agent-control-plane 0.4.9 → 0.7.0

package/tools/bin/agent-project-open-issue-worktree

@@ -1,89 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-usage() {
-  cat <<'EOF'
-Usage:
-  agent-project-open-issue-worktree --repo-root <path> --worktree-root <path> --issue-id <id> [--slug <text>] [--branch-prefix <prefix>] [--base <ref>] [--remote <name>] [--prepare-script <path>] [--stamp <yyyymmdd-hhmmss>]
-
-Create a dedicated issue branch + worktree for a project adapter using the
-shared agent-init-worktree helper.
-EOF
-}
-
-shared_agent_home="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-repo_root="${AGENT_PROJECT_REPO_ROOT:-}"
-worktree_root="${AGENT_PROJECT_WORKTREE_ROOT:-}"
-issue_id=""
-slug_input="task"
-branch_prefix="agent/project/issue"
-base_ref="origin/main"
-remote_name="origin"
-prepare_script=""
-stamp=""
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --repo-root) repo_root="${2:-}"; shift 2 ;;
-    --worktree-root) worktree_root="${2:-}"; shift 2 ;;
-    --issue-id) issue_id="${2:-}"; shift 2 ;;
-    --slug) slug_input="${2:-}"; shift 2 ;;
-    --branch-prefix) branch_prefix="${2:-}"; shift 2 ;;
-    --base) base_ref="${2:-}"; shift 2 ;;
-    --remote) remote_name="${2:-}"; shift 2 ;;
-    --prepare-script) prepare_script="${2:-}"; shift 2 ;;
-    --stamp) stamp="${2:-}"; shift 2 ;;
-    --help|-h) usage; exit 0 ;;
-    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
-  esac
-done
-
-if [[ -z "$repo_root" || -z "$worktree_root" || -z "$issue_id" ]]; then
-  usage >&2
-  exit 1
-fi
-
-if [[ -z "$stamp" ]]; then
-  stamp="$(date +%Y%m%d-%H%M%S)"
-fi
-
-safe_slug="$(printf '%s' "$slug_input" | tr '[:upper:]' '[:lower:]' | tr -cs 'a-z0-9' '-')"
-safe_slug="${safe_slug#-}"
-safe_slug="${safe_slug%-}"
-if [[ -z "$safe_slug" ]]; then
-  safe_slug="task"
-fi
-
-branch_name="${branch_prefix}-${issue_id}-${safe_slug}-${stamp}"
-worktree_path="${worktree_root}/issue-${issue_id}-${stamp}"
-init_tool="${shared_agent_home}/tools/bin/agent-init-worktree"
-fetch_ref="$base_ref"
-
-if [[ "$fetch_ref" == "${remote_name}/"* ]]; then
-  fetch_ref="${fetch_ref#${remote_name}/}"
-  git -C "$repo_root" fetch \
-    "$remote_name" \
-    "+refs/heads/${fetch_ref}:refs/remotes/${remote_name}/${fetch_ref}" \
-    --prune
-else
-  git -C "$repo_root" fetch "$remote_name" "$fetch_ref" --prune
-fi
-
-mkdir -p "$worktree_root"
-(
-  cd "$repo_root"
-  "$init_tool" \
-    --branch "$branch_name" \
-    --base "$base_ref" \
-    --path "$worktree_path" \
-    --allow-unclaimed \
-    --no-bootstrap-deps >/dev/null
-)
-
-if [[ -n "$prepare_script" ]]; then
-  "$prepare_script" "$worktree_path" >/dev/null
-fi
-
-printf 'WORKTREE=%s\n' "$worktree_path"
-printf 'BRANCH=%s\n' "$branch_name"
-printf 'BASE_REF=%s\n' "$base_ref"

package/tools/bin/agent-project-open-pr-worktree

@@ -1,80 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=/dev/null
-source "${SCRIPT_DIR}/flow-config-lib.sh"
-
-usage() {
-  cat <<'EOF'
-Usage:
-  agent-project-open-pr-worktree --repo-root <path> --worktree-root <path> --pr-number <id> --head-ref <ref> [--local-branch-prefix <prefix>] [--remote <name>] [--prepare-script <path>] [--stamp <yyyymmdd-hhmmss>]
-
-Create a dedicated review/fix worktree for a PR using the shared
-agent-init-worktree helper.
