chore: blank

.coderabbit.yaml

@@ -277,7 +277,7 @@ reviews:
     - Payment-safe
     - Execution-consistent
     - Strictly aligned with Hedera query semantics
-  
+
   # TRANSACTION REVIEW INSTRUCTIONS - CORE FOUNDATION (MOST CRITICAL MODULE)
   transaction_review_instructions: &transaction_review_instructions |
     You are acting as a senior maintainer and security architect reviewing the **core transaction module** in the hiero-sdk-python project.
@@ -599,7 +599,7 @@ reviews:
     - Changes encoding/decoding results for same inputs
     - Modifies ContractId EVM alias ↔ numeric mapping
     - Alters payable amount (amount vs initial_balance) semantics
-    
+
     If breaking: require deprecation warnings (e.g. warnings.warn(..., DeprecationWarning)), migration docs, dual-behavior tests.
     ----------------------------------------------------------
     REVIEW FOCUS 2 — ABI ENCODING/DECODING SAFETY (CRITICAL)
@@ -670,7 +670,7 @@ reviews:
     - Protobuf-aligned with Hedera/Hiero
     - Gas/value safe
     - Deterministic and user-protective
-  
+
   # NODES REVIEW INSTRUCTIONS — PRIVILEGED NODE LIFECYCLE OPERATIONS
   node_review_instructions: &node_review_instructions |
     You are acting as a senior maintainer and security architect reviewing the nodes module
@@ -795,7 +795,7 @@ reviews:
     - Certificate and endpoint handling edge cases are tested
 
     Missing coverage should be flagged clearly.
-    
+
     ----------------------------------------------------------
     EXPLICIT NON-GOALS
     ----------------------------------------------------------
@@ -819,7 +819,7 @@ reviews:
   file_review_instructions: &file_review_instructions |
     You are acting as a senior maintainer reviewing file service-related code
     in the hiero-sdk-python project.
-    
+
     This includes:
     - File transactions (FileCreateTransaction, FileUpdateTransaction, FileAppendTransaction, FileDeleteTransaction)
     - File query (FileContentsQuery, FileInfoQuery)
@@ -839,19 +839,19 @@ reviews:
     (HIGH SENSITIVITY)
     ----------------------------------------------------------
     Public API contracts for FileId, FileInfo, and file transactions are user-facing.
-    
+
     Verify that:
     - Setter method signatures (e.g., set_contents, set_file_memo) stay backward compatible.
     - Method chaining (returning self) is preserved.
     - FileId constructors and string representations don't break existing use cases.
-    
+
     If breaking changes are necessary, they must be explicit and deprecation warnings should be added.
 
     ----------------------------------------------------------
     REVIEW FOCUS 2 — CHUNKING SEMANTICS (HIGH VERIFICATION)
     ----------------------------------------------------------
     Specific to FileAppendTransaction, which natively handles chunking.
-    
+
     Verify that:
     - freeze_with() correctly generates sequential TransactionIds for each chunk.
     - valid_start timestamps for each chunk are spaced out correctly (e.g., incremented by at least 1 nanosecond).
@@ -864,7 +864,7 @@ reviews:
     REVIEW FOCUS 3 — MEMO HANDLING
     ----------------------------------------------------------
     Nuanced memo distinction across the file module:
-    
+
     Verify that:
     - The distinction between file_memo (the metadata attribute of the file) and transaction_memo (the note on the transaction itself) is respected.
     - FileCreateTransaction handles file_memo as a native string.
@@ -876,7 +876,7 @@ reviews:
     REVIEW FOCUS 4 — TRANSACTION BASE CLASS CONTRACT
     ----------------------------------------------------------
     All file transaction classes MUST inherit from Transaction.
-    
+
     Required implementations:
     - _build_proto_body()
     - build_transaction_body()
@@ -891,7 +891,7 @@ reviews:
     REVIEW FOCUS 5 — PROTOBUF ALIGNMENT
     ----------------------------------------------------------
     Serialization and deserialization MUST map directly to Hedera protobufs.
-    
+
     Verify that:
     - fileCreate, fileUpdate, fileAppend, and fileDelete fields map exactly to their respective protobuf bodies.
     - Null-safe conversions are handling optional properties safely.

