@overdeck/desktop 0.42.0 → 0.44.0

package/server/server.js

@@ -1,103 +1,101 @@
 import { a as __toCommonJS, i as __require, o as __toESM, t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { C as init_paths, D as sessionFilePath, E as resolveOhmypiExtensionPath, S as getOverdeckHome, T as packageRoot, _ as SYNC_SOURCES, l as LOGS_DIR, o as CLAUDE_DIR, t as AGENTS_DIR, u as OVERDECK_HOME, w as isDevMode, x as getLegacyHome, y as encodeClaudeProjectDir } from "./paths-tknG80xs.js";
-import { $ as resolveModelIdSync, A as getBuiltInDefaultHarness, B as defaultBackgroundAiFeatures, F as piProviderForModel, G as resolveModel, H as DEFAULT_ROLES, K as MODEL_CAPABILITIES, N as getProviderForModelSync, O as UnknownModelError, P as init_providers, Q as modelSupportsImagesSync, S as canUseHarnessSync, U as DEFAULT_WORKHORSES, V as init_registry, W as computeModelOrigin, X as hasModelCapabilitySync, Y as getModelEffortLevelsSync, Z as init_model_capabilities, _ as mergeTtsDaemonConfigs, b as init_tier_table, ct as FsError, d as loadConfigSync, et as COMPLIANCE_MODES, f as updateConversationsConfig, g as getDefaultTtsDaemonConfig, gt as TrackerError, h as mergeConfigs, i as getConversationsConfig, j as getKimiAnthropicBaseUrl, l as isTldrEnabledSync, m as jsYaml, mt as ProcessSpawnError, n as clearConfigCache, nt as ROLE_EFFORTS, o as getGlobalConfigPath, p as init_js_yaml, q as MODEL_DEPRECATIONS, r as getConversationSearchConfigSync, rt as require_dist$1, s as isClaudeCodeChannelsEnabled, t as init_config_yaml, tt as PARENT_MODEL_REF, u as loadConfigNoMigration, ut as GitHubApiError, vt as init_errors, w as init_harness_policy, x as resolveTieredExecutionEnabled } from "./config-yaml-C9tNHjAH.js";
-import { _ as getDashboardIdentity, c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard, v as readHostDashboardApiPort, y as shouldRefuseHostDashboardPort } from "./uat-train-Di_5GWAL.js";
-import { A as jsonStringResponse, C as isTrustedOriginForHost, D as checkCodexAuthStatus, E as validateOriginHeaders, O as httpHandler, T as validateOrigin$1, _ as resolveClaudeSessionId, a as agentsRouteLayer, b as resolvePiSessionPath, c as invalidateAgentsCache, d as startSmeeProcessSync, f as resolveAgentGitInfo, g as resolveAgentHarness, h as readLauncherPinnedSessionId, k as jsonResponse, l as getSystemHealthSnapshot, o as saveAgentStateAndEmitEvent, p as resolveConversationGitInfo, s as saveAgentStateAndEmitEventProgram, t as specialistsRouteLayer, u as isSmeeConfiguredSync, v as resolveCodexRolloutPath, x as getHeaderFromMap, y as resolveJsonlPath } from "./specialists-CY2q5jAb.js";
-import { a as init_activity_logger, i as emitDashboardLifecycleSync, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-C_Hsfouw.js";
-import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, d as getOverdeckDatabaseSync, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-BnuUQA1b.js";
-import { n as openDatabase, t as init_driver } from "./driver-CBobl_fb.js";
-import { g as getIssueWorkspacePath, v as init_record } from "./record-BzKI-k7f.js";
-import { a as parseIssueIdSync, n as extractPrefixSync, r as init_issue_id } from "./issue-id-CtudqaOv.js";
-import { A as resolveProjectFromIssueSync, D as registerProjectSync, P as setProjectAutoMergeDefaultSync, S as listProjectsSync, f as getProjectSync, k as resolveProjectFromIssue, l as getIssuePrefix, r as extractTeamPrefix, s as findProjectByTeamSync, v as init_projects, x as listProjects } from "./projects-CFpKXBDE.js";
-import { E as listPaneValues, F as sendKeysAsync, G as buildChildEnvSync, H as init_ui_theme, I as sendRawKeystroke, K as buildChildEnvWithoutTmuxSync, L as sessionExists, M as resizeWindow, O as listSessionNames, P as sendKeys, S as isHarnessProcessAlive, U as setUiTheme, W as BLANKED_PROVIDER_ENV, b as getWindowDimensions, c as ensureManagedTmuxContextOnce, d as exactPaneTarget, i as capturePane, k as listSessions, n as buildTmuxArgs, o as createSession, p as findManagedServerPidSync, q as init_child_env, w as killSession, x as init_tmux, z as setOption } from "./tmux-CDwrBgT9.js";
-import { a as init_event_store, i as initEventStore, n as getEventStore, r as getSharedDb } from "./event-store-CMfrQLgu.js";
-import { _ as FlywheelRunId, a as getHarnessBehavior, c as FlywheelStats, g as WS_METHODS, h as PanRpcGroup, m as PanRpcError, o as ContextLayerSaveRequest, s as ContextPreviewRequest, t as init_src, v as FlywheelStatus, x as MemoryObservation, y as EDITORS } from "./src-Bt65pH-t.js";
-import { a as fixStuckCommentedReviews, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status, n as clearReviewStatus, o as fixStuckReadyForMerge, r as clearStuckMergeStatuses, s as getReviewStatus, u as loadReadyForMergeFlags, y as setReviewStatus } from "./review-status-YErqCbEB.js";
-import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-BH8UIror.js";
-import { d as init_agents, i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, p as listAllAgentsSync, r as init_briefing_freshness, s as AgentsResolverLive, t as appendFreshBriefingUpdate } from "./briefing-freshness-CzRarwBd.js";
-import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-Dsd_dtCx.js";
-import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-DCtE46iD.js";
-import { a as diffAgainstMainFiles, c as diffFilesAgainstHead, d as findCommitAtTime, i as diffAgainstMain, l as diffPatchFilesAgainstHead, m as listCheckpoints, o as diffCheckpointFiles, p as init_checkpoint_manager, s as diffCheckpoints, t as captureCheckpoint, u as diffPatchSinceCommit } from "./checkpoint-manager-DcU-yTPm.js";
-import { $ as init_concurrency, An as saveAgentStateSync, Bn as init_pty_token, D as messageAgent, Ft as getProviderAuthMode, G as listRunningAgents, Gt as getClaudeAuthStatus, Hn as clearReadySignal, Ht as piFifoPaths, Jn as getAgentRuntimeState, K as listRunningAgentsSync, Kt as init_claude_auth, Mt as getAgentRuntimeBaseCommand, O as init_operator_interventions, Rn as init_agent_record_sync, Rt as injectPiConversationMemory, St as writeBridgeTokenSync, Ut as init_ohmypi_fifo, Vn as writePtyToken, Vt as init_pi_fifo, W as listAgentStates, Wn as normalizeAgentId, Wt as ohmypiFifoPaths, Xt as getProviderEnvForModel, Yn as getAgentRuntimeStateSync, Z as emergencyBrake, Zt as getProviderExportsForModel, _n as getAgentStateFilePath, bt as probeTranscriptSince, c as init_tier_supervisor, ct as init_config, d as supervisorAgentId, dt as saveCloisterConfigSync, ft as shouldAutoStart, gn as getAgentState, hn as getAgentDir, k as operatorInterventionEvent, lt as loadCloisterConfig, nn as init_openai_auth, on as dismissDevChannelsDialog, pt as deliverAgentMessage, qn as waitForReadySignal, s as deliverCommitForReview, sn as writeChannelsBridgeMcpConfig, t as init_agents$1, tn as getOpenAIAuthStatus, ut as loadCloisterConfigSync, vn as getAgentStateSync, vt as captureTranscriptUserRecordSnapshot, xt as init_bridge_token, yt as init_transcript_landing, zn as readAgentHarnessModelRecordSync } from "./agents-I-xFLL6F.js";
-import { t as init_behavior } from "./behavior-B4_m9DaU.js";
-import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-BgWKYZUZ.js";
-import { c as getAgentsNeedingAttention, d as CostResolverLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-A2kIgSZ_.js";
-import { n as AgentStateServiceLive } from "./agent-state-service-CX6J_kRr.js";
-import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-CfMJKtu0.js";
-import { d as init_typed_errors, l as WorkspaceCreateError, n as AgentStartError, r as BeadsNotInitialized, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-BQLS2-a2.js";
-import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-Bsy-Vqx3.js";
-import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-BcSyQB-F.js";
-import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-sephEbzO.js";
-import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-CYlQXpfe.js";
-import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-DxVMDd_x.js";
-import { i as ensureInternalTokenSync, o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-JIiqJ_LH.js";
-import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-Bf-6UMyT.js";
-import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-DSM99M9e.js";
-import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-BZPMDIcb.js";
-import { E as writeSpecForIssue, L as asPanSpecDocument, M as PAN_CONTINUE_FILENAME, N as PAN_DIRNAME, R as init_types$1, S as init_specs, T as writeSpec, _ as init_types, a as findWorkspaceDraftPlan, b as findSpecByIssue, c as readPlan, d as readWorkspacePlan, f as readWorkspacePlanSync, o as init_io, r as findPlan, s as isPlanningComplete, v as subItemsOf } from "./io-BX80MEP3.js";
-import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-DKkfZuzL.js";
-import { f as init_config$1, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-UKaBdqtW.js";
-import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-BEuuoN7z.js";
-import { $ as updateConversationTitle, A as listArchivedConversationsWithEnrichment, C as getConversationLedgerCosts, D as incrementForkRetryCount, E as importLegacyConversation, F as markConversationRunning, G as setConversationModel, H as setConversationClaudeSessionId, J as setImportedConversationLinks, K as setFavorite, M as listFavoritedIds, N as markConversationActive, O as init_conversations, P as markConversationEnded, Q as updateConversationForkFallbackReason, R as recordConversationHandoff, S as getConversationByTmuxSession, T as hasOtherActiveConversationOnTmuxSession, U as setConversationEffort, V as setClearedToConvId, W as setConversationHarness, X as updateConversationCost, Y as unarchiveConversation, Z as updateConversationDeliveryMethod, _ as canReplaceTitle, _t as init_discovered_sessions, b as getConversationById, et as updateForkStatus, g as backfillConversationModel, h as archiveConversation, j as listConversations, k as isAgentConversationName, mt as getDiscoveredSessionBySessionId, nt as updateSpawnError, q as setForkRequest, tt as updateLastAttached, v as createConversation, w as getStuckForks, x as getConversationByName, y as getConversationByClaudeSessionId, z as removeFavorite } from "./conversations-CP2aa9q-.js";
-import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-MLYjzNUG.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-xGah4i1z.js";
-import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-BOrXf84x.js";
-import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-DznCCZwl.js";
-import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-DPB1BgON.js";
-import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-CB2A2ji1.js";
-import { a as globalContextFile$1, d as workspaceContextFile, l as projectContextFile, n as codexGlobalContextFile, o as init_layers, r as ensureProjectLayer, s as piGlobalContextFile } from "./layers-B1dMbFu0.js";
-import { l as init_codex, s as findRolloutPath } from "./codex-kSC1YLP_.js";
-import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-D3FrIdcx.js";
-import { c as init_docker_stats } from "./stack-health-BWegK0Ro.js";
-import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-1AlLvkFa.js";
-import { i as checkPrdGateSync, t as init_pan_dir } from "./pan-dir-BjGKfnlg.js";
-import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-Boh9ge2B.js";
-import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-Cm-DukdQ.js";
-import { At as getAgentJsonlMtime, B as createInFlightGuard, Dt as getRuntimeForAgent, F as setAgentStatusChangedNotifier, Ft as detectAwaitingInputForAgent, I as setAgentStoppedNotifier, It as detectAwaitingInputFromPaneSync, J as startBootReconciliation, K as isBootReconciliationCandidate, L as setMergeReadyNotifier, O as loadConfig, Ot as computeAgentEnrichment, Pt as scanPendingInputsPromise, Rt as parseCodexApprovalPrompt, X as resolveBootGates, Y as formatBootGateState, k as loadState, kt as countPendingAskUserQuestionsForAgent, n as assessDeaconPatrolFreshness, q as listBootReconciliationCandidates, st as withConcurrencyLimit, t as applyBootReconciliationDecision, x as getDeaconLogs } from "./deacon-JXyiFMrU.js";
-import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-GcaaRool.js";
-import { n as deduplicateEventsSync, o as readEventsSync, s as tailEventsSync } from "./events-CTjU_U8E.js";
-import { n as recordBackgroundAiCost, t as init_cost } from "./cost-XJB_GatY.js";
-import { S as writeLatestFlywheelStatus, _ as readCurrentLatestFlywheelStatus, b as subscribeLatestFlywheelStatus, f as getFlywheelRunDetail, h as listFlywheelRuns, l as buildClassifyLookups, m as isFlywheelRunId, y as resolveLiveFlywheelRunId } from "./flywheel-CTxeAxID.js";
-import { C as rejectUnauthorizedDashboardSessionMintRequest, S as rejectUnauthorizedDashboardRequest, T as getWorkspacePathForIssue, _ as rebuildCacheSync, b as dashboardSessionCookieHeader, c as resumeQueuedMerges, d as resolveIssueHeadlineCost, f as syncWalFromAllProjects, g as getCostsForIssueSync, h as migrateAllSessionsSync, l as processPendingFeedbackDeliveries, m as reconcilePiTranscripts, p as reconcile, t as workspacesRouteLayer, u as getCachedRunningAgents, v as syncCacheSync, w as rejectUnsafeDashboardMutationRequest, x as hasDashboardInternalToken, y as dashboardCsrfToken } from "./workspaces-BuUeTmag.js";
-import { l as detectPlatform, u as init_platform } from "./workspace-manager-D3HIsMs-.js";
-import { O as init_specialists, b as getReviewerSessionName } from "./specialists-Cy7HYT8N.js";
-import { t as withBdMutex } from "./bd-mutex-DXCIKL87.js";
-import { n as findPrdAtStatusSync, r as init_prd_locations } from "./prd-locations-BT_sPcNF.js";
-import { a as getShadowState, s as init_shadow_state } from "./shadow-state-bugG0OUd.js";
-import { c as getMergeBackendStatus, d as init_github_app, f as isGitHubAppConfigured, u as getPullRequestState } from "./github-app-DOmwGAQl.js";
-import { t as clearIssueClosedCache } from "./issue-closed-nHUhxUMc.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-4WFZC8UZ.js";
-import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-h4-QtTnt.js";
-import { C as selectNeedsPlanning, S as normalizeGate, _ as computeCohort, b as computeStats, d as OBJECTION_LABEL, f as PARKED_LABEL, g as classifyIssue, h as VETOED_LABEL, m as RELEASED_LABEL, p as READY_LABEL, u as BLOCKS_MAIN_LABEL, v as computeEpicGroups, x as computeWaves, y as computeLanes } from "./flywheel-merge-order-BQI3T5pp.js";
-import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-CcVCl7Om.js";
-import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-CWstFiT-.js";
-import { _ as sendToRemoteAgent, a as getRemoteAgentOutput, n as checkRemoteSpendCap, o as init_remote_agents, p as loadRemoteAgentState, u as killRemoteAgent, v as spawnRemoteAgent } from "./remote-agents-CE0kVmAf.js";
-import { r as spawnInspectAgent } from "./inspect-agent-BJCCg3O5.js";
-import { a as init_pull_requests, c as getIssuePrTabCacheGeneration, d as githubPrLookupSource, f as init_github_pr_lookup, i as fetchIssuePullRequestDiff, l as init_pr_tab_cache, n as fetchIssuePullRequest, o as bumpIssuePrTabCacheGeneration, p as lookupPullRequestNumberForBranch, r as fetchIssuePullRequestDetails, s as getCachedIssuePrTabResponse, t as fetchIssueCheckRuns, u as setCachedIssuePrTabResponse } from "./pull-requests-tsM16UNo.js";
-import { t as enrichReviewStatus } from "./review-status-enrichment-BHLoQirZ.js";
-import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-BkKcBcY2.js";
-import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-B3Bt9VtQ.js";
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-0Te4IUnH.js";
-import { _ as init_git_activity, v as listGitOperationsSync } from "./merge-agent-DjYp-UIK.js";
-import { t as getAgentCommandSync } from "./settings-D5oLqghw.js";
-import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-x4KI2jSf.js";
-import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-BullELly.js";
-import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-DHEbuQrw.js";
-import { a as init_query_expansion, i as clearQueryExpansionCache, n as init_injection, o as buildMatchQuery, r as injectPromptTimeMemory, s as init_search } from "./injection-B2ElRuNk.js";
-import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-CIYflUCB.js";
-import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-DxVCfMsv.js";
-import { a as init_render, d as validateTemplate, i as hasManagedRegion, l as init_harness, o as userContentOutsideRegion, t as init_context_layers, u as renderForHarness } from "./context-layers-DGIdj1-C.js";
-import { r as parseArtifactRef } from "./forge-DyEaM-rx.js";
-import { t as getMergeBlockersPayload } from "./merge-blockers-ByOxbHUf.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-D_WJsQKB.js";
-import "./supervisor-Bykrzblr.js";
-import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-BcXu6L_6.js";
+import { $ as getModelEffortLevelsSync, D as init_harness_policy, Dn as resolveProjectFromIssue, Dr as SYNC_SOURCES, Dt as init_record, Fr as packageRoot, G as DEFAULT_ROLES, Gn as init_auto_commit, I as getProviderForModelSync, In as extractPrefixSync, Ir as resolveOhmypiExtensionPath, K as DEFAULT_WORKHORSES, L as init_providers, Ln as init_issue_id, Lr as sessionFilePath, Mn as setProjectAutoMergeDefaultSync, Mr as getOverdeckHome, N as getBuiltInDefaultHarness, Nr as init_paths, On as resolveProjectFromIssueSync, P as getKimiAnthropicBaseUrl, Pr as isDevMode, R as piProviderForModel, S as resolveTieredExecutionEnabled, T as canUseHarnessSync, Tn as registerProjectSync, Tt as getIssueWorkspacePath, U as defaultBackgroundAiFeatures, Un as flushAllPendingAutoCommits, Vn as require_dist$1, W as init_registry, Wn as flushAutoCommits, X as MODEL_CAPABILITIES, Y as resolveModel, Z as MODEL_DEPRECATIONS, _ as mergeTtsDaemonConfigs, an as findProjectByTeamSync, b as TieredExecutionConfigError, bn as listProjectsSync, br as OVERDECK_HOME, cr as TrackerError, ct as PARENT_MODEL_REF, d as loadConfigSync, dr as AGENTS_DIR, er as FsError, et as hasModelCapabilitySync, f as updateConversationsConfig, g as getDefaultTtsDaemonConfig, gn as init_projects, gr as CLAUDE_DIR, h as mergeConfigs, i as getConversationsConfig, j as UnknownModelError, jr as getLegacyHome, kr as encodeClaudeProjectDir, l as isTldrEnabledSync, lt as ROLE_EFFORTS, m as jsYaml, n as clearConfigCache, nr as GitHubApiError, nt as modelSupportsImagesSync, o as getGlobalConfigPath, or as ProcessSpawnError, p as init_js_yaml, q as computeModelOrigin, r as getConversationSearchConfigSync, rt as resolveModelIdSync, s as isClaudeCodeChannelsEnabled, sn as getIssuePrefix, st as COMPLIANCE_MODES, t as init_config_yaml, tn as extractTeamPrefix, tt as init_model_capabilities, u as loadConfigNoMigration, un as getProjectSync, ur as init_errors, w as validateTieredExecutionConfig, x as init_tier_table, yn as listProjects, yr as LOGS_DIR, zn as parseIssueIdSync } from "./config-yaml-D0t3y9AC.js";
+import { _ as getDashboardIdentity, c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard, v as readHostDashboardApiPort, y as shouldRefuseHostDashboardPort } from "./uat-train-CpEtMAyD.js";
+import { A as jsonResponse, D as validateOriginHeaders, E as validateOrigin$1, O as checkCodexAuthStatus, S as getHeaderFromMap, _ as resolveAgentHarness, a as agentsRouteLayer, b as resolveJsonlPath, c as evaluateSpawnGuardrails, d as isSmeeConfiguredSync, f as startSmeeProcessSync, g as readLauncherPinnedSessionId, j as jsonStringResponse, k as httpHandler, l as invalidateAgentsCache, m as resolveConversationGitInfo, o as saveAgentStateAndEmitEvent, p as resolveAgentGitInfo, s as saveAgentStateAndEmitEventProgram, t as specialistsRouteLayer, u as getSystemHealthSnapshot, v as resolveClaudeSessionId, w as isTrustedOriginForHost, x as resolvePiSessionPath, y as resolveCodexRolloutPath } from "./specialists-CWh4WUGp.js";
+import { a as init_activity_logger, i as emitDashboardLifecycleSync, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-Dm95Ua07.js";
+import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, d as getOverdeckDatabaseSync, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-D6hW7oZO.js";
+import { n as openDatabase, t as init_driver } from "./driver-D-HBOQa_.js";
+import { E as listPaneValues, F as sendKeysAsync, G as buildChildEnvSync, H as init_ui_theme, I as sendRawKeystroke, K as buildChildEnvWithoutTmuxSync, L as sessionExists, M as resizeWindow, O as listSessionNames, P as sendKeys, S as isHarnessProcessAlive, U as setUiTheme, W as BLANKED_PROVIDER_ENV, b as getWindowDimensions, c as ensureManagedTmuxContextOnce, d as exactPaneTarget, i as capturePane, k as listSessions, n as buildTmuxArgs, o as createSession, p as findManagedServerPidSync, q as init_child_env, w as killSession, x as init_tmux, z as setOption } from "./tmux-Cuf3Wudb.js";
+import { a as init_event_store, i as initEventStore, n as getEventStore, r as getSharedDb } from "./event-store-B35NfIvv.js";
+import { _ as FlywheelRunId, a as getHarnessBehavior, b as DomainEvent, c as FlywheelStats, g as WS_METHODS, h as PanRpcGroup, m as PanRpcError, o as ContextLayerSaveRequest, s as ContextPreviewRequest, t as init_src, v as FlywheelStatus, x as MemoryObservation, y as EDITORS } from "./src-CgBTaItZ.js";
+import { a as fixStuckReadyForMerge, c as init_review_status, i as fixStuckCommentedReviews, l as loadReadyForMergeFlags, n as clearReviewStatus, o as getReviewStatus, r as clearStuckMergeStatuses, s as getReviewStatusSync, u as loadReviewStatuses, v as setReviewStatus, y as setReviewStatusSync } from "./review-status-BRzbY-uJ.js";
+import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-BrYCFw67.js";
+import { d as init_agents, i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, p as listAllAgentsSync, r as init_briefing_freshness, s as AgentsResolverLive, t as appendFreshBriefingUpdate } from "./briefing-freshness-CKbYolyA.js";
+import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-gB-AoCbP.js";
+import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-DzHcsyeM.js";