-EOF
-}
-
-flow_skill_dir="$(resolve_flow_skill_dir "${BASH_SOURCE[0]}")"
-config_yaml="$(resolve_flow_config_yaml "${BASH_SOURCE[0]}")"
-repo_root="${AGENT_PROJECT_REPO_ROOT:-}"
-worktree_root="${AGENT_PROJECT_WORKTREE_ROOT:-}"
-pr_number=""
-head_ref=""
-local_branch_prefix="$(flow_resolve_pr_worktree_branch_prefix "${config_yaml}")"
-remote_name="origin"
-prepare_script=""
-stamp=""
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --repo-root) repo_root="${2:-}"; shift 2 ;;
-    --worktree-root) worktree_root="${2:-}"; shift 2 ;;
-    --pr-number) pr_number="${2:-}"; shift 2 ;;
-    --head-ref) head_ref="${2:-}"; shift 2 ;;
-    --local-branch-prefix) local_branch_prefix="${2:-}"; shift 2 ;;
-    --remote) remote_name="${2:-}"; shift 2 ;;
-    --prepare-script) prepare_script="${2:-}"; shift 2 ;;
-    --stamp) stamp="${2:-}"; shift 2 ;;
-    --help|-h) usage; exit 0 ;;
-    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
-  esac
-done
-
-if [[ -z "$repo_root" || -z "$worktree_root" || -z "$pr_number" || -z "$head_ref" ]]; then
-  usage >&2
-  exit 1
-fi
-
-if [[ -z "$stamp" ]]; then
-  stamp="$(date +%Y%m%d-%H%M%S)"
-fi
-
-worktree_path="${worktree_root}/pr-${pr_number}-${stamp}"
-local_branch="${local_branch_prefix}-${pr_number}-${stamp}"
-base_ref="${remote_name}/${head_ref}"
-init_tool="${flow_skill_dir}/tools/bin/agent-init-worktree"
-
-mkdir -p "$worktree_root"
-git -C "$repo_root" fetch \
-  "$remote_name" \
-  "+refs/heads/main:refs/remotes/${remote_name}/main" \
-  "+refs/heads/${head_ref}:refs/remotes/${remote_name}/${head_ref}" \
-  --prune
-(
-  cd "$repo_root"
-  "$init_tool" \
-    --branch "$local_branch" \
-    --base "$base_ref" \
-    --path "$worktree_path" \
-    --allow-unclaimed \
-    --no-bootstrap-deps >/dev/null
-)
-
-if [[ -n "$prepare_script" ]]; then
-  "$prepare_script" "$worktree_path" >/dev/null
-fi
-
-printf 'WORKTREE=%s\n' "$worktree_path"
-printf 'REF=%s\n' "$base_ref"
-printf 'BRANCH=%s\n' "$local_branch"

package/tools/bin/agent-project-publish-issue-pr

@@ -1,468 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=/dev/null
-source "${SCRIPT_DIR}/flow-config-lib.sh"
-CONFIG_YAML="$(resolve_flow_config_yaml "${BASH_SOURCE[0]}")"
-
-usage() {
-  cat <<'EOF'
-Usage:
-  agent-project-publish-issue-pr --repo-slug <owner/repo> --runs-root <path> --session <id> [--history-root <path>] [--base-branch <name>] [--remote <name>] [--keep-open-label <label>] [--dry-run]
-
-Publish an issue worker branch as a PR and ensure the linked issue contains a
-single host-side PR comment.
