e504491dd8
Root cause (Issue #119): auto-merge armado com GITHUB_TOKEN mergea como github-actions[bot] e o anti-recursion do GitHub nunca cria runs para o evento closed — os flips pós-merge (issue-done / plan-issue-ready) não rodavam em silêncio (PR #746). Arm agora usa AUTOMERGE_PAT (fail-closed); workflow_dispatch de recuperação nos dois flips; forgejo-issue-transition fecha a Issue (PATCH state=closed); forgejo-api retenta 410 (proxy respondeu antes da origem) e loga corpo nginx de forma compacta.
52 lines
2.5 KiB
JavaScript
52 lines
2.5 KiB
JavaScript
/**
|
|
* Pure decision logic for the GitHub PR auto-merge safety net
|
|
* (scripts/github-pr-automerge.mjs). Unit-tested in
|
|
* tests/unit/githubPrFlow.unit.spec.ts — the OPS57 (draft veto) / OPS64
|
|
* (never merge on red CI) pins ported to the GitHub mechanism.
|
|
*
|
|
* GitHub's native auto-merge only fires with the required checks green, so
|
|
* the safety net's only real decisions are: skip (non-main base, draft veto,
|
|
* already merged) or mark-ready (cursor/* draft) before arming auto-merge.
|
|
*/
|
|
|
|
export const CURSOR_HEAD_PREFIX = 'cursor/'
|
|
|
|
/** OPS57: only `cursor/*` drafts get force-marked ready — any other draft is the actor's veto. */
|
|
export const isCursorHead = (ref) => typeof ref === 'string' && ref.startsWith(CURSOR_HEAD_PREFIX)
|
|
|
|
/**
|
|
* OPS71-FLIP: the auto-merge MUST be armed with a real user PAT. Arming with
|
|
* the built-in GITHUB_TOKEN makes the merge happen as `github-actions[bot]`,
|
|
* and GitHub's anti-recursion never creates workflow runs for events
|
|
* triggered by GITHUB_TOKEN actions — the post-merge `closed` flips would
|
|
* silently never run (live finding PR #746). Fail-closed: no token → ok:false;
|
|
* the CLI exits 1 instead of falling back to the run token.
|
|
*
|
|
* @param {{ AUTOMERGE_PAT?: string }} [env]
|
|
* @returns {{ ok: true, token: string } | { ok: false, reason: string }}
|
|
*/
|
|
export const automergeArmingToken = (env = process.env) => {
|
|
const token = env.AUTOMERGE_PAT
|
|
if (typeof token === 'string' && token.length > 0) return { ok: true, token }
|
|
return {
|
|
ok: false,
|
|
reason:
|
|
'AUTOMERGE_PAT ausente — sem ele o merge aconteceria como github-actions[bot] e o evento closed não criaria runs (flips pós-merge silenciosos). Defina o secret AUTOMERGE_PAT no GitHub (PAT do fsolla, escopos pull-requests: write + contents: write no repo) — ver docs/AGENT-OPS.md.',
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @param {object|null} pr - normalized PR from github-api (or null)
|
|
* @returns {{ action: 'skip' | 'mark-ready' | 'enable-auto-merge', reason: string }}
|
|
*/
|
|
export const decideAutomergeAction = (pr) => {
|
|
if (!pr) return { action: 'skip', reason: 'pr-inexistente' }
|
|
if (pr.merged) return { action: 'skip', reason: 'ja-mergeada' }
|
|
if (pr.state !== 'OPEN') return { action: 'skip', reason: 'pr-nao-aberta' }
|
|
if (pr.base?.ref !== 'main') return { action: 'skip', reason: 'base-nao-main' }
|
|
if (pr.draft) {
|
|
if (isCursorHead(pr.head?.ref)) return { action: 'mark-ready', reason: 'draft-cursor' }
|
|
return { action: 'skip', reason: 'draft-veto' }
|
|
}
|
|
return { action: 'enable-auto-merge', reason: 'ready' }
|
|
}
|