fix(worker): recover stalled workflow steps

[outof-place]

Summary

• Bound sandbox round trips and poll-phase teardown so a never-settling client cannot hold a workflow invocation to the platform ceiling.
• Add a newest-running-step stall watchdog with guarded failure telemetry, cancellation, exact-owner Jira withdrawal, and dead-step drain handling.
• Preserve workflow-selected Jira destinations and retain claims when live state, ownership, or durable status cannot be confirmed.

Verification

• CI: pnpm --filter worker build:shared
• CI: focused Vitest coverage for poll-agent, poll-phase, workflow-step-drain, run-stall-watchdog, reconcile, cancel-run, ticket-transition, run-start-lifecycle, and telemetry
• CI: pnpm --filter worker typecheck
• Publication check: git diff --check origin/main...HEAD passed

Dependencies

• fix(worker): prevent manual dispatch run leakage #280 manual-dispatch ownership behavior is already in main.
• fix(worker): surface codex provider errors instead of generic cli_exit #347 provider-error behavior is already in main.
• No merge or rebase is required for this watchdog-only diff.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ai-workflow-app-dashboard	Ready	Preview	Aug 28, 2026 6:59am

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 90ad54bd-af3d-4472-8615-aa715d9d7a26

---

_{Comment @coderabbitai help to get the list of available commands.}