@overdeck/desktop 0.45.23 → 0.45.24

package/server/validate-IfDGkaVR.js

@@ -0,0 +1,177 @@
+import { c as init_review_status_sync, r as getAllReviewStatusesFromDb } from "./review-status-sync-BTOpxtTC.js";
+import { H as liveOrderIssueLookup, V as listBooks } from "./flywheel-DHrgCphM.js";
+import { join } from "node:path";
+import { existsSync, readdirSync, statSync } from "node:fs";
+//#region ../../lib/cloister/merge-blockers.ts
+init_review_status_sync();
+/**
+* PRs that passed review but cannot merge for a GitHub-native reason (PAN-1620):
+* merge_conflict / failing_checks / not_mergeable. These sit forever unless rebased.
+*
+* Reads `review_status` directly from SQLite — NO HTTP — so it works inside a
+* network-sandboxed harness (e.g. codex's bwrap sandbox) where a `curl` to the
+* dashboard's `/api/flywheel/merge-blockers` cannot reach `127.0.0.1:3011`.
+* Shared by the dashboard route and the `pan flywheel merge-blockers` CLI so the
+* two surfaces can never disagree.
+*/
+const MERGE_BLOCKER_TYPES = new Set([
+	"merge_conflict",
+	"failing_checks",
+	"not_mergeable"
+]);
+function getMergeBlockersPayload() {
+	const statuses = getAllReviewStatusesFromDb();
+	const out = [];
+	for (const [issueId, status] of Object.entries(statuses)) {
+		if (status.reviewStatus !== "passed") continue;
+		if (status.mergeStatus === "merged") continue;
+		const reasons = (status.blockerReasons ?? []).filter((b) => MERGE_BLOCKER_TYPES.has(b.type));
+		if (reasons.length === 0) continue;
+		out.push({
+			issueId,
+			prUrl: status.prUrl,
+			reasons: reasons.map((b) => ({
+				type: b.type,
+				summary: b.summary
+			}))
+		});
+	}
+	return out;
+}
+//#endregion
+//#region ../../lib/orders/validate.ts
+function hasNonEmptyFile(path) {
+	try {
+		return existsSync(path) && statSync(path).isFile() && statSync(path).size > 0;
+	} catch {
+		return false;
+	}
+}
+function issuePattern(issueId) {
+	const escaped = issueId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	return new RegExp(`(?:^|[-_])${escaped}(?:[-_.]|$)`, "i");
+}
+function nonEmptyFileNames(directory) {
+	if (!existsSync(directory)) return [];
+	return readdirSync(directory).filter((name) => hasNonEmptyFile(join(directory, name)));
+}
+function createOrderPrdLookup(stateRoot) {
+	const draftNames = new Set([...nonEmptyFileNames(join(stateRoot, "drafts")), ...nonEmptyFileNames(join(stateRoot, ".pan", "drafts"))].map((name) => name.toLowerCase()));
+	const specNames = [...nonEmptyFileNames(join(stateRoot, "specs")), ...nonEmptyFileNames(join(stateRoot, ".pan", "specs"))];
+	return (issueId) => {
+		const lower = issueId.toLowerCase();
+		if (draftNames.has(`${lower}.md`)) return true;
+		const pattern = issuePattern(issueId);
+		return specNames.some((name) => pattern.test(name));
+	};
+}
+function hasOrderIssuePrd(stateRoot, issueId) {
+	const lower = issueId.toLowerCase();
+	if ([join(stateRoot, "drafts", `${lower}.md`), join(stateRoot, ".pan", "drafts", `${lower}.md`)].some(hasNonEmptyFile)) return true;
+	for (const specsDir of [join(stateRoot, "specs"), join(stateRoot, ".pan", "specs")]) {
+		if (!existsSync(specsDir)) continue;
+		const pattern = issuePattern(issueId);
+		if (readdirSync(specsDir).some((name) => pattern.test(name) && hasNonEmptyFile(join(specsDir, name)))) return true;
+	}
+	return false;
+}
+function findCycle(book) {
+	const issues = new Set(book.items.map((item) => item.issue.toUpperCase()));