+import { a as diffAgainstMainFiles, c as diffFilesAgainstHead, d as findCommitAtTime, i as diffAgainstMain, l as diffPatchFilesAgainstHead, m as listCheckpoints, o as diffCheckpointFiles, p as init_checkpoint_manager, s as diffCheckpoints, t as captureCheckpoint, u as diffPatchSinceCommit } from "./checkpoint-manager-DCSBbepE.js";
+import { $n as clearReadySignal, $t as getClaudeAuthStatus, Bt as getAgentRuntimeBaseCommand, Cn as getAgentDir, Ct as init_transcript_landing, Dn as getAgentStateSync, En as getAgentStateFilePath, Et as writeBridgeTokenSync, J as listAgentStates, Kt as injectPiConversationMemory, M as init_operator_interventions, N as operatorInterventionEvent, Qn as writePtyToken, Qt as ohmypiFifoPaths, St as captureTranscriptUserRecordSnapshot, Tn as getAgentState, Tt as init_bridge_token, Ut as getProviderAuthMode, Vn as saveAgentStateSync, X as listRunningAgentsSync, Xn as readAgentHarnessModelRecordSync, Xt as piFifoPaths, Y as listRunningAgents, Yn as init_agent_record_sync, Yt as init_pi_fifo, Zn as init_pty_token, Zt as init_ohmypi_fifo, _t as deliverAgentMessage, an as getProviderExportsForModel, ar as getAgentRuntimeState, c as init_tier_supervisor, en as init_claude_auth, f as supervisorAgentId, ft as init_config, gt as shouldAutoStart, hn as writeChannelsBridgeMcpConfig, ht as saveCloisterConfigSync, in as getProviderEnvForModel, ir as waitForReadySignal, j as messageAgent, ln as getOpenAIAuthStatus, mn as dismissDevChannelsDialog, mt as loadCloisterConfigSync, or as getAgentRuntimeStateSync, pt as loadCloisterConfig, rt as init_concurrency, s as deliverCommitForReview, t as init_agents$1, tr as normalizeAgentId, tt as emergencyBrake, un as init_openai_auth, wt as probeTranscriptSince } from "./agents-BODDwjMW.js";
+import { t as init_behavior } from "./behavior-DqR8vtRW.js";
+import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, p as queryCostEventsSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-COCS9jfM.js";
+import { c as getAgentsNeedingAttention, d as CostResolverLive, f as CostWriter, l as CostDoorLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-yJX2ZDTb.js";
+import { n as AgentStateServiceLive } from "./agent-state-service-BDYwkuao.js";
+import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-Bp-m78D_.js";
+import { d as init_typed_errors, l as WorkspaceCreateError, n as AgentStartError, r as BeadsNotInitialized, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-BRDFMoss.js";
+import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-BbxK-2hQ.js";
+import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-ClT-9ZHn.js";
+import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-DoecXLs_.js";
+import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-BGlCcZn1.js";
+import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-Driy3b99.js";
+import { i as ensureInternalTokenSync, o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DR2busqD.js";
+import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-DpikL6KI.js";
+import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-TCRUOOb0.js";
+import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-CNvpnmSV.js";
+import { B as asPanSpecDocument, C as findSpecByIssue, F as PAN_CONTINUE_FILENAME, I as PAN_DIRNAME, O as writeSpec, T as init_specs, V as init_types$1, a as findWorkspaceDraftPlan, b as init_types, k as writeSpecForIssue, m as readWorkspacePlanSync, o as init_io, p as readWorkspacePlan, r as findPlan, s as isPlanningComplete, u as readPlan, x as subItemsOf } from "./io-DyjLqqzR.js";
+import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-BRAY5Min.js";
+import { f as init_config$1, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-C83PzLrX.js";
+import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-DEP-WK8V.js";
+import { $ as updateConversationTitle, A as listArchivedConversationsWithEnrichment, C as getConversationLedgerCosts, D as incrementForkRetryCount, E as importLegacyConversation, F as markConversationRunning, G as setConversationModel, H as setConversationClaudeSessionId, J as setImportedConversationLinks, K as setFavorite, M as listFavoritedIds, N as markConversationActive, O as init_conversations, P as markConversationEnded, Q as updateConversationForkFallbackReason, R as recordConversationHandoff, S as getConversationByTmuxSession, T as hasOtherActiveConversationOnTmuxSession, U as setConversationEffort, V as setClearedToConvId, W as setConversationHarness, X as updateConversationCost, Y as unarchiveConversation, Z as updateConversationDeliveryMethod, _ as canReplaceTitle, b as getConversationById, et as updateForkStatus, g as backfillConversationModel, h as archiveConversation, ht as getDiscoveredSessionBySessionId, j as listConversations, k as isAgentConversationName, nt as updateSpawnError, q as setForkRequest, tt as updateLastAttached, v as createConversation, vt as init_discovered_sessions, w as getStuckForks, x as getConversationByName, y as getConversationByClaudeSessionId, z as removeFavorite } from "./conversations-DqMw7hzO.js";
+import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-DMXhLnSO.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-DwF4LaSW.js";
+import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-DWLiz0Nr.js";
+import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-cLWAz3kQ.js";
+import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-sMFvWgWt.js";
+import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-C0EMsI4l.js";
+import { a as globalContextFile$1, d as workspaceContextFile, l as projectContextFile, n as codexGlobalContextFile, o as init_layers, r as ensureProjectLayer, s as piGlobalContextFile } from "./layers-DoUs5i4O.js";
+import { l as init_codex, s as findRolloutPath } from "./codex-DlkETOc-.js";
+import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-BTPRGd5d.js";
+import { c as init_docker_stats } from "./stack-health-C_JMDfQa.js";
+import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-CYFbeWOz.js";
+import { i as checkPrdGateSync, t as init_pan_dir } from "./pan-dir-DB2mqeFg.js";
+import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-CKyWyVWt.js";
+import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-lyw-buM5.js";
+import { B as createInFlightGuard, Dt as countPendingAskUserQuestionsForAgent, Et as computeAgentEnrichment, F as setAgentStatusChangedNotifier, I as setAgentStoppedNotifier, It as parseCodexApprovalPrompt, J as startBootReconciliation, K as isBootReconciliationCandidate, L as setMergeReadyNotifier, Mt as scanPendingInputsPromise, Nt as detectAwaitingInputForAgent, O as loadConfig, Ot as getAgentJsonlMtime, Pt as detectAwaitingInputFromPaneSync, Tt as getRuntimeForAgent, at as withConcurrencyLimit, k as loadState, n as assessDeaconPatrolFreshness, q as listBootReconciliationCandidates, t as applyBootReconciliationDecision, x as getDeaconLogs } from "./deacon-Cx7hYXMe.js";
+import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-bjduWTuH.js";
+import { n as deduplicateEventsSync, o as readEventsSync, s as tailEventsSync } from "./events-CiEGnZ53.js";
+import { n as recordBackgroundAiCost, t as init_cost } from "./cost-DHjgeEgA.js";
+import { S as writeLatestFlywheelStatus, _ as readCurrentLatestFlywheelStatus, b as subscribeLatestFlywheelStatus, f as getFlywheelRunDetail, h as listFlywheelRuns, l as buildClassifyLookups, m as isFlywheelRunId, y as resolveLiveFlywheelRunId } from "./flywheel-CkiZj2Rx.js";
+import { C as rejectUnauthorizedDashboardRequest, E as getWorkspacePathForIssue, S as hasDashboardInternalToken, T as rejectUnsafeDashboardMutationRequest, _ as processPendingFeedbackDeliveries, b as dashboardCsrfToken, c as resumeQueuedMerges, d as reconcilePiTranscripts, f as reclassifyUnknownCostEventsSync, g as syncCacheSync, h as rebuildCacheSync, l as syncWalFromAllProjects, m as getCostsForIssueSync, p as migrateAllSessionsSync, t as workspacesRouteLayer, u as reconcile, v as getCachedRunningAgents, w as rejectUnauthorizedDashboardSessionMintRequest, x as dashboardSessionCookieHeader, y as resolveIssueHeadlineCost } from "./workspaces-DjApnCJp.js";
+import { l as detectPlatform, u as init_platform } from "./workspace-manager-DV4u07t9.js";
+import { O as init_specialists, b as getReviewerSessionName } from "./specialists-DW-1CAK5.js";
+import { t as withBdMutex } from "./bd-mutex-Bqr8TTH0.js";
+import { n as findPrdAtStatusSync, r as init_prd_locations } from "./prd-locations-BDN-xDNK.js";
+import { a as getShadowState, s as init_shadow_state } from "./shadow-state-a0THplpo.js";
+import { T as verifyAppCanMerge, d as getPullRequestState, f as init_github_app, l as getMergeBackendStatus, p as isGitHubAppConfigured } from "./github-app-Soz3tZh_.js";
+import { t as clearIssueClosedCache } from "./issue-closed-7IHQ8IJf.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-DQqQJkgs.js";
+import { a as init_boot_gates, i as formatBootGateState, o as resolveBootGates } from "./no-resume-mode-Hd08C18Q.js";
+import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-MtiwR4U7.js";
+import { C as selectNeedsPlanning, S as normalizeGate, _ as computeCohort, b as computeStats, d as OBJECTION_LABEL, f as PARKED_LABEL, g as classifyIssue, h as VETOED_LABEL, m as RELEASED_LABEL, p as READY_LABEL, u as BLOCKS_MAIN_LABEL, v as computeEpicGroups, x as computeWaves, y as computeLanes } from "./flywheel-merge-order-B-03AdML.js";
+import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-DYF0ScVu.js";
+import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-Dgxpkfaj.js";
+import { _ as sendToRemoteAgent, a as getRemoteAgentOutput, n as checkRemoteSpendCap, o as init_remote_agents, p as loadRemoteAgentState, u as killRemoteAgent, v as spawnRemoteAgent } from "./remote-agents-DeiRtncQ.js";
+import { r as spawnInspectAgent } from "./inspect-agent-CmBmiWSp.js";
+import { n as init_github_pr_lookup, r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-C-YqEBQA.js";
+import { a as init_pull_requests, c as getIssuePrTabCacheGeneration, i as fetchIssuePullRequestDiff, l as init_pr_tab_cache, n as fetchIssuePullRequest, o as bumpIssuePrTabCacheGeneration, r as fetchIssuePullRequestDetails, s as getCachedIssuePrTabResponse, t as fetchIssueCheckRuns, u as setCachedIssuePrTabResponse } from "./pull-requests-V9zbOnM7.js";
+import { t as enrichReviewStatus } from "./review-status-enrichment-BK-Peqqa.js";
+import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-Bk_iUuHK.js";
+import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-BlVsp5Zh.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-Ddo1RYXH.js";
+import { C as init_git_activity, w as listGitOperationsSync } from "./merge-agent-DcC21G-0.js";
+import { t as getAgentCommandSync } from "./settings-DqPuXxT5.js";
+import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-CzUNH73m.js";
+import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-DRwGjxzx.js";
+import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-rU83JjnR.js";
+import { a as init_query_expansion, i as clearQueryExpansionCache, n as init_injection, o as buildMatchQuery, r as injectPromptTimeMemory, s as init_search } from "./injection-9zl1FzOq.js";
+import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-D8tUkORq.js";
+import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-NboSkcz4.js";
+import { a as init_render, d as validateTemplate, i as hasManagedRegion, l as init_harness, o as userContentOutsideRegion, t as init_context_layers, u as renderForHarness } from "./context-layers-BpZBKYnw.js";
+import { r as parseArtifactRef } from "./forge-Ca3Vecel.js";
+import { t as getMergeBlockersPayload } from "./merge-blockers-B7ey3CkR.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-C7AhB-75.js";
+import "./supervisor-C0I_2Noz.js";
+import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-haUPQHnM.js";
 import { createRequire } from "node:module";
 import { Cause, Context, Data, Duration, Effect, Exit, Fiber, FileSystem, Layer, Option, Path, Queue, Result, Schedule, Schema, Stream } from "effect";
 import { createReadStream, createWriteStream, existsSync, fstatSync, mkdirSync, readFileSync, statSync, writeFileSync } from "fs";
 import { basename, dirname, join, resolve } from "path";
 import { homedir } from "os";
-import { homedir as homedir$1, type } from "node:os";
+import { freemem as freemem$1, homedir as homedir$1, loadavg as loadavg$1, totalmem, type } from "node:os";
 import { constants, createReadStream as createReadStream$1, existsSync as existsSync$1, mkdirSync as mkdirSync$1, promises as promises$1, readFileSync as readFileSync$1, readdirSync as readdirSync$1, readlinkSync, realpathSync as realpathSync$1, renameSync as renameSync$1, rmSync as rmSync$1, stat, statSync as statSync$1, symlinkSync as symlinkSync$1, unwatchFile, watch, watchFile, writeFileSync as writeFileSync$1 } from "node:fs";
 import * as sp from "node:path";
 import { basename as basename$1, delimiter, dirname as dirname$1, extname as extname$1, isAbsolute as isAbsolute$1, join as join$1, normalize, relative as relative$1, resolve as resolve$1, sep as sep$1 } from "node:path";
@@ -105,10 +103,10 @@ import { FetchHttpClient, HttpRouter, HttpServer, HttpServerRequest, HttpServerR
 import { EventEmitter } from "node:events";
 import { access, appendFile, chmod, lstat, mkdir, open, readFile, readdir, realpath, rename, rm, stat as stat$1, unlink, writeFile } from "node:fs/promises";
 import { createHash, randomUUID } from "crypto";
-import { chmod as chmod$1, mkdir as mkdir$1, open as open$1, readFile as readFile$1, readdir as readdir$1, rename as rename$1, stat as stat$2, unlink as unlink$1, writeFile as writeFile$1 } from "fs/promises";
-import { createHmac, randomBytes, randomUUID as randomUUID$1, timingSafeEqual } from "node:crypto";
 import { exec, execFile, execFileSync, execSync, fork, spawn } from "node:child_process";
 import { promisify } from "node:util";
+import { chmod as chmod$1, mkdir as mkdir$1, open as open$1, readFile as readFile$1, readdir as readdir$1, rename as rename$1, stat as stat$2, unlink as unlink$1, writeFile as writeFile$1 } from "fs/promises";
+import { createHmac, randomBytes, randomUUID as randomUUID$1, timingSafeEqual } from "node:crypto";
 import * as pty from "@homebridge/node-pty-prebuilt-multiarch";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { PassThrough, Readable } from "node:stream";
@@ -325,6 +323,7 @@ const ServerConfigLayer = Layer.effect(ServerConfig, Effect.sync(() => {
 init_activity_logger();
 init_paths$1();
 init_driver();
+init_auto_commit();
 var import_dist = /* @__PURE__ */ __toESM(require_dist$1(), 1);
 init_issue_id();
 init_projects();
@@ -651,7 +650,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			const beadsDir = join$1(workspacePath, ".beads");
 			const projectBeadsDir = join$1(workspacePath, "..", "..", ".beads");
 			if (!(existsSync$1(beadsDir) || existsSync$1(projectBeadsDir))) throw new BeadsNotInitialized({ workspace: workspacePath });
-			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-pTsn9v84.js");
+			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-Ea9gfdKS.js");
 			const normalizedId = normalizeAgentId(issueId);
 			if ((await Effect.runPromise(getAgentState(normalizedId)))?.status === "running") throw new AgentAlreadyRunning({ id: issueId });
 			return {
@@ -682,7 +681,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			const { workspacePath, projectPath, issue } = opts;
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const sessionName = opts.sessionName ?? `planning-${issueId.toLowerCase()}`;
-			const { spawnPlanningSession } = await import("./spawn-planning-session-CIVFNe5b.js");
+			const { spawnPlanningSession } = await import("./spawn-planning-session-Dr1yJhqp.js");
 			const result = await spawnPlanningSession({
 				issue: {
 					id: issue.id,
@@ -715,14 +714,14 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	kill: (agentId) => Effect.tryPromise({
 		try: async () => {
-			const { stopAgent } = await import("./agents-pTsn9v84.js");
+			const { stopAgent } = await import("./agents-Ea9gfdKS.js");
 			await Effect.runPromise(stopAgent(agentId));
 		},
 		catch: () => void 0
 	}).pipe(Effect.ignore),
 	message: (agentId, msg) => Effect.tryPromise({
 		try: async () => {
-			const { messageAgent } = await import("./agents-pTsn9v84.js");
+			const { messageAgent } = await import("./agents-Ea9gfdKS.js");
 			await messageAgent(agentId, msg);
 		},
 		catch: (err) => new AgentStartError({
@@ -733,8 +732,8 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	deepWipe: (issueId, opts) => Effect.tryPromise({
 		try: async () => {
-			const { deepWipe } = await import("./workflows-B1dF2rZU.js");
-			const { resolveProjectFromIssueSync } = await import("./projects-BGOgJTpI.js");
+			const { deepWipe } = await import("./workflows-C94HmADx.js");
+			const { resolveProjectFromIssueSync } = await import("./projects-BbMEBykK.js");
 			const project = resolveProjectFromIssueSync(issueId);
 			const projectPath = project?.projectPath ?? process.cwd();
 			await Effect.runPromise(deepWipe({
@@ -763,7 +762,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 * Route handlers and AgentSpawner use this instead of calling workspace-manager directly.
 */
 init_typed_errors();
-const execAsync$13 = promisify(exec);
+const execAsync$12 = promisify(exec);
 var WorkspaceService = class extends Context.Service()("overdeck/dashboard/WorkspaceService") {};
 const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 	function getWorkspacePath(issueId) {
@@ -790,8 +789,8 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath, branch } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (existsSync$1(workspacePath)) return workspacePath;
-				const { createWorkspace } = await import("./workspace-manager-g8GBLo49.js");
-				const { loadProjectsConfigSync } = await import("./projects-BGOgJTpI.js");
+				const { createWorkspace } = await import("./workspace-manager-BE2H8gD5.js");
+				const { loadProjectsConfigSync } = await import("./projects-BbMEBykK.js");
 				const { projects } = loadProjectsConfigSync();
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
@@ -826,7 +825,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
-				const { removeWorkspace } = await import("./workspace-manager-g8GBLo49.js");
+				const { removeWorkspace } = await import("./workspace-manager-BE2H8gD5.js");
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
 					id: issueId,
@@ -857,7 +856,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 			try: async () => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
-				const { stopWorkspaceDocker } = await import("./workspace-manager-g8GBLo49.js");
+				const { stopWorkspaceDocker } = await import("./workspace-manager-BE2H8gD5.js");
 				await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 			},
 			catch: () => void 0
@@ -926,7 +925,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 					join$1(workspacePath, ".devcontainer", "docker-compose.devcontainer.yml")
 				];
 				if (!composePaths.find((p) => existsSync$1(p))) {
-					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-BdQCQbQc.js");
+					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-Cy2QNx5O.js");
 					const ensure = ensureDevcontainerSync({
 						workspacePath,
 						issueId
@@ -937,7 +936,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 					});
 				}
 				const finalComposePath = composePaths.find((p) => existsSync$1(p));
-				if (finalComposePath) await execAsync$13(`docker compose -f "${finalComposePath}" up -d --build`, {
+				if (finalComposePath) await execAsync$12(`docker compose -f "${finalComposePath}" up -d --build`, {
 					cwd: dirname$1(finalComposePath),
 					timeout: 3e5
 				});
@@ -1100,7 +1099,7 @@ function getDefaultCwd() {
 //#endregion
 //#region services/open.ts
 init_src();
-const execAsync$12 = promisify(exec);
+const execAsync$11 = promisify(exec);
 function getFileManagerCommand() {
 	switch (process.platform) {
 		case "linux": return "xdg-open";
@@ -1133,7 +1132,7 @@ function launchDetached(launch) {
 }
 async function isCommandAvailable(command) {
 	try {
-		await execAsync$12(`${process.platform === "win32" ? "where" : "which"} ${command}`);
+		await execAsync$11(`${process.platform === "win32" ? "where" : "which"} ${command}`);
 		return true;
 	} catch {
 		return false;
@@ -4811,7 +4810,7 @@ init_tmux();
 init_config$1();
 const reauthSessions = /* @__PURE__ */ new Map();
 const SESSION_MAX_AGE_MS = 3600 * 1e3;
-const readJsonBody$16 = Effect.gen(function* () {
+const readJsonBody$17 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	return text ? JSON.parse(text) : {};
 });
@@ -4916,7 +4915,7 @@ const postCodexReauthRoute = HttpRouter.add("POST", "/api/settings/codex-reauth"
 const postCodexReauthStatusRoute = HttpRouter.add("POST", "/api/settings/codex-reauth/status", httpHandler(Effect.gen(function* () {
 	const originError = rejectInvalidOrigin(yield* HttpServerRequest.HttpServerRequest);
 	if (originError) return originError;
-	const body = yield* readJsonBody$16;
+	const body = yield* readJsonBody$17;
 	const sessionName = typeof body.session === "string" ? body.session : "";
 	const token = typeof body.token === "string" ? body.token : "";
 	const session = getLiveReauthSession(sessionName);
@@ -15944,7 +15943,7 @@ var require_get_vercel_oidc_token = /* @__PURE__ */ __commonJSMin(((exports, mod
 			err = error;
 		}
 		try {
-			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-DP7ukS32.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-Dn9hc4Ap.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
+			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-CEZZegEl.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-Cp6YfYRY.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
 			if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
 				await refreshToken(options);
 				token = getVercelOidcTokenSync();
@@ -28261,7 +28260,7 @@ var GoogleCloudTranscription = class {
 	}
 	async start(apiKey, model) {
