Lays down every shared seam the wrapper's modules build against: the contract
types and outcome table, the contract constants, the isolated credentials
module, the one-file @j4k/review seam, the Forgejo wire shapes and the
conversation partition, action.yml, and the esbuild bundle machinery with a
freshness test. src/main.ts is a stub that fails loudly until the modules are
composed.

Also regenerates the align-managed renders for the repo's new vitest and
typescript-scripts traits.

@@ -0,0 +3,4 @@
+// because the published package ships sources with no exports map (guarded by
+// a test in j4k/review); when that changes, this file is the one-file migration.
+
+export { createCapabilityClient } from "@j4k/review/src/client/capability-client.ts";

@@ -0,0 +3,4 @@
+// because the published package ships sources with no exports map (guarded by
+// a test in j4k/review); when that changes, this file is the one-file migration.
+
+export { createCapabilityClient } from "@j4k/review/src/client/capability-client.ts";

@@ -0,0 +144,4 @@
+        get(`${pull(prNumber)}/reviews?page=${n}&limit=${limit}`);
+      const first = await page(1);
+      const rest = Math.max(Math.ceil((totalCount(first.response) ?? 0) / limit) - 1, 0);
+      const others = await Promise.all(Array.from({ length: rest }, (_x, i) => page(i + 2)));

@@ -11,0 +41,4 @@
+  (`src/credentials.ts`) and flows only into the `Authorization` header of requests to
+  `REVIEW_SERVICE_URL`.
+- Forge writes use the job's own task token: write-mode on same-repo pull requests,
+  read-only on fork pull requests. The fork path performs only the labeled-skip issue

@@ -0,0 +137,4 @@
+    createIssueComment: (prNumber, body) =>
+      call("POST", `${repo}/issues/${prNumber}/comments`, { body }),
+    editIssueComment: (commentId, body) =>
+      call("PATCH", `${repo}/issues/comments/${commentId}`, { body }),

@@ -0,0 +93,4 @@
+
+  async function unresolve(prNumber: number, conversation: Conversation): Promise<boolean> {
+    try {
+      await forge.unresolveConversation(prNumber, conversation.reviewId, conversation.anchor.id);

@@ -0,0 +47,4 @@
+      for (const item of findings.items) {
+        const { claim } = item;
+        const marker = claimMarker(claim.id);
+        if (bodies.some((body) => body.includes(marker))) {

@@ -0,0 +67,4 @@
+      headSha: pull.head.sha,
+      baseBranch: pull.base.ref,
+      headBranch: pull.head.ref,
+      isFork: pull.head.repo.full_name !== slug,

@@ -0,0 +108,4 @@
+  known: FindingsResponse | undefined,
+): Promise<void> {
+  const { inputs } = deps;
+  const report = await session.getReport(reviewId);

@@ -11,0 +20,4 @@
+| `GITHUB_API_URL`                     | Forge API base, supplied by the runner.                                                 |
+| `GITHUB_EVENT_*`, `GITHUB_RUN_ID`, … | Standard runner event environment; the wrapper's PR inputs come from the event payload. |
+
+Every variable is required. A missing one is a configuration defect and fails the run

@@ -0,0 +143,4 @@
+      const page = (n: number): Promise<Fetched> =>
+        get(`${pull(prNumber)}/reviews?page=${n}&limit=${limit}`);
+      const first = await page(1);
+      const rest = Math.max(Math.ceil((totalCount(first.response) ?? 0) / limit) - 1, 0);

@@ -0,0 +15,4 @@
+
+type DispositionRecord = NonNullable<ProjectedClaim["disposition"]["current"]>;
+
+function claimIdOf(conversation: Conversation): string | undefined {

@@ -0,0 +143,4 @@
+  const pinnedPassId = await pinPass(deps, session, reviewId);
+  const result = await deps.wait(session, reviewId, pinnedPassId, deps.clock);
+
+  const pull = await deps.forge.getPull(inputs.prNumber);

@@ -0,0 +162,4 @@
+
+export const runWrapper: RunWrapper = async (deps) => {
+  if (deps.inputs.isFork) {
+    await deps.summary.reconcileForkSkip({ prNumber: deps.inputs.prNumber });

@@ -0,0 +81,4 @@
+  graceDeadlineAt: number,
+): Promise<GroundingOutcome> {
+  const outcome = await poll<SettleOutcome | "regressed">(clock, graceDeadlineAt, async () => {
+    if (!(await hasPendingGrounding(session, reviewId))) {

@@ -0,0 +97,4 @@
+  if (located === undefined || !intersects(covered, located.start, located.span)) {
+    return undefined;
+  }
+  return { path: anchor.path, newPosition: located.start, extraLines: located.span - 1 };

