flow-depslisted

General core, best-effort tail. Package-manager agnostic. The core (Phases 1-4) is ecosystem-agnostic: GitHub normalizes Dependabot PRs and security alerts identically across ecosystems, so merging PRs and reconciling alerts works the same everywhere. The tail (Phase 5) is opt-in. This command names no specific package manager, lockfile, or manifest. - Package manager and stack are already injected at session start (`<tooling>` block: `package-manager: <pm>`; `<repo-context>` block: stack and location). Read them from there. For any install, audit, tree query, lockfile regen, or override, derive the correct command from that manager at runtime. - Do not detect the stack. - Do not re-list lockfiles. - Do not hardcode any tool's syntax. - All check-running goes through `run-checks.sh`. ## Preconditions 1. Stack and package manager are in the injected `<repo-context>` and `<tooling>` blocks. Scratch directory: `!`scratch-dir.sh``. 2. Require `gh`. If absent: stop and report. Confirm auth: `gh auth status`. If unauthenticated, stop. 3. Resolve the repo slug: `gh repo view --json nameWithOwner -q .nameWithOwner`. Call it `<slug>`. If this fails there is no GitHub remote; stop, this command is GitHub-only. 4. Base branch: `!`git-base.sh``. Merge target and rebase base; do not re-derive it. 5. Working tree must be clean. If `git status --porcelain` is non-empty, stop and surface. ## Phase 1: inventory ### 1a. Dependabot PRs `gh pr list --author "app/dependabot" --state open