@overdeck/desktop 0.45.21 → 0.45.22

package/server/git-utils-Cc3FHDKd.js

@@ -0,0 +1,198 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { Sr as GitError, jr as init_errors, xr as FsError } from "./config-yaml-ig8Nwtiw.js";
+import { Effect } from "effect";
+import { existsSync, readdirSync, unlinkSync } from "fs";
+import { join } from "path";
+import { exec, execFile } from "child_process";
+import { promisify } from "util";
+//#region ../../lib/git-utils.ts
+/**
+* Git utilities for handling common git operations and recovery
+*/
+function killProcessTree(child) {
+	if (!child?.pid) return;
+	try {
+		if (process.platform === "win32") child.kill("SIGKILL");
+		else process.kill(-child.pid, "SIGKILL");
+	} catch {
+		try {
+			child.kill("SIGKILL");
+		} catch {}
+	}
+}
+function runProcessProbe(file, args, repoPath, options) {
+	const command = `${file} ${args.join(" ")}`;
+	if (options.signal?.aborted) return Promise.reject(new ProcessProbeTerminationError(command, "abort", options.processProbeTimeoutMs));
+	return new Promise((resolve, reject) => {
+		let child;
+		let termination;
+		const terminate = (kind) => {
+			if (termination) return;
+			termination = kind;
+			killProcessTree(child);
+		};
+		const timeout = setTimeout(() => terminate("timeout"), options.processProbeTimeoutMs);
+		const onAbort = () => terminate("abort");
+		options.signal?.addEventListener("abort", onAbort, { once: true });
+		child = execFileDetached(file, args, {
+			cwd: repoPath,
+			encoding: "utf-8",
+			detached: process.platform !== "win32"
+		}, (error, stdout, stderr) => {
+			clearTimeout(timeout);
+			options.signal?.removeEventListener("abort", onAbort);
+			if (termination) reject(Object.assign(new ProcessProbeTerminationError(command, termination, options.processProbeTimeoutMs), {
+				stdout,
+				stderr
+			}));
+			else if (error) reject(Object.assign(error, {
+				stdout,
+				stderr
+			}));
+			else resolve(stdout);
+		});
+		if (options.signal?.aborted) terminate("abort");
+	});
+}
+function probeErrorReason(command, error) {
+	if (error instanceof ProcessProbeTerminationError) return error.message;
+	return `${command} failed: ${error instanceof Error ? error.message : String(error)}`;
+}
+/** Check whether a repository has active Git processes without guessing on probe failure. */
+async function hasRunningGitProcesses(repoPath, options) {
+	const probeOptions = {
+		signal: options.signal,
+		processProbeTimeoutMs: options.processProbeTimeoutMs ?? DEFAULT_PROCESS_PROBE_TIMEOUT_MS
+	};
+	try {
+		return { status: (await runProcessProbe("fuser", [join(repoPath, ".git")], repoPath, probeOptions)).trim() ? "running" : "idle" };
+	} catch (error) {
+		const code = error?.code;
+		if (code === 1) return { status: "idle" };
+		if (code !== 127 && code !== "ENOENT") return {
+			status: "inconclusive",
+			reason: probeErrorReason("fuser", error)
+		};
+	}
+	try {
+		return { status: (await runProcessProbe("ps", ["-eo", "args="], repoPath, probeOptions)).split("\n").some((line) => line.includes("git") && line.includes(repoPath)) ? "running" : "idle" };
+	} catch (error) {
+		return {
+			status: "inconclusive",
+			reason: probeErrorReason("ps", error)
+		};
+	}
+}
+/**
+* Find all git lock files in a repository
+*/
+function findGitLockFiles(repoPath) {
+	const lockFiles = [];
+	const indexLock = join(repoPath, ".git", "index.lock");
+	if (existsSync(indexLock)) lockFiles.push(indexLock);
+	const refsDir = join(repoPath, ".git", "refs");
+	if (existsSync(refsDir)) {
