@overdeck/desktop 0.45.16 → 0.45.18

package/server/{uat-train-BRo6DM7p.js → uat-train-CqN34zFx.js}

@@ -1,17 +1,17 @@
-import { Fn as init_projects, Jr as init_paths, Or as CONFIG_FILE, Sn as findProjectByPathSync, Z as resolveModel, d as loadConfigNoMigration, t as init_config_yaml } from "./config-yaml-cNOZcEww.js";
+import { Fn as init_projects, Sn as findProjectByPathSync, Yr as init_paths, Z as resolveModel, d as loadConfigNoMigration, kr as CONFIG_FILE, t as init_config_yaml } from "./config-yaml-CqaAyn8y.js";
 import { t as require_toml } from "./toml-CeLDATih.js";
-import { C as isPaneDead, L as sessionExists, w as killSession, x as init_tmux } from "./tmux-C3g9VFcg.js";
-import { j as messageAgent, t as init_agents } from "./agents-B9GwfCyp.js";
-import { S as setUatGenerationStackStartedAtSync, a as getUatGenerationSync, h as listUatGenerationsWithStacksSync, l as isMergeTrainEnabled, m as listUatGenerationsSync, o as init_merge_sync, p as listUatGenerationNamesSync, s as insertUatGenerationSync, w as updateUatGenerationSync } from "./merge-sync-D7jWLgCC.js";
-import { A as init_vbrief_index, M as readVBriefDocument, k as findVBriefByIssue } from "./io-VEGSAqsd.js";
-import { S as getConversationByName, _t as getDiscoveredStats, at as aggregateDiscoveredSessionCost, ct as countDiscoveredSessions, ft as findDiscoveredSessions, k as init_conversations, mt as getDiscoveredSessionById, ot as aggregateDiscoveredSessionCostBy, yt as init_discovered_sessions } from "./conversations-B-lcHv-5.js";
-import { f as isFlywheelGloballyPaused, i as getFlywheelActiveRunId, n as FLYWHEEL_GLOBAL_PAUSE_KEY, o as getSetting, s as init_control_settings, t as FLYWHEEL_ACTIVE_RUN_ID_KEY, w as setSetting } from "./control-settings-D4EFsRBd.js";
-import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-C6g2R0Cd.js";
-import { a as enrichSessions, c as searchSessions, i as CostThresholdError, n as getSessionsFeedFacets, o as embedSessions, r as listSessionsFeed, t as scan } from "./scanner-BTM1jc_u.js";
-import { S as writeLatestFlywheelStatus, c as spawnFlywheelAgent, f as getFlywheelRunDetail, g as nextFlywheelRunId, h as listFlywheelRuns, i as loadResumeSessionId, r as isFlywheelDevcontainerRuntime, s as saveResumeSessionId, t as FLYWHEEL_ORCHESTRATOR_AGENT_ID, u as abortFlywheelRun, v as readFlywheelLaunchMetadata, x as writeFlywheelLaunchMetadata, y as resolveLiveFlywheelRunId } from "./flywheel-Dczmgchd.js";
-import { t as recordDeaconNudge } from "./deacon-nudge-log-B-naf89q.js";
-import { n as init_acceptance_criteria, t as extractACFromDocument } from "./acceptance-criteria-BZ_nQS1f.js";
-import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-Bqi1EF1P.js";
+import { R as sessionExists, S as init_tmux, T as killSession, w as isPaneDead } from "./tmux-U55cNGFG.js";
+import { L as messageAgent, s as init_agents } from "./queries-C0LCGG21.js";
+import { S as setUatGenerationStackStartedAtSync, a as getUatGenerationSync, h as listUatGenerationsWithStacksSync, l as isMergeTrainEnabled, m as listUatGenerationsSync, o as init_merge_sync, p as listUatGenerationNamesSync, s as insertUatGenerationSync, w as updateUatGenerationSync } from "./merge-sync-B2KSk54U.js";
+import { O as findVBriefByIssue, j as readVBriefDocument, k as init_vbrief_index } from "./io-DkC4sFSy.js";
+import { S as getConversationByName, _t as getDiscoveredStats, at as aggregateDiscoveredSessionCost, ct as countDiscoveredSessions, ft as findDiscoveredSessions, k as init_conversations, mt as getDiscoveredSessionById, ot as aggregateDiscoveredSessionCostBy, yt as init_discovered_sessions } from "./conversations-BX5aD-6F.js";
+import { f as isFlywheelGloballyPaused, i as getFlywheelActiveRunId, n as FLYWHEEL_GLOBAL_PAUSE_KEY, o as getSetting, s as init_control_settings, t as FLYWHEEL_ACTIVE_RUN_ID_KEY, w as setSetting } from "./control-settings-BguNQ1F_.js";
+import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-Dx8hUsvC.js";
+import { a as enrichSessions, c as searchSessions, i as CostThresholdError, n as getSessionsFeedFacets, o as embedSessions, r as listSessionsFeed, t as scan } from "./scanner-BlZ2vB7j.js";
+import { S as writeLatestFlywheelStatus, c as spawnFlywheelAgent, f as getFlywheelRunDetail, g as nextFlywheelRunId, h as listFlywheelRuns, i as loadResumeSessionId, r as isFlywheelDevcontainerRuntime, s as saveResumeSessionId, t as FLYWHEEL_ORCHESTRATOR_AGENT_ID, u as abortFlywheelRun, v as readFlywheelLaunchMetadata, x as writeFlywheelLaunchMetadata, y as resolveLiveFlywheelRunId } from "./flywheel-CqkO3cDj.js";
+import { t as recordDeaconNudge } from "./deacon-nudge-log-ilDfxrhK.js";
+import { t as extractACFromDocument } from "./acceptance-criteria-aQFKQf-J.js";
+import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-5e9xOve4.js";
 import { isAbsolute, relative, resolve, sep } from "node:path";
 import { Effect } from "effect";
 import { existsSync } from "fs";
@@ -206,15 +206,15 @@ async function runInline(operation, payload, onProgress) {
