rebase

Rebase PR #$ARGUMENTS onto latest origin/main by spawning the rebase-resolver subagent. This command exists because manual rebase loops were eating significant orchestrator time across PRs #113, #114, and #115 (AISDLC-105). The mechanical 80% (CHANGELOG overlaps, test additions, prettier drift) is delegated to the subagent; the architectural 20% (modify-vs-delete, semantic conflicts, verification failures) escalates back here for human attention.

Why this command lives in the slash command body (not a subagent middleman)

Same reason as /ai-sdlc execute: plugin subagents cannot use the Agent tool (the harness filters it out one level deep regardless of frontmatter — empirical proof in AISDLC-69.2 / AISDLC-98). The slash command body runs in the main Claude Code session which DOES have Agent, so it can spawn rebase-resolver directly.

Hard rules (NEVER violate)

1. Never merge a PR. Do not run gh pr merge.
2. Never force-push with plain --force / -f. Always use --force-with-lease (mirrors agent-role.yaml block list).
3. Never push to main or master. Refuse early.
4. Never close PRs or issues. No gh pr close, gh issue close.
5. Never delete branches. No git branch -D / -d.
6. Never edit .ai-sdlc/** or .github/workflows/**.
7. Never write GitHub Actions CI-skip magic tokens (AISDLC-88) — the five literal substrings ([skip ci], [ci skip], [no ci], [skip actions], [actions skip]) silently disable workflows. The re-attestation chore commit body composed by Step 5 below is sanitised the same way /ai-sdlc execute Step 10 sanitises it.

Step 0 — Validate input

PR=$ARGUMENTS
if [ -z "$PR" ] || ! echo "$PR" | grep -qE '^[0-9]+$'; then
  echo "ERROR: pass a PR number, e.g. /ai-sdlc rebase 115"
  exit 1
fi

Step 1 — Locate PR + worktree

gh pr view "$PR" --json number,title,headRefName,headRefOid,body,state \
  > /tmp/rebase-pr-${PR}.json

BRANCH=$(jq -r '.headRefName' /tmp/rebase-pr-${PR}.json)
HEAD_SHA=$(jq -r '.headRefOid' /tmp/rebase-pr-${PR}.json)
TITLE=$(jq -r '.title' /tmp/rebase-pr-${PR}.json)

# Refuse on main/master (Hard Rule 3).
if [ "$BRANCH" = "main" ] || [ "$BRANCH" = "master" ]; then
  echo "ERROR: refusing to rebase $BRANCH — protected branch"
  exit 1
fi

# Derive task ID from branch (pattern: ai-sdlc/<prefix>-<numeric>[.<sub>]-<slug>).
# IMPORTANT: this regex MUST be portable across BSD sed (macOS) and GNU sed
# (linux). BSD sed has no `+?` non-greedy quantifier, and even on GNU sed
# `+?` would stop at the first dash, mangling task IDs like `aisdlc-105`
# down to `aisdlc`. Use an explicit `<letters>-<digits-and-dots>` shape
# instead — captures `aisdlc-105`, `aisdlc-100.2`, etc.
TASK_ID_LOWER=$(echo "$BRANCH" | sed -E 's|^ai-sdlc/([a-z]+-[0-9.]+).*|\1|')
WORKTREE_PATH=".worktrees/$TASK_ID_LOWER"