+	const edges = new Map(book.items.map((item) => [item.issue.toUpperCase(), item.prereqs.map((prereq) => prereq.toUpperCase()).filter((prereq) => issues.has(prereq))]));
+	const visiting = /* @__PURE__ */ new Set();
+	const visited = /* @__PURE__ */ new Set();
+	const path = [];
+	const visit = (issue) => {
+		if (visiting.has(issue)) {
+			const start = path.indexOf(issue);
+			return [...path.slice(start), issue];
+		}
+		if (visited.has(issue)) return null;
+		visiting.add(issue);
+		path.push(issue);
+		for (const prereq of edges.get(issue) ?? []) {
+			const cycle = visit(prereq);
+			if (cycle) return cycle;
+		}
+		path.pop();
+		visiting.delete(issue);
+		visited.add(issue);
+		return null;
+	};
+	for (const issue of issues) {
+		const cycle = visit(issue);
+		if (cycle) return cycle;
+	}
+	return null;
+}
+function validateBookForStart(stateRoot, book, options = {}) {
+	const blocks = [];
+	const warns = [];
+	if (book.items.length === 0) blocks.push({
+		code: "empty-book",
+		issue: book.id,
+		message: "Order book must contain at least one issue"
+	});
+	const issueLookup = options.issueLookup ?? liveOrderIssueLookup;
+	const ids = /* @__PURE__ */ new Set();
+	for (const item of book.items) {
+		ids.add(item.issue.toUpperCase());
+		item.prereqs.forEach((prereq) => ids.add(prereq.toUpperCase()));
+	}
+	const issueState = issueLookup([...ids]);
+	for (const item of book.items) {
+		const issue = item.issue.toUpperCase();
+		const state = issueState.get(issue);
+		if (!state?.open) blocks.push({
+			code: "issue-not-open",
+			issue,
+			message: state ? `${issue} is not open` : `${issue} could not be resolved as an open issue`
+		});
+	}
+	for (const other of options.books ?? listBooks(stateRoot)) {
+		if (other.id === book.id || other.status === "complete") continue;
+		for (const item of other.items) {
+			const issue = item.issue.toUpperCase();
+			if (!ids.has(issue) || !book.items.some((candidate) => candidate.issue.toUpperCase() === issue)) continue;
+			blocks.push({
+				code: "duplicate-membership",
+				issue,
+				message: `${issue} already belongs to non-complete order book ${other.id}`
+			});
+		}
+	}
+	const bookIssues = new Set(book.items.map((item) => item.issue.toUpperCase()));
+	for (const item of book.items) for (const rawPrereq of item.prereqs) {
+		const prereq = rawPrereq.toUpperCase();
+		if (!bookIssues.has(prereq) && !issueState.has(prereq)) blocks.push({
+			code: "unresolved-prerequisite",
+			issue: item.issue,
+			message: `${item.issue} prerequisite ${prereq} could not be resolved`
+		});
+	}
+	const cycle = findCycle(book);
+	if (cycle) blocks.push({
+		code: "prerequisite-cycle",
+		issue: cycle[0],
+		message: `Prerequisite cycle: ${cycle.join(" → ")}`
+	});
+	const hasPrd = options.hasPrd ?? ((issueId) => hasOrderIssuePrd(stateRoot, issueId));
+	for (const item of book.items) {
+		if (item.lane !== "B" || hasPrd(item.issue)) continue;
+		const finding = {
+			code: "missing-prd",
+			issue: item.issue,
+			message: `${item.issue} has no draft PRD or canonical spec`
+		};
+		if (item.planAtPickup) warns.push(finding);
+		else blocks.push(finding);
+	}
+	return {
+		blocks,
+		warns
+	};
+}
+//#endregion
+export { getMergeBlockersPayload as i, hasOrderIssuePrd as n, validateBookForStart as r, createOrderPrdLookup as t };
+
+//# sourceMappingURL=validate-IfDGkaVR.js.map

