@overdeck/desktop 0.45.23 → 0.46.0

package/server/{verification-runner-Br0S_Ous.js → verification-runner-KDZIsBj4.js}

@@ -1,23 +1,23 @@
-import { Br as getOverdeckHome, Tn as init_projects, Ur as packageRoot, Vr as init_paths, Yn as init_issue_id, Yt as init_state_plane, fn as findProjectByPathSync, mr as init_errors, zn as resolveProjectFromIssueSync } from "./config-yaml-DvyMuOle.js";
-import { b as setReviewStatusSync, c as getReviewStatusSync, l as init_review_status, p as markWorkspaceStuck } from "./review-status-A7quS5KJ.js";
-import { X as messageAgent, ar as setAgentPaused, b as init_agents, ft as stopAgent } from "./queries-6d7Cdtm7.js";
-import { n as init_tracker_utils } from "./tracker-utils-tnxxqROg.js";
-import { i as readReviewStatusMap, n as init_review_status_source } from "./review-status-source-CxuEjLGg.js";
-import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-DfeyBDwA.js";
-import { m as readWorkspacePlanSync, o as init_io, t as XBriefMergeConflictError, v as init_types, y as subItemsOf } from "./io-B3_AHDfr.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-C9b6ccN1.js";
-import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-CPS15Vte.js";
-import { n as init_shadow_utils } from "./shadow-utils-4bvjn9b3.js";
-import { i as runQualityGates, n as init_validation, t as DEFAULT_GATES } from "./validation-B5JxoPUS.js";
-import { r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-BcnIbigL.js";
-import { n as getXBriefACStatusSync } from "./acceptance-criteria-DOA0KgXx.js";
+import { Fr as init_errors, Gn as init_projects, Mn as findProjectByPathSync, ar as resolveProjectFromIssueSync, ci as init_paths, gr as init_issue_id, hn as init_state_plane, si as getOverdeckHome, ui as packageRoot } from "./config-yaml-CmOPzmBb.js";
+import { S as setReviewStatusSync, T as init_pipeline, f as init_review_status, g as markWorkspaceStuck, u as getReviewStatusSync, w as capturePipelineStageForIssue } from "./review-status-yljtTd-q.js";
+import { X as messageAgent, b as init_agents, pt as stopAgent, vr as setAgentPaused } from "./queries-DHJm7bTd.js";
+import { t as init_tracker_utils } from "./tracker-utils-L0FKtjq2.js";
+import { i as readReviewStatusMap, n as init_review_status_source } from "./review-status-source-CpvJnvnQ.js";
+import { l as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-C0nuoBGv.js";
+import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-CTdOWYMi.js";
+import { m as readWorkspacePlanSync, o as init_io, t as XBriefMergeConflictError, v as init_types, y as subItemsOf } from "./io-VHvc0Ssp.js";
+import { n as init_shadow_utils } from "./shadow-utils-D7asqxOZ.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-BG0RUZiu.js";
+import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-Dt9BsapX.js";
+import { i as runQualityGates, n as init_validation, t as DEFAULT_GATES } from "./validation-VZgJxmqc.js";
+import { r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-g3yuxQDL.js";
+import { i as readPendingDeploy, n as init_deploy_queue } from "./deploy-queue-UjKGYsDe.js";
+import { n as getXBriefACStatusSync } from "./acceptance-criteria-CCwFGICj.js";
 import { join } from "node:path";
 import { Data, Effect } from "effect";
-import { existsSync } from "fs";
 import { basename as basename$1, dirname as dirname$1, join as join$1 } from "path";
 import { homedir } from "os";
-import { closeSync as closeSync$1, existsSync as existsSync$1, mkdirSync as mkdirSync$1, openSync as openSync$1, readFileSync as readFileSync$1, renameSync as renameSync$1, writeFileSync as writeFileSync$1 } from "node:fs";
-import { readdir } from "fs/promises";
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { exec, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import { exec as exec$1 } from "child_process";
@@ -25,6 +25,7 @@ import { promisify as promisify$1 } from "util";
 //#region ../../lib/cloister/verification-feedback.ts
 init_errors();
 init_review_status_source();
+init_pipeline();
 init_review_status();
 init_validation();
 function buildFinalFailureInstructions(issueId) {
@@ -36,6 +37,7 @@ Fix every reported failure, commit and push the corrections, then run \`pan done
 }
 //#endregion
