@starlein/paperclip-plugin-company-wizard 0.4.3 → 0.4.5-a

package/dist/worker.js

@@ -9557,7 +9557,18 @@ async function assembleCompany({
       reviewers.push(role);
     }
     const approver = typeof reviewGate.approver === "string" && allRoles.has(reviewGate.approver) ? reviewGate.approver : void 0;
-    const mergeGate = typeof reviewGate.mergeGate === "string" && allRoles.has(reviewGate.mergeGate) ? reviewGate.mergeGate : void 0;
+    let mergeGate = typeof reviewGate.mergeGate === "string" && allRoles.has(reviewGate.mergeGate) ? reviewGate.mergeGate : void 0;
+    if (!mergeGate) {
+      const mergeGateFallbacks = [
+        "code-reviewer",
+        "devops",
+        "ui-designer",
+        "ux-researcher",
+        "security-engineer",
+        "qa"
+      ];
+      mergeGate = mergeGateFallbacks.find((role) => allRoles.has(role) && role !== approver);
+    }
     if (approver) {
       const idx = reviewers.indexOf(approver);
       if (idx !== -1) reviewers.splice(idx, 1);
@@ -9579,11 +9590,12 @@ async function assembleCompany({
     if (gate.mergeGate) {
       const gatePrecondition = hasCi ? "CI must be green before merge" : "no CI configured \u2014 run the test suite/build and paste the output before merge";
       stages.push(
-        `  - stage ${stages.length + 1} (approval) \u2192 assign ${JSON.stringify(gate.mergeGate)}  \u2014 merge gate: ${gatePrecondition}; merge the PR, then record approved to close`
+        `  - stage ${stages.length + 1} (approval) \u2192 assign ${JSON.stringify(gate.mergeGate)}  \u2014 merge gate (non-author): ${gatePrecondition}; merge the PR, then record approved to close`
       );
     }
     return `- **executionPolicy** (set when creating this issue; resolve each role to its agentId):
 ${stages.join("\n")}
+  - never assign the issue's executor/author to any stage \u2014 Paperclip excludes the original executor, so a self-stage has no eligible participant and the issue stalls (422); the merge gate must be a non-author
   - every verdict must cite executed verification (commands + results); "looks good" without evidence is not a valid verdict
 
