAAC,WAAmB,EAAE,QAAgB,EAAE,EAAE;QACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1C,OAAO,EAAE,CAAA;IACX,CAAC,CAAA;CACF;AAED,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,YAAY;YAChC,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACzE,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,kBAAkB;YACtC,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,YAAY;YAChC,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACzE,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,kBAAkB;YACtC,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,IAAI,MAAM;YAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAEnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,YAAY;YAChC,eAAe,EAAE,GAAG;YACpB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACzE,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,IAAI,MAAM;YAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAEnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAA;QACxC,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,kBAAkB,EAAE,YAAY;YAChC,eAAe,EAAE,CAAC;YAClB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;YACnF,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,IAAI,MAAM;YAAE,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QAEnE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scopedExecutorEnvironment.test.d.ts.map

package/dist/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedExecutorEnvironment.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.js

@@ -0,0 +1,120 @@
+import { describe, it, expect } from 'vitest';
+import { buildScopedExecutorEnvironment, ENV_ALLOWLIST, MissingExecutorTokenError, } from '../../../../../modules/platform-integration/services/scopedExecutorEnvironment.js';
+class RecordingFileWriter {
+    writes = [];
+    write(path, contents) {
+        this.writes.push({ path, contents });
+    }
+}
+const TOKEN = 'glpat-service-token-xyz';
+const TEMP_ROOT = '/tmp/reviewflow-executor-abc123';
+describe('scoped executor environment (AC1/AC2/AC3/AC4)', () => {
+    it('AC1: throws fail-closed when the service token is absent', () => {
+        const fileWriter = new RecordingFileWriter();
+        expect(() => buildScopedExecutorEnvironment({
+            parentEnv: { PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        })).toThrow(MissingExecutorTokenError);
+        expect(fileWriter.writes).toHaveLength(0);
+    });
+    it('AC1: throws fail-closed when the service token is empty', () => {
+        const fileWriter = new RecordingFileWriter();
+        expect(() => buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: '   ' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        })).toThrow(MissingExecutorTokenError);
+        expect(fileWriter.writes).toHaveLength(0);
+    });
+    it('AC1: returns a configured environment when the token is present', () => {
+        const fileWriter = new RecordingFileWriter();
+        const result = buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        expect(result.env).toBeDefined();
+        expect(fileWriter.writes).toHaveLength(1);
+    });
+    it('AC2: child env keyset is a subset of the declared allowlist', () => {
+        const fileWriter = new RecordingFileWriter();
+        const { env } = buildScopedExecutorEnvironment({
+            parentEnv: {
+                REVIEWFLOW_EXECUTOR_TOKEN: TOKEN,
+                PATH: '/usr/bin',
+                LANG: 'en_US.UTF-8',
+                AMBIENT_ADMIN_TOKEN: 'canary',
+            },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        for (const key of Object.keys(env)) {
+            expect(ENV_ALLOWLIST).toContain(key);
+        }
+    });
+    it('AC2: a parent canary secret is absent from the child env', () => {
+        const fileWriter = new RecordingFileWriter();
+        const { env } = buildScopedExecutorEnvironment({
+            parentEnv: {
+                REVIEWFLOW_EXECUTOR_TOKEN: TOKEN,
+                PATH: '/usr/bin',
+                AMBIENT_ADMIN_TOKEN: 'canary',
+            },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        expect('AMBIENT_ADMIN_TOKEN' in env).toBe(false);
+    });
+    it('AC3: no child env value equals the token string', () => {
+        const fileWriter = new RecordingFileWriter();
+        const { env } = buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        for (const value of Object.values(env)) {
+            expect(value).not.toBe(TOKEN);
+        }
+    });
+    it('AC3: the token appears only in the rendered config-file contents', () => {
+        const fileWriter = new RecordingFileWriter();
+        buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        expect(fileWriter.writes[0]?.contents).toContain(TOKEN);
+    });
+    it('AC4: HOME and GLAB_CONFIG_DIR resolve under the isolated temp root', () => {
+        const fileWriter = new RecordingFileWriter();
+        const { env } = buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        expect(env.HOME?.startsWith(TEMP_ROOT)).toBe(true);
+        expect(env.GLAB_CONFIG_DIR?.startsWith(TEMP_ROOT)).toBe(true);
+    });
+    it('AC4: the config file is written under GLAB_CONFIG_DIR/glab-cli/config.yml', () => {
+        const fileWriter = new RecordingFileWriter();
+        const { env } = buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        expect(fileWriter.writes[0]?.path).toBe(`${env.GLAB_CONFIG_DIR}/glab-cli/config.yml`);
+    });
+    it('AC4: every written path stays under the isolated temp root', () => {
+        const fileWriter = new RecordingFileWriter();
+        buildScopedExecutorEnvironment({
+            parentEnv: { REVIEWFLOW_EXECUTOR_TOKEN: TOKEN, PATH: '/usr/bin' },
+            isolatedDir: TEMP_ROOT,
+            fileWriter,
+        });
+        for (const write of fileWriter.writes) {
+            expect(write.path.startsWith(TEMP_ROOT)).toBe(true);
+        }
+    });
+});
+//# sourceMappingURL=scopedExecutorEnvironment.test.js.map

