@overdeck/desktop 0.45.21 → 0.45.22

package/server/server.js

@@ -1,107 +1,110 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { $ as MODEL_CAPABILITIES, $n as resolveProjectFromIssueSync, $r as getLegacyHome, A as init_harness_policy, An as getIssuePrefix, At as init_record, B as init_providers, C as init_tier_table, D as validateTieredExecutionConfig, En as findProjectByPathSync, Er as TrackerError, Ft as readIssueRecordSync, Gr as SYNC_SOURCES, Hn as listProjects, I as getBuiltInDefaultHarness, J as DEFAULT_ROLES, Jn as registerProjectSync, Jr as getDocsBudgetStatePath, K as defaultBackgroundAiFeatures, L as getKimiAnthropicBaseUrl, Lr as LOGS_DIR, Nn as getProjectSync, O as canUseHarnessSync, On as findProjectByTeamSync, Or as init_errors, Ot as getIssueWorkspacePath, P as UnknownModelError, Pr as CLAUDE_DIR, Q as resolveModel, Qn as resolveProjectFromIssue, Rr as OVERDECK_HOME, S as TieredExecutionConfigError, Sn as ProjectRenameError, T as resolveTieredExecutionEnabled, Un as listProjectsSync, X as computeModelOrigin, Xr as getDocsIndexPath, Y as DEFAULT_WORKHORSES, Yn as renameProject, Yr as getDocsDisableStatePath, Zn as resolveInfraRepo, Zr as getDocsTelemetryPath, _ as getDefaultDocsConfig, ai as sessionFilePath, an as init_auto_commit, at as modelSupportsImagesSync, br as GitHubApiError, cr as extractPrefixSync, d as loadConfigNoMigration, dr as parseIssueIdSync, dt as PARENT_MODEL_REF, ei as getOverdeckHome, et as MODEL_DEPRECATIONS, f as loadConfigSync, ft as ROLE_EFFORTS, g as mergeConfigs, h as jsYaml, i as getConversationsConfig, in as flushAutoCommits, ir as setProjectSwarmPolicySync, it as init_model_capabilities, kr as AGENTS_DIR, lr as init_issue_id, m as init_js_yaml, mr as require_dist$1, n as clearConfigCache, ni as isDevMode, nt as getModelEffortLevelsSync, o as getGlobalConfigPath, ot as resolveModelIdSync, p as updateConversationsConfig, q as init_registry, qr as encodeClaudeProjectDir, r as getConversationSearchConfigSync, ri as packageRoot, rn as flushAllPendingAutoCommits, rr as setProjectAutoMergeDefaultSync, rt as hasModelCapabilitySync, s as init_load, t as init_config_yaml, ti as init_paths, u as isTldrEnabledSync, ut as COMPLIANCE_MODES, v as getDefaultTtsDaemonConfig, vr as FsError, w as resolveTieredExecutionBlock, wn as extractTeamPrefix, wr as ProcessSpawnError, y as mergeTtsDaemonConfigs, z as getProviderForModelSync, zn as init_projects } from "./config-yaml-Ciyp2mYe.js";
-import { a as shouldRefuseHostDashboardPort, i as readHostDashboardApiPort, n as getDashboardIdentity, r as isNonPrimaryCheckoutRoot } from "./deacon-nudge-log-C5VCKtyi.js";
-import { $ as runInBatches, A as handleConversationDelete, B as stopConversationRuntime, C as isPiControlChannelHarness, D as conversationNeedsRunningRepair, E as validateConversationControlAckOrigin, F as isInsideGitWorkTree, G as cleanupOrphanedConversationAttachments, H as waitForPiTuiReady, I as resolveAllowedHarness, J as extractConversationAttachmentPaths, K as cleanupUnreferencedConversationAttachments, L as shouldReportUnresolvedLiveSession, M as handleConversationResume, N as handleConversationStop, O as conversationSessionAliveFromState, P as handleConversationSwitchModel, Q as removeConversationAttachment, R as spawnConversationSession, S as handleConversationThinkingLevel, T as resolveConversationDeliveryMethod, U as waitForTmuxSession$1, V as tmuxSessionExists, W as cleanupConversationAttachments, X as hasConversationAttachment, Y as getConversationAttachmentsRoot, Z as isManagedConversationAttachmentPath, _ as handleConversationCodexApproval, _t as validateOrigin$1, a as agentsRouteLayer, at as panCliInvocation, b as handleConversationDeliveryMethod, bt as getDefaultCwd, c as hasDashboardInternalToken, ct as resolveAgentHarness, d as rejectUnsafeDashboardMutationRequest, dt as resolveJsonlPath, et as evaluateSpawnGuardrails, f as saveAgentStateAndEmitEvent, ft as resolvePiSessionPath, g as handleConversationAbort, gt as isTrustedOriginForHost, h as deliverConversationViaControlChannel, ht as getHeaderFromMap, j as handleConversationRestartAll, k as handleConversationCreate, l as rejectUnauthorizedDashboardRequest, lt as resolveClaudeSessionId, m as codexConversationPendingInput, mt as waitForSessionRespawn, nt as resolveAgentGitInfo, o as dashboardCsrfToken, p as saveAgentStateAndEmitEventProgram, pt as isRespawnPending, q as ensureConversationAttachmentDir, rt as resolveConversationGitInfo, s as dashboardSessionCookieHeader, st as readLauncherPinnedSessionId, t as specialistsRouteLayer, tt as invalidateAgentsCache, u as rejectUnauthorizedDashboardSessionMintRequest, ut as resolveCodexRolloutPath, v as handleConversationCompact, vt as validateOriginHeaders, w as pickDeliverAs, x as handleConversationPlanAction, xt as jsonResponse, y as handleConversationControlAck, yt as httpHandler, z as startConversationModelBackfill } from "./specialists-DAegTvRt.js";
+import { $r as getDocsIndexPath, A as canUseHarnessSync, Br as LOGS_DIR, Cr as GitHubApiError, D as resolveTieredExecutionEnabled, Dn as extractTeamPrefix, Dr as ProcessSpawnError, E as resolveTieredExecutionBlock, Gn as listProjects, H as init_providers, Hn as init_projects, I as UnknownModelError, In as getProjectSync, J as defaultBackgroundAiFeatures, Jr as SYNC_SOURCES, Kn as listProjectsSync, Lr as CLAUDE_DIR, M as init_harness_policy, Mr as AGENTS_DIR, Nn as getIssuePrefix, Nt as init_record, Q as computeModelOrigin, Qn as renameProject, Qr as getDocsDisableStatePath, R as getBuiltInDefaultHarness, Rt as readIssueRecordSync, T as init_tier_table, Tn as ProjectRenameError, V as getProviderForModelSync, Vr as OVERDECK_HOME, X as DEFAULT_ROLES, Xr as encodeClaudeProjectDir, Y as init_registry, Z as DEFAULT_WORKHORSES, Zn as registerProjectSync, Zr as getDocsBudgetStatePath, _ as getDefaultDocsConfig, _r as require_dist$1, ai as isDevMode, at as getModelEffortLevelsSync, ci as sessionFilePath, cn as init_auto_commit, ct as modelSupportsImagesSync, d as loadConfigNoMigration, dr as extractPrefixSync, ei as getDocsTelemetryPath, er as resolveInfraRepo, f as loadConfigSync, fr as init_issue_id, g as mergeConfigs, h as jsYaml, ht as ROLE_EFFORTS, i as getConversationsConfig, ii as init_paths, jn as findProjectByTeamSync, jr as init_errors, jt as getIssueWorkspacePath, k as validateTieredExecutionConfig, kn as findProjectByPathSync, kr as TrackerError, lt as resolveModelIdSync, m as init_js_yaml, mr as parseIssueIdSync, mt as PARENT_MODEL_REF, n as clearConfigCache, ni as getLegacyHome, nr as resolveProjectFromIssueSync, nt as MODEL_CAPABILITIES, o as getGlobalConfigPath, oi as packageRoot, on as flushAllPendingAutoCommits, or as setProjectAutoMergeDefaultSync, ot as hasModelCapabilitySync, p as updateConversationsConfig, pt as COMPLIANCE_MODES, r as getConversationSearchConfigSync, ri as getOverdeckHome, rt as MODEL_DEPRECATIONS, s as init_load, sn as flushAutoCommits, sr as setProjectSwarmPolicySync, st as init_model_capabilities, t as init_config_yaml, tr as resolveProjectFromIssue, tt as resolveModel, u as isTldrEnabledSync, v as getDefaultTtsDaemonConfig, w as TieredExecutionConfigError, xr as FsError, y as mergeTtsDaemonConfigs, z as getKimiAnthropicBaseUrl } from "./config-yaml-ig8Nwtiw.js";
+import { a as shouldRefuseHostDashboardPort, i as readHostDashboardApiPort, n as getDashboardIdentity, r as isNonPrimaryCheckoutRoot } from "./deacon-nudge-log-D6K9K-rE.js";
+import { $ as runInBatches, A as handleConversationDelete, B as stopConversationRuntime, C as isPiControlChannelHarness, D as conversationNeedsRunningRepair, E as validateConversationControlAckOrigin, F as isInsideGitWorkTree, G as cleanupOrphanedConversationAttachments, H as waitForPiTuiReady, I as resolveAllowedHarness, J as extractConversationAttachmentPaths, K as cleanupUnreferencedConversationAttachments, L as shouldReportUnresolvedLiveSession, M as handleConversationResume, N as handleConversationStop, O as conversationSessionAliveFromState, P as handleConversationSwitchModel, Q as removeConversationAttachment, R as spawnConversationSession, S as handleConversationThinkingLevel, T as resolveConversationDeliveryMethod, U as waitForTmuxSession$1, V as tmuxSessionExists, W as cleanupConversationAttachments, X as hasConversationAttachment, Y as getConversationAttachmentsRoot, Z as isManagedConversationAttachmentPath, _ as handleConversationCodexApproval, _t as validateOrigin$1, a as agentsRouteLayer, at as panCliInvocation, b as handleConversationDeliveryMethod, bt as getDefaultCwd, c as hasDashboardInternalToken, ct as resolveAgentHarness, d as rejectUnsafeDashboardMutationRequest, dt as resolveJsonlPath, et as evaluateSpawnGuardrails, f as saveAgentStateAndEmitEvent, ft as resolvePiSessionPath, g as handleConversationAbort, gt as isTrustedOriginForHost, h as deliverConversationViaControlChannel, ht as getHeaderFromMap, j as handleConversationRestartAll, k as handleConversationCreate, l as rejectUnauthorizedDashboardRequest, lt as resolveClaudeSessionId, m as codexConversationPendingInput, mt as waitForSessionRespawn, nt as resolveAgentGitInfo, o as dashboardCsrfToken, p as saveAgentStateAndEmitEventProgram, pt as isRespawnPending, q as ensureConversationAttachmentDir, rt as resolveConversationGitInfo, s as dashboardSessionCookieHeader, st as readLauncherPinnedSessionId, t as specialistsRouteLayer, tt as invalidateAgentsCache, u as rejectUnauthorizedDashboardSessionMintRequest, ut as resolveCodexRolloutPath, v as handleConversationCompact, vt as validateOriginHeaders, w as pickDeliverAs, x as handleConversationPlanAction, xt as jsonResponse, y as handleConversationControlAck, yt as httpHandler, z as startConversationModelBackfill } from "./specialists-Bg9v4z3F.js";
 import { a as init_activity_logger, i as emitDashboardLifecycleSync, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-DDlOIAML.js";
-import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-DN2wSxle.js";
+import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-D4iNWMA5.js";
 import { n as openDatabase, t as init_driver } from "./driver-CKVGi51s.js";
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-RviRDSNs.js";
-import { C as getWindowDimensions, D as killSession, I as resizeWindow, K as init_ui_theme, M as listSessions, R as sendKeys, T as isHarnessProcessAlive, V as sessionExists, X as buildChildEnvWithoutTmuxSync, Y as buildChildEnvSync, Z as init_child_env, d as ensureManagedTmuxContextOnce, i as capturePane, j as listSessionNames, k as listPaneValues, l as deliveryVerifyLine, n as buildTmuxArgs, o as capturePaneText, q as setUiTheme, s as createSession, w as init_tmux, z as sendKeysAsync } from "./tmux-y1blSxks.js";
-import { a as init_event_store, i as initEventStore, n as getEventStore } from "./event-store-BVnON3vf.js";
-import { _ as FlywheelRunId, a as getHarnessBehavior, b as DomainEvent, c as FlywheelStats, g as WS_METHODS, h as PanRpcGroup, m as PanRpcError, o as ContextLayerSaveRequest, s as ContextPreviewRequest, t as init_src, v as FlywheelStatus, x as MemoryObservation, y as EDITORS } from "./src-Dpq1yFIl.js";
-import { a as fixStuckReadyForMerge, c as init_review_status, i as fixStuckCommentedReviews, l as loadReadyForMergeFlags, n as clearReviewStatus, o as getReviewStatus, r as clearStuckMergeStatuses, s as getReviewStatusSync, u as loadReviewStatuses, v as setReviewStatus, y as setReviewStatusSync } from "./review-status-CCgPVK1h.js";
-import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-B7HZWnTA.js";
-import { c as listAllAgentsSync, n as AgentsResolverLive, o as init_agents } from "./agents-DbrHWunF.js";
-import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-FP8v3lTz.js";
-import { i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, r as init_briefing_freshness, t as appendFreshBriefingUpdate } from "./briefing-freshness-OouGbJ7d.js";
-import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-BWymOgXE.js";
-import { a as diffAgainstMain, c as diffCheckpoints, d as diffPatchSinceCommit, f as findCommitAtTime, h as listCheckpoints, l as diffFilesAgainstHead, m as init_checkpoint_manager, o as diffAgainstMainFiles, s as diffCheckpointFiles, t as captureCheckpoint, u as diffPatchFilesAgainstHead } from "./checkpoint-manager-D64fCC4p.js";
-import { An as getAgentStateFilePath, Ct as probeTranscriptSince, Dn as getAgentDir, Gn as saveAgentStateSync, Gt as getProviderAuthMode, It as resolveImplicitStaffing, Jt as injectPiConversationMemory, L as messageAgent, Pt as init_staffing, Qn as readAgentHarnessModelRecordSync, R as init_operator_interventions, St as init_transcript_landing, Zn as init_agent_record_sync, _r as init_codex_auth, a as listRunningAgentsSync, ar as normalizeAgentId, cr as waitForReadySignal, dn as getOpenAIAuthStatus, fn as init_openai_auth, gr as checkCodexAuthStatus, gt as deliverAgentMessage, i as listRunningAgents, it as emergencyBrake, jn as getAgentStateSync, kn as getAgentState, lr as getAgentRuntimeState, m as init_tier_supervisor, n as init_queries, nn as init_claude_auth, on as getProviderEnvForModel, ot as init_concurrency, p as deliverCommitForReview, r as listAgentStates, s as init_agents$1, tn as getClaudeAuthStatus, ur as getAgentRuntimeStateSync, v as supervisorAgentId, xt as captureTranscriptUserRecordSnapshot, z as operatorInterventionEvent } from "./queries-B5hl7lMQ.js";
-import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, p as queryCostEventsSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-DzHP6zaR.js";
-import { c as getAgentsNeedingAttention, d as CostResolverLive, f as CostWriter, l as CostDoorLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-CqAY8Kmk.js";
-import { t as init_behavior } from "./behavior-Dg-D8eBG.js";
-import { n as AgentStateServiceLive } from "./agent-state-service-6MFQqnFy.js";
-import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-DSFZBdXP.js";