package/server/{validation-CIi6pnI2.js → validation-CC9OPqJZ.js}

@@ -1,3 +1,3 @@
-import { i as runQualityGates, n as init_validation, r as killAllGateProcessGroups } from "./validation-B5JxoPUS.js";
+import { i as runQualityGates, n as init_validation, r as killAllGateProcessGroups } from "./validation-Dw1pzDzr.js";
 init_validation();
 export { killAllGateProcessGroups, runQualityGates };

package/server/{validation-B5JxoPUS.js → validation-Dw1pzDzr.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths, mr as init_errors } from "./config-yaml-DvyMuOle.js";
-import { f as init_config, m as loadConfigSync } from "./config-CCvjQf27.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-cEGcO6UT.js";
+import { Br as getOverdeckHome, Vr as init_paths, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { f as init_config, m as loadConfigSync } from "./config-BZ0sHTju.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CIVWZOQr.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 import "fs";
@@ -522,4 +522,4 @@ var init_validation = __esmMin((() => {
 //#endregion
 export { runQualityGates as i, init_validation as n, killAllGateProcessGroups as r, DEFAULT_GATES as t };
 
-//# sourceMappingURL=validation-B5JxoPUS.js.map
+//# sourceMappingURL=validation-Dw1pzDzr.js.map

package/server/{verification-artifact-C-lIHfUa.js → verification-artifact-B3itKTxu.js}

@@ -1,2 +1,2 @@
-import { t as readVerificationArtifact } from "./verification-artifact-BcnIbigL.js";
+import { t as readVerificationArtifact } from "./verification-artifact-TVFSz_q1.js";
 export { readVerificationArtifact };

package/server/{verification-artifact-BcnIbigL.js → verification-artifact-TVFSz_q1.js}

@@ -53,4 +53,4 @@ function readVerificationArtifact(workspacePath) {
 //#endregion
 export { verificationArtifactPath as n, writeVerificationArtifact as r, readVerificationArtifact as t };
 
-//# sourceMappingURL=verification-artifact-BcnIbigL.js.map
+//# sourceMappingURL=verification-artifact-TVFSz_q1.js.map

package/server/{verification-runner-CDj4lD4t.js → verification-runner-BW4HOKAz.js}

@@ -1,2 +1,2 @@
-import { n as reconcileInterruptedVerifications, r as runVerificationForIssue } from "./verification-runner-Br0S_Ous.js";
+import { n as reconcileInterruptedVerifications, r as runVerificationForIssue } from "./verification-runner-CkgX6EtI.js";
 export { reconcileInterruptedVerifications, runVerificationForIssue };

package/server/{verification-runner-Br0S_Ous.js → verification-runner-CkgX6EtI.js}