 //#region ../../lib/cloister/verification-worker-supervisor.ts
+init_deploy_queue();
 init_paths();
 const POLL_MS = 250;
 const MAX_RUN_MS = 3900 * 1e3;
@@ -58,7 +60,7 @@ function isProcessAlive(pid) {
 }
 function readVerificationWorkerState(issueId) {
 	try {
-		const parsed = JSON.parse(readFileSync$1(statePath(issueId), "utf8"));
+		const parsed = JSON.parse(readFileSync(statePath(issueId), "utf8"));
 		if (parsed.issueId !== issueId || !Number.isInteger(parsed.pid) || typeof parsed.runId !== "string" || typeof parsed.workspacePath !== "string" || typeof parsed.startedAt !== "string" || typeof parsed.resultPath !== "string") return null;
 		return {
 			...parsed,
@@ -77,12 +79,12 @@ function readVerificationWorkerState(issueId) {
 }
 function isVerificationWorkerActive(issueId) {
 	const state = readVerificationWorkerState(issueId);
-	return !!state && isProcessAlive(state.pid) && !existsSync$1(state.resultPath);
+	return !!state && isProcessAlive(state.pid) && !existsSync(state.resultPath);
 }
 function writeJsonAtomic(path, value) {
 	const temp = `${path}.${process.pid}.tmp`;
-	writeFileSync$1(temp, `${JSON.stringify(value, null, 2)}\n`);
-	renameSync$1(temp, path);
+	writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`);
+	renameSync(temp, path);
 }
 function verificationWorkerDeadline(state) {
 	if (!state.admittedAt) return null;
@@ -102,7 +104,7 @@ function markVerificationWorkerAdmissionPhase(issueId, update) {
 }
 async function waitForResult(state) {
 	for (;;) {
-		if (existsSync$1(state.resultPath)) return JSON.parse(readFileSync$1(state.resultPath, "utf8"));
+		if (existsSync(state.resultPath)) return JSON.parse(readFileSync(state.resultPath, "utf8"));
 		if (!isProcessAlive(state.pid)) return {
 			outcome: "error",
 			message: `Verification worker ${state.pid} exited before writing a result`
@@ -117,21 +119,26 @@ async function waitForResult(state) {
 }
 async function runSupervisedVerification(issueId, workspacePath, workspaceInfo, logPrefix, options = {}) {
 	const existing = readVerificationWorkerState(issueId);
-	if (existing && existing.workspacePath === workspacePath && isProcessAlive(existing.pid) && !existsSync$1(existing.resultPath)) {
+	if (existing && existing.workspacePath === workspacePath && isProcessAlive(existing.pid) && !existsSync(existing.resultPath)) {
 		console.log(`[${logPrefix}] Joining live verification worker ${existing.pid} for ${issueId}`);
 		return waitForResult(existing);
 	}
+	const pendingDeploy = await readPendingDeploy();
+	if (pendingDeploy) return {
+		outcome: "deferred",
+		reason: `Verification deferred: a dashboard deploy is queued (requested ${pendingDeploy.requestedAt} by ${pendingDeploy.requestedBy.join(", ")}). It re-runs automatically after the deploy.`
+	};
 	const dir = workerDir(issueId);
-	mkdirSync$1(dir, { recursive: true });
+	mkdirSync(dir, { recursive: true });
 	const runId = `${Date.now()}-${process.pid}`;
 	const resultPath = join(dir, `result-${runId}.json`);
 	const logPath = join(dir, `worker-${runId}.log`);
 	const workerPath = process.env.OVERDECK_VERIFICATION_WORKER_PATH || join(packageRoot, "dist", "verification-worker.js");
-	if (!existsSync$1(workerPath)) return {
+	if (!existsSync(workerPath)) return {
 		outcome: "error",
 		message: `Verification worker bundle missing at ${workerPath}; run npm run build`
 	};
-	const logFd = openSync$1(logPath, "a");
+	const logFd = openSync(logPath, "a");
 	const child = spawn(process.execPath, [workerPath, JSON.stringify({
 		issueId,
 		workspacePath,
@@ -152,7 +159,7 @@ async function runSupervisedVerification(issueId, workspacePath, workspaceInfo,
 			OVERDECK_VERIFICATION_WORKER: "1"
 		}
 	});
-	closeSync$1(logFd);
+	closeSync(logFd);
 	if (!child.pid) return {
 		outcome: "error",
 		message: "Failed to spawn verification worker"
@@ -176,6 +183,7 @@ async function runSupervisedVerification(issueId, workspacePath, workspaceInfo,
 //#region ../../lib/work/test-requirement-gate.ts
 init_projects();
 init_state_plane();
+init_project_repos();
 init_lifecycle();
 init_types();
 init_io();
@@ -225,6 +233,7 @@ async function checkIncompletePlanItemsPromise(workspacePath, _issueId) {
 * Extracted from dashboard/server to be independently testable.
