@overdeck/desktop 0.46.0 → 0.47.0

package/sync-sources/skills/pan-merge/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pan-merge
-description: "pan merge — cancel pending Flywheel auto-merges during the cooldown window"
+description: "pan merge — cancel actionable Flywheel auto-merge rows"
 triggers:
   - pan merge
   - cancel auto-merge
@@ -12,7 +12,7 @@ allowed-tools:
 
 # pan merge
 
-Use this skill when cancelling a pending Flywheel auto-merge before its cooldown expires.
+Use this skill when cancelling a pending, blocked, or failed Flywheel auto-merge row.
 
 ## Commands
 
@@ -26,12 +26,14 @@ pan merge cancel <id>
 pan merge cancel PAN-123
 ```
 
-Cancels a pending Flywheel auto-merge for the issue id. The command calls the dashboard `DELETE /api/flywheel/auto-merge/:id` endpoint, removes the entry from the active pending list, and announces `auto-merge cancelled for <issueId>`.
+Cancels one actionable Flywheel auto-merge row for the issue id. The command calls the dashboard `DELETE /api/flywheel/auto-merge/:id` endpoint, removes that row from the active or problems list, and announces `auto-merge cancelled for <issueId>`.
 
-If the cooldown has already expired and the executor transitioned the entry to `merging`, the command exits non-zero and reports that the merge is already in progress. If there is no active pending auto-merge for the issue, it exits non-zero with `No pending auto-merge for <id>`.
+An issue can hold duplicate rows from separate scheduling attempts. When more actionable rows remain, the success message reports the count and tells you to re-run `pan merge cancel <id>` to clear the next row; repeat until the normal success message contains no remaining-row notice.
+
+If the cooldown has already expired and the selected row transitioned to `merging`, the command exits non-zero and reports that the merge is already in progress. If there is no actionable auto-merge row for the issue, it exits non-zero with `No pending auto-merge for <id>`.
 
 ## Guardrails
 
-- Use this only during the five-minute auto-merge cooldown window.
+- A pending row is cancellable during the five-minute cooldown; blocked and failed rows remain cancellable afterward.
 - Do not use raw HTTP when the CLI is available; the CLI supplies the dashboard internal token.
 - A `merging` entry cannot be cancelled safely; let the merge pipeline finish or fail visibly.

package/sync-sources/skills/pan-release/SKILL.md

@@ -88,6 +88,63 @@ First-time setup for a brand-new package (npm org creation, the one-time
 bootstrap publish, configuring the Trusted Publisher) and full publish
 troubleshooting live in `docs/RELEASING.md`.
 
+## Releasing as an agent (guards you will hit)
+
+An agent cutting a release trips guards a human operator never sees. All three
+have sanctioned levers — **never reach for `--no-verify`**, which is a one-way
+door.
+
+**1. The commit path guard.** `scripts/guard-flywheel-orchestrator-commit.sh`
+(via `.husky/pre-commit`) refuses a `flywheel-orchestrator` commit that touches
+anything outside `docs/FLYWHEEL-STATE.md` and the state paths — and a release
+commit necessarily touches three `package.json` files. The guard's own
+operator-directed escape hatch is:
+
+```bash
+OVERDECK_OPERATOR_COMMIT=1 pan release stable --version X.Y.Z
+```
+
+It mirrors `OVERDECK_OPERATOR_PUSH=1` for the push guard. Use it only when the
+operator has actually directed the release.
+
+**2. The push guard.** `scripts/guard-agent-main-push.sh` exempts `conv-`
+prefixed agent ids but not pipeline roles, so pushing `main` and the tag needs:
+
+```bash
+OVERDECK_OPERATOR_PUSH=1 git push origin main
+OVERDECK_OPERATOR_PUSH=1 git push origin vX.Y.Z
+```
+
+**3. Preflight tests failing for the wrong reason (PAN-3081 / PAN-3189).** The
+per-agent `~/.overdeck/agents/<id>/git-guard` shim used to intercept
+`git reset --hard` and `git rebase` *inside test fixtures that legitimately run
+them against their own temp repos*, so preflight reported failures that did not
+exist — **10 failures with the shim on `PATH`, 0 without.**
+
+PAN-3189 fixed both halves at the source: the guard now fires only for git
+commands targeting the agent's own worktree, and each launcher strips any
+inherited guard directory from `PATH` before installing its own. A session
+spawned since that landed needs no workaround.