+		const findLocksRecursive = (dir) => {
+			const entries = readdirSync(dir, { withFileTypes: true });
+			for (const entry of entries) {
+				const fullPath = join(dir, entry.name);
+				if (entry.isDirectory()) findLocksRecursive(fullPath);
+				else if (entry.name.endsWith(".lock")) lockFiles.push(fullPath);
+			}
+		};
+		try {
+			findLocksRecursive(refsDir);
+		} catch {}
+	}
+	return lockFiles;
+}
+async function cleanupStaleLocksPromise(repoPath, options) {
+	const result = {
+		found: [],
+		removed: [],
+		errors: []
+	};
+	const lockFiles = findGitLockFiles(repoPath);
+	result.found = lockFiles;
+	if (lockFiles.length === 0) return result;
+	const processProbe = await hasRunningGitProcesses(repoPath, options);
+	if (processProbe.status === "running") {
+		result.errors.push({
+			file: "N/A",
+			error: "Git processes are running - not safe to remove locks"
+		});
+		return result;
+	}
+	if (processProbe.status === "inconclusive") {
+		result.errors.push({
+			file: "N/A",
+			error: `Could not verify Git process state: ${processProbe.reason}`
+		});
+		return result;
+	}
+	for (const lockFile of lockFiles) try {
+		unlinkSync(lockFile);
+		result.removed.push(lockFile);
+	} catch (error) {
+		const msg = error instanceof Error ? error.message : String(error);
+		result.errors.push({
+			file: lockFile,
+			error: msg
+		});
+	}
+	return result;
+}
+async function getWorkspaceGitInfoPromise(workspacePath) {
+	try {
+		const [headResult, branchResult] = await Promise.all([execAsync("git rev-parse HEAD", { cwd: workspacePath }), execAsync("git rev-parse --abbrev-ref HEAD", { cwd: workspacePath })]);
+		return {
+			HEAD: headResult.stdout.trim(),
+			branch: branchResult.stdout.trim()
+		};
+	} catch (err) {
+		const msg = err instanceof Error ? err.message : String(err);
+		throw new Error(`getWorkspaceGitInfo failed for ${workspacePath}: ${msg}`);
+	}
+}
+async function hasStaleLocksPromise(repoPath) {
+	if (findGitLockFiles(repoPath).length === 0) return false;
+	return (await hasRunningGitProcesses(repoPath, {})).status === "idle";
+}
+var execAsync, DEFAULT_PROCESS_PROBE_TIMEOUT_MS, ProcessProbeTerminationError, execFileDetached, cleanupStaleLocks, getWorkspaceGitInfo, hasStaleLocks;
+var init_git_utils = __esmMin((() => {
+	init_errors();
+	execAsync = promisify(exec);
+	DEFAULT_PROCESS_PROBE_TIMEOUT_MS = 3e4;
+	ProcessProbeTerminationError = class extends Error {
+		constructor(command, kind, budgetMs) {
+			super(kind === "abort" ? `${command} was cancelled` : `${command} timed out after ${budgetMs / 1e3}s`);
+			this.command = command;
+			this.kind = kind;
+			this.budgetMs = budgetMs;
+			this.name = "ProcessProbeTerminationError";
+		}
+	};
+	execFileDetached = execFile;
+	cleanupStaleLocks = (repoPath, options = {}) => Effect.tryPromise({
+		try: () => cleanupStaleLocksPromise(repoPath, options),
+		catch: (cause) => new FsError({
+			path: repoPath,
+			operation: "cleanupStaleLocks",
+			cause
+		})
+	});
+	getWorkspaceGitInfo = (workspacePath) => Effect.tryPromise({
+		try: () => getWorkspaceGitInfoPromise(workspacePath),
+		catch: (cause) => new GitError({
+			command: ["rev-parse", "HEAD"],
+			stderr: cause instanceof Error ? cause.message : String(cause),
+			exitCode: -1,
+			cause
+		})
+	});
+	hasStaleLocks = (repoPath) => Effect.promise(() => hasStaleLocksPromise(repoPath));
+}));
+//#endregion
+export { init_git_utils as i, getWorkspaceGitInfo as n, hasStaleLocks as r, cleanupStaleLocks as t };
+
+//# sourceMappingURL=git-utils-Cc3FHDKd.js.map

