@overdeck/contracts 0.63.0 → 0.64.0

package/dist/index.cjs

@@ -107,7 +107,8 @@ const IssueState = effect.Schema.Literals([
 const IssueAttention = effect.Schema.Literals([
 	"needs-you",
 	"stuck",
-	"api-error"
+	"api-error",
+	"work-not-started"
 ]);
 /** Latest review decision on the PR, as the forge reports it. */
 const PrReviewState = effect.Schema.Literals([
@@ -140,6 +141,16 @@ const DerivedBranchState = effect.Schema.Struct({
 	aheadOfMain: effect.Schema.Number,
 	pushed: effect.Schema.Boolean
 });
+/** The workspace journal's read on a post-planning auto-start (PAN-4399). */
+const DerivedWorkStart = effect.Schema.Struct({
+	status: effect.Schema.Literals(["retrying", "not-started"]),
+	/** ISO time of the journal entry the status was read from. */
+	at: effect.Schema.String,
+	error: effect.Schema.optional(effect.Schema.String),
+	nextRetryAt: effect.Schema.optional(effect.Schema.String),
+	/** The retry is journaled but not actually running because the Deacon is frozen (PAN-4210). Present only when true. */
+	held: effect.Schema.optional(effect.Schema.Literal(true))
+});
 /** Everything the dashboard needs to render an issue's pipeline position. */
 const DerivedIssueState = effect.Schema.Struct({
 	issueId: effect.Schema.String,
@@ -152,7 +163,9 @@ const DerivedIssueState = effect.Schema.Struct({
 	* precedence — could not be ruled in or out. Present only in that case; an
 	* unresolved tracker read is never reported as an open issue.
 	*/
-	trackerUnknown: effect.Schema.optional(effect.Schema.Literal(true))
+	trackerUnknown: effect.Schema.optional(effect.Schema.Literal(true)),
+	/** A deferred or gave-up post-planning auto-start read from the workspace journal (PAN-4399). */
+	workStart: effect.Schema.optional(DerivedWorkStart)
 });
 const ISSUE_STATES = [
 	"backlog",
@@ -180,7 +193,8 @@ const ISSUE_STATE_PRECEDENCE = [
 const ISSUE_ATTENTIONS = [
 	"needs-you",
 	"stuck",
-	"api-error"
+	"api-error",
+	"work-not-started"
 ];
 function isIssueState(value) {
 	return typeof value === "string" && ISSUE_STATES.includes(value);
@@ -483,6 +497,13 @@ const ChannelPermissionRequestSnapshot = effect.Schema.Struct({
 	inputPreview: effect.Schema.String,
 	createdAt: effect.Schema.String
 });
+/** PAN-4371 — advisory Jev reading of why an idle agent ended its turn. kind is a string (append-only store). */
+const TurnEndAssessment = effect.Schema.Struct({
+	kind: effect.Schema.String,
+	confidence: effect.Schema.Number,
+	needsAnswer: effect.Schema.Boolean,
+	model: effect.Schema.String
+});
 const AgentSnapshot = effect.Schema.Struct({
 	id: AgentId,
 	issueId: IssueId,
@@ -545,6 +566,7 @@ const AgentSnapshot = effect.Schema.Struct({
 	})),
 	resolution: effect.Schema.optional(AgentResolution),
 	resolutionCount: effect.Schema.optional(effect.Schema.Number),
+	turnEndAssessment: effect.Schema.optional(TurnEndAssessment),
 	runtimeSnapshotSequence: effect.Schema.optional(SequenceNumber)
 });
 /** PAN-3151: A recorded cycle in the review convergence tracking series */
@@ -1802,7 +1824,8 @@ const AgentEnrichmentChangedEvent = effect.Schema.Struct({
 			plan: effect.Schema.String
 		})),
 		resolution: effect.Schema.optional(AgentResolution),
-		resolutionCount: effect.Schema.optional(effect.Schema.Number)
+		resolutionCount: effect.Schema.optional(effect.Schema.Number),
+		turnEndAssessment: effect.Schema.optional(TurnEndAssessment)
 	})
 });
 /** New — agent created in database */
@@ -4056,7 +4079,8 @@ function applyEvent(state, event) {
 						pendingAskUserQuestion: event.payload.pendingAskUserQuestion,
 						pendingProposedPlan: event.payload.pendingProposedPlan,
 						resolution: event.payload.resolution,
-						resolutionCount: event.payload.resolutionCount
+						resolutionCount: event.payload.resolutionCount,
+						turnEndAssessment: event.payload.turnEndAssessment
 					}
 				}
 			};
@@ -4194,6 +4218,7 @@ function applyEvent(state, event) {
 					delete base["pendingInputKinds"];
 					delete base["pendingAskUserQuestion"];
 					delete base["pendingProposedPlan"];
+					delete base["turnEndAssessment"];
 				}