 		try {
-			const { SpeechClient } = await import("./src-DFWsHM-l.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
+			const { SpeechClient } = await import("./src-DyS4x3Qs.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
 			if (this.closed) return;
 			const stream = new SpeechClient({ apiKey }).streamingRecognize({
 				config: {
@@ -28525,7 +28524,7 @@ const DEFAULT_VOICE_SETTINGS = {
 		model: "gpt-4.1-mini"
 	}
 };
-const readJsonBody$15 = Effect.gen(function* () {
+const readJsonBody$16 = Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const contentLength = Number(request.headers["content-length"] ?? 0);
 	if (Number.isFinite(contentLength) && contentLength > MAX_VOICE_SETTINGS_BODY_BYTES) return {
@@ -28648,7 +28647,7 @@ const getVoiceSettingsRoute = HttpRouter.add("GET", "/api/voice/settings", httpH
 const putVoiceSettingsRoute = HttpRouter.add("PUT", "/api/voice/settings", httpHandler(Effect.gen(function* () {
 	const originError = requireTrustedOrigin$2(yield* HttpServerRequest.HttpServerRequest);
 	if (originError) return originError;
-	const parsed = yield* readJsonBody$15;
+	const parsed = yield* readJsonBody$16;
 	if (!parsed.ok) return jsonResponse({ error: parsed.error }, { status: 413 });
 	const body = parsed.body;
 	if (!isVoiceSettings(body)) return jsonResponse({ error: "Invalid voice settings payload" }, { status: 400 });
@@ -29286,6 +29285,12 @@ function storedToDomainEvent(stored) {
 		payload: stored.payload
 	};
 }
+const isKnownDomainEvent = Schema.is(DomainEvent);
+function passesDomainEventSchema(event) {
+	if (isKnownDomainEvent(event)) return true;
+	console.error(`[ws-rpc] dropping domain event that fails DomainEvent schema validation — add it to the contracts union: type=${event.type} seq=${event.sequence}`);
+	return false;
+}
 function createSystemHeartbeatEvent() {
 	const ts = Date.now();
 	return {
@@ -29719,7 +29724,7 @@ const PanRpcLayer = PanRpcGroup.toLayer(Effect.gen(function* () {
 		[WS_METHODS.subscribeDomainEvents]: (_input) => {
 			console.log("[ws-rpc] subscribeDomainEvents invoked");
 			const heartbeats = Stream.tick("15 seconds").pipe(Stream.map(createSystemHeartbeatEvent));
-			return eventStore.streamEvents.pipe(Stream.map(storedToDomainEvent), Stream.merge(heartbeats));
+			return eventStore.streamEvents.pipe(Stream.map(storedToDomainEvent), Stream.filter(passesDomainEventSchema), Stream.merge(heartbeats));
 		},
 		[WS_METHODS.subscribeFlywheelStatus]: (_input) => Stream.callback((queue) => Effect.acquireRelease(Effect.promise(async () => {
 			const latest = await readCurrentLatestFlywheelStatus({ activeRunId: await runDashboardDbJob("getSetting", "flywheel.active_run_id") });
@@ -29730,7 +29735,7 @@ const PanRpcLayer = PanRpcGroup.toLayer(Effect.gen(function* () {
 		}), (unsubscribe) => Effect.sync(() => unsubscribe()))),
 		[WS_METHODS.subscribeIssueEvents]: (input) => {
 			console.log(`[ws-rpc] subscribeIssueEvents invoked issueId=${input.issueId}`);
-			return eventStore.streamEvents.pipe(Stream.map(storedToDomainEvent), Stream.mapEffect((event) => getCachedAgentIssueLookup(readModel).pipe(Effect.map((lookup) => filterDomainEventForIssue(event, input.issueId, lookup)))), Stream.filter((event) => event !== null));
+			return eventStore.streamEvents.pipe(Stream.map(storedToDomainEvent), Stream.filter(passesDomainEventSchema), Stream.mapEffect((event) => getCachedAgentIssueLookup(readModel).pipe(Effect.map((lookup) => filterDomainEventForIssue(event, input.issueId, lookup)))), Stream.filter((event) => event !== null));
 		},
 		[WS_METHODS.subscribeTerminal]: (input) => terminalService.streamSession(input.sessionName, input.cols, input.rows),
 		[WS_METHODS.subscribeAgentOutput]: (input) => eventStore.streamEvents.pipe(Stream.filter((e) => e.type === "agent.output_received" && e.payload["agentId"] === input.agentId), Stream.flatMap((e) => {
@@ -29752,7 +29757,7 @@ const PanRpcLayer = PanRpcGroup.toLayer(Effect.gen(function* () {
 			message: `Failed to build dashboard snapshot: ${String(cause)}`,
 			code: "SNAPSHOT_FAILED"
 		}))),
-		[WS_METHODS.replayEvents]: (input) => eventStore.readFrom(input.fromSequence).pipe(Effect.map((stored) => stored.map(storedToDomainEvent)), Effect.mapError((cause) => new PanRpcError({
+		[WS_METHODS.replayEvents]: (input) => eventStore.readFrom(input.fromSequence).pipe(Effect.map((stored) => stored.map(storedToDomainEvent).filter(passesDomainEventSchema)), Effect.mapError((cause) => new PanRpcError({
 			message: `Failed to replay events: ${String(cause)}`,
 			code: "REPLAY_FAILED"
 		}))),
@@ -30379,7 +30384,7 @@ function parseIssueIdFromTextSync(value) {
 //#region services/resource-discovery.ts
 init_projects();
 init_tmux();
-const execFileAsync$9 = promisify(execFile);
+const execFileAsync$14 = promisify(execFile);
 const RESOURCE_DISCOVERY_TTL_MS = 3e4;
 const RECENT_ACTIVITY_WINDOW_MS = 5e3;
 let cachedResourceIssues = null;
@@ -30487,7 +30492,7 @@ function isDiscoverableAgentSession(sessionName) {
 async function loadTrackerIssues() {
 	const map = /* @__PURE__ */ new Map();
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-BDRqGHSo.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-DFei50PX.js");
 		const issues = (await getSharedIssueService()).getIssues();
 		for (const issue of issues) if (issue.identifier) map.set(issue.identifier.toUpperCase(), issue);
 	} catch {
@@ -30504,7 +30509,7 @@ async function loadTmuxSessions() {
 }
 async function loadDockerContainers() {
 	try {
-		const { stdout } = await execFileAsync$9("docker", [
+		const { stdout } = await execFileAsync$14("docker", [
 			"ps",
 			"--format",
 			"{{.Names}}"
@@ -30522,7 +30527,7 @@ async function loadOpenPullRequests() {
 	const repos = getGitHubConfig()?.repos ?? [];
 	await Promise.all(repos.map(async (repo) => {
 		try {
-			const { stdout } = await execFileAsync$9("gh", [
+			const { stdout } = await execFileAsync$14("gh", [
 				"pr",
 				"list",
 				"--repo",
@@ -30553,7 +30558,7 @@ async function loadOpenPullRequests() {
 }
 async function loadProjectBranches(projectPath) {
 	try {
-		const [localResult, remoteResult] = await Promise.all([execFileAsync$9("git", [
+		const [localResult, remoteResult] = await Promise.all([execFileAsync$14("git", [
 			"for-each-ref",
 			"refs/heads/feature/*",
 			"--format=%(refname:short)"
@@ -30561,7 +30566,7 @@ async function loadProjectBranches(projectPath) {
 			cwd: projectPath,
 			encoding: "utf-8",
 			timeout: 1e4
-		}).catch(() => ({ stdout: "" })), execFileAsync$9("git", [
+		}).catch(() => ({ stdout: "" })), execFileAsync$14("git", [
 			"for-each-ref",
 			"refs/remotes/origin/feature/*",
 			"--format=%(refname:short)"
@@ -30686,7 +30691,7 @@ async function computeResourceAllocatedIssues() {
 		if (!issue.resourceDetails.tmuxSessions.includes(sessionName)) issue.resourceDetails.tmuxSessions.push(sessionName);
 	}
 	try {
-		const { listActiveRemoteAgentStates } = await import("./remote-agents-BT_DHl8s.js");
+		const { listActiveRemoteAgentStates } = await import("./remote-agents-BXKV5iBS.js");
 		for (const remoteState of listActiveRemoteAgentStates()) {
 			const issue = ensureIssue(remoteState.issueId);
 			if (!issue) continue;
@@ -30890,7 +30895,7 @@ function groupResourceAllocatedIssuesByProject(issues) {
 //#region ../../lib/overdeck/issue-reads.ts
 init_tracker_config();
 init_projects();
-const execFileAsync$8 = promisify(execFile);
+const execFileAsync$13 = promisify(execFile);
 function isGitHubIssue$6(issueId) {
 	const resolved = resolveGitHubIssueSync(issueId);
 	if (resolved.isGitHub) return {
@@ -31071,7 +31076,7 @@ function getIssueBeads(id) {
 		const { beads, querySource } = yield* Effect.promise(async () => {
 			try {
 				const bdSearchDir = workspacePath && existsSync$1(workspacePath) ? workspacePath : projectPath || homedir$1();
-				const { stdout } = await Effect.runPromise(withBdMutex(() => Effect.promise(() => execFileAsync$8("bd", [
+				const { stdout } = await Effect.runPromise(withBdMutex(() => Effect.promise(() => execFileAsync$13("bd", [
 					"list",
 					"--json",
 					"-l",
@@ -31192,7 +31197,7 @@ init_projects();
 init_remote_agents();
 init_tracker_utils();
 init_tmux();
-const execFileAsync$7 = promisify(execFile);
+const execFileAsync$12 = promisify(execFile);
 function getIssueDataService$9() {
 	return getSharedIssueService();
 }
@@ -31249,7 +31254,7 @@ async function completePlanningArtifacts(options) {
 	if (workspaceIssueId && workspaceIssueId.toLowerCase() !== issueLower) throw new Error(`Workspace vBRIEF is for ${workspaceIssueId.toUpperCase()}, not ${upperIssueId}`);
 	assertPlanQuality(workspaceDoc);
 	const createBeads = options.createBeads ?? (async (path) => {
-		const mod = await import("./beads-D1muPgsx.js");
+		const mod = await import("./beads-B4ysfx-Y.js");
 		return await Effect.runPromise(mod.createBeadsFromVBrief(path));
 	});
 	emitCompletePlanningPhase(upperIssueId, "specWrite", "start", "writing proposed vBRIEF spec", { projectPath });
@@ -31316,8 +31321,72 @@ function completePlanningWorkspaceGitAddCommands(gitRoot) {
 	const commands = [];
 	if (existsSync$1(join$1(gitRoot, ".pan"))) commands.push(["add", ".pan/"]);
 	if (existsSync$1(join$1(gitRoot, ".beads"))) commands.push(["add", ".beads/"]);
+	if (existsSync$1(join$1(gitRoot, ".gitignore"))) commands.push(["add", ".gitignore"]);
 	return commands;
 }
+/**
+* PAN-2386: complete-planning can leave `.pan/records/<issue>.json` modified after
+* the main `chore(plan): complete planning` commit because record writes are
+* queued for debounced auto-commit. If auto-start is requested, the subsequent
+* start-agent dirty-workspace guard refuses to spawn the work agent. Flush any
+* pending auto-commits and explicitly stage/commit the per-issue record so the
+* tree handed to auto-start is clean.
+*/
+async function commitWorkspaceRecordBeforeAutoSpawn(gitRoot, issueId) {
+	if (!existsSync$1(join$1(gitRoot, ".git"))) return;
+	const issueLower = issueId.toLowerCase();
+	try {
+		await Effect.runPromise(flushAutoCommits(gitRoot));
+	} catch {}
+	const recordPath = join$1(".pan", "records", `${issueLower}.json`);
+	try {
+		const { stdout: statusOut } = await execFileAsync$12("git", [
+			"status",
+			"--porcelain",
+			"--",
+			recordPath
+		], {
+			cwd: gitRoot,
+			encoding: "utf-8"
+		});
+		if (!statusOut.trim()) return;
+		await execFileAsync$12("git", [
+			"add",
+			"--",
+			recordPath
+		], {
+			cwd: gitRoot,
+			encoding: "utf-8"
+		});
+		try {
+			await execFileAsync$12("git", [
+				"diff",
+				"--cached",
+				"--quiet",
+				"--",
+				recordPath
+			], {
+				cwd: gitRoot,
+				encoding: "utf-8"
+			});
+			return;
+		} catch {}
+		await execFileAsync$12("git", [
+			"commit",
+			"-m",
+			`chore(records): update ${issueId.toUpperCase()} per-issue record before auto-start`,
+			"--",
+			recordPath
+		], {
+			cwd: gitRoot,
+			encoding: "utf-8"
+		});
+		console.log(`[complete-planning] Committed per-issue record for ${issueId.toUpperCase()} before auto-start`);
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		console.warn(`[complete-planning] Could not commit per-issue record for ${issueId.toUpperCase()}: ${message}`);
+	}
+}
 function getInternalDashboardOrigin() {
 	const port = Number.parseInt(process.env["API_PORT"] ?? process.env["PORT"] ?? "3011", 10);
 	return process.env["OVERDECK_INTERNAL_DASHBOARD_URL"] ?? `http://127.0.0.1:${port}`;
@@ -31517,7 +31586,7 @@ async function completePlanningForIssue(options) {
 			const filesToStage = completePlanningFilesToStage(projectPath, proposed.filename);
 			if (!existsSync$1(join$1(projectPath, ".git"))) console.log(`[complete-planning] Project root ${projectPath} is not a git repository (polyrepo) — pan spec updated on disk but not committed`);
 			else {
-				const { stdout: branchStdout } = await execFileAsync$7("git", [
+				const { stdout: branchStdout } = await execFileAsync$12("git", [
 					"rev-parse",
 					"--abbrev-ref",
 					"HEAD"
@@ -31527,7 +31596,7 @@ async function completePlanningForIssue(options) {
 				});
 				const currentBranch = branchStdout.trim();
 				if (currentBranch === "main") {
-					await execFileAsync$7("git", [
+					await execFileAsync$12("git", [
 						"add",
 						"--",
 						...filesToStage
@@ -31536,7 +31605,7 @@ async function completePlanningForIssue(options) {
 						encoding: "utf-8"
 					});
 					try {
-						await execFileAsync$7("git", [
+						await execFileAsync$12("git", [
 							"diff",
 							"--cached",
 							"--quiet",
@@ -31547,7 +31616,7 @@ async function completePlanningForIssue(options) {
 							encoding: "utf-8"
 						});
 					} catch {
-						await execFileAsync$7("git", [
+						await execFileAsync$12("git", [
 							"commit",
 							"-m",
 							`chore(scope): propose ${upperIssueId} vBRIEF`,
@@ -31560,7 +31629,7 @@ async function completePlanningForIssue(options) {
 						});
 						console.log(`[complete-planning] Committed pan spec on main for ${upperIssueId}`);
 						try {
-							const { stdout: remotes } = await execFileAsync$7("git", ["remote"], {
+							const { stdout: remotes } = await execFileAsync$12("git", ["remote"], {
 								cwd: projectPath,
 								encoding: "utf-8"
 							});
@@ -31573,16 +31642,16 @@ async function completePlanningForIssue(options) {
 					}
 				} else console.log(`[complete-planning] Project root not on main (${currentBranch}) — pan spec updated on disk but not committed on main`);
 			}
-			if (!existsSync$1(join$1(gitRoot, ".git"))) await execFileAsync$7("git", ["init"], {
+			if (!existsSync$1(join$1(gitRoot, ".git"))) await execFileAsync$12("git", ["init"], {
 				cwd: gitRoot,
 				encoding: "utf-8"
 			});
-			for (const args of completePlanningWorkspaceGitAddCommands(gitRoot)) await execFileAsync$7("git", args, {
+			for (const args of completePlanningWorkspaceGitAddCommands(gitRoot)) await execFileAsync$12("git", args, {
 				cwd: gitRoot,
 				encoding: "utf-8"
 			});
 			try {
-				await execFileAsync$7("git", [
+				await execFileAsync$12("git", [
 					"diff",
 					"--cached",
 					"--quiet"
@@ -31591,7 +31660,7 @@ async function completePlanningForIssue(options) {
 					encoding: "utf-8"
 				});
 			} catch {
-				await execFileAsync$7("git", [
+				await execFileAsync$12("git", [
 					"commit",
 					"-m",
 					`chore(plan): complete planning for ${id}`,
@@ -31602,7 +31671,7 @@ async function completePlanningForIssue(options) {
 				});
 			}
 			try {
-				const { stdout: remotes } = await execFileAsync$7("git", ["remote"], {
+				const { stdout: remotes } = await execFileAsync$12("git", ["remote"], {
 					cwd: gitRoot,
 					encoding: "utf-8"
 				});
@@ -31680,6 +31749,7 @@ async function completePlanningForIssue(options) {
 			source: "planning-agent",
 			eventType: "planning.complete"
 		});
+		if (autoSpawn && workspacePath) await commitWorkspaceRecordBeforeAutoSpawn(workspacePath, id);
 		const autoSpawnResult = await completePlanningAutoSpawnAndKill({
 			issueId: id,
 			autoSpawn,
@@ -31779,8 +31849,8 @@ init_tracker_utils();
 init_agents$1();
 init_issue_id();
 init_io();
-const execAsync$11 = promisify(exec);
-const execFileAsync$6 = promisify(execFile);
+const execAsync$10 = promisify(exec);
+const execFileAsync$11 = promisify(execFile);
 function isGitHubIssue$4(issueId) {
 	const resolved = resolveGitHubIssueSync(issueId);
 	if (resolved.isGitHub) return {
@@ -31819,7 +31889,7 @@ async function closeIssuePullRequest(issueId, reason = "Canceled via Overdeck")
 	if (!githubCheck.isGitHub || !githubCheck.owner || !githubCheck.repo) return ["No GitHub PR to close"];
 	const branchName = `feature/${issueId.toLowerCase()}`;
 	try {
-		const { stdout: prListRaw } = await execFileAsync$6("gh", [
+		const { stdout: prListRaw } = await execFileAsync$11("gh", [
 			"pr",
 			"list",
 			"--repo",
@@ -31838,7 +31908,7 @@ async function closeIssuePullRequest(issueId, reason = "Canceled via Overdeck")
 		});
 		const prNumber = prListRaw.trim();
 		if (!prNumber) return ["No open PR found for branch"];
-		await execFileAsync$6("gh", [
+		await execFileAsync$11("gh", [
 			"pr",
 			"close",
 			prNumber,
@@ -31851,7 +31921,7 @@ async function closeIssuePullRequest(issueId, reason = "Canceled via Overdeck")
 			timeout: 15e3
 		});
 		try {
-			const { setReviewStatusSync } = await import("./review-status-DZSsEGO4.js");
+			const { setReviewStatusSync } = await import("./review-status-Rr4SB2Kj.js");
 			setReviewStatusSync(issueId.toUpperCase(), { prUrl: void 0 });
 		} catch {}
 		return [`Closed PR #${prNumber} on ${githubCheck.owner}/${githubCheck.repo}`];
@@ -31905,7 +31975,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	const { ctx, projectConfig } = buildLifecycleContext(id, getIssueDataService$8().getIssueSource(id) ?? void 0);
 	const deleteWorkspace = opts.deleteWorkspace ?? true;
 	cleanupLog.push(...await closeIssuePullRequest(id, mode === "cancel" ? "Canceled via Overdeck" : "Reset to Todo via Overdeck"));
-	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-BG47TprR.js");
+	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-Va4AZGRx.js");
 	const workflow = mode === "cancel" ? cancelIssueWorkflow : resetToTodo;
 	const result = await Effect.runPromise(workflow(ctx, {
 		deleteWorkspace,
@@ -31920,7 +31990,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	}));
 	cleanupLog.push(...result.steps.flatMap((step) => step.details || [step.error].filter(Boolean)));
 	if (mode === "cancel") try {
-		const { transitionVBriefOnMain } = await import("./lifecycle-io-De3FFKAu.js");
+		const { transitionVBriefOnMain } = await import("./lifecycle-io-BHi2NPxK.js");
 		const tx = await Effect.runPromise(transitionVBriefOnMain(ctx.projectPath, id, "cancelled", "cancelled", `scope: cancel ${id.toUpperCase()} vBRIEF`));
 		if (tx.moved) cleanupLog.push(`vBRIEF moved ${tx.fromDir} → cancelled`);
 		if (tx.committed) cleanupLog.push(`Committed vBRIEF cancellation on main`);
@@ -31928,8 +31998,8 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push(`vBRIEF cancel transition failed (non-fatal): ${err?.message ?? err}`);
 	}
 	try {
-		const { killAllReviewerSessions } = await import("./review-agent-CfFA3HqX.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-BGOgJTpI.js");
+		const { killAllReviewerSessions } = await import("./review-agent-DfN-7KW6.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-BbMEBykK.js");
 		const projectKey = resolveProjectFromIssueSync(id)?.projectKey;
 		if (projectKey) {
 			const { killed } = await Effect.runPromise(killAllReviewerSessions(projectKey, id.toUpperCase()));
@@ -31943,7 +32013,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push("Cleared review status");
 	} catch {}
 	try {
-		const { resetPostMergeState } = await import("./merge-agent-BmLQPYGq.js");
+		const { resetPostMergeState } = await import("./merge-agent-DZaRBHQA.js");
 		resetPostMergeState(id);
 		resetPostMergeState(id.toUpperCase());
 		cleanupLog.push("Cleared merge state");
@@ -31963,7 +32033,7 @@ function closeIssueTransition(options) {
 		const { issueId, body, eventStore } = options;
 		const { reason } = body;
 		const projectPath = getProjectPath$3(void 0, extractPrefixSync(issueId) ?? issueId.split("-")[0]);
-		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-BG47TprR.js"));
+		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-Va4AZGRx.js"));
 		const githubCheck = isGitHubIssue$4(issueId);
 		const issueDataService = getIssueDataService$8();
 		const issueSource = issueDataService.getIssueSource(issueId);
@@ -31986,7 +32056,7 @@ function closeIssueTransition(options) {
 			};
 		}
 		const result = yield* closeWorkflow(ctx, { reason });
-		if (githubCheck.isGitHub) execAsync$11("pan sync", {
+		if (githubCheck.isGitHub) execAsync$10("pan sync", {
 			encoding: "utf-8",
 			timeout: 3e4
 		}).catch(() => {});
@@ -32197,13 +32267,13 @@ function reopenIssueTransition(options) {
 			}
 			yield* Effect.promise(async () => {
 				try {
-					const { stdout } = await execAsync$11(`gh pr list --head ${`feature/${id.toLowerCase()}`} --state closed --json number,mergedAt --limit 1`, {
+					const { stdout } = await execAsync$10(`gh pr list --head ${`feature/${id.toLowerCase()}`} --state closed --json number,mergedAt --limit 1`, {
 						encoding: "utf-8",
 						timeout: 15e3
 					});
 					const prs = JSON.parse(stdout.trim() || "[]");
 					if (prs.length > 0 && !prs[0].mergedAt) {
-						await execAsync$11(`gh pr reopen ${prs[0].number}`, {
+						await execAsync$10(`gh pr reopen ${prs[0].number}`, {
 							encoding: "utf-8",
 							timeout: 15e3
 						});
@@ -32230,7 +32300,7 @@ function reopenIssueTransition(options) {
 				else clearReviewStatus(id.toUpperCase());
 			} catch {}
 			try {
-				const { resetPostMergeState } = await import("./merge-agent-BmLQPYGq.js");
+				const { resetPostMergeState } = await import("./merge-agent-DZaRBHQA.js");
 				resetPostMergeState(id);
 				resetPostMergeState(id.toUpperCase());
 			} catch {}
@@ -32250,9 +32320,9 @@ function reopenIssueTransition(options) {
 				const projectPath = (teamPrefix ? findProjectByTeamSync(teamPrefix) : null)?.path || "";
 				if (projectPath) {
 					const workspacePath = join$1(projectPath, "workspaces", `feature-${issueLower}`);
-					const { createBeadsFromVBrief } = await import("./beads-D1muPgsx.js");
+					const { createBeadsFromVBrief } = await import("./beads-B4ysfx-Y.js");
 					if (existsSync$1(workspacePath) && await Effect.runPromise(findPlan(workspacePath))) try {
-						const { stdout: bdCheck } = await Effect.runPromise(withBdMutex(() => Effect.promise(() => execFileAsync$6("bd", [
+						const { stdout: bdCheck } = await Effect.runPromise(withBdMutex(() => Effect.promise(() => execFileAsync$11("bd", [
 							"list",
 							"--json",
 							"-l",
@@ -32327,7 +32397,7 @@ function moveIssueStatus(options) {
 			"done"
 		];
 		if (!targetStatus || !validStatuses.includes(targetStatus)) return jsonResponse({ error: `Invalid targetStatus. Must be one of: ${validStatuses.join(", ")}` }, { status: 400 });