+
+A session started *before* it — or any shell that inherited an old shim — can
+still see the artifact. Check first, and only reach for the workaround if the
+shim is actually there:
+
+```bash
+echo $PATH | tr ':' '\n' | grep git-guard    # expect: your own agent's dir, or nothing
+CLEAN=$(echo $PATH | tr ':' '\n' | grep -v git-guard | paste -sd:)
+PATH="$CLEAN" npm test          # must be genuinely green
+pan release stable --version X.Y.Z --skip-tests
+```
+
+`--skip-tests` is legitimate **only** when you have run the suite clean and seen
+it pass. It skips a corrupted measurement, not the verification itself.
+
+**Ordering note.** If `git push origin main` is rejected because the remote moved
+ahead, merge rather than rebase (`git rebase` is blocked by the agent git guard)
+and push again. Push the tag even if `main` is momentarily behind — the tag is
+its own ref and triggers the publish workflow independently.
+
 ## Notes
 
 - Stable is for “ship this to normal users now.”

package/server/agent-state-service-hZpxIw1E.js

@@ -1,2 +0,0 @@
-import { n as AgentStateServiceLive, r as getRuntimeSnapshot, t as AgentStateService } from "./agent-state-service-BlnSkRFA.js";
-export { AgentStateService, AgentStateServiceLive, getRuntimeSnapshot };

package/server/archive-planning-0FJ6Xd3b.js

@@ -1,2 +0,0 @@
-import { i as findWorkspacePath } from "./archive-planning-C0lAbNB_.js";
-export { findWorkspacePath };

package/server/cli-DmXETsw-.js

@@ -1,3 +0,0 @@
-import { r as init_cli, t as createResetMarker } from "./cli-oCWYA1pE.js";
-init_cli();
-export { createResetMarker };

package/server/conflict-gate-Dh754uyA.js

@@ -1,3 +0,0 @@
-import { a as resolveConflictGate, i as init_conflict_gate, t as buildRealConflictGateDeps } from "./conflict-gate-B9cN3SBi.js";
-init_conflict_gate();
-export { buildRealConflictGateDeps, resolveConflictGate };

package/server/deacon-swarm-I2JfX5Tg.js

@@ -1,2 +0,0 @@
-import { r as coordinateSwarmSlots } from "./deacon-swarm-DBxUaO-A.js";
-export { coordinateSwarmSlots };

package/server/dist-DSlxIU1H.js

@@ -1,3 +0,0 @@
-import { t as require_dist } from "./dist-CJy72uEg.js";
-export default require_dist();
-export {};

package/server/durable-review-pipeline-jpgCJZFp.js

@@ -1,3 +0,0 @@
-import { n as registerDurableReviewPipelineHandler, r as startDurableReviewPipelineHostSide, t as init_durable_review_pipeline } from "./durable-review-pipeline-CGZ5QBxh.js";
-init_durable_review_pipeline();
-export { registerDurableReviewPipelineHandler, startDurableReviewPipelineHostSide };

package/server/forge-DK3blQb_.js

@@ -1,3 +0,0 @@
-import { n as getForgeAdapter, r as init_forge } from "./forge-CZbSg6Ds.js";
-init_forge();
-export { getForgeAdapter };

package/server/hume-Dq--7rOQ.js

@@ -1,3 +0,0 @@
-import { i as init_hume, r as deleteHumeConfig } from "./hume-CDYJxqx-.js";
-init_hume();
-export { deleteHumeConfig };

package/server/inspect-agent-BVwDrVrz.js

@@ -1,2 +0,0 @@
-import { n as onInspectComplete } from "./inspect-agent-6kylZnrm.js";
-export { onInspectComplete };

package/server/label-reconciler--F85rufp.js

@@ -1,113 +0,0 @@
-import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_projects, In as getIssuePrefix, Pt as init_record, Rt as readIssueRecordForWorkspaceSync, Yn as listProjectsSync } from "./config-yaml-CmOPzmBb.js";
-import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-L0FKtjq2.js";
-import { a as READY_LABEL, i as PARKED_LABEL, m as init_pickup, o as RELEASED_LABEL, r as OBJECTION_LABEL, s as VETOED_LABEL, t as BLOCKS_MAIN_LABEL } from "./pickup-D8xtG1J2.js";
-import { exec } from "node:child_process";
-import { promisify } from "node:util";
-//#region ../../lib/backlog/label-ops.ts
-/**
-* Add or remove a GitHub label on an issue. Non-GitHub issues are silently
-* skipped; the `|| true` keeps a missing-label / already-applied no-op non-fatal.
