panopticon-cli 0.5.8 → 0.5.10

package/dist/{chunk-M6ZVVKZ3.js → chunk-4OQ4SXQZ.js}

@@ -9,7 +9,7 @@ import {
   init_work_type_router,
   popFromHook,
   pushToHook
-} from "./chunk-ZN5RHWGR.js";
+} from "./chunk-PFA5XE2V.js";
 import {
   clearCredentialFileAuth,
   getProviderEnv,
@@ -27,7 +27,7 @@ import {
   getProject,
   init_projects,
   projects_exports
-} from "./chunk-ZMJFEHGF.js";
+} from "./chunk-7ZB5D46Y.js";
 import {
   capturePaneAsync,
   confirmDelivery,
@@ -552,6 +552,80 @@ var init_specialist_handoff_logger = __esm({
   }
 });
 
+// src/lib/vbrief/io.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4, renameSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join4 } from "path";
+function findPlan(workspacePath) {
+  const planPath = join4(workspacePath, ".planning", PLAN_FILENAME);
+  return existsSync4(planPath) ? planPath : null;
+}
+function readPlan(planPath) {
+  const raw = readFileSync4(planPath, "utf-8");
+  return JSON.parse(raw);
+}
+function readWorkspacePlan(workspacePath) {
+  const planPath = findPlan(workspacePath);
+  if (!planPath) return null;
+  return readPlan(planPath);
+}
+function updateItemStatus(workspacePath, itemId, status) {
+  const planPath = findPlan(workspacePath);
+  if (!planPath) return;
+  const doc = readPlan(planPath);
+  const item = doc.plan.items.find((i) => i.id === itemId);
+  if (!item) return;
+  item.status = status;
+  const tempPath = planPath + ".tmp";
+  writeFileSync2(tempPath, JSON.stringify(doc, null, 2), "utf-8");
+  renameSync(tempPath, planPath);
+}
+function updateSubItemStatus(workspacePath, itemId, subItemId, status) {
+  const planPath = findPlan(workspacePath);
+  if (!planPath) return;
+  const doc = readPlan(planPath);
+  const item = doc.plan.items.find((i) => i.id === itemId);
+  if (!item?.subItems) return;
+  const subItem = item.subItems.find((s) => s.id === subItemId);
+  if (!subItem) return;
+  subItem.status = status;
+  const tempPath = planPath + ".tmp";
+  writeFileSync2(tempPath, JSON.stringify(doc, null, 2), "utf-8");
+  renameSync(tempPath, planPath);
+}
+var PLAN_FILENAME;
+var init_io = __esm({
+  "src/lib/vbrief/io.ts"() {
+    "use strict";
+    init_esm_shims();
+    PLAN_FILENAME = "plan.vbrief.json";
+  }
+});
+
+// src/lib/cloister/task-readiness.ts
+function isTaskReady(itemId, workspacePath) {
+  const doc = readWorkspacePlan(workspacePath);
+  if (!doc) return true;
+  const itemExists = doc.plan.items.some((i) => i.id === itemId);
+  if (!itemExists) return true;
+  const blockerIds = doc.plan.edges.filter((e) => e.type === "blocks" && e.to === itemId).map((e) => e.from);
+  if (blockerIds.length === 0) return true;
+  const itemById = new Map(doc.plan.items.map((i) => [i.id, i]));
+  return blockerIds.every((blockerId) => {
+    const blocker = itemById.get(blockerId);
+    if (!blocker) return true;
+    return TERMINAL_STATUSES.includes(blocker.status);
+  });
+}
+var TERMINAL_STATUSES;
+var init_task_readiness = __esm({
+  "src/lib/cloister/task-readiness.ts"() {
+    "use strict";
+    init_esm_shims();
+    init_io();
+    TERMINAL_STATUSES = ["completed", "cancelled"];
+  }
+});
+
 // src/lib/cloister/specialists.ts
 var specialists_exports = {};
 __export(specialists_exports, {
@@ -611,8 +685,8 @@ __export(specialists_exports, {
   wakeSpecialistOrQueue: () => wakeSpecialistOrQueue,
   wakeSpecialistWithTask: () => wakeSpecialistWithTask
 });
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync2, existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, unlinkSync, appendFileSync as appendFileSync3 } from "fs";
-import { join as join4, basename as basename2 } from "path";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync3, readdirSync as readdirSync3, unlinkSync, appendFileSync as appendFileSync3 } from "fs";
+import { join as join5, basename as basename2 } from "path";
 import { homedir as homedir2 } from "os";
 import { exec } from "child_process";
 import { promisify } from "util";
@@ -623,14 +697,14 @@ async function resolveWorkspaceGitInfo(workspace, taskBranch) {
   if (!workspace || workspace === "unknown") {
     return { gitDirs, branch, isPolyrepo: false };
   }
-  if (existsSync4(join4(workspace, ".git"))) {
+  if (existsSync5(join5(workspace, ".git"))) {
     gitDirs.push(workspace);
   } else {
     try {
       const entries = readdirSync3(workspace, { withFileTypes: true });
       for (const entry of entries) {
-        if (entry.isDirectory() && existsSync4(join4(workspace, entry.name, ".git"))) {
