@overdeck/core 0.45.10 → 0.45.11

package/dist/review-agent-hLbRRxZF.js

@@ -0,0 +1,3 @@
+import { a as killAllReviewSessions, c as spawnReviewRoleForIssue, n as init_review_agent, o as killAllReviewerSessions, u as handleReviewDiscoveryReady } from "./review-agent-PhqOhpx3.js";
+init_review_agent();
+export { handleReviewDiscoveryReady, killAllReviewSessions, killAllReviewerSessions, spawnReviewRoleForIssue };

package/dist/{review-status-iJwfEoNX.js → review-status-B_XXomV0.js}

@@ -1,7 +1,7 @@
 import { t as __esmMin } from "./chunk-ruWRV7i3.js";
 import { A as resolveProjectFromIssueSync, f as getProjectSync, v as init_projects } from "./projects-D2nMJ9C4.js";
 import { l as init_record, m as readIssueRecordSync } from "./record-osVNNpoC.js";
-import { c as getReviewStatusFromDbSync, d as markWorkspaceStuck$1, f as upsertReviewStatusSync, l as getReviewStatusesFromDb, m as normalizeReviewStatusSync, n as init_records, o as deleteReviewStatus, p as init_review_status_normalize, r as updateIssueRecordForIssue, s as getAllReviewStatusesFromDb, u as init_review_status_sync } from "./records-BIkN1LQ4.js";
+import { c as getReviewStatusFromDbSync, d as markWorkspaceStuck$1, f as upsertReviewStatusSync, l as getReviewStatusesFromDb, m as normalizeReviewStatusSync, n as init_records, o as deleteReviewStatus, p as init_review_status_normalize, r as updateIssueRecordForIssue, s as getAllReviewStatusesFromDb, u as init_review_status_sync } from "./records-CTmvuRzz.js";
 import { n as notifyPipelineSync, t as init_pipeline_notifier } from "./pipeline-notifier-vODgXteQ.js";
 import { i as init_activity_logger, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-DR4VJx-J.js";
 import { Data, Effect } from "effect";
@@ -632,7 +632,7 @@ function resetPipelineVerdictsForWorkStartSync(issueId) {
 */
 async function deliverReviewVerdictFeedbackHostSide(issueId, status) {
 	try {
-		const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-BGPw3z1X.js");
+		const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-CXHkoiKZ.js");
 		if ((await Effect.runPromise(deliverReviewVerdictFeedback({
 			issueId,
 			verdict: status.reviewStatus === "failed" ? "failed" : "blocked",
@@ -681,7 +681,7 @@ async function dispatchReviewHostSide(issueId, prUrl) {
 			});
 			branch = stdout.trim() || branch;
 		} catch {}
-		const { spawnReviewRoleForIssue } = await import("./review-agent-DjVadURa.js");
+		const { spawnReviewRoleForIssue } = await import("./review-agent-hLbRRxZF.js");
 		if ((await Effect.runPromise(spawnReviewRoleForIssue({
 			issueId,
 			workspace,
@@ -741,10 +741,10 @@ async function deliverTestFailureToWorkAgentHostSide(issueId, status) {
 			if (r.success) feedbackPath = r.filePath;
 		} catch {}
 		const message = `SPECIALIST FEEDBACK: test-agent reported FAILED for ${issueId}.\n\n${feedbackPath ? `MUST READ: ${feedbackPath}\n\n` : ""}${notes ? `${notes.slice(0, 400)}\n\n` : ""}Fix the failing tests, commit and push, then re-run pan done ${issueId}. Do NOT stop at the prompt.`;
-		const { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } = await import("./feedback-target-DutF088V.js");
+		const { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } = await import("./feedback-target-DM1WzOKy.js");
 		const target = await resolveIssueFeedbackTarget(issueId);
 		if ("agentId" in target) {
-			const { messageAgent } = await import("./agents-pp8FO7Uj.js");
+			const { messageAgent } = await import("./agents-By3u_fQ8.js");
 			await messageAgent(target.agentId, message);
 			console.log(`[review-status] delivered test failure to ${target.agentId} for ${issueId} (host-side)`);
 		} else await surfaceIssueFeedbackNeedsYou(issueId, target.reason, {
@@ -894,4 +894,4 @@ var init_review_status = __esmMin((() => {
 //#endregion
 export { readReviewStatusMap as _, init_review_status as a, markWorkspaceStuck as c, reviewGatesPassedSync as d, setDeaconIgnored as f, init_review_status_source as g, verificationSatisfied as h, getReviewStatusSync as i, mergeGateEligibility as l, setReviewStatusSync as m, clearReviewStatus as n, loadReviewStatuses as o, setReviewStatus as p, getReviewStatus as r, loadReviewStatusesForIssues as s, ReviewStatusError as t, resetPipelineVerdictsForWorkStartSync as u };
 
-//# sourceMappingURL=review-status-iJwfEoNX.js.map
+//# sourceMappingURL=review-status-B_XXomV0.js.map