@@ -0,0 +113,4 @@
+    current: DispositionRecord,
+    supported: boolean,
+  ): Promise<boolean> {
+    if (!hasMarker(conversation, dispositionMarker(current.kind, claimId))) {

@@ -0,0 +20,4 @@
+/** Position-anchored: a human reply that quotes the marker mid-body is not
+ *  ours, so the match must start at byte 0. */
+function findOurComment(comments: readonly IssueComment[]): IssueComment | undefined {
+  return comments.find((comment) => comment.body.startsWith(SUMMARY_MARKER));

@@ -0,0 +43,4 @@
+    // Failure row 1: a real green pass with visible text, never a bare skipped
+    // status — and reachable with no /v1 call and no capability credential.
+    reconcileForkSkip: async ({ prNumber }) => {
+      await upsert(forge, prNumber, FORK_SKIP_BODY);

@@ -0,0 +67,4 @@
+      headSha: pull.head.sha,
+      baseBranch: pull.base.ref,
+      headBranch: pull.head.ref,
+      isFork: pull.head.repo.full_name !== slug,

@@ -0,0 +143,4 @@
+  const pinnedPassId = await pinPass(deps, session, reviewId);
+  const result = await deps.wait(session, reviewId, pinnedPassId, deps.clock);
+
+  const pull = await deps.forge.getPull(inputs.prNumber);

@@ -11,0 +41,4 @@
+  (`src/credentials.ts`) and flows only into the `Authorization` header of requests to
+  `REVIEW_SERVICE_URL`.
+- Forge writes use the job's own task token: write-mode on same-repo pull requests,
+  read-only on fork pull requests. The fork path performs only the labeled-skip issue

@@ -0,0 +11,4 @@
+  bundle: true,
+  platform: "node",
+  format: "esm",
+  target: "node26",

@@ -0,0 +92,4 @@
+    query: {
+      after: string | undefined;
+      limit: number | undefined;
+      destination: string | undefined;

@@ -0,0 +97,4 @@
+      return fetched.text;
+    },
+    getRawFile: async (path, ref) => {
+      const segments = path.split("/").map((segment) => encodeURIComponent(segment));

@@ -0,0 +94,4 @@
+    return undefined;
+  }
+  const located = locate(fileText, anchor.snippet);
+  if (located === undefined || !intersects(covered, located.start, located.span)) {

@@ -0,0 +20,4 @@
+/** Position-anchored: a human reply that quotes the marker mid-body is not
+ *  ours, so the match must start at byte 0. */
+function findOurComment(comments: readonly IssueComment[]): IssueComment | undefined {
+  return comments.find((comment) => comment.body.startsWith(SUMMARY_MARKER));

@@ -0,0 +67,4 @@
+      headSha: pull.head.sha,
+      baseBranch: pull.base.ref,
+      headBranch: pull.head.ref,
+      isFork: pull.head.repo.full_name !== slug,

@@ -0,0 +87,4 @@
+): Promise<ClaimsPageResponse["items"]> {
+  const items: ClaimsPageResponse["items"] = [];
+  let after: string | undefined = undefined;
+  for (;;) {

@@ -0,0 +108,4 @@
+  known: FindingsResponse | undefined,
+): Promise<void> {
+  const { inputs } = deps;
+  const report = await session.getReport(reviewId);

@@ -0,0 +162,4 @@
+
+export const runWrapper: RunWrapper = async (deps) => {
+  if (deps.inputs.isFork) {
+    await deps.summary.reconcileForkSkip({ prNumber: deps.inputs.prNumber });

@@ -11,0 +20,4 @@
+| `GITHUB_API_URL`                     | Forge API base, supplied by the runner.                                                 |
+| `GITHUB_EVENT_*`, `GITHUB_RUN_ID`, … | Standard runner event environment; the wrapper's PR inputs come from the event payload. |
+
+Every variable is required. A missing one is a configuration defect and fails the run

@@ -0,0 +112,4 @@
+    },
+    listIssueComments: async (prNumber) => {
+      const url = `${repo}/issues/${prNumber}/comments`;
+      const { response, text } = await get(url);

@@ -0,0 +24,4 @@
+}
+
+async function upsert(forge: ForgeClient, prNumber: number, body: string): Promise<void> {
+  const existing = findOurComment(await forge.listIssueComments(prNumber));

@@ -0,0 +154,4 @@
+    console.error(
+      `pass ${pinnedPassId} was superseded mid-wait; reconciling the pinned pass (the newer pass gets its own run)`,
+    );
+  }

@@ -0,0 +67,4 @@
+      headSha: pull.head.sha,
+      baseBranch: pull.base.ref,
+      headBranch: pull.head.ref,
+      isFork: pull.head.repo.full_name !== slug,