-          gitDirs.push(join4(workspace, entry.name));
+        if (entry.isDirectory() && existsSync5(join5(workspace, entry.name, ".git"))) {
+          gitDirs.push(join5(workspace, entry.name));
         }
       }
     } catch {
@@ -670,10 +744,10 @@ function buildTmuxEnvFlags(env) {
   return flags;
 }
 function initSpecialistsDirectory() {
-  if (!existsSync4(SPECIALISTS_DIR)) {
+  if (!existsSync5(SPECIALISTS_DIR)) {
     mkdirSync3(SPECIALISTS_DIR, { recursive: true });
   }
-  if (!existsSync4(REGISTRY_FILE)) {
+  if (!existsSync5(REGISTRY_FILE)) {
     const registry = {
       version: "2.0",
       // Updated for per-project structure
@@ -697,7 +771,7 @@ function initSpecialistsDirectory() {
 }
 function migrateRegistryIfNeeded() {
   try {
-    const content = readFileSync4(REGISTRY_FILE, "utf-8");
+    const content = readFileSync5(REGISTRY_FILE, "utf-8");
     const registry = JSON.parse(content);
     if (registry.version === "2.0" || registry.projects) {
       return;
@@ -727,7 +801,7 @@ function migrateRegistryIfNeeded() {
 function loadRegistry() {
   initSpecialistsDirectory();
   try {
-    const content = readFileSync4(REGISTRY_FILE, "utf-8");
+    const content = readFileSync5(REGISTRY_FILE, "utf-8");
     return JSON.parse(content);
   } catch (error) {
     console.error("Failed to load specialist registry:", error);
@@ -745,13 +819,13 @@ function loadRegistry() {
   }
 }
 function saveRegistry(registry) {
-  if (!existsSync4(SPECIALISTS_DIR)) {
+  if (!existsSync5(SPECIALISTS_DIR)) {
     mkdirSync3(SPECIALISTS_DIR, { recursive: true });
   }
   registry.lastUpdated = (/* @__PURE__ */ new Date()).toISOString();
   try {
     const content = JSON.stringify(registry, null, 2);
-    writeFileSync2(REGISTRY_FILE, content, "utf-8");
+    writeFileSync3(REGISTRY_FILE, content, "utf-8");
   } catch (error) {
     console.error("Failed to save specialist registry:", error);
     throw error;
@@ -763,17 +837,17 @@ function deterministicUUID(input) {
 }
 function getSessionFilePath(name, projectKey) {
   if (projectKey) {
-    return join4(SPECIALISTS_DIR, "projects", projectKey, `${name}.session`);
+    return join5(SPECIALISTS_DIR, "projects", projectKey, `${name}.session`);
   }
-  return join4(SPECIALISTS_DIR, `${name}.session`);
+  return join5(SPECIALISTS_DIR, `${name}.session`);
 }
 function getSessionId(name, projectKey) {
   const sessionFile = getSessionFilePath(name, projectKey);
-  if (!existsSync4(sessionFile)) {
+  if (!existsSync5(sessionFile)) {
     return null;
   }
   try {
-    const sessionId = readFileSync4(sessionFile, "utf-8").trim();
+    const sessionId = readFileSync5(sessionFile, "utf-8").trim();
     const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     if (!uuidRegex.test(sessionId)) {
       console.warn(`[specialist] Invalid session ID format for ${name} (${projectKey ?? "global"}): ${sessionId} \u2014 discarding`);
@@ -788,12 +862,12 @@ function getSessionId(name, projectKey) {
 }
 function setSessionId(name, sessionId, projectKey) {
   const sessionFile = getSessionFilePath(name, projectKey);
-  const dir = projectKey ? join4(SPECIALISTS_DIR, "projects", projectKey) : SPECIALISTS_DIR;
-  if (!existsSync4(dir)) {
+  const dir = projectKey ? join5(SPECIALISTS_DIR, "projects", projectKey) : SPECIALISTS_DIR;
+  if (!existsSync5(dir)) {
     mkdirSync3(dir, { recursive: true });
   }
   try {
-    writeFileSync2(sessionFile, sessionId.trim(), "utf-8");
+    writeFileSync3(sessionFile, sessionId.trim(), "utf-8");
   } catch (error) {
     console.error(`Failed to write session file for ${name} (${projectKey ?? "global"}):`, error);
     throw error;
@@ -801,7 +875,7 @@ function setSessionId(name, sessionId, projectKey) {
 }
 function clearSessionId(name, projectKey) {
   const sessionFile = getSessionFilePath(name, projectKey);
-  if (!existsSync4(sessionFile)) {
+  if (!existsSync5(sessionFile)) {
     return false;
   }
   try {
@@ -859,9 +933,9 @@ function recordWake(name, sessionId) {
 }
 async function spawnEphemeralSpecialist(projectKey, specialistType, task) {
   ensureProjectSpecialistDir(projectKey, specialistType);
-  const { loadContextDigest } = await import("./specialist-context-W25PPWM4.js");
+  const { loadContextDigest } = await import("./specialist-context-GVF4DV3M.js");
   const contextDigest = loadContextDigest(projectKey, specialistType);
-  const { createRunLog: createRunLog2 } = await import("./specialist-logs-KPC45SZN.js");
+  const { createRunLog: createRunLog2 } = await import("./specialist-logs-W47SAAIU.js");