 				return base;
 			})();
@@ -6911,30 +6936,261 @@ const COMPOSER_COMMAND_MANIFEST = [
 		"id": "pan-skills-set",
 		"path": ["skills", "set"],
 		"display": "/pan skills set",
-		"description": "Set a skill on, off, or inherit (global unless --project/--issue)",
+		"description": "Set a skill (<skill> <state>) or a pack (--pack <id> <state>) on, off, or inherit",
+		"args": [{
+			"name": "args",
+			"required": true,
+			"variadic": true
+		}],
+		"options": [
+			{
+				"flags": "--project <key>",
+				"description": "Project override",
+				"required": true,
+				"valueHint": "key"
+			},
+			{
+				"flags": "--issue <id>",
+				"description": "Issue override",
+				"required": true,
+				"valueHint": "id"
+			},
+			{
+				"flags": "--pack <id>",
+				"description": "Set a whole skill pack instead of one skill",
+				"required": true,
+				"valueHint": "id"
+			}
+		],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack",
+		"path": ["skills", "pack"],
+		"display": "/pan skills pack",
+		"description": "Register, update, and cache external skill packs pinned to a commit",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-add",
+		"path": [
+			"skills",
+			"pack",
+			"add"
+		],
+		"display": "/pan skills pack add",
+		"description": "Register a git skill pack at the commit a ref resolves to (enables nothing)",
 		"args": [{
-			"name": "skill",
+			"name": "id",
 			"required": true,
 			"variadic": false
 		}, {
-			"name": "state",
+			"name": "url",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [
+			{
+				"flags": "--ref <ref>",
+				"description": "Tag or branch to pin",
+				"required": true,
+				"valueHint": "ref"
+			},
+			{
+				"flags": "--adapter <adapter>",
+				"description": "plain or claude-plugin",
+				"required": true,
+				"valueHint": "adapter"
+			},
+			{
+				"flags": "--yes",
+				"description": "Trust the resolved commit without asking",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-update",
+		"path": [
+			"skills",
+			"pack",
+			"update"
+		],
+		"display": "/pan skills pack update",
+		"description": "Move a pack to the commit its ref (or --ref) now resolves to",
+		"args": [{
+			"name": "id",
 			"required": true,
 			"variadic": false
 		}],
 		"options": [{
-			"flags": "--project <key>",
-			"description": "Project override",
+			"flags": "--ref <ref>",
+			"description": "Switch to a different tag or branch",
 			"required": true,
-			"valueHint": "key"
+			"valueHint": "ref"
 		}, {
-			"flags": "--issue <id>",
-			"description": "Issue override",
+			"flags": "--yes",
+			"description": "Trust the new commit without asking",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-list",
+		"path": [
+			"skills",
+			"pack",
+			"list"
+		],
+		"display": "/pan skills pack list",
+		"description": "List registered skill packs",
+		"args": [],
+		"options": [{
+			"flags": "--json",
+			"description": "Output as JSON",
+			"required": false,
+			"valueHint": null
+		}, {
+			"flags": "--offline",
+			"description": "Skip the update check (no network)",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-remove",
+		"path": [
+			"skills",
+			"pack",
+			"remove"
+		],
+		"display": "/pan skills pack remove",
+		"description": "Unregister a pack, clear its global toggles, and delete its cache",
+		"args": [{
+			"name": "id",
 			"required": true,
-			"valueHint": "id"
+			"variadic": false
+		}],
+		"options": [],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-sync",
+		"path": [
+			"skills",
+			"pack",
+			"sync"
+		],
+		"display": "/pan skills pack sync",
+		"description": "Re-fetch packs and extract their trusted commits (all packs when omitted)",
+		"args": [{
+			"name": "id",
+			"required": false,
+			"variadic": false
+		}],
+		"options": [],
+		"aliases": [],
+		"category": "Core"
+	},
+	{
+		"id": "pan-skills-pack-gc",
+		"path": [
+			"skills",
+			"pack",
+			"gc"
+		],
+		"display": "/pan skills pack gc",
+		"description": "Remove unused skill pack mounts and dangling launch links",
+		"args": [],
+		"options": [{