package/dist/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scopedExecutorEnvironment.test.js","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/services/scopedExecutorEnvironment.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,8BAA8B,EAC9B,aAAa,EACb,yBAAyB,GAC1B,MAAM,sEAAsE,CAAA;AAE7E,MAAM,mBAAmB;IACP,MAAM,GAA8C,EAAE,CAAA;IACtE,KAAK,CAAC,IAAY,EAAE,QAAgB;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtC,CAAC;CACF;AAED,MAAM,KAAK,GAAG,yBAAyB,CAAA;AACvC,MAAM,SAAS,GAAG,iCAAiC,CAAA;AAEnD,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC;YAC7B,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC/B,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CACH,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QACpC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC;YAC7B,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE;YAC/C,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CACH,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;QACpC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAChC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;YAC7C,SAAS,EAAE;gBACT,yBAAyB,EAAE,KAAK;gBAChC,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,aAAa;gBACnB,mBAAmB,EAAE,QAAQ;aAC9B;YACD,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;YAC7C,SAAS,EAAE;gBACT,yBAAyB,EAAE,KAAK;gBAChC,IAAI,EAAE,UAAU;gBAChB,mBAAmB,EAAE,QAAQ;aAC9B;YACD,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,MAAM,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;YAC7C,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,8BAA8B,CAAC;YAC7B,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;YAC7C,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,8BAA8B,CAAC;YAC7C,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,eAAe,sBAAsB,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,UAAU,GAAG,IAAI,mBAAmB,EAAE,CAAA;QAC5C,8BAA8B,CAAC;YAC7B,SAAS,EAAE,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE;YACjE,WAAW,EAAE,SAAS;YACtB,UAAU;SACX,CAAC,CAAA;QACF,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=isTrustedActor.usecase.test.d.ts.map

package/dist/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isTrustedActor.usecase.test.d.ts","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.js

@@ -0,0 +1,33 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { IsTrustedActorUseCase } from '../../../../../modules/platform-integration/usecases/isTrustedActor.usecase.js';
+import { StubMemberAccessGateway } from '../../../../../tests/stubs/memberAccess.stub.js';
+import { MEMBER_ACCESS_LEVELS } from '../../../../../modules/platform-integration/entities/memberAccess/memberAccess.js';
+describe('IsTrustedActorUseCase', () => {
+    let gateway;
+    let useCase;
+    beforeEach(() => {
+        gateway = new StubMemberAccessGateway();
+        useCase = new IsTrustedActorUseCase(gateway);
+    });
+    it('trusts a Developer+ actor', async () => {
+        gateway.setAccess('alice', MEMBER_ACCESS_LEVELS.developer);
+        const trusted = await useCase.execute({ username: 'alice', projectPath: 'org/project' });
+        expect(trusted).toBe(true);
+        expect(gateway.calls).toEqual([{ projectPath: 'org/project', username: 'alice' }]);
+    });
+    it('does not trust an actor below Developer', async () => {
+        gateway.setAccess('bob', MEMBER_ACCESS_LEVELS.reporter);
+        const trusted = await useCase.execute({ username: 'bob', projectPath: 'org/project' });
+        expect(trusted).toBe(false);
+    });
+    it('does not trust an unknown username (fail-closed)', async () => {
+        const trusted = await useCase.execute({ username: 'stranger', projectPath: 'org/project' });
+        expect(trusted).toBe(false);
+    });
+    it('does not trust when the gateway throws (fail-closed)', async () => {
+        gateway.setShouldFail(true);
+        const trusted = await useCase.execute({ username: 'alice', projectPath: 'org/project' });
+        expect(trusted).toBe(false);
+    });
+});
+//# sourceMappingURL=isTrustedActor.usecase.test.js.map

package/dist/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isTrustedActor.usecase.test.js","sourceRoot":"","sources":["../../../../../../src/tests/units/modules/platform-integration/usecases/isTrustedActor.usecase.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mEAAmE,CAAC;AAC1G,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sEAAsE,CAAC;AAE5G,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,OAAgC,CAAC;IACrC,IAAI,OAA8B,CAAC;IAEnC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACxC,OAAO,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAEzF,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAE5F,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QAEzF,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evaluateTransport.usecase.test.d.ts.map

package/dist/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateTransport.usecase.test.d.ts","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.js