package/dist/{review-status-iJwfEoNX.js.map → review-status-B_XXomV0.js.map}

@@ -1 +1 @@
-{"version":3,"file":"review-status-iJwfEoNX.js","names":["join","dirname"],"sources":["../src/lib/cloister/review-status-source.ts","../src/lib/overdeck/review-status-record-sync.ts","../src/lib/review-dispatch-decision.ts","../src/lib/review-status.ts"],"sourcesContent":["/**\n * PAN-2579: synchronous access to the review-status map for warm-idle advancing\n * classification in concurrency.ts, WITHOUT importing review-status-sync.ts —\n * that module transitively reaches agents/spawn.ts -> concurrency.ts\n * (review-status-sync -> review-status-normalize -> review-status -> agents),\n * so a direct concurrency.ts import closes a real cycle (caught by\n * scripts/lint-circular-deps.sh). Same shape as memory-verdict-cache.ts: this\n * module has no imports of its own, so it cannot be part of any cycle.\n *\n * review-status.ts registers the reader at module load. Before registration\n * (or if the read throws) callers get null and treat NOTHING as warm-idle —\n * the ceiling stays conservative.\n */\n\n/** Minimal status shape needed for warm-idle classification (mirrors ReapableStatus). */\nexport interface WarmIdleStatusShape {\n  reviewStatus?: string;\n  testStatus?: string;\n  readyForMerge?: boolean;\n  mergeStatus?: string;\n}\n\ntype StatusMapReader = () => Record<string, WarmIdleStatusShape>;\n\nlet reader: StatusMapReader | null = null;\n\nexport function registerReviewStatusMapReader(fn: StatusMapReader): void {\n  reader = fn;\n}\n\nexport function readReviewStatusMap(): Record<string, WarmIdleStatusShape> | null {\n  if (!reader) return null;\n  try {\n    return reader();\n  } catch {\n    return null;\n  }\n}\n","import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport type { ReviewStatus } from '../review-status.js';\nimport { updateIssueRecordForIssue, type PanIssuePipelineRecord } from '../pan-dir/records.js';\nimport { readIssueRecordSync } from '../pan-dir/record.js';\nimport { resolveProjectFromIssueSync, getProjectSync } from '../projects.js';\n\nexport function updateIssueRecordForReviewStatusSync(issueId: string, status: ReviewStatus): void {\n  // PAN-2583: the state-dir journal is the durable home, but a sandboxed reviewer\n  // (codex workspace-write) cannot write ${OVERDECK_HOME}/state — and swallowing that\n  // failure here is how blocked review verdicts silently vanished for hours. When the\n  // journal write does not land, drop the durable verdict into the workspace runtime\n  // dir (the one place a sandboxed agent can always write); readJournalStatusSync\n  // overlays it on the next host-side read.\n  void Promise.resolve(updateIssueRecordForIssue(issueId, status))\n    .then((landed) => {\n      // Only an explicit `false` means the durable write failed — undefined\n      // (e.g. a test double) is \"unknown\", not \"failed\".\n      if (landed === false) writeWorkspaceVerdictFallbackSync(issueId, status);\n    })\n    .catch(() => writeWorkspaceVerdictFallbackSync(issueId, status));\n}\n\n/** Resolve and read the per-issue journal record's pipeline block, or null. Best-effort. */\nfunction readPipelineSync(issueId: string): PanIssuePipelineRecord | null {\n  try {\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return null;\n    const project = getProjectSync(resolved.projectKey);\n    if (!project) return null;\n    const record = readIssueRecordSync(project, issueId);\n    return record?.pipeline ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * PAN-1988: feedback TEXT (review / test / merge / inspect / verification notes) is durable\n * JOURNAL state, not DB-cache state. The SQLite row holds only the queryable status flags;\n * the human-readable notes live in the per-issue git record (`<workspace>/.pan/records/<issue>.json`,\n * PAN-1908). This overlays those notes onto a DB-sourced status so every reader (deacon\n * CI-failure detection, dashboard panels) stays transparent while the DB stops storing them.\n */\nexport function enrichReviewNotesFromRecordSync(issueId: string, status: ReviewStatus): ReviewStatus {\n  const pipeline = readPipelineSync(issueId);\n  if (!pipeline) return status;\n  return {\n    ...status,\n    reviewNotes: pipeline.reviewNotes ?? status.reviewNotes,\n    testNotes: pipeline.testNotes ?? status.testNotes,\n    mergeNotes: pipeline.mergeNotes ?? status.mergeNotes,\n    inspectNotes: pipeline.inspectNotes ?? status.inspectNotes,\n    verificationNotes: pipeline.verificationNotes ?? status.verificationNotes,\n    scopeDrift: pipeline.scopeDrift ?? status.scopeDrift,\n    // PAN-1988 auto-heal: the durable review-request intent is journal-only — overlay it on every\n    // read so the merge base preserves it through partial updates and the dispatch reconcile sees it.\n    reviewRequestedAt: pipeline.reviewRequestedAt ?? status.reviewRequestedAt,\n  };\n}\n\ntype DurableStatusFields = Partial<ReviewStatus> & { closedOut?: boolean; closedOutAt?: string };\n\n/**\n * The durable field subset shared by the journal record's pipeline block and the\n * workspace verdict fallback (PAN-2583). Derived/live columns (readyForMerge,\n * blockerReasons) are intentionally omitted — the reader recomputes them.\n */\nfunction durableSubset(p: PanIssuePipelineRecord): DurableStatusFields {\n  return {\n    reviewStatus: p.reviewStatus as ReviewStatus['reviewStatus'],\n    testStatus: p.testStatus as ReviewStatus['testStatus'],\n    mergeStatus: (p.mergeStatus as ReviewStatus['mergeStatus']) ?? undefined,\n    inspectStatus: (p.inspectStatus as ReviewStatus['inspectStatus']) ?? undefined,\n    verificationStatus: (p.verificationStatus as ReviewStatus['verificationStatus']) ?? undefined,\n    reviewNotes: p.reviewNotes,\n    testNotes: p.testNotes,\n    mergeNotes: p.mergeNotes,\n    inspectNotes: p.inspectNotes,\n    verificationNotes: p.verificationNotes,\n    scopeDrift: p.scopeDrift,\n    prUrl: p.prUrl,\n    prNumber: p.prNumber,\n    prHeadSha: p.prHeadSha,\n    reviewedAtCommit: p.reviewedAtCommit,\n    lastVerifiedCommit: p.lastVerifiedCommit,\n    reviewRequestedAt: p.reviewRequestedAt,\n    reviewerVerdicts: p.reviewerVerdicts as ReviewStatus['reviewerVerdicts'],\n    autoMerge: p.autoMerge,\n    deaconIgnored: p.deaconIgnored,\n    deaconIgnoredAt: p.deaconIgnoredAt,\n    deaconIgnoredReason: p.deaconIgnoredReason,\n    closedOut: p.closedOut,\n    closedOutAt: p.closedOutAt,\n  };\n}\n\n/**\n * PAN-2583: sandbox-writable emergency drop for a verdict whose state-dir journal\n * write failed. Lives in the workspace runtime dir (gitignored), swept by\n * readJournalStatusSync on the next host-side read.\n */\ninterface WorkspaceVerdictFallback {\n  issueId: string;\n  updatedAt: string;\n  pipeline: DurableStatusFields;\n}\n\nexport function workspaceVerdictFallbackPath(issueId: string): string | null {\n  try {\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return null;\n    return join(\n      resolved.projectPath,\n      'workspaces',\n      `feature-${issueId.toLowerCase()}`,\n      '.overdeck',\n      'pipeline-verdict.json',\n    );\n  } catch {\n    return null;\n  }\n}\n\nfunction writeWorkspaceVerdictFallbackSync(issueId: string, status: ReviewStatus): void {\n  try {\n    const path = workspaceVerdictFallbackPath(issueId);\n    if (!path) {\n      console.error(\n        `[review-status] PAN-2583: journal write failed for ${issueId} and no workspace could be resolved — the verdict is NOT durable`,\n      );\n      return;\n    }\n    mkdirSync(dirname(path), { recursive: true });\n    const payload: WorkspaceVerdictFallback = {\n      issueId: issueId.toUpperCase(),\n      updatedAt: status.updatedAt ?? new Date().toISOString(),\n      pipeline: durableSubset(status as unknown as PanIssuePipelineRecord),\n    };\n    writeFileSync(path, JSON.stringify(payload, null, 2));\n    console.warn(\n      `[review-status] journal write failed for ${issueId} — durable verdict written to workspace fallback ${path}; the host sweeps it on the next status read (PAN-2583)`,\n    );\n  } catch (err) {\n    console.error(\n      `[review-status] PAN-2583: could not persist verdict for ${issueId} anywhere durable: ${(err as Error).message}`,\n    );\n  }\n}\n\nfunction readWorkspaceVerdictFallbackSync(issueId: string): WorkspaceVerdictFallback | null {\n  try {\n    const path = workspaceVerdictFallbackPath(issueId);\n    if (!path || !existsSync(path)) return null;\n    const parsed = JSON.parse(readFileSync(path, 'utf-8')) as WorkspaceVerdictFallback;\n    if (!parsed?.updatedAt || !parsed.pipeline) return null;\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * PAN-1988: read the journal record's durable verdict for an issue — the SOURCE OF TRUTH.\n * Returns the record `updatedAt` (used to decide whether the journal is newer than the DB\n * cache) plus the durable status fields (flags + feedback notes). Derived/live columns\n * (readyForMerge, blockerReasons) are intentionally omitted — the reader recomputes them.\n *\n * This is what makes verdict writes host-owned: a sandboxed agent can always write the journal\n * (workspace-local) even when it cannot write `~/.overdeck/overdeck.db`. The host reconciles\n * the cache from this on read, so no agent has to escalate out of its sandbox to record a verdict.\n *\n * PAN-2583: since the records migration (PAN-2541) the journal itself lives in\n * ${OVERDECK_HOME}/state, which a sandboxed reviewer cannot write either. When such a\n * writer dropped its verdict into the workspace fallback instead, overlay it here —\n * a strictly newer fallback wins over the record, and the host's own next journal\n * write folds it back into the canonical record.\n */\nexport function readJournalStatusSync(\n  issueId: string,\n): { updatedAt: string; durable: DurableStatusFields } | null {\n  const p = readPipelineSync(issueId);\n  const fallback = readWorkspaceVerdictFallbackSync(issueId);\n  const fallbackNewer = !!fallback && (!p || (p.updatedAt ?? '') < fallback.updatedAt);\n  if (fallback && fallbackNewer) {\n    const base = p ? durableSubset(p) : {};\n    const overlay = Object.fromEntries(\n      Object.entries(fallback.pipeline).filter(([, value]) => value !== undefined),\n    ) as DurableStatusFields;\n    return { updatedAt: fallback.updatedAt, durable: { ...base, ...overlay } };\n  }\n  if (!p) return null;\n  return { updatedAt: p.updatedAt, durable: durableSubset(p) };\n}\n","/**\n * PAN-1988 auto-heal — decide whether a review needs to be (re-)dispatched from the durable\n * journal intent, as a PURE function so it is locked by tests.\n *\n * The work agent's `pan done` writes a durable `reviewRequestedAt` into the journal/record (always\n * writable, even sandboxed) BEFORE it tries to reach the dashboard. If that reactive trigger is\n * dropped — the dashboard was mid-reload, the network blipped, the deacon is frozen — the intent\n * survives in the journal. The host reconciles on read: when a request is newer than the last\n * dispatch and nothing is currently reviewing, it dispatches review. This heals with NO deacon and\n * NO live dashboard event, on the next status read.\n *\n * Returns true when a review dispatch is owed:\n *  - a request exists (`reviewRequestedAt` set), AND\n *  - it is newer than the last spawn (or there was never a spawn) — i.e. a genuinely un-serviced\n *    request, not the request that produced the current review, AND\n *  - a review is not already in progress (`reviewing`), AND\n *  - the issue is not already merged.\n */\nexport function needsReviewDispatch(params: {\n  reviewRequestedAt?: string;\n  reviewSpawnedAt?: string;\n  reviewStatus?: string;\n  mergeStatus?: string;\n}): boolean {\n  if (!params.reviewRequestedAt) return false;\n  if (params.reviewStatus === 'reviewing') return false;\n  if (params.mergeStatus === 'merged') return false;\n  return !params.reviewSpawnedAt || params.reviewRequestedAt > params.reviewSpawnedAt;\n}\n","import { join } from 'path';\nimport { homedir } from 'os';\nimport { Data, Effect } from 'effect';\nimport { notifyPipelineSync } from './pipeline-notifier.js';\nimport { emitActivityEntrySync, emitActivityTtsSync } from './activity-logger.js';\nimport {\n  upsertReviewStatusSync as dbUpsert,\n  deleteReviewStatus as dbDelete,\n  getReviewStatusFromDbSync,\n  getAllReviewStatusesFromDb,\n  getReviewStatusesFromDb,\n  markWorkspaceStuck as dbMarkStuck,\n  clearWorkspaceStuck as dbClearStuck,\n} from './overdeck/review-status-sync.js';\nimport { registerReviewStatusMapReader } from './cloister/review-status-source.js';\nimport { normalizeReviewStatusSync } from './review-status-normalize.js';\nimport { updateIssueRecordForReviewStatusSync, enrichReviewNotesFromRecordSync, readJournalStatusSync } from './overdeck/review-status-record-sync.js';\nimport { needsReviewDispatch } from './review-dispatch-decision.js';\nimport type { ScopeDriftRecord } from './vbrief/continue-state.js';\n\nfunction emitReactiveLifecycleEvent(type: 'review.approved' | 'test.passed', issueId: string): void {\n  try {\n    notifyPipelineSync({ type, issueId });\n  } catch (error) {\n    console.warn(`[review-status] Failed to emit ${type} for ${issueId}:`, error);\n  }\n}\n\nexport interface StatusHistoryEntry {\n  type: 'review' | 'test' | 'merge' | 'inspect' | 'uat';\n  status: string;\n  timestamp: string;\n  notes?: string;\n}\n\nexport interface BlockerReason {\n  type: 'failing_checks' | 'merge_conflict' | 'unresolved_conversations' | 'changes_requested' | 'draft_pr' | 'not_mergeable';\n  summary: string;\n  details?: string;\n  detectedAt: string;\n}\n\nexport interface ReviewStatus {\n  issueId: string;\n  reviewStatus: 'pending' | 'reviewing' | 'passed' | 'failed' | 'blocked' | 'skipped';\n  testStatus: 'pending' | 'testing' | 'passed' | 'failed' | 'skipped' | 'dispatch_failed';\n  mergeStatus?: 'pending' | 'queued' | 'merging' | 'verifying' | 'merged' | 'failed';\n  inspectStatus?: 'pending' | 'inspecting' | 'passed' | 'failed' | 'error';\n  inspectNotes?: string;\n  inspectStartedAt?: string;\n  inspectBeadId?: string;\n  uatStatus?: 'pending' | 'testing' | 'passed' | 'failed';\n  uatNotes?: string;\n  verificationStatus?: 'pending' | 'running' | 'passed' | 'failed' | 'skipped';\n  verificationNotes?: string;\n  verificationCycleCount?: number;\n  verificationMaxCycles?: number;\n  reviewNotes?: string;\n  testNotes?: string;\n  mergeNotes?: string;\n  updatedAt: string;\n  readyForMerge: boolean;\n  /**\n   * PAN-1691: per-issue merge-train routing key.\n   * `undefined` = follow the project default; `true` = auto-merge (fast lane,\n   * rides the train and ships when green); `false` = hold for UAT (manual lane,\n   * waits for human batch review). The merge-train engine reads this to decide\n   * whether a ready issue auto-advances or is held for the UAT candidate.\n   */\n  autoMerge?: boolean;\n  autoRequeueCount?: number;\n  mergeRetryCount?: number;\n  prUrl?: string;\n  /** PAN-905: HEAD commit SHA of the tracked PR for webhook identity validation */\n  prHeadSha?: string;\n  /** PAN-905: GitHub PR number of the tracked PR for webhook identity validation */\n  prNumber?: number;\n  history?: StatusHistoryEntry[];\n  /** PAN-905: GitHub-native merge blocker reasons */\n  blockerReasons?: BlockerReason[];\n  /** HEAD commit SHA at the time review passed — used to detect new commits after review */\n  reviewedAtCommit?: string;\n  /** HEAD commit SHA at the time the pre-review verification gate passed — used to skip redundant test-agent */\n  lastVerifiedCommit?: string;\n  /** Current merge pipeline step for granular merge progress tracking */\n  mergeStep?: string;\n  /** PAN-653: workspace is stuck (e.g. main diverged mid-approve) — Deacon skips it */\n  stuck?: boolean;\n  /** PAN-653: reason workspace is stuck (e.g. 'main_diverged') */\n  stuckReason?: string;\n  /** PAN-653: ISO timestamp when workspace was marked stuck */\n  stuckAt?: string;\n  /** PAN-653: JSON details about the stuck event (e.g. {localSha, remoteSha}) */\n  stuckDetails?: string;\n  /** PAN-699: timestamp when review agents were dispatched (deacon timeout detection) */\n  reviewSpawnedAt?: string;\n  /**\n   * PAN-1988 auto-heal: durable JOURNAL intent set by `pan done` BEFORE it reaches the dashboard.\n   * \"The work agent finished and wants review.\" When this is newer than {@link reviewSpawnedAt}\n   * and nothing is reviewing, the host reconciles on read and dispatches review — surviving a\n   * dashboard reload, a dropped event, or a frozen deacon. Journal-only (not a DB column).\n   */\n  reviewRequestedAt?: string;\n  /** PAN-1765: timestamp when a conflict-resolution work agent was dispatched. */\n  conflictResolutionDispatchedAt?: string;\n  /** PAN-699: number of test-agent dispatch retries (circuit breaker) */\n  testRetryCount?: number;\n  /** PAN-794: number of consecutive parallel-review re-dispatch attempts within the current cycle */\n  reviewRetryCount?: number;\n  /** PAN-794: ISO timestamp when deacon began the current recovery cycle — acts as the history cutoff for the breaker */\n  recoveryStartedAt?: string;\n  /** Human-requested ignore flag: when true, Deacon patrol skips this issue entirely (distinct from `stuck`, which is a system-set failure marker). */\n  deaconIgnored?: boolean;\n  /** ISO timestamp when the ignore flag was set. */\n  deaconIgnoredAt?: string;\n  /** Optional free-form reason shown alongside the ignore toggle. */\n  deaconIgnoredReason?: string;\n  /** PAN-1762: advisory files_scope drift recorded at pan done and surfaced to review. */\n  scopeDrift?: ScopeDriftRecord;\n  /**\n   * PAN-1862 (FR-6): per-convoy-reviewer verdicts from the latest full-review cycle,\n   * keyed by sub-role (security/correctness/performance/requirements). Journal-durable\n   * (not a DB column — overlaid on read like reviewRequestedAt). `atCommit` anchors\n   * drift invalidation for selective re-review (reviewersToRerun).\n   */\n  reviewerVerdicts?: Partial<Record<string, { status: 'passed' | 'blocked'; atCommit?: string; findingsPath?: string }>>;\n  // PAN-1531: reviewTempStashRef / reviewTempStashMessage / reviewTempStashSequence\n  // removed. The review pipeline no longer stashes uncommitted work — the\n  // dirty-worktree gate refuses pan done / pan review request before review\n  // is dispatched.\n}\n\nexport function verificationSatisfied(status: Pick<ReviewStatus, 'verificationStatus'>): boolean {\n  // Only block readyForMerge if verification explicitly FAILED.\n  // 'pending' means \"scheduled but not yet run this cycle\" — not a failure signal.\n  // request-review resets verificationStatus to 'pending' as part of its cycle reset,\n  // but subsequent review+test passing should still yield readyForMerge=true.\n  // The post-rebase gate in triggerMerge() is the authoritative quality gate (PAN-XXX).\n  return status.verificationStatus !== 'failed';\n}\n\n/**\n * PAN-1988: the merge-gate predicate (review passed, test passed/skipped, verification not\n * failed, UAT ok, merge not started). Extracted so both setReviewStatusSync and the\n * journal→DB reconcile in getReviewStatusSync derive readyForMerge identically.\n */\nexport function reviewGatesPassedSync(\n  s: Pick<ReviewStatus, 'reviewStatus' | 'testStatus' | 'verificationStatus' | 'uatStatus' | 'mergeStatus'>,\n): boolean {\n  return (\n    (s.reviewStatus === 'passed' || s.reviewStatus === 'skipped') &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    verificationSatisfied(s) &&\n    (s.uatStatus === undefined || s.uatStatus === 'passed') &&\n    (s.mergeStatus === 'pending' ||\n      s.mergeStatus === 'queued' ||\n      s.mergeStatus === undefined ||\n      s.mergeStatus === null)\n  );\n}\n\nexport interface MergeGateEligibility {\n  eligible: boolean;\n  reason?: string;\n}\n\n/**\n * Authoritative \"allowed to merge\" predicate (PAN-1759). The flywheel\n * orchestrator's pipeline verb says it INTENDS to merge an issue; this record\n * says the pipeline ALLOWS it. Both must hold before an issue enters the merge\n * queue or a UAT batch — RUN-20 tagged a mid-review issue with a merge verb\n * and it rode into a promotable batch. Same criteria as the\n * fixStuckReadyForMerge repair sweep: review passed, test passed/skipped,\n * verification not failed, not already merged.\n */\nexport function mergeGateEligibility(\n  status: Pick<ReviewStatus, 'reviewStatus' | 'testStatus' | 'verificationStatus' | 'mergeStatus'> | null,\n): MergeGateEligibility {\n  if (!status) return { eligible: false, reason: 'no review record' };\n  if (status.reviewStatus !== 'passed' && status.reviewStatus !== 'skipped') {\n    return { eligible: false, reason: `review is ${status.reviewStatus}` };\n  }\n  if (status.testStatus !== 'passed' && status.testStatus !== 'skipped') {\n    return { eligible: false, reason: `test is ${status.testStatus}` };\n  }\n  if (!verificationSatisfied(status)) return { eligible: false, reason: 'verification failed' };\n  if (status.mergeStatus === 'merged') return { eligible: false, reason: 'already merged' };\n  return { eligible: true };\n}\n// PAN-2579: register the cycle-free status-map reader used by concurrency.ts for\n// warm-idle advancing classification (see cloister/review-status-source.ts).\nregisterReviewStatusMapReader(() => getAllReviewStatusesFromDb());\n\nconst DEFAULT_STATUS_FILE = join(homedir(), '.overdeck', 'review-status.json');\n\nexport function loadReviewStatuses(filePath = DEFAULT_STATUS_FILE): Record<string, ReviewStatus> {\n  // SQLite is the authoritative store for the default (server) path.\n  // Non-default JSON paths have been moved to review-status-json.ts so that\n  // dashboard-reachable code never imports sync FS operations.\n  if (filePath !== DEFAULT_STATUS_FILE) {\n    throw new Error(\n      `Non-default review-status paths are not supported in review-status.ts. ` +\n      `Import from review-status-json.ts for JSON file operations.`\n    );\n  }\n  return getAllReviewStatusesFromDb();\n}\n\nexport function loadReviewStatusesForIssues(issueIds: string[]): Record<string, ReviewStatus> {\n  return getReviewStatusesFromDb(issueIds);\n}\n\nexport function loadReadyForMergeFlags(issueIds: string[]): Map<string, boolean> {\n  const normalizedIds = [...new Set(issueIds.map((id) => id.toUpperCase()).filter(Boolean))];\n  const dbStatuses = loadReviewStatusesForIssues(normalizedIds);\n  const flags = new Map<string, boolean>();\n\n  for (const issueId of normalizedIds) {\n    const dbStatus = dbStatuses[issueId] ?? null;\n    const journal = readJournalStatusSync(issueId);\n    let status = dbStatus;\n\n    if (journal) {\n      if ((journal.durable as { closedOut?: boolean }).closedOut === true) {\n        flags.set(issueId, false);\n        continue;\n      }\n\n      if (!dbStatus || (dbStatus.updatedAt ?? '') < journal.updatedAt) {\n        const merged: ReviewStatus = {\n          ...(dbStatus ?? {\n            issueId,\n            reviewStatus: 'pending' as const,\n            testStatus: 'pending' as const,\n            updatedAt: journal.updatedAt,\n            readyForMerge: false,\n          }),\n        };\n        for (const [key, value] of Object.entries(journal.durable)) {\n          if (value !== undefined) (merged as unknown as Record<string, unknown>)[key] = value;\n        }\n        merged.issueId = issueId;\n        merged.updatedAt = journal.updatedAt;\n        const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n        merged.readyForMerge = hasBlockers ? false : reviewGatesPassedSync(merged);\n        status = normalizeReviewStatusSync(merged);\n      }\n    }\n\n    flags.set(issueId, status?.readyForMerge ?? false);\n  }\n\n  return flags;\n}\n\nexport function saveReviewStatuses(statuses: Record<string, ReviewStatus>, filePath = DEFAULT_STATUS_FILE): void {\n  // SQLite is the authoritative store for the default (server) path.\n  // Mirrors the old JSON overwrite semantics: upsert every entry in the map and\n  // delete any SQLite rows whose keys are absent from the map (replace-all).\n  if (filePath !== DEFAULT_STATUS_FILE) {\n    throw new Error(\n      `Non-default review-status paths are not supported in review-status.ts. ` +\n      `Import from review-status-json.ts for JSON file operations.`\n    );\n  }\n  const incoming = new Set(Object.keys(statuses));\n  const existing = getAllReviewStatusesFromDb();\n  for (const id of Object.keys(existing)) {\n    if (!incoming.has(id)) {\n      dbDelete(id);\n    }\n  }\n  for (const status of Object.values(statuses)) {\n    dbUpsert(status);\n  }\n}\n\nexport function setReviewStatusSync(\n  issueId: string,\n  update: Partial<ReviewStatus>,\n  existing?: ReviewStatus,\n): ReviewStatus {\n  // Guard: bare numeric IDs (no alphabetic prefix) must never reach the DB.\n  // They would create orphaned rows that pollute pending lists and metrics.\n  if (/^\\d+$/.test(issueId)) {\n    console.warn(\n      `[review-status] Rejecting setReviewStatus for bare numeric ID \"${issueId}\" — ` +\n      `issue IDs must include a project prefix (e.g. PAN-${issueId}).`\n    );\n    return {\n      issueId,\n      reviewStatus: 'pending' as const,\n      testStatus: 'pending' as const,\n      updatedAt: new Date().toISOString(),\n      readyForMerge: false,\n    };\n  }\n\n  issueId = issueId.toUpperCase();\n\n  // Read only the single row we're updating (avoids TOCTOU: bulk read-modify-write\n  // races when two concurrent calls for different issue IDs run concurrently).\n  // If `existing` is provided (e.g. from mutateBlockers), skip the read to\n  // avoid double-read on the webhook ingestion path (PAN-905).\n  // PAN-1988: the merge base goes through getReviewStatusSync (journal-reconciled +\n  // notes-enriched), NOT the raw DB read. Otherwise a partial update (e.g. a testStatus\n  // change carrying no review notes) would merge against a DB row whose notes/flags lag\n  // the journal and silently erase the journal's feedback. The reconcile inside\n  // getReviewStatusSync never re-enters setReviewStatusSync, so there is no recursion.\n  const status: ReviewStatus = existing ?? getReviewStatusSync(issueId) ?? {\n    issueId,\n    reviewStatus: 'pending' as const,\n    testStatus: 'pending' as const,\n    updatedAt: new Date().toISOString(),\n    readyForMerge: false,\n  };\n\n  // Guard: reject reviewStatus regression from 'passed' to 'reviewing' unless the caller\n  // is explicitly resetting the merge lifecycle (update includes mergeStatus).\n  // This is belt-and-suspenders — endpoint-level guards should catch this first.\n  if (update.reviewStatus === 'reviewing' && status.reviewStatus === 'passed' && update.mergeStatus === undefined) {\n    console.warn(`[review-status] Rejecting reviewStatus regression from 'passed' to 'reviewing' for ${issueId} (mergeStatus not being reset)`);\n    notifyPipelineSync({ type: 'status_changed', issueId, status: status as ReviewStatus });\n    return status as ReviewStatus;\n  }\n\n  // PAN-2578: a bare 'reviewing' write must never clobber a terminal blocked/failed verdict.\n  // A review agent can finish FASTER than the dispatch path that spawned it (PAN-399: the\n  // verification gate completed 2 minutes after the agent recorded BLOCKED, and the dispatch\n  // route's redundant `{ reviewStatus: 'reviewing' }` write destroyed the verdict in both the\n  // DB and the journal). Blocked/failed → reviewing is legal ONLY when the caller explicitly\n  // starts a NEW review cycle by carrying reviewSpawnedAt (spawnReviewRoleForIssue does).\n  if (\n    update.reviewStatus === 'reviewing' &&\n    (status.reviewStatus === 'blocked' || status.reviewStatus === 'failed') &&\n    update.reviewSpawnedAt === undefined\n  ) {\n    console.warn(\n      `[review-status] Rejecting stale 'reviewing' write for ${issueId} — a terminal ` +\n      `'${status.reviewStatus}' verdict is already recorded for this review cycle. Only a ` +\n      `new dispatch (carrying reviewSpawnedAt) may re-enter 'reviewing'.`\n    );\n    notifyPipelineSync({ type: 'status_changed', issueId, status: status as ReviewStatus });\n    return status as ReviewStatus;\n  }\n\n  // PAN-424: Reject testStatus regression from 'passed' to 'dispatch_failed' or 'failed'.\n  // Once tests pass, duplicate dispatch failures must not overwrite the result.\n  if (\n    (update.testStatus === 'dispatch_failed' || update.testStatus === 'failed') &&\n    status.testStatus === 'passed'\n  ) {\n    console.warn(`[review-status] Rejecting testStatus regression from 'passed' to '${update.testStatus}' for ${issueId}`);\n    delete update.testStatus;\n    delete update.testNotes;\n  }\n\n  const merged = { ...status, ...update };\n\n  // PAN-1862 (FR-6): reviewerVerdicts is a per-sub-role MAP — a partial update\n  // (synthesis reporting only the reviewers that re-ran this cycle) must merge\n  // with, not replace, the carried-forward entries from prior cycles.\n  if (update.reviewerVerdicts && status.reviewerVerdicts) {\n    merged.reviewerVerdicts = { ...status.reviewerVerdicts, ...update.reviewerVerdicts };\n  }\n\n  // Track status transitions in history (last 10 entries)\n  const history = [...(status.history || [])];\n  const now = new Date().toISOString();\n  if (update.reviewStatus && update.reviewStatus !== status.reviewStatus) {\n    history.push({ type: 'review', status: update.reviewStatus, timestamp: now, notes: update.reviewNotes });\n  }\n  if (update.testStatus && update.testStatus !== status.testStatus) {\n    history.push({ type: 'test', status: update.testStatus, timestamp: now, notes: update.testNotes });\n  }\n  if (update.uatStatus && update.uatStatus !== status.uatStatus) {\n    history.push({ type: 'uat', status: update.uatStatus, timestamp: now, notes: update.uatNotes });\n  }\n  if (update.mergeStatus && update.mergeStatus !== status.mergeStatus) {\n    history.push({ type: 'merge', status: update.mergeStatus, timestamp: now });\n  }\n  while (history.length > 10) history.shift();\n\n  // PAN-1650: readyForMerge is EVENT-DRIVEN — derived from the gate state on every\n  // write, so it flips the instant review+test+verification pass instead of waiting\n  // for a deacon patrol or a startup `fixStuckReadyForMerge` reconcile (those become\n  // redundant safety nets). This supersedes the PAN-1048 explicit-only model.\n  //\n  // Deriving from gates here does NOT bypass the \"rebased onto main + verified\"\n  // guarantee: `triggerMerge()` performs the authoritative post-rebase quality gate\n  // before it actually merges (see verificationSatisfied's note). The gate predicate\n  // mirrors `fixStuckReadyForMerge` so behaviour is identical — just immediate.\n  //\n  // Explicit caller intent still wins (the merge flow sets readyForMerge=false when a\n  // merge starts; mergeStatus then leaves pending/queued so the derive agrees).\n  // PAN-905: GitHub-native blockers always override readyForMerge to false.\n  const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n  const readyForMerge = hasBlockers\n    ? false\n    : (update.readyForMerge !== undefined\n        ? update.readyForMerge\n        : reviewGatesPassedSync(merged));\n\n  const updated: ReviewStatus = normalizeReviewStatusSync({\n    ...merged,\n    issueId,\n    updatedAt: now,\n    readyForMerge,\n    history,\n  });\n\n  // Report commit statuses to GitHub when readyForMerge transitions to true (PAN-536)\n  if (readyForMerge && !status.readyForMerge && updated.prUrl) {\n    (async () => {\n      try {\n        const { isGitHubAppConfigured, reportCommitStatus } = await import('./github-app.js');\n        if (!isGitHubAppConfigured()) return;\n        const prMatch = updated.prUrl!.match(/github\\.com\\/([^/]+)\\/([^/]+)\\/pull/);\n        if (!prMatch) return;\n        const [, owner, repo] = prMatch;\n        // Get HEAD SHA of the PR branch\n        const { exec } = await import('child_process');\n        const { promisify } = await import('util');\n        const execAsync = promisify(exec);\n        const { stdout } = await execAsync(\n          `gh pr view ${updated.prUrl!.match(/\\/pull\\/(\\d+)/)?.[1]} --json headRefOid --jq .headRefOid`,\n          { encoding: 'utf-8', timeout: 10000 }\n        );\n        const sha = stdout.trim();\n        if (sha) {\n          // overdeck/review is honest here — review just transitioned to readyForMerge.\n          // The overdeck/tests status is posted separately at the actual test-completion\n          // site (verification-runner success, test-agent POST in workspaces routes) so it\n          // accurately reflects which commit was tested.\n          await reportCommitStatus(owner, repo, sha, 'success', 'overdeck/review', 'Review passed');\n          console.log(`[review-status] Reported overdeck/review for ${issueId} (${sha.slice(0, 8)})`);\n        }\n      } catch (err: any) {\n        console.warn(`[review-status] Failed to report commit status: ${err.message}`);\n      }\n    })();\n  }\n\n  // PAN-1908 + PAN-1988: the journal record is the SOURCE OF TRUTH for the verdict; the\n  // SQLite row is a rebuildable cache. Write the journal FIRST — it is workspace-local\n  // (<workspace>/.pan/records/<issue>.json), so it succeeds even for a sandboxed agent\n  // (codex workspace-write) that cannot reach ~/.overdeck. Fire-and-forget; queueAutoCommit\n  // debounces bursts into one commit. Do NOT mirror into canonical vBRIEF specs (PAN-1124).\n  updateIssueRecordForReviewStatusSync(issueId, updated);\n\n  // The DB cache write is best-effort. A sandboxed agent's write throws SQLITE_READONLY, but\n  // the verdict is already durable in the journal above, and the host reconciles the cache on\n  // read (getReviewStatusSync's journal→DB reconcile). Tolerating this is what removes the\n  // sandbox-escalation \"smoke and mirrors\" — the agent never has to break out of its jail to\n  // record a verdict.