+import { n as updateIssueRecord, t as init_record_update } from "./record-update-Crz74r-6.js";
+import { C as getWindowDimensions, D as killSession, I as resizeWindow, K as init_ui_theme, M as listSessions, R as sendKeys, T as isHarnessProcessAlive, V as sessionExists, X as buildChildEnvWithoutTmuxSync, Y as buildChildEnvSync, Z as init_child_env, d as ensureManagedTmuxContextOnce, i as capturePane, j as listSessionNames, k as listPaneValues, l as deliveryVerifyLine, n as buildTmuxArgs, o as capturePaneText, q as setUiTheme, s as createSession, w as init_tmux, z as sendKeysAsync } from "./tmux-L5LgvGLp.js";
+import { a as init_event_store, i as initEventStore, n as getEventStore } from "./event-store-TnWdydfB.js";
+import { D as AgentSnapshot, E as AgentRuntimeSnapshot, O as ReviewStatusSnapshot, S as SystemHealthSnapshot, _ as WS_METHODS, b as EDITORS, c as ContextPreviewRequest, g as PanRpcGroup, h as PanRpcError, l as FlywheelStats, n as compareIssueIds, o as getHarnessBehavior, s as ContextLayerSaveRequest, t as init_src, v as FlywheelRunId, w as MemoryObservation, x as DomainEvent, y as FlywheelStatus } from "./src-k039WVYY.js";
+import { a as fixStuckReadyForMerge, c as init_review_status, i as fixStuckCommentedReviews, l as loadReadyForMergeFlags, n as clearReviewStatus, o as getReviewStatus, r as clearStuckMergeStatuses, s as getReviewStatusSync, u as loadReviewStatuses, v as setReviewStatus, y as setReviewStatusSync } from "./review-status-DFRjDFef.js";
+import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-CeyW_HoD.js";
+import { c as listAllAgentsSync, n as AgentsResolverLive, o as init_agents } from "./agents-DXdHmRTC.js";
+import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-DooHpt9p.js";
+import { i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, r as init_briefing_freshness, t as appendFreshBriefingUpdate } from "./briefing-freshness-C12WgkaB.js";
+import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-B972ph_A.js";
+import { a as diffAgainstMain, c as diffCheckpoints, d as diffPatchSinceCommit, f as findCommitAtTime, h as listCheckpoints, l as diffFilesAgainstHead, m as init_checkpoint_manager, o as diffAgainstMainFiles, s as diffCheckpointFiles, t as captureCheckpoint, u as diffPatchFilesAgainstHead } from "./checkpoint-manager-CTPjAmtH.js";
+import { Ct as probeTranscriptSince, Dn as getAgentDir, Gn as saveAgentStateSync, Gt as getProviderAuthMode, It as resolveImplicitStaffing, Jt as injectPiConversationMemory, L as messageAgent, Pt as init_staffing, Qn as readAgentHarnessModelRecordSync, R as init_operator_interventions, St as init_transcript_landing, Zn as init_agent_record_sync, _r as init_codex_auth, a as listRunningAgentsSync, ar as normalizeAgentId, cr as waitForReadySignal, dn as getOpenAIAuthStatus, fn as init_openai_auth, gr as checkCodexAuthStatus, gt as deliverAgentMessage, i as listRunningAgents, it as emergencyBrake, jn as getAgentStateSync, kn as getAgentState, lr as getAgentRuntimeState, m as init_tier_supervisor, n as init_queries, nn as init_claude_auth, on as getProviderEnvForModel, ot as init_concurrency, p as deliverCommitForReview, r as listAgentStates, s as init_agents$1, tn as getClaudeAuthStatus, ur as getAgentRuntimeStateSync, v as supervisorAgentId, xt as captureTranscriptUserRecordSnapshot, z as operatorInterventionEvent } from "./queries-ZABd5aXP.js";
+import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, p as queryCostEventsSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-D_cre6WM.js";
+import { c as getAgentsNeedingAttention, d as CostResolverLive, f as CostWriter, l as CostDoorLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-Bagb90KZ.js";
+import { u as init_agent_runtime_mirror } from "./session-history-XdS0JKp3.js";
+import { t as init_behavior } from "./behavior-CGj16clS.js";
+import { n as AgentStateServiceLive } from "./agent-state-service-DistflNn.js";
+import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-DdT-nUAM.js";
 import { d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-2BTMxkZq.js";
-import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-BLyN-NiP.js";
-import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-Dslipypz.js";
-import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-SVbjGvqj.js";
-import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DiceZN3a.js";
-import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-CPESc4Or.js";
-import { i as ensureInternalTokenSync, s as init_internal_token } from "./internal-token-DhfFiwW7.js";
-import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-BM2HLF7B.js";
-import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-jnLgd04F.js";
-import { a as PAN_DIRNAME, d as WORKSPACE_RUNTIME_DIRNAME, f as asPanSpecDocument, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-DqeBMmJN.js";
-import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-De1FYva5.js";
-import { C as init_specs, D as writeSpecDocument, O as writeSpecForIssue, a as findWorkspaceDraftPlan, m as readWorkspacePlanSync, o as init_io, p as readWorkspacePlan, r as findPlan, s as isPlanningComplete, u as readPlan, v as init_types$1, x as findSpecByIssue, y as subItemsOf } from "./io-BiM-7Zsx.js";
-import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-Dvsr4ZkW.js";
-import { $ as updateConversationForkFallbackReason, A as isAgentConversationName, B as removeFavorite, C as getConversationByTmuxSession, D as importLegacyConversation, F as markConversationEnded, H as setClearedToConvId, I as markConversationRunning, J as setForkRequest, M as listConversations, N as listFavoritedIds, O as incrementForkRetryCount, P as markConversationActive, S as getConversationByName, T as getStuckForks, U as setConversationClaudeSessionId, X as unarchiveConversation, Y as setImportedConversationLinks, Z as updateConversationCost, _ as canRefineTitle, b as getConversationByClaudeSessionId, et as updateConversationTitle, gt as getDiscoveredSessionBySessionId, h as archiveConversation, j as listArchivedConversationsWithEnrichment, k as init_conversations, q as setFavorite, tt as updateForkStatus, v as canReplaceTitle, w as getConversationLedgerCosts, x as getConversationById, y as createConversation, yt as init_discovered_sessions, z as recordConversationHandoff } from "./conversations-BUgGvqVL.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features--fOza5g5.js";
-import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-DP2OYLXL.js";
-import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-d3pwXGVE.js";
-import { i as normalizeModelOverrideSync, n as init_launcher_generator, r as init_model_validation, t as generateLauncherScriptSync } from "./launcher-generator-5DJRiovn.js";
-import { a as init_claude_permissions, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-C2OrLYKL.js";
-import { a as globalContextFile$1, f as resolveProjectContextFile, h as workspaceContextFile, n as codexGlobalContextFile, o as init_layers, p as resolveWorkspaceContextFile, r as ensureProjectLayer } from "./layers-cZx7ibtV.js";
-import { l as init_codex, s as findRolloutPath } from "./codex-D_UBEOwL.js";
-import { f as init_config, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-CrduXs4a.js";
-import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-D_79A6gp.js";
-import { l as init_dag, r as compileGlob } from "./dag-DIji6O2b.js";
-import { a as loadCloisterConfigSync, i as loadCloisterConfig, o as saveCloisterConfigSync, r as init_config$1, s as shouldAutoStart } from "./config-G1TOMJZA.js";
-import { c as isStateMigrated, i as ensureStateWorktree, o as init_state_home, r as clearStateMigrationCache, s as inspectStateMigration } from "./state-home-DixkE-up.js";
-import { i as checkPrdGateSync, t as init_pan_dir } from "./pan-dir-Rw17YjT1.js";
-import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-DMurK4oM.js";
-import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-C9P2iPap.js";
-import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-BZaDAQ8S.js";
-import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-DQybSPUK.js";
-import { c as countPendingAskUserQuestionsForAgent, h as detectAwaitingInputFromPaneSync, l as getAgentJsonlMtime, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment } from "./stuck-remediation-BWkK_O7A.js";
-import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-C4NeC4FE.js";
-import { c as tailEventsSync, n as deduplicateEventsSync, o as readEventsSync } from "./events-CmERlnwn.js";
-import { n as recordBackgroundAiCost, t as init_cost } from "./cost-jJ2cgDcG.js";
-import { a as getByIssueId, i as parseFlywheelStatsWindow, n as derivePipelineRunStatsInputs, o as markFixed, r as computeFlywheelStats, s as upsert } from "./substrate-bug-weights-service-DXd0ID83.js";
-import { c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard } from "./uat-train-BpLnp7Cx.js";
-import { C as writeLatestFlywheelStatus, b as resolveLiveFlywheelRunId, g as listFlywheelRuns, h as isFlywheelRunId, p as getFlywheelRunDetail, u as buildClassifyLookups, v as readCurrentLatestFlywheelStatus, x as subscribeLatestFlywheelStatus } from "./flywheel-1Wd8WDlh.js";
-import { C as getWorkspacePathForIssue, S as resolveIssueHeadlineCost, _ as getCostsForIssueSync, b as processPendingFeedbackDeliveries, d as resumeQueuedMerges, f as syncWalFromAllProjects, g as migrateAllSessionsSync, h as reclassifyUnknownCostEventsSync, l as internalEventsRouteLayer, m as reconcilePiTranscripts, p as reconcile$1, t as workspacesRouteLayer, u as eventsRouteLayer, v as rebuildCacheSync, x as getCachedRunningAgents, y as syncCacheSync } from "./workspaces-Dmlh1YXm.js";
-import { At as getSystemHealthSnapshot, Dt as getContainerHistory, Et as formatUptime, F as setAgentStatusChangedNotifier, G as isBootReconciliationCandidate, I as setAgentStoppedNotifier, K as listBootReconciliationCandidates, L as setMergeReadyNotifier, Mt as startSmeeProcessSync, O as loadConfig, Ot as getCurrentDockerStats, Tt as getResourceStacks, jt as isSmeeConfiguredSync, k as loadState, n as assessDeaconPatrolFreshness, q as startBootReconciliation, t as applyBootReconciliationDecision, x as getDeaconLogs, xt as paneShowsClaudeBootBlockingScreen } from "./deacon-1s7bM5zn.js";
-import { l as detectPlatform, u as init_platform } from "./workspace-manager-DsN52IMG.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-Wlq5-qgS.js";
-import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-tVGiI5ee.js";
-import { t as init_specialists, z as getReviewerSessionName } from "./specialists-CYRwELzc.js";
-import { c as findPrdAtStatusSync, l as init_prd_locations } from "./archive-planning-BOnwJq8M.js";
-import { a as getShadowState, s as init_shadow_state } from "./shadow-state-a_ztFBJe.js";
-import { A as withConcurrencyLimit, D as createPromiseConcurrencyLimiter, E as verifyAppCanMerge, O as createSettledTtlPromiseCache, d as getPullRequestState, f as init_github_app, k as init_concurrency$1, l as getMergeBackendStatus, p as isGitHubAppConfigured } from "./github-app-B3yfECo8.js";
-import { n as init_issue_closed, t as clearIssueClosedCache } from "./issue-closed-Dfw3QDyZ.js";
-import { b as resolveSwarmPolicy } from "./deacon-swarm-DmA3rJ7k.js";
-import { a as init_boot_gates, i as formatBootGateState, o as resolveBootGates } from "./no-resume-mode-BnInAFKs.js";
-import { c as computeCohort, d as computeStats, f as computeWaves, g as selectNeedsPlanning, h as normalizeGate, l as computeEpicGroups, p as init_pickup, s as classifyIssue, u as computeLanes } from "./pickup-xi3KTLaJ.js";
-import { a as applyIssueObjectionLabel, c as applyIssueReleasedLabel, d as removeIssueBlocksMainLabel, f as removeIssueObjectionLabel, g as removeIssueVetoedLabel, h as removeIssueReleasedLabel, i as applyIssueBlocksMainLabel, l as applyIssueVetoedLabel, m as removeIssueReadyLabel, o as applyIssueParkedLabel, p as removeIssueParkedLabel, s as applyIssueReadyLabel, u as init_label_ops } from "./label-reconciler-CNf3Ylm3.js";
-import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-Ce-6grIY.js";
-import { a as init_pipeline_membership_gather, c as parseIssueIdFromTextSync, n as resolvePipelineMembership, o as listOpenPullRequestsSnapshot, r as gatherProjectLensSignals, s as init_resource_utils, t as init_pipeline_membership } from "./pipeline-membership-BtKMNY7v.js";
-import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-DIL5_U4c.js";
-import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-AiUSsBnH.js";
-import { d as killRemoteAgent, m as loadRemoteAgentState, o as getRemoteAgentOutput, r as checkRemoteSpendCap, s as init_remote_agents, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-CZ2rc8I0.js";
-import { r as spawnInspectAgent } from "./inspect-agent-DKByUS_F.js";
-import { n as init_github_pr_lookup, r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-DBP0YHMr.js";
-import { a as fetchIssuePullRequestDiff, c as getCachedIssuePrTabResponse, d as setCachedIssuePrTabResponse, i as fetchIssuePullRequestDetails, l as getIssuePrTabCacheGeneration, n as fetchIssueCheckRuns, o as init_pull_requests, r as fetchIssuePullRequest, s as bumpIssuePrTabCacheGeneration, u as init_pr_tab_cache } from "./pull-requests-CjjPj7v6.js";
-import { t as DOD_ROWS } from "./dod-BLphkhjs.js";
-import { t as enrichReviewStatus } from "./review-status-enrichment-DtDRGpst.js";
-import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-6ponMie2.js";
-import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-CLj_AK9f.js";
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-DjxP5g6Y.js";
-import { T as listGitOperationsSync, w as init_git_activity } from "./merge-agent-DnBsms_V.js";
-import { t as readVerificationArtifact } from "./verification-artifact-Dr_0g9nb.js";
-import { t as getAgentCommandSync } from "./settings-D9grjmaP.js";
-import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-CqSqSHkU.js";