 			return null;
 		}
 		case "getArtifactBySlug": {
-			const { getArtifactBySlugJob } = await import("./artifact-index-jobs-CcSrUoSE.js");
+			const { getArtifactBySlugJob } = await import("./artifact-index-jobs-qqa51B2Z.js");
 			return getArtifactBySlugJob(payload);
 		}
 		case "listArtifactsForWorkspaceOrIssue": {
-			const { listArtifactsForWorkspaceOrIssueJob } = await import("./artifact-index-jobs-CcSrUoSE.js");
+			const { listArtifactsForWorkspaceOrIssueJob } = await import("./artifact-index-jobs-qqa51B2Z.js");
 			return listArtifactsForWorkspaceOrIssueJob(payload);
 		}
 		case "unshareArtifactBySlug": {
-			const { unshareArtifactBySlugJob } = await import("./artifact-index-jobs-CcSrUoSE.js");
+			const { unshareArtifactBySlugJob } = await import("./artifact-index-jobs-qqa51B2Z.js");
 			return unshareArtifactBySlugJob(payload);
 		}
 	}
@@ -273,7 +273,6 @@ function runDashboardDbJob(operation, payload, onProgress) {
 }
 //#endregion
 //#region services/flywheel-actions.ts
-init_acceptance_criteria();
 init_ensure_devcontainer();
 init_control_settings();
 const DEFAULT_BRIEF_PATH = "docs/flywheel-brief.md";
@@ -455,12 +454,12 @@ async function pauseFlywheelRunForDashboard() {
 	if (before.activeRunId) try {
 		const { readFile } = await import("node:fs/promises");
 		const { join } = await import("node:path");
-		const { getAgentDir } = await import("./agents-CEcaxSkR.js");
+		const { getAgentDir } = await import("./agents-BA15AQqo.js");
 		const sessionId = (await readFile(join(getAgentDir(FLYWHEEL_ORCHESTRATOR_AGENT_ID), "session.id"), "utf-8")).trim();
 		if (sessionId) await saveResumeSessionId(before.activeRunId, sessionId);
 	} catch {}
 	await setPaused(true);
-	await import("./agents-CEcaxSkR.js").then(({ stopAgent }) => Effect.runPromise(stopAgent(FLYWHEEL_ORCHESTRATOR_AGENT_ID)));
+	await import("./agents-BA15AQqo.js").then(({ stopAgent }) => Effect.runPromise(stopAgent(FLYWHEEL_ORCHESTRATOR_AGENT_ID)));
 	return {
 		before,
 		after: await readGateSnapshot(),
@@ -470,7 +469,7 @@ async function pauseFlywheelRunForDashboard() {
 async function abortFlywheelRunForDashboard() {
 	const candidate = await getActiveRunId();
 	if (!candidate) return { aborted: await resolveLiveFlywheelRunId() ?? null };
-	const { stopAgent } = await import("./agents-CEcaxSkR.js");
+	const { stopAgent } = await import("./agents-BA15AQqo.js");
 	await Effect.runPromise(stopAgent(FLYWHEEL_ORCHESTRATOR_AGENT_ID));
 	await abortFlywheelRun(candidate);
 	return { aborted: candidate };
@@ -1901,7 +1900,7 @@ function canStartUatTrainReconciler() {
 async function getReadySet() {
 	const status = await readCurrentFlywheelStatusForDashboard();
 	if (!status) return null;
-	const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-DEtEd3aK.js");
+	const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-LDzQDwSg.js");
 	const fromVerbs = (await Effect.runPromise(computeMergeQueue(status.activePipeline, projectRoot(), {
 		getPrUrl: resolveMergeQueuePrUrl,
 		onIneligible: (issueId, reason) => console.log(`[uat-train] ${issueId} has a merge verb but is not merge-eligible (${reason}) — excluded from the ready set`)
@@ -1927,8 +1926,8 @@ async function getReadySet() {
 */
 async function sweepEligibleFeatures(alreadyIncluded) {
 	try {
-		const { loadReviewStatuses, mergeGateEligibility } = await import("./review-status-CG0iDuWa.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-CrBE6IhN.js");
+		const { loadReviewStatuses, mergeGateEligibility } = await import("./review-status-77N3PoZr.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-Dc9aoVoG.js");
 		const { execFile } = await import("node:child_process");
 		const { promisify } = await import("node:util");
 		const execFileAsync = promisify(execFile);
@@ -2162,7 +2161,7 @@ async function postUatGenerationStackPayload(name) {
 }
 async function postUatGenerationPromotePayload(name, firePostMerge) {
 	const root = projectRoot();
-	const { reviewRecordEligibility } = await import("./flywheel-merge-order-DEtEd3aK.js");
+	const { reviewRecordEligibility } = await import("./flywheel-merge-order-LDzQDwSg.js");
 	const result = await promoteUatGeneration(name, root, {
 		git: buildUatPromoteGitDeps(root),
 		store: {
@@ -2180,4 +2179,4 @@ async function postUatGenerationPromotePayload(name, firePostMerge) {
 //#endregion
 export { getDashboardIdentity as _, postUatGenerationStackPayload as a, shouldRefuseHostDashboardPort as b, startUatTrainReconciler as c, openFlywheelRunReportForDashboard as d, pauseFlywheelRunForDashboard as f, runDashboardDbJob as g, startFlywheelRunForDashboard as h, postUatGenerationPromotePayload as i, stopUatTrainReconciler as l, resumeFlywheelRunForDashboard as m, getUatCandidatePayload as n, resolveUatProjectRoot as o, readCurrentFlywheelStatusForDashboard as p, getUatGenerationsPayload as r, runUatTrainReconcile as s, canStartUatTrainReconciler as t, abortFlywheelRunForDashboard as u, isWorkspaceRepoRoot as v, readHostDashboardApiPort as y };
 