+			"flags": "--max-age-days <n>",
+			"description": "Keep unused mounts younger than this",
+			"required": true,
+			"valueHint": "n"
 		}],
 		"aliases": [],
 		"category": "Core"
 	},
+	{
+		"id": "pan-pair",
+		"path": ["pair"],
+		"display": "/pan pair",
+		"description": "Print a one-time URL that pairs another device with this dashboard (see configuration/remote-access.mdx)",
+		"args": [],
+		"options": [
+			{
+				"flags": "--label <name>",
+				"description": "Name to record for the pairing in the activity log",
+				"required": true,
+				"valueHint": "name"
+			},
+			{
+				"flags": "--url <base>",
+				"description": "Base URL the other device can reach (default: this dashboard's API URL)",
+				"required": true,
+				"valueHint": "base"
+			},
+			{
+				"flags": "--json",
+				"description": "Print { url, credential, expiresAt } as JSON",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-devices",
+		"path": ["devices"],
+		"display": "/pan devices",
+		"description": "List or revoke paired devices (see configuration/remote-access.mdx)",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-devices-list",
+		"path": ["devices", "list"],
+		"display": "/pan devices list",
+		"description": "List paired devices with created, last-used and revoked times",
+		"args": [],
+		"options": [{
+			"flags": "--json",
+			"description": "Print the devices as JSON",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-devices-revoke",
+		"path": ["devices", "revoke"],
+		"display": "/pan devices revoke",
+		"description": "Revoke a paired device and close its live connections",
+		"args": [{
+			"name": "id",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
 	{
 		"id": "pan-issues",
 		"path": ["issues"],
@@ -7249,6 +7505,12 @@ const COMPOSER_COMMAND_MANIFEST = [
 				"description": "Bypass the PRD-first gate for a genuinely trivial issue (loud; prefer writing the PRD)",
 				"required": false,
 				"valueHint": null
+			},
+			{
+				"flags": "--critic",
+				"description": "Require an independent different-family plan critique before promotion (automatic for architecture, substrate-improvement and security labels)",
+				"required": false,
+				"valueHint": null
 			}
 		],
 		"aliases": [],
@@ -7455,6 +7717,12 @@ const COMPOSER_COMMAND_MANIFEST = [
 				"required": true,
 				"valueHint": "path"
 			},
+			{
+				"flags": "--allow-primary",
+				"description": "Operator only: allow --cwd to be a project's primary checkout (refused for agent sessions)",
+				"required": false,
+				"valueHint": null
+			},
 			{
 				"flags": "--project <key>",
 				"description": "Project (yaml key or display name) for the new conversation; defaults to inheriting the source conversation's project",
@@ -7504,6 +7772,12 @@ const COMPOSER_COMMAND_MANIFEST = [
 				"required": true,
 				"valueHint": "path"
 			},
+			{
+				"flags": "--allow-primary",
+				"description": "Operator only: allow --cwd to be a project's primary checkout (refused for agent sessions)",
+				"required": false,
+				"valueHint": null
+			},
 			{
 				"flags": "--project <key>",
 				"description": "Project (yaml key or display name) for the new conversation; defaults to inheriting the source conversation's project",
@@ -8334,6 +8608,11 @@ const COMPOSER_COMMAND_MANIFEST = [
 			"description": "Print JSON",
 			"required": false,
 			"valueHint": null
+		}, {
+			"flags": "--steal",
+			"description": "Claim even when a running agent holds this item or an overlapping one (foreman/operator override)",
+			"required": false,
+			"valueHint": null
 		}],
 		"aliases": [],
 		"category": "Lifecycle"
@@ -8991,6 +9270,436 @@ const COMPOSER_COMMAND_MANIFEST = [
 		"aliases": [],
 		"category": "Workspace"
 	},
+	{
+		"id": "pan-vault",
+		"path": ["vault"],
+		"display": "/pan vault",
+		"description": "Session Vault: encrypted off-machine storage and cross-machine resume for agent conversations",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-setup",
+		"path": ["vault", "setup"],
+		"display": "/pan vault setup",
+		"description": "Enable the vault against your own git remote and print the recovery phrase once",