-import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-cnoeuDWn.js";
-import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-DX-fMFpC.js";
-import { a as init_query_expansion, i as clearQueryExpansionCache, n as init_injection, o as buildMatchQuery, r as injectPromptTimeMemory, s as init_search } from "./injection-DtlT8Akv.js";
-import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-f3DpgjXh.js";
-import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-DiuZbIUB.js";
-import { a as init_render, d as validateTemplate, i as hasManagedRegion, l as init_harness, o as userContentOutsideRegion, t as init_context_layers, u as renderForHarness } from "./context-layers-Cg9ZgVfx.js";
-import { r as parseArtifactRef } from "./forge-DBbDpiYc.js";
-import { t as getMergeBlockersPayload } from "./merge-blockers-DhRgh76x.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-Bpz0yGmG.js";
-import "./supervisor-Ch8CDuoF.js";
-import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-Vh-J15ge.js";
+import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-DsFkIxee.js";
+import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-XjTJbBm7.js";
+import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-COYz1vYR.js";
+import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-CawsPSS2.js";
+import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-D_RVYBuL.js";
+import { i as ensureInternalTokenSync, o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-CXsfxslp.js";
+import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-B6FVsYF9.js";
+import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-DpAMD_WO.js";
+import { n as init_review_status_source, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CxuEjLGg.js";
+import { a as PAN_DIRNAME, d as WORKSPACE_RUNTIME_DIRNAME, f as asPanSpecDocument, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-hraoaQIp.js";
+import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-Do8_q32h.js";
+import { C as init_specs, D as writeSpecDocument, O as writeSpecForIssue, a as findWorkspaceDraftPlan, m as readWorkspacePlanSync, o as init_io, p as readWorkspacePlan, r as findPlan, s as isPlanningComplete, u as readPlan, v as init_types$1, x as findSpecByIssue, y as subItemsOf } from "./io-DQR9PMgS.js";
+import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-Brf_5MuG.js";
+import { $ as updateConversationForkFallbackReason, A as isAgentConversationName, B as removeFavorite, C as getConversationByTmuxSession, D as importLegacyConversation, F as markConversationEnded, H as setClearedToConvId, I as markConversationRunning, J as setForkRequest, M as listConversations, N as listFavoritedIds, O as incrementForkRetryCount, P as markConversationActive, S as getConversationByName, T as getStuckForks, U as setConversationClaudeSessionId, X as unarchiveConversation, Y as setImportedConversationLinks, Z as updateConversationCost, _ as canRefineTitle, b as getConversationByClaudeSessionId, et as updateConversationTitle, gt as getDiscoveredSessionBySessionId, h as archiveConversation, j as listArchivedConversationsWithEnrichment, k as init_conversations, q as setFavorite, tt as updateForkStatus, v as canReplaceTitle, w as getConversationLedgerCosts, x as getConversationById, y as createConversation, yt as init_discovered_sessions, z as recordConversationHandoff } from "./conversations-bYpM9-kZ.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-Bc-Bmiye.js";
+import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-BNbocWOg.js";
+import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-BDDPULlp.js";
+import { i as normalizeModelOverrideSync, n as init_launcher_generator, r as init_model_validation, t as generateLauncherScriptSync } from "./launcher-generator-COgR2By1.js";
+import { a as init_claude_permissions, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-nSFKH78M.js";
+import { a as globalContextFile$1, f as resolveProjectContextFile, h as workspaceContextFile, n as codexGlobalContextFile, o as init_layers, p as resolveWorkspaceContextFile, r as ensureProjectLayer } from "./layers-Cp1To4L8.js";
+import { l as init_codex, s as findRolloutPath } from "./codex-CbmztVcc.js";
+import { n as init_harness_binary, r as prepareHarnessLaunch } from "./harness-binary-B2CTcD84.js";
+import { f as init_config, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-q4Gvd8dq.js";
+import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-D_odMIaC.js";
+import { l as init_dag, r as compileGlob } from "./dag-CJpgf9A3.js";
+import { a as loadCloisterConfigSync, o as saveCloisterConfigSync, r as init_config$1, s as shouldAutoStart } from "./config-DeTsoZdR.js";
+import { c as isStateMigrated, i as ensureStateWorktree, o as init_state_home, r as clearStateMigrationCache, s as inspectStateMigration } from "./state-home-CONQvZR0.js";
+import { i as checkPrdGateSync, t as init_pan_dir } from "./pan-dir-DOcf6ug3.js";
+import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-taIb0PoH.js";
+import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-DdmJVX7y.js";
+import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-DI8sGlmF.js";
+import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-C3avRVEr.js";
+import { c as countPendingAskUserQuestionsForAgent, h as detectAwaitingInputFromPaneSync, l as getAgentJsonlMtime, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment } from "./stuck-remediation-CKnIryGT.js";
+import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-Br0Z5S6R.js";
+import { c as tailEventsSync, n as deduplicateEventsSync, o as readEventsSync } from "./events-DSUdR-04.js";
+import { n as recordBackgroundAiCost, t as init_cost } from "./cost-wH46-WsJ.js";
+import { a as getByIssueId, i as parseFlywheelStatsWindow, n as derivePipelineRunStatsInputs, o as markFixed, r as computeFlywheelStats, s as upsert } from "./substrate-bug-weights-service-CpIZILj9.js";
+import { c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard } from "./uat-train-j0cPeMSj.js";
+import { C as writeLatestFlywheelStatus, b as resolveLiveFlywheelRunId, g as listFlywheelRuns, h as isFlywheelRunId, p as getFlywheelRunDetail, u as buildClassifyLookups, v as readCurrentLatestFlywheelStatus, x as subscribeLatestFlywheelStatus } from "./flywheel-COR0mbRI.js";
+import { C as getWorkspacePathForIssue, S as resolveIssueHeadlineCost, _ as getCostsForIssueSync, b as processPendingFeedbackDeliveries, d as resumeQueuedMerges, f as syncWalFromAllProjects, g as migrateAllSessionsSync, h as reclassifyUnknownCostEventsSync, l as internalEventsRouteLayer, m as reconcilePiTranscripts, p as reconcile$1, t as workspacesRouteLayer, u as eventsRouteLayer, v as rebuildCacheSync, x as getCachedRunningAgents, y as syncCacheSync } from "./workspaces-CFPcL0vl.js";
+import { At as getAcceptedSystemHealthSnapshot, Dt as formatUptime, Et as getResourceStacks, F as setAgentStatusChangedNotifier, Ft as isSmeeConfiguredSync, I as setAgentStoppedNotifier, It as startSmeeProcessSync, J as startBootReconciliation, K as isBootReconciliationCandidate, L as setMergeReadyNotifier, Lt as classifyAgentHealth, Nt as getSystemHealthEvidenceSnapshot, O as loadConfig, Ot as getContainerHistory, St as paneShowsClaudeBootBlockingScreen, jt as getDeployStaleness, k as loadState, kt as getCurrentDockerStats, n as assessDeaconPatrolFreshness, q as listBootReconciliationCandidates, t as applyBootReconciliationDecision, x as getDeaconLogs } from "./deacon-CkT_kznS.js";
+import { l as detectPlatform, u as init_platform } from "./workspace-manager-ClkCIWTe.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-BXP6g75N.js";
+import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-BoWm66Kh.js";
+import { t as init_specialists, z as getReviewerSessionName } from "./specialists-CwZHb5cb.js";
+import { c as findPrdAtStatusSync, l as init_prd_locations } from "./archive-planning-BvDuWNMo.js";
+import { a as getShadowState, s as init_shadow_state } from "./shadow-state-C_NkP-sa.js";
+import { A as withConcurrencyLimit, D as createPromiseConcurrencyLimiter, E as verifyAppCanMerge, O as createSettledTtlPromiseCache, d as getPullRequestState, f as init_github_app, k as init_concurrency$1, l as getMergeBackendStatus, p as isGitHubAppConfigured } from "./github-app-CDPtGF7J.js";
+import { n as init_issue_closed, t as clearIssueClosedCache } from "./issue-closed-DtmJM0D0.js";
+import { b as resolveSwarmPolicy } from "./deacon-swarm-BryRr6AO.js";
+import { a as init_boot_gates, i as formatBootGateState, o as resolveBootGates } from "./no-resume-mode-BWOSZjWd.js";
+import { _ as selectNeedsPlanning, c as classifyIssue, d as computeLanes, f as computeStats, g as normalizeGate, l as computeCohort, m as init_pickup, p as computeWaves, u as computeEpicGroups } from "./pickup-CaskQ7j6.js";
+import { a as applyIssueObjectionLabel, c as applyIssueReleasedLabel, d as removeIssueBlocksMainLabel, f as removeIssueObjectionLabel, g as removeIssueVetoedLabel, h as removeIssueReleasedLabel, i as applyIssueBlocksMainLabel, l as applyIssueVetoedLabel, m as removeIssueReadyLabel, o as applyIssueParkedLabel, p as removeIssueParkedLabel, s as applyIssueReadyLabel, u as init_label_ops } from "./label-reconciler-Df1ZduPH.js";
+import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-fxU0DlwW.js";
+import { c as init_resource_utils, i as gatherProjectLensSignals, l as parseIssueIdFromTextSync, n as init_pipeline_membership, o as init_pipeline_membership_gather, r as resolvePipelineMembership, s as listOpenPullRequestsSnapshot } from "./pipeline-membership-1LGRjo-k.js";
+import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-tiSRIWJP.js";
+import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-D5OXo8pT.js";
+import { d as killRemoteAgent, m as loadRemoteAgentState, o as getRemoteAgentOutput, r as checkRemoteSpendCap, s as init_remote_agents, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-Ct_WOyke.js";
+import { r as spawnInspectAgent } from "./inspect-agent-BXCgNeZ4.js";
+import { n as init_github_pr_lookup, r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-CFGeVhqv.js";
+import { a as fetchIssuePullRequestDiff, c as getCachedIssuePrTabResponse, d as setCachedIssuePrTabResponse, i as fetchIssuePullRequestDetails, l as getIssuePrTabCacheGeneration, n as fetchIssueCheckRuns, o as init_pull_requests, r as fetchIssuePullRequest, s as bumpIssuePrTabCacheGeneration, u as init_pr_tab_cache } from "./pull-requests-8z2N1UOV.js";
+import { t as DOD_ROWS } from "./dod-DbJLYcHv.js";
+import { t as enrichReviewStatus } from "./review-status-enrichment-crNAtIpL.js";
+import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-DmAcuCkV.js";
+import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-SyuF09e4.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-BQFmmFp0.js";
+import { T as listGitOperationsSync, w as init_git_activity } from "./merge-agent-DDiIjzk-.js";
+import { t as readVerificationArtifact } from "./verification-artifact-BuTA1QbL.js";
+import { t as getAgentCommandSync } from "./settings-uLc6DEYI.js";
+import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-CThvgK2r.js";
+import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-b-c5bOce.js";
+import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-BI_UIke0.js";
+import { a as init_query_expansion, i as clearQueryExpansionCache, n as init_injection, o as buildMatchQuery, r as injectPromptTimeMemory, s as init_search } from "./injection-D7T75Pye.js";
+import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-bX6ax6X7.js";
+import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-B6YSRLda.js";
+import { a as init_render, d as validateTemplate, i as hasManagedRegion, l as init_harness, o as userContentOutsideRegion, t as init_context_layers, u as renderForHarness } from "./context-layers-15gDOk20.js";
+import { r as parseArtifactRef } from "./forge-B1S_KZv4.js";
+import { t as getMergeBlockersPayload } from "./merge-blockers-BYjeXrVN.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-B5YC5XVP.js";
+import "./supervisor-Ctt4eRYz.js";
+import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-BJum14fs.js";
 import { createRequire } from "node:module";
 import * as sp from "node:path";
 import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
@@ -109,7 +112,7 @@ import { Cause, Context, Data, Duration, Effect, Exit, Fiber, FileSystem, Layer,
 import { createReadStream, createWriteStream, existsSync, fstatSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "fs";
 import { basename as basename$1, dirname as dirname$1, join as join$1, resolve as resolve$1 } from "path";
 import { homedir } from "os";
-import { freemem as freemem$1, homedir as homedir$1, loadavg as loadavg$1, totalmem as totalmem$1, type } from "node:os";
+import { homedir as homedir$1, type } from "node:os";
 import { constants, createReadStream as createReadStream$1, existsSync as existsSync$1, mkdirSync as mkdirSync$1, promises as promises$1, readFileSync as readFileSync$1, readdirSync as readdirSync$1, readlinkSync, renameSync as renameSync$1, rmSync as rmSync$1, stat, statSync as statSync$1, symlinkSync as symlinkSync$1, unwatchFile, watch, watchFile } from "node:fs";
 import { FetchHttpClient, HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 import { EventEmitter } from "node:events";
@@ -688,7 +691,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const plan = readWorkspacePlanSync(workspacePath);
 			if (!plan || plan.plan.items.length === 0) throw new PlanEmpty({ id: issueId });
-			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-Czz6R57Z.js");
+			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-DyHKlq1I.js");
 			const normalizedId = normalizeAgentId(issueId);
 			if ((await Effect.runPromise(getAgentState(normalizedId)))?.status === "running") throw new AgentAlreadyRunning({ id: issueId });
 			return {