\n  try {\n    dbUpsert(updated);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`[review-status] DB cache write skipped for ${issueId} (${msg}); journal holds the verdict, host will reconcile on read.`);\n  }\n\n  notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n\n  // Emit activity log entries for meaningful pipeline state transitions.\n  // Each transition produces one entry so the ActivityPanel shows live pipeline progress.\n  if (update.verificationStatus && update.verificationStatus !== status.verificationStatus) {\n    const vMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      running:  { level: 'info',    msg: `${issueId} — verification running`, tts: `${issueId} verification running` },\n      passed:   { level: 'success', msg: `${issueId} — verification passed`, tts: `${issueId} verification passed` },\n      failed:   { level: 'error',   msg: `${issueId} — verification failed`, tts: `${issueId} verification failed` },\n      skipped:  { level: 'info',    msg: `${issueId} — verification skipped`, tts: `${issueId} verification skipped`, ttsPriority: 2 },\n    };\n    const entry = vMap[update.verificationStatus];\n    if (entry) emitActivityEntrySync({ source: 'cloister', level: entry.level, message: entry.msg, details: update.verificationNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'cloister',\n      eventType: `verificationStatus.${update.verificationStatus}`,\n    });\n  }\n  if (update.reviewStatus && update.reviewStatus !== status.reviewStatus) {\n    let reviewMsg = `${issueId} — review started`;\n    if (update.reviewStatus === 'reviewing') {\n      const retryCount = updated.reviewRetryCount ?? 0;\n      reviewMsg = retryCount > 0\n        ? `${issueId} — review re-dispatched (retry ${retryCount})`\n        : `${issueId} — review started`;\n    }\n    const rMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string }> = {\n      reviewing: { level: 'info',    msg: reviewMsg, tts: `${issueId} review started` },\n      passed:    { level: 'success', msg: `${issueId} — review passed`, tts: `${issueId} review passed` },\n      failed:    { level: 'error',   msg: `${issueId} — review failed`, tts: `${issueId} review failed` },\n      blocked:   { level: 'warn',    msg: `${issueId} — review blocked (changes requested)`, tts: `${issueId} review blocked` },\n    };\n    const entry = rMap[update.reviewStatus];\n    if (entry) emitActivityEntrySync({ source: 'review', level: entry.level, message: entry.msg, details: update.reviewNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.level === 'error' ? 0 : 1,\n      issueId,\n      source: 'review-specialist',\n      eventType: `reviewStatus.${update.reviewStatus}`,\n    });\n  }\n  if (update.testStatus && update.testStatus !== status.testStatus) {\n    const tMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      testing:         { level: 'info',    msg: `${issueId} — tests running`, tts: `${issueId} tests running`, ttsPriority: 2 },\n      passed:          { level: 'success', msg: `${issueId} — tests passed`, tts: `${issueId} tests passed` },\n      failed:          { level: 'error',   msg: `${issueId} — tests failed`, tts: `${issueId} tests failed` },\n      skipped:         { level: 'info',    msg: `${issueId} — tests skipped`, tts: `${issueId} tests skipped`, ttsPriority: 2 },\n      dispatch_failed: { level: 'warn',    msg: `${issueId} — test dispatch failed`, tts: `${issueId} test dispatch failed`, ttsPriority: 1 },\n    };\n    const entry = tMap[update.testStatus];\n    if (entry) emitActivityEntrySync({ source: 'test', level: entry.level, message: entry.msg, details: update.testNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'test-specialist',\n      eventType: `testStatus.${update.testStatus}`,\n    });\n  }\n  if (update.mergeStatus && update.mergeStatus !== status.mergeStatus) {\n    const mMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      queued:    { level: 'info',    msg: `${issueId} — queued for merge`, tts: `${issueId} queued for merge`, ttsPriority: 2 },\n      merging:   { level: 'info',    msg: `${issueId} — merge in progress`, tts: `${issueId} merge in progress`, ttsPriority: 2 },\n      verifying: { level: 'info',    msg: `${issueId} — post-merge verification`, tts: `${issueId} post-merge verification running`, ttsPriority: 2 },\n      merged:    { level: 'success', msg: `${issueId} — merged`, tts: `${issueId} merged to main` },\n      failed:    { level: 'error',   msg: `${issueId} — merge failed`, tts: `${issueId} merge failed` },\n    };\n    const entry = mMap[update.mergeStatus];\n    if (entry) emitActivityEntrySync({ source: 'ship', level: entry.level, message: entry.msg, details: update.mergeNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'merge-agent',\n      eventType: `mergeStatus.${update.mergeStatus}`,\n    });\n  }\n  if (update.readyForMerge === true && !status.readyForMerge) {\n    emitActivityEntrySync({ source: 'cloister', level: 'success', message: `${issueId} — ready for merge`, issueId });\n    emitActivityTtsSync({\n      utterance: `${issueId} ready for merge`,\n      priority: 1,\n      issueId,\n      source: 'cloister',\n      eventType: 'readyForMerge',\n    });\n  }\n\n  // Reactive Cloister owns review→test and test→ship scheduling. setReviewStatus\n  // emits the lifecycle event here so API and direct-import callers share one path.\n  // PAN-1862 (FR-14): reviewStatus 'skipped' (review mode none) advances the\n  // lifecycle exactly like an approved review — same event, same downstream.\n  if (\n    (update.reviewStatus === 'passed' || update.reviewStatus === 'skipped') &&\n    status.reviewStatus !== 'passed' && status.reviewStatus !== 'skipped' &&\n    updated.testStatus === 'pending'\n  ) {\n    const canSkipTests =\n      updated.reviewedAtCommit &&\n      updated.lastVerifiedCommit &&\n      updated.reviewedAtCommit === updated.lastVerifiedCommit;\n\n    if (canSkipTests) {\n      console.log(`[review-status] Skipping test role for ${issueId} — no code drift since verification (HEAD=${updated.reviewedAtCommit!.slice(0, 8)})`);\n      emitActivityEntrySync({ source: 'cloister', level: 'info', message: `${issueId} — tests skipped (no code change since verification gate)`, issueId });\n      setReviewStatusSync(issueId, {\n        testStatus: 'passed',\n        testNotes: 'Skipped: no code changed since pre-review verification gate',\n        verificationStatus: 'passed',\n        verificationNotes: 'Pre-review verification already covered the reviewed commit',\n      });\n      void emitReactiveLifecycleEvent('test.passed', issueId);\n    } else {\n      void emitReactiveLifecycleEvent('review.approved', issueId);\n    }\n  }\n\n  if (update.testStatus === 'passed' && status.testStatus !== 'passed') {\n    void emitReactiveLifecycleEvent('test.passed', issueId);\n  }\n\n  // PAN-1988: test FAILED → hand it straight back to the work agent (host-side). The dead-end\n  // requeue that does this is deacon-only, so without this a failure strands until the (possibly\n  // frozen) deacon nudges. Fires once per transition into failed — both the agent's direct POST and\n  // the host's .pan/test/result.json recovery flow through this same transition.\n  if (\n    (update.testStatus === 'failed' || update.testStatus === 'dispatch_failed') &&\n    status.testStatus !== 'failed' && status.testStatus !== 'dispatch_failed'\n  ) {\n    void deliverTestFailureToWorkAgentHostSide(issueId, updated);\n  }\n\n  return updated;\n}\n\nexport function resetPipelineVerdictsForWorkStartSync(issueId: string): ReviewStatus | null {\n  const status = getReviewStatusSync(issueId);\n  if (!status) return null;\n\n  const isPending =\n    status.reviewStatus === 'pending' &&\n    status.testStatus === 'pending' &&\n    (status.mergeStatus === undefined || status.mergeStatus === 'pending') &&\n    (status.verificationStatus === undefined || status.verificationStatus === 'pending') &&\n    !status.readyForMerge &&\n    status.autoRequeueCount === 0 &&\n    status.verificationCycleCount === 0 &&\n    status.reviewRetryCount === 0 &&\n    status.testRetryCount === 0 &&\n    status.mergeRetryCount === 0 &&\n    status.recoveryStartedAt === undefined &&\n    status.reviewedAtCommit === undefined &&\n    status.lastVerifiedCommit === undefined;\n\n  if (isPending) return null;\n\n  return setReviewStatusSync(issueId, {\n    reviewStatus: 'pending',\n    testStatus: 'pending',\n    mergeStatus: 'pending',\n    reviewNotes: undefined,\n    testNotes: undefined,\n    mergeNotes: undefined,\n    readyForMerge: false,\n    autoRequeueCount: 0,\n    verificationStatus: 'pending',\n    verificationNotes: undefined,\n    verificationCycleCount: 0,\n    stuck: false,\n    stuckReason: undefined,\n    stuckAt: undefined,\n    stuckDetails: undefined,\n    reviewRetryCount: 0,\n    testRetryCount: 0,\n    mergeRetryCount: 0,\n    recoveryStartedAt: undefined,\n    reviewedAtCommit: undefined,\n    lastVerifiedCommit: undefined,\n  });\n}\n\n/**\n * PAN-1988 — deliver review feedback to the work agent from the HOST when a blocked/failed\n * verdict is reconciled from the journal. Dynamic import to avoid a static import cycle\n * (review-verdict-feedback → review-status). Fully best-effort: in a sandboxed agent process the\n * delivery fails (host paths blocked) and is swallowed; the host process performs the real\n * notification. Never throws into the read path.\n */\nasync function deliverReviewVerdictFeedbackHostSide(issueId: string, status: ReviewStatus): Promise<void> {\n  try {\n    const { deliverReviewVerdictFeedback } = await import('./cloister/review-verdict-feedback.js');\n    const result = await Effect.runPromise(deliverReviewVerdictFeedback({\n      issueId,\n      verdict: status.reviewStatus === 'failed' ? 'failed' : 'blocked',\n      notes: status.reviewNotes,\n      prUrl: status.prUrl,\n    }));\n    if (result.agentMessageSent) {\n      console.log(`[review-status] delivered review feedback to the work agent for ${issueId} (host-side)`);\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side review feedback delivery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\n// PAN-1988 auto-heal — throttle so the reconcile-on-read does not spam dispatch attempts for a\n// genuinely-gated issue (one whose dispatch keeps deferring on a merge conflict). Date.now() is\n// available in normal lib code (only workflow scripts forbid it).\nconst reviewDispatchAttemptAt = new Map<string, number>();\nconst REVIEW_AUTO_DISPATCH_THROTTLE_MS = 30_000;\n\n/**\n * PAN-1988 auto-heal — the host re-dispatches review from the durable journal intent. When the\n * work agent's `pan done` recorded a `reviewRequestedAt` but the reactive dashboard trigger never\n * landed (dashboard reloading, dropped event, frozen deacon), the next status read notices the\n * un-serviced request and dispatches review here. {@link needsReviewDispatch} gates it,\n * spawnReviewRoleForIssue is idempotent (it skips a live review), and a 30s throttle bounds retries\n * for a gated issue. Fire-and-forget; in a sandboxed reader the dispatch is a best-effort no-op.\n */\nfunction maybeAutoDispatchReviewHostSide(issueId: string, status: ReviewStatus): void {\n  if (!needsReviewDispatch({\n    reviewRequestedAt: status.reviewRequestedAt,\n    reviewSpawnedAt: status.reviewSpawnedAt,\n    reviewStatus: status.reviewStatus,\n    mergeStatus: status.mergeStatus,\n  })) return;\n  const last = reviewDispatchAttemptAt.get(issueId) ?? 0;\n  if (Date.now() - last < REVIEW_AUTO_DISPATCH_THROTTLE_MS) return;\n  reviewDispatchAttemptAt.set(issueId, Date.now());\n  void dispatchReviewHostSide(issueId, status.prUrl);\n}\n\nasync function dispatchReviewHostSide(issueId: string, prUrl?: string): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return;\n    const { existsSync } = await import('fs');\n    const workspace = join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`);\n    if (!existsSync(workspace)) return;\n    let branch = `feature/${issueId.toLowerCase()}`;\n    try {\n      const { promisify } = await import('util');\n      const { exec } = await import('child_process');\n      const execAsync = promisify(exec);\n      const { stdout } = await execAsync('git branch --show-current', { cwd: workspace, encoding: 'utf-8' });\n      branch = stdout.trim() || branch;\n    } catch { /* non-fatal — fall back to the conventional branch name */ }\n    const { spawnReviewRoleForIssue } = await import('./cloister/review-agent.js');\n    const result = await Effect.runPromise(spawnReviewRoleForIssue({ issueId, workspace, branch, ...(prUrl ? { prUrl } : {}) }));\n    if (result.success) {\n      console.log(`[review-status] auto-dispatched review for ${issueId} from durable journal intent (host-side)`);\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side review auto-dispatch for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\n// ── PAN-1988 host-owned TEST-stage recovery ───────────────────────────────────\n// The test stage had NO reactive path. Recovering an unsignaled verdict (the agent — often Haiku —\n// writes .pan/test/result.json then idles without POSTing) AND the test=failed → work-agent requeue\n// both lived ONLY in deacon patrols (checkCompletedButUnsignaledTests + the dead-end requeue). With\n// the deacon frozen, a finished test agent stranded the issue at test=testing forever. The host now\n// (a) recovers the written verdict on read and (b) hands a failure back to the work agent — symmetric\n// with the review stage. Recovery only acts on a WRITTEN artifact; it never guesses pass/fail.\nconst testVerdictRecoveryAt = new Map<string, number>();\nconst TEST_VERDICT_RECOVERY_THROTTLE_MS = 60_000;\n\nfunction maybeRecoverTestVerdictHostSide(issueId: string, status: ReviewStatus): void {\n  if (status.reviewStatus !== 'passed') return; // tests only run after review approves\n  if (status.mergeStatus === 'merged' || status.readyForMerge) return;\n  // Only act while the verdict is UNSIGNALED — once test resolves (passed/failed) the write path\n  // owns the transition (test.passed → ship; test failed → deliverTestFailureToWorkAgentHostSide).\n  if (status.testStatus !== 'testing' && status.testStatus !== 'pending' && status.testStatus !== 'dispatch_failed') return;\n  const last = testVerdictRecoveryAt.get(issueId) ?? 0;\n  if (Date.now() - last < TEST_VERDICT_RECOVERY_THROTTLE_MS) return;\n  testVerdictRecoveryAt.set(issueId, Date.now());\n  void recoverTestVerdictHostSide(issueId);\n}\n\nasync function recoverTestVerdictHostSide(issueId: string): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return;\n    const { existsSync } = await import('fs');\n    const workspace = join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`);\n    if (!existsSync(workspace)) return;\n    const { readTestVerdictArtifact } = await import('./cloister/test-verdict.js');\n    const artifact = readTestVerdictArtifact(workspace);\n    if (!artifact) return; // no WRITTEN verdict — never guess; the agent/deacon owns the write-nudge\n    // Record the recovered verdict. setReviewStatusSync emits test.passed (→ ship) for a pass and\n    // fires the work-agent handoff (below) on a fail, via its test-transition logic.\n    setReviewStatusSync(issueId, {\n      testStatus: artifact.status,\n      testNotes: artifact.notes ?? `Recovered from .pan/test/result.json (${artifact.status}) — the test agent wrote the verdict but never signaled`,\n    });\n    console.log(`[review-status] recovered unsignaled test verdict for ${issueId}: ${artifact.status} (host-side, from .pan/test/result.json)`);\n  } catch (err) {\n    console.warn(`[review-status] host-side test verdict recovery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\nasync function deliverTestFailureToWorkAgentHostSide(issueId: string, status: ReviewStatus): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    const workspace = resolved ? join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`) : undefined;\n    const notes = status.testNotes; let feedbackPath: string | undefined;\n    try {\n      const { writeFeedbackFile } = await import('./cloister/feedback-writer.js');\n      const r = await Effect.runPromise(writeFeedbackFile({\n        issueId, workspacePath: workspace, specialist: 'test-agent', outcome: 'failed', summary: `Tests FAILED for ${issueId}`,\n        markdownBody: `# Test failure\\n\\n${notes ?? 'The test gate reported failures. See .pan/test/result.json and re-run the project test suite.'}\\n\\n## Required\\nFix the failing tests, commit and push, then re-run \\`pan done ${issueId}\\`.`,\n      }));\n      if (r.success) feedbackPath = r.filePath;\n    } catch { /* non-fatal — the message below still carries the summary */ }\n\n    const message = `SPECIALIST FEEDBACK: test-agent reported FAILED for ${issueId}.\\n\\n${feedbackPath ? `MUST READ: ${feedbackPath}\\n\\n` : ''}${notes ? `${notes.slice(0, 400)}\\n\\n` : ''}Fix the failing tests, commit and push, then re-run pan done ${issueId}. Do NOT stop at the prompt.`;\n    const { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } = await import('./cloister/feedback-target.js');\n    const target = await resolveIssueFeedbackTarget(issueId);\n    if ('agentId' in target) {\n      const { messageAgent } = await import('./agents.js');\n      await messageAgent(target.agentId, message);\n      console.log(`[review-status] delivered test failure to ${target.agentId} for ${issueId} (host-side)`);\n    } else {\n      await surfaceIssueFeedbackNeedsYou(issueId, target.reason, { specialist: 'test-agent', feedbackPath });\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side test-failure delivery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\nexport function getReviewStatusSync(issueId: string): ReviewStatus | null {\n  const dbStatus = getReviewStatusFromDbSync(issueId);\n  const journal = readJournalStatusSync(issueId);\n\n  // No journal record → the DB is all we have. (Pre-PAN-1908 issues, or issues whose\n  // workspace/record hasn't been created yet.)\n  if (!journal) return dbStatus ?? null;\n\n  if ((journal.durable as { closedOut?: boolean }).closedOut === true) {\n    // PAN-2054: closed-out journal records are terminal; stale active DB rows are cache residue.\n    try {\n      dbDelete(issueId);\n    } catch {\n      // Read-only DB (a sandboxed reader) — the host clears residue when it reads. Non-fatal.\n    }\n    return null;\n  }\n\n  // PAN-1988 — journal is the source of truth; DB is a rebuildable cache. If the journal is\n  // NEWER than the DB row, an agent recorded its verdict to the journal but the DB write\n  // lagged or was blocked (a sandboxed agent that can't write ~/.overdeck). Reconcile the\n  // cache from the journal. Whatever process reads next performs this; the host (non-sandboxed)\n  // write succeeds, a sandboxed reader's reconcile is a best-effort no-op.\n  const journalNewer = !dbStatus || (dbStatus.updatedAt ?? '') < journal.updatedAt;\n  if (journalNewer) {\n    const merged: ReviewStatus = {\n      ...(dbStatus ?? {\n        issueId,\n        reviewStatus: 'pending' as const,\n        testStatus: 'pending' as const,\n        updatedAt: journal.updatedAt,\n        readyForMerge: false,\n      }),\n    };\n    // Apply ONLY the journal fields that are actually present. The journal carries the durable\n    // verdict; DB-only/ephemeral fields it does not store (stuck/stuckReason, transient counters)\n    // must NOT be clobbered with `undefined`. This keeps every reconcile a strict overlay.\n    for (const [key, value] of Object.entries(journal.durable)) {\n      if (value !== undefined) (merged as unknown as Record<string, unknown>)[key] = value;\n    }\n    merged.issueId = issueId;\n    merged.updatedAt = journal.updatedAt;\n    const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n    merged.readyForMerge = hasBlockers ? false : reviewGatesPassedSync(merged);\n    const reconciled = normalizeReviewStatusSync(merged);\n    try {\n      dbUpsert(reconciled);\n    } catch {\n      // Read-only DB (a sandboxed reader) — the host reconciles when it reads. Non-fatal.\n    }\n\n    // PAN-1988 — host-owned review FEEDBACK delivery. A sandboxed review agent records its\n    // verdict to the journal but cannot notify the work agent (the work agent's tmux/mail and\n    // the network are outside its jail — \"side effects failed due restricted network / readonly\n    // host paths\"). When the HOST reconciles a NEW blocked/failed review verdict, it delivers the\n    // feedback here. Fires exactly once per verdict: the reconcile only runs while the journal is\n    // newer than the DB, and the dbUpsert above makes the DB catch up, so the next read does not\n    // re-fire. In a sandboxed agent process the delivery is a best-effort no-op (host paths\n    // blocked); the host's read performs the real delivery. Fire-and-forget.\n    const wasBlocked = dbStatus?.reviewStatus === 'blocked' || dbStatus?.reviewStatus === 'failed';\n    const nowBlocked = reconciled.reviewStatus === 'blocked' || reconciled.reviewStatus === 'failed';\n    if (nowBlocked && !wasBlocked) {\n      void deliverReviewVerdictFeedbackHostSide(issueId, reconciled);\n    }\n\n    // PAN-1988 — host-owned review→test and test→ship HANDOFF. setReviewStatusSync emits these\n    // lifecycle events on the write path, but a sandboxed agent (codex/pi) records its verdict to\n    // the JOURNAL only and the host picks it up HERE via reconcile — which bypasses\n    // setReviewStatusSync. Without re-emitting, a passed verdict strands at review=passed/test=pending\n    // (and a passed test strands before ship) until the deacon patrol nudges it — and the deacon may\n    // be frozen. Re-emit the same transitions the write path would, so reactive Cloister advances.\n    const wasReviewPassed = dbStatus?.reviewStatus === 'passed';\n    const nowReviewPassed = reconciled.reviewStatus === 'passed';\n    if (nowReviewPassed && !wasReviewPassed && reconciled.testStatus === 'pending') {\n      console.log(`[review-status] reconcile: review.approved for ${issueId} (host-owned handoff — sandboxed agent verdict from journal)`);\n      void emitReactiveLifecycleEvent('review.approved', issueId);\n    }\n    const wasTestPassed = dbStatus?.testStatus === 'passed';\n    const nowTestPassed = reconciled.testStatus === 'passed';\n    if (nowTestPassed && !wasTestPassed) {\n      console.log(`[review-status] reconcile: test.passed for ${issueId} (host-owned handoff — sandboxed agent verdict from journal)`);\n      void emitReactiveLifecycleEvent('test.passed', issueId);\n    }\n\n    maybeAutoDispatchReviewHostSide(issueId, reconciled);\n    maybeRecoverTestVerdictHostSide(issueId, reconciled);\n    return reconciled;\n  }\n\n  // DB is current → overlay the feedback TEXT from the journal (it is no longer stored in the\n  // DB; the row holds only the queryable status flags).\n  const enriched = enrichReviewNotesFromRecordSync(issueId, dbStatus!);\n  maybeAutoDispatchReviewHostSide(issueId, enriched);\n  maybeRecoverTestVerdictHostSide(issueId, enriched);\n  return enriched;\n}\n\n/**\n * On server startup, clear any mergeStatus stuck at 'merging'.\n * Pending merge operations are in-memory only — they don't survive a restart.\n * Any 'merging' status after boot is definitionally stuck (PAN-490).\n */\nexport function clearStuckMergeStatuses(): void {\n  const statuses = loadReviewStatuses();\n  // Don't clear 'queued' — the SQLite merge queue handles that (PAN-632).\n  // Only clear truly stuck transient states.\n  const stuck = Object.values(statuses).filter(s =>\n    s.mergeStatus === 'merging' || s.mergeStatus === 'verifying'\n  );\n  if (stuck.length === 0) return;\n  console.log(`[review-status] Clearing ${stuck.length} stuck merge status(es) on startup (merging/verifying)`);\n  for (const s of stuck) {\n    // Reset to pending so MERGE button reappears — the in-memory queue was lost on restart.\n    // Preserve readyForMerge if review+test both passed — the merge just needs to be retried.\n    const shouldBeReady =\n      s.reviewStatus === 'passed' &&\n      (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n      verificationSatisfied(s) &&\n      (s.uatStatus === undefined || s.uatStatus === 'passed');\n    setReviewStatusSync(s.issueId, {\n      mergeStatus: 'pending',\n      ...(shouldBeReady ? { readyForMerge: true } : {}),\n    });\n  }\n}\n\n/**\n * On server startup, fix any issues where review+test both passed and\n * verificationStatus is not 'failed', but readyForMerge is stuck at false.\n *\n * This happens when:\n * 1. A merge attempt was made (merging → verifying)\n * 2. The server restarted while verifying — clearStuckMergeStatuses reset mergeStatus to 'pending'\n * 3. At restart time, verificationStatus was 'pending' (reset by the request-review cycle)\n * 4. The old verificationSatisfied check blocked readyForMerge because of 'pending' status\n *\n * With verificationSatisfied now only blocking on 'failed', these issues should be\n * re-evaluated and readyForMerge restored so they reappear on the Awaiting Merge page.\n */\nexport function fixStuckReadyForMerge(): void {\n  const statuses = loadReviewStatuses();\n  const stuck = Object.values(statuses).filter(s =>\n    s.readyForMerge === false &&\n    s.reviewStatus === 'passed' &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    verificationSatisfied(s) &&\n    // Only fix 'pending'/'queued' merge states — not 'failed' ones.\n    // 'failed' means the merge actually attempted and broke; those need human review,\n    // not automatic restoration. 'merged' is done. Only pending/queued are stuck-but-valid.\n    (s.mergeStatus === 'pending' || s.mergeStatus === 'queued' || s.mergeStatus === undefined || s.mergeStatus === null) &&\n    (s.uatStatus === undefined || s.uatStatus === 'passed')\n  );\n  if (stuck.length === 0) return;\n  console.log(`[review-status] Restoring readyForMerge for ${stuck.length} issue(s) with passed review+test`);\n  for (const s of stuck) {\n    console.log(`[review-status] Restoring readyForMerge=true for ${s.issueId} (verif=${s.verificationStatus}, merge=${s.mergeStatus})`);\n    setReviewStatusSync(s.issueId, { readyForMerge: true });\n  }\n}\n\n/**\n * PAN-869: On server startup, fix any issues where reviewStatus was incorrectly\n * set to 'failed' due to the old COMMENTED → 'failed' mapping bug.\n *\n * This identifies records where:\n * - reviewStatus = 'failed'\n * - testStatus = 'passed' (CI green, so review wasn't genuinely bad)\n * - mergeStatus is not terminal ('merged', 'failed')\n * - readyForMerge = false\n * - The last review history entry is type='review', status='failed'\n *\n * The old reviewResultToReviewStatus() mapped COMMENTED (regardless of success)\n * to 'failed', so the history stores 'failed' for old COMMENTED reviews.\n * We use testStatus='passed' as the signal that this was a successful review\n * (CI was green), distinguishing it from genuinely failed reviews.\n */\nexport function fixStuckCommentedReviews(): void {\n  const statuses = loadReviewStatuses();\n  const candidates = Object.values(statuses).filter(s =>\n    s.reviewStatus === 'failed' &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    s.mergeStatus !== 'merged' &&\n    s.mergeStatus !== 'failed' &&\n    s.readyForMerge === false &&\n    s.verificationStatus !== 'failed'\n  );\n\n  if (candidates.length === 0) return;\n\n  const toFix: string[] = [];\n  for (const s of candidates) {\n    // Check if the last review history entry is 'failed' (the old COMMENTED mapping\n    // stored 'failed' in history). testStatus='passed' signals CI was green,\n    // so this was a successful review incorrectly stored as 'failed'.\n    const lastReviewEntry = [...(s.history || [])]\n      .reverse()\n      .find(h => h.type === 'review');\n    if (lastReviewEntry?.status === 'failed') {\n      toFix.push(s.issueId);\n    }\n  }\n\n  if (toFix.length === 0) return;\n  console.log(`[review-status] Restoring reviewStatus='passed' for ${toFix.length} issue(s) with COMMENTED reviews (PAN-869 backfill)`);\n  for (const issueId of toFix) {\n    console.log(`[review-status] Restoring reviewStatus='passed' for ${issueId}`);\n    // reviewStatus='passed' will trigger readyForMerge recomputation in setReviewStatus\n    setReviewStatusSync(issueId, { reviewStatus: 'passed' });\n  }\n}\n\nexport function clearReviewStatus(issueId: string): void {\n  try {\n    dbDelete(issueId);\n  } catch (err) {\n    console.error('[review-status] SQLite delete failed:', err);\n  }\n}\n\n// ============== Stuck state helpers (PAN-653) ==============\n\n/**\n * Mark a workspace as stuck with a reason and optional JSON details.\n * Persists across dashboard restarts. Deacon will skip stuck workspaces.\n *\n * @param issueId - Issue ID (e.g. \"PAN-653\")\n * @param reason  - Short reason code (e.g. \"main_diverged\")\n * @param details - Optional structured details (e.g. {localSha, remoteSha})\n */\n// PAN-1988: `stuck` is EPHEMERAL runtime state (set when patrol detects a wedged workspace),\n// NOT a durable verdict — projectPipeline deliberately does not journal it, and it is rebuilt\n// from runtime on a cache rebuild. So markWorkspaceStuck/clearWorkspaceStuck write the DB cache\n// directly and do not go through the journal door. The getReviewStatusSync journal→DB reconcile\n// preserves it (a strict overlay that never clobbers DB-only fields the journal doesn't carry).\nexport function markWorkspaceStuck(\n  issueId: string,\n  reason: string,\n  details?: Record<string, unknown>,\n): void {\n  try {\n    dbMarkStuck(issueId, reason, details);\n    console.log(`[review-status] Marked ${issueId} as stuck: ${reason}`);\n    const updated = getReviewStatusSync(issueId);\n    if (updated) notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n  } catch (err) {\n    console.error(`[review-status] Failed to mark ${issueId} as stuck:`, err);\n  }\n}\n\n/**\n * Clear the stuck flag for a workspace.\n * Called when the human clicks \"Unstick\" in the dashboard.\n * Re-enables Deacon patrol for this workspace.\n */\nexport function clearWorkspaceStuck(issueId: string): void {\n  try {\n    dbClearStuck(issueId);\n    console.log(`[review-status] Cleared stuck state for ${issueId}`);\n    const updated = getReviewStatusSync(issueId);\n    if (updated) notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n  } catch (err) {\n    console.error(`[review-status] Failed to clear stuck state for ${issueId}:`, err);\n  }\n}\n\n/**\n * Set or clear the operator-requested deacon-ignore flag. When set, Deacon\n * patrol skips the issue entirely on every cycle. Distinct from `stuck`, which\n * is a system-set failure marker that also suppresses patrol.\n */\nexport function setDeaconIgnored(\n  issueId: string,\n  ignored: boolean,\n  reason?: string,\n): void {\n  try {\n    // PAN-1988: route through the single write door. deaconIgnored is a DURABLE field that\n    // projectPipeline journals — a DB-only write (the old dbSetDeaconIgnored) lands in the\n    // cache but not the journal, so it vanishes on a cache rebuild. setReviewStatusSync writes\n    // both (and emits the status_changed event), keeping DB and journal in sync.\n    setReviewStatusSync(issueId, {\n      deaconIgnored: ignored,\n      deaconIgnoredAt: ignored ? new Date().toISOString() : undefined,\n      deaconIgnoredReason: ignored ? reason : undefined,\n    });\n    console.log(`[review-status] deaconIgnored=${ignored} for ${issueId}${reason ? ` (${reason})` : ''}`);\n  } catch (err) {\n    console.error(`[review-status] Failed to set deaconIgnored for ${issueId}:`, err);\n  }\n}\n\n/**\n * PAN-1691: set the per-issue auto-merge routing key and broadcast the change.\n * `autoMerge === null` clears it back to the project default. Emits a\n * status_changed pipeline event so open dashboards reflect the toggle live.\n */\nexport function setAutoMerge(issueId: string, autoMerge: boolean | null): void {\n  try {\n    // PAN-1988: route through the single write door. autoMerge is a DURABLE field journaled by\n    // projectPipeline; a DB-only write would be lost on cache rebuild. `null` clears it back to\n    // the project default (stored as undefined). setReviewStatusSync writes DB + journal and\n    // emits the status_changed event.\n    setReviewStatusSync(issueId, { autoMerge: autoMerge === null ? undefined : autoMerge });\n    console.log(`[review-status] autoMerge=${autoMerge === null ? 