@@ -1,23 +1,22 @@
-import { Br as getOverdeckHome, Tn as init_projects, Ur as packageRoot, Vr as init_paths, Yn as init_issue_id, Yt as init_state_plane, fn as findProjectByPathSync, mr as init_errors, zn as resolveProjectFromIssueSync } from "./config-yaml-DvyMuOle.js";
-import { b as setReviewStatusSync, c as getReviewStatusSync, l as init_review_status, p as markWorkspaceStuck } from "./review-status-A7quS5KJ.js";
-import { X as messageAgent, ar as setAgentPaused, b as init_agents, ft as stopAgent } from "./queries-6d7Cdtm7.js";
-import { n as init_tracker_utils } from "./tracker-utils-tnxxqROg.js";
+import { Br as getOverdeckHome, Tn as init_projects, Ur as packageRoot, Vr as init_paths, Yn as init_issue_id, Yt as init_state_plane, fn as findProjectByPathSync, mr as init_errors, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
+import { b as setReviewStatusSync, c as getReviewStatusSync, l as init_review_status, p as markWorkspaceStuck } from "./review-status-kZj_KyCk.js";
+import { X as messageAgent, b as init_agents, ft as stopAgent, ur as setAgentPaused } from "./queries-CjNIf-Ub.js";
+import { n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
 import { i as readReviewStatusMap, n as init_review_status_source } from "./review-status-source-CxuEjLGg.js";
-import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-DfeyBDwA.js";
-import { m as readWorkspacePlanSync, o as init_io, t as XBriefMergeConflictError, v as init_types, y as subItemsOf } from "./io-B3_AHDfr.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-C9b6ccN1.js";
-import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-CPS15Vte.js";
-import { n as init_shadow_utils } from "./shadow-utils-4bvjn9b3.js";
-import { i as runQualityGates, n as init_validation, t as DEFAULT_GATES } from "./validation-B5JxoPUS.js";
-import { r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-BcnIbigL.js";
-import { n as getXBriefACStatusSync } from "./acceptance-criteria-DOA0KgXx.js";
+import { c as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-B6GycDh9.js";
+import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-yPd___5E.js";
+import { m as readWorkspacePlanSync, o as init_io, t as XBriefMergeConflictError, v as init_types, y as subItemsOf } from "./io-C9kF1wtJ.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-CY5L1lB7.js";
+import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-7mqqwrX6.js";
+import { n as init_shadow_utils } from "./shadow-utils-Db3oroFG.js";
+import { i as runQualityGates, n as init_validation, t as DEFAULT_GATES } from "./validation-Dw1pzDzr.js";
+import { r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-TVFSz_q1.js";
+import { n as getXBriefACStatusSync } from "./acceptance-criteria-DDCnXF58.js";
 import { join } from "node:path";
 import { Data, Effect } from "effect";
-import { existsSync } from "fs";
 import { basename as basename$1, dirname as dirname$1, join as join$1 } from "path";
 import { homedir } from "os";
-import { closeSync as closeSync$1, existsSync as existsSync$1, mkdirSync as mkdirSync$1, openSync as openSync$1, readFileSync as readFileSync$1, renameSync as renameSync$1, writeFileSync as writeFileSync$1 } from "node:fs";
-import { readdir } from "fs/promises";
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { exec, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import { exec as exec$1 } from "child_process";
@@ -58,7 +57,7 @@ function isProcessAlive(pid) {
 }
 function readVerificationWorkerState(issueId) {
 	try {
-		const parsed = JSON.parse(readFileSync$1(statePath(issueId), "utf8"));
+		const parsed = JSON.parse(readFileSync(statePath(issueId), "utf8"));
 		if (parsed.issueId !== issueId || !Number.isInteger(parsed.pid) || typeof parsed.runId !== "string" || typeof parsed.workspacePath !== "string" || typeof parsed.startedAt !== "string" || typeof parsed.resultPath !== "string") return null;
 		return {
 			...parsed,
@@ -77,12 +76,12 @@ function readVerificationWorkerState(issueId) {
 }
 function isVerificationWorkerActive(issueId) {
 	const state = readVerificationWorkerState(issueId);
-	return !!state && isProcessAlive(state.pid) && !existsSync$1(state.resultPath);
+	return !!state && isProcessAlive(state.pid) && !existsSync(state.resultPath);
 }
 function writeJsonAtomic(path, value) {
 	const temp = `${path}.${process.pid}.tmp`;
-	writeFileSync$1(temp, `${JSON.stringify(value, null, 2)}\n`);
-	renameSync$1(temp, path);
+	writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`);
+	renameSync(temp, path);
 }
 function verificationWorkerDeadline(state) {
 	if (!state.admittedAt) return null;
@@ -102,7 +101,7 @@ function markVerificationWorkerAdmissionPhase(issueId, update) {
 }
 async function waitForResult(state) {
 	for (;;) {
-		if (existsSync$1(state.resultPath)) return JSON.parse(readFileSync$1(state.resultPath, "utf8"));