@@ -719,7 +722,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			const { workspacePath, projectPath, issue } = opts;
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const sessionName = opts.sessionName ?? `planning-${issueId.toLowerCase()}`;
-			const { spawnPlanningSession } = await import("./spawn-planning-session-LFtK2QCE.js");
+			const { spawnPlanningSession } = await import("./spawn-planning-session-8D6mE033.js");
 			const result = await spawnPlanningSession({
 				issue: {
 					id: issue.id,
@@ -752,14 +755,14 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	kill: (agentId) => Effect.tryPromise({
 		try: async () => {
-			const { stopAgent } = await import("./agents-Czz6R57Z.js");
+			const { stopAgent } = await import("./agents-DyHKlq1I.js");
 			await Effect.runPromise(stopAgent(agentId));
 		},
 		catch: () => void 0
 	}).pipe(Effect.ignore),
 	message: (agentId, msg) => Effect.tryPromise({
 		try: async () => {
-			const { messageAgent } = await import("./agents-Czz6R57Z.js");
+			const { messageAgent } = await import("./agents-DyHKlq1I.js");
 			await messageAgent(agentId, msg);
 		},
 		catch: (err) => new AgentStartError({
@@ -770,8 +773,8 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	deepWipe: (issueId, opts) => Effect.tryPromise({
 		try: async () => {
-			const { deepWipe } = await import("./workflows-C5c-RPsY.js");
-			const { resolveProjectFromIssueSync } = await import("./projects-IRHJIPYC.js");
+			const { deepWipe } = await import("./workflows-C4mR0Reb.js");
+			const { resolveProjectFromIssueSync } = await import("./projects-BKkwpH6q.js");
 			const project = resolveProjectFromIssueSync(issueId);
 			const projectPath = project?.projectPath ?? process.cwd();
 			await Effect.runPromise(deepWipe({
@@ -830,8 +833,8 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath, branch } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (existsSync$1(workspacePath)) return workspacePath;
-				const { createWorkspace } = await import("./workspace-manager-CcujONCR.js");
-				const { loadProjectsConfigSync } = await import("./projects-IRHJIPYC.js");
+				const { createWorkspace } = await import("./workspace-manager-B1WOfKvB.js");
+				const { loadProjectsConfigSync } = await import("./projects-BKkwpH6q.js");
 				const { projects } = loadProjectsConfigSync();
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
@@ -866,7 +869,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
-				const { removeWorkspace } = await import("./workspace-manager-CcujONCR.js");
+				const { removeWorkspace } = await import("./workspace-manager-B1WOfKvB.js");
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
 					id: issueId,
@@ -897,7 +900,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 			try: async () => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
-				const { stopWorkspaceDocker } = await import("./workspace-manager-CcujONCR.js");
+				const { stopWorkspaceDocker } = await import("./workspace-manager-B1WOfKvB.js");
 				await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 			},
 			catch: () => void 0
@@ -966,7 +969,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 					join(workspacePath, ".devcontainer", "docker-compose.devcontainer.yml")
 				];
 				if (!composePaths.find((p) => existsSync$1(p))) {
-					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-BA3bICoY.js");
+					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-Cs6W9Yzj.js");
 					const ensure = ensureDevcontainerSync({
 						workspacePath,
 						issueId
@@ -5451,6 +5454,7 @@ function setupTerminalWebSocket(server) {
 //#endregion
 //#region ../../../node_modules/.bun/@ai-sdk+provider@3.0.10/node_modules/@ai-sdk/provider/dist/index.mjs
 init_briefing_freshness();
+init_agent_runtime_mirror();
 init_behavior();
 init_discovered_sessions();
 init_conversations();
@@ -5460,6 +5464,7 @@ init_openai_auth();
 init_claude_permissions();
 init_claude_auth();
 init_layers();
+init_harness_binary();
 init_codex();
 init_launcher_generator();
 init_transcript_landing();
@@ -15944,7 +15949,7 @@ var require_get_vercel_oidc_token = /* @__PURE__ */ __commonJSMin(((exports, mod
 			err = error;
 		}
 		try {
-			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-Cg-QnowA.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-LUrbM9sU.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
+			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-BArZLN6w.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-BkQLy4yS.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
 			if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
 				await refreshToken(options);
 				token = getVercelOidcTokenSync();
@@ -27778,7 +27783,7 @@ function randomId() {
 function randomNonce() {
 	return Math.floor(Math.random() * 2147483647);
 }
-function finiteNumber(value, fallback) {
+function finiteNumber$1(value, fallback) {
 	return typeof value === "number" && Number.isFinite(value) ? value : fallback;
 }
 function normalizeExcalidrawElement(element) {
@@ -27786,12 +27791,12 @@ function normalizeExcalidrawElement(element) {
 		...element,
 		id: typeof element.id === "string" && element.id ? element.id : randomId(),
 		type: typeof element.type === "string" && element.type ? element.type : "rectangle",
-		x: finiteNumber(element.x, 0),
-		y: finiteNumber(element.y, 0),
-		width: Math.max(1, finiteNumber(element.width, 100)),
-		height: Math.max(1, finiteNumber(element.height, 100)),
-		version: Math.max(1, Math.trunc(finiteNumber(element.version, 1))),
-		versionNonce: Math.trunc(finiteNumber(element.versionNonce, randomNonce())),
+		x: finiteNumber$1(element.x, 0),
+		y: finiteNumber$1(element.y, 0),
+		width: Math.max(1, finiteNumber$1(element.width, 100)),
+		height: Math.max(1, finiteNumber$1(element.height, 100)),
+		version: Math.max(1, Math.trunc(finiteNumber$1(element.version, 1))),
+		versionNonce: Math.trunc(finiteNumber$1(element.versionNonce, randomNonce())),
 		isDeleted: element.isDeleted === true
 	};
 	if (Math.abs(normalized.x) > VISIBLE_CANVAS_LIMIT || Math.abs(normalized.y) > VISIBLE_CANVAS_LIMIT) console.warn(`Excalidraw element ${normalized.id} has coordinates outside visible canvas range`);
@@ -28261,7 +28266,7 @@ var GoogleCloudTranscription = class {
 	}
 	async start(apiKey, model) {
 		try {
-			const { SpeechClient } = await import("./src-OLoJhUiJ.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
+			const { SpeechClient } = await import("./src-BMMoA_ba.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
 			if (this.closed) return;
 			const stream = new SpeechClient({ apiKey }).streamingRecognize({
 				config: {
@@ -30040,6 +30045,7 @@ const websocketRpcRouteLayer = Layer.unwrap(Effect.gen(function* () {
 }));
 //#endregion
 //#region ../../lib/vbrief/quality-lint.ts
+init_internal_token();
 init_state_home();
 init_pan_dir();
 init_in_flight_guard();
@@ -30416,13 +30422,12 @@ init_concurrency$1();
 init_github_app();
 init_resource_utils();
 init_pipeline_membership_gather();
+init_pipeline_membership();
 init_review_status();
 //#endregion
 //#region services/pipeline-membership.ts
-init_internal_token();
 init_pipeline_notifier();
 init_review_status_sync();
-init_pipeline_membership();
 const PIPELINE_MEMBERSHIP_TTL_MS = 3e4;
 function createPipelineMembershipService(deps = {
 	gather: gatherProjectLensSignals,
@@ -30520,8 +30525,10 @@ function unavailablePipelineMembership() {
 }
 //#endregion
 //#region services/resource-discovery.ts
+init_src();
 init_conversations();
 init_projects();
+init_pipeline_membership();
 init_pipeline_membership_gather();
 init_tmux();
 const execFileAsync$18 = promisify(execFile);
@@ -30639,7 +30646,7 @@ function isDiscoverableAgentSession(sessionName) {
 async function loadTrackerIssues() {
 	const map = /* @__PURE__ */ new Map();
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-D5EB5eYr.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-DBZabEl7.js");
 		const issues = (await getSharedIssueService()).getIssues();
 		for (const issue of issues) if (issue.identifier) map.set(issue.identifier.toUpperCase(), issue);
 	} catch {
@@ -30910,7 +30917,7 @@ async function computeResourceAllocatedIssues() {
 		});
 	}
 	try {
-		const { listActiveRemoteAgentStates } = await import("./remote-agents-BNORDWAX.js");
+		const { listActiveRemoteAgentStates } = await import("./remote-agents-D6O_zETW.js");
 		for (const remoteState of listActiveRemoteAgentStates()) {
 			const issue = ensureIssue(remoteState.issueId);
 			if (!issue) continue;
@@ -31030,9 +31037,10 @@ async function computeResourceAllocatedIssues() {
 			resourceDetails: issue.resourceDetails,
 			taskTotals: issue.taskTotals,
 			pipelineBucket: membership.bucket,
+			specOnlyPlanned: membership.bucket === "planned_backlog" && membership.reasons.includes("open issue with a vBRIEF spec but no branch/PR — planned work whose plan encodes code paths that age; needs starting or re-planning"),
 			resourceDrift: !membership.inPipeline
 		};
-	}).sort((a, b) => a.issueId.localeCompare(b.issueId));
+	}).sort((a, b) => compareIssueIds(a.issueId, b.issueId));
 }
 function toPublicResourceIssue(issue) {
 	return {
@@ -31122,7 +31130,7 @@ function groupResourceAllocatedIssuesByProject(issues) {
 	}
 	return [...projectTree.values()].map((project) => ({
 		...project,
-		features: project.features.sort((a, b) => a.issueId.localeCompare(b.issueId))
+		features: project.features.sort((a, b) => compareIssueIds(a.issueId, b.issueId))
 	})).sort((a, b) => a.name.localeCompare(b.name));
 }
 //#endregion
@@ -31584,25 +31592,32 @@ function getInternalDashboardOrigin() {
 }
 function classifyAutoSpawnSkip(status, body) {
 	const error = typeof body["error"] === "string" ? body["error"] : "";
+	if (status === 401 || status === 403) return "unauthorized";
 	if (body["stackHealth"] || /workspace docker stack/i.test(error)) return "stack-unhealthy";
 	if (body["paused"] === true) return "paused";
 	if (body["troubled"] === true) return "troubled";
 	if (body["guardrails"] || body["requiresAcknowledgement"] === true || status === 409) return "guardrails";
 	return "spawn-failed";
 }
+function resolveCompletePlanningTerminalStatus(autoSpawnRequested, autoSpawnResult) {
+	return autoSpawnRequested && autoSpawnResult?.workAgentSpawned !== true ? "failure" : "success";
+}
 async function completePlanningAutoSpawn(options) {
 	if (options.autoSpawn !== true) {
 		emitCompletePlanningPhase(options.issueId, "autoSpawn", "skipped", "autoSpawn not requested");
 		return null;
 	}
 	const dashboardOrigin = options.dashboardOrigin ?? getInternalDashboardOrigin();
+	const internalToken = getInternalTokenSync();
+	const internalTokenHeaders = internalToken ? { [INTERNAL_TOKEN_HEADER]: internalToken } : {};
 	emitCompletePlanningPhase(options.issueId, "autoSpawn", "start", "posting work-agent spawn request", { dashboardOrigin });
 	try {
 		const response = await (options.fetchImpl ?? fetch)(new URL("/api/agents", dashboardOrigin), {
 			method: "POST",
 			headers: {
 				"content-type": "application/json",
-				origin: dashboardOrigin
+				origin: dashboardOrigin,
+				...internalTokenHeaders
 			},
 			body: JSON.stringify({
 				issueId: options.issueId,
@@ -31623,7 +31638,10 @@ async function completePlanningAutoSpawn(options) {
 		if (skipReason === "stack-unhealthy") {
 			const recovery = await (options.fetchImpl ?? fetch)(new URL(`/api/workspaces/${encodeURIComponent(options.issueId)}/rebuild-and-start`, dashboardOrigin), {
 				method: "POST",
-				headers: { origin: dashboardOrigin }
+				headers: {
+					origin: dashboardOrigin,
+					...internalTokenHeaders
+				}
 			});
 			const recoveryBody = await recovery.json().catch(() => ({}));
 			if (recovery.ok && recoveryBody["success"] !== false) {
@@ -31969,7 +31987,7 @@ async function completePlanningForIssue(options) {
 			skipKill,
 			sessionName
 		});
-		emitCompletePlanningPhase(id, "terminal", "success", autoSpawnResult?.workAgentSpawned ? "planning complete and work agent spawn requested" : autoSpawnResult?.workAgentSkipReason ?? "planning complete", {
+		emitCompletePlanningPhase(id, "terminal", resolveCompletePlanningTerminalStatus(effectiveAutoSpawn, autoSpawnResult), autoSpawnResult?.workAgentSpawned ? "planning complete and work agent spawn requested" : autoSpawnResult?.workAgentSkipReason ?? "planning complete", {
 			autoSpawn: effectiveAutoSpawn,
 			workAgentSpawned: autoSpawnResult?.workAgentSpawned ?? false,
 			workAgentSkipReason: autoSpawnResult?.workAgentSkipReason
@@ -32134,7 +32152,7 @@ async function closeIssuePullRequest(issueId, reason = "Canceled via Overdeck")
 			timeout: 15e3
 		});
 		try {
-			const { setReviewStatusSync } = await import("./review-status-DXeqFpk5.js");
+			const { setReviewStatusSync } = await import("./review-status-Bnh-rdkY.js");
 			setReviewStatusSync(issueId.toUpperCase(), { prUrl: void 0 });
 		} catch {}
 		return [`Closed PR #${prNumber} on ${githubCheck.owner}/${githubCheck.repo}`];
@@ -32188,7 +32206,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	const { ctx, projectConfig } = buildLifecycleContext(id, getIssueDataService$8().getIssueSource(id) ?? void 0);
 	const deleteWorkspace = opts.deleteWorkspace ?? true;
 	cleanupLog.push(...await closeIssuePullRequest(id, mode === "cancel" ? "Canceled via Overdeck" : "Reset to Todo via Overdeck"));
-	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-CE7619Xw.js");
+	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-CtPDcZ9u.js");
 	const workflow = mode === "cancel" ? cancelIssueWorkflow : resetToTodo;
 	const result = await Effect.runPromise(workflow(ctx, {
 		deleteWorkspace,
@@ -32203,7 +32221,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	}));
 	cleanupLog.push(...result.steps.flatMap((step) => step.details || [step.error].filter(Boolean)));
 	if (mode === "cancel") try {
-		const { transitionVBriefOnMain } = await import("./lifecycle-io-CUpsxG0p.js");
