Developer Infrastructure for Breaking API Changes
Everything implemented in MY OWL is grounded in compiler truth, deterministic patch generation, and strict pre-flight verification.
AST-Based Codebase Analysis
Evaluates actual code reachability using TypeScript/JavaScript compiler AST parsing rather than superficial regex or package manifest version alarms.
AST-Based Symbol Traversal
Parses TypeScript and JavaScript source files into an Abstract Syntax Tree (AST) via ts-morph, inspecting AST nodes with full type awareness.
Detected vs. Affected Classification
Separates passive package presence from active code invocation. Only call sites that actively pass changed parameters or reference deprecated symbols are flagged as Affected.
Import & Call-Site Tracing
Resolves named imports, default imports, re-exports, and local variable aliases back to their upstream SDK origin to eliminate false matches.
Destructured Property & Argument Inspection
Drills into ObjectLiteralExpressions passed to API methods, verifying whether specific properties or values match breaking change criteria.
Controlled Patch Generation
Synthesizes minimal, context-bound code transformations derived from machine-readable migration rules against the exact baseline commit SHA.
Deterministic Migration Planning
Generates structured MigrationPlan artifacts targeting specific AST nodes without asking an LLM to hallucinate arbitrary file rewrites.
Minimal Patch Diffing
Modifies only the necessary lines and tokens. Avoids noisy full-file formatting or re-ordering of unrelated variables.
Exact Source Snapshot Handling
Binds patches to the exact 40-character Git commit SHA of the default branch, preventing application against out-of-date source states.
Whitespace & Code Style Preservation
Maintains your project's single/double quotes, semicolon rules, tab/space indentation, and developer comments.
4-Gate Compiler Verification
Before any proposal is submitted to GitHub, every candidate migration must pass four deterministic pre-flight safety gates in an isolated runner.
Gate 1: AST Syntax Validity
Verifies that the patched file parses cleanly into a valid syntax tree with zero compiler parsing errors.
Gate 2: TypeScript Compiler Diagnostics
Executes `tsc --noEmit` validation against the patched code to ensure zero new type errors or broken interface contracts.
Gate 3: Call-Site Scope & Boundary Check
Strictly enforces that modifications are confined to the intended target file and lines, rejecting forbidden files or repo-level scripts.
Gate 4: Dry-Run Test Execution
Executes your repository's automated test suite against the candidate patch to confirm that existing application behaviors remain intact.
Execution-Bound Verification Evidence
Generates a cryptographically signed verification evidence artifact that binds the repository ID, baseline SHA, change ID, and patch digest.
GitHub App Safety Boundaries
Connects securely through an authorized GitHub App with strictly bounded permissions, isolated branches, and absolute zero auto-merge.
Isolated Migration Branches
Writes proposals exclusively to dedicated branches with canonical prefixes (`apiproof/*` or `myowl/*`), never touching main.
GitHub Draft Pull Requests
Submits proposals as GitHub Draft PRs (`draft: true`) accompanied by verification reports, side-by-side diffs, and upstream change rationale.
Zero Auto-Merge Policy
MY OWL has zero auto-merge capability and zero auto-merge permissions. Human engineers retain total agency to review, test, and merge.
Repository Divergence Protection
If your default branch HEAD has moved since the scan was performed, MY OWL stops immediately and requires a fresh scan before proposing a patch.
Workspace Isolation & Auditability
Multi-tenant workspace isolation, persistent finding lifecycles, and tamper-evident activity logging for complete team visibility.
Workspace Multi-Tenancy
Strict tenant isolation ensures repository configurations, scan results, and migration proposals are isolated to authorized workspace members.
Finding Lifecycle Management
Tracks breaking change findings across states (`open`, `planned`, `proposed`, `resolved`), maintaining history across re-scans.
Idempotent Scan & Worker Queues
Background scan workers process jobs with unique idempotency keys, preventing duplicate findings and concurrent write collisions.
Granular Activity Audit Logs
Records every scan initiation, finding detection, migration synthesis, verification run, and GitHub proposal for compliance tracking.
Ready to protect your repositories from silent API breakage?
Install the GitHub App in under a minute. Connect repositories, run an AST scan, and inspect verified migration proposals.