.github/scripts/sync-issue-labels.js

@@ -0,0 +1,265 @@
+// Checks if the given login belongs to a bot account (ends with [bot] or contains "dependabot").
+function isBotLogin(login = "") {
+  return /\[bot\]$/i.test(login) || /dependabot/i.test(login);
+}
+
+// Extracts issue numbers from PR body closing keywords (Fixes #123, Closes #456, Resolves #789, etc.).
+function extractLinkedIssueNumbers(prBody = "") {
+  const closingReferenceRegex =
+    /\b(?:fix(?:es|ed)?|close(?:s|d)?|resolve(?:s|d)?)\s*:?\s*((?:#\d+)(?:\s*(?:,|and)\s*#\d+)*)/gi;
+
+  const numbers = new Set();
+  let referenceMatch;
+
+  while ((referenceMatch = closingReferenceRegex.exec(prBody)) !== null) {
+    const referencesText = referenceMatch[1] || "";
+    const issueMatches = referencesText.matchAll(/#(\d+)/g);
+
+    for (const issueMatch of issueMatches) {
+      numbers.add(Number(issueMatch[1]));
+    }
+  }
+
+  return [...numbers];
+}
+
+// Normalizes label objects/strings to an array of trimmed label names.
+function normalizeLabelNames(labels = []) {
+  const names = [];
+  for (const label of labels) {
+    if (typeof label === "string" && label.trim()) {
+      names.push(label.trim());
+      continue;
+    }
+
+    if (label && typeof label.name === "string" && label.name.trim()) {
+      names.push(label.name.trim());
+    }
+  }
+  return names;
+}
+
+// Fetches PR data from the payload or GitHub API if not present in payload.
+async function getPullRequestData({ github, context, prNumber }) {
+  if (context.payload.pull_request) {
+    return context.payload.pull_request;
+  }
+
+  const response = await github.rest.pulls.get({
+    owner: context.repo.owner,
+    repo: context.repo.repo,
+    pull_number: prNumber,
+  });
+
+  return response.data;
+}
+
+// Resolves PR number from environment or context, and determines if dry-run mode is enabled.
+function resolveExecutionContext(context) {
+  const isDryRun = /^true$/i.test(process.env.DRY_RUN || "");
+  const prNumber = Number(process.env.PR_NUMBER) || context.payload.pull_request?.number;
+  return { prNumber, isDryRun, owner: context.repo.owner, repo: context.repo.repo };
+}
+
+// Determines if the PR should be skipped (e.g., bot-authored PRs, no linked issues).
+function shouldSkipPR(prData, linkedIssueNumbers) {
+  const prAuthor = prData?.user?.login || "";
+
+  if (isBotLogin(prAuthor)) {
+    return { skip: true, reason: `Skipping bot-authored PR from ${prAuthor}.` };
+  }
+
+  if (!linkedIssueNumbers.length) {
+    return { skip: true, reason: "No linked issue references found in PR body." };
+  }
+
+  return { skip: false };
+}
+
+// Collects labels from all linked issues, handling 404s and PR references.
+async function collectLabelsFromLinkedIssues({ github, owner, repo, linkedIssueNumbers }) {
+  const labelsFromIssues = new Set();
+
+  for (const issueNumber of linkedIssueNumbers) {
+    try {
+      const issueResponse = await github.rest.issues.get({
+        owner,
+        repo,
+        issue_number: issueNumber,
+      });
+
+      if (issueResponse?.data?.pull_request) {
+        console.log(`[sync-issue-labels] Skipping #${issueNumber}: reference points to a pull request.`);
+        continue;
+      }
+
+      const issueLabelNames = normalizeLabelNames(issueResponse?.data?.labels || []);
+      console.log(
+        `[sync-issue-labels] Issue #${issueNumber} labels: ${issueLabelNames.length ? issueLabelNames.join(", ") : "(none)"
+        }`
+      );
+
+      for (const label of issueLabelNames) {
+        labelsFromIssues.add(label);
+      }
+    } catch (error) {
+      if (error?.status === 404) {
+        console.log(`[sync-issue-labels] Linked issue #${issueNumber} not found. Skipping.`);
+        continue;
+      }
+
+      throw error;
+    }
+  }
+
+  return labelsFromIssues;
+}
+
+// Computes which labels should be added to the PR (missing from PR but present in issues).
+function computeLabelsToAdd(prData, labelsFromIssues) {
+  const prLabelNames = new Set(normalizeLabelNames(prData?.labels || []));
+  return [...labelsFromIssues].filter((label) => !prLabelNames.has(label));
+}
+
+// Adds labels to the pull request via GitHub API.
+async function addLabelsToPullRequest({ github, owner, repo, prNumber, labelsToAdd }) {
+  await github.rest.issues.addLabels({
+    owner,
+    repo,
+    issue_number: prNumber,
+    labels: labelsToAdd,
+  });
+
+  console.log(`[sync-issue-labels] Added labels to PR #${prNumber}: ${labelsToAdd.join(", ")}`);
+}
+
+// Logs context that helps diagnose permission / fork / event issues.
+function logExecutionDiagnostics(context, prNumber, owner, repo, isDryRun) {
+  const pr = context?.payload?.pull_request;
+