-//# sourceMappingURL=uat-train-BRo6DM7p.js.map
+//# sourceMappingURL=uat-train-CqN34zFx.js.map

package/server/{validation-CsPVsoA0.js → validation-4-z2Cw4z.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { xr as init_errors } from "./config-yaml-cNOZcEww.js";
-import { f as init_config, m as loadConfigSync } from "./config-DVLdmnMJ.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-ChWOECy0.js";
+import { Sr as init_errors } from "./config-yaml-CqaAyn8y.js";
+import { f as init_config, m as loadConfigSync } from "./config-DfaUXr6r.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-C77NKnsV.js";
 import { Effect } from "effect";
 import "fs";
 import { join } from "path";
@@ -25,6 +25,32 @@ function buildQualityGateEnv(gateEnv) {
 		...gateEnv
 	};
 }
+function registerGateProcessGroup(pid) {
+	if (!pid || process.platform === "win32") return void 0;
+	const watchdog = setTimeout(() => {
+		console.warn(`[quality-gate] process group ${pid} exceeded timeout+grace — killing group (PAN-2669)`);
+		killGateProcessGroup(pid);
+	}, GATE_TIMEOUT_MS + GATE_WATCHDOG_GRACE_MS);
+	watchdog.unref();
+	activeGateProcessGroups.set(pid, watchdog);
+	return pid;
+}
+function killGateProcessGroup(pgid) {
+	if (!pgid) return;
+	const watchdog = activeGateProcessGroups.get(pgid);
+	if (watchdog) clearTimeout(watchdog);
+	activeGateProcessGroups.delete(pgid);
+	try {
+		process.kill(-pgid, "SIGKILL");
+	} catch {}
+}
+/** PAN-2669: reap every live gate process group — called on server shutdown so
+*  restarts never orphan vitest/build trees. */
+function killAllGateProcessGroups() {
+	const count = activeGateProcessGroups.size;
+	for (const pgid of [...activeGateProcessGroups.keys()]) killGateProcessGroup(pgid);
+	return count;
+}
 async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", opts = {}) {
 	if (opts.isRemote && !opts.vmName) throw new Error("Remote workspace requires vmName");
 	if (opts.isRemote && opts.vmName) {
@@ -38,10 +64,12 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 		const cwd = gate.path ? join(projectPath, gate.path) : projectPath;
 		console.log(`[quality-gate] Running "${name}" (${required ? "required" : "optional"}) in ${cwd}`);
 		opts.onLog?.(`Running gate "${name}"${required ? "" : " (optional)"}…`);
+		opts.onGateStart?.(name);
 		const startTime = Date.now();
 		if (gate.type === "http_health") {
 			const result = await runHttpHealthGate(name, gate, required);
 			results.push(result);
+			opts.onGateResult?.(result);
 			if (!result.passed && required) {
 				console.log(`[quality-gate] ✗ Required gate "${name}" failed — stopping`);
 				break;
@@ -71,6 +99,7 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 						error: `container ${containerName} is not running`,
 						infraUnavailable: true
 					});
+					opts.onGateResult?.(results[results.length - 1]);
 					if (required) break;
 					continue;
 				}
@@ -84,6 +113,7 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 					error: "docker daemon unreachable",
 					infraUnavailable: true
 				});
+				opts.onGateResult?.(results[results.length - 1]);
 				if (required) break;
 				continue;
 			}
@@ -96,23 +126,35 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 		let lastError = null;
 		let passedGate = false;
 		let passOutput = "";
-		for (let attempt = 1; attempt <= maxAttempts; attempt++) try {
-			const useHostCwd = !isRemote && !(gate.container && gate.container_name);
-			const env = buildQualityGateEnv(gate.env);
-			const { stdout, stderr } = await execAsync(resolvedCommand, {