-*/
-async function editIssueLabel(issueId, op, label) {
-	const resolution = resolveGitHubIssueSync(issueId);
-	if (!resolution.isGitHub) return;
-	const { owner, repo, number } = resolution;
-	await execAsync$1(`gh issue edit ${number} --repo ${owner}/${repo} ${op === "add" ? "--add-label" : "--remove-label"} "${label}" 2>/dev/null || true`);
-}
-var execAsync$1, addIssueLabel, removeIssueLabel, applyIssueParkedLabel, removeIssueParkedLabel, applyIssueVetoedLabel, removeIssueVetoedLabel, applyIssueBlocksMainLabel, removeIssueBlocksMainLabel, applyIssueReadyLabel, removeIssueReadyLabel, applyIssueReleasedLabel, removeIssueReleasedLabel, applyIssueObjectionLabel, removeIssueObjectionLabel;
-var init_label_ops = __esmMin((() => {
-	init_tracker_utils();
-	init_pickup();
-	execAsync$1 = promisify(exec);
-	addIssueLabel = (issueId, label) => editIssueLabel(issueId, "add", label);
-	removeIssueLabel = (issueId, label) => editIssueLabel(issueId, "remove", label);
-	applyIssueParkedLabel = (id) => addIssueLabel(id, PARKED_LABEL);
-	removeIssueParkedLabel = (id) => removeIssueLabel(id, PARKED_LABEL);
-	applyIssueVetoedLabel = (id) => addIssueLabel(id, VETOED_LABEL);
-	removeIssueVetoedLabel = (id) => removeIssueLabel(id, VETOED_LABEL);
-	applyIssueBlocksMainLabel = (id) => addIssueLabel(id, BLOCKS_MAIN_LABEL);
-	removeIssueBlocksMainLabel = (id) => removeIssueLabel(id, BLOCKS_MAIN_LABEL);
-	applyIssueReadyLabel = (id) => addIssueLabel(id, READY_LABEL);
-	removeIssueReadyLabel = (id) => removeIssueLabel(id, READY_LABEL);
-	applyIssueReleasedLabel = (id) => addIssueLabel(id, RELEASED_LABEL);
-	removeIssueReleasedLabel = (id) => removeIssueLabel(id, RELEASED_LABEL);
-	applyIssueObjectionLabel = (id) => addIssueLabel(id, OBJECTION_LABEL);
-	removeIssueObjectionLabel = (id) => removeIssueLabel(id, OBJECTION_LABEL);
-}));
-//#endregion
-//#region ../../lib/cloister/label-reconciler.ts
-function planLabelReconciliation(candidate) {
-	if (!(candidate.recordTerminal || candidate.issueClosed || candidate.mergedWithoutInflight)) return [];
-	const changes = STALE_PIPELINE_LABELS.filter((label) => candidate.labels.includes(label)).map((label) => ({
-		issueId: candidate.issueId,
-		op: "remove",
-		label
-	}));
-	if (!candidate.issueClosed && !candidate.closeOutComplete && !candidate.labels.includes("needs-close-out")) changes.push({
-		issueId: candidate.issueId,
-		op: "add",
-		label: "needs-close-out"
-	});
-	return changes;
-}
-async function reconcilePipelineLabels(candidates, options = {}, edit = (change) => change.op === "add" ? addIssueLabel(change.issueId, change.label) : removeIssueLabel(change.issueId, change.label)) {
-	const changes = candidates.slice(0, options.maxIssues ?? candidates.length).flatMap(planLabelReconciliation);
-	if (!options.dryRun) for (const change of changes) await edit(change);
-	return changes;
-}
-async function collectLabelReconcileCandidates() {
-	const candidates = [];
-	for (const { config } of listProjectsSync()) {
-		const prefix = getIssuePrefix(config);
-		if (!prefix || !config.path) continue;
-		const resolution = resolveGitHubIssueSync(`${prefix}-1`);
-		if (!resolution.isGitHub) continue;
-		const { stdout } = await execAsync(`gh issue list --repo ${resolution.owner}/${resolution.repo} --state all --limit 1000 --json number,state,labels`);
-		const rows = JSON.parse(stdout);
-		for (const row of rows) {
-			const issueId = `${prefix.toUpperCase()}-${row.number}`;
-			const labels = row.labels.map((label) => label.name);
-			const record = readIssueRecordForWorkspaceSync(config.path, issueId);
-			const closeOutComplete = Boolean(record?.closeOut?.closedAt);
-			const recordTerminal = closeOutComplete || record?.pipeline?.mergeStatus === "merged";
