jS UdZddlmZddlZddlZddlZddlZddlmZm Z ddl m Z ddl m Z mZmZddlmZmZmZddlmZgd Zehd Zd ed <d Zded<edZedGddZGddee ZedGddZedGddZ dOdZ!dPdZ"dd dQd!Z#dRd"Z$edGd#d$Z%dd% dSd&Z&dd dTd'Z'dUd)Z( dVdd dWd*Z) dXd+Z* dYd,Z+ dZd-Z,d[d.Z- d\d/Z.dd d]d0Z/dd d^d1Z0d_d2Z1d`d3Z2dad4Z3e4d5k(re1Z5e5jmZ7ded<ded <e7jpr&e7jrre7jpe7jrcZ8Z9n:e/\Z8Z9e7jpr e7jpZ8e7jrr e7jrZ9e7jRr e)e8e9e7jtZ;e7jre2e;ZB ddlCZDd9ZE e&gd:d%ZFeFjdk(reFjjZEeDjd;eEZKeKreKjdndZNeNjeNjd?eBd@<e>ejeBdABn+e2e;jD]\ZSZTe>eSdCeTejde7j e)e8e9e7jtZ;e0e7jZVe+eVe;ZWe,eVe;eWZXe7jr~e7jeW eWjnddDZ[e7jre>eje[dABn(eW eWjndEZ\e>dFe7jdGe\ejde7je2e;eW eWjnde3eXdHZ]e7jre>eje]dABne>dIe7je>dJeWr eWjnd(e>dKeXje>dLeXje>dMeXje>dNeXjejde5jejdyy#e<$r4Z=e>d6e=ej~7ejd8YdZ=[=dZ=[=wwxYw#e<$rYwxYw#e<$r deBd@<YwxYw#e<$r4Z=e>d6e=ej~7ejd8YdZ=[=!dZ=[=wwxYw)buvutils/repository_policy_adapter.py — GitHub repository policy → runtime capability layer. 회장 §명시: GitHub repository ruleset / branch protection / merge capability를 runtime capability layer로 표준화. admin override 없이 deterministic merge path 선택. "회장 직접 머지 fallback" 완전 제거. 회장 §명시 11개 금지 행위: 1. admin override 호출 (--admin flag 정적 차단) 2. branch protection 우회 코드 3. canonical_workspace_resolver 수정 4. automation_contracts 수정 5. merge_queue_executor 본체 수정 6. replacement_pr_runner 본체 수정 7. auto_gemini_triage 본체 수정 8. post_merge_smoke_runner 본체 수정 9. critical_escalation_reporter 본체 수정 10. expected_files 외 파일 수정 11. AUTOMATION_CAPABILITY_GAP을 CriticalEscalationType에 추가 (Critical 7종 외 보고 금지) ) annotationsN) dataclassreplace)Enum)AnyCallableOptional)CriticalEscalationTypeEscalationPacket RiskLevel)resolve_canonical_workspace)RepositoryCapability BlockedReason MergePathPlanBotMergeIdentityMergeIdentityRecordprobe_capabilityclassify_blocked_reasonselect_merge_pathassert_no_admin_overrideinvoke_triage_hookprobe_bot_merge_identityclassify_capability_gapinfer_token_source_from_actor*reevaluate_bot_can_merge_with_token_sourcer r r r build_capability_gap_packet> jeon-jonghyuk JonghyukJeon jonghyukjeon Jeon-Jonghyukzfrozenset[str] _OWNER_LOGINS)z[bot]ztuple[str, ...]_BOT_LOGIN_SUFFIXES).z subprocess.CompletedProcess[str]T)frozencNeZdZUdZded<ded<ded<ded<ded<ded<y ) ruGitHub repository의 머지 관련 capability snapshot. 모든 필드는 probe 시점에 고정(frozen). admin override 없이 deterministic. boolcan_squash_mergerequires_approvalrequires_thread_resolutionauto_merge_enabled bot_can_mergeadmin_override_requiredN__name__ __module__ __qualname____doc____annotations__6/home/jay/workspace/utils/repository_policy_adapter.pyrrYs-  $$!!r3rc0eZdZdZdZdZdZdZdZdZ dZ d Z y ) ru]PR 머지 차단 이유. 