   const { runId, filePath: logFilePath } = createRunLog2(
     projectKey,
     specialistType,
@@ -881,7 +955,7 @@ ${basePrompt}`;
   const project = getProject(projectKey);
   const cwd = project?.path || getDevrootPath() || homedir2();
   try {
-    const { preTrustDirectory } = await import("./workspace-manager-G6TTBPC3.js");
+    const { preTrustDirectory } = await import("./workspace-manager-Z57ROWBQ.js");
     preTrustDirectory(cwd);
   } catch {
   }
@@ -889,7 +963,7 @@ ${basePrompt}`;
     try {
       const { stdout: sessions } = await execAsync('tmux list-sessions -F "#{session_name}" 2>/dev/null || echo ""', { encoding: "utf-8" });
       if (sessions.split("\n").map((s) => s.trim()).includes(tmuxSession)) {
-        const { getAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+        const { getAgentRuntimeState } = await import("./agents-MOMDECON.js");
         const existingState = getAgentRuntimeState(tmuxSession);
         if (existingState?.state === "active") {
           return {
@@ -926,17 +1000,17 @@ ${basePrompt}`;
       clearCredentialFileAuth(cwd);
     }
     const permissionFlags = specialistType === "merge-agent" ? "--dangerously-skip-permissions --permission-mode bypassPermissions" : "--dangerously-skip-permissions";
-    const agentDir = join4(homedir2(), ".panopticon", "agents", tmuxSession);
+    const agentDir = join5(homedir2(), ".panopticon", "agents", tmuxSession);
     await execAsync(`mkdir -p "${agentDir}"`, { encoding: "utf-8" });
-    const promptFile = join4(agentDir, "task-prompt.md");
-    writeFileSync2(promptFile, taskPrompt);
+    const promptFile = join5(agentDir, "task-prompt.md");
+    writeFileSync3(promptFile, taskPrompt);
     const sessionName = `specialist-${projectKey}-${specialistType}`;
     const sessionId = deterministicUUID(sessionName);
     setSessionId(specialistType, sessionId, projectKey);
     console.log(`[specialist] Dispatching ${specialistType} for ${projectKey}/${task.issueId} (session: ${sessionId.slice(0, 8)}...)`);
-    const launcherScript = join4(agentDir, "launcher.sh");
-    const innerScript = join4(agentDir, "run-claude.sh");
-    writeFileSync2(innerScript, `#!/bin/bash
+    const launcherScript = join5(agentDir, "launcher.sh");
+    const innerScript = join5(agentDir, "run-claude.sh");
+    writeFileSync3(innerScript, `#!/bin/bash
 set -o pipefail
 cd "${cwd}"
 export PANOPTICON_AGENT_ID="${tmuxSession}"
@@ -958,14 +1032,14 @@ fi
 echo ""
 echo "## Specialist completed task"
 `, { mode: 493 });
-    writeFileSync2(launcherScript, `#!/bin/bash
+    writeFileSync3(launcherScript, `#!/bin/bash
 script -qfec "bash '${innerScript}'" /dev/null 2>&1 | tee -a "${logFilePath}"
 `, { mode: 493 });
     await execAsync(
-      `tmux new-session -d -s "${tmuxSession}"${envFlags} "bash '${launcherScript}'"`,
+      `tmux new-session -d -s "${tmuxSession}" -c "${cwd}"${envFlags} "bash '${launcherScript}'"`,
       { encoding: "utf-8" }
     );
-    const { saveAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+    const { saveAgentRuntimeState } = await import("./agents-MOMDECON.js");
     saveAgentRuntimeState(tmuxSession, {
       state: "active",
       lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -989,7 +1063,7 @@ script -qfec "bash '${innerScript}'" /dev/null 2>&1 | tee -a "${logFilePath}"
   }
 }
 async function buildTaskPrompt(projectKey, specialistType, task, contextDigest) {
-  const { getSpecialistPromptOverride } = await import("./projects-3CRF57ZU.js");
+  const { getSpecialistPromptOverride } = await import("./projects-BPGM6IFB.js");
   const customPrompt = getSpecialistPromptOverride(projectKey, specialistType);
   let prompt = `# ${specialistType} Task - ${task.issueId}
 
@@ -1039,17 +1113,8 @@ Update status via API:
 - If issues found: POST to /api/workspaces/${task.issueId}/review-status with {"reviewStatus":"blocked","reviewNotes":"..."}
 - If review passes: POST with {"reviewStatus":"passed"} then queue test-agent`;
       break;
-    case "test-agent":
-      prompt += `Your task:
-1. Run the full test suite
-2. Analyze any failures in detail
-3. Identify root causes
-4. Update status via API when done
-
-Update status via API:
-- If tests pass: POST to /api/workspaces/${task.issueId}/review-status with {"testStatus":"passed"}
-- If tests fail: POST with {"testStatus":"failed","testNotes":"..."}`;
-      break;
+    // test-agent: detailed prompt is in the second switch block below (line ~2173)
+    // Do NOT add an inline stub here — it would shadow the detailed template.