 */
 init_io();
+init_deploy_queue();
 const execAsync = promisify$1(exec$1);
 const NO_PROGRESS_REPEAT_THRESHOLD = 2;
 const MERGED_VERIFICATION_REASON = "Merge already landed; verify-on-main owns post-merge validation.";
@@ -345,29 +354,6 @@ async function deliverVerificationFeedback(issueId, message, details, logPrefix)
 		...details
 	});
 }
-async function resolveGitDirs(workspacePath, projectConfig) {
-	if (!(projectConfig?.workspace?.type === "polyrepo") && existsSync(join$1(workspacePath, ".git"))) return {
-		gitDirs: [workspacePath],
-		isPolyrepo: false
-	};
-	const gitDirs = [];
-	try {
-		const entries = await readdir(workspacePath, { withFileTypes: true });
-		for (const entry of entries) if (entry.isDirectory() && !entry.name.startsWith(".") && existsSync(join$1(workspacePath, entry.name, ".git"))) gitDirs.push(join$1(workspacePath, entry.name));
-	} catch {}
-	if (gitDirs.length > 0) return {
-		gitDirs,
-		isPolyrepo: true
-	};
-	if (existsSync(join$1(workspacePath, ".git"))) return {
-		gitDirs: [workspacePath],
-		isPolyrepo: false
-	};
-	return {
-		gitDirs: [],
-		isPolyrepo: false
-	};
-}
 async function syncSingleRepo(gitDir, targetBranch) {
 	const repoName = basename$1(gitDir);
 	try {
@@ -455,8 +441,40 @@ function getSyncTargetBranch(workspacePath, projectConfig, repoName) {
 function changesetHasNoContent(changedFiles) {
 	return changedFiles.map((f) => f.trim()).filter(Boolean).filter((f) => !f.startsWith(".pan/") && !isXBriefFilename(f)).length === 0;
 }
+/**
+* Return whether any actual workspace repository contains implementation
+* changes. `undefined` means at least one repo diff failed and no positive
+* evidence was found, so callers must conservatively skip the empty guard.