기존 7종 + task-2521 §1 신규 1종 (AUTOMATION_CAPABILITY_GAP).UNRESOLVED_REVIEW_THREADREQUIRED_APPROVAL STALE_BASEMISSING_CI_CHECKBRANCH_PROTECTIONPERMISSION_ISSUEAUTO_MERGE_UNSUPPORTEDAUTOMATION_CAPABILITY_GAPN) r-r.r/r0r6r7r8r9r:r;r<r=r2r3r4rrls6g9+J)+)5!<r3rcNeZdZUdZded<ded<ded<ded<ded <ded <y ) rumSingle PR mergedBy/mergeCommit 분석 record. task-2521 §1 fixture replay 대상 (PR #69/#70/#71). int pr_numberstrmerged_by_loginmerged_by_typer%is_botinferred_token_sourcefallback_to_owner_tokenNr,r2r3r4rrs+ N L!!r3rcReZdZUdZded<ded<ded<ded<ded<d Zd ed <y ) ru6 field probe 결과 (회장 §1 명시). bot/app identity로 merge가 가능한지 + owner token fallback이 발생했는지를 deterministic 박제. CriticalEscalationType에 새 enum 추가 금지 (회장 §금지). r%bot_can_merge_as_apprAmerge_actor_loginmerge_actor_is_bot token_source fallback_to_owner_token_detectedr2ztuple[MergeIdentityRecord, ...]merge_identity_auditN)r-r.r/r0r1rMr2r3r4rrs3 &**<>9>r3rrAc|sy|jtfdtDry|tvs$tDchc]}|jc}vrydvr|xsdjdk(ryycc}w) umerge actor login + type → token_source 추론 (deterministic). Returns: "installation_app" — login.endswith("[bot]") AND actor_type == "Bot" "owner_pat" — login ∈ _OWNER_LOGINS (회장 토큰 fallback 신호) "bot_pat" — actor_type == "User" 인데 login에 "bot" 포함 (휴리스틱) "unknown" — 그 외 (데이터 없음 / 신원 미상) unknownc3@K|]}j|ywN)endswith).0suffixlowers r4 z0infer_token_source_from_actor..s Df5>>& ! Dsinstallation_app owner_patbotuserbot_pat)rUanyr"r!)login actor_typexrUs @r4rrss  KKME D0C DD! m*L1779*L!L ~:+224>  +MsA8ct|jddxsd}|jdxsi}t|tsi}t |jdxsd}t |jdxs|jdxsd}t |jdxsd }t ||}|xs|d vxs|xsdjd k(}|d k(}t|||||| S)uD단일 PR JSON에서 mergedBy 필드 추출 → MergeIdentityRecord.numberrmergedByr^rZtype __typenameisBotF>r\rWrYrX)r@rBrCrDrErF) r?get isinstancedictrAr%rrUr) prr@ merged_byr^r_ is_bot_fieldinferredrDfallbacks r4_analyze_merge_recordrosBFF8Q',1-Iz"(bI i &  g&," -EY]]6*OimmL.IORPJ g.7%8L,UJ?H / 6 6 /  " # # % . ;&H !& (  r3runnerownerrepoc \||nt}g}d}|r |r|d|nd}|D]} dddt|ddg} |r| jd |g|| d } | jdk7s| jjs^ tj| j} t| t st#| } |j%| | j&s| }t)d|D}t)d|D}|r |j&nd}|r |j*nd}|r |j,nd}t/|||||t1|S#t$r@} t d |d t | j d tjYd} ~ nd} ~ wwxYw#tj$rYwxYw)utask-2521 §1 — last N PRs의 mergedBy를 조회해 BotMergeIdentity 박제. 각 PR에 대해 ``gh pr view --json number,mergedBy`` 호출. 