+		const { transitionVBriefOnMain } = await import("./lifecycle-io-DmY2qwCn.js");
 		const tx = await Effect.runPromise(transitionVBriefOnMain(ctx.projectPath, id, "cancelled", "cancelled", `scope: cancel ${id.toUpperCase()} vBRIEF`));
 		if (tx.moved) cleanupLog.push(`vBRIEF moved ${tx.fromDir} → cancelled`);
 		if (tx.committed) cleanupLog.push(`Committed vBRIEF cancellation on main`);
@@ -32211,8 +32229,8 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push(`vBRIEF cancel transition failed (non-fatal): ${err?.message ?? err}`);
 	}
 	try {
-		const { killAllReviewerSessions } = await import("./review-agent-CSswH985.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-IRHJIPYC.js");
+		const { killAllReviewerSessions } = await import("./review-agent-CCum8sGe.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-BKkwpH6q.js");
 		const projectKey = resolveProjectFromIssueSync(id)?.projectKey;
 		if (projectKey) {
 			const { killed } = await Effect.runPromise(killAllReviewerSessions(projectKey, id.toUpperCase()));
@@ -32226,7 +32244,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push("Cleared review status");
 	} catch {}
 	try {
-		const { resetPostMergeState } = await import("./merge-agent-CnORPiri.js");
+		const { resetPostMergeState } = await import("./merge-agent-B-SnXOoc.js");
 		resetPostMergeState(id);
 		resetPostMergeState(id.toUpperCase());
 		cleanupLog.push("Cleared merge state");
@@ -32246,7 +32264,7 @@ function closeIssueTransition(options) {
 		const { issueId, body, eventStore } = options;
 		const { reason } = body;
 		const projectPath = getProjectPath$3(void 0, extractPrefixSync(issueId) ?? issueId.split("-")[0]);
-		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-CE7619Xw.js"));
+		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-CtPDcZ9u.js"));
 		const githubCheck = isGitHubIssue$4(issueId);
 		const issueDataService = getIssueDataService$8();
 		const issueSource = issueDataService.getIssueSource(issueId);
@@ -32513,7 +32531,7 @@ function reopenIssueTransition(options) {
 				else clearReviewStatus(id.toUpperCase());
 			} catch {}
 			try {
-				const { resetPostMergeState } = await import("./merge-agent-CnORPiri.js");
+				const { resetPostMergeState } = await import("./merge-agent-B-SnXOoc.js");
 				resetPostMergeState(id);
 				resetPostMergeState(id.toUpperCase());
 			} catch {}
@@ -32577,7 +32595,7 @@ function moveIssueStatus(options) {
 			"done"
 		];
 		if (!targetStatus || !validStatuses.includes(targetStatus)) return jsonResponse({ error: `Invalid targetStatus. Must be one of: ${validStatuses.join(", ")}` }, { status: 400 });
-		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-CDxEuPlE.js"));
+		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-CbvsN3qG.js"));
 		const issueState = {
 			backlog: "open",
 			todo: "open",
@@ -32804,7 +32822,7 @@ async function copySettingsToWorkspace(id) {
 		success: false,
 		error: "Workspace not found"
 	}, { status: 404 });
-	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-CcujONCR.js");
+	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-B1WOfKvB.js");
 	const result = copyOverdeckSettingsToWorkspaceSync(workspacePath);
 	return jsonResponse({
 		success: result.errors.length === 0 || result.copied.length > 0,
@@ -33267,7 +33285,7 @@ function restartFromPlan(options) {
 		});
 		const resetResult = yield* Effect.promise(async () => {
 			try {
-				const { runGitResetHard } = await import("./dangerous-git-ops-BebB-61h.js");
+				const { runGitResetHard } = await import("./dangerous-git-ops-D6AF-Hg_.js");
 				async function findPlanningCommit(grep, label) {
 					try {
 						const { stdout } = await execAsync$6(`git log --grep="${grep.replace(/"/g, "\\\"")}" --format=%H -1`, {
@@ -33720,7 +33738,7 @@ function closeOutIssue(id, opts = {}) {
 		}
 		const closeOutResult = yield* Effect.promise(async () => {
 			try {
-				const { closeOut } = await import("./lifecycle-CE7619Xw.js");
+				const { closeOut } = await import("./lifecycle-CtPDcZ9u.js");
 				return {
 					ok: true,
 					result: await Effect.runPromise(closeOut(ctx, {
@@ -33809,7 +33827,7 @@ function bulkCloseOut(body) {
 		const invalidIds = issueIds.filter((id) => !isValidIssueId(id));
 		if (invalidIds.length > 0) return jsonResponse({ error: `Invalid issue ID format: ${invalidIds.join(", ")}` }, { status: 400 });
 		const eventStore = yield* EventStoreService;
-		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-CE7619Xw.js"));
+		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-CtPDcZ9u.js"));
 		const issueDataService = getIssueDataService$5();
 		const tasks = [];
 		const agentChecks = yield* withConcurrencyLimit(issueIds.map((id) => Effect.promise(async () => {
@@ -34035,8 +34053,8 @@ const getIssueShipLogRoute = HttpRouter.add("GET", "/api/issues/:id/ship-log", h
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { getShipLog } = await import("./ship-log-DDcueaIR.js");
-		const { getReviewStatusSync } = await import("./review-status-DXeqFpk5.js");
+		const { getShipLog } = await import("./ship-log-__QtAFXG.js");
+		const { getReviewStatusSync } = await import("./review-status-Bnh-rdkY.js");
 		const log = getShipLog(id);
 		const rs = getReviewStatusSync(id);
 		return jsonResponse({
@@ -34051,8 +34069,8 @@ const getIssueVerificationRoute = HttpRouter.add("GET", "/api/issues/:id/verific
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { readVerificationArtifact } = await import("./verification-artifact-CrbI4tJE.js");
-		const { getReviewStatusSync } = await import("./review-status-DXeqFpk5.js");
+		const { readVerificationArtifact } = await import("./verification-artifact-Ck1tefmz.js");
+		const { getReviewStatusSync } = await import("./review-status-Bnh-rdkY.js");
 		const { join } = await import("node:path");
 		const resolved = resolveProjectFromIssueSync(id);
 		const workspacePath = resolved ? join(resolved.projectPath, "workspaces", `feature-${id.toLowerCase()}`) : null;
@@ -35165,7 +35183,7 @@ function buildProcessTotalsByRoot(roots, processes) {
 		}
 		totals.set(root.rootPid, {
 			processCount: seen.size,
-			cpuPercent: roundOneDecimal$3(cpuPercent),
+			cpuPercent: roundOneDecimal$2(cpuPercent),
 			memoryBytes
 		});
 	}
@@ -35199,7 +35217,7 @@ function getIdleMinutes(lastActivity, nowMs) {
 	if (!Number.isFinite(lastActivityMs)) return 0;
 	return Math.max(0, Math.floor((nowMs - lastActivityMs) / 6e4));
 }
-function roundOneDecimal$3(value) {
+function roundOneDecimal$2(value) {
 	return Math.round(value * 10) / 10;
 }
 function roundCurrency(value) {
@@ -35357,7 +35375,7 @@ function aggregateSupportFleet(processes) {
 	const supportProcesses = processes.filter(isSupportFleetProcess);
 	const members = supportProcesses.map((process) => process.command);
 	return {
-		cpuPercent: roundOneDecimal$2(supportProcesses.reduce((sum, process) => sum + process.cpuPercent, 0)),
+		cpuPercent: roundOneDecimal$1(supportProcesses.reduce((sum, process) => sum + process.cpuPercent, 0)),
 		memoryBytes: supportProcesses.reduce((sum, process) => sum + process.memoryBytes, 0),
 		memberCount: supportProcesses.length,
 		members
@@ -35384,7 +35402,7 @@ function formatDuration(totalSeconds) {
 	if (minutes > 0) return `${minutes}m ${seconds}s`;
 	return `${seconds}s`;
 }
-function roundOneDecimal$2(value) {
+function roundOneDecimal$1(value) {
 	return Math.round(value * 10) / 10;
 }
 //#endregion
@@ -35410,7 +35428,7 @@ function buildCapacityForecast(stacks, options) {
 		}),
 		headroom: {
 			freeRamBytes: options.hostVitals.mem.availableBytes,
-			loadHeadroom: Math.max(0, 100 - options.hostVitals.cpu.percent)
+			loadHeadroom: options.hostVitals.cpu.percent === null ? null : Math.max(0, 100 - options.hostVitals.cpu.percent)
 		}
 	};
 }
@@ -35481,8 +35499,8 @@ function buildHostProcesses(processes, options = {}) {
 		const row = {
 			...group,
 			pids: group.pids.sort((a, b) => a - b),
-			cpuPercent: roundOneDecimal$1(group.cpuPercent),
-			peakCpuPercent: roundOneDecimal$1(peakCpuPercent),
+			cpuPercent: roundOneDecimal(group.cpuPercent),
+			peakCpuPercent: roundOneDecimal(peakCpuPercent),
 			peakMemoryBytes
 		};
 		if (peakCpuPercent >= burstCpuThreshold) retainedBursts.set(group.id, {
@@ -35557,7 +35575,7 @@ function selectTopRows(rows, limit) {
 	for (const row of [...topByCpu, ...topByMemory]) merged.set(row.id, row);
 	return [...merged.values()].sort((a, b) => b.cpuPercent - a.cpuPercent || b.peakCpuPercent - a.peakCpuPercent).slice(0, limit);
 }
-function roundOneDecimal$1(value) {
+function roundOneDecimal(value) {
 	return Math.round(value * 10) / 10;
 }
 //#endregion
@@ -35575,12 +35593,20 @@ let cachedDockerCounts = {
 	}
 };
 function buildHostVitalsSnapshot(options = {}) {
-	const cpuPercent = roundOneDecimal(options.cpuPercent ?? 0);
-	cpuSpark.push(cpuPercent);
-	cpuSpark = cpuSpark.slice(-CPU_SPARK_MAX);
+	const metrics = options.hostMetrics;
+	const cpuPercent = metrics?.cpuPercent ?? null;
+	if (cpuPercent !== null) {
+		cpuSpark.push(cpuPercent);
+		cpuSpark = cpuSpark.slice(-CPU_SPARK_MAX);
+	}
 	const dockerCounts = options.dockerStale ? cachedDockerCounts : computeDockerCounts(options.containers ?? [], options.networkCount ?? 0, options.networkPoolTotal ?? 31);
 	if (!options.dockerStale) cachedDockerCounts = dockerCounts;
-	const memory = options.mem ?? getDefaultMemoryVitals();
+	const memory = {
+		usedBytes: metrics?.usedMemoryBytes ?? null,
+		availableBytes: metrics?.availableMemoryBytes ?? null,
+		swapUsedBytes: metrics?.swapUsedBytes ?? null,
+		swapTotalBytes: metrics?.swapTotalBytes ?? null
+	};
 	const disk = options.disk ?? {
 		usedBytes: 0,
 		freeBytes: 0,
@@ -35591,7 +35617,11 @@ function buildHostVitalsSnapshot(options = {}) {
 		stale: options.dockerStale === true,
 		cpu: {
 			percent: cpuPercent,
-			load: options.load ?? normalizeLoad(loadavg$1()),
+			load: [
+				metrics?.loadAverage1m ?? null,
+				null,
+				null
+			],
 			spark: [...cpuSpark]
 		},
 		mem: memory,
@@ -35637,26 +35667,6 @@ function computeAgentCounts(agents, fleet, nowMs) {
 		totalUsd: fleet.totalUsd ?? 0
 	};
 }
-function getDefaultMemoryVitals() {
-	const total = totalmem$1();
-	const available = freemem$1();
-	return {
-		usedBytes: Math.max(0, total - available),
-		availableBytes: available,
-		swapUsedBytes: 0,
-		swapTotalBytes: 0
-	};
-}
-function normalizeLoad(load) {
-	return [
-		roundOneDecimal(load[0] ?? 0),
-		roundOneDecimal(load[1] ?? 0),
-		roundOneDecimal(load[2] ?? 0)
-	];
-}
-function roundOneDecimal(value) {
-	return Math.round(value * 10) / 10;
-}
 //#endregion
 //#region routes/resources/limits.ts
 const OOM_WINDOW_MS = 1440 * 60 * 1e3;
@@ -35767,32 +35777,97 @@ function isClosedReviewStatus(issueId) {
 }
 //#endregion
 //#region routes/resources/spawn-gate.ts
-let readSystemHealthSnapshot = () => getSystemHealthSnapshot();
-function mapSpawnGateDecision(decision) {
-	const reason = decision.error ?? decision.warnings[0]?.message ?? "";
+let readSystemHealthEvidenceSnapshot = () => getSystemHealthEvidenceSnapshot();
+function mapSpawnGateDecision(decision, accepted) {
+	if (decision.health.freshness.status !== "fresh") {
+		const reason = decision.health.freshness.status === "stale" ? {
+			code: "admission.snapshot.stale",
+			domain: "admission",
+			severity: "critical",
+			message: decision.error ?? `Spawn gate health is stale: ${decision.health.freshness.reason.message}`
+		} : {
+			code: "admission.snapshot.measuring",
+			domain: "admission",
+			severity: "info",
+			message: decision.error ?? "Spawn gate health is still measuring."
+		};
+		return unavailableSpawnGate(accepted ?? null, reason, decision.warnings);
+	}
+	const admission = accepted?.admission;
+	const state = admission ? strongestAdmissionState(admission.state, decision.blocked ? "blocked" : decision.requiresAcknowledgement ? "soft" : "open") : decision.blocked ? "blocked" : decision.requiresAcknowledgement ? "soft" : "open";
+	const reasons = mergeAdmissionReasons(admission?.reasons ?? [], decision.warnings.map((warning) => ({
+		code: warning.code,
+		domain: "admission",
+		severity: warning.severity,
+		message: warning.message
+	})));
 	return {
-		state: decision.blocked ? "BLOCKED" : decision.requiresAcknowledgement ? "SOFT" : "OPEN",
-		reason,
+		state,
+		reason: decision.error ?? decision.warnings[0]?.message ?? reasons[0]?.message ?? "",
+		reasons,
+		admittedWorkAgentCount: admission?.admittedWorkAgentCount ?? decision.health.summary.workAgentCount,
 		warnings: decision.warnings,
-		pressure: spawnGatePressure(decision)
+		pressure: spawnGatePressure(state)
 	};
 }
-function getSpawnGatePayloadEffect() {
+function getResourcesHealthEvidenceEffect() {
 	return Effect.tryPromise({
-		try: () => readSystemHealthSnapshot(),
+		try: () => readSystemHealthEvidenceSnapshot(),
 		catch: (error) => error
-	}).pipe(Effect.map((health) => mapSpawnGateDecision(evaluateSpawnGuardrails(health))), Effect.catch(() => Effect.succeed({
-		state: "SOFT",
-		reason: "Spawn gate health is unavailable.",
-		warnings: [],
+	}).pipe(Effect.map(({ accepted, compatibility }) => ({
+		accepted,
+		decision: evaluateSpawnGuardrails(compatibility)
+	})), Effect.catch(() => Effect.succeed({
+		accepted: null,
+		decision: null
+	})));
+}
+function getSpawnGatePayloadEffect(evidence) {
+	return (evidence ? Effect.succeed(evidence) : getResourcesHealthEvidenceEffect()).pipe(Effect.map(({ accepted, decision }) => {
+		if (!accepted || !decision) return unavailableSpawnGate(accepted);
+		return mapSpawnGateDecision(decision, accepted);
+	}));
+}
+function unavailableSpawnGate(accepted, unavailableReason, warnings = []) {
+	const reasons = unavailableReason ? [unavailableReason] : accepted?.admission.reasons.length ? [...accepted.admission.reasons] : [{
+		code: "admission.snapshot.unavailable",
+		domain: "admission",
+		severity: "critical",
+		message: "Spawn gate health is unavailable."