-EOF
-}
-
-repo_slug=""
-runs_root=""
-session=""
-history_root="$(flow_resolve_history_root "${CONFIG_YAML}")"
-base_branch="main"
-remote_name="origin"
-dry_run="false"
-keep_open_label=""
-meta_file_from_archive="no"
-shared_agent_home="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
-scope_guard_script="${shared_agent_home}/tools/bin/issue-publish-scope-guard.sh"
-localization_guard_script="${shared_agent_home}/tools/bin/issue-publish-localization-guard.sh"
-verification_guard_script="${shared_agent_home}/tools/bin/branch-verification-guard.sh"
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --repo-slug) repo_slug="${2:-}"; shift 2 ;;
-    --runs-root) runs_root="${2:-}"; shift 2 ;;
-    --session) session="${2:-}"; shift 2 ;;
-    --history-root) history_root="${2:-}"; shift 2 ;;
-    --base-branch) base_branch="${2:-}"; shift 2 ;;
-    --remote) remote_name="${2:-}"; shift 2 ;;
-    --keep-open-label) keep_open_label="${2:-}"; shift 2 ;;
-    --dry-run) dry_run="true"; shift ;;
-    --help|-h) usage; exit 0 ;;
-    *) echo "Unknown argument: $1" >&2; usage >&2; exit 1 ;;
-  esac
-done
-
-if [[ -z "$repo_slug" || -z "$runs_root" || -z "$session" ]]; then
-  usage >&2
-  exit 1
-fi
-
-find_archived_session_dir() {
-  local root="${1:-}"
-  local target_session="${2:-}"
-  local latest=""
-  [[ -n "$root" && -d "$root" && -n "$target_session" ]] || return 1
-
-  latest="$(
-    command find "$root" -mindepth 1 -maxdepth 1 -type d -name "${target_session}-*" ! -name "${target_session}-stale-*" 2>/dev/null \
-      | LC_ALL=C sort -r \
-      | sed -n '1p'
-  )"
-  [[ -n "$latest" ]] || return 1
-  printf '%s\n' "$latest"
-}
-
-find_existing_worktree_for_branch() {
-  local repo_root="${1:-}"
-  local branch_name="${2:-}"
-  local current_worktree=""
-  local current_branch=""
-  [[ -n "$repo_root" && -d "$repo_root" && -n "$branch_name" ]] || return 1
-
-  while IFS= read -r line; do
-    case "$line" in
-      worktree\ *)
-        current_worktree="${line#worktree }"
-        current_branch=""
-        ;;
-      branch\ refs/heads/*)
-        current_branch="${line#branch refs/heads/}"
-        if [[ "$current_branch" == "$branch_name" && -n "$current_worktree" ]]; then
-          printf '%s\n' "$current_worktree"
-          return 0
-        fi
-        ;;
-      "")
-        current_worktree=""
-        current_branch=""
-        ;;
-    esac
-  done < <(git -C "$repo_root" worktree list --porcelain 2>/dev/null || true)
-
-  return 1
-}
-
-worktree_is_git_repo() {
-  local worktree_path="${1:-}"
-  [[ -n "$worktree_path" && -d "$worktree_path" ]] || return 1
-  git -C "$worktree_path" rev-parse --is-inside-work-tree >/dev/null 2>&1
-}
-
-worktree_matches_publish_target() {
-  local worktree_path="${1:-}"
-  local current_branch=""
-  local current_head=""
-
-  worktree_is_git_repo "$worktree_path" || return 1
-
-  current_head="$(git -C "$worktree_path" rev-parse HEAD 2>/dev/null || true)"
-  current_branch="$(git -C "$worktree_path" symbolic-ref --quiet --short HEAD 2>/dev/null || true)"
-
-  if [[ -n "${FINAL_HEAD:-}" && -n "$current_head" && "$current_head" == "$FINAL_HEAD" ]]; then
-    return 0