-		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-BQXOrIFn.js"));
+		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-nDkNqpYC.js"));
 		const issueState = {
 			backlog: "open",
 			todo: "open",
@@ -32390,7 +32460,7 @@ function moveIssueStatus(options) {
 init_issue_service_singleton();
 init_issue_id();
 init_agents$1();
-const execAsync$10 = promisify(exec);
+const execAsync$9 = promisify(exec);
 function getIssueDataService$7() {
 	return getSharedIssueService();
 }
@@ -32415,28 +32485,28 @@ async function cleanupWorkspaceForIssue(rawId, eventStore) {
 	if (projectRoot) {
 		const workspacePath = join$1(projectRoot, "workspaces", `feature-${issueLower}`);
 		try {
-			if ((await execAsync$10("git worktree list --porcelain", {
+			if ((await execAsync$9("git worktree list --porcelain", {
 				cwd: projectRoot,
 				encoding: "utf-8"
 			})).stdout.includes(workspacePath)) {
-				await execAsync$10(`git worktree remove "${workspacePath}" --force`, {
+				await execAsync$9(`git worktree remove "${workspacePath}" --force`, {
 					cwd: projectRoot,
 					encoding: "utf-8"
 				});
 				cleanupLog.push(`Removed git worktree: ${workspacePath}`);
 			} else if (existsSync$1(workspacePath)) {
-				await execAsync$10(`rm -rf "${workspacePath}"`, { encoding: "utf-8" });
+				await execAsync$9(`rm -rf "${workspacePath}"`, { encoding: "utf-8" });
 				cleanupLog.push(`Removed directory: ${workspacePath}`);
 			}
 		} catch {
 			if (existsSync$1(workspacePath)) {
-				await execAsync$10(`rm -rf "${workspacePath}"`, { encoding: "utf-8" });
+				await execAsync$9(`rm -rf "${workspacePath}"`, { encoding: "utf-8" });
 				cleanupLog.push(`Removed directory: ${workspacePath}`);
 			}
 		}
 		const branchName = `feature/${issueLower}`;
 		try {
-			await execAsync$10(`git branch -D "${branchName}" 2>/dev/null || true`, {
+			await execAsync$9(`git branch -D "${branchName}" 2>/dev/null || true`, {
 				cwd: projectRoot,
 				encoding: "utf-8"
 			});
@@ -32445,7 +32515,7 @@ async function cleanupWorkspaceForIssue(rawId, eventStore) {
 	}
 	const agentDir = join$1(homedir$1(), ".overdeck", "agents", `agent-${issueLower}`);
 	if (existsSync$1(agentDir)) {
-		await execAsync$10(`rm -rf "${agentDir}"`, { encoding: "utf-8" });
+		await execAsync$9(`rm -rf "${agentDir}"`, { encoding: "utf-8" });
 		cleanupLog.push(`Removed agent state: ${agentDir}`);
 	}
 	await Effect.runPromise(eventStore.append({
@@ -32554,7 +32624,7 @@ async function copySettingsToWorkspace(id) {
 		success: false,
 		error: "Workspace not found"
 	}, { status: 404 });
-	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-g8GBLo49.js");
+	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-BE2H8gD5.js");
 	const result = copyOverdeckSettingsToWorkspaceSync(workspacePath);
 	return jsonResponse({
 		success: result.errors.length === 0 || result.copied.length > 0,
@@ -32587,7 +32657,7 @@ function generateTasksForIssue(id) {
 			success: false,
 			error: `No vBRIEF spec found on main for ${id} — run planning first.`
 		}, { status: 409 });
-		const { createBeadsFromVBrief } = yield* Effect.promise(() => import("./beads-D1muPgsx.js"));
+		const { createBeadsFromVBrief } = yield* Effect.promise(() => import("./beads-B4ysfx-Y.js"));
 		const result = yield* createBeadsFromVBrief(workspacePath);
 		if (!result.success || result.created.length === 0) {
 			const errors = result.errors.length > 0 ? result.errors : ["Beads creation produced no tasks"];
@@ -32617,8 +32687,8 @@ init_projects();
 init_tracker_utils();
 init_tmux();
 init_typed_errors();
-const execAsync$9 = promisify(exec);
-const execFileAsync$5 = promisify(execFile);
+const execAsync$8 = promisify(exec);
+const execFileAsync$10 = promisify(execFile);
 function getIssueDataService$6() {
 	return getSharedIssueService();
 }
@@ -32918,7 +32988,7 @@ function abortPlanningForIssue(options) {
 						const featureWorkspacePath = join$1(projectPath, "workspaces", `feature-${issueIdentifier.toLowerCase()}`);
 						const plainWorkspacePath = join$1(projectPath, "workspaces", issueIdentifier.toLowerCase());
 						if (existsSync$1(existsSync$1(featureWorkspacePath) ? featureWorkspacePath : plainWorkspacePath)) {
-							await execFileAsync$5("pan", [
+							await execFileAsync$10("pan", [
 								"workspace",
 								"destroy",
 								issueIdentifier.toLowerCase(),
@@ -33027,10 +33097,10 @@ function restartFromPlan(options) {
 		});
 		const resetResult = yield* Effect.promise(async () => {
 			try {
-				const { runGitResetHard } = await import("./dangerous-git-ops-bz-261-k.js");
+				const { runGitResetHard } = await import("./dangerous-git-ops-C9iYTZ0M.js");
 				async function findPlanningCommit(grep, label) {
 					try {
-						const { stdout } = await execAsync$9(`git log --grep="${grep.replace(/"/g, "\\\"")}" --format=%H -1`, {
+						const { stdout } = await execAsync$8(`git log --grep="${grep.replace(/"/g, "\\\"")}" --format=%H -1`, {
 							cwd: workspacePath,
 							encoding: "utf-8",
 							timeout: 1e4
@@ -33046,7 +33116,7 @@ function restartFromPlan(options) {
 				}
 				const found = await findPlanningCommit(`Complete planning for ${id}`, "complete-planning message") ?? await findPlanningCommit(`chore: planning artifacts for ${id}`, "agent-start message") ?? await (async () => {
 					try {
-						const { stdout } = await execAsync$9(`git log --diff-filter=A --format=%H -1 -- .pan/spec.vbrief.json`, {
+						const { stdout } = await execAsync$8(`git log --diff-filter=A --format=%H -1 -- .pan/spec.vbrief.json`, {
 							cwd: workspacePath,
 							encoding: "utf-8",
 							timeout: 1e4
@@ -33173,6 +33243,7 @@ function getPlanningState(id) {
 }
 //#endregion
 //#region ../../lib/overdeck/discussions.ts
+init_cost_sync();
 init_github_app();
 init_pull_requests();
 init_issue_id();
@@ -33180,7 +33251,7 @@ init_github_pr_lookup();
 init_tracker_utils();
 init_tracker_config();
 init_pr_tab_cache();
-const execAsync$8 = promisify(exec);
+const execAsync$7 = promisify(exec);
 function isGitHubIssue$2(issueId) {
 	const resolved = resolveGitHubIssueSync(issueId);
 	if (resolved.isGitHub) return {
@@ -33228,7 +33299,7 @@ async function fetchIssueDiscussions(issueId, deps = {}) {
 		if (githubCheck.isGitHub && githubCheck.owner && githubCheck.repo && githubCheck.number) {
 			const { owner, repo, number } = githubCheck;
 			try {
-				const { stdout } = await execAsync$8(`gh api "repos/${owner}/${repo}/issues/${number}/comments?per_page=100"`, {
+				const { stdout } = await execAsync$7(`gh api "repos/${owner}/${repo}/issues/${number}/comments?per_page=100"`, {
 					encoding: "utf-8",
 					timeout: 15e3,
 					maxBuffer: 8 * 1024 * 1024
@@ -33291,7 +33362,7 @@ async function fetchIssueDiscussions(issueId, deps = {}) {
 		const collectedItems = [];
 		const prConversation = (async () => {
 			try {
-				const { stdout } = await execAsync$8(`gh api "repos/${prOwner}/${prRepo}/issues/${prNumber}/comments?per_page=100"`, {
+				const { stdout } = await execAsync$7(`gh api "repos/${prOwner}/${prRepo}/issues/${prNumber}/comments?per_page=100"`, {
 					encoding: "utf-8",
 					timeout: 15e3,
 					maxBuffer: 8 * 1024 * 1024
@@ -33312,7 +33383,7 @@ async function fetchIssueDiscussions(issueId, deps = {}) {
 		})();
 		const prReviews = (async () => {
 			try {
-				const { stdout } = await execAsync$8(`gh api "repos/${prOwner}/${prRepo}/pulls/${prNumber}/reviews?per_page=100"`, {
+				const { stdout } = await execAsync$7(`gh api "repos/${prOwner}/${prRepo}/pulls/${prNumber}/reviews?per_page=100"`, {
 					encoding: "utf-8",
 					timeout: 15e3,
 					maxBuffer: 8 * 1024 * 1024
@@ -33337,7 +33408,7 @@ async function fetchIssueDiscussions(issueId, deps = {}) {
 		})();
 		const prInlineComments = (async () => {
 			try {
-				const { stdout } = await execAsync$8(`gh api "repos/${prOwner}/${prRepo}/pulls/${prNumber}/comments?per_page=100"`, {
+				const { stdout } = await execAsync$7(`gh api "repos/${prOwner}/${prRepo}/pulls/${prNumber}/comments?per_page=100"`, {
 					encoding: "utf-8",
 					timeout: 15e3,
 					maxBuffer: 8 * 1024 * 1024
@@ -33479,7 +33550,7 @@ function closeOutIssue(id) {
 		}
 		const closeOutResult = yield* Effect.promise(async () => {
 			try {
-				const { closeOut } = await import("./lifecycle-BG47TprR.js");
+				const { closeOut } = await import("./lifecycle-Va4AZGRx.js");
 				return {
 					ok: true,
 					result: await Effect.runPromise(closeOut(ctx))
@@ -33565,7 +33636,7 @@ function bulkCloseOut(body) {
 		const invalidIds = issueIds.filter((id) => !isValidIssueId(id));
 		if (invalidIds.length > 0) return jsonResponse({ error: `Invalid issue ID format: ${invalidIds.join(", ")}` }, { status: 400 });
 		const eventStore = yield* EventStoreService;
-		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-BG47TprR.js"));
+		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-Va4AZGRx.js"));
 		const issueDataService = getIssueDataService$5();
 		const tasks = [];
 		const agentChecks = yield* withConcurrencyLimit(issueIds.map((id) => Effect.promise(async () => {
@@ -33732,7 +33803,7 @@ promisify(execFile);
 function getIssueDataService$4() {
 	return getSharedIssueService();
 }
-const readJsonBody$14 = Effect.gen(function* () {
+const readJsonBody$15 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -33757,12 +33828,28 @@ const getIssueAnalyzeRoute = HttpRouter.add("GET", "/api/issues/:id/analyze", ht
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* analyzeIssue(id);
 })));
+const getIssueShipLogRoute = HttpRouter.add("GET", "/api/issues/:id/ship-log", httpHandler(Effect.gen(function* () {
+	const id = (yield* HttpRouter.params)["id"] ?? "";
+	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
+	return yield* Effect.promise(async () => {
+		const { getShipLog } = await import("./ship-log-EV79hCrN.js");
+		const { getReviewStatusSync } = await import("./review-status-Rr4SB2Kj.js");
+		const log = getShipLog(id);
+		const rs = getReviewStatusSync(id);
+		return jsonResponse({
+			issueId: id.toUpperCase(),
+			mergeStatus: rs?.mergeStatus ?? null,
+			mergeStep: rs?.mergeStep ?? null,
+			log
+		});
+	});
+})));
 const postIssueCloseRoute = HttpRouter.add("POST", "/api/issues/:issueId/close", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* closeIssueTransition({
 		issueId,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -33771,7 +33858,7 @@ const postIssueStartPlanningRoute = HttpRouter.add("POST", "/api/issues/:id/star
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* startPlanningForIssue({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		eventStore: yield* EventStoreService,
 		linear: yield* LinearClient,
 		github: yield* GitHubClient,
@@ -33784,7 +33871,7 @@ const postIssueAbortPlanningRoute = HttpRouter.add("POST", "/api/issues/:id/abor
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* abortPlanningForIssue({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		lifecycle: yield* IssueLifecycle,
 		linear: yield* LinearClient,
 		eventStore: yield* EventStoreService
@@ -33794,7 +33881,7 @@ const postIssueCompletePlanningRoute = HttpRouter.add("POST", "/api/issues/:id/c
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
-	const body = yield* readJsonBody$14;
+	const body = yield* readJsonBody$15;
 	const eventStore = yield* EventStoreService;
 	const linear = yield* LinearClient;
 	const lifecycle = yield* IssueLifecycle;
@@ -33820,7 +33907,7 @@ const postIssueResetRoute = HttpRouter.add("POST", "/api/issues/:id/reset", http
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* resetIssueTransition({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -33829,7 +33916,7 @@ const postIssueCancelRoute = HttpRouter.add("POST", "/api/issues/:id/cancel", ht
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* cancelIssueTransition({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -33840,7 +33927,7 @@ const postIssueReopenRoute = HttpRouter.add("POST", "/api/issues/:id/reopen", ht
 	if (authError) return authError;
 	return yield* reopenIssueTransition({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		lifecycle: yield* IssueLifecycle,
 		linear: yield* LinearClient,
 		eventStore: yield* EventStoreService
@@ -33860,7 +33947,7 @@ const postIssueMoveStatusRoute = HttpRouter.add("POST", "/api/issues/:id/move-st
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* moveIssueStatus({
 		id,
-		body: yield* readJsonBody$14,
+		body: yield* readJsonBody$15,
 		eventStore: yield* EventStoreService,
 		lifecycle: yield* IssueLifecycle
 	});
@@ -33872,7 +33959,7 @@ const postIssueCleanupWorkspaceRoute = HttpRouter.add("POST", "/api/issues/:id/c
 })));
 const postIssueDeepWipeRoute = HttpRouter.add("POST", "/api/issues/:id/deep-wipe", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
-	const body = yield* readJsonBody$14;
+	const body = yield* readJsonBody$15;
 	const eventStore = yield* EventStoreService;
 	return yield* Effect.promise(() => deepWipeIssue(id, body, eventStore));
 })));
@@ -33912,7 +33999,7 @@ const postIssueBeadInspectRoute = HttpRouter.add("POST", "/api/issues/:id/beads/
 	return yield* inspectIssueBead({
 		id: (params["id"] ?? "").toUpperCase(),
 		beadId: params["beadId"] ?? "",
-		body: yield* readJsonBody$14
+		body: yield* readJsonBody$15
 	});
 })));
 const getIssuePlanningStateRoute = HttpRouter.add("GET", "/api/issues/:id/planning-state", httpHandler(Effect.gen(function* () {
@@ -33975,7 +34062,7 @@ const getIssueDiscussionsRoute = HttpRouter.add("GET", "/api/issues/:id/discussi
 const getIssueCostsRoute = HttpRouter.add("GET", "/api/issues/:id/costs", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
-	const issueData = getCostsForIssueSync(id);
+	const issueData = getCostForIssueAggregateSync(id);
 	const agents = yield* Effect.promise(() => getCachedRunningAgents());
 	const resolvedCost = resolveIssueHeadlineCost({
 		issueId: id,
@@ -34023,7 +34110,7 @@ const getIssueCostsRoute = HttpRouter.add("GET", "/api/issues/:id/costs", httpHa
 			cost: stats.cost,
 			tokens: stats.tokens
 		}])),
-		budget: issueData.budget,
+		budget: void 0,
 		budgetWarning: issueData.budgetWarning,
 		lastUpdated: issueData.lastUpdated
 	});
@@ -34034,7 +34121,7 @@ const getResourceAllocatedIssuesRoute = HttpRouter.add("GET", "/api/issues/resou
 const getIssueResourceDetailsRoute = HttpRouter.add("GET", "/api/issues/:id/resource-details", httpHandler(Effect.gen(function* () {
 	return yield* getIssueResourceDetails((yield* HttpRouter.params)["id"] ?? "");
 })));
-const issuesRouteLayer = Layer.mergeAll(getIssuesRoute, getIssueAnalyzeRoute, postIssueCloseRoute, postIssueStartPlanningRoute, postIssueAbortPlanningRoute, postIssueCompletePlanningRoute, postIssueAbortRoute, postIssueResetRoute, postIssueCancelRoute, postIssueReopenRoute, postIssueRestartFromPlanRoute, postIssueMoveStatusRoute, postIssueCleanupWorkspaceRoute, postIssueDeepWipeRoute, postIssueCopySettingsRoute, postIssueCloseOutRoute, postIssuesBulkCloseOutRoute, getIssueBeadsRoute, postIssueBeadInspectRoute, getIssuePlanningStateRoute, postIssueGenerateTasksRoute, getIssueCostsRoute, getResourceAllocatedIssuesRoute, getIssueResourceDetailsRoute, getIssuePrRoute, getIssuePrDiffRoute, getIssuePrDetailsRoute, getIssueCheckRunsRoute, getIssueDiscussionsRoute);
+const issuesRouteLayer = Layer.mergeAll(getIssuesRoute, getIssueAnalyzeRoute, getIssueShipLogRoute, postIssueCloseRoute, postIssueStartPlanningRoute, postIssueAbortPlanningRoute, postIssueCompletePlanningRoute, postIssueAbortRoute, postIssueResetRoute, postIssueCancelRoute, postIssueReopenRoute, postIssueRestartFromPlanRoute, postIssueMoveStatusRoute, postIssueCleanupWorkspaceRoute, postIssueDeepWipeRoute, postIssueCopySettingsRoute, postIssueCloseOutRoute, postIssuesBulkCloseOutRoute, getIssueBeadsRoute, postIssueBeadInspectRoute, getIssuePlanningStateRoute, postIssueGenerateTasksRoute, getIssueCostsRoute, getResourceAllocatedIssuesRoute, getIssueResourceDetailsRoute, getIssuePrRoute, getIssuePrDiffRoute, getIssuePrDetailsRoute, getIssueCheckRunsRoute, getIssueDiscussionsRoute);
 //#endregion
 //#region routes/costs.ts
 /**
@@ -34069,7 +34156,7 @@ const getCostsSummaryRoute = HttpRouter.add("GET", "/api/costs/summary", httpHan
 			const monthEntries = scope(readEventsSync({ startDate: monthAgo }));
 			const summarize = (entries) => ({
 				totalCost: entries.reduce((sum, e) => sum + (e.cost || 0), 0),
-				totalTokens: entries.reduce((sum, e) => sum + ((e.input || 0) + (e.output || 0)), 0),
+				totalTokens: entries.reduce((sum, e) => sum + ((e.input || 0) + (e.output || 0) + (e.cacheRead || 0) + (e.cacheWrite || 0)), 0),
 				entryCount: entries.length,
 				byModel: entries.reduce((acc, e) => {
 					if (e.model) acc[e.model] = (acc[e.model] || 0) + (e.cost || 0);
@@ -34256,16 +34343,45 @@ const postCostsSyncWalRoute = HttpRouter.add("POST", "/api/costs/sync-wal", http
 		})
 	});
 })));
+const runOverdeckCostReconcileSource = (source) => Effect.runPromise(CostWriter.use((writer) => writer.reconcile({ source })).pipe(Effect.provide(CostDoorLive)));
+const runClaudeTranscriptReconcile = () => Effect.runPromise(reconcile());
+async function runCostReconcileSources(runSource = runOverdeckCostReconcileSource, runClaude = runClaudeTranscriptReconcile) {
+	const [claude, ohmypi, codex] = await Promise.all([
+		runClaude(),
+		runSource("ohmypi"),
+		runSource("codex")
+	]);
+	return {
+		claude,
+		ohmypi,
+		codex
+	};
+}
+function buildCostReconcileResponse(overdeck) {
+	return {
+		success: true,
+		...overdeck.claude,
+		claude: overdeck.claude,
+		ohmypi: overdeck.ohmypi,
+		codex: overdeck.codex,
+		overdeck,
+		skipped: {
+			ohmypi: overdeck.ohmypi.skipped,
+			codex: overdeck.codex.skipped
+		},
+		warnings: {
+			ohmypi: overdeck.ohmypi.warnings,
+			codex: overdeck.codex.warnings
+		}
+	};
+}
 const postCostsReconcileRoute = HttpRouter.add("POST", "/api/costs/reconcile", httpHandler(Effect.gen(function* () {
-	const result = yield* Effect.tryPromise({
-		try: () => Effect.runPromise(reconcile()),
+	const overdeck = yield* Effect.tryPromise({
+		try: () => runCostReconcileSources(),
 		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
 	});
-	console.log(`[reconciler] Sweep complete: ${result.eventsImported ?? 0} imported`);
-	return jsonResponse({
-		success: true,
-		...result
-	});
+	console.log(`[reconciler] Sweep complete: claude=${overdeck.claude.eventsImported} imported, ohmypi=${overdeck.ohmypi.eventsImported} imported, codex=${overdeck.codex.eventsImported} imported`);
+	return jsonResponse(buildCostReconcileResponse(overdeck));
 })));
 const getCostsExperimentsRoute = HttpRouter.add("GET", "/api/costs/experiments", httpHandler(Effect.try({
 	try: () => jsonResponse({ experiments: getCavemanExperimentDataSync() }),
@@ -34542,7 +34658,7 @@ function reloadDurableCloisterConfig(deps = {}) {
 */
 init_config();
 init_agents$1();
-const readJsonBody$13 = Effect.gen(function* () {
+const readJsonBody$14 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -34645,7 +34761,7 @@ const getCloisterConfigRoute = HttpRouter.add("GET", "/api/cloister/config", htt
 	catch: (err) => new Error(err instanceof Error ? err.message : String(err))
 })));
 const putCloisterConfigRoute = HttpRouter.add("PUT", "/api/cloister/config", httpHandler(Effect.gen(function* () {
-	const updates = yield* readJsonBody$13;
+	const updates = yield* readJsonBody$14;
 	yield* Effect.try({
 		try: () => {
 			saveCloisterConfigSync(updates);
@@ -34669,25 +34785,18 @@ const getCloisterAgentsHealthRoute = HttpRouter.add("GET", "/api/cloister/agents
 })));
 const cloisterRouteLayer = Layer.mergeAll(getCloisterStatusRoute, postCloisterStartRoute, postCloisterStopRoute, postCloisterEmergencyStopRoute, postCloisterBrakeRoute, postCloisterResumeSpawnsRoute, getCloisterSpawnStatusRoute, getCloisterConfigRoute, putCloisterConfigRoute, getCloisterAgentsHealthRoute);
 //#endregion
-//#region routes/resources.ts
-/**
-* Resources route module — Effect HttpRouter.Layer (PAN-428 B12)
-*
-* Implements all /api/resources/* endpoints from the Express server:
-*   GET    /api/resources
-*   GET    /api/resources/:containerId/history
-*   GET    /api/resources/:containerId/details
-*   DELETE /api/resources/docker/container/:id
-*   POST   /api/resources/docker/prune-containers
-*   DELETE /api/resources/docker/network/:name
-*   DELETE /api/resources/docker/volume/:name
-*   POST   /api/resources/docker/prune-volumes
-*/
+//#region routes/resources/shared.ts
 init_docker_stats();
-init_domain_services();
-init_agents$1();
-init_tmux();
-const execAsync$7 = promisify(exec);
+function getCurrentDockerStats() {
+	return [];
+}
+function getContainerHistory(containerId) {
+	return {
+		timestamps: [],
+		cpuPercent: [],
+		memoryPercent: []
+	};
+}
 function formatUptime(startedAt) {
 	const ms = Date.now() - new Date(startedAt).getTime();
 	const h = Math.floor(ms / 36e5);
@@ -34696,45 +34805,933 @@ function formatUptime(startedAt) {
 	if (h > 0) return `${h}h ${m}m`;
 	return `${m}m`;
 }
+//#endregion
+//#region routes/resources/agents-stats.ts
+init_agents$1();
+init_cost_sync();
+init_tmux();
+const execFileAsync$9 = promisify(execFile);
+const BURN_WINDOW_MS = 1800 * 1e3;
+function buildAgentStatsSnapshot(options) {
+	const nowMs = options.nowMs ?? Date.now();
+	const processTotalsByRoot = buildProcessTotalsByRoot(options.sessionRoots, options.processes);
+	const rows = options.agents.filter((agent) => agent.status !== "stopped").map((agent) => {
+		const root = options.sessionRoots.find((sessionRoot) => sessionRoot.agentId === agent.id);
+		const processTotals = root ? processTotalsByRoot.get(root.rootPid) : void 0;
+		const costStats = computeAgentCostStats(options.costEventsByAgent?.get(agent.id) ?? [], nowMs);
+		const idleMinutes = getIdleMinutes(agent.lastActivity ?? agent.startedAt, nowMs);
+		return {
+			id: agent.id,
+			issueId: agent.issueId,
+			role: agent.role,
+			model: agent.model,
+			status: agent.status,
+			statusChip: {
+				state: idleMinutes > 5 ? "idle" : "working",
+				idleMinutes,
+				fanOut: (processTotals?.processCount ?? 0) >= 8
+			},
+			rootPid: root?.rootPid ?? null,
+			processCount: processTotals?.processCount ?? 0,
+			cpuPercent: processTotals?.cpuPercent ?? 0,
+			memoryBytes: processTotals?.memoryBytes ?? 0,
+			burnUsdPerHour: costStats.burnUsdPerHour,
+			...costStats.hypotheticalUsdPerHour > 0 ? { hypotheticalUsdPerHour: costStats.hypotheticalUsdPerHour } : {},
+			totalUsd: costStats.totalUsd
+		};
+	});
+	return {
+		agents: rows,
+		hostVitals: { agents: {
+			burnUsdPerHour: roundCurrency(rows.reduce((sum, row) => sum + row.burnUsdPerHour, 0)),
+			hypotheticalUsdPerHour: roundCurrency(rows.reduce((sum, row) => sum + (row.hypotheticalUsdPerHour ?? 0), 0)),
+			totalUsd: roundCurrency(rows.reduce((sum, row) => sum + row.totalUsd, 0))
+		} }
+	};
+}
+function getAgentStatsSnapshotEffect(deps = {}) {
+	return Effect.gen(function* () {
+		const nowMs = deps.nowMs ?? Date.now();
+		const agents = (deps.listAgents ?? listAgentStates)().filter((agent) => agent.status !== "stopped");
+		const sessionNames = yield* (deps.listSessionNames ?? defaultListSessionNames)().pipe(Effect.catch(() => Effect.succeed([])));
+		const liveSessionNames = new Set(sessionNames);
+		const sessionRoots = [];
+		for (const agent of agents) {
+			if (!liveSessionNames.has(agent.id)) continue;
+			const rootPid = (yield* (deps.listPanePids ?? defaultListPanePids)(agent.id).pipe(Effect.catch(() => Effect.succeed([]))))[0];
+			if (rootPid) sessionRoots.push({
+				agentId: agent.id,
+				rootPid
+			});
+		}
+		const processes = sessionRoots.length > 0 ? yield* Effect.promise(() => (deps.readProcessTable ?? readBatchedProcessTable)()).pipe(Effect.catch(() => Effect.succeed([]))) : [];
+		const costEventsByAgent = /* @__PURE__ */ new Map();
+		const costQuery = deps.queryCostEvents ?? queryCostEventsSync;
+		for (const agent of agents) {
+			const recentStartTs = new Date(nowMs - BURN_WINDOW_MS).toISOString();
+			costEventsByAgent.set(agent.id, [...costQuery({ agentId: agent.id }), ...costQuery({
+				agentId: agent.id,
+				startTs: recentStartTs
+			})]);
+		}
+		return buildAgentStatsSnapshot({
+			agents,
+			sessionRoots,
+			processes,
+			costEventsByAgent,
+			nowMs
+		});
+	});
+}
+function parseProcessTable$1(psTable) {
+	return psTable.split("\n").map((line) => line.trim()).filter(Boolean).flatMap((line) => {
+		const match = line.match(/^(\d+)\s+(\d+)\s+([0-9.]+)\s+(\d+)$/);
+		if (!match) return [];
+		return [{
+			pid: Number(match[1]),
+			ppid: Number(match[2]),
+			cpuPercent: Number(match[3]),
+			rssBytes: Number(match[4]) * 1024
+		}];
+	});
+}
+async function readBatchedProcessTable() {
+	const { stdout } = await execFileAsync$9("ps", ["-eo", "pid=,ppid=,pcpu=,rss="], { encoding: "utf8" });
+	return parseProcessTable$1(stdout);
+}
+function defaultListSessionNames() {
+	return listSessions().pipe(Effect.map((sessions) => sessions.map((session) => session.name)));
+}
+function defaultListPanePids(sessionName) {
+	return listPaneValues(sessionName, "#{pane_pid}").pipe(Effect.map((values) => values.map((value) => Number(value.trim())).filter((value) => Number.isFinite(value) && value > 0)));
+}
+function buildProcessTotalsByRoot(roots, processes) {
+	const processByPid = new Map(processes.map((process) => [process.pid, process]));
+	const childrenByPpid = /* @__PURE__ */ new Map();
+	const totals = /* @__PURE__ */ new Map();
+	for (const process of processes) {
+		const siblings = childrenByPpid.get(process.ppid);
+		if (siblings) siblings.push(process);
+		else childrenByPpid.set(process.ppid, [process]);
+	}
+	for (const root of roots) {
+		const queue = [root.rootPid];
+		const seen = /* @__PURE__ */ new Set();
+		let cpuPercent = 0;
+		let memoryBytes = 0;
+		while (queue.length > 0) {
+			const pid = queue.pop();
+			if (seen.has(pid)) continue;
+			seen.add(pid);
+			const process = processByPid.get(pid);
+			if (process) {
+				cpuPercent += process.cpuPercent;
+				memoryBytes += process.rssBytes;
+			}
+			for (const child of childrenByPpid.get(pid) ?? []) queue.push(child.pid);
+		}
+		totals.set(root.rootPid, {
+			processCount: seen.size,
+			cpuPercent: roundOneDecimal$3(cpuPercent),
+			memoryBytes
+		});
+	}
+	return totals;
+}
+function computeAgentCostStats(events, nowMs) {
+	const burnStartMs = nowMs - BURN_WINDOW_MS;
+	let recentBillable = 0;
+	let recentHypothetical = 0;
+	let totalUsd = 0;
+	for (const event of events) {
+		const eventCost = event.hypotheticalCost ?? event.cost;
+		if (isSubscriptionCovered(event)) recentHypothetical += Date.parse(event.ts) >= burnStartMs ? eventCost : 0;
+		else {
+			totalUsd += event.cost;
+			recentBillable += Date.parse(event.ts) >= burnStartMs ? event.cost : 0;
+		}
+	}
+	return {
+		burnUsdPerHour: roundCurrency(recentBillable * 2),
+		hypotheticalUsdPerHour: roundCurrency(recentHypothetical * 2),
+		totalUsd: roundCurrency(totalUsd)
+	};
+}
+function isSubscriptionCovered(event) {
+	return event.subscriptionCovered === true || event.source === "subscription-covered";
+}
+function getIdleMinutes(lastActivity, nowMs) {
+	if (!lastActivity) return 0;
+	const lastActivityMs = Date.parse(lastActivity);
+	if (!Number.isFinite(lastActivityMs)) return 0;
+	return Math.max(0, Math.floor((nowMs - lastActivityMs) / 6e4));
+}
+function roundOneDecimal$3(value) {
+	return Math.round(value * 10) / 10;
+}
+function roundCurrency(value) {
+	return Math.round(value * 100) / 100;
+}
+//#endregion
+//#region services/event-loop-monitor.ts
+init_activity_logger();
+const EVENT_LOOP_MONITOR_WINDOW_MS = 6e4;
+let lastSample = {
+	p50: 0,
+	p99: 0,
+	max: 0,
+	unit: "ms",
+	sampledAt: null,
+	windowMs: EVENT_LOOP_MONITOR_WINDOW_MS
+};
+let timer$3 = null;
+let activeHistogram = null;
+function nsToRoundedMs(ns) {
+	if (!Number.isFinite(ns) || ns <= 0) return 0;
+	return Math.round(ns / 1e6 * 100) / 100;
+}
+function sampleEventLoopDelay(histogram, deps = {}) {
+	const warnThresholdMs = deps.warnThresholdMs ?? 100;
+	const now = deps.now ?? (() => /* @__PURE__ */ new Date());
+	const warn = deps.warn ?? ((message) => console.warn(message));
+	const emit = deps.emit ?? emitActivityEntrySync;
+	const sample = {
+		p50: nsToRoundedMs(histogram.percentile(50)),
+		p99: nsToRoundedMs(histogram.percentile(99)),
+		max: nsToRoundedMs(histogram.max),
+		unit: "ms",
+		sampledAt: now().toISOString(),
+		windowMs: EVENT_LOOP_MONITOR_WINDOW_MS
+	};
+	lastSample = sample;
+	if (sample.p99 > warnThresholdMs) {
+		const message = `Dashboard event loop p99 delay ${sample.p99}ms exceeded ${warnThresholdMs}ms`;
+		warn(`[event-loop-monitor] ${message}`);
+		emit({
+			source: "dashboard",
+			level: "warn",
+			message,
+			details: `p50=${sample.p50}ms p99=${sample.p99}ms max=${sample.max}ms over ${sample.windowMs}ms`
+		});
+	}
+	histogram.reset();
+	return sample;
+}
+function getEventLoopDelaySample() {
+	return lastSample;
+}
+function startEventLoopMonitor(deps = {}) {
+	if (timer$3) return;
+	const intervalMs = deps.intervalMs ?? 6e4;
+	activeHistogram = (deps.createHistogram ?? (() => monitorEventLoopDelay({ resolution: 20 })))();
+	activeHistogram.enable();
+	timer$3 = setInterval(() => {
+		if (!activeHistogram) return;
+		sampleEventLoopDelay(activeHistogram, deps);
+	}, intervalMs);
+	timer$3.unref?.();
+}
+function stopEventLoopMonitor() {
+	if (timer$3) {
+		clearInterval(timer$3);
+		timer$3 = null;
+	}
+	activeHistogram?.disable();
+	activeHistogram = null;
+}
+//#endregion
+//#region routes/resources/core-services.ts
+function buildCoreServices(options = {}) {
+	const nowMs = options.nowMs ?? Date.now();
+	const processInfo = options.processInfo ?? getCurrentProcessInfo();
+	const eventLoopSample = options.eventLoopSample ?? getEventLoopDelaySample();
+	const deaconStatus = options.deaconStatus ?? readDurableDeaconStatus();
+	const supportFleet = aggregateSupportFleet(options.supportProcesses ?? []);
+	return [
+		{
+			id: "dashboard",
+			label: "Dashboard server",
+			status: "running",
+			cpuPercent: processInfo.cpuPercent,
+			memoryBytes: processInfo.memoryBytes,
+			memberCount: 1,
+			nodeVersion: processInfo.nodeVersion,
+			distPath: processInfo.distPath,
+			uptime: formatDuration(processInfo.uptimeSeconds),
+			uptimeSeconds: Math.round(processInfo.uptimeSeconds),
+			eventLoopP99Ms: eventLoopSample.p99,
+			actions: [{
+				label: "Metrics",
+				href: "/api/metrics/summary",
+				method: "GET"
+			}]
+		},
+		{
+			id: "deacon",
+			label: "Deacon",
+			status: deaconStatus.isRunning ? "running" : "stopped",
+			cpuPercent: 0,
+			memoryBytes: 0,
+			memberCount: deaconStatus.pid ? 1 : 0,
+			pid: deaconStatus.pid,
+			lastTickAgeSeconds: getLastTickAgeSeconds(deaconStatus, nowMs),
+			patrolCycle: deaconStatus.lastPatrol?.cycle ?? deaconStatus.state?.patrolCycle ?? 0,
+			patrolSummaryCount: deaconStatus.lastPatrol?.actions.length ?? 0,
+			stuckCount: deaconStatus.state?.stuckCount ?? 0,
+			actions: [
+				{
+					label: "Status",
+					href: "/api/deacon/status",
+					method: "GET"
+				},
+				{
+					label: "Logs",
+					href: "/api/deacon/logs",
+					method: "GET"
+				},
+				{
+					label: "Patrol",
+					href: "/api/deacon/patrol",
+					method: "POST"
+				}
+			]
+		},
+		{
+			id: "support-fleet",
+			label: "Support fleet",
+			status: supportFleet.memberCount > 0 ? "running" : "unknown",
+			cpuPercent: supportFleet.cpuPercent,
+			memoryBytes: supportFleet.memoryBytes,
+			memberCount: supportFleet.memberCount,
+			members: supportFleet.members,
+			actions: []
+		}
+	];
+}
+function getCoreServicesSnapshot() {
+	return buildCoreServices();
+}
+function getCurrentProcessInfo() {
+	return {
+		uptimeSeconds: process.uptime(),
+		nodeVersion: process.version,
+		distPath: process.argv.find((arg) => arg.includes("/dist/")) ?? process.argv[1] ?? "",
+		cpuPercent: 0,
+		memoryBytes: process.memoryUsage().rss
+	};
+}
+function aggregateSupportFleet(processes) {
+	const supportProcesses = processes.filter(isSupportFleetProcess);
+	const members = supportProcesses.map((process) => process.command);
+	return {
+		cpuPercent: roundOneDecimal$2(supportProcesses.reduce((sum, process) => sum + process.cpuPercent, 0)),
+		memoryBytes: supportProcesses.reduce((sum, process) => sum + process.memoryBytes, 0),
+		memberCount: supportProcesses.length,
+		members
+	};
+}
+function isSupportFleetProcess(process) {
+	return /\b(traefik|smee|pty-supervisor|pty-supervisors|tldr)\b/i.test(process.command);
+}
+function getLastTickAgeSeconds(deaconStatus, nowMs) {
+	const timestamp = deaconStatus.lastPatrol?.timestamp ?? deaconStatus.state?.lastPatrol;
+	if (!timestamp) return null;
+	const tickMs = Date.parse(timestamp);
+	if (!Number.isFinite(tickMs)) return null;
+	return Math.max(0, Math.floor((nowMs - tickMs) / 1e3));
+}
+function formatDuration(totalSeconds) {
+	const roundedSeconds = Math.max(0, Math.floor(totalSeconds));
+	const days = Math.floor(roundedSeconds / 86400);
+	const hours = Math.floor(roundedSeconds % 86400 / 3600);
+	const minutes = Math.floor(roundedSeconds % 3600 / 60);
+	const seconds = roundedSeconds % 60;
+	if (days > 0) return `${days}d ${hours}h`;
+	if (hours > 0) return `${hours}h ${minutes}m`;
+	if (minutes > 0) return `${minutes}m ${seconds}s`;
+	return `${seconds}s`;
+}
+function roundOneDecimal$2(value) {
+	return Math.round(value * 10) / 10;
+}
+//#endregion
+//#region routes/resources/forecast.ts
+init_paths();
+let forecastStateFileForTests = null;
+function buildCapacityForecast(stacks, options) {
+	const records = loadForecastStore().peaks;
+	const median = medianPeak(Object.values(records).map((record) => record.peakRamBytes));
+	return {
+		stacks: stacks.filter((stack) => stack.services.every((service) => service.status === "stopped")).map((stack) => {
+			const record = records[stack.id];
+			const predictedRamBytes = record?.peakRamBytes ?? median;
+			return {
+				stackId: stack.id,
+				issueId: stack.issueId,
+				composeProject: stack.composeProject,
+				predictedRamBytes,
+				predictedLoad: record?.peakCpuPercent ?? 0,
+				approximate: true,
+				source: record ? "last-run-peak" : "fleet-median"
+			};
+		}),
+		headroom: {
+			freeRamBytes: options.hostVitals.mem.availableBytes,
+			loadHeadroom: Math.max(0, 100 - options.hostVitals.cpu.percent)
+		}
+	};
+}
+function forecastStateFile() {
+	return forecastStateFileForTests ?? join$1(getOverdeckHome(), "resource-forecast-peaks.json");
+}
+function loadForecastStore() {
+	const file = forecastStateFile();
+	if (!existsSync$1(file)) return { peaks: {} };
+	try {
+		return { peaks: JSON.parse(readFileSync$1(file, "utf8")).peaks ?? {} };
+	} catch {
+		return { peaks: {} };
+	}
+}
+function medianPeak(values) {
+	const sorted = values.filter((value) => value > 0).sort((a, b) => a - b);
+	if (sorted.length === 0) return 0;
+	return sorted[Math.floor(sorted.length / 2)] ?? 0;
+}
+//#endregion
+//#region routes/resources/host-processes.ts
+const DEFAULT_LIMIT$1 = 10;
+const DEFAULT_BURST_CPU_THRESHOLD = 50;
+const DEFAULT_BURST_RETENTION_MS = 3600 * 1e3;
+const retainedBursts = /* @__PURE__ */ new Map();
+function buildHostProcesses(processes, options = {}) {
+	const nowMs = options.nowMs ?? Date.now();
+	const limit = options.limit ?? DEFAULT_LIMIT$1;
+	const burstCpuThreshold = options.burstCpuThreshold ?? DEFAULT_BURST_CPU_THRESHOLD;
+	const burstRetentionMs = options.burstRetentionMs ?? DEFAULT_BURST_RETENTION_MS;
+	const coreServicePids = new Set(options.coreServicePids ?? []);
+	const processByPid = new Map(processes.map((process) => [process.pid, process]));
+	const agentRootByPid = new Map((options.agentSessions ?? []).map((session) => [session.rootPid, session]));
+	const groups = /* @__PURE__ */ new Map();
+	for (const process of processes) {
+		if (coreServicePids.has(process.pid) || agentRootByPid.has(process.pid) || isDockerProcess(process)) continue;
+		const family = classifyCommandFamily(process.command);
+		const owner = resolveOwner(process, processByPid, agentRootByPid, family);
+		const id = [
+			family,
+			owner.agentId ?? owner.label,
+			owner.issueId ?? "host"
+		].join(":");
+		const existing = groups.get(id);
+		if (existing) {
+			existing.pidCount += 1;
+			existing.pids.push(process.pid);
+			existing.cpuPercent += process.cpuPercent;
+			existing.memoryBytes += process.memoryBytes;
+			continue;
+		}
+		groups.set(id, {
+			id,
+			family,
+			label: family,
+			owner,
+			pidCount: 1,
+			pids: [process.pid],
+			cpuPercent: process.cpuPercent,
+			memoryBytes: process.memoryBytes
+		});
+	}
+	const activeRows = [...groups.values()].map((group) => {
+		const retained = retainedBursts.get(group.id);
+		const peakCpuPercent = Math.max(group.cpuPercent, retained?.row.peakCpuPercent ?? 0);
+		const peakMemoryBytes = Math.max(group.memoryBytes, retained?.row.peakMemoryBytes ?? 0);
+		const row = {
+			...group,
+			pids: group.pids.sort((a, b) => a - b),
+			cpuPercent: roundOneDecimal$1(group.cpuPercent),
+			peakCpuPercent: roundOneDecimal$1(peakCpuPercent),
+			peakMemoryBytes
+		};
+		if (peakCpuPercent >= burstCpuThreshold) retainedBursts.set(group.id, {
+			row,
+			lastSeenMs: nowMs
+		});
+		else retainedBursts.delete(group.id);
+		return row;
+	});
+	const activeGroupIds = new Set(activeRows.map((row) => row.id));
+	const retainedRows = [];
+	for (const [groupId, retained] of retainedBursts) {
+		if (activeGroupIds.has(groupId)) continue;
+		const retainedUntilMs = retained.lastSeenMs + burstRetentionMs;
+		if (retainedUntilMs <= nowMs) {
+			retainedBursts.delete(groupId);
+			continue;
+		}
+		retainedRows.push({
+			...retained.row,
+			cpuPercent: 0,
+			memoryBytes: 0,
+			retainedUntil: new Date(retainedUntilMs).toISOString(),
+			note: buildRetainedBurstNote(retained.row, options.spikeAnnotations)
+		});
+	}
+	return selectTopRows([...activeRows, ...retainedRows], limit);
+}
+function getHostProcessesSnapshot() {
+	return buildHostProcesses([]);
+}
+function isDockerProcess(process) {
+	return /\b(docker|containerd|kubepods)\b/i.test(process.cgroup ?? "");
+}
+function classifyCommandFamily(command) {
+	const normalized = command.toLowerCase();
+	if (normalized.includes("vitest")) return "vitest workers";
+	if (normalized.includes("chrome") || normalized.includes("chromium")) return "chrome renderers";
+	if (/\bmvn\b|maven/.test(normalized)) return "mvn";
+	if (/\bnode\b/.test(normalized)) return "node";
+	if (/\bbun\b/.test(normalized)) return "bun";
+	return command.trim().split(/\s+/)[0] || "unknown";
+}
+function resolveOwner(process, processByPid, agentRootByPid, family) {
+	if (family === "chrome renderers") return { label: "your browser" };
+	let current = process;
+	const seenPids = /* @__PURE__ */ new Set();
+	while (current && !seenPids.has(current.pid)) {
+		seenPids.add(current.pid);
+		const agentSession = agentRootByPid.get(current.pid);
+		if (agentSession) return {
+			label: `spawned by ${agentSession.agentId}`,
+			agentId: agentSession.agentId,
+			issueId: agentSession.issueId
+		};
+		current = processByPid.get(current.ppid);
+	}
+	return { label: "host" };
+}
+function buildRetainedBurstNote(row, annotations) {
+	const matchingAnnotation = annotations?.find((annotation) => {
+		if (annotation.targetId && annotation.targetId === row.owner.agentId) return true;
+		return annotation.label.includes(row.family) || annotation.label.includes(row.owner.label);
+	});
+	if (!matchingAnnotation) return "caused spike";
+	return `caused spike: ${matchingAnnotation.label}`;
+}
+function selectTopRows(rows, limit) {
+	const topByCpu = [...rows].sort((a, b) => b.cpuPercent - a.cpuPercent || b.peakCpuPercent - a.peakCpuPercent).slice(0, limit);
+	const topByMemory = [...rows].sort((a, b) => b.memoryBytes - a.memoryBytes || b.peakMemoryBytes - a.peakMemoryBytes).slice(0, limit);
+	const merged = /* @__PURE__ */ new Map();
+	for (const row of [...topByCpu, ...topByMemory]) merged.set(row.id, row);
+	return [...merged.values()].sort((a, b) => b.cpuPercent - a.cpuPercent || b.peakCpuPercent - a.peakCpuPercent).slice(0, limit);
+}
+function roundOneDecimal$1(value) {
+	return Math.round(value * 10) / 10;
+}
+//#endregion
+//#region routes/resources/host-vitals.ts
+const CPU_SPARK_MAX = 30;
+let cpuSpark = [];
+let cachedDockerCounts = {
+	containers: 0,
+	running: 0,
+	stacks: 0,
+	networks: 0,
+	networkPool: {
+		used: 0,
+		total: 31
+	}
+};
+function buildHostVitalsSnapshot(options = {}) {
+	const cpuPercent = roundOneDecimal(options.cpuPercent ?? 0);
+	cpuSpark.push(cpuPercent);
+	cpuSpark = cpuSpark.slice(-CPU_SPARK_MAX);
+	const dockerCounts = options.dockerStale ? cachedDockerCounts : computeDockerCounts(options.containers ?? [], options.networkCount ?? 0, options.networkPoolTotal ?? 31);
+	if (!options.dockerStale) cachedDockerCounts = dockerCounts;
+	const memory = options.mem ?? getDefaultMemoryVitals();
+	const disk = options.disk ?? {
+		usedBytes: 0,
+		freeBytes: 0,
+		reclaimableBytes: 0
+	};
+	const agentCounts = computeAgentCounts(options.agents ?? [], options.agentFleet ?? {}, options.nowMs ?? Date.now());
+	return {
+		stale: options.dockerStale === true,
+		cpu: {
+			percent: cpuPercent,
+			load: options.load ?? normalizeLoad(loadavg$1()),
+			spark: [...cpuSpark]
+		},
+		mem: memory,
+		disk: {
+			usedBytes: disk.usedBytes,
+			freeBytes: disk.freeBytes,
+			reclaimableBytes: disk.reclaimableBytes ?? 0
+		},
+		docker: {
+			...dockerCounts,
+			stale: options.dockerStale === true
+		},
+		agents: agentCounts
+	};
+}
+function computeDockerCounts(containers, networkCount, networkPoolTotal) {
+	const stacks = /* @__PURE__ */ new Set();
+	for (const container of containers) {
+		const project = container.labels?.["com.docker.compose.project"];
+		if (project) stacks.add(project);
+	}
+	return {
+		containers: containers.length,
+		running: containers.filter((container) => container.status === "running").length,
+		stacks: stacks.size,
+		networks: networkCount,
+		networkPool: {
+			used: networkCount,
+			total: networkPoolTotal
+		}
+	};
+}
+function computeAgentCounts(agents, fleet, nowMs) {
+	return {
+		sessions: agents.length,
+		active: agents.filter((agent) => agent.hasLiveTmuxSession).length,
+		idleOver15m: agents.filter((agent) => {
+			const lastActivityMs = Date.parse(agent.lastActivity ?? "");
+			return Number.isFinite(lastActivityMs) && nowMs - lastActivityMs > 900 * 1e3;
+		}).length,
+		burnUsdPerHour: fleet.burnUsdPerHour ?? 0,
+		hypotheticalUsdPerHour: fleet.hypotheticalUsdPerHour ?? 0,
+		totalUsd: fleet.totalUsd ?? 0
+	};
+}
+function getDefaultMemoryVitals() {
+	const total = totalmem();
+	const available = freemem$1();
+	return {
+		usedBytes: Math.max(0, total - available),
+		availableBytes: available,
+		swapUsedBytes: 0,
+		swapTotalBytes: 0
+	};
+}
+function normalizeLoad(load) {
+	return [
+		roundOneDecimal(load[0] ?? 0),
+		roundOneDecimal(load[1] ?? 0),
+		roundOneDecimal(load[2] ?? 0)
+	];
+}
+function roundOneDecimal(value) {
+	return Math.round(value * 10) / 10;
+}
+//#endregion
+//#region routes/resources/limits.ts
+const OOM_WINDOW_MS = 1440 * 60 * 1e3;
+let cachedOomEvents = [];
+function enrichContainersWithLimits(containers, options = {}) {
+	const nowMs = options.nowMs ?? Date.now();
+	const oomEvents = options.oomEvents ?? cachedOomEvents;
+	return containers.map((container) => {
+		const limitBytes = getLimitBytes(container.memoryLimit);
+		const percent = limitBytes === null ? void 0 : Math.round((container.memoryUsage ?? 0) / limitBytes * 100);
+		return {
+			...container,
+			memLimitBytes: limitBytes,
+			...percent === void 0 ? {} : { memPercentOfLimit: percent },
+			oomKills24h: countRecentOomEvents(container, oomEvents, nowMs),
+			...composeFileHint(container.labels)
+		};
+	});
+}
+function getLimitBytes(memoryLimit) {
+	if (!memoryLimit || memoryLimit <= 0 || !Number.isFinite(memoryLimit)) return null;
+	return memoryLimit;
+}
+function countRecentOomEvents(container, events, nowMs) {
+	const cutoffMs = nowMs - OOM_WINDOW_MS;
+	return events.filter((event) => {
+		const eventMs = Date.parse(event.timestamp);
+		if (!Number.isFinite(eventMs) || eventMs < cutoffMs || eventMs > nowMs) return false;
+		if (event.containerId && container.id.startsWith(event.containerId)) return true;
+		if (event.containerName && event.containerName === container.name) return true;
+		return false;
+	}).length;
+}
+function composeFileHint(labels) {
+	const composeFile = labels?.["com.docker.compose.project.config_files"];
+	if (!composeFile) return {};
+	return { composeFile: composeFile.split(",")[0]?.trim() };
+}
+//#endregion
+//#region routes/resources/reclaim.ts
+init_review_status();
+const RECLAIM_THRESHOLD_BYTES = 500 * 1024 ** 2;
+const VENV_THRESHOLD_BYTES = 1024 ** 3;
+let cachedVenvCandidates = [];
+let venvDelete = async (path) => {
+	await rm(path, {
+		recursive: true,
+		force: true
+	});
+};
+let issueClosedReader = (issueId) => isClosedReviewStatus(issueId);
+let projectRootReader = () => resolve$1(process.cwd(), "..", "..");
+function buildReclaimPayload(stacks, agents, options = {}) {
+	const liveIssueIds = new Set(agents.filter((agent) => agent.hasLiveTmuxSession === true).map((agent) => agent.issueId?.toUpperCase()).filter((issueId) => Boolean(issueId)));
+	const candidates = [...stacks.filter((stack) => stack.issueId && isClosedStack(stack) && !liveIssueIds.has(stack.issueId.toUpperCase())).map((stack) => ({
+		kind: "stack",
+		label: stack.issueId ?? stack.composeProject,
+		why: "Issue is merged or closed and no live agent references it.",
+		ramBytes: stack.aggregates.memoryBytes,
+		diskBytes: stack.aggregates.diskBytes,
+		action: `GET /api/resources/stacks/${stack.issueId}/teardown-estimate`,
+		issueId: stack.issueId ?? void 0
+	})), ...(options.venvs ?? cachedVenvCandidates).filter((venv) => venv.diskBytes >= VENV_THRESHOLD_BYTES && issueClosedReader(venv.issueId)).map((venv) => ({
+		kind: "venv",
+		label: `${venv.issueId} virtualenv`,
+		why: "Closed issue has an orphaned workspace .venv over 1 GB.",
+		ramBytes: 0,
+		diskBytes: venv.diskBytes,
+		action: `DELETE /api/resources/venvs/${venv.issueId}`,
+		issueId: venv.issueId
+	}))];
+	return {
+		reclaimCandidates: candidates,
+		reclaimTotals: {
+			ramBytes: candidates.reduce((sum, candidate) => sum + candidate.ramBytes, 0),
+			diskBytes: candidates.reduce((sum, candidate) => sum + candidate.diskBytes, 0)
+		},
+		reclaimThresholdBytes: RECLAIM_THRESHOLD_BYTES
+	};
+}
+const deleteResourceVenvRoute = HttpRouter.add("DELETE", "/api/resources/venvs/:issue", httpHandler(Effect.gen(function* () {
+	return yield* deleteResourceVenvEffect((yield* HttpRouter.schemaParams()).issue);
+})));
+function deleteResourceVenvEffect(issue) {
+	return Effect.gen(function* () {
+		const issueId = issue.toUpperCase();
+		if (!issueClosedReader(issueId)) return jsonResponse({
+			ok: false,
+			error: `${issueId} is not closed; refusing to delete workspace venv.`
+		}, { status: 409 });
+		const venvPath = join$1(projectRootReader(), "workspaces", `feature-${issueId.toLowerCase()}`, ".venv");
+		yield* Effect.tryPromise({
+			try: () => venvDelete(venvPath),
+			catch: (error) => error
+		}).pipe(Effect.catch(() => Effect.succeed(void 0)));
+		return jsonResponse({
+			ok: true,
+			issueId,
+			path: venvPath
+		});
+	});
+}
+function isClosedStack(stack) {
+	return stack.phase === "merged";
+}
+function isClosedReviewStatus(issueId) {
+	return getReviewStatusSync(issueId)?.mergeStatus === "merged";
+}
+//#endregion
+//#region routes/resources/spawn-gate.ts
+let readSystemHealthSnapshot = () => getSystemHealthSnapshot();
+function mapSpawnGateDecision(decision) {
+	const reason = decision.error ?? decision.warnings[0]?.message ?? "";
+	return {
+		state: decision.blocked ? "BLOCKED" : decision.requiresAcknowledgement ? "SOFT" : "OPEN",
+		reason,
+		warnings: decision.warnings,
+		pressure: spawnGatePressure(decision)
+	};
+}
+function getSpawnGatePayloadEffect() {
+	return Effect.tryPromise({
+		try: () => readSystemHealthSnapshot(),
+		catch: (error) => error
+	}).pipe(Effect.map((health) => mapSpawnGateDecision(evaluateSpawnGuardrails(health))), Effect.catch(() => Effect.succeed({
+		state: "SOFT",
+		reason: "Spawn gate health is unavailable.",
+		warnings: [],
+		pressure: 0,
+		stale: true
+	})));
+}
+function spawnGatePressure(decision) {
+	if (decision.blocked) return 100;
+	if (decision.requiresAcknowledgement) return 67;
+	return 12;
+}
+//#endregion
+//#region routes/resources/stacks.ts
+init_review_status();
+let reviewStatusReader = (issueId) => getReviewStatusSync(issueId);
+function getResourceStacks(containers) {
+	return buildResourceStacks(containers, reviewStatusesFor(containers));
+}
+function buildResourceStacks(containers, reviewStatuses = {}) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const container of containers) {
+		const key = composeProjectFor(container) ?? "unassigned";
+		groups.set(key, [...groups.get(key) ?? [], container]);
+	}
+	return [...groups.entries()].map(([composeProject, services]) => {
+		const issueId = issueIdFor$1(composeProject, services);
+		const reviewStatus = issueId ? reviewStatuses[issueId] : void 0;
+		return {
+			id: issueId ?? composeProject,
+			issueId,
+			issueTitle: issueId ?? "Unassigned",
+			composeProject,
+			serviceCount: services.length,
+			services,
+			aggregates: {
+				cpuPercent: roundOne(services.reduce((sum, service) => sum + (service.cpuPercent ?? 0), 0)),
+				memoryBytes: services.reduce((sum, service) => sum + (service.memoryUsage ?? 0), 0),
+				diskBytes: services.reduce((sum, service) => sum + (service.diskUsage ?? 0), 0)
+			},
+			phase: phaseFor(reviewStatus)
+		};
+	}).sort((a, b) => a.id.localeCompare(b.id));
+}
+function reviewStatusesFor(containers) {
+	const issueIds = /* @__PURE__ */ new Set();
+	const groups = /* @__PURE__ */ new Map();
+	for (const container of containers) {
+		const key = composeProjectFor(container) ?? "unassigned";
+		groups.set(key, [...groups.get(key) ?? [], container]);
+	}
+	for (const [composeProject, services] of groups.entries()) {
+		const issueId = issueIdFor$1(composeProject, services);
+		if (issueId) issueIds.add(issueId);
+	}
+	const statuses = {};
+	for (const issueId of issueIds) statuses[issueId] = reviewStatusReader(issueId) ?? void 0;
+	return statuses;
+}
+function composeProjectFor(container) {
+	const labelProject = container.labels?.["com.docker.compose.project"]?.trim();
+	if (labelProject) return labelProject;
+	const issueProject = container.name.match(/^(.+?feature[-_](?:pan|min|aur|krux)[-_]?\d+)/i);
+	if (issueProject?.[1]) return issueProject[1];
+	return container.name.match(/^(.+?)[_-][a-z0-9]+[._-][0-9]+$/i)?.[1] ?? null;
+}
+function issueIdFor$1(composeProject, services) {
+	if (composeProject === "unassigned") return null;
+	const fromProject = issueIdFromText(composeProject);
+	if (fromProject) return fromProject;
+	for (const service of services) {
+		const fromLabels = issueIdFromText(Object.values(service.labels ?? {}).join(" "));
+		if (fromLabels) return fromLabels;
+	}
+	return null;
+}
+function issueIdFromText(value) {
+	const match = value.match(/(?:workspaces[\\/])?feature[-_](pan|min|aur|krux)[-_]?(\d+)/i) ?? value.match(/\b(pan|min|aur|krux)[-_]?(\d+)\b/i);
+	if (!match) return null;
+	return `${match[1].toUpperCase()}-${match[2]}`;
+}
+function phaseFor(status) {
+	if (!status) return "todo";
+	if (status.mergeStatus === "merged") return "merged";
+	if (status.mergeStatus === "queued" || status.mergeStatus === "merging" || status.mergeStatus === "verifying" || status.mergeStatus === "failed" || status.readyForMerge === true) return "ship";
+	if (status.verificationStatus === "running") return "verifying";
+	if (status.reviewStatus === "reviewing" || status.reviewStatus === "passed" || status.reviewStatus === "failed" || status.reviewStatus === "blocked" || status.testStatus === "testing" || status.testStatus === "passed" || status.testStatus === "failed" || status.inspectStatus === "inspecting" || status.inspectStatus === "passed" || status.inspectStatus === "failed" || status.inspectStatus === "error") return "review";
+	return "todo";
+}
+function roundOne(value) {
+	return Math.round(value * 10) / 10;
+}
+//#endregion
+//#region routes/resources/snapshot.ts
+init_agents$1();
+init_tmux();
 /** Build the GET /api/resources response from the SQLite agents table. */
 function getResourcesEffect() {
 	return Effect.gen(function* () {
-		const containers = [];
+		const containers = enrichContainersWithLimits(getCurrentDockerStats());
+		const agentStats = yield* getAgentStatsSnapshotEffect();
+		const spawnGate = yield* getSpawnGatePayloadEffect();
 		const stoppedContainers = [];
 		const sessions = yield* listSessions().pipe(Effect.catch(() => Effect.succeed([])));
 		const tmuxSessionNames = new Set(sessions.map((s) => s.name));
+		const agents = listAgentStates().filter((state) => state.status !== "stopped").map((state) => ({
+			...state,
+			hasLiveTmuxSession: tmuxSessionNames.has(state.id)
+		}));
+		const agentStatsById = new Map(agentStats.agents.map((agent) => [agent.id, agent]));
+		const baseHostVitals = buildHostVitalsSnapshot({
+			containers,
+			agents: agents.map((agent) => ({
+				id: String(agent.id),
+				lastActivity: typeof agent.lastActivity === "string" ? agent.lastActivity : void 0,
+				hasLiveTmuxSession: agent.hasLiveTmuxSession === true
+			})),
+			agentFleet: agentStats.hostVitals.agents
+		});
+		const stacks = getResourceStacks(containers);
+		const reclaim = buildReclaimPayload(stacks, agents);
+		const hostVitals = {
+			...baseHostVitals,
+			disk: {
+				...baseHostVitals.disk,
+				reclaimableBytes: reclaim.reclaimTotals.diskBytes
+			}
+		};
 		return jsonResponse({
+			agents: agents.map((agent) => ({
+				...agent,
+				resourceStats: agentStatsById.get(String(agent.id)) ?? null
+			})),
+			coreServices: getCoreServicesSnapshot(),
 			containers,
+			forecast: buildCapacityForecast(stacks, { hostVitals }),
+			hostVitals,
+			hostProcesses: getHostProcessesSnapshot(),
 			stoppedContainers,
 			networks: [],
+			reclaimCandidates: reclaim.reclaimCandidates,
+			reclaimThresholdBytes: reclaim.reclaimThresholdBytes,
+			reclaimTotals: reclaim.reclaimTotals,
+			spawnGate,
+			stacks,
 			volumes: [],
-			agents: listAgentStates().filter((state) => state.status !== "stopped").map((state) => ({
-				...state,
-				hasLiveTmuxSession: tmuxSessionNames.has(state.id)
-			})),
 			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	});
 }
 const getResourcesRoute = HttpRouter.add("GET", "/api/resources", httpHandler(getResourcesEffect()));
+//#endregion
+//#region routes/resources/containers.ts
+init_domain_services();
+let dockerExec = promisify(execFile);
+function dockerActionErrorPayload(error) {
+	const maybeError = error;
+	return { error: (typeof maybeError.stderr === "string" ? maybeError.stderr.trim() : "") || (typeof maybeError.message === "string" ? maybeError.message : String(error)) };
+}
 const getContainerHistoryRoute = HttpRouter.add("GET", "/api/resources/:containerId/history", Effect.gen(function* () {
 	const containerId = (yield* HttpRouter.params)["containerId"] ?? "";
 	if (!/^[a-f0-9]{12,64}$/.test(containerId)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
-	return jsonResponse({
-		timestamps: [],
-		cpuPercent: [],
-		memoryPercent: []
-	});
+	return jsonResponse(getContainerHistory(containerId));
 }));
 const getContainerDetailsRoute = HttpRouter.add("GET", "/api/resources/:containerId/details", Effect.gen(function* () {
 	const containerId = (yield* HttpRouter.params)["containerId"] ?? "";
 	if (!/^[a-f0-9]{12,64}$/.test(containerId)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
 	return yield* httpHandler(Effect.gen(function* () {
 		const [inspectResult, logsResult] = yield* Effect.tryPromise({
-			try: () => Promise.all([execAsync$7(`docker inspect --format '{{json .}}' "${containerId}" 2>/dev/null`, {
+			try: () => Promise.all([dockerExec("docker", [
+				"inspect",
+				"--format",
+				"{{json .}}",
+				containerId
+			], {
 				encoding: "utf-8",
 				timeout: 5e3
-			}).catch(() => ({ stdout: "null" })), execAsync$7(`docker logs --tail 100 "${containerId}" 2>&1`, {
+			}).catch(() => ({ stdout: "null" })), dockerExec("docker", [
+				"logs",
+				"--tail",
+				"100",
+				containerId
+			], {
 				encoding: "utf-8",
 				timeout: 5e3
 			}).catch(() => ({ stdout: "" }))]),
@@ -34773,7 +35770,7 @@ const deleteDockerContainerRoute = HttpRouter.add("DELETE", "/api/resources/dock
 	const eventStore = yield* EventStoreService;
 	if (!/^[a-f0-9]{12,64}$/.test(id)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
 	yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker rm "${id}" 2>&1`, {
+		try: () => dockerExec("docker", ["rm", id], {
 			encoding: "utf-8",
 			timeout: 1e4
 		}),
@@ -34782,90 +35779,16 @@ const deleteDockerContainerRoute = HttpRouter.add("DELETE", "/api/resources/dock
 	yield* eventStore.append({
 		type: "resources.updated",
 		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
+		payload: { resources: { containers: getCurrentDockerStats() } }
 	});
 	return jsonResponse({ ok: true });
 })));
-const postPruneContainersRoute = HttpRouter.add("POST", "/api/resources/docker/prune-containers", httpHandler(Effect.gen(function* () {
-	const eventStore = yield* EventStoreService;
-	const { stdout } = yield* Effect.tryPromise({
-		try: () => execAsync$7("docker container prune -f 2>&1", {
-			encoding: "utf-8",
-			timeout: 3e4
-		}),
-		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
-	});
-	yield* eventStore.append({
-		type: "resources.updated",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
-	});
-	return jsonResponse({
-		ok: true,
-		output: stdout.trim()
-	});
-})));
-const deleteDockerNetworkRoute = HttpRouter.add("DELETE", "/api/resources/docker/network/:name", httpHandler(Effect.gen(function* () {
-	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const eventStore = yield* EventStoreService;
-	if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(name)) return jsonResponse({ error: "Invalid network name" }, { status: 400 });
-	yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker network rm "${name}" 2>&1`, {
-			encoding: "utf-8",
-			timeout: 1e4
-		}),
-		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
-	});
-	yield* eventStore.append({
-		type: "resources.updated",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
-	});
-	return jsonResponse({ ok: true });
-})));
-const deleteDockerVolumeRoute = HttpRouter.add("DELETE", "/api/resources/docker/volume/:name", httpHandler(Effect.gen(function* () {
-	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const eventStore = yield* EventStoreService;
-	if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(name)) return jsonResponse({ error: "Invalid volume name" }, { status: 400 });
-	yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker volume rm "${name}" 2>&1`, {
-			encoding: "utf-8",
-			timeout: 1e4
-		}),
-		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
-	});
-	yield* eventStore.append({
-		type: "resources.updated",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
-	});
-	return jsonResponse({ ok: true });
-})));
-const postPruneVolumesRoute = HttpRouter.add("POST", "/api/resources/docker/prune-volumes", httpHandler(Effect.gen(function* () {
-	const eventStore = yield* EventStoreService;
-	const { stdout } = yield* Effect.tryPromise({
-		try: () => execAsync$7("docker volume prune -f 2>&1", {
-			encoding: "utf-8",
-			timeout: 3e4
-		}),
-		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
-	});
-	yield* eventStore.append({
-		type: "resources.updated",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
-	});
-	return jsonResponse({
-		ok: true,
-		output: stdout.trim()
-	});
-})));
 const postRestartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/container/:id/restart", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	const eventStore = yield* EventStoreService;
-	if (!id) return jsonResponse({ error: "Container ID required" }, { status: 400 });
+	if (!isDockerIdentifier$2(id)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
 	const { stdout } = yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker restart "${id}"`, {
+		try: () => dockerExec("docker", ["restart", id], {
 			encoding: "utf-8",
 			timeout: 3e4
 		}),
@@ -34874,7 +35797,7 @@ const postRestartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/
 	yield* eventStore.append({
 		type: "resources.updated",
 		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
+		payload: { resources: { containers: getCurrentDockerStats() } }
 	});
 	return jsonResponse({
 		ok: true,
@@ -34885,9 +35808,9 @@ const postRestartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/
 const postStartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/container/:id/start", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	const eventStore = yield* EventStoreService;
-	if (!id) return jsonResponse({ error: "Container ID required" }, { status: 400 });
+	if (!isDockerIdentifier$2(id)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
 	const { stdout } = yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker start "${id}"`, {
+		try: () => dockerExec("docker", ["start", id], {
 			encoding: "utf-8",
 			timeout: 3e4
 		}),
@@ -34896,7 +35819,7 @@ const postStartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/co
 	yield* eventStore.append({
 		type: "resources.updated",
 		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: { resources: { containers: [] } }
+		payload: { resources: { containers: getCurrentDockerStats() } }
 	});
 	return jsonResponse({
 		ok: true,
@@ -34906,9 +35829,15 @@ const postStartContainerRoute = HttpRouter.add("POST", "/api/resources/docker/co
 })));
 const getContainerLogsRoute = HttpRouter.add("GET", "/api/resources/docker/container/:id/logs", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
-	if (!id) return jsonResponse({ error: "Container ID required" }, { status: 400 });
+	if (!isDockerIdentifier$2(id)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
 	const { stdout } = yield* Effect.tryPromise({
-		try: () => execAsync$7(`docker logs --tail 200 --timestamps "${id}"`, {
+		try: () => dockerExec("docker", [
+			"logs",
+			"--tail",
+			"200",
+			"--timestamps",
+			id
+		], {
 			encoding: "utf-8",
 			timeout: 1e4
 		}),
@@ -34916,7 +35845,516 @@ const getContainerLogsRoute = HttpRouter.add("GET", "/api/resources/docker/conta
 	});
 	return jsonResponse({ logs: stdout });
 })));
-const resourcesRouteLayer = Layer.mergeAll(getResourcesRoute, getContainerHistoryRoute, getContainerDetailsRoute, deleteDockerContainerRoute, postPruneContainersRoute, deleteDockerNetworkRoute, deleteDockerVolumeRoute, postPruneVolumesRoute, postRestartContainerRoute, postStartContainerRoute, getContainerLogsRoute);
+function dockerContainerActionEffect(id, action) {
+	return Effect.gen(function* () {
+		if (!isDockerIdentifier$2(id)) return jsonResponse({ error: "Invalid container ID" }, { status: 400 });
+		const eventStore = yield* EventStoreService;
+		const args = action === "stop" ? [
+			"stop",
+			"--time",
+			"30",
+			id
+		] : [action, id];
+		const timeout = action === "stop" ? 35e3 : 1e4;
+		const result = yield* Effect.tryPromise({
+			try: () => dockerExec("docker", args, {
+				encoding: "utf-8",
+				timeout
+			}),
+			catch: (error) => error
+		}).pipe(Effect.matchEffect({
+			onFailure: (error) => Effect.succeed({
+				ok: false,
+				error
+			}),
+			onSuccess: ({ stdout }) => Effect.succeed({
+				ok: true,
+				stdout
+			})
+		}));
+		if (!result.ok) return jsonResponse(dockerActionErrorPayload(result.error), { status: 500 });
+		const containers = getCurrentDockerStats();
+		yield* eventStore.append({
+			type: "resources.updated",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			payload: { resources: { containers } }
+		});
+		return jsonResponse({
+			ok: true,
+			container: id,
+			action,
+			output: result.stdout.trim(),
+			containers
+		});
+	});
+}
+function isDockerIdentifier$2(value) {
+	return /^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value);
+}
+const postStopContainerRoute = HttpRouter.add("POST", "/api/resources/docker/container/:id/stop", httpHandler(Effect.gen(function* () {
+	return yield* dockerContainerActionEffect((yield* HttpRouter.params)["id"] ?? "", "stop");
+})));
+const postPauseContainerRoute = HttpRouter.add("POST", "/api/resources/docker/container/:id/pause", httpHandler(Effect.gen(function* () {
+	return yield* dockerContainerActionEffect((yield* HttpRouter.params)["id"] ?? "", "pause");
+})));
+const postUnpauseContainerRoute = HttpRouter.add("POST", "/api/resources/docker/container/:id/unpause", httpHandler(Effect.gen(function* () {
+	return yield* dockerContainerActionEffect((yield* HttpRouter.params)["id"] ?? "", "unpause");
+})));
+//#endregion
+//#region routes/resources/prune.ts
+init_domain_services();
+const execFileAsync$7 = promisify(execFile);
+const postPruneContainersRoute = HttpRouter.add("POST", "/api/resources/docker/prune-containers", httpHandler(Effect.gen(function* () {
+	const eventStore = yield* EventStoreService;
+	const { stdout } = yield* Effect.tryPromise({
+		try: () => execFileAsync$7("docker", [
+			"container",
+			"prune",
+			"-f"
+		], {
+			encoding: "utf-8",
+			timeout: 3e4
+		}),
+		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
+	});
+	yield* eventStore.append({
+		type: "resources.updated",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		payload: { resources: { containers: getCurrentDockerStats() } }
+	});
+	return jsonResponse({
+		ok: true,
+		output: stdout.trim()
+	});
+})));
+const deleteDockerNetworkRoute = HttpRouter.add("DELETE", "/api/resources/docker/network/:name", httpHandler(Effect.gen(function* () {
+	const name = (yield* HttpRouter.params)["name"] ?? "";
+	const eventStore = yield* EventStoreService;
+	if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(name)) return jsonResponse({ error: "Invalid network name" }, { status: 400 });
+	yield* Effect.tryPromise({
+		try: () => execFileAsync$7("docker", [
+			"network",
+			"rm",
+			name
+		], {
+			encoding: "utf-8",
+			timeout: 1e4
+		}),
+		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
+	});
+	yield* eventStore.append({
+		type: "resources.updated",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		payload: { resources: { containers: getCurrentDockerStats() } }
+	});
+	return jsonResponse({ ok: true });
+})));
+const deleteDockerVolumeRoute = HttpRouter.add("DELETE", "/api/resources/docker/volume/:name", httpHandler(Effect.gen(function* () {
+	const name = (yield* HttpRouter.params)["name"] ?? "";
+	const eventStore = yield* EventStoreService;
+	if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(name)) return jsonResponse({ error: "Invalid volume name" }, { status: 400 });
+	yield* Effect.tryPromise({
+		try: () => execFileAsync$7("docker", [
+			"volume",
+			"rm",
+			name
+		], {
+			encoding: "utf-8",
+			timeout: 1e4
+		}),
+		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
+	});
+	yield* eventStore.append({
+		type: "resources.updated",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		payload: { resources: { containers: getCurrentDockerStats() } }
+	});
+	return jsonResponse({ ok: true });
+})));
+const postPruneVolumesRoute = HttpRouter.add("POST", "/api/resources/docker/prune-volumes", httpHandler(Effect.gen(function* () {
+	const eventStore = yield* EventStoreService;
+	const { stdout } = yield* Effect.tryPromise({
+		try: () => execFileAsync$7("docker", [
+			"volume",
+			"prune",
+			"-f"
+		], {
+			encoding: "utf-8",
+			timeout: 3e4
+		}),
+		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
+	});
+	yield* eventStore.append({
+		type: "resources.updated",
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		payload: { resources: { containers: getCurrentDockerStats() } }
+	});
+	return jsonResponse({
+		ok: true,
+		output: stdout.trim()
+	});
+})));
+//#endregion
+//#region routes/resources/history.ts
+init_domain_services();
+const WINDOW_MS = 1440 * 60 * 1e3;
+const BUCKET_MS = 300 * 1e3;
+const MAX_POINTS = 288;
+const MAX_ACTIVITY_EVENTS = 1e3;
+const samples = [];
+function nowMs() {
+	return Date.now();
+}
+function pruneSamples(now = nowMs()) {
+	const cutoff = now - WINDOW_MS;
+	while (samples.length > 0 && samples[0].ts < cutoff) samples.shift();
+}
+function average(values) {
+	return values.reduce((sum, value) => sum + value, 0) / values.length;
+}
+function downsample(metric) {
+	pruneSamples();
+	const buckets = /* @__PURE__ */ new Map();
+	for (const sample of samples) {
+		const bucket = Math.floor(sample.ts / BUCKET_MS) * BUCKET_MS;
+		const values = buckets.get(bucket) ?? [];
+		values.push(sample[metric]);
+		buckets.set(bucket, values);
+	}
+	return [...buckets.entries()].sort(([a], [b]) => a - b).slice(-MAX_POINTS).map(([bucket, values]) => ({
+		ts: new Date(bucket).toISOString(),
+		value: Number(average(values).toFixed(2))
+	}));
+}
+function asRecord(value) {
+	if (!value) return null;
+	if (typeof value === "object" && !Array.isArray(value)) return value;
+	if (typeof value !== "string") return null;
+	try {
+		const parsed = JSON.parse(value);
+		return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed) ? parsed : null;
+	} catch {
+		return null;
+	}
+}
+function resourceAnnotationFromEvent(event, now = nowMs()) {
+	const eventTs = new Date(event.timestamp).getTime();
+	if (!Number.isFinite(eventTs) || eventTs <= now - WINDOW_MS || eventTs > now) return null;
+	const payload = asRecord(event.payload);
+	const details = asRecord(payload?.["details"]);
+	if (details?.["category"] !== "resources") return null;
+	const targetKind = details["targetKind"];
+	const targetId = details["targetId"];
+	if (typeof targetKind !== "string" || typeof targetId !== "string") return null;
+	const message = payload?.["message"];
+	return {
+		ts: event.timestamp,
+		label: typeof message === "string" ? message : event.type,
+		targetKind,
+		targetId
+	};
+}
+function buildResourceHistoryResponse(activityEvents, now = nowMs()) {
+	pruneSamples(now);
+	const startedAt = samples[0]?.ts ?? now;
+	return {
+		startedAt: new Date(startedAt).toISOString(),
+		cpu: downsample("cpuPercent"),
+		mem: downsample("memoryPercent"),
+		annotations: activityEvents.map((event) => resourceAnnotationFromEvent(event, now)).filter((annotation) => Boolean(annotation))
+	};
+}
+function getResourceHistoryEffect() {
+	return Effect.gen(function* () {
+		return jsonResponse(buildResourceHistoryResponse(yield* (yield* EventStoreService).queryByType("activity.entry", MAX_ACTIVITY_EVENTS)));
+	});
+}
+const getResourceHistoryRoute = HttpRouter.add("GET", "/api/resources/history/24h", httpHandler(getResourceHistoryEffect()));
+//#endregion
+//#region routes/resources/stack-verbs.ts
+init_domain_services();
+let dockerStackVerbExec = promisify(execFile);
+const postStartStackRoute = HttpRouter.add("POST", "/api/resources/stacks/:issueId/start", httpHandler(Effect.gen(function* () {
+	return yield* dockerStackVerbEffect((yield* HttpRouter.params)["issueId"] ?? "", "start");
+})));
+const postStopStackRoute = HttpRouter.add("POST", "/api/resources/stacks/:issueId/stop", httpHandler(Effect.gen(function* () {
+	return yield* dockerStackVerbEffect((yield* HttpRouter.params)["issueId"] ?? "", "stop");
+})));
+const postPauseStackRoute = HttpRouter.add("POST", "/api/resources/stacks/:issueId/pause", httpHandler(Effect.gen(function* () {
+	return yield* dockerStackVerbEffect((yield* HttpRouter.params)["issueId"] ?? "", "pause");
+})));
+function dockerStackVerbEffect(issue, verb) {
+	return Effect.gen(function* () {
+		const issueId = issue.trim().toUpperCase();
+		const stack = findStack$1(issueId);
+		if (!stack) return jsonResponse({
+			ok: false,
+			error: `Stack not found for ${issueId || issue}`
+		}, { status: 404 });
+		const results = [];
+		for (const service of stack.services) {
+			if (!isDockerIdentifier$1(service.id)) {
+				results.push({
+					containerId: service.id,
+					ok: false,
+					error: "Invalid container ID"
+				});
+				continue;
+			}
+			const args = argsFor(service.id, service.status, verb);
+			const timeout = verb === "stop" ? 35e3 : 3e4;
+			const result = yield* Effect.tryPromise({
+				try: () => dockerStackVerbExec("docker", args, {
+					encoding: "utf-8",
+					timeout
+				}),
+				catch: (error) => error
+			}).pipe(Effect.matchEffect({
+				onFailure: (error) => Effect.succeed({
+					containerId: service.id,
+					ok: false,
+					error: dockerActionErrorPayload(error).error
+				}),
+				onSuccess: ({ stdout }) => Effect.succeed({
+					containerId: service.id,
+					ok: true,
+					output: stdout.trim()
+				})
+			}));
+			results.push(result);
+		}
+		const containers = getCurrentDockerStats();
+		yield* (yield* EventStoreService).append({
+			type: "resources.updated",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			payload: { resources: { containers } }
+		});
+		return jsonResponse({
+			ok: results.every((result) => result.ok),
+			issueId,
+			action: verb,
+			results,
+			containers
+		});
+	});
+}
+function argsFor(containerId, status, verb) {
+	if (verb === "stop") return [
+		"stop",
+		"--time",
+		"30",
+		containerId
+	];
+	if (verb === "pause") return ["pause", containerId];
+	if (status === "paused") return ["unpause", containerId];
+	return ["start", containerId];
+}
+function isDockerIdentifier$1(value) {
+	return /^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value);
+}
+function findStack$1(issueId) {
+	return getResourceStacks(getCurrentDockerStats()).find((stack) => stack.issueId?.toUpperCase() === issueId);
+}
+//#endregion
+//#region routes/resources/teardown.ts
+init_activity_logger();
+init_domain_services();
+const execFileAsync$5 = promisify(execFile);
+const CONFIRM_TOKEN_TTL_MS = 300 * 1e3;
+let dockerTeardownExec = execFileAsync$5;
+let teardownTokenGenerator = () => `td-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+let activityEmitter = emitActivityEntrySync;
+const teardownTokens = /* @__PURE__ */ new Map();
+const getStackTeardownEstimateRoute = HttpRouter.add("GET", "/api/resources/stacks/:issueId/teardown-estimate", httpHandler(Effect.gen(function* () {
+	return yield* getStackTeardownEstimateEffect((yield* HttpRouter.params)["issueId"] ?? "");
+})));
+const postStackTeardownRoute = HttpRouter.add("POST", "/api/resources/stacks/:issueId/teardown", httpHandler(Effect.gen(function* () {
+	const params = yield* HttpRouter.params;
+	const body = yield* readJsonBody$13;
+	return yield* postStackTeardownEffect(params["issueId"] ?? "", body);
+})));
+function getStackTeardownEstimateEffect(issue) {
+	return Effect.gen(function* () {
+		const issueId = normalizeIssueId$1(issue);
+		const stack = findStack(issueId);
+		if (!stack) return jsonResponse({ error: `Stack not found for ${issueId || issue}` }, { status: 404 });
+		const token = teardownTokenGenerator();
+		const expiresAt = Date.now() + CONFIRM_TOKEN_TTL_MS;
+		teardownTokens.set(token, {
+			issueId,
+			composeProject: stack.composeProject,
+			expiresAt
+		});
+		return jsonResponse(buildStackTeardownEstimate(stack, token, expiresAt));
+	});
+}
+function postStackTeardownEffect(issue, input) {
+	return Effect.gen(function* () {
+		const issueId = normalizeIssueId$1(issue);
+		const confirmToken = typeof input.confirmToken === "string" ? input.confirmToken : "";
+		const typedText = typeof input.typedText === "string" ? input.typedText : "";
+		const token = teardownTokens.get(confirmToken);
+		if (!token || token.issueId !== issueId || token.expiresAt <= Date.now()) {
+			teardownTokens.delete(confirmToken);
+			return jsonResponse({
+				ok: false,
+				error: "Invalid or expired confirmation token."
+			}, { status: 422 });
+		}
+		if (typedText !== token.composeProject) return jsonResponse({
+			ok: false,
+			error: `Type ${token.composeProject} to confirm stack teardown.`
+		}, { status: 422 });
+		const stack = findStack(issueId);
+		if (!stack) return jsonResponse({
+			ok: false,
+			error: `Stack not found for ${issueId}`
+		}, { status: 404 });
+		const estimate = buildStackTeardownEstimate(stack, confirmToken, token.expiresAt);
+		const result = yield* runDockerStackTeardown(stack);
+		teardownTokens.delete(confirmToken);
+		yield* (yield* EventStoreService).append({
+			type: "resources.updated",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			payload: { resources: { containers: getCurrentDockerStats() } }
+		});
+		activityEmitter({
+			source: "dashboard",
+			level: "info",
+			issueId,
+			message: `Tore down Docker stack for ${issueId}, freeing ${estimate.ramBytes} RAM bytes and ${estimate.diskBytes} disk bytes.`,
+			details: JSON.stringify({
+				issueId,
+				composeProject: stack.composeProject,
+				ramBytes: estimate.ramBytes,
+				diskBytes: estimate.diskBytes,
+				removedContainers: result.containers.length,
+				removedNetworks: result.networks.length,
+				removedVolumes: result.volumes.length
+			})
+		});
+		return jsonResponse({
+			ok: true,
+			issueId,
+			composeProject: stack.composeProject,
+			ramBytes: estimate.ramBytes,
+			diskBytes: estimate.diskBytes,
+			removedContainers: result.containers,
+			removedNetworks: result.networks,
+			removedVolumes: result.volumes
+		});
+	});
+}
+function buildStackTeardownEstimate(stack, confirmToken, expiresAt) {
+	return {
+		issueId: stack.issueId ?? stack.id,
+		composeProject: stack.composeProject,
+		ramBytes: stack.aggregates.memoryBytes,
+		diskBytes: stack.aggregates.diskBytes,
+		confirmToken,
+		expiresAt: new Date(expiresAt).toISOString()
+	};
+}
+function runDockerStackTeardown(stack) {
+	return Effect.tryPromise({
+		try: async () => {
+			const containers = stack.services.map((service) => service.id).filter(Boolean);
+			for (const container of containers) {
+				if (!isDockerIdentifier(container)) throw new Error(`Invalid container ID: ${container}`);
+				await dockerTeardownExec("docker", [
+					"stop",
+					"--time",
+					"30",
+					container
+				], {
+					encoding: "utf-8",
+					timeout: 35e3
+				});
+			}
+			for (const container of containers) await dockerTeardownExec("docker", [
+				"rm",
+				"-f",
+				container
+			], {
+				encoding: "utf-8",
+				timeout: 3e4
+			});
+			const networks = lines((await dockerTeardownExec("docker", [
+				"network",
+				"ls",
+				"--filter",
+				`label=com.docker.compose.project=${stack.composeProject}`,
+				"--format",
+				"{{.Name}}"
+			], {
+				encoding: "utf-8",
+				timeout: 1e4
+			})).stdout);
+			for (const network of networks) {
+				if (!isDockerIdentifier(network)) throw new Error(`Invalid network name: ${network}`);
+				await dockerTeardownExec("docker", [
+					"network",
+					"rm",
+					network
+				], {
+					encoding: "utf-8",
+					timeout: 1e4
+				});
+			}
+			const volumes = lines((await dockerTeardownExec("docker", [
+				"volume",
+				"ls",
+				"--filter",
+				`label=com.docker.compose.project=${stack.composeProject}`,
+				"--format",
+				"{{.Name}}"
+			], {
+				encoding: "utf-8",
+				timeout: 1e4
+			})).stdout);
+			for (const volume of volumes) {
+				if (!isDockerIdentifier(volume)) throw new Error(`Invalid volume name: ${volume}`);
+				await dockerTeardownExec("docker", [
+					"volume",
+					"rm",
+					volume
+				], {
+					encoding: "utf-8",
+					timeout: 1e4
+				});
+			}
+			return {
+				containers,
+				networks,
+				volumes
+			};
+		},
+		catch: (error) => error
+	});
+}
+function findStack(issueId) {
+	return getResourceStacks(getCurrentDockerStats()).find((stack) => stack.issueId?.toUpperCase() === issueId);
+}
+function normalizeIssueId$1(issue) {
+	return issue.trim().toUpperCase();
+}
+function lines(value) {
+	return value.split("\n").map((line) => line.trim()).filter(Boolean);
+}
+function isDockerIdentifier(value) {
+	return /^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value);
+}
+const readJsonBody$13 = Effect.gen(function* () {
+	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
+	try {
+		return text ? JSON.parse(text) : {};
+	} catch {
+		return {};
+	}
+});
+//#endregion
+//#region routes/resources/index.ts
+const resourcesRouteLayer = Layer.mergeAll(getResourcesRoute, getResourceHistoryRoute, getContainerHistoryRoute, getContainerDetailsRoute, deleteDockerContainerRoute, postPruneContainersRoute, deleteDockerNetworkRoute, deleteDockerVolumeRoute, postPruneVolumesRoute, postRestartContainerRoute, postStartContainerRoute, postStopContainerRoute, postPauseContainerRoute, postUnpauseContainerRoute, getContainerLogsRoute, deleteResourceVenvRoute, postStartStackRoute, postStopStackRoute, postPauseStackRoute, getStackTeardownEstimateRoute, postStackTeardownRoute);
 //#endregion
 //#region services/model-origin-enrich.ts
 init_agents$1();
@@ -34979,8 +36417,34 @@ async function deriveSessionPresence(agentId, rtState, tmuxSessionNames) {
 	return "idle";
 }
 //#endregion
-//#region ../../lib/settings-api.ts
+//#region ../../lib/settings-api-tiered-execution.ts
 init_prd_locations();
+function tieredExecutionConfigForSave(config, providerAuth) {
+	if (config === void 0) return void 0;
+	const validated = validateTieredExecutionConfig(config, { providerAuth });
+	return {
+		enabled: validated.enabled,
+		tiers: validated.tiers,
+		supervisor: validated.supervisor,
+		by_kind: validated.by_kind,
+		feed: validated.feed,
+		escalation: validated.escalation,
+		compaction_reroute: validated.compaction_reroute,
+		replay_threshold: validated.replay_threshold
+	};
+}
+function validateTieredExecutionSettings(config, providerAuth) {
+	if (config === void 0) return null;
+	try {
+		validateTieredExecutionConfig(config, { providerAuth });
+		return null;
+	} catch (error) {
+		if (error instanceof TieredExecutionConfigError) return error.message;
+		throw error;
+	}
+}
+//#endregion
+//#region ../../lib/settings-api.ts
 /**
 * Settings API Adapter
 *
@@ -35440,7 +36904,8 @@ async function writeYamlConfigPreservingComments(yamlConfig) {
 		["tracker_keys", config.tracker_keys],
 		["experimental", config.experimental],
 		["claude", config.claude],
-		["codex", config.codex]
+		["codex", config.codex],
+		["tiered_execution", config.tiered_execution]
 	];
 	for (const [key, value] of topLevelSections) if (value === void 0) doc.deleteIn([key]);
 	else doc.setIn([key], value);
@@ -35544,7 +37009,8 @@ async function saveSettingsApiPromise(settings) {
 		} : void 0,
 		claude: settings.claude?.permissionMode ? { permissionMode: settings.claude.permissionMode } : void 0,
 		codex: settings.codex?.permissionMode ? { permissionMode: settings.codex.permissionMode } : void 0,
-		remote: settings.remote
+		remote: settings.remote,
+		tiered_execution: tieredExecutionConfigForSave(settings.tiered_execution, currentConfig.providerAuth)
 	});
 	clearConfigCache();
 }
@@ -35711,6 +37177,10 @@ function validateSettingsApi(settings) {
 		if (settings.remote.resiliency_tier !== void 0 && settings.remote.resiliency_tier !== "ephemeral" && settings.remote.resiliency_tier !== "durable") errors.push("remote.resiliency_tier must be ephemeral or durable");
 		if (settings.remote.max_concurrent_agents !== void 0 && (!Number.isInteger(settings.remote.max_concurrent_agents) || settings.remote.max_concurrent_agents < 0)) errors.push("remote.max_concurrent_agents must be a non-negative integer");
 	}
+	if (settings.tiered_execution !== void 0) {
+		const tieredExecutionError = validateTieredExecutionSettings(settings.tiered_execution, loadConfigSync().config.providerAuth);
+		if (tieredExecutionError) errors.push(tieredExecutionError);
+	}
 	return {
 		valid: errors.length === 0,
 		errors,
@@ -36881,7 +38351,7 @@ Be specific: reference actual file names, function names, requirement text, disc
 	const { command: cliCmd, args: cliArgs } = getAgentCommandSync(statusModelId);
 	const modelFlag = cliArgs.length > 0 ? ` ${cliArgs.join(" ")}` : "";
 	const promptFile = join$1(planningDir, ".status-review-prompt.tmp");
-	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-n0vv1kSW.js");
+	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-Djkuu1CD.js");
 	let providerEnvStr = "";
 	let providerEnv = {};
 	const statusProvider = getProviderForModelSync(statusModelId);
@@ -36964,7 +38434,7 @@ const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/
 	let safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "-");
 	let processedContent = content;
 	if (safeName.endsWith(".vtt")) {
-		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-DxyN_zxJ.js"));
+		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-d-QMKZn4.js"));
 		processedContent = vttToMarkdown(content);
 		safeName = safeName.replace(/\.vtt$/, ".md");
 	}
@@ -42302,73 +43772,6 @@ const resetRoute = HttpRouter.add("POST", "/api/autopreso/session/reset", httpHa
 })));
 const autopresoRouteLayer = Layer.mergeAll(startRoute, backToStagingRoute, resetRoute);
 //#endregion
-//#region services/event-loop-monitor.ts
-init_activity_logger();
-const EVENT_LOOP_MONITOR_WINDOW_MS = 6e4;
-let lastSample = {
-	p50: 0,
-	p99: 0,
-	max: 0,
-	unit: "ms",
-	sampledAt: null,
-	windowMs: EVENT_LOOP_MONITOR_WINDOW_MS
-};
-let timer$3 = null;
-let activeHistogram = null;
-function nsToRoundedMs(ns) {
-	if (!Number.isFinite(ns) || ns <= 0) return 0;
-	return Math.round(ns / 1e6 * 100) / 100;
-}
-function sampleEventLoopDelay(histogram, deps = {}) {
-	const warnThresholdMs = deps.warnThresholdMs ?? 100;
-	const now = deps.now ?? (() => /* @__PURE__ */ new Date());
-	const warn = deps.warn ?? ((message) => console.warn(message));
-	const emit = deps.emit ?? emitActivityEntrySync;
-	const sample = {
-		p50: nsToRoundedMs(histogram.percentile(50)),
-		p99: nsToRoundedMs(histogram.percentile(99)),
-		max: nsToRoundedMs(histogram.max),
-		unit: "ms",
-		sampledAt: now().toISOString(),
-		windowMs: EVENT_LOOP_MONITOR_WINDOW_MS
-	};
-	lastSample = sample;
-	if (sample.p99 > warnThresholdMs) {
-		const message = `Dashboard event loop p99 delay ${sample.p99}ms exceeded ${warnThresholdMs}ms`;
-		warn(`[event-loop-monitor] ${message}`);
-		emit({
-			source: "dashboard",
-			level: "warn",
-			message,
-			details: `p50=${sample.p50}ms p99=${sample.p99}ms max=${sample.max}ms over ${sample.windowMs}ms`
-		});
-	}
-	histogram.reset();
-	return sample;
-}
-function getEventLoopDelaySample() {
-	return lastSample;
-}
-function startEventLoopMonitor(deps = {}) {
-	if (timer$3) return;
-	const intervalMs = deps.intervalMs ?? 6e4;
-	activeHistogram = (deps.createHistogram ?? (() => monitorEventLoopDelay({ resolution: 20 })))();
-	activeHistogram.enable();
-	timer$3 = setInterval(() => {
-		if (!activeHistogram) return;
-		sampleEventLoopDelay(activeHistogram, deps);
-	}, intervalMs);
-	timer$3.unref?.();
-}
-function stopEventLoopMonitor() {
-	if (timer$3) {
-		clearInterval(timer$3);
-		timer$3 = null;
-	}
-	activeHistogram?.disable();
-	activeHistogram = null;
-}
-//#endregion
 //#region routes/metrics.ts
 /**
 * Metrics route module — Effect HttpRouter.Layer (PAN-428 B16)
@@ -42842,7 +44245,7 @@ const postRallyValidateRoute = HttpRouter.add("POST", "/api/rally/validate", Eff
 	}, { status: 400 });
 	return yield* Effect.promise(async () => {
 		try {
-			const { RallyRestApi } = await import("./rally-api-CdbdHW2C.js");
+			const { RallyRestApi } = await import("./rally-api-DpFjC_KQ.js");
 			const api = new RallyRestApi({
 				apiKey,
 				server: server || "https://rally1.rallydev.com"
@@ -43170,7 +44573,7 @@ const getPlanningStatusRoute = HttpRouter.add("GET", "/api/planning/:issueId/sta
 			const remoteState = loadRemoteAgentState(sessionName);
 			const isRemote = !!remoteState;
 			const vmName = remoteState?.vmName ?? "";
-			const { getAgentStateSync } = await import("./agents-pTsn9v84.js");
+			const { getAgentStateSync } = await import("./agents-Ea9gfdKS.js");
 			const agentStarting = getAgentStateSync(sessionName)?.status === "starting";
 			let tmuxSessionAlive = false;
 			if (!isRemote) try {
@@ -43313,7 +44716,7 @@ Continue the PLANNING session. Do NOT implement anything.
 `);
 			const agentCwd = workspacePath;
 			if (existsSync$1(outputFile)) await rename(outputFile, join$1(planningDir, `output-${Date.now()}.jsonl`));
-			const { getAgentCommandSync } = await import("./settings-CWqi2OdX.js");
+			const { getAgentCommandSync } = await import("./settings-DXeuoifi.js");
 			let msgPlanningModel = "claude-sonnet-5";
 			try {
 				msgPlanningModel = resolveModel("plan", void 0, loadConfigSync().config);
@@ -43434,7 +44837,7 @@ async function getIndexStats(rootPath, isMain) {
 }
 const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DvyN2P1o.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-CwUB_rve.js");
 		const projectRoot = process.cwd();
 		const venvPath = join$1(projectRoot, ".venv");
 		const results = [];
@@ -43479,7 +44882,7 @@ const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Ef
 }));
 const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DvyN2P1o.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-CwUB_rve.js");
 		const projectRoot = process.cwd();
 		const venvPath = join$1(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -43496,7 +44899,7 @@ const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Ef
 }));
 const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DvyN2P1o.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-CwUB_rve.js");
 		const projectRoot = process.cwd();
 		const venvPath = join$1(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -43513,7 +44916,7 @@ const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effe
 }));
 const postTldrReloadRoute = HttpRouter.add("POST", "/api/services/tldr/reload", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DvyN2P1o.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-CwUB_rve.js");
 		const enabled = isTldrEnabledSync();
 		const projectRoot = process.cwd();
 		const targets = [];
@@ -43589,7 +44992,7 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	const version = await getOverdeckVersion();
 	let supervisorUrl = null;
 	try {
-		const { getSupervisorUrlSync } = await import("./supervisor-C4oXDjJt.js");
+		const { getSupervisorUrlSync } = await import("./supervisor-BY_xA7eS.js");
 		supervisorUrl = getSupervisorUrlSync();
 	} catch {}
 	return jsonResponse({
@@ -43753,7 +45156,7 @@ const postShadowMonitorRoute = HttpRouter.add("POST", "/api/shadow/:issueId/moni
 			const projectPath = await getProjectPath(issuePrefix);
 			const workspacePath = join$1(projectPath, "workspaces", `feature-${issueLower}`);
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
-			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-CXnG47QM.js");
+			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-DMC2pBPa.js");
 			const config = {
 				issueId,
 				workspacePath,
@@ -43783,7 +45186,7 @@ const postShadowObserveRoute = HttpRouter.add("POST", "/api/shadow/:issueId/obse
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
 			const ghConfig = getGitHubConfig();
 			if (!ghConfig) return jsonResponse({ error: "GitHub not configured - Observer requires GitHub" }, { status: 400 });
-			const { runObserverCycle } = await import("./shadow-engineering-CXnG47QM.js");
+			const { runObserverCycle } = await import("./shadow-engineering-DMC2pBPa.js");
 			const firstRepo = ghConfig.repos[0];
 			const config = {
 				issueId,
@@ -44848,7 +46251,7 @@ async function cleanupConversationAttachments(name) {
 *  sessions that the lifecycle poller missed. */
 async function cleanupOrphanedConversationAttachments() {
 	try {
-		const { listConversations } = await import("./conversations-RY7OLgoS.js");
+		const { listConversations } = await import("./conversations-DSOZG_Sz.js");
 		const convNames = new Set(listConversations().map((c) => c.name));
 		const root = getConversationAttachmentsRoot();
 		await runInBatches((await readdir(root, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !convNames.has(entry.name)).map((entry) => join$1(root, entry.name)), 10, (path) => rm(path, {
@@ -45716,7 +47119,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 			const codexApprovalPolicy = codexPermMode === "full-access" ? "never" : "on-request";
 			const codexSandboxMode = codexPermMode === "full-access" ? "danger-full-access" : codexPermMode === "read-only" ? "read-only" : "workspace-write";
 			const codexApprovalsReviewer = codexPermMode === "auto-review" ? "auto_review" : void 0;
-			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-BTxuHR7v.js");
+			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-BObh4thD.js");
 			initCodexHome(codexHome, {
 				trustedDir: cwd,
 				approvalPolicy: codexApprovalPolicy,
@@ -45786,7 +47189,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 	} catch {}
 	console.log(`[claude-invoke] purpose=conversation-session | model=${model || "default"} | source=conversations.ts:spawnConversationSession | session=${tmuxSession} | resume=${resume} | command="${runtimeCommand}"`);
 	try {
-		const { preTrustDirectory } = await import("./workspace-manager-g8GBLo49.js");
+		const { preTrustDirectory } = await import("./workspace-manager-BE2H8gD5.js");
 		preTrustDirectory(cwd);
 	} catch {}
 	try {
@@ -45803,7 +47206,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		const codexHomeDir = codexFields.codexHome;
 		(async () => {
 			try {
-				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-BTxuHR7v.js");
+				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-BObh4thD.js");
 				const rollout = await waitForCodexRollout(codexHomeDir, 12e4);
 				if (rollout) {
 					const threadId = extractThreadIdFromRollout(rollout);
@@ -46729,6 +48132,19 @@ async function resolveSessionFile(conv) {
 	console.error(`[conversations] UNRESOLVED claude-code session for conversation '${conv.name}' (tmux=${conv.tmuxSession}, status=${conv.status}, cwd=${conv.cwd}): no --session-id pinned in launcher.sh and no recorded claudeSessionId. The transcript panel cannot be trusted.`);
 	return null;
 }
+/**
+* True when a conversation that demonstrably had activity (tokens recorded, or
+* a title derived from its messages) no longer has a transcript file on disk.
+* This is the operator-facing "history was lost" signal — e.g. the 2026-07-05
+* incident where a boot-time cleanup deleted conv-* dirs holding ohmypi/codex
+* transcripts. Live sessions are excluded: a claude-code session writes its
+* JSONL only on the first message, so a missing file is normal while alive.
+*/
+function conversationTranscriptMissing(conv, sessionAlive, sessionFile) {
+	if (sessionAlive) return false;
+	if (!((conv.totalTokens ?? 0) > 0 || conv.titleSource === "ai" || conv.titleSource === "auto")) return false;
+	return !sessionFile || !existsSync$1(sessionFile);
+}
 const MESSAGES_CACHE_MAX = 100;
 const messagesCache = /* @__PURE__ */ new Map();
 function isCodexSessionFile(sessionFile) {
@@ -46897,7 +48313,8 @@ async function getConversationRead(rawId, deps) {
 			isWorktree: gitInfo.isWorktree,
 			pendingInputCount,
 			pendingInputKinds,
-			pendingAskUserQuestion
+			pendingAskUserQuestion,
+			transcriptMissing: conversationTranscriptMissing(conv, sessionAlive, convSf)
 		});
 	} catch (error) {
 		const msg = error instanceof Error ? error.message : String(error);
@@ -47406,7 +48823,8 @@ async function enrichConversationList(limit, offset) {
 			isWorktree: gitInfo.isWorktree,
 			pendingInputCount,
 			pendingInputKinds,
-			pendingAskUserQuestion
+			pendingAskUserQuestion,
+			transcriptMissing: conversationTranscriptMissing(row, sessionAlive, convSf)
 		};
 	})), CONVERSATION_LIST_ENRICHMENT_CONCURRENCY));
 }
@@ -48872,7 +50290,7 @@ async function registerProjectFromPath(opts) {
 	registerProjectSync(key, projectConfig);
 	const seededContextLayer = ensureProjectLayer(fullPath);
 	try {
-		const { preTrustDirectorySync } = await import("./workspace-manager-g8GBLo49.js");
+		const { preTrustDirectorySync } = await import("./workspace-manager-BE2H8gD5.js");
 		preTrustDirectorySync(fullPath);
 	} catch {}
 	let hooksInstalled = 0;
@@ -48908,7 +50326,7 @@ init_pan_dir();
 init_paths();
 const execAsync$3 = promisify(exec);
 async function getIssueDataService() {
-	const { getSharedIssueService } = await import("./issue-service-singleton-BDRqGHSo.js");
+	const { getSharedIssueService } = await import("./issue-service-singleton-DFei50PX.js");
 	return getSharedIssueService();
 }
 /** Returns true if the path exists (any type). */
@@ -50835,7 +52253,7 @@ async function refreshMergeStateFromGitHub(issueId, repo, prNumber) {
 		let mergeState;
 		let isDraft;
 		let checksFailed;
-		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-vFcUfTcd.js");
+		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-Dg25z05Z.js");
 		if (isGitHubAppConfigured()) {
 			const prState = await Effect.runPromise(getPullRequestState(owner, repoName, prNumber));
 			mergeable = prState.mergeable === null ? "UNKNOWN" : prState.mergeable ? "MERGEABLE" : "CONFLICTING";
@@ -50984,8 +52402,8 @@ async function handlePullRequestPromise(payload) {
 	bumpIssuePrTabCacheGeneration(issueId);
 	const repo = payload.repository.full_name;
 	if (payload.action === "closed" && pr.merged === true) try {
-		const { postMergeLifecycle } = await import("./merge-agent-BmLQPYGq.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-BGOgJTpI.js");
+		const { postMergeLifecycle } = await import("./merge-agent-DZaRBHQA.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-BbMEBykK.js");
 		const project = resolveProjectFromIssueSync(issueId);
 		if (project) {
 			const branchName = pr.head.ref;
@@ -51484,7 +52902,7 @@ function getCheckpointWorker() {
 	return worker;
 }
 async function runInline(operation, payload) {
-	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-Cpq2lR3l.js");
+	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-auGbx5b0.js");
 	switch (operation) {
 		case "claimTranscriptRange": return claimTranscriptRange(payload);
 		case "commitTranscriptRange": return commitTranscriptRange(payload);
@@ -52638,7 +54056,7 @@ function buildPendingTurn(input, fromOffset, toOffset, compressed) {
 	};
 }
 async function emitMemoryObservationCreated(observation, timestamp) {
-	const { initEventStore } = await import("./event-store-C3uFXcUQ.js");
+	const { initEventStore } = await import("./event-store-D7_dSgP8.js");
 	await (await initEventStore()).appendAsync({
 		type: "memory.observation_created",
 		timestamp,
@@ -55677,7 +57095,7 @@ async function getFlywheelConversationPayload() {
 	};
 }
 async function postFlywheelReportPayload() {
-	const { flywheelReportCommand } = await import("./flywheel-CiKfMXDy.js");
+	const { flywheelReportCommand } = await import("./flywheel-CFPOlOUd.js");
 	await flywheelReportCommand({ cwd: process.cwd() });
 	return {
 		status: 200,
@@ -55835,11 +57253,11 @@ const getMergeBlockersRoute = HttpRouter.add("GET", "/api/flywheel/merge-blocker
 async function defaultGetOrderedIssueIds() {
 	const status = await readCurrentFlywheelStatusForDashboard();
 	if (!status) return [];
-	const { computeMergeQueue } = await import("./flywheel-merge-order-5KNitgPL.js");
+	const { computeMergeQueue } = await import("./flywheel-merge-order-FN6zqVXG.js");
 	return (await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd()).pipe(Effect.provide(layer)))).map((i) => i.issueId);
 }
 async function defaultMergeOne(issueId) {
-	const { triggerMerge } = await import("./merge-ops-BZz86Atd.js");
+	const { triggerMerge } = await import("./merge-ops-DRRd3YBA.js");
 	const r = await triggerMerge(issueId);
 	return r.success ? { ok: true } : {
 		ok: false,
@@ -55859,7 +57277,7 @@ async function postFlywheelMergeNextPayload(payload, deps = {}) {
 		body: { error: "n must be a positive integer" }
 	};
 	const issueIds = (await (deps.getOrderedIssueIds ?? defaultGetOrderedIssueIds)()).slice(0, n);
-	const { shipMergeBatch } = await import("./merge-batch-UhBPrssc.js");
+	const { shipMergeBatch } = await import("./merge-batch-BbG78hx-.js");
 	return {
 		status: 200,
 		body: { outcomes: await shipMergeBatch(issueIds, { merge: deps.merge ?? defaultMergeOne }) }
@@ -56016,7 +57434,7 @@ const getFlywheelMergeQueueRoute = HttpRouter.add("GET", "/api/flywheel/merge-qu
 	return yield* Effect.promise(async () => {
 		const status = await readCurrentFlywheelStatusForDashboard();
 		if (!status) return jsonResponse([]);
-		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-5KNitgPL.js");
+		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-FN6zqVXG.js");
 		return jsonResponse(await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd(), { getPrUrl: resolveMergeQueuePrUrl }).pipe(Effect.provide(layer))));
 	});
 })));
@@ -56030,18 +57448,18 @@ function uatGenerationNameFromParam(param) {
 	return decoded.startsWith("uat/") ? decoded : `uat/${decoded}`;
 }
 const getUatGenerationsRoute = HttpRouter.add("GET", "/api/flywheel/uat-generations", httpHandler(Effect.gen(function* () {
-	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-BfTMZmcU.js"));
+	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-ByN1YyZx.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatGenerationsPayload()));
 })));
 const getUatCandidateRoute = HttpRouter.add("GET", "/api/flywheel/uat-candidate", httpHandler(Effect.gen(function* () {
-	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-BfTMZmcU.js"));
+	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-ByN1YyZx.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatCandidatePayload()));
 })));
 const postUatGenerationStackRoute = HttpRouter.add("POST", "/api/flywheel/uat-generations/:name/stack", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-BfTMZmcU.js"));
+	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-ByN1YyZx.js"));
 	const result = yield* Effect.promise(() => postUatGenerationStackPayload(name));
 	if (!result.ok) return jsonResponse({ error: result.error }, { status: result.status });
 	return jsonResponse({
@@ -56053,8 +57471,8 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-BfTMZmcU.js"));
-	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-BAT59U9k.js"));
+	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-ByN1YyZx.js"));
+	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-B6m2H7J6.js"));
 	const result = yield* Effect.promise(() => postUatGenerationPromotePayload(name, firePostMergeLifecycle));
 	if (!result.success) return jsonResponse(result, { status: result.reason === "not-found" ? 404 : result.reason === "merge-failed" ? 500 : 409 });
 	return jsonResponse(result);
@@ -56067,7 +57485,7 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 const postFlywheelAssembleUatRoute = HttpRouter.add("POST", "/api/flywheel/assemble-uat", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-BfTMZmcU.js"));
+	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-ByN1YyZx.js"));
 	return jsonResponse(yield* Effect.promise(() => runUatTrainReconcile({ force: true })));
 })));
 const getFlywheelStateRoute = HttpRouter.add("GET", "/api/flywheel/state", httpHandler(Effect.gen(function* () {
@@ -58805,6 +60223,7 @@ init_config_yaml();
 init_review_status();
 init_activity_logger();
 init_tier_supervisor();
+init_tier_table();
 function parseCalloutBody(body) {
 	if (!body || typeof body !== "object") return void 0;
 	const record = body;
@@ -59582,7 +61001,7 @@ async function pollOnce(state) {
 			try {
 				const remoteState = await readFile(join$1(homedir$1(), ".overdeck", "agents", agentId, "remote-state.json"), "utf-8").then((text) => JSON.parse(text)).catch(() => null);
 				if (remoteState?.location === "remote" && remoteState?.vmName) {
-					const { getRemoteAgentOutput } = await import("./remote-agents-BT_DHl8s.js");
+					const { getRemoteAgentOutput } = await import("./remote-agents-BXKV5iBS.js");
 					stdout = await getRemoteAgentOutput(agentId, remoteState.vmName, 50);
 				} else stdout = await Effect.runPromise(capturePane(agentId, 50));
 			} catch {
@@ -60765,7 +62184,7 @@ const RESTART_MARKER = join(homedir(), ".overdeck", "dashboard-restarting.json")
 * loads new content-hashed chunk filenames (no ERR_MODULE_NOT_FOUND after rebuild).
 */
 async function defaultLifecycleRunner(pending) {
-	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-BmLQPYGq.js");
+	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-DZaRBHQA.js");
 	await postMergeLifecycle(pending.issueId, pending.projectPath, pending.sourceBranch, { skipDeploy: true });
 	if (pending.sourceBranch) await notifyTldrDaemon(pending.projectPath, pending.sourceBranch);
 }
@@ -61086,7 +62505,7 @@ function failureReason(result) {
 	return result.error ?? result.message ?? `merge returned status ${result.statusCode ?? "unknown"}`;
 }
 async function defaultMergeIssue(issueId) {
-	const { triggerMerge } = await import("./merge-ops-BZz86Atd.js");
+	const { triggerMerge } = await import("./merge-ops-DRRd3YBA.js");
 	return triggerMerge(issueId);
 }
 function defaultAnnounceFailure(issueId, reason) {
@@ -61190,6 +62609,34 @@ async function warnIfAutonomousMergeBackendUnavailable(deps = {}) {
 	}
 }
 //#endregion
+//#region services/merge-app-scopes-health.ts
+init_activity_logger();
+init_github_app();
+function shouldWarnAppCannotMerge(result) {
+	return result.configured === true && result.canMerge === false;
+}
+async function warnIfAppCannotMerge(deps = {}) {
+	try {
+		const result = await (deps.getResult ?? (() => verifyAppCanMerge()))();
+		if (!shouldWarnAppCannotMerge(result)) return;
+		const missing = result.missing ?? [];
+		const message = [
+			"[overdeck] WARNING: overdeck-agent GitHub App installation cannot merge pull requests.",
+			`Missing required permissions: ${missing.join(", ")}.`,
+			"Grant these permissions to the App installation to enable autonomous merges."
+		].join("\n");
+		(deps.warn ?? console.warn)(message);
+		(deps.emit ?? emitActivityEntrySync)({
+			source: "dashboard",
+			level: "warn",
+			message: `GitHub App installation cannot merge: missing ${missing.join(", ")}`
+		});
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		(deps.warn ?? console.warn)(`[overdeck] WARNING: failed to verify GitHub App merge permissions: ${message}`);
+	}
+}
+//#endregion
 //#region services/cost-reconcile-service.ts
 const RECONCILE_INTERVAL_MS = 5 * 6e4;
 let timer = null;
@@ -61200,6 +62647,14 @@ async function runCostReconcileOnce(reason) {
 		const result = await reconcilePiTranscripts();
 		if (result.eventsImported > 0 || result.errors.length > 0) console.log(`[cost-reconciler] ${reason} sweep: ${result.eventsImported} imported, ${result.duplicatesSkipped} duplicate(s), ${result.errors.length} error(s)`);
 		if (result.errors.length > 0) for (const err of result.errors.slice(0, 5)) console.warn(`[cost-reconciler] ${err.path}: ${err.error}`);
+		const backfillResult = reclassifyUnknownCostEventsSync();
+		if (backfillResult.updated > 0) console.log(`[cost-reconciler] ${reason} UNKNOWN backfill: ${backfillResult.updated} updated`);
+		try {
+			const codexResult = await Effect.runPromise(CostWriter.use((writer) => writer.reconcile({ source: "codex" })).pipe(Effect.provide(CostDoorLive)));
+			if (codexResult.imported > 0) console.log(`[cost-reconciler] ${reason} codex sweep: ${codexResult.imported} imported`);
+		} catch (err) {
+			console.warn("[cost-reconciler] codex sweep failed:", err instanceof Error ? err.message : err);
+		}
 	})().finally(() => {
 		inFlight = null;
 	});
@@ -61225,6 +62680,7 @@ function stopCostReconcileService() {
 }
 //#endregion
 //#region ../../../scripts/create-overdeck-db.ts
+init_boot_gates();
 init_driver();
 function migrationStatements(migrationPath) {
 	return readFileSync$1(migrationPath, "utf8").split("--> statement-breakpoint").map((statement) => statement.trim()).filter(Boolean);
@@ -61291,6 +62747,7 @@ init_paths();
 init_tmux();
 init_fts_db();
 init_paths$1();
+init_auto_commit();
 initDashboardLogFile();
 console.log(`[boot-timing] module graph loaded at +${Math.round(performance.now())}ms (since process start)`);
 console.log(`[overdeck] Boot gates: ${formatBootGateState(resolveBootGates())}`);
@@ -61299,6 +62756,7 @@ console.log("[overdeck] Event loop delay monitor started");
 await mkdir(getOverdeckHome(), { recursive: true });
 ensureInternalTokenSync();
 warnIfAutonomousMergeBackendUnavailable();
+warnIfAppCannotMerge();
 await ensureManagedTmuxContextOnce();
 await initTrackerConfigCache().catch((err) => {
 	console.log("[tracker-config] Warning: failed to cache .overdeck.env:", err.message);
@@ -61635,6 +63093,7 @@ const handleShutdownSignal = async (signal) => {
 	stopCostReconcileService();
 	stopRestartAnnouncer();
 	await stopDeaconChild().catch((err) => console.warn("[deacon-supervisor] child shutdown failed:", err));
+	await Effect.runPromise(flushAllPendingAutoCommits()).catch((err) => console.warn("[pan-dir/auto-commit] shutdown flush failed:", err));
 	await stopConversationSearchWatcher().catch((err) => console.warn("[conversation-search] watcher shutdown failed:", err));
 	closeConversationSearchService();
 	closeMemoryFtsDatabases();
@@ -61683,7 +63142,7 @@ reconcileStaleGitHubBlockers().then((n) => {
 	}
 }).catch((err) => console.warn(`[overdeck] Startup blocker reconciliation failed: ${err.message}`));
 try {
-	const { resetProcessingToQueued } = await import("./merge-sync-C_in5zj_.js");
+	const { resetProcessingToQueued } = await import("./merge-sync-D3wPN2-T.js");
 	const resetCount = resetProcessingToQueued();
 	if (resetCount > 0) {
 		console.log(`[overdeck] Reset ${resetCount} stuck merge queue entries to queued`);