-				cwd: useHostCwd ? cwd : void 0,
-				env,
-				maxBuffer: 10 * 1024 * 1024,
-				timeout: 1200 * 1e3
-			});
-			passedGate = true;
-			passOutput = (stdout + stderr).slice(-2e3);
-			break;
-		} catch (error) {
-			lastError = error;
-			if (attempt < maxAttempts) {
-				console.log(`[quality-gate] ✗ "${name}" failed attempt ${attempt}/${maxAttempts} — retrying (gate declares retry: ${gate.retry})`);
-				opts.onLog?.(`↻ ${name} failed attempt ${attempt}/${maxAttempts} — retrying`);
+		for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+			let gatePgid;
+			try {
+				const useHostCwd = !isRemote && !(gate.container && gate.container_name);
+				const env = buildQualityGateEnv(gate.env);
+				const execPromise = execAsync(resolvedCommand, {
+					cwd: useHostCwd ? cwd : void 0,
+					env,
+					maxBuffer: 10 * 1024 * 1024,
+					timeout: GATE_TIMEOUT_MS,
+					...process.platform !== "win32" ? { detached: true } : {}
+				});
+				gatePgid = registerGateProcessGroup(execPromise.child.pid);
+				if (opts.onGateOutput) {
+					execPromise.child.stdout?.on("data", (chunk) => opts.onGateOutput(name, String(chunk)));
+					execPromise.child.stderr?.on("data", (chunk) => opts.onGateOutput(name, String(chunk)));
+				}
+				const { stdout, stderr } = await execPromise;
+				killGateProcessGroup(gatePgid);
+				passedGate = true;
+				passOutput = (stdout + stderr).slice(-2e3);
+				break;
+			} catch (error) {
+				killGateProcessGroup(gatePgid);
+				lastError = error;
+				if (attempt < maxAttempts) {
+					console.log(`[quality-gate] ✗ "${name}" failed attempt ${attempt}/${maxAttempts} — retrying (gate declares retry: ${gate.retry})`);
+					opts.onLog?.(`↻ ${name} failed attempt ${attempt}/${maxAttempts} — retrying`);
+				}
 			}
 		}
 		if (passedGate) {
@@ -126,6 +168,7 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 				output: passOutput,
 				durationMs
 			});
+			opts.onGateResult?.(results[results.length - 1]);
 		} else {
 			const error = lastError;
 			const durationMs = Date.now() - startTime;
@@ -140,6 +183,7 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 				durationMs,
 				error: error.message?.slice(0, 500)
 			});
+			opts.onGateResult?.(results[results.length - 1]);
 			if (required) {
 				console.log(`[quality-gate] ✗ Required gate "${name}" failed — stopping`);
 				break;
@@ -194,7 +238,7 @@ async function runHttpHealthGate(name, gate, required) {
 		};
 	}
 }
-var execAsync, DASHBOARD_RUNTIME_ENV_KEYS, DEFAULT_GATES, runQualityGates;
+var execAsync, DASHBOARD_RUNTIME_ENV_KEYS, GATE_TIMEOUT_MS, GATE_WATCHDOG_GRACE_MS, activeGateProcessGroups, DEFAULT_GATES, runQualityGates;
 var init_validation = __esmMin((() => {
 	init_workspace_config();
 	init_config();
@@ -205,6 +249,9 @@ var init_validation = __esmMin((() => {
 		"PORT",
 		"DASHBOARD_URL"
 	];
+	GATE_TIMEOUT_MS = 1200 * 1e3;
+	GATE_WATCHDOG_GRACE_MS = 3e4;
+	activeGateProcessGroups = /* @__PURE__ */ new Map();
 	DEFAULT_GATES = {
 		typecheck: { command: "npm run typecheck 2>&1" },
 		lint: { command: "npm run lint 2>&1" },
@@ -213,6 +260,6 @@ var init_validation = __esmMin((() => {
 	runQualityGates = (gates, projectPath, phase = "pre_push", opts = {}) => Effect.promise(() => runQualityGatesPromise(gates, projectPath, phase, opts));
 }));
 //#endregion
-export { init_validation as n, runQualityGates as r, DEFAULT_GATES as t };
+export { runQualityGates as i, init_validation as n, killAllGateProcessGroups as r, DEFAULT_GATES as t };
 