+*/
+async function workspaceChangesetHasContent(issueId, workspacePath) {
+	const roots = resolveWorkspaceRepoRootsSync(issueId, workspacePath);
+	let diffFailed = false;
+	for (const root of roots) try {
+		const { stdout } = await execAsync(`git diff --name-only origin/${root.targetBranch}...HEAD`, {
+			cwd: root.dir,
+			encoding: "utf-8",
+			timeout: 15e3
+		});
+		if (!changesetHasNoContent(stdout.split("\n"))) return true;
+	} catch {
+		diffFailed = true;
+	}
+	return diffFailed ? void 0 : false;
+}
 async function runVerificationForIssuePromise(issueId, workspacePath, workspaceInfo, logPrefix, options = {}) {
 	const currentStatus = getReviewStatusSync(issueId);
+	const pendingDeploy = await readPendingDeploy();
+	if (pendingDeploy && currentStatus?.verificationStatus !== "running") {
+		const reason = `Verification deferred: a dashboard deploy is queued (requested ${pendingDeploy.requestedAt} by ${pendingDeploy.requestedBy.join(", ")}). It re-runs automatically after the deploy.`;
+		setReviewStatusSync(issueId, {
+			verificationStatus: "pending",
+			verificationNotes: reason
+		});
+		return {
+			outcome: "deferred",
+			reason
+		};
+	}
 	const mergedOutcome = skipMergedVerification(issueId, logPrefix, currentStatus);
 	if (mergedOutcome) return mergedOutcome;
 	const currentCycles = currentStatus?.verificationCycleCount ?? 0;
@@ -473,16 +491,15 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 	console.log(`[${logPrefix}] Running verification gate for ${issueId} (attempt ${currentCycles + 1}/3)`);
 	try {
 		const projectConfig = findProjectByPathSync(workspacePath);
-		const { gitDirs, isPolyrepo } = await resolveGitDirs(workspacePath, projectConfig);
-		if (options.syncTargetBranch !== false) if (gitDirs.length === 0) console.log(`[${logPrefix}] No git directories found in workspace ${workspacePath} — skipping sync`);
+		const repoRoots = resolveWorkspaceRepoRootsSync(issueId, workspacePath);
+		const isPolyrepo = repoRoots.some((root) => root.isPolyrepo);
+		if (options.syncTargetBranch !== false) if (repoRoots.length === 0) console.log(`[${logPrefix}] No git directories found in workspace ${workspacePath} — skipping sync`);
 		else {
 			const syncResults = [];
-			for (const gitDir of gitDirs) {
-				const repoName = isPolyrepo ? basename$1(gitDir) : void 0;
-				const targetBranch = getSyncTargetBranch(workspacePath, projectConfig, repoName);
-				const displayName = repoName || basename$1(workspacePath);
-				console.log(`[${logPrefix}] Syncing ${targetBranch} into ${displayName} for ${issueId}...`);
-				syncResults.push(await syncSingleRepo(gitDir, targetBranch));
+			for (const root of repoRoots) {
+				const displayName = (isPolyrepo ? root.repoKey : void 0) || basename$1(workspacePath);
+				console.log(`[${logPrefix}] Syncing ${root.targetBranch} into ${displayName} for ${issueId}...`);
+				syncResults.push(await syncSingleRepo(root.dir, root.targetBranch));
 			}
 			const postSyncMergedOutcome = skipMergedVerification(issueId, logPrefix);
 			if (postSyncMergedOutcome) return postSyncMergedOutcome;
@@ -541,7 +558,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 		const featureName = featureFolder.replace(/^feature-/, "");
 		const projectPath = projectConfig?.path || dirname$1(dirname$1(workspacePath));
 		const domain = projectConfig?.workspace?.dns?.domain || "localhost";
-		const changedBase = `origin/${getSyncTargetBranch(workspacePath, projectConfig, void 0)}`;
+		const changedBase = `origin/${repoRoots[0]?.targetBranch ?? getSyncTargetBranch(workspacePath, projectConfig, void 0)}`;
 		const placeholders = {
 			FEATURE_NAME: featureName,
 			FEATURE_FOLDER: featureFolder,
@@ -637,12 +654,11 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				verificationNotes: `Verification deferred: ${failedGate.error}. Workspace stack rebuild triggered; verification re-runs on the next cycle.`
 			});
 			try {