+		"args": [{
+			"name": "git-url",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [
+			{
+				"flags": "--hooks",
+				"description": "Also register the Claude Code Stop hook that saves after each turn",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--passphrase-file <path>",
+				"description": "Also enable passphrase unlock with the passphrase in this file",
+				"required": true,
+				"valueHint": "path"
+			},
+			{
+				"flags": "--generate-passphrase",
+				"description": "Also enable passphrase unlock with a generated 6-word passphrase, printed once",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--no-passphrase",
+				"description": "Do not offer passphrase unlock",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-join",
+		"path": ["vault", "join"],
+		"display": "/pan vault join",
+		"description": "Join an existing vault from another machine with the vault passphrase or the recovery phrase",
+		"args": [{
+			"name": "git-url",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--phrase-file <path>",
+			"description": "Read the 24-word recovery phrase from a file instead of prompting",
+			"required": true,
+			"valueHint": "path"
+		}, {
+			"flags": "--passphrase-file <path>",
+			"description": "Read the vault passphrase from a file instead of prompting",
+			"required": true,
+			"valueHint": "path"
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-passphrase",
+		"path": ["vault", "passphrase"],
+		"display": "/pan vault passphrase",
+		"description": "Turn passphrase unlock for new machines on (set) or off (remove); the vault key stays the same",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-passphrase-set",
+		"path": [
+			"vault",
+			"passphrase",
+			"set"
+		],
+		"display": "/pan vault passphrase set",
+		"description": "Wrap the vault key under a passphrase so a new machine can join without the recovery phrase",
+		"args": [],
+		"options": [{
+			"flags": "--passphrase-file <path>",
+			"description": "Read the passphrase from a file instead of prompting",
+			"required": true,
+			"valueHint": "path"
+		}, {
+			"flags": "--generate",
+			"description": "Generate a 6-word passphrase and print it once",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-passphrase-remove",
+		"path": [
+			"vault",
+			"passphrase",
+			"remove"
+		],
+		"display": "/pan vault passphrase remove",
+		"description": "Delete the passphrase unlock object; joining then needs the recovery phrase",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-rotate-key",
+		"path": ["vault", "rotate-key"],
+		"display": "/pan vault rotate-key",
+		"description": "Replace the vault key after losing a device: re-encrypt refs under a new key, keep old chunks readable, print a new recovery phrase",
+		"args": [],
+		"options": [
+			{
+				"flags": "--yes",
+				"description": "Rotate without the confirmation prompt",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--passphrase-file <path>",
+				"description": "Re-wrap passphrase unlock under the new key with the passphrase in this file",
+				"required": true,
+				"valueHint": "path"
+			},
+			{
+				"flags": "--generate-passphrase",
+				"description": "Re-wrap passphrase unlock under the new key with a generated 6-word passphrase, printed once",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--no-passphrase",
+				"description": "Turn passphrase unlock off",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-status",
+		"path": ["vault", "status"],
+		"display": "/pan vault status",
+		"description": "Show backend, this machine, owned records, last sync and the machine list",
+		"args": [],
+		"options": [{
+			"flags": "--json",
+			"description": "Output in JSON format",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-save",
+		"path": ["vault", "save"],
+		"display": "/pan vault save",
+		"description": "Settle one transcript (by session id or path) or many into the vault",
+		"args": [{
+			"name": "session-id-or-path",
+			"required": false,
+			"variadic": false
+		}],
+		"options": [