@@ -0,0 +1,69 @@
+import { describe, it, expect } from 'vitest';
+import { evaluateTransport } from '../../../../../../modules/platform-integration/usecases/transport/evaluateTransport.usecase.js';
+import { TransportContextFactory } from '../../../../../../tests/factories/transportContext.factory.js';
+describe('evaluateTransport', () => {
+    describe('AC1 - untrusted socket', () => {
+        it('rejects with 403 when the direct socket address is not the trusted hop, ignoring headers', () => {
+            const context = TransportContextFactory.valid({
+                directSocketAddress: '203.0.113.7',
+                forwardedProto: 'https',
+                resolvedClientIp: '10.20.30.40',
+            });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'reject', status: 403, reason: 'untrusted-socket' });
+        });
+        it('does not consult the protocol or client ip once the socket fails', () => {
+            const context = TransportContextFactory.valid({
+                directSocketAddress: '203.0.113.7',
+                forwardedProto: 'http',
+                resolvedClientIp: null,
+                allowedCidrRanges: [],
+            });
+            const decision = evaluateTransport(context);
+            expect(decision.kind).toBe('reject');
+        });
+    });
+    describe('AC2 - non-https', () => {
+        it('rejects with 403 when the forwarded protocol is not https', () => {
+            const context = TransportContextFactory.valid({ forwardedProto: 'http' });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'reject', status: 403, reason: 'non-https' });
+        });
+        it('rejects with 403 when no forwarded protocol is present', () => {
+            const context = TransportContextFactory.valid({ forwardedProto: null });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'reject', status: 403, reason: 'non-https' });
+        });
+    });
+    describe('AC3 - allowlisted, https, hop-trusted', () => {
+        it('accepts a fully valid transport context', () => {
+            const context = TransportContextFactory.valid();
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'accept' });
+        });
+    });
+    describe('AC4 - off-allowlist', () => {
+        it('rejects with 403 when the resolved client ip is outside every configured range', () => {
+            const context = TransportContextFactory.valid({
+                resolvedClientIp: '192.168.1.1',
+                allowedCidrRanges: ['10.20.30.0/24'],
+            });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'reject', status: 403, reason: 'off-allowlist' });
+        });
+        it('rejects with 403 when the client ip could not be resolved', () => {
+            const context = TransportContextFactory.valid({ resolvedClientIp: null });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'reject', status: 403, reason: 'off-allowlist' });
+        });
+        it('accepts when the resolved client ip falls inside one of several ranges', () => {
+            const context = TransportContextFactory.valid({
+                resolvedClientIp: '172.16.5.9',
+                allowedCidrRanges: ['10.0.0.0/8', '172.16.0.0/12'],
+            });
+            const decision = evaluateTransport(context);
+            expect(decision).toEqual({ kind: 'accept' });
+        });
+    });
+});
+//# sourceMappingURL=evaluateTransport.usecase.test.js.map

package/dist/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateTransport.usecase.test.js","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/platform-integration/usecases/transport/evaluateTransport.usecase.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gFAAgF,CAAC;AACnH,OAAO,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAExF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;YAClG,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC;gBAC5C,mBAAmB,EAAE,aAAa;gBAClC,cAAc,EAAE,OAAO;gBACvB,gBAAgB,EAAE,aAAa;aAChC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC;gBAC5C,mBAAmB,EAAE,aAAa;gBAClC,cAAc,EAAE,MAAM;gBACtB,gBAAgB,EAAE,IAAI;gBACtB,iBAAiB,EAAE,EAAE;aACtB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;YAE1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YAExE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,EAAE,CAAC;YAEhD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;YACxF,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC;gBAC5C,gBAAgB,EAAE,aAAa;gBAC/B,iBAAiB,EAAE,CAAC,eAAe,CAAC;aACrC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;YAChF,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,CAAC;gBAC5C,gBAAgB,EAAE,YAAY;gBAC9B,iBAAiB,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;aACnD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=actionProvenance.test.d.ts.map

package/dist/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionProvenance.test.d.ts","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.ts"],"names":[],"mappings":""}

package/dist/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.js

@@ -0,0 +1,26 @@
+import { resolveProvenance } from '../../../../../../modules/review-execution/entities/actionProvenance/actionProvenance.js';
+describe('resolveProvenance (AC-1 fail-closed provenance)', () => {
+    const nonCanonical = [
+        undefined,
+        null,
+        '',
+        'TRUSTED',
+        'trusted ',
+        ' trusted',
+        'Trusted',
+        'untrusted',
+        'admin',
+        {},
+        0,
+        true,
+    ];
+    for (const input of nonCanonical) {
+        it(`resolves non-canonical input ${JSON.stringify(input)} to untrusted`, () => {
+            expect(resolveProvenance(input)).toBe('untrusted');
+        });
+    }
+    it('resolves the exact canonical token "trusted" to trusted', () => {
+        expect(resolveProvenance('trusted')).toBe('trusted');
+    });
+});
+//# sourceMappingURL=actionProvenance.test.js.map

package/dist/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionProvenance.test.js","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/review-execution/entities/actionProvenance/actionProvenance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0EAA0E,CAAA;AAE5G,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,MAAM,YAAY,GAAc;QAC9B,SAAS;QACT,IAAI;QACJ,EAAE;QACF,SAAS;QACT,UAAU;QACV,UAAU;QACV,SAAS;QACT,WAAW;QACX,OAAO;QACP,EAAE;QACF,CAAC;QACD,IAAI;KACL,CAAA;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,EAAE,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE;YAC5E,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/tests/units/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=threadInventory.gitlab.gateway.test.d.ts.map

package/dist/tests/units/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threadInventory.gitlab.gateway.test.d.ts","sourceRoot":"","sources":["../../../../../../../src/tests/units/modules/review-execution/interface-adapters/gateways/threadInventory.gitlab.gateway.test.ts"],"names":[],"mappings":""}