+		if (existsSync(state.resultPath)) return JSON.parse(readFileSync(state.resultPath, "utf8"));
 		if (!isProcessAlive(state.pid)) return {
 			outcome: "error",
 			message: `Verification worker ${state.pid} exited before writing a result`
@@ -117,21 +116,21 @@ async function waitForResult(state) {
 }
 async function runSupervisedVerification(issueId, workspacePath, workspaceInfo, logPrefix, options = {}) {
 	const existing = readVerificationWorkerState(issueId);
-	if (existing && existing.workspacePath === workspacePath && isProcessAlive(existing.pid) && !existsSync$1(existing.resultPath)) {
+	if (existing && existing.workspacePath === workspacePath && isProcessAlive(existing.pid) && !existsSync(existing.resultPath)) {
 		console.log(`[${logPrefix}] Joining live verification worker ${existing.pid} for ${issueId}`);
 		return waitForResult(existing);
 	}
 	const dir = workerDir(issueId);
-	mkdirSync$1(dir, { recursive: true });
+	mkdirSync(dir, { recursive: true });
 	const runId = `${Date.now()}-${process.pid}`;
 	const resultPath = join(dir, `result-${runId}.json`);
 	const logPath = join(dir, `worker-${runId}.log`);
 	const workerPath = process.env.OVERDECK_VERIFICATION_WORKER_PATH || join(packageRoot, "dist", "verification-worker.js");
-	if (!existsSync$1(workerPath)) return {
+	if (!existsSync(workerPath)) return {
 		outcome: "error",
 		message: `Verification worker bundle missing at ${workerPath}; run npm run build`
 	};
-	const logFd = openSync$1(logPath, "a");
+	const logFd = openSync(logPath, "a");
 	const child = spawn(process.execPath, [workerPath, JSON.stringify({
 		issueId,
 		workspacePath,
@@ -152,7 +151,7 @@ async function runSupervisedVerification(issueId, workspacePath, workspaceInfo,
 			OVERDECK_VERIFICATION_WORKER: "1"
 		}
 	});
-	closeSync$1(logFd);
+	closeSync(logFd);
 	if (!child.pid) return {
 		outcome: "error",
 		message: "Failed to spawn verification worker"
@@ -176,6 +175,7 @@ async function runSupervisedVerification(issueId, workspacePath, workspaceInfo,
 //#region ../../lib/work/test-requirement-gate.ts
 init_projects();
 init_state_plane();
+init_project_repos();
 init_lifecycle();
 init_types();
 init_io();
@@ -345,29 +345,6 @@ async function deliverVerificationFeedback(issueId, message, details, logPrefix)
 		...details
 	});
 }
-async function resolveGitDirs(workspacePath, projectConfig) {
-	if (!(projectConfig?.workspace?.type === "polyrepo") && existsSync(join$1(workspacePath, ".git"))) return {
-		gitDirs: [workspacePath],
-		isPolyrepo: false
-	};
-	const gitDirs = [];
-	try {
-		const entries = await readdir(workspacePath, { withFileTypes: true });
-		for (const entry of entries) if (entry.isDirectory() && !entry.name.startsWith(".") && existsSync(join$1(workspacePath, entry.name, ".git"))) gitDirs.push(join$1(workspacePath, entry.name));
-	} catch {}
-	if (gitDirs.length > 0) return {
-		gitDirs,
-		isPolyrepo: true
-	};
-	if (existsSync(join$1(workspacePath, ".git"))) return {
-		gitDirs: [workspacePath],
-		isPolyrepo: false
-	};
-	return {
-		gitDirs: [],
-		isPolyrepo: false
-	};
-}
 async function syncSingleRepo(gitDir, targetBranch) {
 	const repoName = basename$1(gitDir);
 	try {
@@ -455,6 +432,26 @@ function getSyncTargetBranch(workspacePath, projectConfig, repoName) {
 function changesetHasNoContent(changedFiles) {
 	return changedFiles.map((f) => f.trim()).filter(Boolean).filter((f) => !f.startsWith(".pan/") && !isXBriefFilename(f)).length === 0;
 }
+/**
+* Return whether any actual workspace repository contains implementation
+* changes. `undefined` means at least one repo diff failed and no positive
+* evidence was found, so callers must conservatively skip the empty guard.
+*/
+async function workspaceChangesetHasContent(issueId, workspacePath) {
+	const roots = resolveWorkspaceRepoRootsSync(issueId, workspacePath);
+	let diffFailed = false;
+	for (const root of roots) try {
+		const { stdout } = await execAsync(`git diff --name-only origin/${root.targetBranch}...HEAD`, {
+			cwd: root.dir,
+			encoding: "utf-8",
+			timeout: 15e3
+		});
+		if (!changesetHasNoContent(stdout.split("\n"))) return true;
+	} catch {
+		diffFailed = true;
+	}
+	return diffFailed ? void 0 : false;
+}
 async function runVerificationForIssuePromise(issueId, workspacePath, workspaceInfo, logPrefix, options = {}) {
 	const currentStatus = getReviewStatusSync(issueId);
 	const mergedOutcome = skipMergedVerification(issueId, logPrefix, currentStatus);
@@ -473,16 +470,15 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 	console.log(`[${logPrefix}] Running verification gate for ${issueId} (attempt ${currentCycles + 1}/3)`);
 	try {
 		const projectConfig = findProjectByPathSync(workspacePath);
-		const { gitDirs, isPolyrepo } = await resolveGitDirs(workspacePath, projectConfig);