+	}];
+	return {
+		state: "unavailable",
+		reason: reasons[0]?.message ?? "Spawn gate health is unavailable.",
+		reasons,
+		admittedWorkAgentCount: accepted?.admission.admittedWorkAgentCount ?? null,
+		warnings,
 		pressure: 0,
 		stale: true
-	})));
+	};
+}
+function mergeAdmissionReasons(...reasonGroups) {
+	const seen = /* @__PURE__ */ new Set();
+	return reasonGroups.flatMap((reasons) => reasons).filter((reason) => {
+		const key = `${reason.code}::${reason.message}`;
+		if (seen.has(key)) return false;
+		seen.add(key);
+		return true;
+	});
+}
+function strongestAdmissionState(accepted, enforced) {
+	if (accepted === "unavailable") return accepted;
+	const rank = {
+		open: 0,
+		soft: 1,
+		blocked: 2
+	};
+	return rank[accepted] >= rank[enforced] ? accepted : enforced;
 }
-function spawnGatePressure(decision) {
-	if (decision.blocked) return 100;
-	if (decision.requiresAcknowledgement) return 67;
-	return 12;
+function spawnGatePressure(state) {
+	if (state === "blocked") return 100;
+	if (state === "soft") return 67;
+	if (state === "open") return 12;
+	return 0;
 }
 //#endregion
 //#region routes/resources/snapshot.ts
@@ -35803,7 +35878,8 @@ function getResourcesEffect() {
 	return Effect.gen(function* () {
 		const containers = enrichContainersWithLimits(getCurrentDockerStats());
 		const agentStats = yield* getAgentStatsSnapshotEffect();
-		const spawnGate = yield* getSpawnGatePayloadEffect();
+		const healthEvidence = yield* getResourcesHealthEvidenceEffect();
+		const spawnGate = yield* getSpawnGatePayloadEffect(healthEvidence);
 		const stoppedContainers = [];
 		const sessions = yield* listSessions().pipe(Effect.catch(() => Effect.succeed([])));
 		const tmuxSessionNames = new Set(sessions.map((s) => s.name));
@@ -35813,6 +35889,7 @@ function getResourcesEffect() {
 		}));
 		const agentStatsById = new Map(agentStats.agents.map((agent) => [agent.id, agent]));
 		const baseHostVitals = buildHostVitalsSnapshot({
+			hostMetrics: healthEvidence.accepted?.host.metrics,
 			containers,
 			agents: agents.map((agent) => ({
 				id: String(agent.id),
@@ -38574,7 +38651,7 @@ Be specific: reference actual file names, function names, requirement text, disc
 	const { command: cliCmd, args: cliArgs } = getAgentCommandSync(statusModelId);
 	const modelFlag = cliArgs.length > 0 ? ` ${cliArgs.join(" ")}` : "";
 	const promptFile = join(planningDir, ".status-review-prompt.tmp");
-	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-BqCdTryq.js");
+	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-DNSQqy2V.js");
 	let providerEnvStr = "";
 	let providerEnv = {};
 	const statusProvider = getProviderForModelSync(statusModelId);
@@ -38657,7 +38734,7 @@ const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/
 	let safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "-");
 	let processedContent = content;
 	if (safeName.endsWith(".vtt")) {
-		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-3VZKsmSm.js"));
+		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-BnRsYzcz.js"));
 		processedContent = vttToMarkdown(content);
 		safeName = safeName.replace(/\.vtt$/, ".md");
 	}
@@ -44484,7 +44561,7 @@ const postRallyValidateRoute = HttpRouter.add("POST", "/api/rally/validate", Eff
 	}, { status: 400 });
 	return yield* Effect.promise(async () => {
 		try {
-			const { RallyRestApi } = await import("./rally-api-CKr0O4DJ.js");
+			const { RallyRestApi } = await import("./rally-api-xHazRk0d.js");
 			const api = new RallyRestApi({
 				apiKey,
 				server: server || "https://rally1.rallydev.com"
@@ -44516,15 +44593,9 @@ const postRallyValidateRoute = HttpRouter.add("POST", "/api/rally/validate", Eff
 const trackersRouteLayer = Layer.mergeAll(postTrackersRefreshRoute, getTrackerStatusRoute, postRallyValidateRoute);
 //#endregion
 //#region ../lib/health-filtering.ts
-/**
-* Health filtering logic for dashboard health API
-* Determines which agents should be visible in health checks
-*/
-init_config$1();
 init_tmux();
-const KICKOFF_STALL_GRACE_MS = 300 * 1e3;
 /**
-* Check if agent tmux session is alive
+* Check if agent tmux session is alive.
 */
 const checkAgentHealth = (agentId) => Effect.gen(function* () {
 	if (!(yield* sessionExists(agentId))) return { alive: false };
@@ -44533,133 +44604,191 @@ const checkAgentHealth = (agentId) => Effect.gen(function* () {
 		lastOutput: (yield* capturePane(agentId, 5)).trim()
 	};
 }).pipe(Effect.catch(() => Effect.succeed({ alive: false })));
-/**
-* Determine health status based on activity
-* Returns null if agent should be hidden (completed/stopped/no state.json)
-*
-* `liveSessions` is REQUIRED — pass the session list fetched once per request.
-* Iterating ~150 agent dirs and spawning a tmux subprocess per agent was pinning
-* the dashboard process at 100% CPU on every 5s `/api/health/agents` poll.
-* State is also read before the tmux check so stopped/completed/missing
-* agents short-circuit without any extra work.
-*/
-const determineHealthStatus = (agentId, stateFile, liveSessions) => Effect.gen(function* () {
-	let agentStatus;
-	let lastActivity = null;
-	let contextSaturatedAt;
-	if (!existsSync(stateFile)) return null;
-	const state = yield* Effect.tryPromise({
-		try: () => readFile$1(stateFile, "utf-8").then((content) => JSON.parse(content)),
-		catch: () => null
-	}).pipe(Effect.catch(() => Effect.succeed(null)));
-	if (state === null) return null;
-	agentStatus = state.status;
-	lastActivity = state.lastActivity ? new Date(state.lastActivity) : null;
-	if (!agentStatus) return null;
-	if (agentStatus === "stopped" || agentStatus === "completed") return null;
-	const runtimeFile = stateFile.replace("state.json", "runtime.json");
-	if (existsSync(runtimeFile)) {
-		const runtime = yield* Effect.tryPromise({
-			try: () => readFile$1(runtimeFile, "utf-8").then((content) => JSON.parse(content)),
-			catch: () => null
-		}).pipe(Effect.catch(() => Effect.succeed(null)));
-		if (runtime?.lastActivity) {
-			const runtimeDate = new Date(runtime.lastActivity);
-			if (!lastActivity || runtimeDate > lastActivity) lastActivity = runtimeDate;
-		}
-		if (runtime?.contextSaturatedAt) contextSaturatedAt = runtime.contextSaturatedAt;
-	}
-	if (!liveSessions.has(agentId)) {
-		const STALE_THRESHOLD_MS = ((yield* loadCloisterConfig()).retention?.health_staleness_hours ?? 24) * 60 * 60 * 1e3;
-		if (lastActivity) {
-			if (Date.now() - lastActivity.getTime() > STALE_THRESHOLD_MS) return null;
-		} else return null;
-		return {
-			status: "dead",
-			reason: "Agent crashed unexpectedly"
-		};
-	}
-	if (contextSaturatedAt) return {
-		status: "wedged",
-		reason: "Context window exhausted (400) — recovery in progress"
-	};
-	const startedAtMs = typeof state.startedAt === "string" ? Date.parse(state.startedAt) : NaN;
-	if (state.role === "work" && agentStatus === "running" && state.kickoffDelivered === false && Number.isFinite(startedAtMs) && Date.now() - startedAtMs > KICKOFF_STALL_GRACE_MS) return {
-		status: "stalled",
-		reason: "Work agent running with no kickoff delivered since spawn"
-	};
-	if (lastActivity) {
-		const ageMinutes = (Date.now() - lastActivity.getTime()) / (1e3 * 60);
-		if (ageMinutes > 30) return {
-			status: "stuck",
-			reason: `No activity for ${Math.round(ageMinutes)} minutes`
-		};
-		else if (ageMinutes > 15) return {
-			status: "warning",
-			reason: `Low activity (${Math.round(ageMinutes)} minutes)`
-		};
-	}
-	return { status: "healthy" };
-});
 //#endregion
 //#region routes/misc/health.ts
-init_agents$1();
+init_src();
+init_review_status_source();
+init_paths();
 init_tmux();
 init_read_model();
-const getSystemHealthRoute = HttpRouter.add("GET", "/api/system/health", httpHandler(Effect.gen(function* () {
-	return jsonResponse(yield* (yield* ReadModelService).getSnapshot.pipe(Effect.flatMap((snapshot) => Effect.promise(() => getSystemHealthSnapshot(snapshot)))));
-})));
-const getGodviewSystemHealthRoute = HttpRouter.add("GET", "/api/godview/system-health", httpHandler(Effect.gen(function* () {
-	const health = yield* (yield* ReadModelService).getSnapshot.pipe(Effect.flatMap((snapshot) => Effect.promise(() => getSystemHealthSnapshot(snapshot))));
+function unavailableSystemHealthResponse() {
 	return jsonResponse({
-		cpu: health.summary.cpuPercent,
-		memPercent: health.summary.memoryUsedPercent,
-		memUsed: health.summary.usedMemoryBytes,
-		memTotal: health.summary.totalMemoryBytes,
-		updatedAt: health.updatedAt
+		status: "unavailable",
+		reasons: [{
+			code: "system.health_snapshot.unavailable",
+			domain: "host",
+			severity: "critical",
+			message: "The accepted system health snapshot could not be produced or decoded."
+		}]
+	}, { status: 503 });
+}
+function decodeAcceptedSystemHealth(value) {
+	const decoded = Schema.decodeUnknownResult(SystemHealthSnapshot)(value);
+	if (decoded._tag === "Failure") throw new Error("The accepted system health snapshot failed shared-contract decoding.");
+	return decoded.success;
+}
+function buildSystemHealthResponse(dependencies) {
+	return dependencies.snapshot.pipe(Effect.map((snapshot) => jsonResponse(decodeAcceptedSystemHealth(snapshot))), Effect.catchCause(() => Effect.succeed(unavailableSystemHealthResponse())));
+}
+function buildGodviewSystemHealthResponse(dependencies) {
+	return dependencies.snapshot.pipe(Effect.map((snapshot) => {
+		const health = decodeAcceptedSystemHealth(snapshot);
+		return jsonResponse({
+			...health,
+			cpu: health.summary.cpuPercent,
+			memPercent: health.summary.memoryUsedPercent,
+			memUsed: health.summary.usedMemoryBytes,
+			memTotal: health.summary.totalMemoryBytes,
+			updatedAt: health.updatedAt
+		});
+	}), Effect.catchCause(() => Effect.succeed(unavailableSystemHealthResponse())));
+}
+const getSystemHealthRoute = HttpRouter.add("GET", "/api/system/health", httpHandler(buildSystemHealthResponse({ snapshot: Effect.promise(() => getAcceptedSystemHealthSnapshot()) })));
+const getGodviewSystemHealthRoute = HttpRouter.add("GET", "/api/godview/system-health", httpHandler(buildGodviewSystemHealthResponse({ snapshot: Effect.promise(() => getAcceptedSystemHealthSnapshot()) })));
+const getDeployStalenessRoute = HttpRouter.add("GET", "/api/deploy/staleness", Effect.promise(async () => jsonResponse(await getDeployStaleness())));
+function finiteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+async function readAgentHealthObservations(agentId) {
+	if (!/^[A-Za-z0-9._-]+$/.test(agentId) || agentId.includes("..")) return {};
+	const agentDir = join(getOverdeckHome(), "agents", agentId);
+	const observations = {};
+	try {
+		const stored = JSON.parse(await readFile(join(agentDir, "health.json"), "utf-8"));
+		if (stored && typeof stored === "object" && !Array.isArray(stored)) {
+			const record = stored;
+			const consecutiveFailures = finiteNumber(record["consecutiveFailures"]);
+			const killCount = finiteNumber(record["killCount"]);
+			if (consecutiveFailures !== void 0) observations.consecutiveFailures = consecutiveFailures;
+			if (killCount !== void 0) observations.killCount = killCount;
+		}
+	} catch {}
+	try {
+		const raw = (await readFile(join(agentDir, "context-pct"), "utf-8")).trim();
+		const contextPercent = raw === "" ? NaN : Number(raw);
+		if (Number.isFinite(contextPercent)) observations.contextPercent = contextPercent;
+	} catch {}
+	return observations;
+}
+function runtimeHealthState(runtime) {
+	if (!runtime) return null;
+	switch (runtime.activity) {
+		case "working":
+		case "thinking": return {
+			state: "active",
+			lastActivity: runtime.lastActivity,
+			contextSaturatedAt: runtime.contextSaturatedAt
+		};
+		case "waiting": return {
+			state: "waiting-on-human",
+			lastActivity: runtime.lastActivity,
+			contextSaturatedAt: runtime.contextSaturatedAt
+		};
+		case "idle": return {
+			state: "idle",
+			lastActivity: runtime.lastActivity,
+			contextSaturatedAt: runtime.contextSaturatedAt
+		};
+		case "stopped": return {
+			state: "stopped",
+			lastActivity: runtime.lastActivity,
+			contextSaturatedAt: runtime.contextSaturatedAt
+		};
+	}
+}
+function decodeReviewStatuses(value) {
+	const statuses = /* @__PURE__ */ new Map();
+	for (const candidate of value ?? []) {
+		const decoded = Schema.decodeUnknownResult(ReviewStatusSnapshot)(candidate);
+		if (decoded._tag === "Success") statuses.set(decoded.success.issueId.toUpperCase(), decoded.success);
+	}
+	return statuses;
+}
+function reviewLifecycle(agent, statuses, tmuxActive) {
+	if (agent.role !== "review" && agent.role !== "test" && agent.role !== "ship") return "unknown";
+	return classifyAdvancingSessionLifecycle(agent.role, statuses.get(agent.issueId.toUpperCase()), tmuxActive);
+}
+function snapshotSource(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("The canonical read model did not return an object.");
+	const candidate = value;
+	if (!Array.isArray(candidate["agents"])) throw new Error("The canonical read model did not return an agent array.");
+	return {
+		agents: candidate["agents"],
+		agentRuntimeById: candidate["agentRuntimeById"],
+		reviewStatuses: Array.isArray(candidate["reviewStatuses"]) ? candidate["reviewStatuses"] : void 0
+	};
+}
+function runtimeRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+async function projectAgentHealth(snapshotValue, sessionNames, readObservations, nowMs) {
+	const snapshot = snapshotSource(snapshotValue);
+	const liveSessions = new Set(sessionNames);
+	const runtimes = runtimeRecord(snapshot.agentRuntimeById);
+	const reviewStatuses = decodeReviewStatuses(snapshot.reviewStatuses);
+	return Promise.all(snapshot.agents.map(async (candidate, index) => {
+		const decoded = Schema.decodeUnknownResult(AgentSnapshot)(candidate);
+		if (decoded._tag === "Failure") {
+			const candidateId = candidate && typeof candidate === "object" && !Array.isArray(candidate) ? candidate["id"] : void 0;
+			return classifyAgentHealth({
+				agentId: typeof candidateId === "string" ? candidateId : `unavailable-agent-${index + 1}`,
+				persisted: {
+					status: "unavailable",
+					reason: "The canonical agent snapshot could not be decoded."
+				},
+				runtime: null,
+				liveSessions,
+				reviewLifecycle: "unknown",
+				nowMs
+			});
+		}
+		const agent = decoded.success;
+		const runtimeCandidate = Schema.decodeUnknownResult(AgentRuntimeSnapshot)(runtimes[agent.id]);
+		const runtime = runtimeCandidate._tag === "Success" ? runtimeCandidate.success : null;
+		const observations = await readObservations(agent.id).catch(() => ({}));
+		return classifyAgentHealth({
+			agentId: agent.id,
+			persisted: {
+				status: "available",
+				value: {
+					id: agent.id,
+					issueId: agent.issueId,
+					role: agent.role,
+					status: agent.status,
+					startedAt: agent.startedAt,
+					lastActivity: agent.lastActivity,
+					paused: agent.paused,
+					stoppedByUser: agent.stoppedByUser,
+					consecutiveFailures: agent.consecutiveFailures
+				}
+			},
+			runtime: runtimeHealthState(runtime),
+			liveSessions,
+			reviewLifecycle: reviewLifecycle(agent, reviewStatuses, liveSessions.has(agent.id)),
+			observations,
+			nowMs
+		});
+	}));
+}
+function buildHealthAgentsResponse(dependencies) {
+	return Effect.all({
+		snapshot: dependencies.snapshot,
+		sessionNames: dependencies.sessionNames
+	}).pipe(Effect.flatMap(({ snapshot, sessionNames }) => Effect.promise(async () => jsonResponse(await projectAgentHealth(snapshot, sessionNames, dependencies.readObservations ?? readAgentHealthObservations, dependencies.nowMs ?? Date.now())))), Effect.catchCause(() => Effect.succeed(jsonResponse({
+		status: "unavailable",
+		reasons: [{
+			code: "agent.health_snapshot.unavailable",
+			domain: "agent",
+			severity: "critical",
+			message: "The canonical agent health snapshot could not be loaded."