-				const { rebuildWorkspaceStack } = await import("./rebuild-stack-kA7XngID.js");
-				Effect.runPromise(rebuildWorkspaceStack(issueId, { onProgress: (m) => console.log(`[${logPrefix}] ${issueId} stack rebuild: ${m}`) })).then((r) => {
-					if (!r.success) console.warn(`[${logPrefix}] Stack rebuild for ${issueId} failed: ${r.error}`);
-				});
+				const { rebuildWorkspaceStack } = await import("./rebuild-stack-qeRqHZxH.js");
+				const rebuildResult = await Effect.runPromise(rebuildWorkspaceStack(issueId, { onProgress: (m) => console.log(`[${logPrefix}] ${issueId} stack rebuild: ${m}`) }));
+				if (!rebuildResult.success) console.warn(`[${logPrefix}] Stack rebuild for ${issueId} failed: ${rebuildResult.error}`);
 			} catch (err) {
-				console.warn(`[${logPrefix}] Could not trigger stack rebuild for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
+				console.warn(`[${logPrefix}] Could not settle stack rebuild for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
 			}
 			return {
 				outcome: "failed",
@@ -799,53 +815,43 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				maxCycles: 3
 			};
 		}
-		try {
-			const { stdout: changedOut } = await execAsync(`git diff --name-only ${changedBase}...HEAD`, {
-				cwd: workspacePath,
-				encoding: "utf-8",
-				timeout: 15e3
+		const changesetHasContent = await workspaceChangesetHasContent(issueId, workspacePath);
+		const postDiffMergedOutcome = skipMergedVerification(issueId, logPrefix);
+		if (postDiffMergedOutcome) return postDiffMergedOutcome;
+		if (changesetHasContent === false) {
+			const newCycleCount = currentCycles + 1;
+			const failedCheck = "empty-changeset";
+			const comparedTargets = repoRoots.map((root) => `${root.repoKey}:origin/${root.targetBranch}`).join(", ");
+			const summary = `Branch has no implementation — only pipeline artifacts (.pan/xBRIEF task state) changed across workspace repos vs ${comparedTargets}. The work agent produced no code (likely a kickoff-delivery zombie — PAN-2179).`;
+			setReviewStatusSync(issueId, {
+				reviewStatus: "pending",
+				verificationStatus: "failed",
+				verificationNotes: summary,
+				verificationCycleCount: newCycleCount,
+				verificationMaxCycles: 3
 			});
-			const postDiffMergedOutcome = skipMergedVerification(issueId, logPrefix);
-			if (postDiffMergedOutcome) return postDiffMergedOutcome;
-			if (changesetHasNoContent(changedOut.split("\n"))) {
-				const newCycleCount = currentCycles + 1;
-				const failedCheck = "empty-changeset";
-				const summary = `Branch has no implementation — only pipeline artifacts (.pan/xBRIEF task state) changed vs ${changedBase}. The work agent produced no code (likely a kickoff-delivery zombie — PAN-2179).`;
-				setReviewStatusSync(issueId, {
-					reviewStatus: "pending",
-					verificationStatus: "failed",
-					verificationNotes: summary,
-					verificationCycleCount: newCycleCount,
-					verificationMaxCycles: 3
-				});
-				if (shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount)) await escalateVerificationStuck(issueId, failedCheck, newCycleCount, summary, logPrefix);
-				try {
-					await deliverVerificationFeedback(issueId, shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount) ? `VERIFICATION STUCK for ${issueId}.\nFailed check: ${failedCheck} after ${newCycleCount}/3 attempts — branch still has no implementation.\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId}.\nFailed check: ${failedCheck} — your branch contains NO code (only .pan/xBRIEF task state changed vs ${changedBase}).\n\nYou must actually implement the issue: read the plan (.pan/spec.vbrief.json + the issue body), write and commit the code, push, then run pan review request. Do NOT stop at the prompt — keep working until pan review request completes.`, {
-						failedCheck,
-						changedBase
-					}, logPrefix);
-					console.error(`[${logPrefix}] VERIFICATION FAILED for ${issueId}: empty-changeset (no content files vs ${changedBase})`);