-		if (options.syncTargetBranch !== false) if (gitDirs.length === 0) console.log(`[${logPrefix}] No git directories found in workspace ${workspacePath} — skipping sync`);
+		const repoRoots = resolveWorkspaceRepoRootsSync(issueId, workspacePath);
+		const isPolyrepo = repoRoots.some((root) => root.isPolyrepo);
+		if (options.syncTargetBranch !== false) if (repoRoots.length === 0) console.log(`[${logPrefix}] No git directories found in workspace ${workspacePath} — skipping sync`);
 		else {
 			const syncResults = [];
-			for (const gitDir of gitDirs) {
-				const repoName = isPolyrepo ? basename$1(gitDir) : void 0;
-				const targetBranch = getSyncTargetBranch(workspacePath, projectConfig, repoName);
-				const displayName = repoName || basename$1(workspacePath);
-				console.log(`[${logPrefix}] Syncing ${targetBranch} into ${displayName} for ${issueId}...`);
-				syncResults.push(await syncSingleRepo(gitDir, targetBranch));
+			for (const root of repoRoots) {
+				const displayName = (isPolyrepo ? root.repoKey : void 0) || basename$1(workspacePath);
+				console.log(`[${logPrefix}] Syncing ${root.targetBranch} into ${displayName} for ${issueId}...`);
+				syncResults.push(await syncSingleRepo(root.dir, root.targetBranch));
 			}
 			const postSyncMergedOutcome = skipMergedVerification(issueId, logPrefix);
 			if (postSyncMergedOutcome) return postSyncMergedOutcome;
@@ -541,7 +537,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 		const featureName = featureFolder.replace(/^feature-/, "");
 		const projectPath = projectConfig?.path || dirname$1(dirname$1(workspacePath));
 		const domain = projectConfig?.workspace?.dns?.domain || "localhost";
-		const changedBase = `origin/${getSyncTargetBranch(workspacePath, projectConfig, void 0)}`;
+		const changedBase = `origin/${repoRoots[0]?.targetBranch ?? getSyncTargetBranch(workspacePath, projectConfig, void 0)}`;
 		const placeholders = {
 			FEATURE_NAME: featureName,
 			FEATURE_FOLDER: featureFolder,
@@ -637,12 +633,11 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				verificationNotes: `Verification deferred: ${failedGate.error}. Workspace stack rebuild triggered; verification re-runs on the next cycle.`
 			});
 			try {
-				const { rebuildWorkspaceStack } = await import("./rebuild-stack-kA7XngID.js");
-				Effect.runPromise(rebuildWorkspaceStack(issueId, { onProgress: (m) => console.log(`[${logPrefix}] ${issueId} stack rebuild: ${m}`) })).then((r) => {
-					if (!r.success) console.warn(`[${logPrefix}] Stack rebuild for ${issueId} failed: ${r.error}`);
-				});
+				const { rebuildWorkspaceStack } = await import("./rebuild-stack-CFvcBHsS.js");
+				const rebuildResult = await Effect.runPromise(rebuildWorkspaceStack(issueId, { onProgress: (m) => console.log(`[${logPrefix}] ${issueId} stack rebuild: ${m}`) }));
+				if (!rebuildResult.success) console.warn(`[${logPrefix}] Stack rebuild for ${issueId} failed: ${rebuildResult.error}`);
 			} catch (err) {
-				console.warn(`[${logPrefix}] Could not trigger stack rebuild for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
+				console.warn(`[${logPrefix}] Could not settle stack rebuild for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
 			}
 			return {
 				outcome: "failed",
@@ -799,53 +794,43 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				maxCycles: 3
 			};
 		}
-		try {
-			const { stdout: changedOut } = await execAsync(`git diff --name-only ${changedBase}...HEAD`, {
-				cwd: workspacePath,
-				encoding: "utf-8",
-				timeout: 15e3
+		const changesetHasContent = await workspaceChangesetHasContent(issueId, workspacePath);
+		const postDiffMergedOutcome = skipMergedVerification(issueId, logPrefix);
+		if (postDiffMergedOutcome) return postDiffMergedOutcome;
+		if (changesetHasContent === false) {
+			const newCycleCount = currentCycles + 1;
+			const failedCheck = "empty-changeset";
+			const comparedTargets = repoRoots.map((root) => `${root.repoKey}:origin/${root.targetBranch}`).join(", ");
+			const summary = `Branch has no implementation — only pipeline artifacts (.pan/xBRIEF task state) changed across workspace repos vs ${comparedTargets}. The work agent produced no code (likely a kickoff-delivery zombie — PAN-2179).`;
+			setReviewStatusSync(issueId, {
+				reviewStatus: "pending",
+				verificationStatus: "failed",
+				verificationNotes: summary,
+				verificationCycleCount: newCycleCount,
+				verificationMaxCycles: 3
 			});
-			const postDiffMergedOutcome = skipMergedVerification(issueId, logPrefix);
-			if (postDiffMergedOutcome) return postDiffMergedOutcome;
-			if (changesetHasNoContent(changedOut.split("\n"))) {
-				const newCycleCount = currentCycles + 1;
-				const failedCheck = "empty-changeset";
-				const summary = `Branch has no implementation — only pipeline artifacts (.pan/xBRIEF task state) changed vs ${changedBase}. The work agent produced no code (likely a kickoff-delivery zombie — PAN-2179).`;