+		}]
+	}, { status: 503 }))));
+}
+const getHealthAgentsRoute = HttpRouter.add("GET", "/api/health/agents", Effect.gen(function* () {
+	return yield* buildHealthAgentsResponse({
+		snapshot: (yield* ReadModelService).getSnapshot,
+		sessionNames: listSessionNames()
 	});
-})));
-const getHealthAgentsRoute = HttpRouter.add("GET", "/api/health/agents", Effect.promise(async () => {
-	try {
-		const agentsDir = join(homedir$1(), ".overdeck", "agents");
-		if (!existsSync$1(agentsDir)) return jsonResponse([]);
-		const agentNames = (await readdir(agentsDir)).filter((name) => name.startsWith("agent-") || name.startsWith("planning-") || name.startsWith("specialist-"));
-		const liveSessions = new Set(await Effect.runPromise(listSessionNames()));
-		return jsonResponse((await Promise.all(agentNames.map(async (name) => {
-			const stateFile = getAgentStateFilePath(name);
-			const healthFile = join(agentsDir, name, "health.json");
-			const healthStatus = await Effect.runPromise(determineHealthStatus(name, stateFile, liveSessions));
-			if (!healthStatus) return null;
-			let storedHealth = {
-				consecutiveFailures: 0,
-				killCount: 0
-			};
-			try {
-				const healthContent = await readFile(healthFile, "utf-8");
-				storedHealth = {
-					...storedHealth,
-					...JSON.parse(healthContent)
-				};
-			} catch {}
-			let contextPercent = null;
-			try {
-				const ctxContent = await readFile(join(agentsDir, name, "context-pct"), "utf-8");
-				contextPercent = parseInt(ctxContent.trim(), 10) || null;
-			} catch {}
-			return {
-				agentId: name,
-				status: healthStatus.status,
-				reason: healthStatus.reason,
-				lastPing: (/* @__PURE__ */ new Date()).toISOString(),
-				consecutiveFailures: storedHealth.consecutiveFailures,
-				killCount: storedHealth.killCount,
-				contextPercent
-			};
-		}))).filter((agent) => agent !== null));
-	} catch (error) {
-		console.error("Error fetching health:", error);
-		return jsonResponse([]);
-	}
 }));
 const postHealthAgentPingRoute = HttpRouter.add("POST", "/api/health/agents/:id/ping", Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
@@ -44681,7 +44810,7 @@ const postHealthAgentPingRoute = HttpRouter.add("POST", "/api/health/agents/:id/
 		}
 	});
 }));
-const healthRouteLayer$1 = Layer.mergeAll(getSystemHealthRoute, getGodviewSystemHealthRoute, getHealthAgentsRoute, postHealthAgentPingRoute);
+const healthRouteLayer$1 = Layer.mergeAll(getSystemHealthRoute, getGodviewSystemHealthRoute, getDeployStalenessRoute, getHealthAgentsRoute, postHealthAgentPingRoute);
 //#endregion
 //#region routes/misc/deacon.ts
 init_control_settings();
@@ -44812,7 +44941,7 @@ const getPlanningStatusRoute = HttpRouter.add("GET", "/api/planning/:issueId/sta
 			const remoteState = loadRemoteAgentState(sessionName);
 			const isRemote = !!remoteState;
 			const vmName = remoteState?.vmName ?? "";
-			const { getAgentStateSync } = await import("./agents-Czz6R57Z.js");
+			const { getAgentStateSync } = await import("./agents-DyHKlq1I.js");
 			const agentStarting = getAgentStateSync(sessionName)?.status === "starting";
 			let tmuxSessionAlive = false;
 			if (!isRemote) try {
@@ -44954,8 +45083,9 @@ ${message}
 Continue the PLANNING session. Do NOT implement anything.
 `);
 			const agentCwd = workspacePath;
+			const harnessLaunch = await prepareHarnessLaunch("claude-code");
 			if (existsSync$1(outputFile)) await rename(outputFile, join(planningDir, `output-${Date.now()}.jsonl`));
-			const { getAgentCommandSync } = await import("./settings-BaPXXJsT.js");
+			const { getAgentCommandSync } = await import("./settings-BlUsVaUc.js");
 			let msgPlanningModel = "claude-sonnet-5";
 			try {
 				msgPlanningModel = resolveModel("plan", void 0, loadConfigSync().config);
@@ -44969,6 +45099,7 @@ Continue the PLANNING session. Do NOT implement anything.
 				role: "plan",
 				workingDir: agentCwd,
 				baseCommand: msgCmdWithArgs,
+				extraEnvExports: [harnessLaunch.pathExport],
 				appendSystemPromptFiles: await claudePlanningSystemPromptFiles(agentCwd),
 				promptInline: `Please read the continuation prompt at ${continuationPromptPath} and continue the planning session.`
 			}), { mode: 493 });
@@ -45076,7 +45207,7 @@ async function getIndexStats(rootPath, isMain) {
 }
 const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BJA7TkqS.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-B8_oT5gx.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		const results = [];
@@ -45121,7 +45252,7 @@ const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Ef
 }));
 const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BJA7TkqS.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-B8_oT5gx.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -45138,7 +45269,7 @@ const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Ef
 }));
 const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BJA7TkqS.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-B8_oT5gx.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -45155,7 +45286,7 @@ const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effe
 }));
 const postTldrReloadRoute = HttpRouter.add("POST", "/api/services/tldr/reload", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BJA7TkqS.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-B8_oT5gx.js");
 		const enabled = isTldrEnabledSync();
 		const projectRoot = process.cwd();
 		const targets = [];
@@ -45343,7 +45474,7 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	const version = await getOverdeckVersion();
 	let supervisorUrl = null;
 	try {
-		const { getSupervisorUrlSync } = await import("./supervisor-Qy1QecAs.js");
+		const { getSupervisorUrlSync } = await import("./supervisor-COVHrBTg.js");
 		supervisorUrl = getSupervisorUrlSync();
 	} catch {}
 	return jsonResponse({
@@ -45353,11 +45484,11 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	});
 }));
 const getPrerequisitesRoute = HttpRouter.add("GET", "/api/prerequisites", Effect.promise(async () => {
-	const { checkSystemPrerequisites } = await import("./system-prerequisites-DkoQBn1q.js");
+	const { checkSystemPrerequisites } = await import("./system-prerequisites-DSXBvffY.js");
 	return jsonResponse(await checkSystemPrerequisites());
 }));
 const getSetupDiagnosticsRoute = HttpRouter.add("GET", "/api/diagnostics/setup", Effect.promise(async () => {
-	const { collectSetupDiagnostics } = await import("./system-prerequisites-DkoQBn1q.js");
+	const { collectSetupDiagnostics } = await import("./system-prerequisites-DSXBvffY.js");
 	return jsonResponse(await collectSetupDiagnostics(await getOverdeckVersion()));
 }));
 const getSyncStatusRoute = HttpRouter.add("GET", "/api/sync-status", Effect.sync(() => {
@@ -45537,7 +45668,7 @@ const postShadowMonitorRoute = HttpRouter.add("POST", "/api/shadow/:issueId/moni
 			const projectPath = await getProjectPath(issuePrefix);
 			const workspacePath = join(projectPath, "workspaces", `feature-${issueLower}`);
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
-			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-Bi_oIMtF.js");
+			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-D4X_s3fA.js");
 			const config = {
 				issueId,
 				workspacePath,
@@ -45567,7 +45698,7 @@ const postShadowObserveRoute = HttpRouter.add("POST", "/api/shadow/:issueId/obse
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
 			const ghConfig = getGitHubConfig();
 			if (!ghConfig) return jsonResponse({ error: "GitHub not configured - Observer requires GitHub" }, { status: 400 });
-			const { runObserverCycle } = await import("./shadow-engineering-Bi_oIMtF.js");
+			const { runObserverCycle } = await import("./shadow-engineering-D4X_s3fA.js");
 			const firstRepo = ghConfig.repos[0];
 			const config = {
 				issueId,
@@ -48735,7 +48866,7 @@ async function refreshMergeStateFromGitHub(issueId, repo, prNumber) {
 		let mergeState;
 		let isDraft;
 		let checksFailed;
-		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-CeSVFL6C.js");
+		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-CU14oYzP.js");
 		if (isGitHubAppConfigured()) {
 			const prState = await Effect.runPromise(getPullRequestState(owner, repoName, prNumber));
 			mergeable = prState.mergeable === null ? "UNKNOWN" : prState.mergeable ? "MERGEABLE" : "CONFLICTING";
@@ -48884,8 +49015,8 @@ async function handlePullRequestPromise(payload) {
 	bumpIssuePrTabCacheGeneration(issueId);
 	const repo = payload.repository.full_name;
 	if (payload.action === "closed" && pr.merged === true) try {
-		const { postMergeLifecycle } = await import("./merge-agent-CnORPiri.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-IRHJIPYC.js");
+		const { postMergeLifecycle } = await import("./merge-agent-B-SnXOoc.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-BKkwpH6q.js");
 		const project = resolveProjectFromIssueSync(issueId);
 		if (project) {
 			const branchName = pr.head.ref;
@@ -50281,7 +50412,7 @@ async function registerProjectFromPath(opts) {
 	registerProjectSync(key, projectConfig);
 	const seededContextLayer = ensureProjectLayer(fullPath);
 	try {
-		const { preTrustDirectorySync } = await import("./workspace-manager-CcujONCR.js");
+		const { preTrustDirectorySync } = await import("./workspace-manager-B1WOfKvB.js");
 		preTrustDirectorySync(fullPath);
 	} catch {}
 	let hooksInstalled = 0;
@@ -50311,6 +50442,7 @@ init_issue_id();
 init_tmux();
 init_concurrency$1();
 init_read_model();
+init_src();
 init_agents$1();
 init_pan_dir();
 init_io();
@@ -50318,7 +50450,7 @@ init_specs();
 init_paths();
 const execAsync$2 = promisify(exec);
 async function getIssueDataService() {
-	const { getSharedIssueService } = await import("./issue-service-singleton-D5EB5eYr.js");
+	const { getSharedIssueService } = await import("./issue-service-singleton-DBZabEl7.js");
 	return getSharedIssueService();
 }
 /** Returns true if the path exists (any type). */
@@ -50733,7 +50865,7 @@ async function fetchProjectSessionTree(projectKey, sharedContext) {
 		})), 15));
 		features.push(...results.filter((f) => f !== null));
 	}
-	features.sort((a, b) => a.issueId.localeCompare(b.issueId));
+	features.sort((a, b) => compareIssueIds(a.issueId, b.issueId));
 	return {
 		projectKey,
 		features
@@ -50775,7 +50907,7 @@ const getProjectReleaseStatusRoute = HttpRouter.add("GET", "/api/projects/:proje
 	const projectKey = (yield* HttpRouter.params)["projectKey"] ?? "";
 	return jsonResponse(yield* Effect.tryPromise({
 		try: async () => {
-			const { fetchProjectReleaseStatus } = await import("./project-pipelines-B59NfN44.js");
+			const { fetchProjectReleaseStatus } = await import("./project-pipelines-CtNG_rvs.js");
 			return fetchProjectReleaseStatus(projectKey);
 		},
 		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
@@ -51590,6 +51722,35 @@ async function checkCommand(cmd, args = ["--version"]) {
 		return false;
 	}
 }
+const LINUX_PACKAGE_MANAGERS = [
+	"pacman",
+	"dnf",
+	"zypper",
+	"apk",
+	"apt-get"
+];
+async function detectLinuxPackageManager(commandAvailable = checkCommand) {
+	for (const packageManager of LINUX_PACKAGE_MANAGERS) if (await commandAvailable(packageManager)) return packageManager;
+	return null;
+}
+function getLinuxInstallCommand(tool, packageManager) {
+	switch (packageManager) {
+		case "pacman": return `sudo pacman -S --noconfirm ${tool}`;
+		case "dnf": return `sudo dnf install -y ${tool}`;
+		case "zypper": return `sudo zypper install -y ${tool}`;
+		case "apk": return `sudo apk add ${tool}`;
+		case "apt-get": return `sudo apt-get update && sudo apt-get install -y ${tool}`;
+	}
+}
+function getLinuxManualInstallHint(tool, packageManager) {
+	if (packageManager) return getLinuxInstallCommand(tool, packageManager);
+	return `${tool} — download from ${tool === "jq" ? "https://jqlang.github.io/jq/download/" : "https://github.com/tmux/tmux/wiki/Installing"}`;
+}
+async function installLinuxPackage(tool) {
+	const packageManager = await detectLinuxPackageManager();
+	if (!packageManager) throw new Error(`No supported Linux package manager found. Install ${getLinuxManualInstallHint(tool, null)}`);
+	await execAsync$1(getLinuxInstallCommand(tool, packageManager), { timeout: 12e4 });
+}
 async function isToolInstalled(tool) {
 	if (tool === "docker") return checkCommand("docker", ["info"]);
 	if (tool === "traefik") try {
@@ -51632,7 +51793,7 @@ async function installTool(tool) {
 }
 async function installTmux() {
 	if (await Effect.runPromise(detectPlatform()) === "darwin") await execAsync$1("brew install tmux", { timeout: 12e4 });
-	else await execAsync$1("sudo apt-get update && sudo apt-get install -y tmux", { timeout: 12e4 });
+	else await installLinuxPackage("tmux");
 	return {
 		tool: "tmux",
 		success: true,
@@ -51682,7 +51843,7 @@ async function installMkcert() {
 }
 async function installJq() {
 	if (await Effect.runPromise(detectPlatform()) === "darwin") await execAsync$1("brew install jq", { timeout: 12e4 });
-	else await execAsync$1("sudo apt-get update && sudo apt-get install -y jq", { timeout: 12e4 });
+	else await installLinuxPackage("jq");
 	return {
 		tool: "jq",
 		success: true,
@@ -52417,7 +52578,7 @@ function getCheckpointWorker() {
 	return worker;
 }
 async function runInline(operation, payload) {
-	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-DwZqT2qQ.js");
+	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-B5jFNi2G.js");
 	switch (operation) {
 		case "claimTranscriptRange": return claimTranscriptRange(payload);
 		case "commitTranscriptRange": return commitTranscriptRange(payload);
@@ -53571,7 +53732,7 @@ function buildPendingTurn(input, fromOffset, toOffset, compressed) {
 	};
 }
 async function emitMemoryObservationCreated(observation, timestamp) {
-	const { initEventStore } = await import("./event-store-DABarGNz.js");
+	const { initEventStore } = await import("./event-store-CpBGsO6_.js");
 	await (await initEventStore()).appendAsync({
 		type: "memory.observation_created",
 		timestamp,
@@ -56583,7 +56744,7 @@ async function getFlywheelConversationPayload() {