'default' : autoMerge} for ${issueId}`);\n  } catch (err) {\n    console.error(`[review-status] Failed to set autoMerge for ${issueId}:`, err);\n  }\n}\n\n/** Tagged error for review-status Effect variants. */\nexport class ReviewStatusError extends Data.TaggedError('ReviewStatusError')<{\n  readonly issueId: string;\n  readonly operation: string;\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n\nexport const setReviewStatus = (\n  issueId: string,\n  update: Partial<ReviewStatus>,\n  existing?: ReviewStatus,\n): Effect.Effect<ReviewStatus, ReviewStatusError> =>\n  Effect.tryPromise({\n    try: () => new Promise<ReviewStatus>((resolve, reject) => {\n      setImmediate(() => {\n        try {\n          resolve(setReviewStatusSync(issueId, update, existing));\n        } catch (err) {\n          reject(err);\n        }\n      });\n    }),\n    catch: (cause) =>\n      new ReviewStatusError({\n        issueId,\n        operation: 'setReviewStatus',\n        message: cause instanceof Error ? cause.message : String(cause),\n        cause,\n      }),\n  });\n\nexport const getReviewStatus = (\n  issueId: string,\n): Effect.Effect<ReviewStatus | null, ReviewStatusError> =>\n  Effect.try({\n    try: () => getReviewStatusFromDbSync(issueId),\n    catch: (cause) =>\n      new ReviewStatusError({\n        issueId,\n        operation: 'getReviewStatus',\n        message: cause instanceof Error ? cause.message : String(cause),\n        cause,\n      }),\n  });\n"],"mappings":";;;;;;;;;;;;AA0BA,SAAgB,8BAA8B,IAA2B;AACvE,UAAS;;AAGX,SAAgB,sBAAkE;AAChF,KAAI,CAAC,OAAQ,QAAO;AACpB,KAAI;AACF,SAAO,QAAQ;SACT;AACN,SAAO;;;;;AAXP,UAAiC;;;;ACjBrC,SAAgB,qCAAqC,SAAiB,QAA4B;AAO3F,SAAQ,QAAQ,0BAA0B,SAAS,OAAO,CAAC,CAC7D,MAAM,WAAW;AAGhB,MAAI,WAAW,MAAO,mCAAkC,SAAS,OAAO;GACxE,CACD,YAAY,kCAAkC,SAAS,OAAO,CAAC;;;AAIpE,SAAS,iBAAiB,SAAgD;AACxE,KAAI;EACF,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU,QAAO;EACtB,MAAM,UAAU,eAAe,SAAS,WAAW;AACnD,MAAI,CAAC,QAAS,QAAO;AAErB,SADe,oBAAoB,SAAS,QAC/B,EAAE,YAAY;SACrB;AACN,SAAO;;;;;;;;;;AAWX,SAAgB,gCAAgC,SAAiB,QAAoC;CACnG,MAAM,WAAW,iBAAiB,QAAQ;AAC1C,KAAI,CAAC,SAAU,QAAO;AACtB,QAAO;EACL,GAAG;EACH,aAAa,SAAS,eAAe,OAAO;EAC5C,WAAW,SAAS,aAAa,OAAO;EACxC,YAAY,SAAS,cAAc,OAAO;EAC1C,cAAc,SAAS,gBAAgB,OAAO;EAC9C,mBAAmB,SAAS,qBAAqB,OAAO;EACxD,YAAY,SAAS,cAAc,OAAO;EAG1C,mBAAmB,SAAS,qBAAqB,OAAO;EACzD;;;;;;;AAUH,SAAS,cAAc,GAAgD;AACrE,QAAO;EACL,cAAc,EAAE;EAChB,YAAY,EAAE;EACd,aAAc,EAAE,eAA+C,KAAA;EAC/D,eAAgB,EAAE,iBAAmD,KAAA;EACrE,oBAAqB,EAAE,sBAA6D,KAAA;EACpF,aAAa,EAAE;EACf,WAAW,EAAE;EACb,YAAY,EAAE;EACd,cAAc,EAAE;EAChB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACd,OAAO,EAAE;EACT,UAAU,EAAE;EACZ,WAAW,EAAE;EACb,kBAAkB,EAAE;EACpB,oBAAoB,EAAE;EACtB,mBAAmB,EAAE;EACrB,kBAAkB,EAAE;EACpB,WAAW,EAAE;EACb,eAAe,EAAE;EACjB,iBAAiB,EAAE;EACnB,qBAAqB,EAAE;EACvB,WAAW,EAAE;EACb,aAAa,EAAE;EAChB;;AAcH,SAAgB,6BAA6B,SAAgC;AAC3E,KAAI;EACF,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU,QAAO;AACtB,SAAOA,OACL,SAAS,aACT,cACA,WAAW,QAAQ,aAAa,IAChC,aACA,wBACD;SACK;AACN,SAAO;;;AAIX,SAAS,kCAAkC,SAAiB,QAA4B;AACtF,KAAI;EACF,MAAM,OAAO,6BAA6B,QAAQ;AAClD,MAAI,CAAC,MAAM;AACT,WAAQ,MACN,sDAAsD,QAAQ,kEAC/D;AACD;;AAEF,YAAUC,UAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;EAC7C,MAAM,UAAoC;GACxC,SAAS,QAAQ,aAAa;GAC9B,WAAW,OAAO,8BAAa,IAAI,MAAM,EAAC,aAAa;GACvD,UAAU,cAAc,OAA4C;GACrE;AACD,gBAAc,MAAM,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AACrD,UAAQ,KACN,4CAA4C,QAAQ,mDAAmD,KAAK,yDAC7G;UACM,KAAK;AACZ,UAAQ,MACN,2DAA2D,QAAQ,qBAAsB,IAAc,UACxG;;;AAIL,SAAS,iCAAiC,SAAkD;AAC1F,KAAI;EACF,MAAM,OAAO,6BAA6B,QAAQ;AAClD,MAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,CAAE,QAAO;EACvC,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACtD,MAAI,CAAC,QAAQ,aAAa,CAAC,OAAO,SAAU,QAAO;AACnD,SAAO;SACD;AACN,SAAO;;;;;;;;;;;;;;;;;;;AAoBX,SAAgB,sBACd,SAC4D;CAC5D,MAAM,IAAI,iBAAiB,QAAQ;CACnC,MAAM,WAAW,iCAAiC,QAAQ;CAC1D,MAAM,gBAAgB,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,MAAM,SAAS;AAC1E,KAAI,YAAY,eAAe;EAC7B,MAAM,OAAO,IAAI,cAAc,EAAE,GAAG,EAAE;EACtC,MAAM,UAAU,OAAO,YACrB,OAAO,QAAQ,SAAS,SAAS,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,EAAU,CAC7E;AACD,SAAO;GAAE,WAAW,SAAS;GAAW,SAAS;IAAE,GAAG;IAAM,GAAG;IAAS;GAAE;;AAE5E,KAAI,CAAC,EAAG,QAAO;AACf,QAAO;EAAE,WAAW,EAAE;EAAW,SAAS,cAAc,EAAE;EAAE;;;eA7LiC;cACpC;gBACkB;;;;;;;;;;;;;;;;;;;;;;ACa7E,SAAgB,oBAAoB,QAKxB;AACV,KAAI,CAAC,OAAO,kBAAmB,QAAO;AACtC,KAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,KAAI,OAAO,gBAAgB,SAAU,QAAO;AAC5C,QAAO,CAAC,OAAO,mBAAmB,OAAO,oBAAoB,OAAO;;;;;ACPtE,SAAS,2BAA2B,MAAyC,SAAuB;AAClG,KAAI;AACF,qBAAmB;GAAE;GAAM;GAAS,CAAC;UAC9B,OAAO;AACd,UAAQ,KAAK,kCAAkC,KAAK,OAAO,QAAQ,IAAI,MAAM;;;AA4GjF,SAAgB,sBAAsB,QAA2D;AAM/F,QAAO,OAAO,uBAAuB;;;;;;;AAQvC,SAAgB,sBACd,GACS;AACT,SACG,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,eAClD,EAAE,eAAe,YAAY,EAAE,eAAe,cAC/C,sBAAsB,EAAE,KACvB,EAAE,cAAc,KAAA,KAAa,EAAE,cAAc,cAC7C,EAAE,gBAAgB,aACjB,EAAE,gBAAgB,YAClB,EAAE,gBAAgB,KAAA,KAClB,EAAE,gBAAgB;;;;;;;;;;;AAkBxB,SAAgB,qBACd,QACsB;AACtB,KAAI,CAAC,OAAQ,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAoB;AACnE,KAAI,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,UAC9D,QAAO;EAAE,UAAU;EAAO,QAAQ,aAAa,OAAO;EAAgB;AAExE,KAAI,OAAO,eAAe,YAAY,OAAO,eAAe,UAC1D,QAAO;EAAE,UAAU;EAAO,QAAQ,WAAW,OAAO;EAAc;AAEpE,KAAI,CAAC,sBAAsB,OAAO,CAAE,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAuB;AAC7F,KAAI,OAAO,gBAAgB,SAAU,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAkB;AACzF,QAAO,EAAE,UAAU,MAAM;;AAQ3B,SAAgB,mBAAmB,WAAW,qBAAmD;AAI/F,KAAI,aAAa,oBACf,OAAM,IAAI,MACR,qIAED;AAEH,QAAO,4BAA4B;;AAGrC,SAAgB,4BAA4B,UAAkD;AAC5F,QAAO,wBAAwB,SAAS;;AAoE1C,SAAgB,oBACd,SACA,QACA,UACc;AAGd,KAAI,QAAQ,KAAK,QAAQ,EAAE;AACzB,UAAQ,KACN,kEAAkE,QAAQ,wDACrB,QAAQ,IAC9D;AACD,SAAO;GACL;GACA,cAAc;GACd,YAAY;GACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,eAAe;GAChB;;AAGH,WAAU,QAAQ,aAAa;CAW/B,MAAM,SAAuB,YAAY,oBAAoB,QAAQ,IAAI;EACvE;EACA,cAAc;EACd,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC,eAAe;EAChB;AAKD,KAAI,OAAO,iBAAiB,eAAe,OAAO,iBAAiB,YAAY,OAAO,gBAAgB,KAAA,GAAW;AAC/G,UAAQ,KAAK,sFAAsF,QAAQ,gCAAgC;AAC3I,qBAAmB;GAAE,MAAM;GAAkB;GAAiB;GAAwB,CAAC;AACvF,SAAO;;AAST,KACE,OAAO,iBAAiB,gBACvB,OAAO,iBAAiB,aAAa,OAAO,iBAAiB,aAC9D,OAAO,oBAAoB,KAAA,GAC3B;AACA,UAAQ,KACN,yDAAyD,QAAQ,iBAC7D,OAAO,aAAa,+HAEzB;AACD,qBAAmB;GAAE,MAAM;GAAkB;GAAiB;GAAwB,CAAC;AACvF,SAAO;;AAKT,MACG,OAAO,eAAe,qBAAqB,OAAO,eAAe,aAClE,OAAO,eAAe,UACtB;AACA,UAAQ,KAAK,qEAAqE,OAAO,WAAW,QAAQ,UAAU;AACtH,SAAO,OAAO;AACd,SAAO,OAAO;;CAGhB,MAAM,SAAS;EAAE,GAAG;EAAQ,GAAG;EAAQ;AAKvC,KAAI,OAAO,oBAAoB,OAAO,iBACpC,QAAO,mBAAmB;EAAE,GAAG,OAAO;EAAkB,GAAG,OAAO;EAAkB;CAItF,MAAM,UAAU,CAAC,GAAI,OAAO,WAAW,EAAE,CAAE;CAC3C,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,KAAI,OAAO,gBAAgB,OAAO,iBAAiB,OAAO,aACxD,SAAQ,KAAK;EAAE,MAAM;EAAU,QAAQ,OAAO;EAAc,WAAW;EAAK,OAAO,OAAO;EAAa,CAAC;AAE1G,KAAI,OAAO,cAAc,OAAO,eAAe,OAAO,WACpD,SAAQ,KAAK;EAAE,MAAM;EAAQ,QAAQ,OAAO;EAAY,WAAW;EAAK,OAAO,OAAO;EAAW,CAAC;AAEpG,KAAI,OAAO,aAAa,OAAO,cAAc,OAAO,UAClD,SAAQ,KAAK;EAAE,MAAM;EAAO,QAAQ,OAAO;EAAW,WAAW;EAAK,OAAO,OAAO;EAAU,CAAC;AAEjG,KAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,YACtD,SAAQ,KAAK;EAAE,MAAM;EAAS,QAAQ,OAAO;EAAa,WAAW;EAAK,CAAC;AAE7E,QAAO,QAAQ,SAAS,GAAI,SAAQ,OAAO;CAgB3C,MAAM,iBADe,OAAO,gBAAgB,UAAU,KAAK,IAEvD,QACC,OAAO,kBAAkB,KAAA,IACtB,OAAO,gBACP,sBAAsB,OAAO;CAErC,MAAM,UAAwB,0BAA0B;EACtD,GAAG;EACH;EACA,WAAW;EACX;EACA;EACD,CAAC;AAGF,KAAI,iBAAiB,CAAC,OAAO,iBAAiB,QAAQ,MACpD,EAAC,YAAY;AACX,MAAI;GACF,MAAM,EAAE,uBAAuB,uBAAuB,MAAM,OAAO;AACnE,OAAI,CAAC,uBAAuB,CAAE;GAC9B,MAAM,UAAU,QAAQ,MAAO,MAAM,sCAAsC;AAC3E,OAAI,CAAC,QAAS;GACd,MAAM,GAAG,OAAO,QAAQ;GAExB,MAAM,EAAE,SAAS,MAAM,OAAO;GAC9B,MAAM,EAAE,cAAc,MAAM,OAAO;GAEnC,MAAM,EAAE,WAAW,MADD,UAAU,KACM,CAChC,cAAc,QAAQ,MAAO,MAAM,gBAAgB,GAAG,GAAG,sCACzD;IAAE,UAAU;IAAS,SAAS;IAAO,CACtC;GACD,MAAM,MAAM,OAAO,MAAM;AACzB,OAAI,KAAK;AAKP,UAAM,mBAAmB,OAAO,MAAM,KAAK,WAAW,mBAAmB,gBAAgB;AACzF,YAAQ,IAAI,gDAAgD,QAAQ,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG;;WAEtF,KAAU;AACjB,WAAQ,KAAK,mDAAmD,IAAI,UAAU;;KAE9E;AAQN,sCAAqC,SAAS,QAAQ;AAOtD,KAAI;AACF,yBAAS,QAAQ;UACV,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,8CAA8C,QAAQ,IAAI,IAAI,4DAA4D;;AAGzI,oBAAmB;EAAE,MAAM;EAAkB;EAAS,QAAQ;EAAS,CAAC;AAIxE,KAAI,OAAO,sBAAsB,OAAO,uBAAuB,OAAO,oBAAoB;EAOxF,MAAM,QAAQ;GALZ,SAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB;GAChH,QAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAyB,KAAK,GAAG,QAAQ;IAAuB;GAC9G,QAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAyB,KAAK,GAAG,QAAQ;IAAuB;GAC9G,SAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB,aAAa;IAAG;GAEhH,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAY,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAmB;GAAS,CAAC;AAC5I,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,sBAAsB,OAAO;GACzC,CAAC;;AAEJ,KAAI,OAAO,gBAAgB,OAAO,iBAAiB,OAAO,cAAc;EACtE,IAAI,YAAY,GAAG,QAAQ;AAC3B,MAAI,OAAO,iBAAiB,aAAa;GACvC,MAAM,aAAa,QAAQ,oBAAoB;AAC/C,eAAY,aAAa,IACrB,GAAG,QAAQ,iCAAiC,WAAW,KACvD,GAAG,QAAQ;;EAQjB,MAAM,QAAQ;GALZ,WAAW;IAAE,OAAO;IAAW,KAAK;IAAW,KAAK,GAAG,QAAQ;IAAkB;GACjF,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB;GACnG,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB;GACnG,SAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAwC,KAAK,GAAG,QAAQ;IAAkB;GAEzG,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAU,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAa;GAAS,CAAC;AACpI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,UAAU,UAAU,IAAI;GACxC;GACA,QAAQ;GACR,WAAW,gBAAgB,OAAO;GACnC,CAAC;;AAEJ,KAAI,OAAO,cAAc,OAAO,eAAe,OAAO,YAAY;EAQhE,MAAM,QAAQ;GANZ,SAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB,aAAa;IAAG;GACzH,QAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GACvG,QAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GACvG,SAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB,aAAa;IAAG;GACzH,iBAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB,aAAa;IAAG;GAEvH,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAQ,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAW;GAAS,CAAC;AAChI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,cAAc,OAAO;GACjC,CAAC;;AAEJ,KAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,aAAa;EAQnE,MAAM,QAAQ;GANZ,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAsB,KAAK,GAAG,QAAQ;IAAoB,aAAa;IAAG;GACzH,SAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAuB,KAAK,GAAG,QAAQ;IAAqB,aAAa;IAAG;GAC3H,WAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA6B,KAAK,GAAG,QAAQ;IAAmC,aAAa;IAAG;GAC/I,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAY,KAAK,GAAG,QAAQ;IAAkB;GAC7F,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GAEjF,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAQ,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAY;GAAS,CAAC;AACjI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,eAAe,OAAO;GAClC,CAAC;;AAEJ,KAAI,OAAO,kBAAkB,QAAQ,CAAC,OAAO,eAAe;AAC1D,wBAAsB;GAAE,QAAQ;GAAY,OAAO;GAAW,SAAS,GAAG,QAAQ;GAAqB;GAAS,CAAC;AACjH,sBAAoB;GAClB,WAAW,GAAG,QAAQ;GACtB,UAAU;GACV;GACA,QAAQ;GACR,WAAW;GACZ,CAAC;;AAOJ,MACG,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,cAC7D,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,aAC5D,QAAQ,eAAe,UAOvB,KAJE,QAAQ,oBACR,QAAQ,sBACR,QAAQ,qBAAqB,QAAQ,oBAErB;AAChB,UAAQ,IAAI,0CAA0C,QAAQ,4CAA4C,QAAQ,iBAAkB,MAAM,GAAG,EAAE,CAAC,GAAG;AACnJ,wBAAsB;GAAE,QAAQ;GAAY,OAAO;GAAQ,SAAS,GAAG,QAAQ;GAA4D;GAAS,CAAC;AACrJ,sBAAoB,SAAS;GAC3B,YAAY;GACZ,WAAW;GACX,oBAAoB;GACpB,mBAAmB;GACpB,CAAC;AACG,6BAA2B,eAAe,QAAQ;OAElD,4BAA2B,mBAAmB,QAAQ;AAI/D,KAAI,OAAO,eAAe,YAAY,OAAO,eAAe,SACrD,4BAA2B,eAAe,QAAQ;AAOzD,MACG,OAAO,eAAe,YAAY,OAAO,eAAe,sBACzD,OAAO,eAAe,YAAY,OAAO,eAAe,kBAEnD,uCAAsC,SAAS,QAAQ;AAG9D,QAAO;;AAGT,SAAgB,sCAAsC,SAAsC;CAC1F,MAAM,SAAS,oBAAoB,QAAQ;AAC3C,KAAI,CAAC,OAAQ,QAAO;AAiBpB,KAdE,OAAO,iBAAiB,aACxB,OAAO,eAAe,cACrB,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,eAC3D,OAAO,uBAAuB,KAAA,KAAa,OAAO,uBAAuB,cAC1E,CAAC,OAAO,iBACR,OAAO,qBAAqB,KAC5B,OAAO,2BAA2B,KAClC,OAAO,qBAAqB,KAC5B,OAAO,mBAAmB,KAC1B,OAAO,oBAAoB,KAC3B,OAAO,sBAAsB,KAAA,KAC7B,OAAO,qBAAqB,KAAA,KAC5B,OAAO,uBAAuB,KAAA,EAEjB,QAAO;AAEtB,QAAO,oBAAoB,SAAS;EAClC,cAAc;EACd,YAAY;EACZ,aAAa;EACb,aAAa,KAAA;EACb,WAAW,KAAA;EACX,YAAY,KAAA;EACZ,eAAe;EACf,kBAAkB;EAClB,oBAAoB;EACpB,mBAAmB,KAAA;EACnB,wBAAwB;EACxB,OAAO;EACP,aAAa,KAAA;EACb,SAAS,KAAA;EACT,cAAc,KAAA;EACd,kBAAkB;EAClB,gBAAgB;EAChB,iBAAiB;EACjB,mBAAmB,KAAA;EACnB,kBAAkB,KAAA;EAClB,oBAAoB,KAAA;EACrB,CAAC;;;;;;;;;AAUJ,eAAe,qCAAqC,SAAiB,QAAqC;AACxG,KAAI;EACF,MAAM,EAAE,iCAAiC,MAAM,OAAO;AAOtD,OAAI,MANiB,OAAO,WAAW,6BAA6B;GAClE;GACA,SAAS,OAAO,iBAAiB,WAAW,WAAW;GACvD,OAAO,OAAO;GACd,OAAO,OAAO;GACf,CAAC,CAAC,EACQ,iBACT,SAAQ,IAAI,mEAAmE,QAAQ,cAAc;UAEhG,KAAK;AACZ,UAAQ,KAAK,0DAA0D,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;;;;;;;;;AAkBvK,SAAS,gCAAgC,SAAiB,QAA4B;AACpF,KAAI,CAAC,oBAAoB;EACvB,mBAAmB,OAAO;EAC1B,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,aAAa,OAAO;EACrB,CAAC,CAAE;CACJ,MAAM,OAAO,wBAAwB,IAAI,QAAQ,IAAI;AACrD,KAAI,KAAK,KAAK,GAAG,OAAO,iCAAkC;AAC1D,yBAAwB,IAAI,SAAS,KAAK,KAAK,CAAC;AAC3C,wBAAuB,SAAS,OAAO,MAAM;;AAGpD,eAAe,uBAAuB,SAAiB,OAA+B;AACpF,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU;EACf,MAAM,EAAE,eAAe,MAAM,OAAO;EACpC,MAAM,YAAY,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG;AAC9F,MAAI,CAAC,WAAW,UAAU,CAAE;EAC5B,IAAI,SAAS,WAAW,QAAQ,aAAa;AAC7C,MAAI;GACF,MAAM,EAAE,cAAc,MAAM,OAAO;GACnC,MAAM,EAAE,SAAS,MAAM,OAAO;GAE9B,MAAM,EAAE,WAAW,MADD,UAAU,KACM,CAAC,6BAA6B;IAAE,KAAK;IAAW,UAAU;IAAS,CAAC;AACtG,YAAS,OAAO,MAAM,IAAI;UACpB;EACR,MAAM,EAAE,4BAA4B,MAAM,OAAO;AAEjD,OAAI,MADiB,OAAO,WAAW,wBAAwB;GAAE;GAAS;GAAW;GAAQ,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAAG,CAAC,CAAC,EACjH,QACT,SAAQ,IAAI,8CAA8C,QAAQ,0CAA0C;UAEvG,KAAK;AACZ,UAAQ,KAAK,sDAAsD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAcnK,SAAS,gCAAgC,SAAiB,QAA4B;AACpF,KAAI,OAAO,iBAAiB,SAAU;AACtC,KAAI,OAAO,gBAAgB,YAAY,OAAO,cAAe;AAG7D,KAAI,OAAO,eAAe,aAAa,OAAO,eAAe,aAAa,OAAO,eAAe,kBAAmB;CACnH,MAAM,OAAO,sBAAsB,IAAI,QAAQ,IAAI;AACnD,KAAI,KAAK,KAAK,GAAG,OAAO,kCAAmC;AAC3D,uBAAsB,IAAI,SAAS,KAAK,KAAK,CAAC;AACzC,4BAA2B,QAAQ;;AAG1C,eAAe,2BAA2B,SAAgC;AACxE,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU;EACf,MAAM,EAAE,eAAe,MAAM,OAAO;EACpC,MAAM,YAAY,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG;AAC9F,MAAI,CAAC,WAAW,UAAU,CAAE;EAC5B,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,WAAW,wBAAwB,UAAU;AACnD,MAAI,CAAC,SAAU;AAGf,sBAAoB,SAAS;GAC3B,YAAY,SAAS;GACrB,WAAW,SAAS,SAAS,yCAAyC,SAAS,OAAO;GACvF,CAAC;AACF,UAAQ,IAAI,yDAAyD,QAAQ,IAAI,SAAS,OAAO,0CAA0C;UACpI,KAAK;AACZ,UAAQ,KAAK,uDAAuD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAIpK,eAAe,sCAAsC,SAAiB,QAAqC;AACzG,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;EACrD,MAAM,YAAY,WAAW,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG,GAAG,KAAA;EAC5G,MAAM,QAAQ,OAAO;EAAW,IAAI;AACpC,MAAI;GACF,MAAM,EAAE,sBAAsB,MAAM,OAAO;GAC3C,MAAM,IAAI,MAAM,OAAO,WAAW,kBAAkB;IAClD;IAAS,eAAe;IAAW,YAAY;IAAc,SAAS;IAAU,SAAS,oBAAoB;IAC7G,cAAc,qBAAqB,SAAS,gGAAgG,kFAAkF,QAAQ;IACvO,CAAC,CAAC;AACH,OAAI,EAAE,QAAS,gBAAe,EAAE;UAC1B;EAER,MAAM,UAAU,uDAAuD,QAAQ,OAAO,eAAe,cAAc,aAAa,QAAQ,KAAK,QAAQ,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,+DAA+D,QAAQ;EAC9P,MAAM,EAAE,4BAA4B,iCAAiC,MAAM,OAAO;EAClF,MAAM,SAAS,MAAM,2BAA2B,QAAQ;AACxD,MAAI,aAAa,QAAQ;GACvB,MAAM,EAAE,iBAAiB,MAAM,OAAO;AACtC,SAAM,aAAa,OAAO,SAAS,QAAQ;AAC3C,WAAQ,IAAI,6CAA6C,OAAO,QAAQ,OAAO,QAAQ,cAAc;QAErG,OAAM,6BAA6B,SAAS,OAAO,QAAQ;GAAE,YAAY;GAAc;GAAc,CAAC;UAEjG,KAAK;AACZ,UAAQ,KAAK,uDAAuD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAIpK,SAAgB,oBAAoB,SAAsC;CACxE,MAAM,WAAW,0BAA0B,QAAQ;CACnD,MAAM,UAAU,sBAAsB,QAAQ;AAI9C,KAAI,CAAC,QAAS,QAAO,YAAY;AAEjC,KAAK,QAAQ,QAAoC,cAAc,MAAM;AAEnE,MAAI;AACF,sBAAS,QAAQ;UACX;AAGR,SAAO;;AAST,KADqB,CAAC,aAAa,SAAS,aAAa,MAAM,QAAQ,WACrD;EAChB,MAAM,SAAuB,EAC3B,GAAI,YAAY;GACd;GACA,cAAc;GACd,YAAY;GACZ,WAAW,QAAQ;GACnB,eAAe;GAChB,EACF;AAID,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,QAAQ,CACxD,KAAI,UAAU,KAAA,EAAY,QAA8C,OAAO;AAEjF,SAAO,UAAU;AACjB,SAAO,YAAY,QAAQ;AAE3B,SAAO,iBADc,OAAO,gBAAgB,UAAU,KAAK,IACtB,QAAQ,sBAAsB,OAAO;EAC1E,MAAM,aAAa,0BAA0B,OAAO;AACpD,MAAI;AACF,0BAAS,WAAW;UACd;EAYR,MAAM,aAAa,UAAU,iBAAiB,aAAa,UAAU,iBAAiB;AAEtF,OADmB,WAAW,iBAAiB,aAAa,WAAW,iBAAiB,aACtE,CAAC,WACZ,sCAAqC,SAAS,WAAW;EAShE,MAAM,kBAAkB,UAAU,iBAAiB;AAEnD,MADwB,WAAW,iBAAiB,YAC7B,CAAC,mBAAmB,WAAW,eAAe,WAAW;AAC9E,WAAQ,IAAI,kDAAkD,QAAQ,8DAA8D;AAC/H,8BAA2B,mBAAmB,QAAQ;;EAE7D,MAAM,gBAAgB,UAAU,eAAe;AAE/C,MADsB,WAAW,eAAe,YAC3B,CAAC,eAAe;AACnC,WAAQ,IAAI,8CAA8C,QAAQ,8DAA8D;AAC3H,8BAA2B,eAAe,QAAQ;;AAGzD,kCAAgC,SAAS,WAAW;AACpD,kCAAgC,SAAS,WAAW;AACpD,SAAO;;CAKT,MAAM,WAAW,gCAAgC,SAAS,SAAU;AACpE,iCAAgC,SAAS,SAAS;AAClD,iCAAgC,SAAS,SAAS;AAClD,QAAO;;AAqHT,SAAgB,kBAAkB,SAAuB;AACvD,KAAI;AACF,qBAAS,QAAQ;UACV,KAAK;AACZ,UAAQ,MAAM,yCAAyC,IAAI;;;;;;;;;;;AAmB/D,SAAgB,mBACd,SACA,QACA,SACM;AACN,KAAI;AACF,uBAAY,SAAS,QAAQ,QAAQ;AACrC,UAAQ,IAAI,0BAA0B,QAAQ,aAAa,SAAS;EACpE,MAAM,UAAU,oBAAoB,QAAQ;AAC5C,MAAI,QAAS,oBAAmB;GAAE,MAAM;GAAkB;GAAS,QAAQ;GAAS,CAAC;UAC9E,KAAK;AACZ,UAAQ,MAAM,kCAAkC,QAAQ,aAAa,IAAI;;;;;;;;AAyB7E,SAAgB,iBACd,SACA,SACA,QACM;AACN,KAAI;AAKF,sBAAoB,SAAS;GAC3B,eAAe;GACf,iBAAiB,2BAAU,IAAI,MAAM,EAAC,aAAa,GAAG,KAAA;GACtD,qBAAqB,UAAU,SAAS,KAAA;GACzC,CAAC;AACF,UAAQ,IAAI,iCAAiC,QAAQ,OAAO,UAAU,SAAS,KAAK,OAAO,KAAK,KAAK;UAC9F,KAAK;AACZ,UAAQ,MAAM,mDAAmD,QAAQ,IAAI,IAAI;;;;;yBA3jCzB;uBACsB;0BASxC;4BACyC;+BACV;iCAC8E;gCACnF;AA8KpE,qCAAoC,4BAA4B,CAAC;AAE3D,uBAAsB,KAAK,SAAS,EAAE,aAAa,qBAAqB;AAiexE,2CAA0B,IAAI,KAAqB;AACnD,oCAAmC;AAwDnC,yCAAwB,IAAI,KAAqB;AACjD,qCAAoC;AAyX7B,qBAAb,cAAuC,KAAK,YAAY,oBAAoB,CAKzE;AAEU,oBACX,SACA,QACA,aAEA,OAAO,WAAW;EAChB,WAAW,IAAI,SAAuB,SAAS,WAAW;AACxD,sBAAmB;AACjB,QAAI;AACF,aAAQ,oBAAoB,SAAS,QAAQ,SAAS,CAAC;aAChD,KAAK;AACZ,YAAO,IAAI;;KAEb;IACF;EACF,QAAQ,UACN,IAAI,kBAAkB;GACpB;GACA,WAAW;GACX,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D;GACD,CAAC;EACL,CAAC;AAES,oBACX,YAEA,OAAO,IAAI;EACT,WAAW,0BAA0B,QAAQ;EAC7C,QAAQ,UACN,IAAI,kBAAkB;GACpB;GACA,WAAW;GACX,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D;GACD,CAAC;EACL,CAAC"}
+{"version":3,"file":"review-status-B_XXomV0.js","names":["join","dirname"],"sources":["../src/lib/cloister/review-status-source.ts","../src/lib/overdeck/review-status-record-sync.ts","../src/lib/review-dispatch-decision.ts","../src/lib/review-status.ts"],"sourcesContent":["/**\n * PAN-2579: synchronous access to the review-status map for warm-idle advancing\n * classification in concurrency.ts, WITHOUT importing review-status-sync.ts —\n * that module transitively reaches agents/spawn.ts -> concurrency.ts\n * (review-status-sync -> review-status-normalize -> review-status -> agents),\n * so a direct concurrency.ts import closes a real cycle (caught by\n * scripts/lint-circular-deps.sh). Same shape as memory-verdict-cache.ts: this\n * module has no imports of its own, so it cannot be part of any cycle.\n *\n * review-status.ts registers the reader at module load. Before registration\n * (or if the read throws) callers get null and treat NOTHING as warm-idle —\n * the ceiling stays conservative.\n */\n\n/** Minimal status shape needed for warm-idle classification (mirrors ReapableStatus). */\nexport interface WarmIdleStatusShape {\n  reviewStatus?: string;\n  testStatus?: string;\n  readyForMerge?: boolean;\n  mergeStatus?: string;\n}\n\ntype StatusMapReader = () => Record<string, WarmIdleStatusShape>;\n\nlet reader: StatusMapReader | null = null;\n\nexport function registerReviewStatusMapReader(fn: StatusMapReader): void {\n  reader = fn;\n}\n\nexport function readReviewStatusMap(): Record<string, WarmIdleStatusShape> | null {\n  if (!reader) return null;\n  try {\n    return reader();\n  } catch {\n    return null;\n  }\n}\n","import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport type { ReviewStatus } from '../review-status.js';\nimport { updateIssueRecordForIssue, type PanIssuePipelineRecord } from '../pan-dir/records.js';\nimport { readIssueRecordSync } from '../pan-dir/record.js';\nimport { resolveProjectFromIssueSync, getProjectSync } from '../projects.js';\n\nexport function updateIssueRecordForReviewStatusSync(issueId: string, status: ReviewStatus): void {\n  // PAN-2583: the state-dir journal is the durable home, but a sandboxed reviewer\n  // (codex workspace-write) cannot write ${OVERDECK_HOME}/state — and swallowing that\n  // failure here is how blocked review verdicts silently vanished for hours. When the\n  // journal write does not land, drop the durable verdict into the workspace runtime\n  // dir (the one place a sandboxed agent can always write); readJournalStatusSync\n  // overlays it on the next host-side read.\n  void Promise.resolve(updateIssueRecordForIssue(issueId, status))\n    .then((landed) => {\n      // Only an explicit `false` means the durable write failed — undefined\n      // (e.g. a test double) is \"unknown\", not \"failed\".\n      if (landed === false) writeWorkspaceVerdictFallbackSync(issueId, status);\n    })\n    .catch(() => writeWorkspaceVerdictFallbackSync(issueId, status));\n}\n\n/** Resolve and read the per-issue journal record's pipeline block, or null. Best-effort. */\nfunction readPipelineSync(issueId: string): PanIssuePipelineRecord | null {\n  try {\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return null;\n    const project = getProjectSync(resolved.projectKey);\n    if (!project) return null;\n    const record = readIssueRecordSync(project, issueId);\n    return record?.pipeline ?? null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * PAN-1988: feedback TEXT (review / test / merge / inspect / verification notes) is durable\n * JOURNAL state, not DB-cache state. The SQLite row holds only the queryable status flags;\n * the human-readable notes live in the per-issue git record (`<workspace>/.pan/records/<issue>.json`,\n * PAN-1908). This overlays those notes onto a DB-sourced status so every reader (deacon\n * CI-failure detection, dashboard panels) stays transparent while the DB stops storing them.\n */\nexport function enrichReviewNotesFromRecordSync(issueId: string, status: ReviewStatus): ReviewStatus {\n  const pipeline = readPipelineSync(issueId);\n  if (!pipeline) return status;\n  return {\n    ...status,\n    reviewNotes: pipeline.reviewNotes ?? status.reviewNotes,\n    testNotes: pipeline.testNotes ?? status.testNotes,\n    mergeNotes: pipeline.mergeNotes ?? status.mergeNotes,\n    inspectNotes: pipeline.inspectNotes ?? status.inspectNotes,\n    verificationNotes: pipeline.verificationNotes ?? status.verificationNotes,\n    scopeDrift: pipeline.scopeDrift ?? status.scopeDrift,\n    // PAN-1988 auto-heal: the durable review-request intent is journal-only — overlay it on every\n    // read so the merge base preserves it through partial updates and the dispatch reconcile sees it.\n    reviewRequestedAt: pipeline.reviewRequestedAt ?? status.reviewRequestedAt,\n  };\n}\n\ntype DurableStatusFields = Partial<ReviewStatus> & { closedOut?: boolean; closedOutAt?: string };\n\n/**\n * The durable field subset shared by the journal record's pipeline block and the\n * workspace verdict fallback (PAN-2583). Derived/live columns (readyForMerge,\n * blockerReasons) are intentionally omitted — the reader recomputes them.\n */\nfunction durableSubset(p: PanIssuePipelineRecord): DurableStatusFields {\n  return {\n    reviewStatus: p.reviewStatus as ReviewStatus['reviewStatus'],\n    testStatus: p.testStatus as ReviewStatus['testStatus'],\n    mergeStatus: (p.mergeStatus as ReviewStatus['mergeStatus']) ?? undefined,\n    inspectStatus: (p.inspectStatus as ReviewStatus['inspectStatus']) ?? undefined,\n    verificationStatus: (p.verificationStatus as ReviewStatus['verificationStatus']) ?? undefined,\n    reviewNotes: p.reviewNotes,\n    testNotes: p.testNotes,\n    mergeNotes: p.mergeNotes,\n    inspectNotes: p.inspectNotes,\n    verificationNotes: p.verificationNotes,\n    scopeDrift: p.scopeDrift,\n    prUrl: p.prUrl,\n    prNumber: p.prNumber,\n    prHeadSha: p.prHeadSha,\n    reviewedAtCommit: p.reviewedAtCommit,\n    lastVerifiedCommit: p.lastVerifiedCommit,\n    reviewRequestedAt: p.reviewRequestedAt,\n    reviewerVerdicts: p.reviewerVerdicts as ReviewStatus['reviewerVerdicts'],\n    autoMerge: p.autoMerge,\n    deaconIgnored: p.deaconIgnored,\n    deaconIgnoredAt: p.deaconIgnoredAt,\n    deaconIgnoredReason: p.deaconIgnoredReason,\n    closedOut: p.closedOut,\n    closedOutAt: p.closedOutAt,\n  };\n}\n\n/**\n * PAN-2583: sandbox-writable emergency drop for a verdict whose state-dir journal\n * write failed. Lives in the workspace runtime dir (gitignored), swept by\n * readJournalStatusSync on the next host-side read.\n */\ninterface WorkspaceVerdictFallback {\n  issueId: string;\n  updatedAt: string;\n  pipeline: DurableStatusFields;\n}\n\nexport function workspaceVerdictFallbackPath(issueId: string): string | null {\n  try {\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return null;\n    return join(\n      resolved.projectPath,\n      'workspaces',\n      `feature-${issueId.toLowerCase()}`,\n      '.overdeck',\n      'pipeline-verdict.json',\n    );\n  } catch {\n    return null;\n  }\n}\n\nfunction writeWorkspaceVerdictFallbackSync(issueId: string, status: ReviewStatus): void {\n  try {\n    const path = workspaceVerdictFallbackPath(issueId);\n    if (!path) {\n      console.error(\n        `[review-status] PAN-2583: journal write failed for ${issueId} and no workspace could be resolved — the verdict is NOT durable`,\n      );\n      return;\n    }\n    mkdirSync(dirname(path), { recursive: true });\n    const payload: WorkspaceVerdictFallback = {\n      issueId: issueId.toUpperCase(),\n      updatedAt: status.updatedAt ?? new Date().toISOString(),\n      pipeline: durableSubset(status as unknown as PanIssuePipelineRecord),\n    };\n    writeFileSync(path, JSON.stringify(payload, null, 2));\n    console.warn(\n      `[review-status] journal write failed for ${issueId} — durable verdict written to workspace fallback ${path}; the host sweeps it on the next status read (PAN-2583)`,\n    );\n  } catch (err) {\n    console.error(\n      `[review-status] PAN-2583: could not persist verdict for ${issueId} anywhere durable: ${(err as Error).message}`,\n    );\n  }\n}\n\nfunction readWorkspaceVerdictFallbackSync(issueId: string): WorkspaceVerdictFallback | null {\n  try {\n    const path = workspaceVerdictFallbackPath(issueId);\n    if (!path || !existsSync(path)) return null;\n    const parsed = JSON.parse(readFileSync(path, 'utf-8')) as WorkspaceVerdictFallback;\n    if (!parsed?.updatedAt || !parsed.pipeline) return null;\n    return parsed;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * PAN-1988: read the journal record's durable verdict for an issue — the SOURCE OF TRUTH.\n * Returns the record `updatedAt` (used to decide whether the journal is newer than the DB\n * cache) plus the durable status fields (flags + feedback notes). Derived/live columns\n * (readyForMerge, blockerReasons) are intentionally omitted — the reader recomputes them.\n *\n * This is what makes verdict writes host-owned: a sandboxed agent can always write the journal\n * (workspace-local) even when it cannot write `~/.overdeck/overdeck.db`. The host reconciles\n * the cache from this on read, so no agent has to escalate out of its sandbox to record a verdict.\n *\n * PAN-2583: since the records migration (PAN-2541) the journal itself lives in\n * ${OVERDECK_HOME}/state, which a sandboxed reviewer cannot write either. When such a\n * writer dropped its verdict into the workspace fallback instead, overlay it here —\n * a strictly newer fallback wins over the record, and the host's own next journal\n * write folds it back into the canonical record.\n */\nexport function readJournalStatusSync(\n  issueId: string,\n): { updatedAt: string; durable: DurableStatusFields } | null {\n  const p = readPipelineSync(issueId);\n  const fallback = readWorkspaceVerdictFallbackSync(issueId);\n  const fallbackNewer = !!fallback && (!p || (p.updatedAt ?? '') < fallback.updatedAt);\n  if (fallback && fallbackNewer) {\n    const base = p ? durableSubset(p) : {};\n    const overlay = Object.fromEntries(\n      Object.entries(fallback.pipeline).filter(([, value]) => value !== undefined),\n    ) as DurableStatusFields;\n    return { updatedAt: fallback.updatedAt, durable: { ...base, ...overlay } };\n  }\n  if (!p) return null;\n  return { updatedAt: p.updatedAt, durable: durableSubset(p) };\n}\n","/**\n * PAN-1988 auto-heal — decide whether a review needs to be (re-)dispatched from the durable\n * journal intent, as a PURE function so it is locked by tests.\n *\n * The work agent's `pan done` writes a durable `reviewRequestedAt` into the journal/record (always\n * writable, even sandboxed) BEFORE it tries to reach the dashboard. If that reactive trigger is\n * dropped — the dashboard was mid-reload, the network blipped, the deacon is frozen — the intent\n * survives in the journal. The host reconciles on read: when a request is newer than the last\n * dispatch and nothing is currently reviewing, it dispatches review. This heals with NO deacon and\n * NO live dashboard event, on the next status read.\n *\n * Returns true when a review dispatch is owed:\n *  - a request exists (`reviewRequestedAt` set), AND\n *  - it is newer than the last spawn (or there was never a spawn) — i.e. a genuinely un-serviced\n *    request, not the request that produced the current review, AND\n *  - a review is not already in progress (`reviewing`), AND\n *  - the issue is not already merged.\n */\nexport function needsReviewDispatch(params: {\n  reviewRequestedAt?: string;\n  reviewSpawnedAt?: string;\n  reviewStatus?: string;\n  mergeStatus?: string;\n}): boolean {\n  if (!params.reviewRequestedAt) return false;\n  if (params.reviewStatus === 'reviewing') return false;\n  if (params.mergeStatus === 'merged') return false;\n  return !params.reviewSpawnedAt || params.reviewRequestedAt > params.reviewSpawnedAt;\n}\n","import { join } from 'path';\nimport { homedir } from 'os';\nimport { Data, Effect } from 'effect';\nimport { notifyPipelineSync } from './pipeline-notifier.js';\nimport { emitActivityEntrySync, emitActivityTtsSync } from './activity-logger.js';\nimport {\n  upsertReviewStatusSync as dbUpsert,\n  deleteReviewStatus as dbDelete,\n  getReviewStatusFromDbSync,\n  getAllReviewStatusesFromDb,\n  getReviewStatusesFromDb,\n  markWorkspaceStuck as dbMarkStuck,\n  clearWorkspaceStuck as dbClearStuck,\n} from './overdeck/review-status-sync.js';\nimport { registerReviewStatusMapReader } from './cloister/review-status-source.js';\nimport { normalizeReviewStatusSync } from './review-status-normalize.js';\nimport { updateIssueRecordForReviewStatusSync, enrichReviewNotesFromRecordSync, readJournalStatusSync } from './overdeck/review-status-record-sync.js';\nimport { needsReviewDispatch } from './review-dispatch-decision.js';\nimport type { ScopeDriftRecord } from './vbrief/continue-state.js';\n\nfunction emitReactiveLifecycleEvent(type: 'review.approved' | 'test.passed', issueId: string): void {\n  try {\n    notifyPipelineSync({ type, issueId });\n  } catch (error) {\n    console.warn(`[review-status] Failed to emit ${type} for ${issueId}:`, error);\n  }\n}\n\nexport interface StatusHistoryEntry {\n  type: 'review' | 'test' | 'merge' | 'inspect' | 'uat';\n  status: string;\n  timestamp: string;\n  notes?: string;\n}\n\nexport interface BlockerReason {\n  type: 'failing_checks' | 'merge_conflict' | 'unresolved_conversations' | 'changes_requested' | 'draft_pr' | 'not_mergeable';\n  summary: string;\n  details?: string;\n  detectedAt: string;\n}\n\nexport interface ReviewStatus {\n  issueId: string;\n  reviewStatus: 'pending' | 'reviewing' | 'passed' | 'failed' | 'blocked' | 'skipped';\n  testStatus: 'pending' | 'testing' | 'passed' | 'failed' | 'skipped' | 'dispatch_failed';\n  mergeStatus?: 'pending' | 'queued' | 'merging' | 'verifying' | 'merged' | 'failed';\n  inspectStatus?: 'pending' | 'inspecting' | 'passed' | 'failed' | 'error';\n  inspectNotes?: string;\n  inspectStartedAt?: string;\n  inspectBeadId?: string;\n  uatStatus?: 'pending' | 'testing' | 'passed' | 'failed';\n  uatNotes?: string;\n  verificationStatus?: 'pending' | 'running' | 'passed' | 'failed' | 'skipped';\n  verificationNotes?: string;\n  verificationCycleCount?: number;\n  verificationMaxCycles?: number;\n  reviewNotes?: string;\n  testNotes?: string;\n  mergeNotes?: string;\n  updatedAt: string;\n  readyForMerge: boolean;\n  /**\n   * PAN-1691: per-issue merge-train routing key.\n   * `undefined` = follow the project default; `true` = auto-merge (fast lane,\n   * rides the train and ships when green); `false` = hold for UAT (manual lane,\n   * waits for human batch review). The merge-train engine reads this to decide\n   * whether a ready issue auto-advances or is held for the UAT candidate.\n   */\n  autoMerge?: boolean;\n  autoRequeueCount?: number;\n  mergeRetryCount?: number;\n  prUrl?: string;\n  /** PAN-905: HEAD commit SHA of the tracked PR for webhook identity validation */\n  prHeadSha?: string;\n  /** PAN-905: GitHub PR number of the tracked PR for webhook identity validation */\n  prNumber?: number;\n  history?: StatusHistoryEntry[];\n  /** PAN-905: GitHub-native merge blocker reasons */\n  blockerReasons?: BlockerReason[];\n  /** HEAD commit SHA at the time review passed — used to detect new commits after review */\n  reviewedAtCommit?: string;\n  /** HEAD commit SHA at the time the pre-review verification gate passed — used to skip redundant test-agent */\n  lastVerifiedCommit?: string;\n  /** Current merge pipeline step for granular merge progress tracking */\n  mergeStep?: string;\n  /** PAN-653: workspace is stuck (e.g. main diverged mid-approve) — Deacon skips it */\n  stuck?: boolean;\n  /** PAN-653: reason workspace is stuck (e.g. 'main_diverged') */\n  stuckReason?: string;\n  /** PAN-653: ISO timestamp when workspace was marked stuck */\n  stuckAt?: string;\n  /** PAN-653: JSON details about the stuck event (e.g. {localSha, remoteSha}) */\n  stuckDetails?: string;\n  /** PAN-699: timestamp when review agents were dispatched (deacon timeout detection) */\n  reviewSpawnedAt?: string;\n  /**\n   * PAN-1988 auto-heal: durable JOURNAL intent set by `pan done` BEFORE it reaches the dashboard.\n   * \"The work agent finished and wants review.\" When this is newer than {@link reviewSpawnedAt}\n   * and nothing is reviewing, the host reconciles on read and dispatches review — surviving a\n   * dashboard reload, a dropped event, or a frozen deacon. Journal-only (not a DB column).