-  fi
-
-  if [[ -n "${BRANCH:-}" && -n "$current_branch" && "$current_branch" == "$BRANCH" ]]; then
-    return 0
-  fi
-
-  return 1
-}
-
-recover_worktree_from_remote_branch() {
-  local repo_root="${1:-}"
-  local worktree_root="${2:-}"
-  local branch_name="${3:-}"
-  local remote="${4:-}"
-  local remote_ref=""
-  local fallback_worktree=""
-
-  [[ -n "$repo_root" && -d "$repo_root" && -n "$worktree_root" && -n "$branch_name" && -n "$remote" ]] || return 1
-
-  remote_ref="refs/remotes/${remote}/${branch_name}"
-  git -C "$repo_root" fetch "$remote" "$branch_name" >/dev/null 2>&1 || true
-  git -C "$repo_root" rev-parse --verify "$remote_ref" >/dev/null 2>&1 || return 1
-
-  fallback_worktree="$(mktemp -d "${worktree_root}/recovery-XXXXXX")"
-  git -C "$repo_root" worktree add --detach "$fallback_worktree" "$remote_ref" >/dev/null 2>&1 || {
-    rm -rf "$fallback_worktree" 2>/dev/null || true
-    return 1
-  }
-  worktree_is_git_repo "$fallback_worktree" || {
-    rm -rf "$fallback_worktree" 2>/dev/null || true
-    return 1
-  }
-  git -C "$fallback_worktree" checkout -B "$branch_name" "$remote_ref" >/dev/null 2>&1 || {
-    rm -rf "$fallback_worktree" 2>/dev/null || true
-    return 1
-  }
-  git -C "$fallback_worktree" branch --set-upstream-to "${remote}/${branch_name}" "$branch_name" >/dev/null 2>&1 || true
-  printf '%s\n' "$fallback_worktree"
-}
-
-status_out="$(
-  "${shared_agent_home}/tools/bin/agent-project-worker-status" \
-    --runs-root "$runs_root" \
-    --session "$session"
-)"
-meta_file="$(awk -F= '/^META_FILE=/{print $2}' <<<"$status_out")"
-if [[ -z "$meta_file" || ! -f "$meta_file" ]]; then
-  archived_run_dir="$(find_archived_session_dir "$history_root" "$session" || true)"
-  if [[ -n "$archived_run_dir" && -f "${archived_run_dir}/run.env" ]]; then
-    meta_file="${archived_run_dir}/run.env"
-    meta_file_from_archive="yes"
-  fi
-fi
-if [[ -z "$meta_file" || ! -f "$meta_file" ]]; then
-  echo "missing metadata for session $session" >&2
-  exit 1
-fi
-
-run_dir="$(dirname "$meta_file")"
-
-set -a
-# shellcheck source=/dev/null
-source "$meta_file"
-set +a
-
-if [[ -z "${ISSUE_ID:-}" || -z "${BRANCH:-}" ]]; then
-  echo "session $session is missing ISSUE_ID or BRANCH" >&2
-  exit 1
-fi
-
-resolve_actor_login() {
-  local login=""
-
-  login="$(flow_github_current_login 2>/dev/null || true)"
-  if [[ -z "${login}" && ! "$(flow_forge_provider)" =~ ^gitea$ ]]; then
-    flow_export_github_cli_auth_env "${repo_slug}"
-    login="$(gh api user --jq .login 2>/dev/null || true)"
-  fi
-  if [[ -z "${login}" && ! "$(flow_forge_provider)" =~ ^gitea$ ]]; then
-    login="$(
-      gh auth status 2>/dev/null \
-        | sed -n 's/^  ✓ Logged in to github.com account \([^ ]*\) (.*/\1/p' \
-        | head -n 1
-    )"
-  fi
-  if [[ -z "${login}" ]]; then
-    login="${USER:-}"
-  fi
-  printf '%s\n' "${login}"
-}
-
-issue_json="$(flow_github_issue_view_json "$repo_slug" "$ISSUE_ID")"
-issue_title="$(jq -r '.title' <<<"$issue_json")"
-issue_url="$(jq -r '.url' <<<"$issue_json")"
-if [[ -z "${issue_title}" || "${issue_title}" == "null" ]]; then
-  issue_title="Issue #${ISSUE_ID}"
-fi