+  const baseRepo = pr?.base?.repo?.full_name;
+  const headRepo = pr?.head?.repo?.full_name;
+  const isFork = Boolean(pr?.head?.repo?.fork) || (baseRepo && headRepo && baseRepo !== headRepo);
+
+  console.log("[sync-issue-labels] Diagnostics:");
+  console.log(`  eventName=${context?.eventName || "(unknown)"}`);
+  console.log(`  action=${context?.payload?.action || "(none)"}`);
+  console.log(`  actor=${context?.actor || context?.payload?.sender?.login || "(unknown)"}`);
+  console.log(`  repo=${owner}/${repo}`);
+  console.log(`  prNumber=${prNumber}`);
+  console.log(`  dry_run=${isDryRun}`);
+  if (pr) {
+    console.log(`  prAuthor=${pr?.user?.login || "(unknown)"}`);
+    console.log(`  baseRepo=${baseRepo || "(unknown)"}`);
+    console.log(`  headRepo=${headRepo || "(unknown)"}`);
+    console.log(`  isFork=${isFork}`);
+    console.log(`  headRef=${pr?.head?.ref || "(unknown)"}`);
+    console.log(`  baseRef=${pr?.base?.ref || "(unknown)"}`);
+  } else {
+    console.log("  pull_request payload not present (likely workflow_dispatch or API fetch path).");
+  }
+}
+
+// Formats Octokit/GitHub API errors with useful details.
+function logOctokitError(prefix, error) {
+  console.log(prefix);
+  console.log(`  status: ${error?.status ?? "(unknown)"}`);
+  console.log(`  message: ${error?.message ?? "(none)"}`);
+
+  // Octokit typically provides response.data / response.headers on API errors
+  if (error?.response?.data) {
+    try {
+      console.log(`  response.data: ${JSON.stringify(error.response.data, null, 2)}`);
+    } catch {
+      console.log("  response.data: (unserializable)");
+    }
+  }
+
+  const headers = error?.response?.headers;
+  if (headers) {
+    // These are the most useful for “Resource not accessible by integration” cases.
+    console.log(`  x-accepted-github-permissions: ${headers["x-accepted-github-permissions"] || "(missing)"}`);
+    console.log(`  x-github-request-id: ${headers["x-github-request-id"] || "(missing)"}`);
+    console.log(`  github-authentication-token-expiration: ${headers["github-authentication-token-expiration"] || "(missing)"}`);
+  }
+}
+
+// Main entry point: syncs labels from linked issues to the PR.
+module.exports = async ({ github, context }) => {
+  const { prNumber, isDryRun, owner, repo } = resolveExecutionContext(context);
+
+  if (!prNumber) {
+    throw new Error("PR number could not be determined.");
+  }
+
+  console.log(
+    `[sync-issue-labels] Processing PR #${prNumber} in ${owner}/${repo} (dry_run=${isDryRun}).`
+  );
+
+  // Added diagnostics early, before any API writes.
+  logExecutionDiagnostics(context, prNumber, owner, repo, isDryRun);
+
+  let prData;
+  try {
+    prData = await getPullRequestData({ github, context, prNumber });
+  } catch (error) {
+    logOctokitError(`[sync-issue-labels] Failed to fetch PR #${prNumber}:`, error);
+    throw new Error(`[sync-issue-labels] Failed to fetch PR #${prNumber}: ${error?.message || error}`);
+  }
+
+  const linkedIssueNumbers = extractLinkedIssueNumbers(prData?.body || "");
+  const skipResult = shouldSkipPR(prData, linkedIssueNumbers);
+
+  if (skipResult.skip) {
+    console.log(`[sync-issue-labels] ${skipResult.reason}`);
+    return;
+  }
+
+  console.log(
+    `[sync-issue-labels] Linked issues detected: ${linkedIssueNumbers.map((n) => `#${n}`).join(", ")}`
+  );
+
+  const labelsFromIssues = await collectLabelsFromLinkedIssues({
+    github,
+    owner,
+    repo,
+    linkedIssueNumbers,
+  });
+
+  if (!labelsFromIssues.size) {
+    console.log("[sync-issue-labels] No labels found on linked issues. Nothing to sync.");
+    return;
+  }
+
+  const labelsToAdd = computeLabelsToAdd(prData, labelsFromIssues);
+  const prLabelNames = new Set(normalizeLabelNames(prData?.labels || []));
+
+  console.log(
+    `[sync-issue-labels] Existing PR labels: ${prLabelNames.size ? [...prLabelNames].join(", ") : "(none)"
+    }`
+  );
+  console.log(
+    `[sync-issue-labels] Labels to add: ${labelsToAdd.length ? labelsToAdd.join(", ") : "(none)"}`
+  );
+
+  if (!labelsToAdd.length) {
+    console.log("[sync-issue-labels] PR already contains all labels from linked issues.");
+    return;
+  }
+
+  if (isDryRun) {
+    console.log(`[sync-issue-labels] DRY_RUN enabled; would add labels: ${labelsToAdd.join(", ")}`);
+    return;
+  }
+
+  try {
+    await addLabelsToPullRequest({ github, owner, repo, prNumber, labelsToAdd });
+  } catch (error) {
+    // Added rich error logging for permission debugging.
+    logOctokitError(`[sync-issue-labels] Failed to add labels to PR #${prNumber}:`, error);
+
+    throw new Error(
+      `[sync-issue-labels] Failed to add labels to PR #${prNumber}: ${error?.message || error}`
+    );
+  }
+};