\n   */\n  reviewRequestedAt?: string;\n  /** PAN-1765: timestamp when a conflict-resolution work agent was dispatched. */\n  conflictResolutionDispatchedAt?: string;\n  /** PAN-699: number of test-agent dispatch retries (circuit breaker) */\n  testRetryCount?: number;\n  /** PAN-794: number of consecutive parallel-review re-dispatch attempts within the current cycle */\n  reviewRetryCount?: number;\n  /** PAN-794: ISO timestamp when deacon began the current recovery cycle — acts as the history cutoff for the breaker */\n  recoveryStartedAt?: string;\n  /** Human-requested ignore flag: when true, Deacon patrol skips this issue entirely (distinct from `stuck`, which is a system-set failure marker). */\n  deaconIgnored?: boolean;\n  /** ISO timestamp when the ignore flag was set. */\n  deaconIgnoredAt?: string;\n  /** Optional free-form reason shown alongside the ignore toggle. */\n  deaconIgnoredReason?: string;\n  /** PAN-1762: advisory files_scope drift recorded at pan done and surfaced to review. */\n  scopeDrift?: ScopeDriftRecord;\n  /**\n   * PAN-1862 (FR-6): per-convoy-reviewer verdicts from the latest full-review cycle,\n   * keyed by sub-role (security/correctness/performance/requirements). Journal-durable\n   * (not a DB column — overlaid on read like reviewRequestedAt). `atCommit` anchors\n   * drift invalidation for selective re-review (reviewersToRerun).\n   */\n  reviewerVerdicts?: Partial<Record<string, { status: 'passed' | 'blocked'; atCommit?: string; findingsPath?: string }>>;\n  // PAN-1531: reviewTempStashRef / reviewTempStashMessage / reviewTempStashSequence\n  // removed. The review pipeline no longer stashes uncommitted work — the\n  // dirty-worktree gate refuses pan done / pan review request before review\n  // is dispatched.\n}\n\nexport function verificationSatisfied(status: Pick<ReviewStatus, 'verificationStatus'>): boolean {\n  // Only block readyForMerge if verification explicitly FAILED.\n  // 'pending' means \"scheduled but not yet run this cycle\" — not a failure signal.\n  // request-review resets verificationStatus to 'pending' as part of its cycle reset,\n  // but subsequent review+test passing should still yield readyForMerge=true.\n  // The post-rebase gate in triggerMerge() is the authoritative quality gate (PAN-XXX).\n  return status.verificationStatus !== 'failed';\n}\n\n/**\n * PAN-1988: the merge-gate predicate (review passed, test passed/skipped, verification not\n * failed, UAT ok, merge not started). Extracted so both setReviewStatusSync and the\n * journal→DB reconcile in getReviewStatusSync derive readyForMerge identically.\n */\nexport function reviewGatesPassedSync(\n  s: Pick<ReviewStatus, 'reviewStatus' | 'testStatus' | 'verificationStatus' | 'uatStatus' | 'mergeStatus'>,\n): boolean {\n  return (\n    (s.reviewStatus === 'passed' || s.reviewStatus === 'skipped') &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    verificationSatisfied(s) &&\n    (s.uatStatus === undefined || s.uatStatus === 'passed') &&\n    (s.mergeStatus === 'pending' ||\n      s.mergeStatus === 'queued' ||\n      s.mergeStatus === undefined ||\n      s.mergeStatus === null)\n  );\n}\n\nexport interface MergeGateEligibility {\n  eligible: boolean;\n  reason?: string;\n}\n\n/**\n * Authoritative \"allowed to merge\" predicate (PAN-1759). The flywheel\n * orchestrator's pipeline verb says it INTENDS to merge an issue; this record\n * says the pipeline ALLOWS it. Both must hold before an issue enters the merge\n * queue or a UAT batch — RUN-20 tagged a mid-review issue with a merge verb\n * and it rode into a promotable batch. Same criteria as the\n * fixStuckReadyForMerge repair sweep: review passed, test passed/skipped,\n * verification not failed, not already merged.\n */\nexport function mergeGateEligibility(\n  status: Pick<ReviewStatus, 'reviewStatus' | 'testStatus' | 'verificationStatus' | 'mergeStatus'> | null,\n): MergeGateEligibility {\n  if (!status) return { eligible: false, reason: 'no review record' };\n  if (status.reviewStatus !== 'passed' && status.reviewStatus !== 'skipped') {\n    return { eligible: false, reason: `review is ${status.reviewStatus}` };\n  }\n  if (status.testStatus !== 'passed' && status.testStatus !== 'skipped') {\n    return { eligible: false, reason: `test is ${status.testStatus}` };\n  }\n  if (!verificationSatisfied(status)) return { eligible: false, reason: 'verification failed' };\n  if (status.mergeStatus === 'merged') return { eligible: false, reason: 'already merged' };\n  return { eligible: true };\n}\n// PAN-2579: register the cycle-free status-map reader used by concurrency.ts for\n// warm-idle advancing classification (see cloister/review-status-source.ts).\nregisterReviewStatusMapReader(() => getAllReviewStatusesFromDb());\n\nconst DEFAULT_STATUS_FILE = join(homedir(), '.overdeck', 'review-status.json');\n\nexport function loadReviewStatuses(filePath = DEFAULT_STATUS_FILE): Record<string, ReviewStatus> {\n  // SQLite is the authoritative store for the default (server) path.\n  // Non-default JSON paths have been moved to review-status-json.ts so that\n  // dashboard-reachable code never imports sync FS operations.\n  if (filePath !== DEFAULT_STATUS_FILE) {\n    throw new Error(\n      `Non-default review-status paths are not supported in review-status.ts. ` +\n      `Import from review-status-json.ts for JSON file operations.`\n    );\n  }\n  return getAllReviewStatusesFromDb();\n}\n\nexport function loadReviewStatusesForIssues(issueIds: string[]): Record<string, ReviewStatus> {\n  return getReviewStatusesFromDb(issueIds);\n}\n\nexport function loadReadyForMergeFlags(issueIds: string[]): Map<string, boolean> {\n  const normalizedIds = [...new Set(issueIds.map((id) => id.toUpperCase()).filter(Boolean))];\n  const dbStatuses = loadReviewStatusesForIssues(normalizedIds);\n  const flags = new Map<string, boolean>();\n\n  for (const issueId of normalizedIds) {\n    const dbStatus = dbStatuses[issueId] ?? null;\n    const journal = readJournalStatusSync(issueId);\n    let status = dbStatus;\n\n    if (journal) {\n      if ((journal.durable as { closedOut?: boolean }).closedOut === true) {\n        flags.set(issueId, false);\n        continue;\n      }\n\n      if (!dbStatus || (dbStatus.updatedAt ?? '') < journal.updatedAt) {\n        const merged: ReviewStatus = {\n          ...(dbStatus ?? {\n            issueId,\n            reviewStatus: 'pending' as const,\n            testStatus: 'pending' as const,\n            updatedAt: journal.updatedAt,\n            readyForMerge: false,\n          }),\n        };\n        for (const [key, value] of Object.entries(journal.durable)) {\n          if (value !== undefined) (merged as unknown as Record<string, unknown>)[key] = value;\n        }\n        merged.issueId = issueId;\n        merged.updatedAt = journal.updatedAt;\n        const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n        merged.readyForMerge = hasBlockers ? false : reviewGatesPassedSync(merged);\n        status = normalizeReviewStatusSync(merged);\n      }\n    }\n\n    flags.set(issueId, status?.readyForMerge ?? false);\n  }\n\n  return flags;\n}\n\nexport function saveReviewStatuses(statuses: Record<string, ReviewStatus>, filePath = DEFAULT_STATUS_FILE): void {\n  // SQLite is the authoritative store for the default (server) path.\n  // Mirrors the old JSON overwrite semantics: upsert every entry in the map and\n  // delete any SQLite rows whose keys are absent from the map (replace-all).\n  if (filePath !== DEFAULT_STATUS_FILE) {\n    throw new Error(\n      `Non-default review-status paths are not supported in review-status.ts. ` +\n      `Import from review-status-json.ts for JSON file operations.`\n    );\n  }\n  const incoming = new Set(Object.keys(statuses));\n  const existing = getAllReviewStatusesFromDb();\n  for (const id of Object.keys(existing)) {\n    if (!incoming.has(id)) {\n      dbDelete(id);\n    }\n  }\n  for (const status of Object.values(statuses)) {\n    dbUpsert(status);\n  }\n}\n\nexport function setReviewStatusSync(\n  issueId: string,\n  update: Partial<ReviewStatus>,\n  existing?: ReviewStatus,\n): ReviewStatus {\n  // Guard: bare numeric IDs (no alphabetic prefix) must never reach the DB.\n  // They would create orphaned rows that pollute pending lists and metrics.\n  if (/^\\d+$/.test(issueId)) {\n    console.warn(\n      `[review-status] Rejecting setReviewStatus for bare numeric ID \"${issueId}\" — ` +\n      `issue IDs must include a project prefix (e.g. PAN-${issueId}).`\n    );\n    return {\n      issueId,\n      reviewStatus: 'pending' as const,\n      testStatus: 'pending' as const,\n      updatedAt: new Date().toISOString(),\n      readyForMerge: false,\n    };\n  }\n\n  issueId = issueId.toUpperCase();\n\n  // Read only the single row we're updating (avoids TOCTOU: bulk read-modify-write\n  // races when two concurrent calls for different issue IDs run concurrently).\n  // If `existing` is provided (e.g. from mutateBlockers), skip the read to\n  // avoid double-read on the webhook ingestion path (PAN-905).\n  // PAN-1988: the merge base goes through getReviewStatusSync (journal-reconciled +\n  // notes-enriched), NOT the raw DB read. Otherwise a partial update (e.g. a testStatus\n  // change carrying no review notes) would merge against a DB row whose notes/flags lag\n  // the journal and silently erase the journal's feedback. The reconcile inside\n  // getReviewStatusSync never re-enters setReviewStatusSync, so there is no recursion.\n  const status: ReviewStatus = existing ?? getReviewStatusSync(issueId) ?? {\n    issueId,\n    reviewStatus: 'pending' as const,\n    testStatus: 'pending' as const,\n    updatedAt: new Date().toISOString(),\n    readyForMerge: false,\n  };\n\n  // Guard: reject reviewStatus regression from 'passed' to 'reviewing' unless the caller\n  // is explicitly resetting the merge lifecycle (update includes mergeStatus).\n  // This is belt-and-suspenders — endpoint-level guards should catch this first.\n  if (update.reviewStatus === 'reviewing' && status.reviewStatus === 'passed' && update.mergeStatus === undefined) {\n    console.warn(`[review-status] Rejecting reviewStatus regression from 'passed' to 'reviewing' for ${issueId} (mergeStatus not being reset)`);\n    notifyPipelineSync({ type: 'status_changed', issueId, status: status as ReviewStatus });\n    return status as ReviewStatus;\n  }\n\n  // PAN-2578: a bare 'reviewing' write must never clobber a terminal blocked/failed verdict.\n  // A review agent can finish FASTER than the dispatch path that spawned it (PAN-399: the\n  // verification gate completed 2 minutes after the agent recorded BLOCKED, and the dispatch\n  // route's redundant `{ reviewStatus: 'reviewing' }` write destroyed the verdict in both the\n  // DB and the journal). Blocked/failed → reviewing is legal ONLY when the caller explicitly\n  // starts a NEW review cycle by carrying reviewSpawnedAt (spawnReviewRoleForIssue does).\n  if (\n    update.reviewStatus === 'reviewing' &&\n    (status.reviewStatus === 'blocked' || status.reviewStatus === 'failed') &&\n    update.reviewSpawnedAt === undefined\n  ) {\n    console.warn(\n      `[review-status] Rejecting stale 'reviewing' write for ${issueId} — a terminal ` +\n      `'${status.reviewStatus}' verdict is already recorded for this review cycle. Only a ` +\n      `new dispatch (carrying reviewSpawnedAt) may re-enter 'reviewing'.`\n    );\n    notifyPipelineSync({ type: 'status_changed', issueId, status: status as ReviewStatus });\n    return status as ReviewStatus;\n  }\n\n  // PAN-424: Reject testStatus regression from 'passed' to 'dispatch_failed' or 'failed'.\n  // Once tests pass, duplicate dispatch failures must not overwrite the result.\n  if (\n    (update.testStatus === 'dispatch_failed' || update.testStatus === 'failed') &&\n    status.testStatus === 'passed'\n  ) {\n    console.warn(`[review-status] Rejecting testStatus regression from 'passed' to '${update.testStatus}' for ${issueId}`);\n    delete update.testStatus;\n    delete update.testNotes;\n  }\n\n  const merged = { ...status, ...update };\n\n  // PAN-1862 (FR-6): reviewerVerdicts is a per-sub-role MAP — a partial update\n  // (synthesis reporting only the reviewers that re-ran this cycle) must merge\n  // with, not replace, the carried-forward entries from prior cycles.\n  if (update.reviewerVerdicts && status.reviewerVerdicts) {\n    merged.reviewerVerdicts = { ...status.reviewerVerdicts, ...update.reviewerVerdicts };\n  }\n\n  // Track status transitions in history (last 10 entries)\n  const history = [...(status.history || [])];\n  const now = new Date().toISOString();\n  if (update.reviewStatus && update.reviewStatus !== status.reviewStatus) {\n    history.push({ type: 'review', status: update.reviewStatus, timestamp: now, notes: update.reviewNotes });\n  }\n  if (update.testStatus && update.testStatus !== status.testStatus) {\n    history.push({ type: 'test', status: update.testStatus, timestamp: now, notes: update.testNotes });\n  }\n  if (update.uatStatus && update.uatStatus !== status.uatStatus) {\n    history.push({ type: 'uat', status: update.uatStatus, timestamp: now, notes: update.uatNotes });\n  }\n  if (update.mergeStatus && update.mergeStatus !== status.mergeStatus) {\n    history.push({ type: 'merge', status: update.mergeStatus, timestamp: now });\n  }\n  while (history.length > 10) history.shift();\n\n  // PAN-1650: readyForMerge is EVENT-DRIVEN — derived from the gate state on every\n  // write, so it flips the instant review+test+verification pass instead of waiting\n  // for a deacon patrol or a startup `fixStuckReadyForMerge` reconcile (those become\n  // redundant safety nets). This supersedes the PAN-1048 explicit-only model.\n  //\n  // Deriving from gates here does NOT bypass the \"rebased onto main + verified\"\n  // guarantee: `triggerMerge()` performs the authoritative post-rebase quality gate\n  // before it actually merges (see verificationSatisfied's note). The gate predicate\n  // mirrors `fixStuckReadyForMerge` so behaviour is identical — just immediate.\n  //\n  // Explicit caller intent still wins (the merge flow sets readyForMerge=false when a\n  // merge starts; mergeStatus then leaves pending/queued so the derive agrees).\n  // PAN-905: GitHub-native blockers always override readyForMerge to false.\n  const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n  const readyForMerge = hasBlockers\n    ? false\n    : (update.readyForMerge !== undefined\n        ? update.readyForMerge\n        : reviewGatesPassedSync(merged));\n\n  const updated: ReviewStatus = normalizeReviewStatusSync({\n    ...merged,\n    issueId,\n    updatedAt: now,\n    readyForMerge,\n    history,\n  });\n\n  // Report commit statuses to GitHub when readyForMerge transitions to true (PAN-536)\n  if (readyForMerge && !status.readyForMerge && updated.prUrl) {\n    (async () => {\n      try {\n        const { isGitHubAppConfigured, reportCommitStatus } = await import('./github-app.js');\n        if (!isGitHubAppConfigured()) return;\n        const prMatch = updated.prUrl!.match(/github\\.com\\/([^/]+)\\/([^/]+)\\/pull/);\n        if (!prMatch) return;\n        const [, owner, repo] = prMatch;\n        // Get HEAD SHA of the PR branch\n        const { exec } = await import('child_process');\n        const { promisify } = await import('util');\n        const execAsync = promisify(exec);\n        const { stdout } = await execAsync(\n          `gh pr view ${updated.prUrl!.match(/\\/pull\\/(\\d+)/)?.[1]} --json headRefOid --jq .headRefOid`,\n          { encoding: 'utf-8', timeout: 10000 }\n        );\n        const sha = stdout.trim();\n        if (sha) {\n          // overdeck/review is honest here — review just transitioned to readyForMerge.\n          // The overdeck/tests status is posted separately at the actual test-completion\n          // site (verification-runner success, test-agent POST in workspaces routes) so it\n          // accurately reflects which commit was tested.\n          await reportCommitStatus(owner, repo, sha, 'success', 'overdeck/review', 'Review passed');\n          console.log(`[review-status] Reported overdeck/review for ${issueId} (${sha.slice(0, 8)})`);\n        }\n      } catch (err: any) {\n        console.warn(`[review-status] Failed to report commit status: ${err.message}`);\n      }\n    })();\n  }\n\n  // PAN-1908 + PAN-1988: the journal record is the SOURCE OF TRUTH for the verdict; the\n  // SQLite row is a rebuildable cache. Write the journal FIRST — it is workspace-local\n  // (<workspace>/.pan/records/<issue>.json), so it succeeds even for a sandboxed agent\n  // (codex workspace-write) that cannot reach ~/.overdeck. Fire-and-forget; queueAutoCommit\n  // debounces bursts into one commit. Do NOT mirror into canonical vBRIEF specs (PAN-1124).\n  updateIssueRecordForReviewStatusSync(issueId, updated);\n\n  // The DB cache write is best-effort. A sandboxed agent's write throws SQLITE_READONLY, but\n  // the verdict is already durable in the journal above, and the host reconciles the cache on\n  // read (getReviewStatusSync's journal→DB reconcile). Tolerating this is what removes the\n  // sandbox-escalation \"smoke and mirrors\" — the agent never has to break out of its jail to\n  // record a verdict.\n  try {\n    dbUpsert(updated);\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    console.warn(`[review-status] DB cache write skipped for ${issueId} (${msg}); journal holds the verdict, host will reconcile on read.`);\n  }\n\n  notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n\n  // Emit activity log entries for meaningful pipeline state transitions.\n  // Each transition produces one entry so the ActivityPanel shows live pipeline progress.\n  if (update.verificationStatus && update.verificationStatus !== status.verificationStatus) {\n    const vMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      running:  { level: 'info',    msg: `${issueId} — verification running`, tts: `${issueId} verification running` },\n      passed:   { level: 'success', msg: `${issueId} — verification passed`, tts: `${issueId} verification passed` },\n      failed:   { level: 'error',   msg: `${issueId} — verification failed`, tts: `${issueId} verification failed` },\n      skipped:  { level: 'info',    msg: `${issueId} — verification skipped`, tts: `${issueId} verification skipped`, ttsPriority: 2 },\n    };\n    const entry = vMap[update.verificationStatus];\n    if (entry) emitActivityEntrySync({ source: 'cloister', level: entry.level, message: entry.msg, details: update.verificationNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'cloister',\n      eventType: `verificationStatus.${update.verificationStatus}`,\n    });\n  }\n  if (update.reviewStatus && update.reviewStatus !== status.reviewStatus) {\n    let reviewMsg = `${issueId} — review started`;\n    if (update.reviewStatus === 'reviewing') {\n      const retryCount = updated.reviewRetryCount ?? 0;\n      reviewMsg = retryCount > 0\n        ? `${issueId} — review re-dispatched (retry ${retryCount})`\n        : `${issueId} — review started`;\n    }\n    const rMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string }> = {\n      reviewing: { level: 'info',    msg: reviewMsg, tts: `${issueId} review started` },\n      passed:    { level: 'success', msg: `${issueId} — review passed`, tts: `${issueId} review passed` },\n      failed:    { level: 'error',   msg: `${issueId} — review failed`, tts: `${issueId} review failed` },\n      blocked:   { level: 'warn',    msg: `${issueId} — review blocked (changes requested)`, tts: `${issueId} review blocked` },\n    };\n    const entry = rMap[update.reviewStatus];\n    if (entry) emitActivityEntrySync({ source: 'review', level: entry.level, message: entry.msg, details: update.reviewNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.level === 'error' ? 0 : 1,\n      issueId,\n      source: 'review-specialist',\n      eventType: `reviewStatus.${update.reviewStatus}`,\n    });\n  }\n  if (update.testStatus && update.testStatus !== status.testStatus) {\n    const tMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      testing:         { level: 'info',    msg: `${issueId} — tests running`, tts: `${issueId} tests running`, ttsPriority: 2 },\n      passed:          { level: 'success', msg: `${issueId} — tests passed`, tts: `${issueId} tests passed` },\n      failed:          { level: 'error',   msg: `${issueId} — tests failed`, tts: `${issueId} tests failed` },\n      skipped:         { level: 'info',    msg: `${issueId} — tests skipped`, tts: `${issueId} tests skipped`, ttsPriority: 2 },\n      dispatch_failed: { level: 'warn',    msg: `${issueId} — test dispatch failed`, tts: `${issueId} test dispatch failed`, ttsPriority: 1 },\n    };\n    const entry = tMap[update.testStatus];\n    if (entry) emitActivityEntrySync({ source: 'test', level: entry.level, message: entry.msg, details: update.testNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'test-specialist',\n      eventType: `testStatus.${update.testStatus}`,\n    });\n  }\n  if (update.mergeStatus && update.mergeStatus !== status.mergeStatus) {\n    const mMap: Record<string, { level: 'info' | 'warn' | 'error' | 'success'; msg: string; tts?: string; ttsPriority?: number }> = {\n      queued:    { level: 'info',    msg: `${issueId} — queued for merge`, tts: `${issueId} queued for merge`, ttsPriority: 2 },\n      merging:   { level: 'info',    msg: `${issueId} — merge in progress`, tts: `${issueId} merge in progress`, ttsPriority: 2 },\n      verifying: { level: 'info',    msg: `${issueId} — post-merge verification`, tts: `${issueId} post-merge verification running`, ttsPriority: 2 },\n      merged:    { level: 'success', msg: `${issueId} — merged`, tts: `${issueId} merged to main` },\n      failed:    { level: 'error',   msg: `${issueId} — merge failed`, tts: `${issueId} merge failed` },\n    };\n    const entry = mMap[update.mergeStatus];\n    if (entry) emitActivityEntrySync({ source: 'ship', level: entry.level, message: entry.msg, details: update.mergeNotes, issueId });\n    if (entry?.tts) emitActivityTtsSync({\n      utterance: entry.tts,\n      priority: entry.ttsPriority ?? (entry.level === 'error' ? 0 : 1),\n      issueId,\n      source: 'merge-agent',\n      eventType: `mergeStatus.${update.mergeStatus}`,\n    });\n  }\n  if (update.readyForMerge === true && !status.readyForMerge) {\n    emitActivityEntrySync({ source: 'cloister', level: 'success', message: `${issueId} — ready for merge`, issueId });\n    emitActivityTtsSync({\n      utterance: `${issueId} ready for merge`,\n      priority: 1,\n      issueId,\n      source: 'cloister',\n      eventType: 'readyForMerge',\n    });\n  }\n\n  // Reactive Cloister owns review→test and test→ship scheduling. setReviewStatus\n  // emits the lifecycle event here so API and direct-import callers share one path.\n  // PAN-1862 (FR-14): reviewStatus 'skipped' (review mode none) advances the\n  // lifecycle exactly like an approved review — same event, same downstream.\n  if (\n    (update.reviewStatus === 'passed' || update.reviewStatus === 'skipped') &&\n    status.reviewStatus !== 'passed' && status.reviewStatus !== 'skipped' &&\n    updated.testStatus === 'pending'\n  ) {\n    const canSkipTests =\n      updated.reviewedAtCommit &&\n      updated.lastVerifiedCommit &&\n      updated.reviewedAtCommit === updated.lastVerifiedCommit;\n\n    if (canSkipTests) {\n      console.log(`[review-status] Skipping test role for ${issueId} — no code drift since verification (HEAD=${updated.reviewedAtCommit!.slice(0, 8)})`);\n      emitActivityEntrySync({ source: 'cloister', level: 'info', message: `${issueId} — tests skipped (no code change since verification gate)`, issueId });\n      setReviewStatusSync(issueId, {\n        testStatus: 'passed',\n        testNotes: 'Skipped: no code changed since pre-review verification gate',\n        verificationStatus: 'passed',\n        verificationNotes: 'Pre-review verification already covered the reviewed commit',\n      });\n      void emitReactiveLifecycleEvent('test.passed', issueId);\n    } else {\n      void emitReactiveLifecycleEvent('review.approved', issueId);\n    }\n  }\n\n  if (update.testStatus === 'passed' && status.testStatus !== 'passed') {\n    void emitReactiveLifecycleEvent('test.passed', issueId);\n  }\n\n  // PAN-1988: test FAILED → hand it straight back to the work agent (host-side). The dead-end\n  // requeue that does this is deacon-only, so without this a failure strands until the (possibly\n  // frozen) deacon nudges. Fires once per transition into failed — both the agent's direct POST and\n  // the host's .pan/test/result.json recovery flow through this same transition.\n  if (\n    (update.testStatus === 'failed' || update.testStatus === 'dispatch_failed') &&\n    status.testStatus !== 'failed' && status.testStatus !== 'dispatch_failed'\n  ) {\n    void deliverTestFailureToWorkAgentHostSide(issueId, updated);\n  }\n\n  return updated;\n}\n\nexport function resetPipelineVerdictsForWorkStartSync(issueId: string): ReviewStatus | null {\n  const status = getReviewStatusSync(issueId);\n  if (!status) return null;\n\n  const isPending =\n    status.reviewStatus === 'pending' &&\n    status.testStatus === 'pending' &&\n    (status.mergeStatus === undefined || status.mergeStatus === 'pending') &&\n    (status.verificationStatus === undefined || status.verificationStatus === 'pending') &&\n    !status.readyForMerge &&\n    status.autoRequeueCount === 0 &&\n    status.verificationCycleCount === 0 &&\n    status.reviewRetryCount === 0 &&\n    status.testRetryCount === 0 &&\n    status.mergeRetryCount === 0 &&\n    status.recoveryStartedAt === undefined &&\n    status.reviewedAtCommit === undefined &&\n    status.lastVerifiedCommit === undefined;\n\n  if (isPending) return null;\n\n  return setReviewStatusSync(issueId, {\n    reviewStatus: 'pending',\n    testStatus: 'pending',\n    mergeStatus: 'pending',\n    reviewNotes: undefined,\n    testNotes: undefined,\n    mergeNotes: undefined,\n    readyForMerge: false,\n    autoRequeueCount: 0,\n    verificationStatus: 'pending',\n    verificationNotes: undefined,\n    verificationCycleCount: 0,\n    stuck: false,\n    stuckReason: undefined,\n    stuckAt: undefined,\n    stuckDetails: undefined,\n    reviewRetryCount: 0,\n    testRetryCount: 0,\n    mergeRetryCount: 0,\n    recoveryStartedAt: undefined,\n    reviewedAtCommit: undefined,\n    lastVerifiedCommit: undefined,\n  });\n}\n\n/**\n * PAN-1988 — deliver review feedback to the work agent from the HOST when a blocked/failed\n * verdict is reconciled from the journal. Dynamic import to avoid a static import cycle\n * (review-verdict-feedback → review-status). Fully best-effort: in a sandboxed agent process the\n * delivery fails (host paths blocked) and is swallowed; the host process performs the real\n * notification. Never throws into the read path.\n */\nasync function deliverReviewVerdictFeedbackHostSide(issueId: string, status: ReviewStatus): Promise<void> {\n  try {\n    const { deliverReviewVerdictFeedback } = await import('./cloister/review-verdict-feedback.js');\n    const result = await Effect.runPromise(deliverReviewVerdictFeedback({\n      issueId,\n      verdict: status.reviewStatus === 'failed' ? 'failed' : 'blocked',\n      notes: status.reviewNotes,\n      prUrl: status.prUrl,\n    }));\n    if (result.agentMessageSent) {\n      console.log(`[review-status] delivered review feedback to the work agent for ${issueId} (host-side)`);\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side review feedback delivery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\n// PAN-1988 auto-heal — throttle so the reconcile-on-read does not spam dispatch attempts for a\n// genuinely-gated issue (one whose dispatch keeps deferring on a merge conflict). Date.now() is\n// available in normal lib code (only workflow scripts forbid it).\nconst reviewDispatchAttemptAt = new Map<string, number>();\nconst REVIEW_AUTO_DISPATCH_THROTTLE_MS = 30_000;\n\n/**\n * PAN-1988 auto-heal — the host re-dispatches review from the durable journal intent. When the\n * work agent's `pan done` recorded a `reviewRequestedAt` but the reactive dashboard trigger never\n * landed (dashboard reloading, dropped event, frozen deacon), the next status read notices the\n * un-serviced request and dispatches review here. {@link needsReviewDispatch} gates it,\n * spawnReviewRoleForIssue is idempotent (it skips a live review), and a 30s throttle bounds retries\n * for a gated issue. Fire-and-forget; in a sandboxed reader the dispatch is a best-effort no-op.\n */\nfunction maybeAutoDispatchReviewHostSide(issueId: string, status: ReviewStatus): void {\n  if (!needsReviewDispatch({\n    reviewRequestedAt: status.reviewRequestedAt,\n    reviewSpawnedAt: status.reviewSpawnedAt,\n    reviewStatus: status.reviewStatus,\n    mergeStatus: status.mergeStatus,\n  })) return;\n  const last = reviewDispatchAttemptAt.get(issueId) ?? 0;\n  if (Date.now() - last < REVIEW_AUTO_DISPATCH_THROTTLE_MS) return;\n  reviewDispatchAttemptAt.set(issueId, Date.now());\n  void dispatchReviewHostSide(issueId, status.prUrl);\n}\n\nasync function dispatchReviewHostSide(issueId: string, prUrl?: string): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return;\n    const { existsSync } = await import('fs');\n    const workspace = join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`);\n    if (!existsSync(workspace)) return;\n    let branch = `feature/${issueId.toLowerCase()}`;\n    try {\n      const { promisify } = await import('util');\n      const { exec } = await import('child_process');\n      const execAsync = promisify(exec);\n      const { stdout } = await execAsync('git branch --show-current', { cwd: workspace, encoding: 'utf-8' });\n      branch = stdout.trim() || branch;\n    } catch { /* non-fatal — fall back to the conventional branch name */ }\n    const { spawnReviewRoleForIssue } = await import('./cloister/review-agent.js');\n    const result = await Effect.runPromise(spawnReviewRoleForIssue({ issueId, workspace, branch, ...(prUrl ? { prUrl } : {}) }));\n    if (result.success) {\n      console.log(`[review-status] auto-dispatched review for ${issueId} from durable journal intent (host-side)`);\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side review auto-dispatch for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\n// ── PAN-1988 host-owned TEST-stage recovery ───────────────────────────────────\n// The test stage had NO reactive path. Recovering an unsignaled verdict (the agent — often Haiku —\n// writes .pan/test/result.json then idles without POSTing) AND the test=failed → work-agent requeue\n// both lived ONLY in deacon patrols (checkCompletedButUnsignaledTests + the dead-end requeue). With\n// the deacon frozen, a finished test agent stranded the issue at test=testing forever. The host now\n// (a) recovers the written verdict on read and (b) hands a failure back to the work agent — symmetric\n// with the review stage. Recovery only acts on a WRITTEN artifact; it never guesses pass/fail.\nconst testVerdictRecoveryAt = new Map<string, number>();\nconst TEST_VERDICT_RECOVERY_THROTTLE_MS = 60_000;\n\nfunction maybeRecoverTestVerdictHostSide(issueId: string, status: ReviewStatus): void {\n  if (status.reviewStatus !== 'passed') return; // tests only run after review approves\n  if (status.mergeStatus === 'merged' || status.readyForMerge) return;\n  // Only act while the verdict is UNSIGNALED — once test resolves (passed/failed) the write path\n  // owns the transition (test.passed → ship; test failed → deliverTestFailureToWorkAgentHostSide).\n  if (status.testStatus !== 'testing' && status.testStatus !== 'pending' && status.testStatus !== 'dispatch_failed') return;\n  const last = testVerdictRecoveryAt.get(issueId) ?? 0;\n  if (Date.now() - last < TEST_VERDICT_RECOVERY_THROTTLE_MS) return;\n  testVerdictRecoveryAt.set(issueId, Date.now());\n  void recoverTestVerdictHostSide(issueId);\n}\n\nasync function recoverTestVerdictHostSide(issueId: string): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    if (!resolved) return;\n    const { existsSync } = await import('fs');\n    const workspace = join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`);\n    if (!existsSync(workspace)) return;\n    const { readTestVerdictArtifact } = await import('./cloister/test-verdict.js');\n    const artifact = readTestVerdictArtifact(workspace);\n    if (!artifact) return; // no WRITTEN verdict — never guess; the agent/deacon owns the write-nudge\n    // Record the recovered verdict. setReviewStatusSync emits test.passed (→ ship) for a pass and\n    // fires the work-agent handoff (below) on a fail, via its test-transition logic.\n    setReviewStatusSync(issueId, {\n      testStatus: artifact.status,\n      testNotes: artifact.notes ?? `Recovered from .pan/test/result.json (${artifact.status}) — the test agent wrote the verdict but never signaled`,\n    });\n    console.log(`[review-status] recovered unsignaled test verdict for ${issueId}: ${artifact.status} (host-side, from .pan/test/result.json)`);\n  } catch (err) {\n    console.warn(`[review-status] host-side test verdict recovery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\nasync function deliverTestFailureToWorkAgentHostSide(issueId: string, status: ReviewStatus): Promise<void> {\n  try {\n    const { resolveProjectFromIssueSync } = await import('./projects.js');\n    const resolved = resolveProjectFromIssueSync(issueId);\n    const workspace = resolved ? join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`) : undefined;\n    const notes = status.testNotes; let feedbackPath: string | undefined;\n    try {\n      const { writeFeedbackFile } = await import('./cloister/feedback-writer.js');\n      const r = await Effect.runPromise(writeFeedbackFile({\n        issueId, workspacePath: workspace, specialist: 'test-agent', outcome: 'failed', summary: `Tests FAILED for ${issueId}`,\n        markdownBody: `# Test failure\\n\\n${notes ?? 'The test gate reported failures. See .pan/test/result.json and re-run the project test suite.'}\\n\\n## Required\\nFix the failing tests, commit and push, then re-run \\`pan done ${issueId}\\`.