-				} catch (feedbackErr) {
-					console.error(`[${logPrefix}] Failed to send empty-changeset feedback for ${issueId}:`, feedbackErr);
-				}
-				return {
-					outcome: "failed",
+			if (shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount)) await escalateVerificationStuck(issueId, failedCheck, newCycleCount, summary, logPrefix);
+			try {
+				await deliverVerificationFeedback(issueId, shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount) ? `VERIFICATION STUCK for ${issueId}.\nFailed check: ${failedCheck} after ${newCycleCount}/3 attempts — branch still has no implementation.\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId}.\nFailed check: ${failedCheck} — your branch contains NO code (only .pan/xBRIEF task state changed across ${comparedTargets}).\n\nYou must actually implement the issue: read the plan (.pan/spec.vbrief.json + the issue body), write and commit the code, push, then run pan review request. Do NOT stop at the prompt — keep working until pan review request completes.`, {
 					failedCheck,
-					cycleCount: newCycleCount,
-					maxCycles: 3
-				};
+					changedBase: comparedTargets
+				}, logPrefix);
+				console.error(`[${logPrefix}] VERIFICATION FAILED for ${issueId}: empty-changeset (no content files across ${comparedTargets})`);
+			} catch (feedbackErr) {
+				console.error(`[${logPrefix}] Failed to send empty-changeset feedback for ${issueId}:`, feedbackErr);
 			}
-		} catch (diffErr) {
-			console.warn(`[${logPrefix}] empty-changeset guard skipped (diff failed): ${diffErr.message}`);
+			return {
+				outcome: "failed",
+				failedCheck,
+				cycleCount: newCycleCount,
+				maxCycles: 3
+			};
 		}
+		if (changesetHasContent === void 0) console.warn(`[${logPrefix}] empty-changeset guard skipped (one or more repo diffs failed)`);
 		let lastVerifiedCommit;
 		try {
-			const { stdout } = await execAsync("git rev-parse HEAD", {
-				cwd: workspacePath,
-				encoding: "utf-8",
-				timeout: 5e3
-			});
-			lastVerifiedCommit = stdout.trim();
+			const { snapshotWorkspaceHeadsPromise } = await import("./git-utils-CI6cwyyC.js");
+			lastVerifiedCommit = await snapshotWorkspaceHeadsPromise(issueId, workspacePath);
 		} catch {}
 		const prePassMergedOutcome = skipMergedVerification(issueId, logPrefix);
 		if (prePassMergedOutcome) return prePassMergedOutcome;
@@ -854,13 +860,14 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 			verificationNotes: void 0,
 			...lastVerifiedCommit ? { lastVerifiedCommit } : {}
 		});
+		capturePipelineStageForIssue(issueId, "verification_passed");
 		console.log(`[${logPrefix}] Verification passed for ${issueId}${lastVerifiedCommit ? ` (HEAD=${lastVerifiedCommit.slice(0, 8)})` : ""} — proceeding to review-agent`);
 		(async () => {
 			try {
 				const repo = findProjectByPathSync(workspacePath)?.github_repo;
 				if (!repo || !repo.includes("/")) return;
 				const [owner, name] = repo.split("/");
-				const { postOverdeckTestsStatus } = await import("./github-app-CPfoFAdV.js");
+				const { postOverdeckTestsStatus } = await import("./github-app-DtAsvwzK.js");
 				await postOverdeckTestsStatus(workspacePath, owner, name, "success", "Verification gate passed");
 			} catch (err) {
 				console.warn(`[${logPrefix}] Failed to post overdeck/tests status: ${err.message}`);
@@ -896,6 +903,6 @@ function runVerificationForIssueInProcess(issueId, workspacePath, workspaceInfo,
 	return Effect.promise(() => runVerificationForIssuePromise(issueId, workspacePath, workspaceInfo, logPrefix, options));
 }
 //#endregion
-export { runVerificationForIssueInProcess as i, reconcileInterruptedVerifications as n, runVerificationForIssue as r, changesetHasNoContent as t };
+export { workspaceChangesetHasContent as a, runVerificationForIssueInProcess as i, reconcileInterruptedVerifications as n, runVerificationForIssue as r, changesetHasNoContent as t };
 