     case "merge-agent": {
       const bInfo = await resolveWorkspaceGitInfo(task.workspace, task.branch);
       if (bInfo.isPolyrepo) {
@@ -1159,7 +1224,7 @@ async function terminateSpecialist(projectKey, specialistType) {
     console.error(`[specialist] Failed to kill tmux session ${tmuxSession}:`, error);
   }
   if (metadata.currentRun) {
-    const { finalizeRunLog: finalizeRunLog2 } = await import("./specialist-logs-KPC45SZN.js");
+    const { finalizeRunLog: finalizeRunLog2 } = await import("./specialist-logs-W47SAAIU.js");
     try {
       finalizeRunLog2(projectKey, specialistType, metadata.currentRun, {
         status: metadata.lastRunStatus || "incomplete",
@@ -1172,20 +1237,20 @@ async function terminateSpecialist(projectKey, specialistType) {
   }
   const key = `${projectKey}-${specialistType}`;
   gracePeriodStates.delete(key);
-  const { saveAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+  const { saveAgentRuntimeState } = await import("./agents-MOMDECON.js");
   saveAgentRuntimeState(tmuxSession, {
     state: "suspended",
     lastActivity: (/* @__PURE__ */ new Date()).toISOString()
   });
-  const { scheduleDigestGeneration } = await import("./specialist-context-W25PPWM4.js");
+  const { scheduleDigestGeneration } = await import("./specialist-context-GVF4DV3M.js");
   scheduleDigestGeneration(projectKey, specialistType);
   scheduleLogCleanup(projectKey, specialistType);
 }
 function scheduleLogCleanup(projectKey, specialistType) {
   Promise.resolve().then(async () => {
     try {
-      const { cleanupOldLogs: cleanupOldLogs2 } = await import("./specialist-logs-KPC45SZN.js");
-      const { getSpecialistRetention } = await import("./projects-3CRF57ZU.js");
+      const { cleanupOldLogs: cleanupOldLogs2 } = await import("./specialist-logs-W47SAAIU.js");
+      const { getSpecialistRetention } = await import("./projects-BPGM6IFB.js");
       const retention = getSpecialistRetention(projectKey);
       const deleted = cleanupOldLogs2(projectKey, specialistType, { maxDays: retention.max_days, maxRuns: retention.max_runs });
       if (deleted > 0) {
@@ -1197,16 +1262,16 @@ function scheduleLogCleanup(projectKey, specialistType) {
   });
 }
 function getProjectSpecialistDir(projectKey, specialistType) {
-  return join4(SPECIALISTS_DIR, projectKey, specialistType);
+  return join5(SPECIALISTS_DIR, projectKey, specialistType);
 }
 function ensureProjectSpecialistDir(projectKey, specialistType) {
   const specialistDir = getProjectSpecialistDir(projectKey, specialistType);
-  const runsDir = join4(specialistDir, "runs");
-  const contextDir = join4(specialistDir, "context");
-  if (!existsSync4(runsDir)) {
+  const runsDir = join5(specialistDir, "runs");
+  const contextDir = join5(specialistDir, "context");
+  if (!existsSync5(runsDir)) {
     mkdirSync3(runsDir, { recursive: true });
   }
-  if (!existsSync4(contextDir)) {
+  if (!existsSync5(contextDir)) {
     mkdirSync3(contextDir, { recursive: true });
   }
 }
@@ -1373,7 +1438,7 @@ async function getSpecialistStatus(name, projectKey) {
   const sessionId = getSessionId(name, projectKey);
   const running = await isRunning(name, projectKey);
   const contextTokens = countContextTokens(name);
-  const { getAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+  const { getAgentRuntimeState } = await import("./agents-MOMDECON.js");
   const tmuxSession = getTmuxSessionName(name, projectKey);
   const runtimeState = getAgentRuntimeState(tmuxSession);
   let state;
@@ -1454,20 +1519,20 @@ Say: "I am the ${name} specialist, ready and waiting for tasks."`;
     } else {
       clearCredentialFileAuth(cwd);
     }
-    const agentDir = join4(homedir2(), ".panopticon", "agents", tmuxSession);
+    const agentDir = join5(homedir2(), ".panopticon", "agents", tmuxSession);
     await execAsync(`mkdir -p "${agentDir}"`, { encoding: "utf-8" });
-    const promptFile = join4(agentDir, "identity-prompt.md");
-    const launcherScript = join4(agentDir, "launcher.sh");
-    writeFileSync2(promptFile, identityPrompt);
+    const promptFile = join5(agentDir, "identity-prompt.md");
+    const launcherScript = join5(agentDir, "launcher.sh");
+    writeFileSync3(promptFile, identityPrompt);
     const newSessionId = randomUUID();
-    writeFileSync2(launcherScript, `#!/bin/bash