조회 실패 시 해당 PR은 빈 record로 남기고 다음 PR 진행. silent fallback이지만 stderr trace. bot_can_merge_as_app 판정 규칙: - samples 중 1건 이상이 inferred_token_source == "installation_app" → True - 그 외 False (deterministic; "회장 직접 머지 fallback = 자동화 성공 X" 박제) N/rZghrjview--jsonznumber,mergedBy--repocwdz([repository_policy_adapter] gh pr view #z failed (u ) — skipfilerc3:K|]}|jdk(yw)rWN)rErSrs r4rVz+probe_bot_merge_identity..s!:;#55sc34K|]}|jywrQ)rFrs r4rVz+probe_bot_merge_identity..sG!A55GsFrO)rHrIrJrKrLrM)_default_runnerrAextend Exceptionprintrdr-sysstderr returncodestdoutstripjsonloadsJSONDecodeErrorrhriroappendrBr]rDrErtuple)rrrs pr_numbersrqfnrecords last_recordrepo_argnargsresultexc pr_payloadrecrHfallback_detected actor_login actor_is_botrKs r4rrs %?B)+G15K$)d%$ H  $A:KLD Xx01$'F    !)<)<)>  FMM2J*d+ #J/s   K14?FGwGG1<+--"K)4;%%%L8C;44L 1%'!):"7^  ;  :1#>I&&'z3ZZ    ##   s)0E=F F5F  FF+*F+ct|jrtjS|jstjSy)uBotMergeIdentity → AUTOMATION_CAPABILITY_GAP 분류. 회장 §1 정책: - bot/app identity로 merge 가능 → None (정상) - 회장 토큰(owner_pat) 사용이 1건이라도 탐지 → AUTOMATION_CAPABILITY_GAP - bot_can_merge_as_app=False & fallback도 없음 → AUTOMATION_CAPABILITY_GAP (samples 부재 시 보수적으로 GAP 분류; "자동화 성공 = bot/app driven only") N)rLrr=rH)identitys r4rrs100666  ( (666 r3cXeZdZUdZded<ded<ded<ded<d ed <d ed <ded <y )ruDeterministic merge path 선택 결과. 회장 §명시: admin override 없이 선택된 경로만 허용. capability_gap=True 시 CriticalEscalationType에 추가하지 않고 ops 채널 보고 마커로만 사용 (Critical 7종 외 회장 보고 0건). rAactionOptional[BlockedReason]reasonr%requires_chaircapability_gap Optional[str] triage_hookbase_sync_command descriptionNr,r2r3r4rr#s4 K $#$$r3rrzc6tj||dddS)NT)r{capture_outputtexttimeout) subprocessrun)rr{s r4rr<s$ >>    r3c t|||nt} ||d}|jd k7ry|jjsy tj|j}t|tt fr|SdS#t$rQ}tdt |j ddj |dddtjYd}~yd}~wwxYw#tj"$rG}td dj |ddd |j$tjYd}~yd}~wwxYw) ugh api 호출 후 JSON dict 반환. 실패 시 None (safe fallback). 예외 발생 시 stderr에 짧은 trace 기록 후 None 반환 — silent fallback이지만 디버깅 가능하도록 원인을 남긴다 (Gemini high 권고 수용). Nrzz,[repository_policy_adapter] gh call failed (z):  u... → fallback Noner|rz2[repository_policy_adapter] JSON parse failed for : )rrrrrdr-joinrrrrrrrrhrilistrmsg)rrqrrrparseds r4_run_ghrJs'T"%?B Dd#A ==    FMM*#FT4L9vCtC#  :49;M;M:NcxxRa!""7 9 $    @xxRa!""SWWI /  s6 B 6C#C# C ACC #D=6=D88D=Nonec>td|Dr tdy)ugh 호출 args에 --admin 포함 시 RuntimeError. 어디서든 gh 호출 전에 호출. 회장 §명시: admin override는 항상 금지. c3&K|] }|dk( yw)z--adminNr2rSas r4rVz+assert_no_admin_override..