 	};
 }
 async function postFlywheelReportPayload() {
-	const { flywheelReportCommand } = await import("./flywheel-DPUc8r3V.js");
+	const { flywheelReportCommand } = await import("./flywheel-6WHU4O7A.js");
 	await flywheelReportCommand({ cwd: process.cwd() });
 	return {
 		status: 200,
@@ -56741,11 +56902,11 @@ const getMergeBlockersRoute = HttpRouter.add("GET", "/api/flywheel/merge-blocker
 async function defaultGetOrderedIssueIds() {
 	const status = await readCurrentFlywheelStatusForDashboard();
 	if (!status) return [];
-	const { computeMergeQueue } = await import("./flywheel-merge-order-CeBuX0EJ.js");
+	const { computeMergeQueue } = await import("./flywheel-merge-order-CNKAY489.js");
 	return (await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd()).pipe(Effect.provide(layer)))).map((i) => i.issueId);
 }
 async function defaultMergeOne(issueId) {
-	const { triggerMerge } = await import("./merge-ops-BpTtuO8x.js");
+	const { triggerMerge } = await import("./merge-ops-DwWCkSgo.js");
 	const r = await triggerMerge(issueId);
 	return r.success ? { ok: true } : {
 		ok: false,
@@ -56765,7 +56926,7 @@ async function postFlywheelMergeNextPayload(payload, deps = {}) {
 		body: { error: "n must be a positive integer" }
 	};
 	const issueIds = (await (deps.getOrderedIssueIds ?? defaultGetOrderedIssueIds)()).slice(0, n);
-	const { shipMergeBatch } = await import("./merge-batch-C2w2U2eK.js");
+	const { shipMergeBatch } = await import("./merge-batch-Byt-QnEl.js");
 	return {
 		status: 200,
 		body: { outcomes: await shipMergeBatch(issueIds, { merge: deps.merge ?? defaultMergeOne }) }
@@ -56922,7 +57083,7 @@ const getFlywheelMergeQueueRoute = HttpRouter.add("GET", "/api/flywheel/merge-qu
 	return yield* Effect.promise(async () => {
 		const status = await readCurrentFlywheelStatusForDashboard();
 		if (!status) return jsonResponse([]);
-		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-CeBuX0EJ.js");
+		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-CNKAY489.js");
 		return jsonResponse(await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd(), { getPrUrl: resolveMergeQueuePrUrl }).pipe(Effect.provide(layer))));
 	});
 })));
@@ -56936,18 +57097,18 @@ function uatGenerationNameFromParam(param) {
 	return decoded.startsWith("uat/") ? decoded : `uat/${decoded}`;
 }
 const getUatGenerationsRoute = HttpRouter.add("GET", "/api/flywheel/uat-generations", httpHandler(Effect.gen(function* () {
-	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-Wismge7h.js"));
+	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-0Ujk8GCv.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatGenerationsPayload()));
 })));
 const getUatCandidateRoute = HttpRouter.add("GET", "/api/flywheel/uat-candidate", httpHandler(Effect.gen(function* () {
-	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-Wismge7h.js"));
+	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-0Ujk8GCv.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatCandidatePayload()));
 })));
 const postUatGenerationStackRoute = HttpRouter.add("POST", "/api/flywheel/uat-generations/:name/stack", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-Wismge7h.js"));
+	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-0Ujk8GCv.js"));
 	const result = yield* Effect.promise(() => postUatGenerationStackPayload(name));
 	if (!result.ok) return jsonResponse({ error: result.error }, { status: result.status });
 	return jsonResponse({
@@ -56959,8 +57120,8 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-Wismge7h.js"));
-	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-D0VBf8g_.js"));
+	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-0Ujk8GCv.js"));
+	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-D0gGXMZx.js"));
 	const result = yield* Effect.promise(() => postUatGenerationPromotePayload(name, firePostMergeLifecycle));
 	if (!result.success) return jsonResponse(result, { status: result.reason === "not-found" ? 404 : result.reason === "merge-failed" ? 500 : 409 });
 	return jsonResponse(result);
@@ -56973,7 +57134,7 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 const postFlywheelAssembleUatRoute = HttpRouter.add("POST", "/api/flywheel/assemble-uat", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-Wismge7h.js"));
+	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-0Ujk8GCv.js"));
 	return jsonResponse(yield* Effect.promise(() => runUatTrainReconcile({ force: true })));
 })));
 const getFlywheelStateRoute = HttpRouter.add("GET", "/api/flywheel/state", httpHandler(Effect.gen(function* () {
@@ -60646,7 +60807,7 @@ async function pollOnce(state) {
 			try {
 				const remoteState = await readFile(join(homedir$1(), ".overdeck", "agents", agentId, "remote-state.json"), "utf-8").then((text) => JSON.parse(text)).catch(() => null);
 				if (remoteState?.location === "remote" && remoteState?.vmName) {
-					const { getRemoteAgentOutput } = await import("./remote-agents-BNORDWAX.js");
+					const { getRemoteAgentOutput } = await import("./remote-agents-D6O_zETW.js");
 					stdout = await getRemoteAgentOutput(agentId, remoteState.vmName, 50);
 				} else stdout = await Effect.runPromise(capturePane(agentId, 50));
 			} catch {
@@ -61852,7 +62013,7 @@ const RESTART_MARKER = join$1(homedir(), ".overdeck", "dashboard-restarting.json
 * loads new content-hashed chunk filenames (no ERR_MODULE_NOT_FOUND after rebuild).
 */
 async function defaultLifecycleRunner(pending) {
-	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-CnORPiri.js");
+	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-B-SnXOoc.js");
 	await postMergeLifecycle(pending.issueId, pending.projectPath, pending.sourceBranch, { skipDeploy: true });
 	if (pending.sourceBranch) await notifyTldrDaemon(pending.projectPath, pending.sourceBranch);
 }
@@ -62173,7 +62334,7 @@ function failureReason(result) {
 	return result.error ?? result.message ?? `merge returned status ${result.statusCode ?? "unknown"}`;
 }
 async function defaultMergeIssue(issueId) {
-	const { triggerMerge } = await import("./merge-ops-BpTtuO8x.js");
+	const { triggerMerge } = await import("./merge-ops-DwWCkSgo.js");
 	return triggerMerge(issueId);
 }
 function defaultAnnounceFailure(issueId, reason) {
@@ -62401,24 +62562,27 @@ init_projects();
 init_state_home();
 const execFileAsync = promisify(execFile);
 const inFlight = /* @__PURE__ */ new Map();
-async function pathIsGitWorkTree(path) {
+async function pathIsGitWorkTree(path, signal) {
 	try {
+		signal?.throwIfAborted();
 		const { stdout } = await execFileAsync("git", ["rev-parse", "--is-inside-work-tree"], {
 			cwd: path,
 			encoding: "utf8",
-			timeout: 15e3
+			timeout: 15e3,
+			signal
 		});
 		return stdout.trim() === "true";
 	} catch {
+		signal?.throwIfAborted();
 		return false;
 	}
 }
 const defaultDependencies = {
 	inspect: inspectStateMigration,
 	ensureWorktree: ensureStateWorktree,
-	migrate: async (projectKey, project) => {
-		const { migrateProjectState } = await import("./state-migrate-_zJJ6XKE.js");
-		await migrateProjectState(projectKey, {}, project);
+	migrate: async (projectKey, project, signal) => {
+		const { migrateProjectState } = await import("./state-migrate-BeBW0KXA.js");
+		await migrateProjectState(projectKey, { signal }, project);
 	},
 	clearCache: clearStateMigrationCache,
 	isGitWorkTree: pathIsGitWorkTree
@@ -62445,16 +62609,19 @@ function blocked(projectKey, error) {
 function worktreeBlockReason(status) {
 	return `The canonical overdeck-state worktree is ${status.status}: ${status.detail}`;
 }
-async function reconcile(projectKey, project, dependencies) {
+async function reconcile(projectKey, project, dependencies, signal) {
 	try {
-		if (!(await dependencies.inspect(project)).migrated) {
+		if (!(await dependencies.inspect(project, { signal })).migrated) {
 			const { repoPath } = resolveInfraRepo(project);
-			if (!await dependencies.isGitWorkTree(repoPath)) return blocked(projectKey, describeUnmigratableProjectPath(projectKey, project, repoPath));
-			await dependencies.migrate(projectKey, project);
+			if (!await dependencies.isGitWorkTree(repoPath, signal)) return blocked(projectKey, describeUnmigratableProjectPath(projectKey, project, repoPath));
+			await dependencies.migrate(projectKey, project, signal);
 			dependencies.clearCache();
-			if (!(await dependencies.inspect(project)).migrated) return blocked(projectKey, "Migration completed without a valid marker on origin/overdeck-state.");
+			if (!(await dependencies.inspect(project, { signal })).migrated) return blocked(projectKey, "Migration completed without a valid marker on origin/overdeck-state.");
 		}
-		const worktree = await dependencies.ensureWorktree(project, { projectKey });
+		const worktree = await dependencies.ensureWorktree(project, {
+			projectKey,
+			signal
+		});
 		if (worktree.status === "dirty" || worktree.status === "error") return blocked(projectKey, worktreeBlockReason(worktree));
 		if (worktree.status === "legacy") return blocked(projectKey, "The remote migration marker is valid but the local state worktree still resolves to the legacy project checkout.");
 		return {
@@ -62463,6 +62630,7 @@ async function reconcile(projectKey, project, dependencies) {
 			worktree: worktree.status
 		};
 	} catch (error) {
+		signal.throwIfAborted();
 		return blocked(projectKey, error);
 	}
 }
@@ -62471,12 +62639,39 @@ async function reconcile(projectKey, project, dependencies) {
 * state. Concurrent dashboard/CLI callers on this process share one attempt;
 * the migration command supplies the cross-process lock and no-loss gates.
 */
-function ensureAutomaticStateMigration(projectKey, project, dependencies = defaultDependencies) {
-	const existing = inFlight.get(projectKey);
-	if (existing) return existing;
-	const task = reconcile(projectKey, project, dependencies).finally(() => inFlight.delete(projectKey));
-	inFlight.set(projectKey, task);
-	return task;
+function ensureAutomaticStateMigration(projectKey, project, dependencies = defaultDependencies, signal) {
+	signal?.throwIfAborted();
+	let entry = inFlight.get(projectKey);
+	if (!entry) {
+		const controller = new AbortController();
+		const task = reconcile(projectKey, project, dependencies, controller.signal).finally(() => inFlight.delete(projectKey));
+		entry = {
+			controller,
+			persistentOwner: signal === void 0,
+			waiters: /* @__PURE__ */ new Map(),
+			task
+		};
+		inFlight.set(projectKey, entry);
+	} else if (!signal) entry.persistentOwner = true;
+	if (!signal) return entry.task;
+	const token = Symbol(projectKey);
+	entry.waiters.set(token, false);
+	const maybeAbortSharedMigration = () => {
+		entry?.waiters.set(token, true);
+		if (!entry?.persistentOwner && [...entry.waiters.values()].every(Boolean)) entry.controller.abort(signal.reason);
+	};
+	signal.addEventListener("abort", maybeAbortSharedMigration, { once: true });
+	if (signal.aborted) maybeAbortSharedMigration();
+	return entry.task.then((result) => {
+		signal.throwIfAborted();
+		return result;
+	}, (error) => {
+		signal.throwIfAborted();
+		throw error;
+	}).finally(() => {
+		signal.removeEventListener("abort", maybeAbortSharedMigration);
+		entry?.waiters.delete(token);
+	});
 }
 function formatAutomaticStateMigrationBlock(result) {
 	return `State migration for ${result.projectKey} is blocked: ${result.reason} Overdeck will not start pipeline work because that would write permanent state into the legacy project checkout. Resolve the stated prerequisite, then run "pan sync"; do not commit project-root .pan/ or .beads/ files.`;
@@ -62514,6 +62709,7 @@ function decideDeaconBootGate(migrations) {
 //#region main.ts
 init_issue_service_singleton();
 init_tracker_config();
+init_internal_token();
 init_review_status();
 init_event_store();
 init_activity_logger();
@@ -62575,7 +62771,7 @@ if (shouldStartStaleCheckRetriggerService()) {
 }
 if (process.env.OVERDECK_MODE === "desktop") (async () => {
 	try {
-		const { provisionClaudeHooks } = await import("./claude-hooks-provision-CS5W_dhI.js");
+		const { provisionClaudeHooks } = await import("./claude-hooks-provision-BhwWK-TQ.js");
 		const result = await provisionClaudeHooks();
 		if (!result.ok) console.warn(`[overdeck] Claude hook provisioning skipped: ${result.reason}`);
 		else if (result.changed) console.log(`[overdeck] Claude hooks provisioned: ${result.binariesSynced} scripts, registered ${result.registered.length} hook(s)${result.pruned.length ? `, pruned ${result.pruned.length} stale` : ""}`);
@@ -62893,7 +63089,7 @@ const handleShutdownSignal = async (signal) => {
 	stopRestartAnnouncer();
 	await stopDeaconChild().catch((err) => console.warn("[deacon-supervisor] child shutdown failed:", err?.message ?? err));
 	try {
-		const { killAllGateProcessGroups } = await import("./validation-CUWamZ4X.js");
+		const { killAllGateProcessGroups } = await import("./validation-DcAgXTQp.js");
 		const reaped = killAllGateProcessGroups();
 		if (reaped > 0) console.log(`[overdeck] reaped ${reaped} in-flight gate process group(s)`);
 	} catch (err) {
@@ -62948,7 +63144,7 @@ reconcileStaleGitHubBlockers().then((n) => {
 	}
 }).catch((err) => console.warn(`[overdeck] Startup blocker reconciliation failed: ${err.message}`));
 try {
-	const { resetProcessingToQueued } = await import("./merge-sync-CpGA9Kg7.js");
+	const { resetProcessingToQueued } = await import("./merge-sync-B95_4in_.js");
 	const resetCount = resetProcessingToQueued();
 	if (resetCount > 0) {
 		console.log(`[overdeck] Reset ${resetCount} stuck merge queue entries to queued`);
@@ -62970,7 +63166,7 @@ else {
 	console.log("[overdeck] Auto-merge executor started");
 }
 try {
-	const { reconcileInterruptedVerifications } = await import("./verification-runner-Dcksl_P-.js");
+	const { reconcileInterruptedVerifications } = await import("./verification-runner-DlJezzef.js");
 	const interrupted = reconcileInterruptedVerifications();
 	if (interrupted > 0) console.log(`[overdeck] recovered ${interrupted} orphaned verification worker(s)`);
 } catch (err) {