-//# sourceMappingURL=verification-runner-Br0S_Ous.js.map
+//# sourceMappingURL=verification-runner-KDZIsBj4.js.map

package/server/{vtt-parser-DKpNNW5i.js → vtt-parser-Jr94BF3Y.js}

@@ -107,4 +107,4 @@ function consolidateSpeakerCues(cues) {
 //#endregion
 export { vttToMarkdown };
 
-//# sourceMappingURL=vtt-parser-DKpNNW5i.js.map
+//# sourceMappingURL=vtt-parser-Jr94BF3Y.js.map

package/server/{work-agent-prompt-Yb2bd3Fq.js → work-agent-prompt-C-vuP3_J.js}

@@ -1,12 +1,12 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ot as init_record, Pt as readRecordContinueViewSync, Tn as init_projects, mn as findProjectByTeamSync, t as init_config_yaml, u as isTldrEnabledSync, un as extractTeamPrefix } from "./config-yaml-DvyMuOle.js";
-import { F as getReadableWorkspacePanPaths, d as readPlanSync, i as findPlanSync, o as init_io, p as readWorkspacePlan } from "./io-B3_AHDfr.js";
-import { f as init_config, m as loadConfigSync } from "./config-CCvjQf27.js";
-import { i as NotImplementedError, o as init_interface } from "./rally-api-nY0ZANw3.js";
-import { n as createTrackerFromConfig, r as init_factory } from "./factory-CynerjXO.js";
-import { i as createActiveSlice, l as init_dag, o as getDispatchableItems } from "./dag-CdOjJVDT.js";
-import { l as readFeedback, n as readWorkspaceContext, r as writeWorkspaceContext, t as init_pan_dir } from "./pan-dir-DeVUgwA7.js";
-import { n as renderPrompt, t as init_prompts } from "./prompts-Dp4Tpk39.js";
+import { An as extractTeamPrefix, Bt as readRecordContinueViewSync, Gn as init_projects, Nt as getProjectConfigFromWorkspacePath, Pn as findProjectByTeamSync, Pt as init_record, Vt as resolveProjectForIssue, t as init_config_yaml, u as isTldrEnabledSync } from "./config-yaml-CmOPzmBb.js";
+import { F as getReadableWorkspacePanPaths, d as readPlanSync, i as findPlanSync, o as init_io, p as readWorkspacePlan } from "./io-VHvc0Ssp.js";
+import { f as init_config, m as loadConfigSync } from "./config-Dr3pW6w6.js";
+import { i as NotImplementedError, o as init_interface } from "./rally-api-Dkqmok65.js";
+import { n as createTrackerFromConfig, r as init_factory } from "./factory-CRoOpGsF.js";
+import { i as createActiveSlice, l as init_dag, o as getDispatchableItems } from "./dag-ombYYt4s.js";
+import { l as readFeedback, n as readWorkspaceContext, r as writeWorkspaceContext, t as init_pan_dir } from "./pan-dir-ubraCiUg.js";
+import { n as renderPrompt, t as init_prompts } from "./prompts-BEx08AIu.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync, statSync } from "fs";
 import { dirname, join } from "path";
@@ -385,6 +385,17 @@ function buildPolyrepoContext(issueId, workspacePath) {
 		lines.push("");
 		lines.push(`**PR target branch:** \`${[...prTargets].join("` or `")}\` (NOT main/master)`);
 	}
+	lines.push("");
+	lines.push("## Creating a New Deliverable Repository");
+	lines.push("");
+	lines.push("If this issue requires a repository that is not listed above, register it before writing or committing code:");
+	lines.push("");
+	lines.push("```bash");
+	lines.push(`pan workspace add-repo ${issueId.toLowerCase()} --new <git-url>`);
+	lines.push("```");
+	lines.push("");
+	lines.push("This creates the issue feature branch and adds the repo to review, inspection, and merge.");
+	lines.push("Do not clone an unregistered repo into the workspace or push deliverable code to its main branch.");
 	if (isProgressive) {
 		lines.push("");
 		lines.push("## Adding Repositories");
@@ -436,4 +447,4 @@ __esmMin((() => {
 }))();
 export { buildPolyrepoContext, buildWorkAgentPrompt, extractStitchDesigns, getTrackerContext, readFeatureContext, readPlanningContext, writeStoryFeatureContext };
 
-//# sourceMappingURL=work-agent-prompt-Yb2bd3Fq.js.map
+//# sourceMappingURL=work-agent-prompt-C-vuP3_J.js.map

package/server/workflows-CHrx_hcW.js

@@ -0,0 +1,2 @@
+import { a as deepWipe, i as closeOut } from "./workflows-D0oip4eV.js";
+export { closeOut, deepWipe };