-if [[ -z "${issue_url}" || "${issue_url}" == "null" ]]; then
-  issue_url="${ISSUE_URL:-}"
-fi
-actor_login="${GITHUB_ACTOR:-$(resolve_actor_login)}"
-issue_keep_open="no"
-if [[ -n "$keep_open_label" ]] && jq -e --arg label "$keep_open_label" 'any(.labels[]?; .name == $label)' >/dev/null <<<"$issue_json"; then
-  issue_keep_open="yes"
-fi
-
-sanitize_body_to_keep_issue_open() {
-  local body_file="${1:?body file required}"
-  BODY_FILE="$body_file" ISSUE_ID="$ISSUE_ID" node <<'EOF'
-const fs = require('fs');
-const bodyFile = process.env.BODY_FILE;
-const issueId = process.env.ISSUE_ID;
-let text = fs.readFileSync(bodyFile, 'utf8');
-const pattern = new RegExp(`\\b(?:close[sd]?|fix(?:e[sd])?|resolve[sd]?)\\s+#${issueId}\\b`, 'gi');
-text = text.replace(pattern, `Related to #${issueId}`);
-fs.writeFileSync(bodyFile, text);
-EOF
-}
-
-ensure_body_closes_issue() {
-  local body_file="${1:?body file required}"
-  if [[ "$issue_keep_open" == "yes" ]]; then
-    sanitize_body_to_keep_issue_open "$body_file"
-    return 0
-  fi
-
-  if rg -qi '\b(?:close[sd]?|fix(?:e[sd])?|resolve[sd]?)\s+#'"${ISSUE_ID}"'\b' "$body_file"; then
-    return 0
-  fi
-
-  printf '\nCloses #%s\n' "$ISSUE_ID" >>"$body_file"
-}
-
-find_pr_for_branch() {
-  flow_github_pr_list_json "$repo_slug" open 100 \
-    | jq -c --arg branch "${BRANCH}" '.[] | select(.headRefName == $branch)' \
-    | head -n 1
-}
-
-ensure_issue_pr_comment() {
-  local pr_number="${1:?pr number required}"
-  local pr_url="${2:?pr url required}"
-  local existing body
-
-  existing="$(
-    flow_github_api_repo "${repo_slug}" "issues/${ISSUE_ID}/comments?per_page=100" --paginate \
-      | jq -r --arg actor "$actor_login" --arg pr_url "$pr_url" '
-          .[]
-          | select(.user.login == $actor)
-          | select((.body // "") | contains($pr_url))
-          | .id
-        ' \
-      | head -n 1
-  )"
-  if [[ -n "$existing" ]]; then
-    return 0
-  fi
-
-  body=$(
-    cat <<EOF
-Opened PR #${pr_number}: ${pr_url}
-
-- Issue: #${ISSUE_ID} (${issue_title})
-- Session: \`${session}\`
-EOF
-  )
-
-  if [[ "$dry_run" == "true" ]]; then
-    printf 'COMMENT_ACTION=would-create\n'
-    printf 'COMMENT_BODY=%s\n' "$(printf '%s' "$body" | tr '\n' ' ' | sed 's/  */ /g')"
-    return 0
-  fi
-
-  flow_github_api_repo "${repo_slug}" "issues/${ISSUE_ID}/comments" --method POST -f body="$body" >/dev/null
-}
-
-pr_json="$(find_pr_for_branch || true)"
-publish_status=""
-pr_number=""
-pr_url=""
-
-if [[ -n "$pr_json" ]]; then
-  publish_status="existing-pr"
-  pr_number="$(jq -r '.number' <<<"$pr_json")"
-  pr_url="$(jq -r '.url' <<<"$pr_json")"
-else
-  local_repo_root="$(flow_resolve_agent_repo_root "${CONFIG_YAML}")"
-  local_worktree_root="$(flow_resolve_worktree_root "${CONFIG_YAML}")"
-  remote_branch_ref="refs/remotes/${remote_name}/${BRANCH}"
-  existing_worktree=""
-  fallback_worktree=""
-  remote_head=""
-  current_head=""
-
-  if [[ "${meta_file_from_archive}" == "yes" && -n "${WORKTREE:-}" ]]; then
-    printf 'WORKTREE_RECOVERY=ignored-archived-pointer\n' >&2
-    printf 'RECOVERY_WORKTREE=%s\n' "${WORKTREE}" >&2
-    WORKTREE=""
-  fi
-