|s (a1 > (suhadmin override is forbidden by repository_policy_adapter (회장 §명시: admin override 항상 금지)N)r] RuntimeError)rs r4rrws)  (4 (( >  )r3c d}d}d}tddd|d|d|g|}|g}t|tr|}n"t|tr|j d g}|D]} | j d d } | j d ixsi} | d k(r]| j ddxsd} | dkDrd}| j ddrd}| j dgxsg} | rt d| Drd}| dk(sd}tddd|d|d|dg|}|t|tr|j dixsi}|rU|j ddxsd} | dkDrd}|j ddrd}|j dij ddrd}|j dd}|d}d}d}tddd|d|g|}|Ft|tr6t |j dd}t |j dd}d}tddd|d|dg|}|,t|tr|j dd xsd }|dvrd}t|||||| S)!uGitHub API 4회 호출로 RepositoryCapability 6 field를 probe. 각 호출은 실패 허용 — fallback False 처리. runner: subprocess.run 주입 가능 (테스트 stubbing). Frvapizrepos/ruz/rules/branches/rpNrulesrdrZ parameters pull_requestrequired_approving_review_countrT!required_review_thread_resolution bypass_actorsc3K|]@}t|tr.|jdddk(xr|jdddk(Byw)r_rZRepositoryRole role_nameadminNrhrirgrs r4rVz#probe_capability..sR)!!T*UU<,0@@;{B/7:;)sAA restrictionsz /branches/z /protectionrequired_pull_request_reviewsrequire_code_owner_reviews required_conversation_resolutionenabledallow_squash_mergeallow_auto_mergez-/collaborators/github-actions[bot]/permission permission)writerr&r'r(r)r*r+)rrhrrirgallr%r)rrrsbranchrqr(r'r+ ruleset_datarrulertypeparamscountrprotection_dataprcrr&r) repo_datar* perm_dataperms r4rrs "'# uugQtf,4@  #&* #  uugQtf-.IIt!< .BE JK!)--0BE"JK M u %$L M OI It!<}}\2.4" % % M )+#=-# 7  r3c|xsdjj}|dvr|js|St|dS|S)uprobe_capability()의 결과를 실제 사용된 token source 기준으로 재평가. task-2522 §본질: 현재 probe_capability()는 ``gh api`` 호출을 통해 capability를 추출하지만, 이 호출에 사용된 token이 owner_pat이면 결과는 "owner_pat이 본 capability" 에 가깝다. 실제 자동화 머지에 사용될 GitHub App installation token이 보유한 capability를 박제하려면, token source가 OWNER_PAT/UNKNOWN인 경우 ``bot_can_merge=False``로 strict 재평가해야 한다 (자동화 fallback 차단). 재평가 규칙 (deterministic, 좁은 보강): - token_source == "GITHUB_APP_INSTALLATION_TOKEN" → 그대로 유지 (정상 자동화). - token_source == "GITHUB_ACTIONS_TOKEN" → 그대로 유지 (Actions runner 자동화). - token_source == "OWNER_PAT" → bot_can_merge=False로 강제 (회장 §본질). - token_source == "UNKNOWN" → bot_can_merge=False로 강제 (fail-closed). - 기타 (분류 외 값) → 그대로 유지 (보수적; 알 수 없는 enum value는 변경 안 함). 회장 §금지: 새 abstraction 생성 X. RepositoryCapability dataclass 그대로 사용, 좁은 함수 1개만 추가. 기존 6 field 변경 X. rZ>UNKNOWN OWNER_PATF)r*)rupperr*r) capabilityrKsrcs r4rrsK0  2 $ $ & , , .C &&'' z77 r3cd}|jdd}t|trtd|D}n]t|tr)|jdgxsg}td|D}n$|jdd}t|t r|}|jdd xsd }|jd d xsd }|jd d}d } t|tr|jd d xsd } nt|t r|} |jr|dkDrtjS|d k(rtjS|jr|dk7rtjS| dvrtjS|jstjS|j stj"S|dk(rtj$Sy)u>PR dict + RepositoryCapability → BlockedReason | None. 