+			{
+				"flags": "--all",
+				"description": "Settle every discovered transcript",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--since <date>",
+				"description": "With --all: only transcripts modified on or after this date",
+				"required": true,
+				"valueHint": "date"
+			},
+			{
+				"flags": "--harness <harness>",
+				"description": "With --all: only this harness (claude-code, codex, ...)",
+				"required": true,
+				"valueHint": "harness"
+			},
+			{
+				"flags": "--hook",
+				"description": "Claude Code Stop-hook mode: read {session_id, transcript_path} JSON from stdin, print nothing, exit 0",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-sync",
+		"path": ["vault", "sync"],
+		"display": "/pan vault sync",
+		"description": "Settle owned transcripts that grew, register this machine and refresh the list",
+		"args": [],
+		"options": [],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-list",
+		"path": ["vault", "list"],
+		"display": "/pan vault list",
+		"description": "List saved conversations from the local cache (never contacts the backend)",
+		"args": [],
+		"options": [{
+			"flags": "--json",
+			"description": "Output in JSON format",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-show",
+		"path": ["vault", "show"],
+		"display": "/pan vault show",
+		"description": "Print a saved conversation read-only with its versions",
+		"args": [{
+			"name": "id",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--json",
+			"description": "Output in JSON format",
+			"required": false,
+			"valueHint": null
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-resume",
+		"path": ["vault", "resume"],
+		"display": "/pan vault resume",
+		"description": "Continue a saved conversation here: <id> or <id>@<version>; adopts it and launches the harness",
+		"args": [{
+			"name": "id",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [
+			{
+				"flags": "--cwd <dir>",
+				"description": "Working directory to resume in (default: the saved cwd)",
+				"required": true,
+				"valueHint": "dir"
+			},
+			{
+				"flags": "--no-launch",
+				"description": "Print the launch command instead of running it",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--on-drift <choice>",
+				"description": "When the cwd state differs from the saved state: continue | note | cancel",
+				"required": true,
+				"valueHint": "choice"
+			},
+			{
+				"flags": "--no-code",
+				"description": "Do not apply the saved code snapshot; only continue the conversation",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--worktree <dir>",
+				"description": "Apply the code snapshot into a new git worktree at <dir> instead of the target checkout",
+				"required": true,
+				"valueHint": "dir"
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-exclude",
+		"path": ["vault", "exclude"],
+		"display": "/pan vault exclude",
+		"description": "Exclude conversations by cwd path, git origin or session id; an excluded saved record becomes a tombstone",
+		"args": [{
+			"name": "path",
+			"required": false,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--origin <url>",
+			"description": "Exclude conversations whose git origin is this URL",
+			"required": true,
+			"valueHint": "url"
+		}, {
+			"flags": "--session <id>",
+			"description": "Exclude one session by native session id or vault id",
+			"required": true,
+			"valueHint": "id"
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-include",
+		"path": ["vault", "include"],
+		"display": "/pan vault include",
+		"description": "Remove an exclusion added with pan vault exclude",
+		"args": [{
+			"name": "path",
+			"required": false,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--origin <url>",
+			"description": "Include conversations whose git origin is this URL again",
+			"required": true,
+			"valueHint": "url"
+		}, {
+			"flags": "--session <id>",
+			"description": "Include one session again",
+			"required": true,
+			"valueHint": "id"
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-allow-secret",