 `;
@@ -10317,8 +10329,8 @@ Read: \`docs/${doc}\`
     bootstrap += `- Do not reuse parent workspaces for subissues unless explicitly requested.
 `;
     if (moduleNames.includes("pr-review")) {
-      const ciClause = hasCi ? "CI (lint/test/build) must be green before the Engineer merges \u2014 this is the hard gate and cannot be skipped" : "no CI is configured, so the Engineer must run the test suite/build and paste the real output into the merge-gate verdict before merging \u2014 this is the hard gate";
-      bootstrap += `- Required PR reviews use the issue's \`executionPolicy\`. The substantive gate is execution, not opinion: ${ciClause}. Stages, in order: a \`review\` stage for QA when present (test adequacy / running the tests), a \`review\` stage for the Security Engineer **only when the change is security-relevant** (auth, secrets, input boundaries, crypto, dependencies, infra exposure), an \`approval\` stage for the Product Owner (intent/scope), then a final \`approval\` merge-gate stage for the Engineer (who satisfies the hard gate above, merges the PR, then records approval to close the issue). The merge gate must be last so the Product Owner's approval does not auto-close the issue with the PR still open. The Code Reviewer and other domain reviewers may add advisory, non-blocking comments but do not gate the merge. Every verdict must cite executed verification. Resolve each role to its agentId. Model review stages in executionPolicy rather than child issues or @-mentions.
+      const ciClause = hasCi ? "CI (lint/test/build) must be green before the merge gate merges \u2014 this is the hard gate and cannot be skipped" : "no CI is configured, so the merge-gate agent must run the test suite/build and paste the real output into the merge-gate verdict before merging \u2014 this is the hard gate";
+      bootstrap += `- Required PR reviews use the issue's \`executionPolicy\`. The substantive gate is execution, not opinion: ${ciClause}. Stages, in order: a \`review\` stage for QA when present (test adequacy / running the tests), a \`review\` stage for the Security Engineer **only when the change is security-relevant** (auth, secrets, input boundaries, crypto, dependencies, infra exposure), an \`approval\` stage for the Product Owner (intent/scope), then a final \`approval\` merge-gate stage for the **Code Reviewer** (a non-author who satisfies the hard gate above, merges the PR, then records approval to close the issue). **Never list the issue's executor/author as a participant in any stage** \u2014 Paperclip excludes the original executor from review/approval, so a stage whose only participant is the author has no eligible participant and the issue stalls in \`in_review\` (422 No eligible approval participant); this is why the merge gate is the Code Reviewer (or another present non-author), not the engineer who wrote the code. The merge gate must be last so the Product Owner's approval does not auto-close the issue with the PR still open. Other domain reviewers may add advisory, non-blocking comments but do not gate the merge. Every verdict must cite executed verification. Resolve each role to its agentId. Model review stages in executionPolicy rather than child issues or @-mentions.
 `;
     }
     bootstrap += `
@@ -10957,7 +10969,7 @@ var __dirname = path2.dirname(fileURLToPath2(import.meta.url));
 var DEFAULT_TEMPLATES_REPO_URL = "https://github.com/starlein/paperclip-plugin-company-wizard/tree/main/templates";
 var BUNDLED_TEMPLATES_DIR = path2.resolve(__dirname, "..", "templates");
 var PLUGIN_PACKAGE_NAME = "@starlein/paperclip-plugin-company-wizard";
-var CURRENT_PLUGIN_VERSION = "0.4.2";
+var CURRENT_PLUGIN_VERSION = "0.4.5";
 var NPM_LATEST_URL = "https://registry.npmjs.org/@starlein%2Fpaperclip-plugin-company-wizard/latest";
 function copyDirSync(src, dest) {
   fs2.mkdirSync(dest, { recursive: true });
@@ -11195,6 +11207,49 @@ function resolveWritableCompaniesDir(cfg, log) {
     `Unable to prepare a writable companies directory. Last attempt failed at ${lastError}`
   );
 }
+function isPathInside(parent, child) {
+  const relative = path2.relative(parent, child);
+  return relative === "" || !!relative && !relative.startsWith("..") && !path2.isAbsolute(relative);
+}
+function normalizeGitBranch(value) {
+  const branch = typeof value === "string" && value.trim() ? value.trim() : "main";
+  return /^[A-Za-z0-9._/-]+$/.test(branch) ? branch.replace(/^origin\//, "") : "main";
+}
+function prepareLocalProjectWorkspace(mainProject, companyDir, log) {
+  const workspace = mainProject?.workspace;
+  if (!workspace || workspace.sourceType !== "local_path") return;
+  const cwd = typeof workspace.cwd === "string" ? workspace.cwd.trim() : "";
+  if (!cwd) return;
+  const resolvedCompanyDir = path2.resolve(companyDir);
+  const resolvedCwd = path2.resolve(cwd);
+  if (!isPathInside(resolvedCompanyDir, resolvedCwd)) {
+    log?.(`\u26A0 Skipped project workspace preparation outside company dir: ${resolvedCwd}`);
+    return;
+  }
+  fs2.mkdirSync(resolvedCwd, { recursive: true });
+  const gitDir = path2.join(resolvedCwd, ".git");
+  if (fs2.existsSync(gitDir)) {
+    log?.(`\u2713 Project workspace ready: ${resolvedCwd}`);
+    return;
+  }
+  const branch = normalizeGitBranch(workspace.defaultRef);
+  execFileSync("git", ["init", "-b", branch], { cwd: resolvedCwd, stdio: "pipe" });
+  execFileSync(
+    "git",
+    [
+      "-c",
+      "user.email=bootstrap@paperclip.local",
+      "-c",
+      "user.name=Paperclip Bootstrap",
+      "commit",
+      "--allow-empty",
+      "-m",
+      "chore: initialize repository"
+    ],
+    { cwd: resolvedCwd, stdio: "pipe" }
+  );
+  log?.(`\u2713 Project workspace initialized: ${resolvedCwd}`);
+}
 function formatRoleName(role) {
   return role.split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
 }
@@ -11598,6 +11653,7 @@ var plugin = definePlugin({
             log(`\u270E Override: ${relPath}`);
           }
         }
+        prepareLocalProjectWorkspace(assembleResult.mainProject, companyDir, log);
         const ceoInstructionsDir = path2.join(companyDir, "agents", "ceo");
         const ceoEntryFile = "AGENTS.md";
         const ceoEntryPath = path2.join(ceoInstructionsDir, ceoEntryFile);
@@ -12027,6 +12083,7 @@ var worker_default = plugin;
 runWorker(plugin, import.meta.url);
 export {
   worker_default as default,
+  prepareLocalProjectWorkspace,
   resolveWritableCompaniesDir
 };
 //# sourceMappingURL=worker.js.map