-//# sourceMappingURL=validation-CsPVsoA0.js.map
+//# sourceMappingURL=validation-4-z2Cw4z.js.map

package/server/validation-DpTNakM6.js

@@ -0,0 +1,3 @@
+import { i as runQualityGates, n as init_validation, r as killAllGateProcessGroups } from "./validation-4-z2Cw4z.js";
+init_validation();
+export { killAllGateProcessGroups, runQualityGates };

package/server/verification-artifact-DK1xb1zG.js

@@ -0,0 +1,56 @@
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+//#region ../../lib/cloister/verification-artifact.ts
+/**
+* Verification gate artifact — the durable record of the most recent
+* quality-gate run for a workspace, written by the verification runner and
+* served to the dashboard's issue-tree Lint node.
+*
+* Lives at `<workspace>/.overdeck/verification-latest.json` (workspace runtime
+* plane, gitignored alongside continue.json). Each run overwrites the previous
+* artifact; history is not kept here — review-status history remains the
+* canonical timeline.
+*/
+const ARTIFACT_RELATIVE_PATH = join(".overdeck", "verification-latest.json");
+function verificationArtifactPath(workspacePath) {
+	return join(workspacePath, ARTIFACT_RELATIVE_PATH);
+}
+function writeVerificationArtifact(workspacePath, issueId, gateResults, progress) {
+	const failed = gateResults.find((r) => !r.passed && r.required !== false);
+	const running = progress !== void 0;
+	const artifact = {
+		issueId,
+		ranAt: (/* @__PURE__ */ new Date()).toISOString(),
+		outcome: running ? "running" : failed ? "failed" : "passed",
+		...running && progress.currentGate ? { currentGate: progress.currentGate } : {},
+		...running && progress.currentGateOutput ? { currentGateOutput: progress.currentGateOutput } : {},
+		...!running && failed ? { failedCheck: failed.name } : {},
+		gates: gateResults.map((r) => ({
+			name: r.name,
+			passed: r.passed,
+			required: r.required !== false,
+			durationMs: r.durationMs,
+			...r.passed ? {} : { output: r.output },
+			...r.error ? { error: r.error } : {}
+		}))
+	};
+	const path = verificationArtifactPath(workspacePath);
+	mkdirSync(join(workspacePath, ".overdeck"), { recursive: true });
+	writeFileSync(path, JSON.stringify(artifact, null, 2));
+	return artifact;
+}
+function readVerificationArtifact(workspacePath) {
+	const path = verificationArtifactPath(workspacePath);
+	if (!existsSync(path)) return null;
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf-8"));
+		if (!parsed || !Array.isArray(parsed.gates)) return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { verificationArtifactPath as n, writeVerificationArtifact as r, readVerificationArtifact as t };
+
+//# sourceMappingURL=verification-artifact-DK1xb1zG.js.map

package/server/verification-artifact-JD_edpZ9.js

@@ -0,0 +1,2 @@
+import { t as readVerificationArtifact } from "./verification-artifact-DK1xb1zG.js";
+export { readVerificationArtifact };