+    writeFileSync3(launcherScript, `#!/bin/bash
 cd "${cwd}"
 prompt=$(cat "${promptFile}")
 exec claude --dangerously-skip-permissions --session-id "${newSessionId}" --model ${model} "$prompt"
 `, { mode: 493 });
     setSessionId(name, newSessionId);
     await execAsync(
-      `tmux new-session -d -s "${tmuxSession}"${envFlags} "bash '${launcherScript}'"`,
+      `tmux new-session -d -s "${tmuxSession}" -c "${cwd}"${envFlags} "bash '${launcherScript}'"`,
       { encoding: "utf-8" }
     );
     recordWake(name);
@@ -1528,7 +1593,7 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
   const sessionId = getSessionId(name);
   const wasAlreadyRunning = await isRunning(name);
   if (wasAlreadyRunning && !options.skipBusyGuard) {
-    const { getAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+    const { getAgentRuntimeState } = await import("./agents-MOMDECON.js");
     const runtimeState = getAgentRuntimeState(tmuxSession);
     if (runtimeState?.state === "active") {
       console.warn(`[specialist] ${name} is busy (working on ${runtimeState.currentIssue}), refusing to interrupt`);
@@ -1550,9 +1615,9 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
         error: "not_running"
       };
     }
-    const cwd = getDevrootPath() || join4(process.env.HOME || "/home/eltmon", "Projects");
+    const cwd = getDevrootPath() || join5(process.env.HOME || "/home/eltmon", "Projects");
     try {
-      const { preTrustDirectory } = await import("./workspace-manager-G6TTBPC3.js");
+      const { preTrustDirectory } = await import("./workspace-manager-Z57ROWBQ.js");
       preTrustDirectory(cwd);
     } catch {
     }
@@ -1619,11 +1684,11 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
     const isLargePrompt = taskPrompt.length > 500 || taskPrompt.includes("\n");
     let messageToSend;
     if (isLargePrompt) {
-      if (!existsSync4(TASKS_DIR)) {
+      if (!existsSync5(TASKS_DIR)) {
         mkdirSync3(TASKS_DIR, { recursive: true });
       }
-      const taskFile = join4(TASKS_DIR, `${name}-${Date.now()}.md`);
-      writeFileSync2(taskFile, taskPrompt, "utf-8");
+      const taskFile = join5(TASKS_DIR, `${name}-${Date.now()}.md`);
+      writeFileSync3(taskFile, taskPrompt, "utf-8");
       messageToSend = `Read and execute the task in: ${taskFile}`;
     } else {
       messageToSend = taskPrompt;
@@ -1647,7 +1712,7 @@ async function wakeSpecialist(name, taskPrompt, options = {}) {
       }
     }
     recordWake(name, sessionId || void 0);
-    const { saveAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+    const { saveAgentRuntimeState } = await import("./agents-MOMDECON.js");
     saveAgentRuntimeState(tmuxSession, {
       state: "active",
       lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -1705,7 +1770,7 @@ PHASE 1 \u2014 SYNC & BASELINE (before merge):
    If rebase conflicts: abort and report failure.
 5. Run tests on main to establish a baseline. Record BASELINE_PASS and BASELINE_FAIL.
 
-PHASE 2 \u2014 MERGE:
+PHASE 2 \u2014 MERGE (dry run):
 6. git merge ${mergeBranch} --no-edit
 7. If conflicts: resolve them intelligently, then git add and git commit
 8. If clean merge: the merge commit is auto-created (or fast-forward)
@@ -1715,10 +1780,13 @@ PHASE 3 \u2014 VERIFY:
 
 PHASE 4 \u2014 DECIDE:
 10. Compare results:
-    - If MERGE_FAIL > BASELINE_FAIL (NEW test failures): ROLLBACK with git reset --hard ORIG_HEAD
-    - If MERGE_FAIL <= BASELINE_FAIL (no new failures): PUSH with git push origin main
+    - If MERGE_FAIL > BASELINE_FAIL (NEW test failures): ROLLBACK with git reset --hard ORIG_HEAD and report FAILED
+    - If MERGE_FAIL <= BASELINE_FAIL (no new failures): Report PASSED (merge is validated)
     - Pre-existing failures on main are NOT a reason to rollback
 
+CRITICAL: Do NOT push to main. Do NOT run git push origin main.
+The merge validation stays LOCAL. A human will click Merge in the dashboard to push.
+
 PHASE 5 \u2014 REPORT:
 11. Call the Panopticon API to report results:
     curl -s -X POST ${apiUrl}/api/specialists/done \\
@@ -1726,6 +1794,7 @@ PHASE 5 \u2014 REPORT:
       -d '{"specialist":"merge","issueId":"${task.issueId}","status":"passed|failed","notes":"<summary>"}'
 
 CRITICAL: You MUST call the /api/specialists/done endpoint whether you succeed or fail.