-  if [[ -n "${WORKTREE:-}" ]] && ! worktree_matches_publish_target "${WORKTREE}"; then
-    printf 'WORKTREE_RECOVERY=ignored-stale\n' >&2
-    printf 'RECOVERY_WORKTREE=%s\n' "${WORKTREE}" >&2
-    WORKTREE=""
-  fi
-
-  git -C "$local_repo_root" worktree prune >/dev/null 2>&1 || true
-
-  if [[ -z "${WORKTREE:-}" ]]; then
-    existing_worktree="$(find_existing_worktree_for_branch "$local_repo_root" "$BRANCH" || true)"
-    if [[ -n "$existing_worktree" ]] && worktree_matches_publish_target "$existing_worktree"; then
-      WORKTREE="$existing_worktree"
-      printf 'WORKTREE_RECOVERY=reused-existing\n' >&2
-      printf 'RECOVERY_WORKTREE=%s\n' "$existing_worktree" >&2
-    fi
-  fi
-
-  if [[ -z "${WORKTREE:-}" && "${meta_file_from_archive}" == "yes" ]]; then
-    fallback_worktree="$(recover_worktree_from_remote_branch "$local_repo_root" "$local_worktree_root" "$BRANCH" "$remote_name" || true)"
-    if [[ -n "$fallback_worktree" ]]; then
-      WORKTREE="$fallback_worktree"
-      printf 'WORKTREE_RECOVERY=from-remote\n' >&2
-      printf 'RECOVERY_WORKTREE=%s\n' "$fallback_worktree" >&2
-    fi
-  fi
-
-  if [[ -z "${WORKTREE:-}" ]]; then
-    if ! git -C "$local_repo_root" rev-parse --verify "${BRANCH}" >/dev/null 2>&1; then
-      if [[ -n "${FINAL_HEAD:-}" ]] && git -C "$local_repo_root" cat-file -e "${FINAL_HEAD}^{commit}" >/dev/null 2>&1; then
-        git -C "$local_repo_root" branch -f "$BRANCH" "$FINAL_HEAD" >/dev/null 2>&1 || true
-        printf 'BRANCH_RECOVERY=from-final-head\n' >&2
-        printf 'RECOVERY_HEAD=%s\n' "$FINAL_HEAD" >&2
-      fi
-    fi
-
-    existing_worktree="$(find_existing_worktree_for_branch "$local_repo_root" "$BRANCH" || true)"
-    if [[ -n "$existing_worktree" ]] && worktree_is_git_repo "$existing_worktree"; then
-      WORKTREE="$existing_worktree"
-      printf 'WORKTREE_RECOVERY=reused-existing\n' >&2
-      printf 'RECOVERY_WORKTREE=%s\n' "$existing_worktree" >&2
-    else
-      fallback_worktree="$(mktemp -d "${local_worktree_root}/recovery-XXXXXX")"
-      if git -C "$local_repo_root" worktree add "$fallback_worktree" "$BRANCH" >/dev/null 2>&1 \
-        || git -C "$local_repo_root" worktree add "$fallback_worktree" "$remote_branch_ref" >/dev/null 2>&1; then
-        if worktree_is_git_repo "$fallback_worktree"; then
-          WORKTREE="$fallback_worktree"
-          printf 'WORKTREE_RECOVERY=created\n' >&2
-          printf 'RECOVERY_WORKTREE=%s\n' "$fallback_worktree" >&2
-        else
-          rm -rf "$fallback_worktree" 2>/dev/null || true
-        fi
-      else
-        rm -rf "$fallback_worktree" 2>/dev/null || true
-      fi
-    fi
-  fi
-
-  if [[ -z "${WORKTREE:-}" || ! -d "${WORKTREE:-}" ]]; then
-    echo "session $session is missing a publishable worktree (branch ${BRANCH:-unknown} not found locally or on remote ${remote_name})" >&2
-    exit 1
-  fi
-
-  git -C "$WORKTREE" fetch "$remote_name" "$base_branch" "$BRANCH" --prune >/dev/null 2>&1 || git -C "$WORKTREE" fetch "$remote_name" "$base_branch" --prune >/dev/null 2>&1 || true
-  if git -C "$local_repo_root" rev-parse --verify "${remote_branch_ref}" >/dev/null 2>&1; then