`,\n      }));\n      if (r.success) feedbackPath = r.filePath;\n    } catch { /* non-fatal — the message below still carries the summary */ }\n\n    const message = `SPECIALIST FEEDBACK: test-agent reported FAILED for ${issueId}.\\n\\n${feedbackPath ? `MUST READ: ${feedbackPath}\\n\\n` : ''}${notes ? `${notes.slice(0, 400)}\\n\\n` : ''}Fix the failing tests, commit and push, then re-run pan done ${issueId}. Do NOT stop at the prompt.`;\n    const { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } = await import('./cloister/feedback-target.js');\n    const target = await resolveIssueFeedbackTarget(issueId);\n    if ('agentId' in target) {\n      const { messageAgent } = await import('./agents.js');\n      await messageAgent(target.agentId, message);\n      console.log(`[review-status] delivered test failure to ${target.agentId} for ${issueId} (host-side)`);\n    } else {\n      await surfaceIssueFeedbackNeedsYou(issueId, target.reason, { specialist: 'test-agent', feedbackPath });\n    }\n  } catch (err) {\n    console.warn(`[review-status] host-side test-failure delivery for ${issueId} did not complete (non-fatal): ${err instanceof Error ? err.message : String(err)}`);\n  }\n}\n\nexport function getReviewStatusSync(issueId: string): ReviewStatus | null {\n  const dbStatus = getReviewStatusFromDbSync(issueId);\n  const journal = readJournalStatusSync(issueId);\n\n  // No journal record → the DB is all we have. (Pre-PAN-1908 issues, or issues whose\n  // workspace/record hasn't been created yet.)\n  if (!journal) return dbStatus ?? null;\n\n  if ((journal.durable as { closedOut?: boolean }).closedOut === true) {\n    // PAN-2054: closed-out journal records are terminal; stale active DB rows are cache residue.\n    try {\n      dbDelete(issueId);\n    } catch {\n      // Read-only DB (a sandboxed reader) — the host clears residue when it reads. Non-fatal.\n    }\n    return null;\n  }\n\n  // PAN-1988 — journal is the source of truth; DB is a rebuildable cache. If the journal is\n  // NEWER than the DB row, an agent recorded its verdict to the journal but the DB write\n  // lagged or was blocked (a sandboxed agent that can't write ~/.overdeck). Reconcile the\n  // cache from the journal. Whatever process reads next performs this; the host (non-sandboxed)\n  // write succeeds, a sandboxed reader's reconcile is a best-effort no-op.\n  const journalNewer = !dbStatus || (dbStatus.updatedAt ?? '') < journal.updatedAt;\n  if (journalNewer) {\n    const merged: ReviewStatus = {\n      ...(dbStatus ?? {\n        issueId,\n        reviewStatus: 'pending' as const,\n        testStatus: 'pending' as const,\n        updatedAt: journal.updatedAt,\n        readyForMerge: false,\n      }),\n    };\n    // Apply ONLY the journal fields that are actually present. The journal carries the durable\n    // verdict; DB-only/ephemeral fields it does not store (stuck/stuckReason, transient counters)\n    // must NOT be clobbered with `undefined`. This keeps every reconcile a strict overlay.\n    for (const [key, value] of Object.entries(journal.durable)) {\n      if (value !== undefined) (merged as unknown as Record<string, unknown>)[key] = value;\n    }\n    merged.issueId = issueId;\n    merged.updatedAt = journal.updatedAt;\n    const hasBlockers = (merged.blockerReasons?.length ?? 0) > 0;\n    merged.readyForMerge = hasBlockers ? false : reviewGatesPassedSync(merged);\n    const reconciled = normalizeReviewStatusSync(merged);\n    try {\n      dbUpsert(reconciled);\n    } catch {\n      // Read-only DB (a sandboxed reader) — the host reconciles when it reads. Non-fatal.\n    }\n\n    // PAN-1988 — host-owned review FEEDBACK delivery. A sandboxed review agent records its\n    // verdict to the journal but cannot notify the work agent (the work agent's tmux/mail and\n    // the network are outside its jail — \"side effects failed due restricted network / readonly\n    // host paths\"). When the HOST reconciles a NEW blocked/failed review verdict, it delivers the\n    // feedback here. Fires exactly once per verdict: the reconcile only runs while the journal is\n    // newer than the DB, and the dbUpsert above makes the DB catch up, so the next read does not\n    // re-fire. In a sandboxed agent process the delivery is a best-effort no-op (host paths\n    // blocked); the host's read performs the real delivery. Fire-and-forget.\n    const wasBlocked = dbStatus?.reviewStatus === 'blocked' || dbStatus?.reviewStatus === 'failed';\n    const nowBlocked = reconciled.reviewStatus === 'blocked' || reconciled.reviewStatus === 'failed';\n    if (nowBlocked && !wasBlocked) {\n      void deliverReviewVerdictFeedbackHostSide(issueId, reconciled);\n    }\n\n    // PAN-1988 — host-owned review→test and test→ship HANDOFF. setReviewStatusSync emits these\n    // lifecycle events on the write path, but a sandboxed agent (codex/pi) records its verdict to\n    // the JOURNAL only and the host picks it up HERE via reconcile — which bypasses\n    // setReviewStatusSync. Without re-emitting, a passed verdict strands at review=passed/test=pending\n    // (and a passed test strands before ship) until the deacon patrol nudges it — and the deacon may\n    // be frozen. Re-emit the same transitions the write path would, so reactive Cloister advances.\n    const wasReviewPassed = dbStatus?.reviewStatus === 'passed';\n    const nowReviewPassed = reconciled.reviewStatus === 'passed';\n    if (nowReviewPassed && !wasReviewPassed && reconciled.testStatus === 'pending') {\n      console.log(`[review-status] reconcile: review.approved for ${issueId} (host-owned handoff — sandboxed agent verdict from journal)`);\n      void emitReactiveLifecycleEvent('review.approved', issueId);\n    }\n    const wasTestPassed = dbStatus?.testStatus === 'passed';\n    const nowTestPassed = reconciled.testStatus === 'passed';\n    if (nowTestPassed && !wasTestPassed) {\n      console.log(`[review-status] reconcile: test.passed for ${issueId} (host-owned handoff — sandboxed agent verdict from journal)`);\n      void emitReactiveLifecycleEvent('test.passed', issueId);\n    }\n\n    maybeAutoDispatchReviewHostSide(issueId, reconciled);\n    maybeRecoverTestVerdictHostSide(issueId, reconciled);\n    return reconciled;\n  }\n\n  // DB is current → overlay the feedback TEXT from the journal (it is no longer stored in the\n  // DB; the row holds only the queryable status flags).\n  const enriched = enrichReviewNotesFromRecordSync(issueId, dbStatus!);\n  maybeAutoDispatchReviewHostSide(issueId, enriched);\n  maybeRecoverTestVerdictHostSide(issueId, enriched);\n  return enriched;\n}\n\n/**\n * On server startup, clear any mergeStatus stuck at 'merging'.\n * Pending merge operations are in-memory only — they don't survive a restart.\n * Any 'merging' status after boot is definitionally stuck (PAN-490).\n */\nexport function clearStuckMergeStatuses(): void {\n  const statuses = loadReviewStatuses();\n  // Don't clear 'queued' — the SQLite merge queue handles that (PAN-632).\n  // Only clear truly stuck transient states.\n  const stuck = Object.values(statuses).filter(s =>\n    s.mergeStatus === 'merging' || s.mergeStatus === 'verifying'\n  );\n  if (stuck.length === 0) return;\n  console.log(`[review-status] Clearing ${stuck.length} stuck merge status(es) on startup (merging/verifying)`);\n  for (const s of stuck) {\n    // Reset to pending so MERGE button reappears — the in-memory queue was lost on restart.\n    // Preserve readyForMerge if review+test both passed — the merge just needs to be retried.\n    const shouldBeReady =\n      s.reviewStatus === 'passed' &&\n      (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n      verificationSatisfied(s) &&\n      (s.uatStatus === undefined || s.uatStatus === 'passed');\n    setReviewStatusSync(s.issueId, {\n      mergeStatus: 'pending',\n      ...(shouldBeReady ? { readyForMerge: true } : {}),\n    });\n  }\n}\n\n/**\n * On server startup, fix any issues where review+test both passed and\n * verificationStatus is not 'failed', but readyForMerge is stuck at false.\n *\n * This happens when:\n * 1. A merge attempt was made (merging → verifying)\n * 2. The server restarted while verifying — clearStuckMergeStatuses reset mergeStatus to 'pending'\n * 3. At restart time, verificationStatus was 'pending' (reset by the request-review cycle)\n * 4. The old verificationSatisfied check blocked readyForMerge because of 'pending' status\n *\n * With verificationSatisfied now only blocking on 'failed', these issues should be\n * re-evaluated and readyForMerge restored so they reappear on the Awaiting Merge page.\n */\nexport function fixStuckReadyForMerge(): void {\n  const statuses = loadReviewStatuses();\n  const stuck = Object.values(statuses).filter(s =>\n    s.readyForMerge === false &&\n    s.reviewStatus === 'passed' &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    verificationSatisfied(s) &&\n    // Only fix 'pending'/'queued' merge states — not 'failed' ones.\n    // 'failed' means the merge actually attempted and broke; those need human review,\n    // not automatic restoration. 'merged' is done. Only pending/queued are stuck-but-valid.\n    (s.mergeStatus === 'pending' || s.mergeStatus === 'queued' || s.mergeStatus === undefined || s.mergeStatus === null) &&\n    (s.uatStatus === undefined || s.uatStatus === 'passed')\n  );\n  if (stuck.length === 0) return;\n  console.log(`[review-status] Restoring readyForMerge for ${stuck.length} issue(s) with passed review+test`);\n  for (const s of stuck) {\n    console.log(`[review-status] Restoring readyForMerge=true for ${s.issueId} (verif=${s.verificationStatus}, merge=${s.mergeStatus})`);\n    setReviewStatusSync(s.issueId, { readyForMerge: true });\n  }\n}\n\n/**\n * PAN-869: On server startup, fix any issues where reviewStatus was incorrectly\n * set to 'failed' due to the old COMMENTED → 'failed' mapping bug.\n *\n * This identifies records where:\n * - reviewStatus = 'failed'\n * - testStatus = 'passed' (CI green, so review wasn't genuinely bad)\n * - mergeStatus is not terminal ('merged', 'failed')\n * - readyForMerge = false\n * - The last review history entry is type='review', status='failed'\n *\n * The old reviewResultToReviewStatus() mapped COMMENTED (regardless of success)\n * to 'failed', so the history stores 'failed' for old COMMENTED reviews.\n * We use testStatus='passed' as the signal that this was a successful review\n * (CI was green), distinguishing it from genuinely failed reviews.\n */\nexport function fixStuckCommentedReviews(): void {\n  const statuses = loadReviewStatuses();\n  const candidates = Object.values(statuses).filter(s =>\n    s.reviewStatus === 'failed' &&\n    (s.testStatus === 'passed' || s.testStatus === 'skipped') &&\n    s.mergeStatus !== 'merged' &&\n    s.mergeStatus !== 'failed' &&\n    s.readyForMerge === false &&\n    s.verificationStatus !== 'failed'\n  );\n\n  if (candidates.length === 0) return;\n\n  const toFix: string[] = [];\n  for (const s of candidates) {\n    // Check if the last review history entry is 'failed' (the old COMMENTED mapping\n    // stored 'failed' in history). testStatus='passed' signals CI was green,\n    // so this was a successful review incorrectly stored as 'failed'.\n    const lastReviewEntry = [...(s.history || [])]\n      .reverse()\n      .find(h => h.type === 'review');\n    if (lastReviewEntry?.status === 'failed') {\n      toFix.push(s.issueId);\n    }\n  }\n\n  if (toFix.length === 0) return;\n  console.log(`[review-status] Restoring reviewStatus='passed' for ${toFix.length} issue(s) with COMMENTED reviews (PAN-869 backfill)`);\n  for (const issueId of toFix) {\n    console.log(`[review-status] Restoring reviewStatus='passed' for ${issueId}`);\n    // reviewStatus='passed' will trigger readyForMerge recomputation in setReviewStatus\n    setReviewStatusSync(issueId, { reviewStatus: 'passed' });\n  }\n}\n\nexport function clearReviewStatus(issueId: string): void {\n  try {\n    dbDelete(issueId);\n  } catch (err) {\n    console.error('[review-status] SQLite delete failed:', err);\n  }\n}\n\n// ============== Stuck state helpers (PAN-653) ==============\n\n/**\n * Mark a workspace as stuck with a reason and optional JSON details.\n * Persists across dashboard restarts. Deacon will skip stuck workspaces.\n *\n * @param issueId - Issue ID (e.g. \"PAN-653\")\n * @param reason  - Short reason code (e.g. \"main_diverged\")\n * @param details - Optional structured details (e.g. {localSha, remoteSha})\n */\n// PAN-1988: `stuck` is EPHEMERAL runtime state (set when patrol detects a wedged workspace),\n// NOT a durable verdict — projectPipeline deliberately does not journal it, and it is rebuilt\n// from runtime on a cache rebuild. So markWorkspaceStuck/clearWorkspaceStuck write the DB cache\n// directly and do not go through the journal door. The getReviewStatusSync journal→DB reconcile\n// preserves it (a strict overlay that never clobbers DB-only fields the journal doesn't carry).\nexport function markWorkspaceStuck(\n  issueId: string,\n  reason: string,\n  details?: Record<string, unknown>,\n): void {\n  try {\n    dbMarkStuck(issueId, reason, details);\n    console.log(`[review-status] Marked ${issueId} as stuck: ${reason}`);\n    const updated = getReviewStatusSync(issueId);\n    if (updated) notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n  } catch (err) {\n    console.error(`[review-status] Failed to mark ${issueId} as stuck:`, err);\n  }\n}\n\n/**\n * Clear the stuck flag for a workspace.\n * Called when the human clicks \"Unstick\" in the dashboard.\n * Re-enables Deacon patrol for this workspace.\n */\nexport function clearWorkspaceStuck(issueId: string): void {\n  try {\n    dbClearStuck(issueId);\n    console.log(`[review-status] Cleared stuck state for ${issueId}`);\n    const updated = getReviewStatusSync(issueId);\n    if (updated) notifyPipelineSync({ type: 'status_changed', issueId, status: updated });\n  } catch (err) {\n    console.error(`[review-status] Failed to clear stuck state for ${issueId}:`, err);\n  }\n}\n\n/**\n * Set or clear the operator-requested deacon-ignore flag. When set, Deacon\n * patrol skips the issue entirely on every cycle. Distinct from `stuck`, which\n * is a system-set failure marker that also suppresses patrol.\n */\nexport function setDeaconIgnored(\n  issueId: string,\n  ignored: boolean,\n  reason?: string,\n): void {\n  try {\n    // PAN-1988: route through the single write door. deaconIgnored is a DURABLE field that\n    // projectPipeline journals — a DB-only write (the old dbSetDeaconIgnored) lands in the\n    // cache but not the journal, so it vanishes on a cache rebuild. setReviewStatusSync writes\n    // both (and emits the status_changed event), keeping DB and journal in sync.\n    setReviewStatusSync(issueId, {\n      deaconIgnored: ignored,\n      deaconIgnoredAt: ignored ? new Date().toISOString() : undefined,\n      deaconIgnoredReason: ignored ? reason : undefined,\n    });\n    console.log(`[review-status] deaconIgnored=${ignored} for ${issueId}${reason ? ` (${reason})` : ''}`);\n  } catch (err) {\n    console.error(`[review-status] Failed to set deaconIgnored for ${issueId}:`, err);\n  }\n}\n\n/**\n * PAN-1691: set the per-issue auto-merge routing key and broadcast the change.\n * `autoMerge === null` clears it back to the project default. Emits a\n * status_changed pipeline event so open dashboards reflect the toggle live.\n */\nexport function setAutoMerge(issueId: string, autoMerge: boolean | null): void {\n  try {\n    // PAN-1988: route through the single write door. autoMerge is a DURABLE field journaled by\n    // projectPipeline; a DB-only write would be lost on cache rebuild. `null` clears it back to\n    // the project default (stored as undefined). setReviewStatusSync writes DB + journal and\n    // emits the status_changed event.\n    setReviewStatusSync(issueId, { autoMerge: autoMerge === null ? undefined : autoMerge });\n    console.log(`[review-status] autoMerge=${autoMerge === null ? 'default' : autoMerge} for ${issueId}`);\n  } catch (err) {\n    console.error(`[review-status] Failed to set autoMerge for ${issueId}:`, err);\n  }\n}\n\n/** Tagged error for review-status Effect variants. */\nexport class ReviewStatusError extends Data.TaggedError('ReviewStatusError')<{\n  readonly issueId: string;\n  readonly operation: string;\n  readonly message: string;\n  readonly cause?: unknown;\n}> {}\n\nexport const setReviewStatus = (\n  issueId: string,\n  update: Partial<ReviewStatus>,\n  existing?: ReviewStatus,\n): Effect.Effect<ReviewStatus, ReviewStatusError> =>\n  Effect.tryPromise({\n    try: () => new Promise<ReviewStatus>((resolve, reject) => {\n      setImmediate(() => {\n        try {\n          resolve(setReviewStatusSync(issueId, update, existing));\n        } catch (err) {\n          reject(err);\n        }\n      });\n    }),\n    catch: (cause) =>\n      new ReviewStatusError({\n        issueId,\n        operation: 'setReviewStatus',\n        message: cause instanceof Error ? cause.message : String(cause),\n        cause,\n      }),\n  });\n\nexport const getReviewStatus = (\n  issueId: string,\n): Effect.Effect<ReviewStatus | null, ReviewStatusError> =>\n  Effect.try({\n    try: () => getReviewStatusFromDbSync(issueId),\n    catch: (cause) =>\n      new ReviewStatusError({\n        issueId,\n        operation: 'getReviewStatus',\n        message: cause instanceof Error ? cause.message : String(cause),\n        cause,\n      }),\n  });\n"],"mappings":";;;;;;;;;;;;AA0BA,SAAgB,8BAA8B,IAA2B;AACvE,UAAS;;AAGX,SAAgB,sBAAkE;AAChF,KAAI,CAAC,OAAQ,QAAO;AACpB,KAAI;AACF,SAAO,QAAQ;SACT;AACN,SAAO;;;;;AAXP,UAAiC;;;;ACjBrC,SAAgB,qCAAqC,SAAiB,QAA4B;AAO3F,SAAQ,QAAQ,0BAA0B,SAAS,OAAO,CAAC,CAC7D,MAAM,WAAW;AAGhB,MAAI,WAAW,MAAO,mCAAkC,SAAS,OAAO;GACxE,CACD,YAAY,kCAAkC,SAAS,OAAO,CAAC;;;AAIpE,SAAS,iBAAiB,SAAgD;AACxE,KAAI;EACF,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU,QAAO;EACtB,MAAM,UAAU,eAAe,SAAS,WAAW;AACnD,MAAI,CAAC,QAAS,QAAO;AAErB,SADe,oBAAoB,SAAS,QAC/B,EAAE,YAAY;SACrB;AACN,SAAO;;;;;;;;;;AAWX,SAAgB,gCAAgC,SAAiB,QAAoC;CACnG,MAAM,WAAW,iBAAiB,QAAQ;AAC1C,KAAI,CAAC,SAAU,QAAO;AACtB,QAAO;EACL,GAAG;EACH,aAAa,SAAS,eAAe,OAAO;EAC5C,WAAW,SAAS,aAAa,OAAO;EACxC,YAAY,SAAS,cAAc,OAAO;EAC1C,cAAc,SAAS,gBAAgB,OAAO;EAC9C,mBAAmB,SAAS,qBAAqB,OAAO;EACxD,YAAY,SAAS,cAAc,OAAO;EAG1C,mBAAmB,SAAS,qBAAqB,OAAO;EACzD;;;;;;;AAUH,SAAS,cAAc,GAAgD;AACrE,QAAO;EACL,cAAc,EAAE;EAChB,YAAY,EAAE;EACd,aAAc,EAAE,eAA+C,KAAA;EAC/D,eAAgB,EAAE,iBAAmD,KAAA;EACrE,oBAAqB,EAAE,sBAA6D,KAAA;EACpF,aAAa,EAAE;EACf,WAAW,EAAE;EACb,YAAY,EAAE;EACd,cAAc,EAAE;EAChB,mBAAmB,EAAE;EACrB,YAAY,EAAE;EACd,OAAO,EAAE;EACT,UAAU,EAAE;EACZ,WAAW,EAAE;EACb,kBAAkB,EAAE;EACpB,oBAAoB,EAAE;EACtB,mBAAmB,EAAE;EACrB,kBAAkB,EAAE;EACpB,WAAW,EAAE;EACb,eAAe,EAAE;EACjB,iBAAiB,EAAE;EACnB,qBAAqB,EAAE;EACvB,WAAW,EAAE;EACb,aAAa,EAAE;EAChB;;AAcH,SAAgB,6BAA6B,SAAgC;AAC3E,KAAI;EACF,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU,QAAO;AACtB,SAAOA,OACL,SAAS,aACT,cACA,WAAW,QAAQ,aAAa,IAChC,aACA,wBACD;SACK;AACN,SAAO;;;AAIX,SAAS,kCAAkC,SAAiB,QAA4B;AACtF,KAAI;EACF,MAAM,OAAO,6BAA6B,QAAQ;AAClD,MAAI,CAAC,MAAM;AACT,WAAQ,MACN,sDAAsD,QAAQ,kEAC/D;AACD;;AAEF,YAAUC,UAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;EAC7C,MAAM,UAAoC;GACxC,SAAS,QAAQ,aAAa;GAC9B,WAAW,OAAO,8BAAa,IAAI,MAAM,EAAC,aAAa;GACvD,UAAU,cAAc,OAA4C;GACrE;AACD,gBAAc,MAAM,KAAK,UAAU,SAAS,MAAM,EAAE,CAAC;AACrD,UAAQ,KACN,4CAA4C,QAAQ,mDAAmD,KAAK,yDAC7G;UACM,KAAK;AACZ,UAAQ,MACN,2DAA2D,QAAQ,qBAAsB,IAAc,UACxG;;;AAIL,SAAS,iCAAiC,SAAkD;AAC1F,KAAI;EACF,MAAM,OAAO,6BAA6B,QAAQ;AAClD,MAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,CAAE,QAAO;EACvC,MAAM,SAAS,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACtD,MAAI,CAAC,QAAQ,aAAa,CAAC,OAAO,SAAU,QAAO;AACnD,SAAO;SACD;AACN,SAAO;;;;;;;;;;;;;;;;;;;AAoBX,SAAgB,sBACd,SAC4D;CAC5D,MAAM,IAAI,iBAAiB,QAAQ;CACnC,MAAM,WAAW,iCAAiC,QAAQ;CAC1D,MAAM,gBAAgB,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,MAAM,SAAS;AAC1E,KAAI,YAAY,eAAe;EAC7B,MAAM,OAAO,IAAI,cAAc,EAAE,GAAG,EAAE;EACtC,MAAM,UAAU,OAAO,YACrB,OAAO,QAAQ,SAAS,SAAS,CAAC,QAAQ,GAAG,WAAW,UAAU,KAAA,EAAU,CAC7E;AACD,SAAO;GAAE,WAAW,SAAS;GAAW,SAAS;IAAE,GAAG;IAAM,GAAG;IAAS;GAAE;;AAE5E,KAAI,CAAC,EAAG,QAAO;AACf,QAAO;EAAE,WAAW,EAAE;EAAW,SAAS,cAAc,EAAE;EAAE;;;eA7LiC;cACpC;gBACkB;;;;;;;;;;;;;;;;;;;;;;ACa7E,SAAgB,oBAAoB,QAKxB;AACV,KAAI,CAAC,OAAO,kBAAmB,QAAO;AACtC,KAAI,OAAO,iBAAiB,YAAa,QAAO;AAChD,KAAI,OAAO,gBAAgB,SAAU,QAAO;AAC5C,QAAO,CAAC,OAAO,mBAAmB,OAAO,oBAAoB,OAAO;;;;;ACPtE,SAAS,2BAA2B,MAAyC,SAAuB;AAClG,KAAI;AACF,qBAAmB;GAAE;GAAM;GAAS,CAAC;UAC9B,OAAO;AACd,UAAQ,KAAK,kCAAkC,KAAK,OAAO,QAAQ,IAAI,MAAM;;;AA4GjF,SAAgB,sBAAsB,QAA2D;AAM/F,QAAO,OAAO,uBAAuB;;;;;;;AAQvC,SAAgB,sBACd,GACS;AACT,SACG,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,eAClD,EAAE,eAAe,YAAY,EAAE,eAAe,cAC/C,sBAAsB,EAAE,KACvB,EAAE,cAAc,KAAA,KAAa,EAAE,cAAc,cAC7C,EAAE,gBAAgB,aACjB,EAAE,gBAAgB,YAClB,EAAE,gBAAgB,KAAA,KAClB,EAAE,gBAAgB;;;;;;;;;;;AAkBxB,SAAgB,qBACd,QACsB;AACtB,KAAI,CAAC,OAAQ,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAoB;AACnE,KAAI,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,UAC9D,QAAO;EAAE,UAAU;EAAO,QAAQ,aAAa,OAAO;EAAgB;AAExE,KAAI,OAAO,eAAe,YAAY,OAAO,eAAe,UAC1D,QAAO;EAAE,UAAU;EAAO,QAAQ,WAAW,OAAO;EAAc;AAEpE,KAAI,CAAC,sBAAsB,OAAO,CAAE,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAuB;AAC7F,KAAI,OAAO,gBAAgB,SAAU,QAAO;EAAE,UAAU;EAAO,QAAQ;EAAkB;AACzF,QAAO,EAAE,UAAU,MAAM;;AAQ3B,SAAgB,mBAAmB,WAAW,qBAAmD;AAI/F,KAAI,aAAa,oBACf,OAAM,IAAI,MACR,qIAED;AAEH,QAAO,4BAA4B;;AAGrC,SAAgB,4BAA4B,UAAkD;AAC5F,QAAO,wBAAwB,SAAS;;AAoE1C,SAAgB,oBACd,SACA,QACA,UACc;AAGd,KAAI,QAAQ,KAAK,QAAQ,EAAE;AACzB,UAAQ,KACN,kEAAkE,QAAQ,wDACrB,QAAQ,IAC9D;AACD,SAAO;GACL;GACA,cAAc;GACd,YAAY;GACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,eAAe;GAChB;;AAGH,WAAU,QAAQ,aAAa;CAW/B,MAAM,SAAuB,YAAY,oBAAoB,QAAQ,IAAI;EACvE;EACA,cAAc;EACd,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC,eAAe;EAChB;AAKD,KAAI,OAAO,iBAAiB,eAAe,OAAO,iBAAiB,YAAY,OAAO,gBAAgB,KAAA,GAAW;AAC/G,UAAQ,KAAK,sFAAsF,QAAQ,gCAAgC;AAC3I,qBAAmB;GAAE,MAAM;GAAkB;GAAiB;GAAwB,CAAC;AACvF,SAAO;;AAST,KACE,OAAO,iBAAiB,gBACvB,OAAO,iBAAiB,aAAa,OAAO,iBAAiB,aAC9D,OAAO,oBAAoB,KAAA,GAC3B;AACA,UAAQ,KACN,yDAAyD,QAAQ,iBAC7D,OAAO,aAAa,+HAEzB;AACD,qBAAmB;GAAE,MAAM;GAAkB;GAAiB;GAAwB,CAAC;AACvF,SAAO;;AAKT,MACG,OAAO,eAAe,qBAAqB,OAAO,eAAe,aAClE,OAAO,eAAe,UACtB;AACA,UAAQ,KAAK,qEAAqE,OAAO,WAAW,QAAQ,UAAU;AACtH,SAAO,OAAO;AACd,SAAO,OAAO;;CAGhB,MAAM,SAAS;EAAE,GAAG;EAAQ,GAAG;EAAQ;AAKvC,KAAI,OAAO,oBAAoB,OAAO,iBACpC,QAAO,mBAAmB;EAAE,GAAG,OAAO;EAAkB,GAAG,OAAO;EAAkB;CAItF,MAAM,UAAU,CAAC,GAAI,OAAO,WAAW,EAAE,CAAE;CAC3C,MAAM,uBAAM,IAAI,MAAM,EAAC,aAAa;AACpC,KAAI,OAAO,gBAAgB,OAAO,iBAAiB,OAAO,aACxD,SAAQ,KAAK;EAAE,MAAM;EAAU,QAAQ,OAAO;EAAc,WAAW;EAAK,OAAO,OAAO;EAAa,CAAC;AAE1G,KAAI,OAAO,cAAc,OAAO,eAAe,OAAO,WACpD,SAAQ,KAAK;EAAE,MAAM;EAAQ,QAAQ,OAAO;EAAY,WAAW;EAAK,OAAO,OAAO;EAAW,CAAC;AAEpG,KAAI,OAAO,aAAa,OAAO,cAAc,OAAO,UAClD,SAAQ,KAAK;EAAE,MAAM;EAAO,QAAQ,OAAO;EAAW,WAAW;EAAK,OAAO,OAAO;EAAU,CAAC;AAEjG,KAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,YACtD,SAAQ,KAAK;EAAE,MAAM;EAAS,QAAQ,OAAO;EAAa,WAAW;EAAK,CAAC;AAE7E,QAAO,QAAQ,SAAS,GAAI,SAAQ,OAAO;CAgB3C,MAAM,iBADe,OAAO,gBAAgB,UAAU,KAAK,IAEvD,QACC,OAAO,kBAAkB,KAAA,IACtB,OAAO,gBACP,sBAAsB,OAAO;CAErC,MAAM,UAAwB,0BAA0B;EACtD,GAAG;EACH;EACA,WAAW;EACX;EACA;EACD,CAAC;AAGF,KAAI,iBAAiB,CAAC,OAAO,iBAAiB,QAAQ,MACpD,EAAC,YAAY;AACX,MAAI;GACF,MAAM,EAAE,uBAAuB,uBAAuB,MAAM,OAAO;AACnE,OAAI,CAAC,uBAAuB,CAAE;GAC9B,MAAM,UAAU,QAAQ,MAAO,MAAM,sCAAsC;AAC3E,OAAI,CAAC,QAAS;GACd,MAAM,GAAG,OAAO,QAAQ;GAExB,MAAM,EAAE,SAAS,MAAM,OAAO;GAC9B,MAAM,EAAE,cAAc,MAAM,OAAO;GAEnC,MAAM,EAAE,WAAW,MADD,UAAU,KACM,CAChC,cAAc,QAAQ,MAAO,MAAM,gBAAgB,GAAG,GAAG,sCACzD;IAAE,UAAU;IAAS,SAAS;IAAO,CACtC;GACD,MAAM,MAAM,OAAO,MAAM;AACzB,OAAI,KAAK;AAKP,UAAM,mBAAmB,OAAO,MAAM,KAAK,WAAW,mBAAmB,gBAAgB;AACzF,YAAQ,IAAI,gDAAgD,QAAQ,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG;;WAEtF,KAAU;AACjB,WAAQ,KAAK,mDAAmD,IAAI,UAAU;;KAE9E;AAQN,sCAAqC,SAAS,QAAQ;AAOtD,KAAI;AACF,yBAAS,QAAQ;UACV,KAAK;EACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,UAAQ,KAAK,8CAA8C,QAAQ,IAAI,IAAI,4DAA4D;;AAGzI,oBAAmB;EAAE,MAAM;EAAkB;EAAS,QAAQ;EAAS,CAAC;AAIxE,KAAI,OAAO,sBAAsB,OAAO,uBAAuB,OAAO,oBAAoB;EAOxF,MAAM,QAAQ;GALZ,SAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB;GAChH,QAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAyB,KAAK,GAAG,QAAQ;IAAuB;GAC9G,QAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAyB,KAAK,GAAG,QAAQ;IAAuB;GAC9G,SAAU;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB,aAAa;IAAG;GAEhH,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAY,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAmB;GAAS,CAAC;AAC5I,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,sBAAsB,OAAO;GACzC,CAAC;;AAEJ,KAAI,OAAO,gBAAgB,OAAO,iBAAiB,OAAO,cAAc;EACtE,IAAI,YAAY,GAAG,QAAQ;AAC3B,MAAI,OAAO,iBAAiB,aAAa;GACvC,MAAM,aAAa,QAAQ,oBAAoB;AAC/C,eAAY,aAAa,IACrB,GAAG,QAAQ,iCAAiC,WAAW,KACvD,GAAG,QAAQ;;EAQjB,MAAM,QAAQ;GALZ,WAAW;IAAE,OAAO;IAAW,KAAK;IAAW,KAAK,GAAG,QAAQ;IAAkB;GACjF,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB;GACnG,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB;GACnG,SAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAwC,KAAK,GAAG,QAAQ;IAAkB;GAEzG,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAU,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAa;GAAS,CAAC;AACpI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,UAAU,UAAU,IAAI;GACxC;GACA,QAAQ;GACR,WAAW,gBAAgB,OAAO;GACnC,CAAC;;AAEJ,KAAI,OAAO,cAAc,OAAO,eAAe,OAAO,YAAY;EAQhE,MAAM,QAAQ;GANZ,SAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB,aAAa;IAAG;GACzH,QAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GACvG,QAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GACvG,SAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAmB,KAAK,GAAG,QAAQ;IAAiB,aAAa;IAAG;GACzH,iBAAiB;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA0B,KAAK,GAAG,QAAQ;IAAwB,aAAa;IAAG;GAEvH,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAQ,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAW;GAAS,CAAC;AAChI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,cAAc,OAAO;GACjC,CAAC;;AAEJ,KAAI,OAAO,eAAe,OAAO,gBAAgB,OAAO,aAAa;EAQnE,MAAM,QAAQ;GANZ,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAsB,KAAK,GAAG,QAAQ;IAAoB,aAAa;IAAG;GACzH,SAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAuB,KAAK,GAAG,QAAQ;IAAqB,aAAa;IAAG;GAC3H,WAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAA6B,KAAK,GAAG,QAAQ;IAAmC,aAAa;IAAG;GAC/I,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAY,KAAK,GAAG,QAAQ;IAAkB;GAC7F,QAAW;IAAE,OAAO;IAAW,KAAK,GAAG,QAAQ;IAAkB,KAAK,GAAG,QAAQ;IAAgB;GAEjF,CAAC,OAAO;AAC1B,MAAI,MAAO,uBAAsB;GAAE,QAAQ;GAAQ,OAAO,MAAM;GAAO,SAAS,MAAM;GAAK,SAAS,OAAO;GAAY;GAAS,CAAC;AACjI,MAAI,OAAO,IAAK,qBAAoB;GAClC,WAAW,MAAM;GACjB,UAAU,MAAM,gBAAgB,MAAM,UAAU,UAAU,IAAI;GAC9D;GACA,QAAQ;GACR,WAAW,eAAe,OAAO;GAClC,CAAC;;AAEJ,KAAI,OAAO,kBAAkB,QAAQ,CAAC,OAAO,eAAe;AAC1D,wBAAsB;GAAE,QAAQ;GAAY,OAAO;GAAW,SAAS,GAAG,QAAQ;GAAqB;GAAS,CAAC;AACjH,sBAAoB;GAClB,WAAW,GAAG,QAAQ;GACtB,UAAU;GACV;GACA,QAAQ;GACR,WAAW;GACZ,CAAC;;AAOJ,MACG,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,cAC7D,OAAO,iBAAiB,YAAY,OAAO,iBAAiB,aAC5D,QAAQ,eAAe,UAOvB,KAJE,QAAQ,oBACR,QAAQ,sBACR,QAAQ,qBAAqB,QAAQ,oBAErB;AAChB,UAAQ,IAAI,0CAA0C,QAAQ,4CAA4C,QAAQ,iBAAkB,MAAM,GAAG,EAAE,CAAC,GAAG;AACnJ,wBAAsB;GAAE,QAAQ;GAAY,OAAO;GAAQ,SAAS,GAAG,QAAQ;GAA4D;GAAS,CAAC;AACrJ,sBAAoB,SAAS;GAC3B,YAAY;GACZ,WAAW;GACX,oBAAoB;GACpB,mBAAmB;GACpB,CAAC;AACG,6BAA2B,eAAe,QAAQ;OAElD,4BAA2B,mBAAmB,QAAQ;AAI/D,KAAI,OAAO,eAAe,YAAY,OAAO,eAAe,SACrD,4BAA2B,eAAe,QAAQ;AAOzD,MACG,OAAO,eAAe,YAAY,OAAO,eAAe,sBACzD,OAAO,eAAe,YAAY,OAAO,eAAe,kBAEnD,uCAAsC,SAAS,QAAQ;AAG9D,QAAO;;AAGT,SAAgB,sCAAsC,SAAsC;CAC1F,MAAM,SAAS,oBAAoB,QAAQ;AAC3C,KAAI,CAAC,OAAQ,QAAO;AAiBpB,KAdE,OAAO,iBAAiB,aACxB,OAAO,eAAe,cACrB,OAAO,gBAAgB,KAAA,KAAa,OAAO,gBAAgB,eAC3D,OAAO,uBAAuB,KAAA,KAAa,OAAO,uBAAuB,cAC1E,CAAC,OAAO,iBACR,OAAO,qBAAqB,KAC5B,OAAO,2BAA2B,KAClC,OAAO,qBAAqB,KAC5B,OAAO,mBAAmB,KAC1B,OAAO,oBAAoB,KAC3B,OAAO,sBAAsB,KAAA,KAC7B,OAAO,qBAAqB,KAAA,KAC5B,OAAO,uBAAuB,KAAA,EAEjB,QAAO;AAEtB,QAAO,oBAAoB,SAAS;EAClC,cAAc;EACd,YAAY;EACZ,aAAa;EACb,aAAa,KAAA;EACb,WAAW,KAAA;EACX,YAAY,KAAA;EACZ,eAAe;EACf,kBAAkB;EAClB,oBAAoB;EACpB,mBAAmB,KAAA;EACnB,wBAAwB;EACxB,OAAO;EACP,aAAa,KAAA;EACb,SAAS,KAAA;EACT,cAAc,KAAA;EACd,kBAAkB;EAClB,gBAAgB;EAChB,iBAAiB;EACjB,mBAAmB,KAAA;EACnB,kBAAkB,KAAA;EAClB,oBAAoB,KAAA;EACrB,CAAC;;;;;;;;;AAUJ,eAAe,qCAAqC,SAAiB,QAAqC;AACxG,KAAI;EACF,MAAM,EAAE,iCAAiC,MAAM,OAAO;AAOtD,OAAI,MANiB,OAAO,WAAW,6BAA6B;GAClE;GACA,SAAS,OAAO,iBAAiB,WAAW,WAAW;GACvD,OAAO,OAAO;GACd,OAAO,OAAO;GACf,CAAC,CAAC,EACQ,iBACT,SAAQ,IAAI,mEAAmE,QAAQ,cAAc;UAEhG,KAAK;AACZ,UAAQ,KAAK,0DAA0D,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;;;;;;;;;AAkBvK,SAAS,gCAAgC,SAAiB,QAA4B;AACpF,KAAI,CAAC,oBAAoB;EACvB,mBAAmB,OAAO;EAC1B,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,aAAa,OAAO;EACrB,CAAC,CAAE;CACJ,MAAM,OAAO,wBAAwB,IAAI,QAAQ,IAAI;AACrD,KAAI,KAAK,KAAK,GAAG,OAAO,iCAAkC;AAC1D,yBAAwB,IAAI,SAAS,KAAK,KAAK,CAAC;AAC3C,wBAAuB,SAAS,OAAO,MAAM;;AAGpD,eAAe,uBAAuB,SAAiB,OAA+B;AACpF,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU;EACf,MAAM,EAAE,eAAe,MAAM,OAAO;EACpC,MAAM,YAAY,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG;AAC9F,MAAI,CAAC,WAAW,UAAU,CAAE;EAC5B,IAAI,SAAS,WAAW,QAAQ,aAAa;AAC7C,MAAI;GACF,MAAM,EAAE,cAAc,MAAM,OAAO;GACnC,MAAM,EAAE,SAAS,MAAM,OAAO;GAE9B,MAAM,EAAE,WAAW,MADD,UAAU,KACM,CAAC,6BAA6B;IAAE,KAAK;IAAW,UAAU;IAAS,CAAC;AACtG,YAAS,OAAO,MAAM,IAAI;UACpB;EACR,MAAM,EAAE,4BAA4B,MAAM,OAAO;AAEjD,OAAI,MADiB,OAAO,WAAW,wBAAwB;GAAE;GAAS;GAAW;GAAQ,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAAG,CAAC,CAAC,EACjH,QACT,SAAQ,IAAI,8CAA8C,QAAQ,0CAA0C;UAEvG,KAAK;AACZ,UAAQ,KAAK,sDAAsD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAcnK,SAAS,gCAAgC,SAAiB,QAA4B;AACpF,KAAI,OAAO,iBAAiB,SAAU;AACtC,KAAI,OAAO,gBAAgB,YAAY,OAAO,cAAe;AAG7D,KAAI,OAAO,eAAe,aAAa,OAAO,eAAe,aAAa,OAAO,eAAe,kBAAmB;CACnH,MAAM,OAAO,sBAAsB,IAAI,QAAQ,IAAI;AACnD,KAAI,KAAK,KAAK,GAAG,OAAO,kCAAmC;AAC3D,uBAAsB,IAAI,SAAS,KAAK,KAAK,CAAC;AACzC,4BAA2B,QAAQ;;AAG1C,eAAe,2BAA2B,SAAgC;AACxE,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;AACrD,MAAI,CAAC,SAAU;EACf,MAAM,EAAE,eAAe,MAAM,OAAO;EACpC,MAAM,YAAY,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG;AAC9F,MAAI,CAAC,WAAW,UAAU,CAAE;EAC5B,MAAM,EAAE,4BAA4B,MAAM,OAAO;EACjD,MAAM,WAAW,wBAAwB,UAAU;AACnD,MAAI,CAAC,SAAU;AAGf,sBAAoB,SAAS;GAC3B,YAAY,SAAS;GACrB,WAAW,SAAS,SAAS,yCAAyC,SAAS,OAAO;GACvF,CAAC;AACF,UAAQ,IAAI,yDAAyD,QAAQ,IAAI,SAAS,OAAO,0CAA0C;UACpI,KAAK;AACZ,UAAQ,KAAK,uDAAuD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAIpK,eAAe,sCAAsC,SAAiB,QAAqC;AACzG,KAAI;EACF,MAAM,EAAE,gCAAgC,MAAM,OAAO;EACrD,MAAM,WAAW,4BAA4B,QAAQ;EACrD,MAAM,YAAY,WAAW,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG,GAAG,KAAA;EAC5G,MAAM,QAAQ,OAAO;EAAW,IAAI;AACpC,MAAI;GACF,MAAM,EAAE,sBAAsB,MAAM,OAAO;GAC3C,MAAM,IAAI,MAAM,OAAO,WAAW,kBAAkB;IAClD;IAAS,eAAe;IAAW,YAAY;IAAc,SAAS;IAAU,SAAS,oBAAoB;IAC7G,cAAc,qBAAqB,SAAS,gGAAgG,kFAAkF,QAAQ;IACvO,CAAC,CAAC;AACH,OAAI,EAAE,QAAS,gBAAe,EAAE;UAC1B;EAER,MAAM,UAAU,uDAAuD,QAAQ,OAAO,eAAe,cAAc,aAAa,QAAQ,KAAK,QAAQ,GAAG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,+DAA+D,QAAQ;EAC9P,MAAM,EAAE,4BAA4B,iCAAiC,MAAM,OAAO;EAClF,MAAM,SAAS,MAAM,2BAA2B,QAAQ;AACxD,MAAI,aAAa,QAAQ;GACvB,MAAM,EAAE,iBAAiB,MAAM,OAAO;AACtC,SAAM,aAAa,OAAO,SAAS,QAAQ;AAC3C,WAAQ,IAAI,6CAA6C,OAAO,QAAQ,OAAO,QAAQ,cAAc;QAErG,OAAM,6BAA6B,SAAS,OAAO,QAAQ;GAAE,YAAY;GAAc;GAAc,CAAC;UAEjG,KAAK;AACZ,UAAQ,KAAK,uDAAuD,QAAQ,iCAAiC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;;AAIpK,SAAgB,oBAAoB,SAAsC;CACxE,MAAM,WAAW,0BAA0B,QAAQ;CACnD,MAAM,UAAU,sBAAsB,QAAQ;AAI9C,KAAI,CAAC,QAAS,QAAO,YAAY;AAEjC,KAAK,QAAQ,QAAoC,cAAc,MAAM;AAEnE,MAAI;AACF,sBAAS,QAAQ;UACX;AAGR,SAAO;;AAST,KADqB,CAAC,aAAa,SAAS,aAAa,MAAM,QAAQ,WACrD;EAChB,MAAM,SAAuB,EAC3B,GAAI,YAAY;GACd;GACA,cAAc;GACd,YAAY;GACZ,WAAW,QAAQ;GACnB,eAAe;GAChB,EACF;AAID,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,QAAQ,CACxD,KAAI,UAAU,KAAA,EAAY,QAA8C,OAAO;AAEjF,SAAO,UAAU;AACjB,SAAO,YAAY,QAAQ;AAE3B,SAAO,iBADc,OAAO,gBAAgB,UAAU,KAAK,IACtB,QAAQ,sBAAsB,OAAO;EAC1E,MAAM,aAAa,0BAA0B,OAAO;AACpD,MAAI;AACF,0BAAS,WAAW;UACd;EAYR,MAAM,aAAa,UAAU,iBAAiB,aAAa,UAAU,iBAAiB;AAEtF,OADmB,WAAW,iBAAiB,aAAa,WAAW,iBAAiB,aACtE,CAAC,WACZ,sCAAqC,SAAS,WAAW;EAShE,MAAM,kBAAkB,UAAU,iBAAiB;AAEnD,MADwB,WAAW,iBAAiB,YAC7B,CAAC,mBAAmB,WAAW,eAAe,WAAW;AAC9E,WAAQ,IAAI,kDAAkD,QAAQ,8DAA8D;AAC/H,8BAA2B,mBAAmB,QAAQ;;EAE7D,MAAM,gBAAgB,UAAU,eAAe;AAE/C,MADsB,WAAW,eAAe,YAC3B,CAAC,eAAe;AACnC,WAAQ,IAAI,8CAA8C,QAAQ,8DAA8D;AAC3H,8BAA2B,eAAe,QAAQ;;AAGzD,kCAAgC,SAAS,WAAW;AACpD,kCAAgC,SAAS,WAAW;AACpD,SAAO;;CAKT,MAAM,WAAW,gCAAgC,SAAS,SAAU;AACpE,iCAAgC,SAAS,SAAS;AAClD,iCAAgC,SAAS,SAAS;AAClD,QAAO;;AAqHT,SAAgB,kBAAkB,SAAuB;AACvD,KAAI;AACF,qBAAS,QAAQ;UACV,KAAK;AACZ,UAAQ,MAAM,yCAAyC,IAAI;;;;;;;;;;;AAmB/D,SAAgB,mBACd,SACA,QACA,SACM;AACN,KAAI;AACF,uBAAY,SAAS,QAAQ,QAAQ;AACrC,UAAQ,IAAI,0BAA0B,QAAQ,aAAa,SAAS;EACpE,MAAM,UAAU,oBAAoB,QAAQ;AAC5C,MAAI,QAAS,oBAAmB;GAAE,MAAM;GAAkB;GAAS,QAAQ;GAAS,CAAC;UAC9E,KAAK;AACZ,UAAQ,MAAM,kCAAkC,QAAQ,aAAa,IAAI;;;;;;;;AAyB7E,SAAgB,iBACd,SACA,SACA,QACM;AACN,KAAI;AAKF,sBAAoB,SAAS;GAC3B,eAAe;GACf,iBAAiB,2BAAU,IAAI,MAAM,EAAC,aAAa,GAAG,KAAA;GACtD,qBAAqB,UAAU,SAAS,KAAA;GACzC,CAAC;AACF,UAAQ,IAAI,iCAAiC,QAAQ,OAAO,UAAU,SAAS,KAAK,OAAO,KAAK,KAAK;UAC9F,KAAK;AACZ,UAAQ,MAAM,mDAAmD,QAAQ,IAAI,IAAI;;;;;yBA3jCzB;uBACsB;0BASxC;4BACyC;+BACV;iCAC8E;gCACnF;AA8KpE,qCAAoC,4BAA4B,CAAC;AAE3D,uBAAsB,KAAK,SAAS,EAAE,aAAa,qBAAqB;AAiexE,2CAA0B,IAAI,KAAqB;AACnD,oCAAmC;AAwDnC,yCAAwB,IAAI,KAAqB;AACjD,qCAAoC;AAyX7B,qBAAb,cAAuC,KAAK,YAAY,oBAAoB,CAKzE;AAEU,oBACX,SACA,QACA,aAEA,OAAO,WAAW;EAChB,WAAW,IAAI,SAAuB,SAAS,WAAW;AACxD,sBAAmB;AACjB,QAAI;AACF,aAAQ,oBAAoB,SAAS,QAAQ,SAAS,CAAC;aAChD,KAAK;AACZ,YAAO,IAAI;;KAEb;IACF;EACF,QAAQ,UACN,IAAI,kBAAkB;GACpB;GACA,WAAW;GACX,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D;GACD,CAAC;EACL,CAAC;AAES,oBACX,YAEA,OAAO,IAAI;EACT,WAAW,0BAA0B,QAAQ;EAC7C,QAAQ,UACN,IAAI,kBAAkB;GACpB;GACA,WAAW;GACX,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAC/D;GACD,CAAC;EACL,CAAC"}