-				setReviewStatusSync(issueId, {
-					reviewStatus: "pending",
-					verificationStatus: "failed",
-					verificationNotes: summary,
-					verificationCycleCount: newCycleCount,
-					verificationMaxCycles: 3
-				});
-				if (shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount)) await escalateVerificationStuck(issueId, failedCheck, newCycleCount, summary, logPrefix);
-				try {
-					await deliverVerificationFeedback(issueId, shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount) ? `VERIFICATION STUCK for ${issueId}.\nFailed check: ${failedCheck} after ${newCycleCount}/3 attempts — branch still has no implementation.\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId}.\nFailed check: ${failedCheck} — your branch contains NO code (only .pan/xBRIEF task state changed vs ${changedBase}).\n\nYou must actually implement the issue: read the plan (.pan/spec.vbrief.json + the issue body), write and commit the code, push, then run pan review request. Do NOT stop at the prompt — keep working until pan review request completes.`, {
-						failedCheck,
-						changedBase
-					}, logPrefix);
-					console.error(`[${logPrefix}] VERIFICATION FAILED for ${issueId}: empty-changeset (no content files vs ${changedBase})`);
-				} catch (feedbackErr) {
-					console.error(`[${logPrefix}] Failed to send empty-changeset feedback for ${issueId}:`, feedbackErr);
-				}
-				return {
-					outcome: "failed",
+			if (shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount)) await escalateVerificationStuck(issueId, failedCheck, newCycleCount, summary, logPrefix);
+			try {
+				await deliverVerificationFeedback(issueId, shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount) ? `VERIFICATION STUCK for ${issueId}.\nFailed check: ${failedCheck} after ${newCycleCount}/3 attempts — branch still has no implementation.\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId}.\nFailed check: ${failedCheck} — your branch contains NO code (only .pan/xBRIEF task state changed across ${comparedTargets}).\n\nYou must actually implement the issue: read the plan (.pan/spec.vbrief.json + the issue body), write and commit the code, push, then run pan review request. Do NOT stop at the prompt — keep working until pan review request completes.`, {
 					failedCheck,
-					cycleCount: newCycleCount,
-					maxCycles: 3
-				};
+					changedBase: comparedTargets
+				}, logPrefix);
+				console.error(`[${logPrefix}] VERIFICATION FAILED for ${issueId}: empty-changeset (no content files across ${comparedTargets})`);
+			} catch (feedbackErr) {
+				console.error(`[${logPrefix}] Failed to send empty-changeset feedback for ${issueId}:`, feedbackErr);
 			}
-		} catch (diffErr) {
-			console.warn(`[${logPrefix}] empty-changeset guard skipped (diff failed): ${diffErr.message}`);
+			return {
+				outcome: "failed",
+				failedCheck,
+				cycleCount: newCycleCount,
+				maxCycles: 3
+			};
 		}
+		if (changesetHasContent === void 0) console.warn(`[${logPrefix}] empty-changeset guard skipped (one or more repo diffs failed)`);
 		let lastVerifiedCommit;
 		try {
-			const { stdout } = await execAsync("git rev-parse HEAD", {
-				cwd: workspacePath,
-				encoding: "utf-8",
-				timeout: 5e3
-			});
-			lastVerifiedCommit = stdout.trim();
+			const { snapshotWorkspaceHeadsPromise } = await import("./git-utils-D0_yhCgF.js");
+			lastVerifiedCommit = await snapshotWorkspaceHeadsPromise(issueId, workspacePath);
 		} catch {}
 		const prePassMergedOutcome = skipMergedVerification(issueId, logPrefix);
 		if (prePassMergedOutcome) return prePassMergedOutcome;
@@ -860,7 +845,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				const repo = findProjectByPathSync(workspacePath)?.github_repo;
 				if (!repo || !repo.includes("/")) return;
 				const [owner, name] = repo.split("/");
-				const { postOverdeckTestsStatus } = await import("./github-app-CPfoFAdV.js");
+				const { postOverdeckTestsStatus } = await import("./github-app-ClZ2lk8D.js");
 				await postOverdeckTestsStatus(workspacePath, owner, name, "success", "Verification gate passed");
 			} catch (err) {
 				console.warn(`[${logPrefix}] Failed to post overdeck/tests status: ${err.message}`);
@@ -896,6 +881,6 @@ function runVerificationForIssueInProcess(issueId, workspacePath, workspaceInfo,
 	return Effect.promise(() => runVerificationForIssuePromise(issueId, workspacePath, workspaceInfo, logPrefix, options));
 }
 //#endregion
-export { runVerificationForIssueInProcess as i, reconcileInterruptedVerifications as n, runVerificationForIssue as r, changesetHasNoContent as t };
+export { workspaceChangesetHasContent as a, runVerificationForIssueInProcess as i, reconcileInterruptedVerifications as n, runVerificationForIssue as r, changesetHasNoContent as t };
 