-    remote_head="$(git -C "$local_repo_root" rev-parse "${remote_branch_ref}" 2>/dev/null || true)"
-    current_head="$(git -C "$WORKTREE" rev-parse HEAD 2>/dev/null || true)"
-    if [[ -n "${remote_head}" && "${current_head}" != "${remote_head}" ]]; then
-      git -C "$WORKTREE" checkout -B "$BRANCH" "${remote_branch_ref}" >/dev/null 2>&1 || true
-      git -C "$WORKTREE" branch --set-upstream-to "${remote_name}/${BRANCH}" "$BRANCH" >/dev/null 2>&1 || true
-      printf 'WORKTREE_RECOVERY=aligned-remote\n' >&2
-      printf 'RECOVERY_HEAD=%s\n' "${remote_head}" >&2
-    fi
-  fi
-
-  head_sha="$(git -C "$WORKTREE" rev-parse HEAD)"
-  ahead_count="$(git -C "$WORKTREE" rev-list --count "${remote_name}/${base_branch}"..HEAD)"
-  if [[ "$ahead_count" == "0" ]]; then
-    echo "branch $BRANCH has no commits ahead of ${remote_name}/${base_branch}; nothing to publish" >&2
-    exit 1
-  fi
-
-  "${scope_guard_script}" \
-    --worktree "$WORKTREE" \
-    --base-ref "${remote_name}/${base_branch}" \
-    --issue-id "$ISSUE_ID"
-
-  if [[ -x "${localization_guard_script}" ]]; then
-    "${localization_guard_script}" \
-      --worktree "$WORKTREE" \
-      --base-ref "${remote_name}/${base_branch}"
-  fi
-
-  "${verification_guard_script}" \
-    --worktree "$WORKTREE" \
-    --base-ref "${remote_name}/${base_branch}" \
-    --run-dir "$run_dir"
-
-  pr_title="$(git -C "$WORKTREE" log -1 --pretty=%s)"
-  body_file="${run_dir}/pr-body.md"
-  tmp_body_file=""
-  if [[ ! -s "$body_file" ]]; then
-    tmp_body_file="$(mktemp)"
-    body_file="$tmp_body_file"
-    cat >"$body_file" <<EOF
-## Summary
-
-- Implements #${ISSUE_ID}: ${issue_title}
-- Host-side publication for session \`${session}\`
-- Commit: \`${head_sha}\`
-
-## Verification
-
-- Local verification was executed by the sandboxed issue worker in its isolated worktree.
-- Detailed command output is available in the run artifacts for \`${session}\`.
-EOF
-  fi
-
-  ensure_body_closes_issue "$body_file"
-
-  if [[ "$dry_run" == "true" ]]; then
-    printf 'PUBLISH_STATUS=would-create-pr\n'
-    printf 'ISSUE_ID=%s\n' "$ISSUE_ID"
-    printf 'ISSUE_URL=%s\n' "$issue_url"
-    printf 'BRANCH=%s\n' "$BRANCH"
-    printf 'PR_TITLE=%s\n' "$pr_title"
-    printf 'PR_BODY_FILE=%s\n' "$body_file"
-    [[ -n "$tmp_body_file" ]] && rm -f "$tmp_body_file"
-    exit 0
-  fi
-
-  git -C "$WORKTREE" push -u "$remote_name" "$BRANCH"
-  pr_url="$(flow_github_pr_create "$repo_slug" "$base_branch" "$BRANCH" "$pr_title" "$body_file")"
-  pr_json="$(find_pr_for_branch || true)"
-  if [[ -z "$pr_json" ]]; then
-    echo "PR creation returned ${pr_url}, but no open PR was found for branch ${BRANCH}" >&2
-    [[ -n "$tmp_body_file" ]] && rm -f "$tmp_body_file"
-    exit 1
-  fi
-
-  pr_number="$(jq -r '.number' <<<"$pr_json")"
-  pr_url="$(jq -r '.url' <<<"$pr_json")"
-  publish_status="created-pr"
-  [[ -n "$tmp_body_file" ]] && rm -f "$tmp_body_file"
-fi
-
-ensure_issue_pr_comment "$pr_number" "$pr_url"
-
-printf 'PUBLISH_STATUS=%s\n' "$publish_status"
-printf 'ISSUE_ID=%s\n' "$ISSUE_ID"
-printf 'ISSUE_URL=%s\n' "$issue_url"
-printf 'PR_NUMBER=%s\n' "$pr_number"
-printf 'PR_URL=%s\n' "$pr_url"
-printf 'BRANCH=%s\n' "$BRANCH"