-			const mergedWithoutInflight = labels.includes("merged") && !labels.some((label) => [
-				"planning",
-				"in-progress",
-				"in-review",
-				"in-planning"
-			].includes(label));
-			candidates.push({
-				issueId,
-				issueClosed: row.state.toLowerCase() === "closed",
-				labels,
-				recordTerminal,
-				mergedWithoutInflight,
-				closeOutComplete
-			});
-		}
-	}
-	return candidates;
-}
-async function reconcilePipelineLabelsPatrol() {
-	return (await reconcilePipelineLabels(await collectLabelReconcileCandidates(), { maxIssues: 20 })).map((change) => `[labels] ${change.op} ${change.label} on ${change.issueId}`);
-}
-var execAsync, STALE_PIPELINE_LABELS;
-var init_label_reconciler = __esmMin((() => {
-	init_label_ops();
-	init_projects();
-	init_record();
-	init_tracker_utils();
-	execAsync = promisify(exec);
-	STALE_PIPELINE_LABELS = [
-		"verifying-on-main",
-		"planning",
-		"in-progress",
-		"in-review",
-		"in-planning"
-	];
-}));
-//#endregion
-export { applyIssueObjectionLabel as a, applyIssueReleasedLabel as c, removeIssueBlocksMainLabel as d, removeIssueObjectionLabel as f, removeIssueVetoedLabel as g, removeIssueReleasedLabel as h, applyIssueBlocksMainLabel as i, applyIssueVetoedLabel as l, removeIssueReadyLabel as m, init_label_reconciler as n, applyIssueParkedLabel as o, removeIssueParkedLabel as p, reconcilePipelineLabelsPatrol as r, applyIssueReadyLabel as s, STALE_PIPELINE_LABELS as t, init_label_ops as u };
-
-//# sourceMappingURL=label-reconciler--F85rufp.js.map

package/server/merge-ops-DdpTiEMt.js

@@ -1,2 +0,0 @@
-import { c as triggerMerge } from "./workspaces-j1e_6aAT.js";
-export { triggerMerge };

package/server/merge-rebase-DGQpYJU3.js

@@ -1,2 +0,0 @@
-import { t as rebaseFeatureBranch } from "./merge-rebase-xLnMlw5h.js";
-export { rebaseFeatureBranch };

package/server/merge-sync-Ca7F5JnQ.js

@@ -1,3 +0,0 @@
-import { A as listUatGenerationsWithStacksSync, C as transitionToMerging, D as insertUatGenerationSync, E as hasUncleanedTerminalUatGenerationSync, M as setUatGenerationStackStartedAtSync, N as updateUatGenerationStatusSync, O as listUatGenerationNamesSync, P as updateUatGenerationSync, S as scheduleAutoMergeWithResult, T as getUatGenerationSync, _ as markMergingBlocked, a as getAllMergeSetsFromDb, b as requeueToPending, c as isFlywheelGloballyPaused, d as listActiveAutoMerges, f as listDuePendingAutoMerges, g as markMerged, h as markFailed, i as getAllActiveQueues, j as markUatGenerationRepoPromotedSync, k as listUatGenerationsSync, l as isMergeTrainEnabled, m as markBlocked, n as deleteMergeSet, o as getMergeSetFromDb, p as listProblemAutoMerges, r as getActionableAutoMerge, s as init_merge_sync, t as cancelPending, u as isMergeTrainEnabledForProject, v as patchMergeSetRepo, w as upsertMergeSet, x as resetProcessingToQueued, y as patchMergeSetRepos } from "./merge-sync-CQ-LgZ1_.js";
-init_merge_sync();
-export { cancelPending, deleteMergeSet, getActionableAutoMerge, getAllActiveQueues, getAllMergeSetsFromDb, getMergeSetFromDb, getUatGenerationSync, hasUncleanedTerminalUatGenerationSync, insertUatGenerationSync, isFlywheelGloballyPaused, isMergeTrainEnabled, isMergeTrainEnabledForProject, listActiveAutoMerges, listDuePendingAutoMerges, listProblemAutoMerges, listUatGenerationNamesSync, listUatGenerationsSync, listUatGenerationsWithStacksSync, markBlocked, markFailed, markMerged, markMergingBlocked, markUatGenerationRepoPromotedSync, patchMergeSetRepo, patchMergeSetRepos, requeueToPending, resetProcessingToQueued, scheduleAutoMergeWithResult, setUatGenerationStackStartedAtSync, transitionToMerging, updateUatGenerationStatusSync, updateUatGenerationSync, upsertMergeSet };