-//# sourceMappingURL=verification-runner-Br0S_Ous.js.map
+//# sourceMappingURL=verification-runner-CkgX6EtI.js.map

package/server/{vtt-parser-DKpNNW5i.js → vtt-parser-DYPbKcIJ.js}

@@ -107,4 +107,4 @@ function consolidateSpeakerCues(cues) {
 //#endregion
 export { vttToMarkdown };
 
-//# sourceMappingURL=vtt-parser-DKpNNW5i.js.map
+//# sourceMappingURL=vtt-parser-DYPbKcIJ.js.map

package/server/{work-agent-prompt-Yb2bd3Fq.js → work-agent-prompt-Du8Vh2aJ.js}

@@ -1,12 +1,12 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ot as init_record, Pt as readRecordContinueViewSync, Tn as init_projects, mn as findProjectByTeamSync, t as init_config_yaml, u as isTldrEnabledSync, un as extractTeamPrefix } from "./config-yaml-DvyMuOle.js";
-import { F as getReadableWorkspacePanPaths, d as readPlanSync, i as findPlanSync, o as init_io, p as readWorkspacePlan } from "./io-B3_AHDfr.js";
-import { f as init_config, m as loadConfigSync } from "./config-CCvjQf27.js";
-import { i as NotImplementedError, o as init_interface } from "./rally-api-nY0ZANw3.js";
-import { n as createTrackerFromConfig, r as init_factory } from "./factory-CynerjXO.js";
-import { i as createActiveSlice, l as init_dag, o as getDispatchableItems } from "./dag-CdOjJVDT.js";
-import { l as readFeedback, n as readWorkspaceContext, r as writeWorkspaceContext, t as init_pan_dir } from "./pan-dir-DeVUgwA7.js";
-import { n as renderPrompt, t as init_prompts } from "./prompts-Dp4Tpk39.js";
+import { Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ot as init_record, Pt as readRecordContinueViewSync, Tn as init_projects, mn as findProjectByTeamSync, t as init_config_yaml, u as isTldrEnabledSync, un as extractTeamPrefix } from "./config-yaml-DySPNmKN.js";
+import { F as getReadableWorkspacePanPaths, d as readPlanSync, i as findPlanSync, o as init_io, p as readWorkspacePlan } from "./io-C9kF1wtJ.js";
+import { f as init_config, m as loadConfigSync } from "./config-BZ0sHTju.js";
+import { i as NotImplementedError, o as init_interface } from "./rally-api-C8e_1JRi.js";
+import { n as createTrackerFromConfig, r as init_factory } from "./factory-CFibJuaw.js";
+import { i as createActiveSlice, l as init_dag, o as getDispatchableItems } from "./dag-B1ucnjDU.js";
+import { l as readFeedback, n as readWorkspaceContext, r as writeWorkspaceContext, t as init_pan_dir } from "./pan-dir-B0c3w0Ya.js";
+import { n as renderPrompt, t as init_prompts } from "./prompts-DxzFXuLl.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync, statSync } from "fs";
 import { dirname, join } from "path";
@@ -436,4 +436,4 @@ __esmMin((() => {
 }))();
 export { buildPolyrepoContext, buildWorkAgentPrompt, extractStitchDesigns, getTrackerContext, readFeatureContext, readPlanningContext, writeStoryFeatureContext };
 
-//# sourceMappingURL=work-agent-prompt-Yb2bd3Fq.js.map
+//# sourceMappingURL=work-agent-prompt-Du8Vh2aJ.js.map

package/server/workflows-BQu4RFQ-.js

@@ -0,0 +1,2 @@
+import { a as deepWipe, i as closeOut } from "./workflows-mbQzh6mQ.js";
+export { closeOut, deepWipe };