+CRITICAL: NEVER push to main \u2014 only humans merge. Your job is to VALIDATE the merge, not execute it.
 CRITICAL: NEVER use git push --force.
 CRITICAL: Do NOT delete the feature branch.`;
       break;
@@ -1749,14 +1818,14 @@ CRITICAL: Do NOT delete the feature branch.`;
           if (totalChangedFiles === 0) {
             staleBranch = true;
             console.log(`[specialist] review-agent: stale branch detected for ${task.issueId} \u2014 0 files changed vs main`);
-            const { setReviewStatus } = await import("./review-status-J2YJGL3E.js");
+            const { setReviewStatus } = await import("./review-status-E77PZZWG.js");
             setReviewStatus(task.issueId.toUpperCase(), {
               reviewStatus: "passed",
               reviewNotes: "No changes to review \u2014 branch identical to main (already merged or stale)"
             });
             console.log(`[specialist] review-agent: auto-passed ${task.issueId} (stale branch)`);
             const tmuxSession = getTmuxSessionName("review-agent");
-            const { saveAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+            const { saveAgentRuntimeState } = await import("./agents-MOMDECON.js");
             saveAgentRuntimeState(tmuxSession, {
               state: "idle",
               lastActivity: (/* @__PURE__ */ new Date()).toISOString()
@@ -1861,7 +1930,7 @@ curl -s -X POST ${apiUrl}/api/specialists/test-agent/queue -H "Content-Type: app
       const testWorkspace = task.workspace || "unknown";
       const testGitInfo = await resolveWorkspaceGitInfo(task.workspace, task.branch);
       const testIsPolyrepo = testGitInfo.isPolyrepo;
-      const { extractTeamPrefix, findProjectByTeam } = await import("./projects-3CRF57ZU.js");
+      const { extractTeamPrefix, findProjectByTeam } = await import("./projects-BPGM6IFB.js");
       const testTeamPrefix = extractTeamPrefix(task.issueId);
       const testProjectConfig = testTeamPrefix ? findProjectByTeam(testTeamPrefix) : null;
       const testConfigs = testProjectConfig?.tests;
@@ -1989,6 +2058,29 @@ Then use send-feedback-to-agent skill to notify issue agent of NEW failures only
 
 **NEVER run test commands without redirecting to a file.** This is not optional.
 
+## REQUIRED: Container Smoke Test
+
+After unit tests pass, verify the Docker workspace frontend is accessible.
+This is NOT optional \u2014 UI changes that pass unit tests but break in containers must be caught.
+
+\`\`\`bash
+# Check if containers are running for this workspace
+docker ps --filter "name=${featureName}" --format "{{.Names}} {{.Status}}" 2>/dev/null
+\`\`\`
+
+If containers are running, test these URLs:
+- **Frontend**: \`curl -sk https://feature-${featureName}.${testProjectConfig?.workspace?.dns?.domain || "pan.localhost"}/ | head -5\`
+- **API proxy**: \`curl -sk https://feature-${featureName}.${testProjectConfig?.workspace?.dns?.domain || "pan.localhost"}/api/health\`
+- **API issues**: \`curl -sk https://feature-${featureName}.${testProjectConfig?.workspace?.dns?.domain || "pan.localhost"}/api/issues | head -100\`
+
+**Pass criteria:**
+1. Frontend returns HTML containing \`<div id="root">\`
+2. \`/api/health\` returns JSON with \`"status":"ok"\`
+3. \`/api/issues\` returns JSON array (not an error)
+
+**If ANY of these fail, the test FAILS** \u2014 report via the API with details about which check failed.
+If containers are NOT running, note it but don't fail (containers may not be configured for this project).
+
 IMPORTANT: Do NOT hand off to merge-agent. Human clicks Merge button when ready.`;
       break;
     }
@@ -1999,8 +2091,23 @@ IMPORTANT: Do NOT hand off to merge-agent. Human clicks Merge button when ready.