우선순위 순차 체크 (회장 §명시 순서 고정): 1. UNRESOLVED_REVIEW_THREAD 2. STALE_BASE 3. REQUIRED_APPROVAL 4. MISSING_CI_CHECK 5. PERMISSION_ISSUE 6. AUTO_MERGE_UNSUPPORTED 7. BRANCH_PROTECTION r reviewThreadsNc3dK|](}t|tr|jddsd*yw isResolvedTNrrSts r4rVz*classify_blocked_reason..8/& !T"155t+D & .0nodesc3dK|](}t|tr|jddsd*ywrrrs r4rVz*classify_blocked_reason..?rrunresolved_thread_countmergeStateStatusrZreviewDecisionstatusCheckRollupstateBEHINDAPPROVED)PENDINGEXPECTEDFAILUREBLOCKED)rgrhrsumrir?rAr(rr6r8r'r7r9r*r;r)r<r:) rjrr raw_threadsr direct_count merge_statereview_decisionrollupci_states r4rr"s$$%&&$/K+t$"%& "& #  K &,2"%& & #  vv7; lC (&2 #vv0"5;K66"2B7=2OVV' .FH&$::gr*0b FC  ,,1H11L555 h''' ##:(E... 55---  # #---  ( (333 i... r3c|jdd}|j}|j}|tddddddd|d|d S|tj k(rtd |ddd dd|d  S|tj k(rtd |ddddd|d S|tjtjtjtjfvr)td|ddddd|d|jd|d|d S|tjk(rtd|ddddd|d Std|ddddd|d S)uBlockedReason → deterministic MergePathPlan 선택. 회장 §명시: admin override 없이 deterministic. "회장 직접 머지 fallback" 없음. AUTOMATION_CAPABILITY_GAP은 ops 채널만 (requires_chair=False). rb?N squash_mergeFzPR #uE: 정상 squash merge path. 모든 capability 충족. (bot_can_merge=)rrrrrrrauto_gemini_triageauto_gemini_triage.triage_pruW: Unresolved review thread 존재. auto_gemini_triage hook으로 자동 분류/resolve. base_synczgit merge origin/mainuR: Base branch가 stale. git merge origin/main으로 동기화. (force push 금지)escalate_capability_gapTu: Capability gap 감지: z. requires_approval=z, bot_can_merge=uS. 자동화 불가 — ops 채널로 보고. (회장 직접 머지 fallback 없음)wait_ciu/: CI 체크 미완료/실패. CI 통과 대기.manual_merge_requireduG: Repo auto_merge 비활성화. manual merge 필요. ops 채널 보고.) rgr*r'rrr6r8r7r:r;r=valuer9)rjrblocked_reasonpr_num bot_mergeableneeds_approvals r4rrsx-F$22M%77N!  "vh""/3  ???'!  6"vhGG  111!  5vhMM  ''''&&//  ,! "vh78L8L7MN%%3$44D]OTdd  777!  "vh&UV  *! "vh::  r3cddlm}d||dS)u auto_gemini_triage 연동 hook. 실제 wiring은 후속 task. 본 task에서는 인터페이스만 정의. 호출 시 lazy import로 circular 방지. 실제로 triage_pr을 호출하지 않고 callable만 반환 (테스트에서 인터페이스 검증). r) triage_prr )hookr@callable)utils.auto_gemini_triager)r@rs r4rrs 3. r3c `|jsy|jrtjntj}t ||t j|jd|jd|jr|jjndddgd|j|jdS) ucapability_gap=True인 MergePathPlan을 EscalationPacket으로 변환. 회장 §명시: AUTOMATION_CAPABILITY_GAP은 CriticalEscalationType 7종 외이므로 Critical 보고 대상이 아님. 