+		"path": ["vault", "allow-secret"],
+		"display": "/pan vault allow-secret",
+		"description": "Allow one blocked transcript line, or the blocked code lines of one file, for that record only",
+		"args": [{
+			"name": "id-or-path",
+			"required": true,
+			"variadic": false
+		}, {
+			"name": "line",
+			"required": false,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--file <path>",
+			"description": "Allow the blocked lines of this file in the code snapshot (path relative to the repository root)",
+			"required": true,
+			"valueHint": "path"
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-evict",
+		"path": ["vault", "evict"],
+		"display": "/pan vault evict",
+		"description": "Review the pending-deletion batch (default) or act on it; nothing is deleted without --confirm",
+		"args": [],
+		"options": [
+			{
+				"flags": "--review",
+				"description": "Scan and print the batch with its fingerprint (default)",
+				"required": false,
+				"valueHint": null
+			},
+			{
+				"flags": "--confirm <fingerprint>",
+				"description": "Delete the reviewed files if the batch still matches this fingerprint",
+				"required": true,
+				"valueHint": "fingerprint"
+			},
+			{
+				"flags": "--decline <vaultId>",
+				"description": "Remove an entry from the batch and do not offer it again",
+				"required": true,
+				"valueHint": "vaultId"
+			},
+			{
+				"flags": "--reoffer <vaultId>",
+				"description": "Allow a declined entry to be offered again",
+				"required": true,
+				"valueHint": "vaultId"
+			},
+			{
+				"flags": "--clear",
+				"description": "Empty the batch without deleting or declining anything",
+				"required": false,
+				"valueHint": null
+			}
+		],
+		"aliases": [],
+		"category": "CLI"
+	},
+	{
+		"id": "pan-vault-restore",
+		"path": ["vault", "restore"],
+		"display": "/pan vault restore",
+		"description": "Rebuild an evicted transcript byte for byte at its original path",
+		"args": [{
+			"name": "id",
+			"required": true,
+			"variadic": false
+		}],
+		"options": [{
+			"flags": "--to <path>",
+			"description": "Write the rebuilt file here instead of the recorded path",
+			"required": true,
+			"valueHint": "path"
+		}],
+		"aliases": [],
+		"category": "CLI"
+	},
 	{
 		"id": "pan-test",
 		"path": ["test"],
@@ -12133,7 +12842,7 @@ const COMPOSER_COMMAND_MANIFEST = [
 		"id": "pan-spawn",
 		"path": ["spawn"],
 		"display": "/pan spawn",
-		"description": "Create a worker pane for one xBRIEF item in the issue workspace",
+		"description": "Create a worker pane for one xBRIEF item in its own item worktree",
 		"args": [],
 		"options": [
 			{
@@ -12159,6 +12868,12 @@ const COMPOSER_COMMAND_MANIFEST = [
 				"description": "Coding-agent harness (default: claude-code)",
 				"required": true,
 				"valueHint": "harness"
+			},
+			{
+				"flags": "--shared",
+				"description": "Run the worker in the issue workspace instead of an item worktree (foreman/operator only; serial use)",
+				"required": false,
+				"valueHint": null
 			}
 		],
 		"aliases": [],
@@ -12545,6 +13260,12 @@ const COMPOSER_COMMAND_MANIFEST = [
 				"required": false,
 				"valueHint": null
 			},
+			{
+				"flags": "--force",
+				"description": "Launch even while the host is CPU-saturated",
+				"required": false,
+				"valueHint": null
+			},
 			{
 				"flags": "--no-wait",
 				"description": "Return without waiting for the lane to start",
@@ -14627,6 +15348,47 @@ function laneActivityOf(row, now) {
 	return "stopped";
 }
 //#endregion
+//#region src/environment.ts
+/** Wire protocol version a client and server must agree on. */
+const ENVIRONMENT_PROTOCOL_VERSION = 1;
+const EnvironmentId = effect.Schema.String.pipe(effect.Schema.brand("EnvironmentId"));
+const EnvironmentCapabilities = effect.Schema.Struct({
+	/** `POST /api/pairing/*` is available. */
+	pairing: effect.Schema.Boolean,
+	/** `GET/DELETE /api/devices` is available. */
+	deviceSessions: effect.Schema.Boolean,
+	/** `/ws/*` upgrades require a credential (PAN-1166). */
+	terminalAuth: effect.Schema.Boolean
+});
+const EnvironmentDescriptor = effect.Schema.Struct({
+	descriptorVersion: effect.Schema.Literal(1),
+	environmentId: EnvironmentId,
+	label: effect.Schema.String,
+	platform: effect.Schema.Struct({
+		os: effect.Schema.String,
+		arch: effect.Schema.String
+	}),
+	/** Exact package version of the serving Overdeck. */
+	serverVersion: effect.Schema.String,
+	/** The server's `ENVIRONMENT_PROTOCOL_VERSION`. */
+	protocolVersion: effect.Schema.Number,
+	capabilities: EnvironmentCapabilities
+});
+/** A server-local id qualified by the environment that owns it. */
+const ScopedRef = (localId) => effect.Schema.Struct({
+	environmentId: EnvironmentId,
+	localId
+});
+const ScopedProjectRef = ScopedRef(effect.Schema.String);
+const ScopedIssueRef = ScopedRef(effect.Schema.String);
+const ScopedAgentRef = ScopedRef(effect.Schema.String);
+const ScopedConversationRef = ScopedRef(effect.Schema.String);
+const ScopedTerminalRef = ScopedRef(effect.Schema.String);
+/** True only when the server speaks exactly the client's protocol version. */
+function isProtocolCompatible(descriptor, clientProtocolVersion) {
+	return descriptor.protocolVersion === clientProtocolVersion;
+}
+//#endregion
 exports.ACP_BEHAVIOR = ACP_BEHAVIOR;
 exports.AGENT_ROLES = AGENT_ROLES;
 exports.Activity = Activity;
@@ -14750,6 +15512,7 @@ exports.DeployStalenessSnapshot = DeployStalenessSnapshot;
 exports.DerivedBranchState = DerivedBranchState;
 exports.DerivedIssueState = DerivedIssueState;
 exports.DerivedPrState = DerivedPrState;
+exports.DerivedWorkStart = DerivedWorkStart;
 exports.DirectoryEntry = DirectoryEntry;
 exports.DirectoryEntryKind = DirectoryEntryKind;
 exports.DirectoryEntryLocation = DirectoryEntryLocation;
@@ -14764,6 +15527,7 @@ exports.DiscoveredSessionSnapshot = DiscoveredSessionSnapshot;
 exports.DomainEvent = DomainEvent;
 exports.EDITORS = EDITORS;
 exports.EFFORT_LEVELS = EFFORT_LEVELS;
+exports.ENVIRONMENT_PROTOCOL_VERSION = ENVIRONMENT_PROTOCOL_VERSION;
 exports.EditorIdSchema = EditorIdSchema;
 exports.EffortLevelSchema = EffortLevelSchema;
 exports.EmbedProgressEvent = EmbedProgressEvent;
@@ -14774,6 +15538,9 @@ exports.EnrichProgressEvent = EnrichProgressEvent;
 exports.EnrichProgressSnapshot = EnrichProgressSnapshot;
 exports.EnrichSessionsRpc = EnrichSessionsRpc;
 exports.EnrichStatsSnapshot = EnrichStatsSnapshot;
+exports.EnvironmentCapabilities = EnvironmentCapabilities;
+exports.EnvironmentDescriptor = EnvironmentDescriptor;
+exports.EnvironmentId = EnvironmentId;
 exports.ExtractionProviderConfig = ExtractionProviderConfig;
 exports.ExtractionProviderTarget = ExtractionProviderTarget;
 exports.FeatureNode = FeatureNode;
@@ -14984,6 +15751,12 @@ exports.ScanProgressEvent = ScanProgressEvent;
 exports.ScanProgressSnapshot = ScanProgressSnapshot;
 exports.ScanResult = ScanResult;
 exports.ScanStartedEvent = ScanStartedEvent;
+exports.ScopedAgentRef = ScopedAgentRef;
+exports.ScopedConversationRef = ScopedConversationRef;
+exports.ScopedIssueRef = ScopedIssueRef;
+exports.ScopedProjectRef = ScopedProjectRef;
+exports.ScopedRef = ScopedRef;
+exports.ScopedTerminalRef = ScopedTerminalRef;
 exports.SearchConversationsRpc = SearchConversationsRpc;
 exports.SendTerminalInputRpc = SendTerminalInputRpc;
 exports.SequenceNumber = SequenceNumber;
@@ -15036,6 +15809,7 @@ exports.TickMarker = TickMarker;
 exports.TickMarkerPhase = TickMarkerPhase;
 exports.TurnDiffFileChange = TurnDiffFileChange;
 exports.TurnDiffSummary = TurnDiffSummary;
+exports.TurnEndAssessment = TurnEndAssessment;
 exports.WIRED_HOOK_INVENTORY = WIRED_HOOK_INVENTORY;
 exports.WIRED_HOOK_NAMES = WIRED_HOOK_NAMES;
 exports.WS_METHODS = WS_METHODS;
@@ -15081,6 +15855,7 @@ exports.isConfiguredPullRequestRepo = isConfiguredPullRequestRepo;
 exports.isEffortLevel = isEffortLevel;
 exports.isIssueAttention = isIssueAttention;
 exports.isIssueState = isIssueState;
+exports.isProtocolCompatible = isProtocolCompatible;
 exports.isSingletonConversation = isSingletonConversation;
 exports.isTerminalBackendName = isTerminalBackendName;
 exports.isTerminalTurnDiffSummaryStatus = isTerminalTurnDiffSummaryStatus;