package/dist/{review-status-BbNVlXh1.js → review-status-Bo-EFVKh.js}

@@ -1,3 +1,3 @@
-import { a as init_review_status, c as markWorkspaceStuck, i as getReviewStatusSync, m as setReviewStatusSync, n as clearReviewStatus, o as loadReviewStatuses } from "./review-status-iJwfEoNX.js";
+import { a as init_review_status, c as markWorkspaceStuck, i as getReviewStatusSync, m as setReviewStatusSync, n as clearReviewStatus, o as loadReviewStatuses } from "./review-status-B_XXomV0.js";
 init_review_status();
 export { clearReviewStatus, getReviewStatusSync, loadReviewStatuses, markWorkspaceStuck, setReviewStatusSync };

package/dist/{review-verdict-feedback-BGPw3z1X.js → review-verdict-feedback-CXHkoiKZ.js}

@@ -1,3 +1,3 @@
-import { n as init_review_verdict_feedback, t as deliverReviewVerdictFeedback } from "./review-verdict-feedback-CCZ05atV.js";
+import { n as init_review_verdict_feedback, t as deliverReviewVerdictFeedback } from "./review-verdict-feedback-DGV13LDb.js";
 init_review_verdict_feedback();
 export { deliverReviewVerdictFeedback };

package/dist/{review-verdict-feedback-CCZ05atV.js → review-verdict-feedback-DGV13LDb.js}

@@ -1,10 +1,10 @@
 import { t as __esmMin } from "./chunk-ruWRV7i3.js";
 import { A as resolveProjectFromIssueSync, v as init_projects } from "./projects-D2nMJ9C4.js";
-import { E as messageAgent, t as init_agents } from "./agents-CQHK0CSA.js";
+import { E as messageAgent, t as init_agents } from "./agents-CgVr77Qq.js";
 import { a as PAN_DIRNAME, f as init_types } from "./types-BjVYEbAq.js";
-import { a as init_review_status, i as getReviewStatusSync } from "./review-status-iJwfEoNX.js";
+import { a as init_review_status, i as getReviewStatusSync } from "./review-status-B_XXomV0.js";
 import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-DgN4CnWY.js";
-import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-DTGAhFkM.js";
+import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-BsKN4Tr_.js";
 import { Effect } from "effect";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
@@ -144,4 +144,4 @@ var init_review_verdict_feedback = __esmMin((() => {
 //#endregion
 export { init_review_verdict_feedback as n, postPrComment as r, deliverReviewVerdictFeedback as t };
 
-//# sourceMappingURL=review-verdict-feedback-CCZ05atV.js.map
+//# sourceMappingURL=review-verdict-feedback-DGV13LDb.js.map

package/dist/{review-verdict-feedback-CCZ05atV.js.map → review-verdict-feedback-DGV13LDb.js.map}