가장 가까운 기존 타입 사용 (ops 채널 marker만). RiskLevel은 plan.requires_chair 기반으로 결정 (HIGH vs MEDIUM). Returns: EscalationPacket (ops 채널용) or None (capability_gap=False인 경우) Nzcapability_gap=True: action=z, blocked_reason=rops_channel_reportmanual_merge_review) risk_levelr)task_idr@escalation_typerwhy_auto_cannot_continue safe_optionsrecommended_optionevidence) rrr HIGHMEDIUMr r .BLOCK_OVERRIDE_REQUIRED_OR_REASON_INSUFFICIENTrrrr)planr@r risks r4rrs   !009>>i6F6FD .]]*4;;-837;;dkk//FK M+,AB/ $ dkkB  r3c||nt} |gdd}|jdk(rT|jj}ddl}|j d|}|r"|j d|j dfSy#t$rYywxYw) uOgit remote get-url origin에서 owner/repo 추출. 실패 시 기본값 반환.N)gitremotezget-urloriginrzrz[:/]([^/]+)/([^/]+?)(?:\.git)?$r)r dev_workspace)rrrrresearchgroupr)rqrrurlr1ms r4_extract_owner_repo_from_remoter6(s %?B  :E    !--%%'C  r=z--classify-blockedu0--pr N과 함께 사용: 차단 이유만 출력rx output_jsonu JSON 출력)rdestr=)argparseArgumentParserRawDescriptionHelpFormatter add_argumentr?)ps r4 _build_parserrITs a!<<  A4NN : NN9d1cNdNN8T0aNbNN:v4RNSNN  E NN ? NN8L}=NY Hr3c|j|j|j|j|j|j dS)Nrr)caps r4_capability_to_dictrLsB00 22&)&D&D!44**#&#>#>  r3c|j|j|jjnd|j|j|j |j |jdS)Nr )rrrrrrrr)r)s r4 _plan_to_dictrNsX++'+{{'>$++##D----''!33'' r3__main__zERROR: r|rrZ)r,z rev-parsez --abbrev-refHEADztask-\d+(?:[+\-]\w+)?probeF)fetch)r  branch_nameworkspace_metar/)indentr)r@ruNone (merge 가능)zpr #z blocked_reason: )r@rrmerge_path_planzpr : #zblocked_reason : zaction : zcapability_gap : zrequires_chair : zdescription : )r^rAr_rAreturnrA)rjrirWr) rrrArsrArz list[int]rqOptional[RunnerType]rWr)rrrWr)r list[str]r{rrWz"'subprocess.CompletedProcess[str]')rrYrqrXrWz Optional[Any])rrYrWr)r?) rrrArsrArrArqrXrWr)rrrKrArWr)rjrirrrWr)rjrirrrrrWr)r@r?rWri)r)rr@r?r rArWz'EscalationPacket | None')rqrXrWztuple[str, str])r@r?rqrXrWri)rWzargparse.ArgumentParser)rKrrWri)r)rrWri)cr0 __future__rrDrrr dataclassesrrenumrtypingrrr utils.automation_contractsr r r "utils.canonical_workspace_resolverr __all__ frozensetr!r1r" RunnerTyperrArrrrrorrrrrrrrrrrrr6r8rIrLrNr-parser parse_argsrrrrsrrKrrrrexitrBcap_dictr1_re _branch_guess_brrrrr2 _task_matchr3_inferred_task_id workspacer rSdumpsitemskvrjpr_infoblockedr)classify_blockedrrvalcombinedrrrr print_helpr2r3r4rws&#  ***  <!*+! ~(2_1 = >  $ " " "$ $( ? ? ?? ! ?  ?D   $6     ( "$(& & !& &Z  &p $( p p p p ! p  pn$ H] ]$]]Hd  d $d ,d  d V $  N$(, ,,0$( ! .0 f   z _F    D J I zzdiijj$)) t57 t ::JJE 9999D   "5$ =T>U:)U55U: