@overdeck/desktop 0.45.12 → 0.45.13

package/server/{workspaces-Ca4zZs12.js → workspaces-DOeHyKmA.js}

@@ -1,42 +1,43 @@
-import { $n as extractPrefixSync, Br as getOverdeckHome, Dn as getProjectSync, Gn as resolveProjectFromIssueSync, Ln as listProjectsSync, Lr as encodeClaudeProjectDir, Nn as init_projects, Qn as extractNumberSync, Sn as findProjectByTeamSync, Vr as init_paths, cr as FsError, er as init_issue_id, ln as init_state_plane, lr as GitError, nr as parseIssueIdSync, un as isStatePlaneOnlyStatus, vn as extractTeamPrefix, vr as init_errors } from "./config-yaml-ClpGgrf6.js";
-import { D as jsonResponse, E as httpHandler, S as normalizeOrigin, b as getTrustedOrigins, f as getWorkAgentLifecycleStateSync, n as _serverManagedMerges, y as getHeaderFromMap } from "./specialists-B4byf18k.js";
+import { $n as extractPrefixSync, Dn as getProjectSync, Gn as resolveProjectFromIssueSync, Hr as init_paths, Ln as listProjectsSync, Nn as init_projects, Qn as extractNumberSync, Rr as encodeClaudeProjectDir, Sn as findProjectByTeamSync, Vr as getOverdeckHome, er as init_issue_id, ir as resolveIssueIdSync, ln as init_state_plane, lr as FsError, nr as parseIssueIdSync, un as isStatePlaneOnlyStatus, ur as GitError, vn as extractTeamPrefix, yr as init_errors } from "./config-yaml-C_djSurJ.js";
+import { D as jsonResponse, E as httpHandler, S as normalizeOrigin, b as getTrustedOrigins, f as getWorkAgentLifecycleStateSync, n as _serverManagedMerges, y as getHeaderFromMap } from "./specialists-CL7E8yUg.js";
 import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-pcbf-e30.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-DE3C4PMr.js";
-import { K as buildChildEnvWithoutTmuxSync, L as sessionExists, O as listSessionNames, i as capturePane, q as init_child_env, x as init_tmux } from "./tmux-D57f-XNv.js";
-import { _ as setDeaconIgnored, c as init_review_status, f as markWorkspaceStuck, g as setAutoMerge, s as getReviewStatusSync, u as loadReviewStatuses, y as setReviewStatusSync } from "./review-status-gPndPUBc.js";
-import { _ as init_queue_position, a as EventStoreService, g as findPositionInQueueSync, h as computeQueuePositionFromStatusSync, s as init_domain_services } from "./issue-lifecycle-543pQX9D.js";
-import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-CCnqa5xK.js";
-import { Mn as getAgentState, Rt as transitionIssueToInReview, U as spawnAgent, Z as listRunningAgents, gr as getAgentRuntimeStateSync, j as messageAgent, t as init_agents, vr as saveAgentRuntimeState } from "./agents-B5LfpLPv.js";
-import { f as CostWriter, l as CostDoorLive } from "./service-V0sUK-OR.js";
-import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-BmdJU_w6.js";
-import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-CWFt6jjV.js";
-import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-B_1YLWLI.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-Clew3DpF.js";
+import { K as buildChildEnvWithoutTmuxSync, L as sessionExists, O as listSessionNames, i as capturePane, q as init_child_env, x as init_tmux } from "./tmux-BVc-NeKM.js";
+import { _ as setDeaconIgnored, c as init_review_status, f as markWorkspaceStuck, g as setAutoMerge, s as getReviewStatusSync, u as loadReviewStatuses, y as setReviewStatusSync } from "./review-status-BcfwcAcO.js";
+import { _ as init_queue_position, a as EventStoreService, g as findPositionInQueueSync, h as computeQueuePositionFromStatusSync, s as init_domain_services } from "./issue-lifecycle-BoJa6qIt.js";
+import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-CaiG63FG.js";
+import { Mn as getAgentState, Rt as transitionIssueToInReview, U as spawnAgent, Z as listRunningAgents, gr as getAgentRuntimeStateSync, j as messageAgent, t as init_agents, vr as saveAgentRuntimeState } from "./agents-DqQa4Dq_.js";
+import { f as CostWriter, l as CostDoorLive } from "./service-C8jKYZ0w.js";
+import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-C1Y_2CIo.js";
+import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-lph9C3Pw.js";
+import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-BeXjPLKy.js";
 import { a as PAN_DIRNAME, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-CE1m_daD.js";
-import { o as init_merge_sync, r as getAllActiveQueues } from "./merge-sync-DHWbGtjR.js";
-import { A as findVBriefByIssue, N as readVBriefDocument, b as init_types$1, c as mergeRecordStatusOverrides, j as init_vbrief_index, o as init_io, r as findPlan, s as isPlanningComplete, u as readPlan, y as VBRIEF_INSPECTION_POLICIES } from "./io-A7ZuOBkz.js";
-import { f as init_config, m as loadConfigSync$1 } from "./config-8sjaU6jZ.js";
-import { it as findConversationForCostSessionSync, k as init_conversations } from "./conversations-DfJKBDwB.js";
-import { a as init_stack_health, i as getWorkspaceStackHealth, n as collectDockerContainerLifecycleSnapshot } from "./stack-health-Qd7rPiVe.js";
-import { o as criticalPath, t as actionableDoc, u as init_dag } from "./dag-Dv2r5bVD.js";
-import { a as queryBeadsForIssue, r as init_beads_query } from "./beads-query-e6oku4P5.js";
-import { a as readEventsFromLineSync, i as init_events, l as init_wal, o as readEventsSync, r as getLastEventMetadataSync, t as appendCostEventSync } from "./events-BfiosVAn.js";
-import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-BJhW2sky.js";
-import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-CaYOG9JN.js";
-import { at as init_jsonl_parser, nt as getActiveSessionModelSync } from "./specialists-DjHbwQ_p.js";
+import { o as init_merge_sync, r as getAllActiveQueues } from "./merge-sync-C2B322Ot.js";
+import { A as findVBriefByIssue, N as readVBriefDocument, b as init_types$1, c as mergeRecordStatusOverrides, j as init_vbrief_index, o as init_io, r as findPlan, s as isPlanningComplete, u as readPlan, y as VBRIEF_INSPECTION_POLICIES } from "./io-CbAFXQge.js";
+import { f as init_config, m as loadConfigSync$1 } from "./config-DsCxzjXK.js";
+import { it as findConversationForCostSessionSync, k as init_conversations } from "./conversations-BSOU5qnu.js";
+import { a as init_stack_health, i as getWorkspaceStackHealth, n as collectDockerContainerLifecycleSnapshot } from "./stack-health-C-le5erA.js";
+import { o as criticalPath, t as actionableDoc, u as init_dag } from "./dag-BQFtXOuJ.js";
+import { a as queryBeadsForIssue, r as init_beads_query } from "./beads-query-tOsAYP5h.js";
+import { a as readEventsFromLineSync, i as init_events, l as init_wal, o as readEventsSync, r as getLastEventMetadataSync, t as appendCostEventSync } from "./events-BFDuPV6n.js";
+import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-D6NgGkiF.js";
+import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-Dx0C7VWJ.js";
+import { at as init_jsonl_parser, nt as getActiveSessionModelSync } from "./specialists-BGNZ0_ZW.js";
 import { n as restoreTrackedBeadsExport, t as init_beads_restore } from "./beads-restore-CMbDSB5R.js";
-import { i as findWorkspacePath, o as init_archive_planning } from "./archive-planning-oX1pj6nY.js";
-import { T as verifyAppCanMerge, f as init_github_app, m as isIntegrationPermissionError } from "./github-app-BecAnXRX.js";
-import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync } from "./workspace-metadata-QQmo_Z0l.js";
-import { n as enrichReviewStatusFromSessions } from "./review-status-enrichment-qWvWckYN.js";
-import { n as generateDailySummary, r as init_cli } from "./cli-B75AieAM.js";
-import { a as getDiffStat, i as getDiffBase, o as init_review_context, r as getChangedFiles } from "./review-context-CErbQpKL.js";
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-C_1frSDj.js";
-import { C as init_git_activity, S as init_operations, a as init_merge_agent, b as MainDivergedError, w as listGitOperationsSync, x as gitPush, y as syncMainIntoWorkspace } from "./merge-agent-CHHs5S_0.js";
-import { F as enqueueMerge, I as getAllActiveQueues$1, L as getCurrentMerge, P as dequeueMerge, z as markMergeProcessing } from "./merge-ZrXFM3jv.js";
-import { i as init_conflict_gate, r as getCachedConflictGateMergeability } from "./conflict-gate-BtB_o-Vi.js";
-import { n as runVerificationForIssue } from "./verification-runner-CntudBes.js";
-import { t as teardownWorkspace } from "./teardown-workspace-CWz1pbEK.js";
-import { n as init_rebuild_stack, t as composeProjectNameForWorkspace } from "./rebuild-stack-KHkkrGjx.js";
+import { i as findWorkspacePath, o as init_archive_planning } from "./archive-planning-CPitEZo4.js";
+import { T as verifyAppCanMerge, f as init_github_app, m as isIntegrationPermissionError } from "./github-app-DhycHVLF.js";
+import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync } from "./workspace-metadata-C8yn8kAH.js";
+import { n as enrichReviewStatusFromSessions } from "./review-status-enrichment-Cp5kFTGl.js";
+import { n as generateDailySummary, r as init_cli } from "./cli-s7bPWy-E.js";
+import { a as getDiffStat, i as getDiffBase, o as init_review_context, r as getChangedFiles } from "./review-context-CXO5ml5D.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-CaSUXd9r.js";
+import { C as init_operations, S as gitPush, T as listGitOperationsSync, a as init_merge_agent, w as init_git_activity, x as MainDivergedError, y as syncMainIntoWorkspace } from "./merge-agent-DNFFsiEm.js";
+import { F as enqueueMerge, I as getAllActiveQueues$1, L as getCurrentMerge, P as dequeueMerge, z as markMergeProcessing } from "./merge-B7Oi-g6k.js";
+import { n as init_release_set, t as getReleaseSetSync } from "./release-set-DwvT_Opu.js";
+import { i as init_conflict_gate, r as getCachedConflictGateMergeability } from "./conflict-gate-D47Kl78u.js";
+import { n as runVerificationForIssue } from "./verification-runner-DO0nYTJx.js";
+import { t as teardownWorkspace } from "./teardown-workspace-CpcjDrZ4.js";
+import { n as init_rebuild_stack, t as composeProjectNameForWorkspace } from "./rebuild-stack-BZ7j27xY.js";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { Effect, Layer, Option } from "effect";
 import { closeSync, existsSync, fstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, writeFileSync } from "fs";
@@ -973,7 +974,7 @@ const postWorkspaceContainerActionRoute = HttpRouter.add("POST", "/api/workspace
 	}
 	if (!workspacePath) return jsonResponse({ error: `Workspace not found for ${issueId}` }, { status: 404 });
 	if (!composeFile && ["start", "restart"].includes(action)) {
-		const { ensureDevcontainerSync } = yield* Effect.promise(() => import("./ensure-devcontainer-CbSXvN9W.js"));
+		const { ensureDevcontainerSync } = yield* Effect.promise(() => import("./ensure-devcontainer-BIShzs3M.js"));
 		if (ensureDevcontainerSync({
 			workspacePath,
 			issueId
@@ -2593,7 +2594,7 @@ async function reconcileGitHubMergeStatus(issueId, status) {
 	const prRef = parseGitHubPullRequestUrl(status.prUrl);
 	if (!prRef) return false;
 	try {
-		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-C7lftMNj.js");
+		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-DIr70YLg.js");
 		if (!isGitHubAppConfigured()) return false;
 		const prState = await Effect.runPromise(getPullRequestState(prRef.owner, prRef.repo, prRef.number));
 		console.log(`[merge] reconcileGitHubMergeStatus: ${issueId} PR #${prRef.number} merged=${prState.merged} state=${prState.state}`);
@@ -2871,8 +2872,8 @@ async function triggerMerge(issueId) {
 	try {
 		if (workspaceInfo.isRemote && workspaceInfo.vmName) {
 			console.log(`[merge] Remote workspace detected for ${issueId}, using review artifact merge...`);
-			const { getMergeSetSync, ensureMergeSetForIssueSync } = await import("./merge-set-D-iXNP0I.js");
-			const { getForgeAdapter } = await import("./forge-IgLR0Ist.js");
+			const { getMergeSetSync, ensureMergeSetForIssueSync } = await import("./merge-set-DOsBTBQc.js");
+			const { getForgeAdapter } = await import("./forge-CUCYK7h_.js");
 			const remotePrimaryRepo = (getMergeSetSync(issueId) || ensureMergeSetForIssueSync(issueId))?.repos[0];
 			const remoteTargetBranch = remotePrimaryRepo?.targetBranch || "main";
 			const remoteForge = remotePrimaryRepo?.forge || "github";
@@ -2907,7 +2908,7 @@ async function triggerMerge(issueId) {
 					readyForMerge: false
 				});
 				completePendingOperation(issueId, null);
-				const { postMergeLifecycle } = await import("./merge-agent-CfohxFWM.js");
+				const { postMergeLifecycle } = await import("./merge-agent-Bwm34MZ5.js");
 				await postMergeLifecycle(issueId, projectPath);
 				return {
 					success: true,
@@ -2944,10 +2945,10 @@ async function triggerMerge(issueId) {
 		const projectConfig = findProjectByTeamSync(issuePrefix);
 		if (projectConfig?.workspace?.type === "polyrepo" && projectConfig?.workspace?.repos) {
 			console.log(`[merge] Polyrepo detected for ${issueId}, coordinating merge set...`);
-			const { getMergeSetSync, ensureMergeSetForIssueSync, upsertMergeSetSync, withRepoStateSync } = await import("./merge-set-D-iXNP0I.js");
-			const { runQualityGates } = await import("./validation-B0QaLIHP.js");
-			const { getForgeAdapter } = await import("./forge-IgLR0Ist.js");
-			const { messageAgent } = await import("./agents-C4kZ8a2r.js");
+			const { getMergeSetSync, ensureMergeSetForIssueSync, upsertMergeSetSync, withRepoStateSync } = await import("./merge-set-DOsBTBQc.js");
+			const { runQualityGates } = await import("./validation-COOXwNXU.js");
+			const { getForgeAdapter } = await import("./forge-CUCYK7h_.js");
+			const { messageAgent } = await import("./agents-CxbuBjID.js");
 			let mergeSet = getMergeSetSync(issueId) || ensureMergeSetForIssueSync(issueId);
 			if (!mergeSet) {
 				const error = `No merge set found for ${issueId}`;
@@ -3217,7 +3218,7 @@ async function triggerMerge(issueId) {
 				readyForMerge: false
 			});
 			completePendingOperation(issueId, null);
-			const { postMergeLifecycle } = await import("./merge-agent-CfohxFWM.js");
+			const { postMergeLifecycle } = await import("./merge-agent-Bwm34MZ5.js");
 			advanceQueue();
 			await postMergeLifecycle(issueId, projectPath);
 			return {
@@ -3228,8 +3229,8 @@ async function triggerMerge(issueId) {
 				repos: mergeResults
 			};
 		}
-		const { getMergeSetSync, ensureMergeSetForIssueSync } = await import("./merge-set-D-iXNP0I.js");
-		const { getForgeAdapter } = await import("./forge-IgLR0Ist.js");
+		const { getMergeSetSync, ensureMergeSetForIssueSync } = await import("./merge-set-DOsBTBQc.js");
+		const { getForgeAdapter } = await import("./forge-CUCYK7h_.js");
 		const primaryRepo = (getMergeSetSync(issueId) || ensureMergeSetForIssueSync(issueId))?.repos[0];
 		const targetBranch = primaryRepo?.targetBranch || "main";
 		const primaryForge = primaryRepo?.forge || "github";
@@ -3271,7 +3272,7 @@ async function triggerMerge(issueId) {
 			};
 		}
 		if (githubPrRef) try {
-			const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-C7lftMNj.js");
+			const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-DIr70YLg.js");
 			if (isGitHubAppConfigured()) {
 				const prState = await Effect.runPromise(getPullRequestState(githubPrRef.owner, githubPrRef.repo, githubPrRef.number));
 				if (prState.state !== "OPEN" && !prState.merged) {
@@ -3332,7 +3333,7 @@ async function triggerMerge(issueId) {
 						readyForMerge: false
 					});
 					completePendingOperation(issueId, null);
-					const { postMergeLifecycle } = await import("./merge-agent-CfohxFWM.js");
+					const { postMergeLifecycle } = await import("./merge-agent-Bwm34MZ5.js");
 					await postMergeLifecycle(issueId, projectPath, branchName);
 					return {
 						success: true,
@@ -3346,13 +3347,13 @@ async function triggerMerge(issueId) {
 		} catch (prStateErr) {
 			console.warn(`[merge] Pre-merge PR state check failed for ${issueId}: ${prStateErr.message} — proceeding (check is best-effort)`);
 		}
-		const { postMergeLifecycle } = await import("./merge-agent-CfohxFWM.js");
+		const { postMergeLifecycle } = await import("./merge-agent-Bwm34MZ5.js");
 		const agentId = `agent-${issueId.toLowerCase()}`;
 		const rebaseMsg = `MERGE REQUESTED: The human has clicked MERGE for ${issueId}. Please rebase onto ${targetBranch} and push:\n\n1. git fetch origin ${targetBranch}\n2. git rebase origin/${targetBranch}\n3. If conflicts: resolve them, git add, git rebase --continue\n4. git push --force-with-lease\n\nAfter pushing, the server will handle verification and merge automatically. Do NOT run gh pr merge yourself.`;
 		setReviewStatus(issueId, { mergeStep: "rebasing" });
 		console.log(`[merge] Rebasing ${branchName} onto ${targetBranch} for ${issueId} (agent=${await Effect.runPromise(sessionExists(agentId)) ? "running" : "stopped"})...`);
 		{
-			const { beginShipLog, appendShipLog } = await import("./ship-log-CMWH3H5-.js");
+			const { beginShipLog, appendShipLog } = await import("./ship-log-CDVmOlZP.js");
 			beginShipLog(issueId);
 			appendShipLog(issueId, `Ship started: rebasing ${branchName} onto ${targetBranch}…`, "rebasing");
 		}
@@ -3480,7 +3481,7 @@ async function triggerMerge(issueId) {
 		});
 		let skipLocalVerification = false;
 		if (primaryForge === "github" && artifactUrl) try {
-			const { parsePullRequestRef, getCiCheckRunsStatePromise, isGitHubAppConfigured } = await import("./github-app-C7lftMNj.js");
+			const { parsePullRequestRef, getCiCheckRunsStatePromise, isGitHubAppConfigured } = await import("./github-app-DIr70YLg.js");
 			if (isGitHubAppConfigured()) {
 				const ref = parsePullRequestRef({ url: artifactUrl });
 				if (ref) {
@@ -3501,12 +3502,12 @@ async function triggerMerge(issueId) {
 		} catch (ciErr) {
 			console.warn(`[merge] CI-state check failed (${ciErr.message?.slice(0, 120)}) — falling back to local verification for ${issueId}`);
 		}
-		const { appendShipLog } = await import("./ship-log-CMWH3H5-.js");
+		const { appendShipLog } = await import("./ship-log-CDVmOlZP.js");
 		if (skipLocalVerification) appendShipLog(issueId, "✓ Local verification skipped — CI already green on this exact commit", "verifying");
 		const verifyResult = skipLocalVerification ? { outcome: "passed" } : await (async () => {
 			console.log(`[merge] Running post-rebase verification for ${issueId}...`);
 			appendShipLog(issueId, "Running post-rebase verification (full quality-gate suite)…", "verifying");
-			const { runVerificationForIssue } = await import("./verification-runner-DdleMNLq.js");
+			const { runVerificationForIssue } = await import("./verification-runner-Dd1FX8Qk.js");
 			return Effect.runPromise(runVerificationForIssue(issueId, workspacePath, { isRemote: false }, "merge-verify", {
 				syncTargetBranch: false,
 				onGateLog: (line) => appendShipLog(issueId, line, "verifying")
@@ -3539,7 +3540,7 @@ async function triggerMerge(issueId) {
 		console.log(`[merge] Post-rebase verification ${verifyResult.outcome} for ${issueId}`);
 		setReviewStatus(issueId, { mergeStep: "reporting-statuses" });
 		try {
-			const { getPullRequestState, isGitHubAppConfigured, reportCommitStatus } = await import("./github-app-C7lftMNj.js");
+			const { getPullRequestState, isGitHubAppConfigured, reportCommitStatus } = await import("./github-app-DIr70YLg.js");
 			if (githubPrRef && isGitHubAppConfigured()) {
 				const sha = (await Effect.runPromise(getPullRequestState(githubPrRef.owner, githubPrRef.repo, githubPrRef.number))).headSha.trim();
 				if (sha) {
@@ -3567,7 +3568,7 @@ async function triggerMerge(issueId) {
 		} catch (prMergeErr) {
 			console.error(`[merge] Review artifact merge threw for ${issueId}:`, prMergeErr);
 			try {
-				const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-C7lftMNj.js");
+				const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-DIr70YLg.js");
 				if (githubPrRef && isGitHubAppConfigured()) {
 					artifactMerged = (await Effect.runPromise(getPullRequestState(githubPrRef.owner, githubPrRef.repo, githubPrRef.number))).merged;
 					if (artifactMerged) console.log(`[merge] Race-detected: PR #${githubPrRef.number} for ${issueId} was already merged despite thrown error; proceeding`);
@@ -3684,8 +3685,8 @@ const postForgeApproveRoute = HttpRouter.add("POST", "/api/issues/:issueId/forge
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	if (!/^[A-Z]+-\d+$/i.test(issueId)) return jsonResponse({ error: "Invalid issue ID format" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { getMergeSetSync, upsertMergeSetSync, withRepoArtifactUrlSync, withRepoStateSync } = await import("./merge-set-D-iXNP0I.js");
-		const { getForgeAdapter } = await import("./forge-IgLR0Ist.js");
+		const { getMergeSetSync, upsertMergeSetSync, withRepoArtifactUrlSync, withRepoStateSync } = await import("./merge-set-DOsBTBQc.js");
+		const { getForgeAdapter } = await import("./forge-CUCYK7h_.js");
 		let mergeSet = getMergeSetSync(issueId);
 		if (!mergeSet) return jsonResponse({ error: `No merge set found for ${issueId}` }, { status: 404 });
 		const results = [];
@@ -3773,8 +3774,8 @@ const postForgeMergeRoute = HttpRouter.add("POST", "/api/issues/:issueId/forge-m
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	if (!/^[A-Z]+-\d+$/i.test(issueId)) return jsonResponse({ error: "Invalid issue ID format" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { getMergeSetSync, upsertMergeSetSync, withRepoArtifactUrlSync, withRepoStateSync } = await import("./merge-set-D-iXNP0I.js");
-		const { getForgeAdapter } = await import("./forge-IgLR0Ist.js");
+		const { getMergeSetSync, upsertMergeSetSync, withRepoArtifactUrlSync, withRepoStateSync } = await import("./merge-set-DOsBTBQc.js");
+		const { getForgeAdapter } = await import("./forge-CUCYK7h_.js");
 		let mergeSet = getMergeSetSync(issueId);
 		if (!mergeSet) return jsonResponse({ error: `No merge set found for ${issueId}` }, { status: 404 });
 		const results = [];
@@ -3967,7 +3968,7 @@ const postWorkspaceApproveRoute = HttpRouter.add("POST", "/api/issues/:issueId/a
 		console.log(`[approve] Starting role pipeline for ${issueId}...`);
 		let reviewResult;
 		try {
-			const { spawnReviewRoleForIssue } = await import("./review-agent-uwVftH98.js");
+			const { spawnReviewRoleForIssue } = await import("./review-agent-Bf9XjLnl.js");
 			reviewResult = await Effect.runPromise(spawnReviewRoleForIssue({
 				issueId,
 				workspace: workspacePath,
@@ -4014,7 +4015,7 @@ const postWorkspaceApproveRoute = HttpRouter.add("POST", "/api/issues/:issueId/a
 		}
 		console.log(`[approve] Step 3/3: Running server-side rebase for ${issueId}...`);
 		try {
-			const { rebaseFeatureBranch } = await import("./merge-rebase-R7MfqpiE.js");
+			const { rebaseFeatureBranch } = await import("./merge-rebase-C8WH39MB.js");
 			const workspacePathForRebase = join(projectPath, "workspaces", `feature-${issueId.toLowerCase()}`);
 			const rebaseResult = await Effect.runPromise(rebaseFeatureBranch(workspacePathForRebase, branchName, "main", issueId));
 			if (!rebaseResult.success) {
@@ -4034,7 +4035,7 @@ const postWorkspaceApproveRoute = HttpRouter.add("POST", "/api/issues/:issueId/a
 			completePendingOperation(issueId, pushResult.error);
 			return jsonResponse({ error: pushResult.error }, { status: pushResult.httpStatus });
 		}
-		const { approve: lifecycleApprove } = await import("./lifecycle-f1GbDK33.js");
+		const { approve: lifecycleApprove } = await import("./lifecycle-B8IdvUbt.js");
 		const ghResolved = resolveGitHubIssueSync(issueId);
 		const isGitHubIssueFlag = ghResolved.isGitHub;
 		const lifecycleCtx = {
@@ -4068,7 +4069,7 @@ const getMergeQueueRoute = HttpRouter.add("GET", "/api/merge-queue", httpHandler
 })));
 const postInternalPipelineNotifyRoute = HttpRouter.add("POST", "/api/internal/pipeline/notify", httpHandler(Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
-	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-nobT6FhA.js"));
+	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-C90jBp-y.js"));
 	const expected = getInternalTokenSync();
 	if (!expected) return jsonResponse({
 		ok: false,
@@ -4082,7 +4083,7 @@ const postInternalPipelineNotifyRoute = HttpRouter.add("POST", "/api/internal/pi
 	}, 403);
 	const event = yield* readJsonBody;
 	const type = event.type;
-	const { notifyPipelineSync } = yield* Effect.promise(() => import("./pipeline-notifier-BtYHbBPl.js"));
+	const { notifyPipelineSync } = yield* Effect.promise(() => import("./pipeline-notifier-nkWCe042.js"));
 	switch (type) {
 		case "status_changed": {
 			const issueId = event.issueId;
@@ -4857,7 +4858,7 @@ const patchWorkspaceTieredExecutionRoute = HttpRouter.add("PATCH", "/api/workspa
 	if (override !== "on" && override !== "off" && override !== null && override !== void 0) return jsonResponse({ error: "Invalid tiered-execution override" }, { status: 400 });
 	const project = getProjectSync(extractPrefixSync(issueId) ?? issueId.split("-")[0]);
 	if (!project) return jsonResponse({ error: "Project not found" }, { status: 404 });
-	yield* Effect.promise(() => import("./record-De2syxNB.js").then((m) => m.writeRecordTieredExecutionOverride(project, issueId, override)));
+	yield* Effect.promise(() => import("./record-CJsjvRO4.js").then((m) => m.writeRecordTieredExecutionOverride(project, issueId, override)));
 	const projectPath = project.path;
 	const location = yield* resolvePlanLocation(projectPath, issueId);
 	if (!location) return jsonResponse({ error: "No vBRIEF plan found for this workspace" }, { status: 404 });
@@ -5153,6 +5154,9 @@ const stashCleanRouteLayer = Layer.mergeAll(getWorkspaceStashesRoute, postWorksp
 *   POST /api/review/:issueId/trigger
 *   POST /api/review/:issueId/request
 *
+* Release read endpoint:
+*   GET  /api/workspaces/:issueId/release
+*
 * The cancel/control routes (reset, purge, abort, pending, unstick,
 * deacon-ignore, auto-merge) live in review-control.ts. Shared singletons
 * (review-status wrapper, pending-ops cluster, project path, readJsonBody,
@@ -5163,6 +5167,7 @@ init_projects();
 init_state_plane();
 init_domain_services();
 init_review_status();
+init_release_set();
 init_conflict_gate();
 init_beads_restore();
 init_agents();
@@ -5290,7 +5295,7 @@ const postWorkspaceReviewRoute = HttpRouter.add("POST", "/api/review/:issueId/tr
 				console.log(`Feature branch push note: ${errorMessage(pushErr)}`);
 			}
 			try {
-				const { createReviewArtifactsForIssue } = await import("./review-artifacts-C7a45b1_.js");
+				const { createReviewArtifactsForIssue } = await import("./review-artifacts-D0_IE6DQ.js");
 				const artifactResult = await Effect.runPromise(createReviewArtifactsForIssue(issueId, workspacePath));
 				const primaryArtifact = artifactResult.mergeSet?.repos.find((repo) => !!repo.artifactUrl);
 				artifactResult.mergeSet?.repos.find((repo) => repo.mergeStatus !== "skipped")?.targetBranch;
@@ -5345,7 +5350,7 @@ const postWorkspaceReviewRoute = HttpRouter.add("POST", "/api/review/:issueId/tr
 				} catch {}
 				return;
 			}
-			const { spawnReviewRoleForIssue } = await import("./review-agent-uwVftH98.js");
+			const { spawnReviewRoleForIssue } = await import("./review-agent-Bf9XjLnl.js");
 			const prUrl = getReviewStatusSync(issueId)?.prUrl;
 			const reviewResult = await Effect.runPromise(spawnReviewRoleForIssue({
 				issueId,
@@ -5485,7 +5490,7 @@ const postWorkspaceRequestReviewRoute = HttpRouter.add("POST", "/api/review/:iss
 						console.log(`[request-review] Feature branch push note: ${errorMessage(pushErr)}`);
 					}
 					const prUrl = getReviewStatusSync(issueId)?.prUrl;
-					const { spawnReviewRoleForIssue } = await import("./review-agent-uwVftH98.js");
+					const { spawnReviewRoleForIssue } = await import("./review-agent-Bf9XjLnl.js");
 					const result = await Effect.runPromise(spawnReviewRoleForIssue({
 						issueId,
 						workspace: workspacePathRerun,
@@ -5535,7 +5540,7 @@ const postWorkspaceRequestReviewRoute = HttpRouter.add("POST", "/api/review/:iss
 					});
 				} else {
 					const workspacePath = join(resolved.projectPath, "workspaces", `feature-${issueId.toLowerCase()}`);
-					const { spawnRun } = yield* Effect.promise(() => import("./agents-C4kZ8a2r.js"));
+					const { spawnRun } = yield* Effect.promise(() => import("./agents-CxbuBjID.js"));
 					try {
 						const testRun = yield* Effect.promise(() => spawnRun(issueId, "test", { workspace: workspacePath }));
 						setReviewStatus(issueId, { testStatus: "testing" });
@@ -5624,7 +5629,7 @@ const postWorkspaceRequestReviewRoute = HttpRouter.add("POST", "/api/review/:iss
 			autoRequeueCount: newCount
 		}, { status: 500 });
 		const result = yield* Effect.promise(async () => {
-			const { spawnReviewRoleForIssue } = await import("./review-agent-uwVftH98.js");
+			const { spawnReviewRoleForIssue } = await import("./review-agent-Bf9XjLnl.js");
 			return await Effect.runPromise(spawnReviewRoleForIssue({
 				issueId,
 				workspace: workspacePath,
@@ -5688,7 +5693,14 @@ const postWorkspaceRequestReviewRoute = HttpRouter.add("POST", "/api/review/:iss
 		}, { status: 500 });
 	}
 })));
-const reviewPipelineRouteLayer = Layer.mergeAll(postWorkspaceReviewRoute, postWorkspaceRequestReviewRoute);
+const getReleaseSetRoute = HttpRouter.add("GET", "/api/workspaces/:issueId/release", httpHandler(Effect.gen(function* () {
+	const rawIssueId = (yield* HttpRouter.params)["issueId"] ?? "";
+	if (!parseIssueIdSync(rawIssueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
+	const releaseSet = getReleaseSetSync(resolveIssueIdSync(rawIssueId));
+	if (!releaseSet) return jsonResponse({ error: "Release set not found" }, { status: 404 });
+	return jsonResponse(releaseSet);
+})));
+const reviewPipelineRouteLayer = Layer.mergeAll(postWorkspaceReviewRoute, postWorkspaceRequestReviewRoute, getReleaseSetRoute);
 //#endregion
 //#region routes/workspaces/review-control.ts
 /**
@@ -5921,7 +5933,7 @@ const postWorkspaceResetReviewRoute = HttpRouter.add("POST", "/api/review/:issue
 	const result = processResetReviewPipeline(issueId, resetWorkspace.exists);
 	if (result.httpStatus !== 200) return jsonResponse(result.body, { status: result.httpStatus });
 	try {
-		const { resetPostMergeState } = yield* Effect.promise(() => import("./merge-agent-CfohxFWM.js"));
+		const { resetPostMergeState } = yield* Effect.promise(() => import("./merge-agent-Bwm34MZ5.js"));
 		resetPostMergeState(issueId);
 	} catch (err) {
 		console.warn(`[reset-review] resetPostMergeState best-effort failed for ${issueId}:`, err);
@@ -5930,7 +5942,7 @@ const postWorkspaceResetReviewRoute = HttpRouter.add("POST", "/api/review/:issue
 	const rerun = body?.rerun === true;
 	if (rerun) try {
 		yield* Effect.promise(async () => {
-			const { spawnReviewRoleForIssue } = await import("./review-agent-uwVftH98.js");
+			const { spawnReviewRoleForIssue } = await import("./review-agent-Bf9XjLnl.js");
 			const dispatchArgs = buildReviewRedispatchArgs(issueId, resetWorkspace, workspaceInfo, resolved);
 			if (dispatchArgs) {
 				const result = await Effect.runPromise(spawnReviewRoleForIssue({
@@ -5959,7 +5971,7 @@ const postWorkspaceResetReviewRoute = HttpRouter.add("POST", "/api/review/:issue
 const postWorkspaceReviewPurgeRoute = HttpRouter.add("POST", "/api/review/:issueId/purge", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
-	const { purgeReviewAgentsForIssue } = yield* Effect.promise(() => import("./review-agent-uwVftH98.js"));
+	const { purgeReviewAgentsForIssue } = yield* Effect.promise(() => import("./review-agent-Bf9XjLnl.js"));
 	const projectKey = resolveProjectFromIssueSync(issueId)?.projectKey;
 	const purge = yield* Effect.promise(() => purgeReviewAgentsForIssue(projectKey, issueId));
 	const workspaceInfo = getWorkspaceInfoForIssue(issueId);
@@ -5989,8 +6001,8 @@ const postWorkspaceAbortReviewRoute = HttpRouter.add("POST", "/api/review/:issue
 		success: false,
 		error: "Workspace does not exist"
 	}, { status: 400 });
-	const { resolveProjectFromIssueSync } = yield* Effect.promise(() => import("./projects-Bqfwuqet.js"));
-	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-uwVftH98.js"));
+	const { resolveProjectFromIssueSync } = yield* Effect.promise(() => import("./projects-BqRMlDOv.js"));
+	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-Bf9XjLnl.js"));
 	const { killed, failed } = yield* killAllReviewerSessions(resolveProjectFromIssueSync(issueId)?.projectKey, issueId);
 	setReviewStatus(issueId, {
 		reviewStatus: "pending",
@@ -6062,8 +6074,8 @@ const getReviewConfigRoute = HttpRouter.add("GET", "/api/review/:issueId/config"
 	const issueId = ((yield* HttpRouter.params)["issueId"] ?? "").toUpperCase();
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return jsonResponse(yield* Effect.promise(async () => {
-		const { readIssueRecordSync, resolveProjectForIssue } = await import("./record-De2syxNB.js");
-		const { resolveReviewMode, resolveReReviewScope } = await import("./review-agent-uwVftH98.js");
+		const { readIssueRecordSync, resolveProjectForIssue } = await import("./record-CJsjvRO4.js");
+		const { resolveReviewMode, resolveReReviewScope } = await import("./review-agent-Bf9XjLnl.js");
 		const project = resolveProjectForIssue(issueId);
 		const record = project ? readIssueRecordSync(project, issueId) : null;
 		return {
@@ -6089,8 +6101,8 @@ const postReviewConfigRoute = HttpRouter.add("POST", "/api/review/:issueId/confi
 	if (hasMode && body.reviewMode !== null && body.reviewMode !== "quick" && body.reviewMode !== "full" && body.reviewMode !== "none") return jsonResponse({ error: "reviewMode must be quick, full, none, or null" }, { status: 400 });
 	if (hasScope && body.reReviewScope !== null && body.reReviewScope !== "all" && body.reReviewScope !== "changed" && body.reReviewScope !== "blockers") return jsonResponse({ error: "reReviewScope must be all, changed, blockers, or null" }, { status: 400 });
 	return jsonResponse(yield* Effect.promise(async () => {
-		const { ensureIssueRecordSync, readIssueRecordSync, resolveProjectForIssue, writeIssueRecordSync } = await import("./record-De2syxNB.js");
-		const { resolveReviewMode, resolveReReviewScope } = await import("./review-agent-uwVftH98.js");
+		const { ensureIssueRecordSync, readIssueRecordSync, resolveProjectForIssue, writeIssueRecordSync } = await import("./record-CJsjvRO4.js");
+		const { resolveReviewMode, resolveReReviewScope } = await import("./review-agent-Bf9XjLnl.js");
 		const project = resolveProjectForIssue(issueId);
 		const record = readIssueRecordSync(project, issueId) ?? ensureIssueRecordSync(project, issueId);
 		if (hasMode) if (body.reviewMode === null) delete record.reviewMode;
@@ -6484,7 +6496,7 @@ async function readWorkspacePlanningMarkdown(issueId, fileName) {
 */
 async function readWorkspaceContinueFile(_projectPath, workspacePath, issueId) {
 	try {
-		const { readRecordContinueViewSync, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = await import("./record-De2syxNB.js");
+		const { readRecordContinueViewSync, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = await import("./record-CJsjvRO4.js");
 		const recordView = readRecordContinueViewSync(resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath), issueId);
 		return recordView ? JSON.stringify(recordView, null, 2) : null;
 	} catch {
@@ -7253,7 +7265,7 @@ const getWorkspaceReviewStatusRoute = HttpRouter.add("GET", "/api/review/:issueI
 	if (queuePosition === null) try {
 		const resolved = resolveProjectFromIssueSync(issueId);
 		if (resolved) {
-			const { getQueueForProject } = yield* Effect.promise(() => import("./merge-DRMPa8CQ.js"));
+			const { getQueueForProject } = yield* Effect.promise(() => import("./merge-BRkVaIx-.js"));
 			const mergePos = findPositionInQueueSync(issueId, getQueueForProject(resolved.projectKey).map((e) => ({
 				id: String(e.id),
 				type: "task",
@@ -7291,7 +7303,7 @@ const postWorkspaceReviewStatusRoute = HttpRouter.add("POST", "/api/review/:issu
 		const workspaceInfo = getWorkspaceInfoForIssue(issueId);
 		if (workspaceInfo.exists && workspaceInfo.localPath) {
 			const localPath = workspaceInfo.localPath;
-			const { getWorkspaceGitInfo } = yield* Effect.promise(() => import("./git-utils-DbfC0zls.js"));
+			const { getWorkspaceGitInfo } = yield* Effect.promise(() => import("./git-utils-Ym380hJZ.js"));
 			try {
 				const gitInfo = yield* getWorkspaceGitInfo(localPath);
 				if (gitInfo.HEAD) update.reviewedAtCommit = gitInfo.HEAD;
@@ -7306,7 +7318,7 @@ const postWorkspaceReviewStatusRoute = HttpRouter.add("POST", "/api/review/:issu
 	if (verificationStatus) update.verificationStatus = verificationStatus;
 	if (readyForMerge !== void 0) update.readyForMerge = readyForMerge;
 	const status = setReviewStatus(issueId, update);
-	const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DdvpFNt1.js"));
+	const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-Chvvwf5z.js"));
 	const projectKey = resolveProjectFromIssueSync(issueId)?.projectKey;
 	if (reviewStatus && [
 		"passed",
@@ -7324,7 +7336,7 @@ const postWorkspaceReviewStatusRoute = HttpRouter.add("POST", "/api/review/:issu
 			const agentId = `agent-${issueId.toLowerCase()}`;
 			const feedbackBody = `CODE REVIEW ${reviewStatus.toUpperCase()} for ${issueId}:\n\n${reviewNotes}\n\n## REQUIRED: Fix ALL issues above, then invoke the /rebase-and-submit skill\n\n1. Read each blocking issue carefully\n2. Fix the code for EVERY issue listed\n3. Run tests locally to verify your fixes\n4. Commit every change\n5. Invoke the /rebase-and-submit skill for ${issueId} — this is an atomic task that runs pan done (which handles rebase + push + re-submit internally)\n\nDo NOT stop between steps. Do NOT run git push manually — the skill handles it. Do NOT stop until pan done has completed successfully.`;
 			try {
-				const { writeFeedbackFile } = yield* Effect.promise(() => import("./feedback-writer-DMBdS_jL.js"));
+				const { writeFeedbackFile } = yield* Effect.promise(() => import("./feedback-writer-DCyd75yJ.js"));
 				const wsInfo = getWorkspaceInfoForIssue(issueId);
 				const fileResult = yield* Effect.promise(() => writeFeedbackFile({
 					issueId,
@@ -7388,7 +7400,7 @@ const postWorkspaceReviewStatusRoute = HttpRouter.add("POST", "/api/review/:issu
 			const agentId = `agent-${issueId.toLowerCase()}`;
 			const feedbackBody = `TESTS FAILED for ${issueId}:\n\n${testNotes}\n\n## REQUIRED: Fix ALL test failures, then invoke the /rebase-and-submit skill\n\n1. Read each test failure carefully\n2. Fix the code causing EVERY failure\n3. Run the test suite locally to verify your fixes pass\n4. Commit every change\n5. Invoke the /rebase-and-submit skill for ${issueId} — this is an atomic task that runs pan done (which handles rebase + push + re-submit internally)\n\nDo NOT stop between steps. Do NOT run git push manually — the skill handles it. Do NOT stop until pan done has completed successfully.`;
 			try {
-				const { writeFeedbackFile } = yield* Effect.promise(() => import("./feedback-writer-DMBdS_jL.js"));
+				const { writeFeedbackFile } = yield* Effect.promise(() => import("./feedback-writer-DCyd75yJ.js"));
 				const wsInfo = getWorkspaceInfoForIssue(issueId);
 				const fileResult = yield* Effect.promise(() => writeFeedbackFile({
 					issueId,
@@ -7413,14 +7425,14 @@ const postWorkspaceReviewStatusRoute = HttpRouter.add("POST", "/api/review/:issu
 			console.log(`[review-status] ${issueId} marked ready for merge after test=passed`);
 			yield* Effect.promise(async () => {
 				try {
-					const { resolveProjectFromIssueSync, getProjectSync } = await import("./projects-Bqfwuqet.js");
+					const { resolveProjectFromIssueSync, getProjectSync } = await import("./projects-BqRMlDOv.js");
 					const project = resolveProjectFromIssueSync(issueId);
 					const repo = (project ? getProjectSync(project.projectKey) : null)?.github_repo;
 					if (!repo || !repo.includes("/")) return;
 					const [owner, name] = repo.split("/");
 					const wsInfo = getWorkspaceInfoForIssue(issueId);
 					if (!wsInfo?.localPath) return;
-					const { postOverdeckTestsStatus } = await import("./github-app-C7lftMNj.js");
+					const { postOverdeckTestsStatus } = await import("./github-app-DIr70YLg.js");
 					await postOverdeckTestsStatus(wsInfo.localPath, owner, name, "success", "Test specialist passed");
 				} catch (err) {
 					console.warn(`[review-status] Failed to post overdeck/tests for ${issueId}: ${err.message}`);
@@ -7462,7 +7474,7 @@ const postWorkspaceRefreshTokenRoute = HttpRouter.add("POST", "/api/workspaces/:
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	const issueLower = issueId.toLowerCase();
 	const workspacePath = join(getProjectPath(void 0, extractPrefixSync(issueId) ?? issueId.split("-")[0]), "workspaces", `feature-${issueLower}`);
-	const { refreshWorkspaceToken, isGitHubAppConfigured } = yield* Effect.promise(() => import("./github-app-C7lftMNj.js"));
+	const { refreshWorkspaceToken, isGitHubAppConfigured } = yield* Effect.promise(() => import("./github-app-DIr70YLg.js"));
 	if (!isGitHubAppConfigured()) return jsonResponse({
 		success: false,
 		error: "GitHub App not configured"
@@ -7477,4 +7489,4 @@ const workspacesRouteLayer = Layer.mergeAll(workspaceDataRouteLayer, postWorkspa
 //#endregion
 export { hasDashboardInternalToken as C, getWorkspacePathForIssue as D, rejectUnsafeDashboardMutationRequest as E, dashboardSessionCookieHeader as S, rejectUnauthorizedDashboardSessionMintRequest as T, syncCacheSync as _, pushApproveMain as a, resolveIssueHeadlineCost as b, triggerMerge as c, reconcile as d, reconcilePiTranscripts as f, rebuildCacheSync as g, getCostsForIssueSync as h, mergeOpsRouteLayer as i, resumeQueuedMerges as l, migrateAllSessionsSync as m, buildRichPRBody as n, reconcileGitHubMergeStatus as o, reclassifyUnknownCostEventsSync as p, isBranchAlreadyRebased as r, shouldBlockApproveForDirtyStatus as s, workspacesRouteLayer as t, syncWalFromAllProjects as u, processPendingFeedbackDeliveries as v, rejectUnauthorizedDashboardRequest as w, dashboardCsrfToken as x, getCachedRunningAgents as y };
 
-//# sourceMappingURL=workspaces-Ca4zZs12.js.map
+//# sourceMappingURL=workspaces-DOeHyKmA.js.map

package/sync-sources/hooks/ask-user-question-hook

@@ -0,0 +1,87 @@
+#!/bin/bash
+# ~/.overdeck/bin/ask-user-question-hook  (PAN-1520)
+#
+# PreToolUse hook on AskUserQuestion — denies the tool call to prevent the
+# upstream Claude Code silent-corruption bug (anthropics/claude-code#10229,
+# #10400) where AskUserQuestion's choice menu does not render under
+# --dangerously-skip-permissions and the harness returns option #1's literal
+# label as the tool_result, fabricating an operator answer that never happened.
+#
+# Until the dashboard surfaces AskUserQuestion options interactively (the rest
+# of PAN-1520), the only safe failure mode is "block until the agent re-asks
+# in plain prose". This hook converts silent corruption -> visible block by
+# returning a deny verdict with the full question text + option labels as
+# additionalContext, so the agent restates the choice to the operator as
+# regular text and waits for a normal response.
+#
+# Never breaks Claude Code: on any error the hook exits 0 silently (which
+# lets the original AskUserQuestion call through — preserving the prior
+# behaviour rather than introducing a new hang).
+
+set +e
+
+INPUT=$(cat 2>/dev/null || echo '{}')
+
+if ! command -v jq >/dev/null 2>&1; then
+  # Without jq we cannot safely parse the question payload. Allow the call.
+  exit 0
+fi
+
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null)
+if [ "$TOOL_NAME" != "AskUserQuestion" ]; then
+  exit 0
+fi
+
+# Emit an awareness event to the dashboard via the standard hook lib so the
+# operator can see the question was asked, even though the tool call is denied.
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=pan-hook-lib.sh
+. "$SCRIPT_DIR/pan-hook-lib.sh" 2>/dev/null || true
+if declare -f pan_resolve_agent_id >/dev/null && pan_resolve_agent_id; then
+  TS=$(date -Iseconds)
+  EVENT_BODY=$(echo "$INPUT" | jq --arg ts "$TS" '{
+    kind: "ask_user_question_blocked",
+    timestamp: $ts,
+    questions: (.tool_input.questions // [])
+  }' 2>/dev/null)
+  if [ -n "$EVENT_BODY" ] && declare -f pan_emit_event >/dev/null; then
+    pan_emit_event "$AGENT_ID" "$EVENT_BODY" 2>/dev/null || true
+  fi
+fi
+
+REASON='Your question has been surfaced to the operator in the Overdeck dashboard, where they answer it directly. Restate the question and its options to the operator as a short plain-text message and wait for their reply (it arrives as a normal user message).'
+
+CONTEXT=$(echo "$INPUT" | jq -r '
+  def fmt_option:
+    "  - " + (.label // "(no label)")
+    + (if .description then ": " + .description else "" end);
+  def fmt_question:
+    "Question: " + (.question // "(no question text)")
+    + (if .header then "\nHeader: " + .header else "" end)
+    + "\nOptions:\n" + ((.options // []) | map(fmt_option) | join("\n"));
+  (.tool_input.questions // [])
+  | map(fmt_question)
+  | join("\n\n")
+' 2>/dev/null)
+
+if [ -z "$CONTEXT" ]; then
+  CONTEXT="(failed to parse questions payload — restate your question to the operator as plain text)"
+fi
+
+INSTRUCTION="Restate the following to the operator as a plain-text message, listing the options as a numbered list, and wait for their normal response. Do not call AskUserQuestion again."
+
+jq -n \
+  --arg reason "$REASON" \
+  --arg context "${INSTRUCTION}
+
+${CONTEXT}" \
+  '{
+    hookSpecificOutput: {
+      hookEventName: "PreToolUse",
+      permissionDecision: "deny",
+      permissionDecisionReason: $reason,
+      additionalContext: $context
+    }
+  }'
+
+exit 0