@@ -1 +1 @@
-{"version":3,"file":"review-verdict-feedback-CCZ05atV.js","names":[],"sources":["../src/lib/cloister/review-verdict-feedback.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { existsSync } from 'node:fs';\nimport { readdir, readFile, stat } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { promisify } from 'node:util';\n\nimport { Effect } from 'effect';\n\nimport { messageAgent } from '../agents.js';\nimport { resolveProjectFromIssueSync } from '../projects.js';\nimport { getReviewStatusSync } from '../review-status.js';\nimport { PAN_DIRNAME } from '../pan-dir/types.js';\nimport { writeFeedbackFile } from './feedback-writer.js';\nimport { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } from './feedback-target.js';\n\nconst execFileAsync = promisify(execFile);\n\ntype ReviewVerdict = 'blocked' | 'failed';\n\nexport interface DeliverReviewVerdictFeedbackOptions {\n  issueId: string;\n  verdict: ReviewVerdict;\n  notes?: string;\n  workspacePath?: string;\n  prUrl?: string;\n  slotItemId?: string;\n}\n\nexport interface DeliverReviewVerdictFeedbackResult {\n  feedbackPath?: string;\n  synthesisPath?: string;\n  prCommentPosted: boolean;\n  agentMessageSent: boolean;\n}\n\nasync function findLatestSynthesis(workspacePath: string): Promise<{ path: string; body: string } | null> {\n  const reviewRoot = join(workspacePath, PAN_DIRNAME, 'review');\n  if (!existsSync(reviewRoot)) return null;\n\n  let latest: { path: string; mtimeMs: number } | null = null;\n  const entries = await readdir(reviewRoot, { withFileTypes: true });\n  for (const entry of entries) {\n    if (!entry.isDirectory()) continue;\n    const synthesisPath = join(reviewRoot, entry.name, 'synthesis.md');\n    if (!existsSync(synthesisPath)) continue;\n    const fileStat = await stat(synthesisPath);\n    if (!latest || fileStat.mtimeMs > latest.mtimeMs) {\n      latest = { path: synthesisPath, mtimeMs: fileStat.mtimeMs };\n    }\n  }\n\n  if (!latest) return null;\n  return { path: latest.path, body: await readFile(latest.path, 'utf-8') };\n}\n\nfunction parseGitHubPrUrl(prUrl: string | undefined): { owner: string; repo: string; number: string } | null {\n  const match = prUrl?.match(/github\\.com\\/([^/]+)\\/([^/]+)\\/pull\\/(\\d+)/);\n  if (!match) return null;\n  return { owner: match[1]!, repo: match[2]!, number: match[3]! };\n}\n\nfunction buildReviewFeedbackBody(opts: {\n  issueId: string;\n  verdict: ReviewVerdict;\n  notes?: string;\n  synthesisBody?: string;\n  synthesisPath?: string;\n}): string {\n  const verdictLabel = opts.verdict === 'blocked' ? 'CHANGES REQUESTED' : 'FAILED';\n  const synthesis = opts.synthesisBody?.trim() || opts.notes?.trim() || 'Review did not provide a synthesis summary.';\n  const sourceLine = opts.synthesisPath ? `\\n\\nSource: ${opts.synthesisPath}` : '';\n\n  return `# Review ${verdictLabel} for ${opts.issueId}\\n\\n${synthesis}${sourceLine}\\n\\n## Required action\\n\\nFix every blocking review finding, commit the fixes, then re-request review with:\\n\\n\\`pan review request ${opts.issueId} -m \"Fixed review issues\"\\``;\n}\n\n// PAN-2518: the PR-comment POST is advisory — the review verdict is already\n// durable (setReviewStatusSync + writeFeedbackFile) before we get here. A `gh\n// api` call that STALLS (not rejects) on a network hiccup must never block the\n// caller: `pan admin specialists done` is shelled out from the review agent's\n// own session, so a hung POST leaves that agent waiting on a never-returning\n// command and the issue stalls in-review. A bounded timeout turns a stall into\n// a rejection the caller already swallows.\nconst PR_COMMENT_TIMEOUT_MS = 15_000;\n\nexport async function postPrComment(prUrl: string | undefined, body: string): Promise<boolean> {\n  const parsed = parseGitHubPrUrl(prUrl);\n  if (!parsed) return false;\n\n  await execFileAsync(\n    'gh',\n    ['api', `repos/${parsed.owner}/${parsed.repo}/issues/${parsed.number}/comments`, '--field', `body=${body}`],\n    { encoding: 'utf-8', timeout: PR_COMMENT_TIMEOUT_MS, killSignal: 'SIGKILL' },\n  );\n  return true;\n}\n\nasync function deliverReviewVerdictFeedbackPromise(\n  opts: DeliverReviewVerdictFeedbackOptions,\n): Promise<DeliverReviewVerdictFeedbackResult> {\n  const issueId = opts.issueId.toUpperCase();\n  const resolved = resolveProjectFromIssueSync(issueId);\n  const workspacePath = opts.workspacePath\n    ?? (resolved ? join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`) : undefined);\n  const existingStatus = getReviewStatusSync(issueId);\n  const synthesis = workspacePath && existsSync(workspacePath)\n    ? await findLatestSynthesis(workspacePath)\n    : null;\n  const markdownBody = buildReviewFeedbackBody({\n    issueId,\n    verdict: opts.verdict,\n    notes: opts.notes,\n    synthesisBody: synthesis?.body,\n    synthesisPath: synthesis?.path,\n  });\n\n  let prCommentPosted = false;\n  try {\n    prCommentPosted = await postPrComment(opts.prUrl ?? existingStatus?.prUrl, markdownBody);\n  } catch (err) {\n    console.warn(`[review-verdict-feedback] Failed to post PR comment for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);\n  }\n\n  const fileResult = await Effect.runPromise(writeFeedbackFile({\n    issueId,\n    workspacePath,\n    specialist: 'review-agent',\n    outcome: opts.verdict === 'blocked' ? 'changes-requested' : 'failed',\n    summary: `Review ${opts.verdict.toUpperCase()}: ${(opts.notes ?? synthesis?.body ?? '').slice(0, 80)}`,\n    markdownBody,\n  }));\n\n  let agentMessageSent = false;\n  if (fileResult.success && fileResult.filePath) {\n    const message = `SPECIALIST FEEDBACK: review-agent reported ${opts.verdict.toUpperCase()} for ${issueId}.\\n\\nMUST READ: ${fileResult.filePath}\\n\\nUse your Read tool to open this file, read every line, then fix ALL review findings. Do NOT stop at the prompt.`;\n    try {\n      // PAN-2209/PAN-2461: resolveIssueFeedbackTarget's built-in resurrection ladder\n      // (unpause pipeline pauses, clear troubled gates, resume stopped agents) handles\n      // every non-live target; no local reviver override.\n      const target = await resolveIssueFeedbackTarget(issueId, {\n        itemId: opts.slotItemId,\n      });\n      if ('agentId' in target) {\n        try {\n          await messageAgent(target.agentId, message);\n          agentMessageSent = true;\n        } catch (err) {\n          // PAN-2228: a resolved-but-unreachable target is a real delivery failure,\n          // not a shrug. Surface it as needs-you so the stall is visible instead of\n          // the issue silently parking with an unread feedback file.\n          const reason = err instanceof Error ? err.message : String(err);\n          console.warn(`[review-verdict-feedback] Could not message ${target.agentId}; feedback file remains available: ${reason}`);\n          try {\n            await surfaceIssueFeedbackNeedsYou(issueId, `Feedback delivery to ${target.agentId} failed: ${reason}`, {\n              specialist: 'review-agent',\n              feedbackPath: fileResult.filePath,\n              slotItemId: opts.slotItemId,\n            });\n          } catch { /* best-effort — the warn above still records the failure */ }\n        }\n      } else {\n        try {\n          await surfaceIssueFeedbackNeedsYou(issueId, target.reason, {\n            specialist: 'review-agent',\n            feedbackPath: fileResult.filePath,\n            slotItemId: opts.slotItemId,\n          });\n        } catch (err) {\n          console.warn(`[review-verdict-feedback] Could not mark ${issueId} as needing human attention; feedback file remains available: ${err instanceof Error ? err.message : String(err)}`);\n        }\n      }\n    } catch (err) {\n      console.warn(`[review-verdict-feedback] Could not resolve a feedback target for ${issueId}; feedback file remains available: ${err instanceof Error ? err.message : String(err)}`);\n    }\n  } else if (!fileResult.success) {\n    console.error(`[review-verdict-feedback] Failed to write feedback file for ${issueId}: ${fileResult.error}`);\n  }\n\n  return {\n    feedbackPath: fileResult.filePath,\n    synthesisPath: synthesis?.path,\n    prCommentPosted,\n    agentMessageSent,\n  };\n}\n\n// ─── Effect variant (PAN-1249) ───────────────────────────────────────────────\n\n/**\n * Effect variant of {@link deliverReviewVerdictFeedback}. The Promise version\n * already swallows recoverable errors (PR comment failures, agent messaging,\n * synthesis lookup), so the Effect form mirrors that contract: callers see a\n * successful Effect carrying the same result shape and inspect the flags to\n * decide what surfaced. The single non-recoverable boundary — feedback file\n * write — keeps its existing error reporting through {@link writeFeedbackFile}.\n */\nexport const deliverReviewVerdictFeedback = (\n  opts: DeliverReviewVerdictFeedbackOptions,\n): Effect.Effect<DeliverReviewVerdictFeedbackResult> =>\n  Effect.promise(() => deliverReviewVerdictFeedbackPromise(opts));\n"],"mappings":";;;;;;;;;;;;;;AAmCA,eAAe,oBAAoB,eAAuE;CACxG,MAAM,aAAa,KAAK,eAAe,aAAa,SAAS;AAC7D,KAAI,CAAC,WAAW,WAAW,CAAE,QAAO;CAEpC,IAAI,SAAmD;CACvD,MAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,MAAM,CAAC;AAClE,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,MAAM,aAAa,CAAE;EAC1B,MAAM,gBAAgB,KAAK,YAAY,MAAM,MAAM,eAAe;AAClE,MAAI,CAAC,WAAW,cAAc,CAAE;EAChC,MAAM,WAAW,MAAM,KAAK,cAAc;AAC1C,MAAI,CAAC,UAAU,SAAS,UAAU,OAAO,QACvC,UAAS;GAAE,MAAM;GAAe,SAAS,SAAS;GAAS;;AAI/D,KAAI,CAAC,OAAQ,QAAO;AACpB,QAAO;EAAE,MAAM,OAAO;EAAM,MAAM,MAAM,SAAS,OAAO,MAAM,QAAQ;EAAE;;AAG1E,SAAS,iBAAiB,OAAmF;CAC3G,MAAM,QAAQ,OAAO,MAAM,6CAA6C;AACxE,KAAI,CAAC,MAAO,QAAO;AACnB,QAAO;EAAE,OAAO,MAAM;EAAK,MAAM,MAAM;EAAK,QAAQ,MAAM;EAAK;;AAGjE,SAAS,wBAAwB,MAMtB;CACT,MAAM,eAAe,KAAK,YAAY,YAAY,sBAAsB;CACxE,MAAM,YAAY,KAAK,eAAe,MAAM,IAAI,KAAK,OAAO,MAAM,IAAI;CACtE,MAAM,aAAa,KAAK,gBAAgB,eAAe,KAAK,kBAAkB;AAE9E,QAAO,YAAY,aAAa,OAAO,KAAK,QAAQ,MAAM,YAAY,WAAW,sIAAsI,KAAK,QAAQ;;AAYtO,eAAsB,cAAc,OAA2B,MAAgC;CAC7F,MAAM,SAAS,iBAAiB,MAAM;AACtC,KAAI,CAAC,OAAQ,QAAO;AAEpB,OAAM,cACJ,MACA;EAAC;EAAO,SAAS,OAAO,MAAM,GAAG,OAAO,KAAK,UAAU,OAAO,OAAO;EAAY;EAAW,QAAQ;EAAO,EAC3G;EAAE,UAAU;EAAS,SAAS;EAAuB,YAAY;EAAW,CAC7E;AACD,QAAO;;AAGT,eAAe,oCACb,MAC6C;CAC7C,MAAM,UAAU,KAAK,QAAQ,aAAa;CAC1C,MAAM,WAAW,4BAA4B,QAAQ;CACrD,MAAM,gBAAgB,KAAK,kBACrB,WAAW,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG,GAAG,KAAA;CAChG,MAAM,iBAAiB,oBAAoB,QAAQ;CACnD,MAAM,YAAY,iBAAiB,WAAW,cAAc,GACxD,MAAM,oBAAoB,cAAc,GACxC;CACJ,MAAM,eAAe,wBAAwB;EAC3C;EACA,SAAS,KAAK;EACd,OAAO,KAAK;EACZ,eAAe,WAAW;EAC1B,eAAe,WAAW;EAC3B,CAAC;CAEF,IAAI,kBAAkB;AACtB,KAAI;AACF,oBAAkB,MAAM,cAAc,KAAK,SAAS,gBAAgB,OAAO,aAAa;UACjF,KAAK;AACZ,UAAQ,KAAK,2DAA2D,QAAQ,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;CAGzI,MAAM,aAAa,MAAM,OAAO,WAAW,kBAAkB;EAC3D;EACA;EACA,YAAY;EACZ,SAAS,KAAK,YAAY,YAAY,sBAAsB;EAC5D,SAAS,UAAU,KAAK,QAAQ,aAAa,CAAC,KAAK,KAAK,SAAS,WAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;EACpG;EACD,CAAC,CAAC;CAEH,IAAI,mBAAmB;AACvB,KAAI,WAAW,WAAW,WAAW,UAAU;EAC7C,MAAM,UAAU,8CAA8C,KAAK,QAAQ,aAAa,CAAC,OAAO,QAAQ,kBAAkB,WAAW,SAAS;AAC9I,MAAI;GAIF,MAAM,SAAS,MAAM,2BAA2B,SAAS,EACvD,QAAQ,KAAK,YACd,CAAC;AACF,OAAI,aAAa,OACf,KAAI;AACF,UAAM,aAAa,OAAO,SAAS,QAAQ;AAC3C,uBAAmB;YACZ,KAAK;IAIZ,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC/D,YAAQ,KAAK,+CAA+C,OAAO,QAAQ,qCAAqC,SAAS;AACzH,QAAI;AACF,WAAM,6BAA6B,SAAS,wBAAwB,OAAO,QAAQ,WAAW,UAAU;MACtG,YAAY;MACZ,cAAc,WAAW;MACzB,YAAY,KAAK;MAClB,CAAC;YACI;;OAGV,KAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,QAAQ;KACzD,YAAY;KACZ,cAAc,WAAW;KACzB,YAAY,KAAK;KAClB,CAAC;YACK,KAAK;AACZ,YAAQ,KAAK,4CAA4C,QAAQ,gEAAgE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;WAGjL,KAAK;AACZ,WAAQ,KAAK,qEAAqE,QAAQ,qCAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;YAE3K,CAAC,WAAW,QACrB,SAAQ,MAAM,+DAA+D,QAAQ,IAAI,WAAW,QAAQ;AAG9G,QAAO;EACL,cAAc,WAAW;EACzB,eAAe,WAAW;EAC1B;EACA;EACD;;;;cA9KyC;gBACiB;qBACH;aACR;uBACO;uBACuC;AAE1F,iBAAgB,UAAU,SAAS;AAmEnC,yBAAwB;AAiHjB,iCACX,SAEA,OAAO,cAAc,oCAAoC,KAAK,CAAC"}
+{"version":3,"file":"review-verdict-feedback-DGV13LDb.js","names":[],"sources":["../src/lib/cloister/review-verdict-feedback.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { existsSync } from 'node:fs';\nimport { readdir, readFile, stat } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { promisify } from 'node:util';\n\nimport { Effect } from 'effect';\n\nimport { messageAgent } from '../agents.js';\nimport { resolveProjectFromIssueSync } from '../projects.js';\nimport { getReviewStatusSync } from '../review-status.js';\nimport { PAN_DIRNAME } from '../pan-dir/types.js';\nimport { writeFeedbackFile } from './feedback-writer.js';\nimport { resolveIssueFeedbackTarget, surfaceIssueFeedbackNeedsYou } from './feedback-target.js';\n\nconst execFileAsync = promisify(execFile);\n\ntype ReviewVerdict = 'blocked' | 'failed';\n\nexport interface DeliverReviewVerdictFeedbackOptions {\n  issueId: string;\n  verdict: ReviewVerdict;\n  notes?: string;\n  workspacePath?: string;\n  prUrl?: string;\n  slotItemId?: string;\n}\n\nexport interface DeliverReviewVerdictFeedbackResult {\n  feedbackPath?: string;\n  synthesisPath?: string;\n  prCommentPosted: boolean;\n  agentMessageSent: boolean;\n}\n\nasync function findLatestSynthesis(workspacePath: string): Promise<{ path: string; body: string } | null> {\n  const reviewRoot = join(workspacePath, PAN_DIRNAME, 'review');\n  if (!existsSync(reviewRoot)) return null;\n\n  let latest: { path: string; mtimeMs: number } | null = null;\n  const entries = await readdir(reviewRoot, { withFileTypes: true });\n  for (const entry of entries) {\n    if (!entry.isDirectory()) continue;\n    const synthesisPath = join(reviewRoot, entry.name, 'synthesis.md');\n    if (!existsSync(synthesisPath)) continue;\n    const fileStat = await stat(synthesisPath);\n    if (!latest || fileStat.mtimeMs > latest.mtimeMs) {\n      latest = { path: synthesisPath, mtimeMs: fileStat.mtimeMs };\n    }\n  }\n\n  if (!latest) return null;\n  return { path: latest.path, body: await readFile(latest.path, 'utf-8') };\n}\n\nfunction parseGitHubPrUrl(prUrl: string | undefined): { owner: string; repo: string; number: string } | null {\n  const match = prUrl?.match(/github\\.com\\/([^/]+)\\/([^/]+)\\/pull\\/(\\d+)/);\n  if (!match) return null;\n  return { owner: match[1]!, repo: match[2]!, number: match[3]! };\n}\n\nfunction buildReviewFeedbackBody(opts: {\n  issueId: string;\n  verdict: ReviewVerdict;\n  notes?: string;\n  synthesisBody?: string;\n  synthesisPath?: string;\n}): string {\n  const verdictLabel = opts.verdict === 'blocked' ? 'CHANGES REQUESTED' : 'FAILED';\n  const synthesis = opts.synthesisBody?.trim() || opts.notes?.trim() || 'Review did not provide a synthesis summary.';\n  const sourceLine = opts.synthesisPath ? `\\n\\nSource: ${opts.synthesisPath}` : '';\n\n  return `# Review ${verdictLabel} for ${opts.issueId}\\n\\n${synthesis}${sourceLine}\\n\\n## Required action\\n\\nFix every blocking review finding, commit the fixes, then re-request review with:\\n\\n\\`pan review request ${opts.issueId} -m \"Fixed review issues\"\\``;\n}\n\n// PAN-2518: the PR-comment POST is advisory — the review verdict is already\n// durable (setReviewStatusSync + writeFeedbackFile) before we get here. A `gh\n// api` call that STALLS (not rejects) on a network hiccup must never block the\n// caller: `pan admin specialists done` is shelled out from the review agent's\n// own session, so a hung POST leaves that agent waiting on a never-returning\n// command and the issue stalls in-review. A bounded timeout turns a stall into\n// a rejection the caller already swallows.\nconst PR_COMMENT_TIMEOUT_MS = 15_000;\n\nexport async function postPrComment(prUrl: string | undefined, body: string): Promise<boolean> {\n  const parsed = parseGitHubPrUrl(prUrl);\n  if (!parsed) return false;\n\n  await execFileAsync(\n    'gh',\n    ['api', `repos/${parsed.owner}/${parsed.repo}/issues/${parsed.number}/comments`, '--field', `body=${body}`],\n    { encoding: 'utf-8', timeout: PR_COMMENT_TIMEOUT_MS, killSignal: 'SIGKILL' },\n  );\n  return true;\n}\n\nasync function deliverReviewVerdictFeedbackPromise(\n  opts: DeliverReviewVerdictFeedbackOptions,\n): Promise<DeliverReviewVerdictFeedbackResult> {\n  const issueId = opts.issueId.toUpperCase();\n  const resolved = resolveProjectFromIssueSync(issueId);\n  const workspacePath = opts.workspacePath\n    ?? (resolved ? join(resolved.projectPath, 'workspaces', `feature-${issueId.toLowerCase()}`) : undefined);\n  const existingStatus = getReviewStatusSync(issueId);\n  const synthesis = workspacePath && existsSync(workspacePath)\n    ? await findLatestSynthesis(workspacePath)\n    : null;\n  const markdownBody = buildReviewFeedbackBody({\n    issueId,\n    verdict: opts.verdict,\n    notes: opts.notes,\n    synthesisBody: synthesis?.body,\n    synthesisPath: synthesis?.path,\n  });\n\n  let prCommentPosted = false;\n  try {\n    prCommentPosted = await postPrComment(opts.prUrl ?? existingStatus?.prUrl, markdownBody);\n  } catch (err) {\n    console.warn(`[review-verdict-feedback] Failed to post PR comment for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);\n  }\n\n  const fileResult = await Effect.runPromise(writeFeedbackFile({\n    issueId,\n    workspacePath,\n    specialist: 'review-agent',\n    outcome: opts.verdict === 'blocked' ? 'changes-requested' : 'failed',\n    summary: `Review ${opts.verdict.toUpperCase()}: ${(opts.notes ?? synthesis?.body ?? '').slice(0, 80)}`,\n    markdownBody,\n  }));\n\n  let agentMessageSent = false;\n  if (fileResult.success && fileResult.filePath) {\n    const message = `SPECIALIST FEEDBACK: review-agent reported ${opts.verdict.toUpperCase()} for ${issueId}.\\n\\nMUST READ: ${fileResult.filePath}\\n\\nUse your Read tool to open this file, read every line, then fix ALL review findings. Do NOT stop at the prompt.`;\n    try {\n      // PAN-2209/PAN-2461: resolveIssueFeedbackTarget's built-in resurrection ladder\n      // (unpause pipeline pauses, clear troubled gates, resume stopped agents) handles\n      // every non-live target; no local reviver override.\n      const target = await resolveIssueFeedbackTarget(issueId, {\n        itemId: opts.slotItemId,\n      });\n      if ('agentId' in target) {\n        try {\n          await messageAgent(target.agentId, message);\n          agentMessageSent = true;\n        } catch (err) {\n          // PAN-2228: a resolved-but-unreachable target is a real delivery failure,\n          // not a shrug. Surface it as needs-you so the stall is visible instead of\n          // the issue silently parking with an unread feedback file.\n          const reason = err instanceof Error ? err.message : String(err);\n          console.warn(`[review-verdict-feedback] Could not message ${target.agentId}; feedback file remains available: ${reason}`);\n          try {\n            await surfaceIssueFeedbackNeedsYou(issueId, `Feedback delivery to ${target.agentId} failed: ${reason}`, {\n              specialist: 'review-agent',\n              feedbackPath: fileResult.filePath,\n              slotItemId: opts.slotItemId,\n            });\n          } catch { /* best-effort — the warn above still records the failure */ }\n        }\n      } else {\n        try {\n          await surfaceIssueFeedbackNeedsYou(issueId, target.reason, {\n            specialist: 'review-agent',\n            feedbackPath: fileResult.filePath,\n            slotItemId: opts.slotItemId,\n          });\n        } catch (err) {\n          console.warn(`[review-verdict-feedback] Could not mark ${issueId} as needing human attention; feedback file remains available: ${err instanceof Error ? err.message : String(err)}`);\n        }\n      }\n    } catch (err) {\n      console.warn(`[review-verdict-feedback] Could not resolve a feedback target for ${issueId}; feedback file remains available: ${err instanceof Error ? err.message : String(err)}`);\n    }\n  } else if (!fileResult.success) {\n    console.error(`[review-verdict-feedback] Failed to write feedback file for ${issueId}: ${fileResult.error}`);\n  }\n\n  return {\n    feedbackPath: fileResult.filePath,\n    synthesisPath: synthesis?.path,\n    prCommentPosted,\n    agentMessageSent,\n  };\n}\n\n// ─── Effect variant (PAN-1249) ───────────────────────────────────────────────\n\n/**\n * Effect variant of {@link deliverReviewVerdictFeedback}. The Promise version\n * already swallows recoverable errors (PR comment failures, agent messaging,\n * synthesis lookup), so the Effect form mirrors that contract: callers see a\n * successful Effect carrying the same result shape and inspect the flags to\n * decide what surfaced. The single non-recoverable boundary — feedback file\n * write — keeps its existing error reporting through {@link writeFeedbackFile}.\n */\nexport const deliverReviewVerdictFeedback = (\n  opts: DeliverReviewVerdictFeedbackOptions,\n): Effect.Effect<DeliverReviewVerdictFeedbackResult> =>\n  Effect.promise(() => deliverReviewVerdictFeedbackPromise(opts));\n"],"mappings":";;;;;;;;;;;;;;AAmCA,eAAe,oBAAoB,eAAuE;CACxG,MAAM,aAAa,KAAK,eAAe,aAAa,SAAS;AAC7D,KAAI,CAAC,WAAW,WAAW,CAAE,QAAO;CAEpC,IAAI,SAAmD;CACvD,MAAM,UAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,MAAM,CAAC;AAClE,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,MAAM,aAAa,CAAE;EAC1B,MAAM,gBAAgB,KAAK,YAAY,MAAM,MAAM,eAAe;AAClE,MAAI,CAAC,WAAW,cAAc,CAAE;EAChC,MAAM,WAAW,MAAM,KAAK,cAAc;AAC1C,MAAI,CAAC,UAAU,SAAS,UAAU,OAAO,QACvC,UAAS;GAAE,MAAM;GAAe,SAAS,SAAS;GAAS;;AAI/D,KAAI,CAAC,OAAQ,QAAO;AACpB,QAAO;EAAE,MAAM,OAAO;EAAM,MAAM,MAAM,SAAS,OAAO,MAAM,QAAQ;EAAE;;AAG1E,SAAS,iBAAiB,OAAmF;CAC3G,MAAM,QAAQ,OAAO,MAAM,6CAA6C;AACxE,KAAI,CAAC,MAAO,QAAO;AACnB,QAAO;EAAE,OAAO,MAAM;EAAK,MAAM,MAAM;EAAK,QAAQ,MAAM;EAAK;;AAGjE,SAAS,wBAAwB,MAMtB;CACT,MAAM,eAAe,KAAK,YAAY,YAAY,sBAAsB;CACxE,MAAM,YAAY,KAAK,eAAe,MAAM,IAAI,KAAK,OAAO,MAAM,IAAI;CACtE,MAAM,aAAa,KAAK,gBAAgB,eAAe,KAAK,kBAAkB;AAE9E,QAAO,YAAY,aAAa,OAAO,KAAK,QAAQ,MAAM,YAAY,WAAW,sIAAsI,KAAK,QAAQ;;AAYtO,eAAsB,cAAc,OAA2B,MAAgC;CAC7F,MAAM,SAAS,iBAAiB,MAAM;AACtC,KAAI,CAAC,OAAQ,QAAO;AAEpB,OAAM,cACJ,MACA;EAAC;EAAO,SAAS,OAAO,MAAM,GAAG,OAAO,KAAK,UAAU,OAAO,OAAO;EAAY;EAAW,QAAQ;EAAO,EAC3G;EAAE,UAAU;EAAS,SAAS;EAAuB,YAAY;EAAW,CAC7E;AACD,QAAO;;AAGT,eAAe,oCACb,MAC6C;CAC7C,MAAM,UAAU,KAAK,QAAQ,aAAa;CAC1C,MAAM,WAAW,4BAA4B,QAAQ;CACrD,MAAM,gBAAgB,KAAK,kBACrB,WAAW,KAAK,SAAS,aAAa,cAAc,WAAW,QAAQ,aAAa,GAAG,GAAG,KAAA;CAChG,MAAM,iBAAiB,oBAAoB,QAAQ;CACnD,MAAM,YAAY,iBAAiB,WAAW,cAAc,GACxD,MAAM,oBAAoB,cAAc,GACxC;CACJ,MAAM,eAAe,wBAAwB;EAC3C;EACA,SAAS,KAAK;EACd,OAAO,KAAK;EACZ,eAAe,WAAW;EAC1B,eAAe,WAAW;EAC3B,CAAC;CAEF,IAAI,kBAAkB;AACtB,KAAI;AACF,oBAAkB,MAAM,cAAc,KAAK,SAAS,gBAAgB,OAAO,aAAa;UACjF,KAAK;AACZ,UAAQ,KAAK,2DAA2D,QAAQ,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;CAGzI,MAAM,aAAa,MAAM,OAAO,WAAW,kBAAkB;EAC3D;EACA;EACA,YAAY;EACZ,SAAS,KAAK,YAAY,YAAY,sBAAsB;EAC5D,SAAS,UAAU,KAAK,QAAQ,aAAa,CAAC,KAAK,KAAK,SAAS,WAAW,QAAQ,IAAI,MAAM,GAAG,GAAG;EACpG;EACD,CAAC,CAAC;CAEH,IAAI,mBAAmB;AACvB,KAAI,WAAW,WAAW,WAAW,UAAU;EAC7C,MAAM,UAAU,8CAA8C,KAAK,QAAQ,aAAa,CAAC,OAAO,QAAQ,kBAAkB,WAAW,SAAS;AAC9I,MAAI;GAIF,MAAM,SAAS,MAAM,2BAA2B,SAAS,EACvD,QAAQ,KAAK,YACd,CAAC;AACF,OAAI,aAAa,OACf,KAAI;AACF,UAAM,aAAa,OAAO,SAAS,QAAQ;AAC3C,uBAAmB;YACZ,KAAK;IAIZ,MAAM,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC/D,YAAQ,KAAK,+CAA+C,OAAO,QAAQ,qCAAqC,SAAS;AACzH,QAAI;AACF,WAAM,6BAA6B,SAAS,wBAAwB,OAAO,QAAQ,WAAW,UAAU;MACtG,YAAY;MACZ,cAAc,WAAW;MACzB,YAAY,KAAK;MAClB,CAAC;YACI;;OAGV,KAAI;AACF,UAAM,6BAA6B,SAAS,OAAO,QAAQ;KACzD,YAAY;KACZ,cAAc,WAAW;KACzB,YAAY,KAAK;KAClB,CAAC;YACK,KAAK;AACZ,YAAQ,KAAK,4CAA4C,QAAQ,gEAAgE,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;WAGjL,KAAK;AACZ,WAAQ,KAAK,qEAAqE,QAAQ,qCAAqC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GAAG;;YAE3K,CAAC,WAAW,QACrB,SAAQ,MAAM,+DAA+D,QAAQ,IAAI,WAAW,QAAQ;AAG9G,QAAO;EACL,cAAc,WAAW;EACzB,eAAe,WAAW;EAC1B;EACA;EACD;;;;cA9KyC;gBACiB;qBACH;aACR;uBACO;uBACuC;AAE1F,iBAAgB,UAAU,SAAS;AAmEnC,yBAAwB;AAiHjB,iCACX,SAEA,OAAO,cAAc,oCAAoC,KAAK,CAAC"}

package/dist/{sequence-io-CcxZNHcD.js → sequence-io-Cg4NHAco.js}

@@ -1,3 +1,3 @@
-import { r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-Cx1usxG3.js";
+import { r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-CyxvNHfA.js";
 init_sequence_io();
 export { writeSequenceMd };