 }
 async function wakeSpecialistOrQueue(name, task, options = {}) {
   const { priority = "normal", source = "handoff" } = options;
+  const vbriefItemId = task.context?.vbriefItemId;
+  const workspacePath = task.workspace || task.context?.workspace;
+  if (vbriefItemId && workspacePath) {
+    try {
+      if (!isTaskReady(vbriefItemId, workspacePath)) {
+        return {
+          success: false,
+          queued: false,
+          message: `Task "${vbriefItemId}" has incomplete blocking dependencies \u2014 not ready to schedule`
+        };
+      }
+    } catch (readinessErr) {
+      console.warn(`[specialist] Task readiness check failed for ${vbriefItemId}: ${readinessErr.message}`);
+    }
+  }
   const running = await isRunning(name);
-  const { getAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+  const { getAgentRuntimeState } = await import("./agents-MOMDECON.js");
   const tmuxSession = getTmuxSessionName(name);
   const runtimeState = getAgentRuntimeState(tmuxSession);
   const idle = runtimeState?.state === "idle" || runtimeState?.state === "suspended";
@@ -2031,7 +2138,7 @@ async function wakeSpecialistOrQueue(name, task, options = {}) {
       };
     }
   }
-  const { saveAgentRuntimeState } = await import("./agents-I6RAEGL5.js");
+  const { saveAgentRuntimeState } = await import("./agents-MOMDECON.js");
   saveAgentRuntimeState(tmuxSession, {
     state: "active",
     lastActivity: (/* @__PURE__ */ new Date()).toISOString(),
@@ -2115,7 +2222,7 @@ function getNextSpecialistTask(specialistName) {
 }
 async function sendFeedbackToAgent(feedback) {
   const { fromSpecialist, toIssueId, summary, details } = feedback;
-  if (!existsSync4(FEEDBACK_DIR)) {
+  if (!existsSync5(FEEDBACK_DIR)) {
     mkdirSync3(FEEDBACK_DIR, { recursive: true });
   }
   const fullFeedback = {
@@ -2131,7 +2238,7 @@ async function sendFeedbackToAgent(feedback) {
   }
   const agentSession = `agent-${toIssueId.toLowerCase()}`;
   const feedbackMessage = formatFeedbackForAgent(fullFeedback);
-  const { writeFeedbackFile } = await import("./feedback-writer-T2WCT6EZ.js");
+  const { writeFeedbackFile } = await import("./feedback-writer-IPPIUPDX.js");
   const specialistMap = {
     "review-agent": "review-agent",
     "test-agent": "test-agent",
@@ -2151,7 +2258,7 @@ async function sendFeedbackToAgent(feedback) {
     return false;
   }
   try {
-    const { messageAgent } = await import("./agents-I6RAEGL5.js");
+    const { messageAgent } = await import("./agents-MOMDECON.js");
     const msg = `SPECIALIST FEEDBACK: ${fromSpecialist} reported ${feedback.feedbackType.toUpperCase()} for ${toIssueId}.
 Read and address: ${fileResult.relativePath}`;
     await messageAgent(agentSession, msg);
@@ -2210,11 +2317,11 @@ ${details}
   return message;
 }
 function getPendingFeedback(issueId) {
-  if (!existsSync4(FEEDBACK_LOG)) {
+  if (!existsSync5(FEEDBACK_LOG)) {
     return [];
   }
   try {
-    const content = readFileSync4(FEEDBACK_LOG, "utf-8");
+    const content = readFileSync5(FEEDBACK_LOG, "utf-8");
     const lines = content.trim().split("\n").filter((l) => l.length > 0);
     const allFeedback = lines.map((line) => JSON.parse(line));
     return allFeedback.filter((f) => f.toIssueId.toLowerCase() === issueId.toLowerCase());
@@ -2233,11 +2340,11 @@ function getFeedbackStats() {
     byType: {},
     total: 0
   };
-  if (!existsSync4(FEEDBACK_LOG)) {
+  if (!existsSync5(FEEDBACK_LOG)) {
     return stats;
   }
   try {
-    const content = readFileSync4(FEEDBACK_LOG, "utf-8");
+    const content = readFileSync5(FEEDBACK_LOG, "utf-8");
     const lines = content.trim().split("\n").filter((l) => l.length > 0);
     for (const line of lines) {
       const feedback = JSON.parse(line);
@@ -2264,11 +2371,12 @@ var init_specialists = __esm({
     init_providers();
     init_tmux();
     init_pipeline_notifier();
+    init_task_readiness();
     init_hooks();
     execAsync = promisify(exec);
-    SPECIALISTS_DIR = join4(PANOPTICON_HOME, "specialists");
-    REGISTRY_FILE = join4(SPECIALISTS_DIR, "registry.json");
-    TASKS_DIR = join4(SPECIALISTS_DIR, "tasks");
+    SPECIALISTS_DIR = join5(PANOPTICON_HOME, "specialists");
+    REGISTRY_FILE = join5(SPECIALISTS_DIR, "registry.json");
+    TASKS_DIR = join5(SPECIALISTS_DIR, "tasks");
     DEFAULT_SPECIALISTS = [
       {
         name: "merge-agent",
@@ -2293,8 +2401,8 @@ var init_specialists = __esm({
       }
     ];
     gracePeriodStates = /* @__PURE__ */ new Map();
-    FEEDBACK_DIR = join4(PANOPTICON_HOME, "specialists", "feedback");
-    FEEDBACK_LOG = join4(FEEDBACK_DIR, "feedback.jsonl");
+    FEEDBACK_DIR = join5(PANOPTICON_HOME, "specialists", "feedback");
+    FEEDBACK_LOG = join5(FEEDBACK_DIR, "feedback.jsonl");