@@ -0,0 +162,4 @@
+
+export const runWrapper: RunWrapper = async (deps) => {
+  if (deps.inputs.isFork) {
+    await deps.summary.reconcileForkSkip({ prNumber: deps.inputs.prNumber });

@@ -0,0 +81,4 @@
+  graceDeadlineAt: number,
+): Promise<GroundingOutcome> {
+  const outcome = await poll<SettleOutcome | "regressed">(clock, graceDeadlineAt, async () => {
+    if (!(await hasPendingGrounding(session, reviewId))) {

@@ -0,0 +68,4 @@
+          path: placement.path,
+          body: commentBody(claim, reviewId),
+          new_position: placement.newPosition,
+          extra_lines_count: placement.extraLines,

@@ -0,0 +143,4 @@
+  const pinnedPassId = await pinPass(deps, session, reviewId);
+  const result = await deps.wait(session, reviewId, pinnedPassId, deps.clock);
+
+  const pull = await deps.forge.getPull(inputs.prNumber);

@@ -0,0 +54,4 @@
+
+  async function call<T>(method: string, url: string, payload: unknown): Promise<T> {
+    const { text } = await request(method, url, payload);
+    return JSON.parse(text) as T;

@@ -0,0 +88,4 @@
+    if (currents.some((entry) => entry.current.kind === "reopened")) {
+      return conversation.anchor.resolver === null ? true : unresolve(prNumber, conversation);
+    }
+    if (currents.length === 0 || conversation.anchor.resolver !== null) {

@@ -0,0 +20,4 @@
+/** Position-anchored: a human reply that quotes the marker mid-body is not
+ *  ours, so the match must start at byte 0. */
+function findOurComment(comments: readonly IssueComment[]): IssueComment | undefined {
+  return comments.find((comment) => comment.body.startsWith(SUMMARY_MARKER));

@@ -0,0 +21,4 @@
+    if (page.next_after === null) {
+      return items;
+    }
+    if (page.next_after === after) {

@@ -0,0 +21,4 @@
+ *  ours, so the match must start at byte 0. */
+function findOurComment(comments: readonly IssueComment[]): IssueComment | undefined {
+  return comments.find((comment) => comment.body.startsWith(SUMMARY_MARKER));
+}

@@ -0,0 +87,4 @@
+  const pin: Pin = { superseded: false };
+
+  const coverageDeadlineAt = clock.now() + STAGE1_DEADLINE_MS;
+  const complete = await poll(clock, coverageDeadlineAt, async () => {

@@ -0,0 +20,4 @@
+/** Position-anchored: a human reply that quotes the marker mid-body is not
+ *  ours, so the match must start at byte 0. */
+function findOurComment(comments: readonly IssueComment[]): IssueComment | undefined {
+  return comments.find((comment) => comment.body.startsWith(SUMMARY_MARKER));

@@ -0,0 +24,4 @@
+    if (page.next_after === after) {
+      throw new Error(`claims cursor did not advance past ${after}`);
+    }
+    after = page.next_after;

@@ -0,0 +88,4 @@
+  known: FindingsResponse | undefined,
+): Promise<void> {
+  const { inputs } = deps;
+  const report = await session.getReport(reviewId);

@@ -0,0 +151,4 @@
+      }
+      // Sequential: the page count comes from a server-supplied total, so a
+      // long review history must not fan out into one request per page at once.
+      const pages = Math.ceil(total / limit);

@@ -0,0 +47,4 @@
+      for (const item of findings.items) {
+        const { claim } = item;
+        const marker = claimMarker(claim.id);
+        if (bodies.some((body) => body.includes(marker))) {

@@ -0,0 +60,4 @@
+  const forgeHost = new URL(requireEnv("GITHUB_SERVER_URL")).hostname.toLowerCase();
+
+  if (eventName === "pull_request_target") {
+    const { pull_request: pull } = readEventPayload(eventPath) as PullRequestTargetEvent;

@@ -0,0 +80,4 @@
+    }
+    return (await hasPendingGrounding(session, reviewId)) ? undefined : "settled";
+  });
+  return outcome ?? "grounding-pending";

@@ -0,0 +19,4 @@
+export function claimIdsOf(conversation: Conversation): string[] {
+  const ids: string[] = [];
+  for (const comment of conversation.comments) {
+    for (const match of comment.body.matchAll(CLAIM_MARKER_PATTERN)) {

@@ -0,0 +47,4 @@
+      for (const item of findings.items) {
+        const { claim } = item;
+        const marker = claimMarker(claim.id);
+        if (bodies.some((body) => body.includes(marker))) {

@@ -0,0 +119,4 @@
+        throw error;
+      }
+    },
+    listIssueComments: async (prNumber) => {

@@ -0,0 +114,4 @@
+  if (end === undefined) {
+    return undefined;
+  }
+  const start = Math.max(located.start, end - (MAX_COMMENT_LINES - 1));