   }
 });
 
@@ -2318,13 +2426,13 @@ __export(specialist_logs_exports, {
   listRunLogs: () => listRunLogs,
   parseLogMetadata: () => parseLogMetadata
 });
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, writeFileSync as writeFileSync3, appendFileSync as appendFileSync4, readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
-import { join as join5, basename as basename3 } from "path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, writeFileSync as writeFileSync4, appendFileSync as appendFileSync4, readFileSync as readFileSync6, readdirSync as readdirSync4, statSync as statSync2, unlinkSync as unlinkSync2 } from "fs";
+import { join as join6, basename as basename3 } from "path";
 function getSpecialistsDir() {
-  return join5(getPanopticonHome(), "specialists");
+  return join6(getPanopticonHome(), "specialists");
 }
 function getRunsDirectory(projectKey, specialistType) {
-  return join5(getSpecialistsDir(), projectKey, specialistType, "runs");
+  return join6(getSpecialistsDir(), projectKey, specialistType, "runs");
 }
 function generateRunId(issueId) {
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").substring(0, 19);
@@ -2332,11 +2440,11 @@ function generateRunId(issueId) {
 }
 function getRunLogPath(projectKey, specialistType, runId) {
   const runsDir = getRunsDirectory(projectKey, specialistType);
-  return join5(runsDir, `${runId}.log`);
+  return join6(runsDir, `${runId}.log`);
 }
 function ensureRunsDirectory(projectKey, specialistType) {
   const runsDir = getRunsDirectory(projectKey, specialistType);
-  if (!existsSync5(runsDir)) {
+  if (!existsSync6(runsDir)) {
     mkdirSync4(runsDir, { recursive: true });
   }
 }
@@ -2356,22 +2464,22 @@ ${contextSeed ? contextSeed : "[No context digest available]"}
 
 ## Session Transcript
 `;
-  writeFileSync3(filePath, header, "utf-8");
+  writeFileSync4(filePath, header, "utf-8");
   return { runId, filePath };
 }
 function appendToRunLog(projectKey, specialistType, runId, content) {
   const filePath = getRunLogPath(projectKey, specialistType, runId);
-  if (!existsSync5(filePath)) {
+  if (!existsSync6(filePath)) {
     throw new Error(`Run log not found: ${filePath}`);
   }
   appendFileSync4(filePath, content, "utf-8");
 }
 function finalizeRunLog(projectKey, specialistType, runId, result) {
   const filePath = getRunLogPath(projectKey, specialistType, runId);
-  if (!existsSync5(filePath)) {
+  if (!existsSync6(filePath)) {
     throw new Error(`Run log not found: ${filePath}`);
   }
-  const content = readFileSync5(filePath, "utf-8");
+  const content = readFileSync6(filePath, "utf-8");
   const startMatch = content.match(/^Started: (.+)$/m);
   const startedAt = startMatch ? new Date(startMatch[1]) : /* @__PURE__ */ new Date();
   const finishedAt = /* @__PURE__ */ new Date();
@@ -2392,11 +2500,11 @@ Finished: ${finishedAt.toISOString()}
 }
 function getRunLog(projectKey, specialistType, runId) {
   const filePath = getRunLogPath(projectKey, specialistType, runId);
-  if (!existsSync5(filePath)) {
+  if (!existsSync6(filePath)) {
     return null;
   }
   try {
-    return readFileSync5(filePath, "utf-8");
+    return readFileSync6(filePath, "utf-8");
   } catch (error) {
     console.error(`Failed to read run log ${runId}:`, error);
     return null;
@@ -2431,15 +2539,15 @@ function parseLogMetadata(logContent) {
 }
 function listRunLogs(projectKey, specialistType, options = {}) {
   const runsDir = getRunsDirectory(projectKey, specialistType);
-  if (!existsSync5(runsDir)) {
+  if (!existsSync6(runsDir)) {
     return [];
   }
   try {
     const files = readdirSync4(runsDir).filter((f) => f.endsWith(".log")).map((f) => {
-      const filePath = join5(runsDir, f);
+      const filePath = join6(runsDir, f);
       const stats = statSync2(filePath);
       const runId = basename3(f, ".log");
-      const content = readFileSync5(filePath, "utf-8");
+      const content = readFileSync6(filePath, "utf-8");
       const metadata = parseLogMetadata(content);
       return {
         runId,
@@ -2512,7 +2620,7 @@ function isRunLogActive(projectKey, specialistType, runId) {
 }
 function getRunLogSize(projectKey, specialistType, runId) {
   const filePath = getRunLogPath(projectKey, specialistType, runId);
-  if (!existsSync5(filePath)) {
+  if (!existsSync6(filePath)) {
     return null;
   }
   try {
@@ -2569,6 +2677,10 @@ var init_specialist_logs = __esm({
 });
 
 export {
+  readWorkspacePlan,
+  updateItemStatus,
+  updateSubItemStatus,
+  init_io,
   readTodayCosts,
   readIssueCosts,
   summarizeCosts,
@@ -2660,4 +2772,4 @@ export {
   getFeedbackStats,
   init_specialists
 };
-//# sourceMappingURL=chunk-M6ZVVKZ3.js.map
+//# sourceMappingURL=chunk-4OQ4SXQZ.js.map