package/server/{git-utils-DmF5xkj8.js → git-utils-CsKGnzFA.js}

@@ -1,3 +1,3 @@
-import { i as init_git_utils, n as getWorkspaceGitInfo, r as hasStaleLocks, t as cleanupStaleLocks } from "./git-utils-Bkxzr1Xf.js";
+import { i as init_git_utils, n as getWorkspaceGitInfo, r as hasStaleLocks, t as cleanupStaleLocks } from "./git-utils-Cc3FHDKd.js";
 init_git_utils();
 export { cleanupStaleLocks, getWorkspaceGitInfo, hasStaleLocks };

package/server/{github-app-B3yfECo8.js → github-app-CDPtGF7J.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Or as init_errors, _r as ConfigError, br as GitHubApiError, vr as FsError } from "./config-yaml-Ciyp2mYe.js";
+import { Cr as GitHubApiError, br as ConfigError, jr as init_errors, xr as FsError } from "./config-yaml-ig8Nwtiw.js";
 import { Effect } from "effect";
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
@@ -645,4 +645,4 @@ var init_github_app = __esmMin((() => {
 //#endregion
 export { withConcurrencyLimit as A, postOverdeckTestsStatus as C, createPromiseConcurrencyLimiter as D, verifyAppCanMerge as E, createSettledTtlPromiseCache as O, parsePullRequestRef as S, reportCommitStatus as T, listOpenIssuesWithLabelsPromise as _, getCiCheckRunsState as a, loadGitHubAppConfig as b, getIssueStatePromise as c, getPullRequestState as d, init_github_app as f, listOpenIssuesWithLabels as g, listIssuesWithAnyLabelPromise as h, getBotIdentity as i, withConcurrencyLimitPromise as j, init_concurrency as k, getMergeBackendStatus as l, isIntegrationPermissionError as m, generateInstallationToken as n, getCiCheckRunsStatePromise as o, isGitHubAppConfigured as p, getAppStatus as r, getIssueState as s, configureWorkspaceForBot as t, getPullRequestHeadState as u, listPullRequestsForHead as v, refreshWorkspaceToken as w, mergePullRequestWithApp as x, listPullRequestsForHeadPromise as y };
 
-//# sourceMappingURL=github-app-B3yfECo8.js.map
+//# sourceMappingURL=github-app-CDPtGF7J.js.map

package/server/{github-app-CeSVFL6C.js → github-app-CU14oYzP.js}

@@ -1,3 +1,3 @@
-import { C as postOverdeckTestsStatus, E as verifyAppCanMerge, S as parsePullRequestRef, T as reportCommitStatus, _ as listOpenIssuesWithLabelsPromise, a as getCiCheckRunsState, b as loadGitHubAppConfig, c as getIssueStatePromise, d as getPullRequestState, f as init_github_app, g as listOpenIssuesWithLabels, h as listIssuesWithAnyLabelPromise, i as getBotIdentity, l as getMergeBackendStatus, m as isIntegrationPermissionError, n as generateInstallationToken, o as getCiCheckRunsStatePromise, p as isGitHubAppConfigured, r as getAppStatus, s as getIssueState, t as configureWorkspaceForBot, u as getPullRequestHeadState, v as listPullRequestsForHead, w as refreshWorkspaceToken, x as mergePullRequestWithApp, y as listPullRequestsForHeadPromise } from "./github-app-B3yfECo8.js";
+import { C as postOverdeckTestsStatus, E as verifyAppCanMerge, S as parsePullRequestRef, T as reportCommitStatus, _ as listOpenIssuesWithLabelsPromise, a as getCiCheckRunsState, b as loadGitHubAppConfig, c as getIssueStatePromise, d as getPullRequestState, f as init_github_app, g as listOpenIssuesWithLabels, h as listIssuesWithAnyLabelPromise, i as getBotIdentity, l as getMergeBackendStatus, m as isIntegrationPermissionError, n as generateInstallationToken, o as getCiCheckRunsStatePromise, p as isGitHubAppConfigured, r as getAppStatus, s as getIssueState, t as configureWorkspaceForBot, u as getPullRequestHeadState, v as listPullRequestsForHead, w as refreshWorkspaceToken, x as mergePullRequestWithApp, y as listPullRequestsForHeadPromise } from "./github-app-CDPtGF7J.js";
 init_github_app();
 export { configureWorkspaceForBot, generateInstallationToken, getAppStatus, getBotIdentity, getCiCheckRunsState, getCiCheckRunsStatePromise, getIssueState, getIssueStatePromise, getMergeBackendStatus, getPullRequestHeadState, getPullRequestState, isGitHubAppConfigured, isIntegrationPermissionError, listIssuesWithAnyLabelPromise, listOpenIssuesWithLabels, listOpenIssuesWithLabelsPromise, listPullRequestsForHead, listPullRequestsForHeadPromise, loadGitHubAppConfig, mergePullRequestWithApp, parsePullRequestRef, postOverdeckTestsStatus, refreshWorkspaceToken, reportCommitStatus, verifyAppCanMerge };

package/server/{github-client-4A6FgA8O.js → github-client-CwBZZ3t7.js}

@@ -1,3 +1,3 @@
-import { i as init_github_client, n as GitHubClientLive, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-Dslipypz.js";
+import { i as init_github_client, n as GitHubClientLive, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-XjTJbBm7.js";
 init_github_client();
 export { GitHubClient, GitHubClientLive, GitHubClientOptionalLive };

package/server/{github-client-Dslipypz.js → github-client-XjTJbBm7.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-DSFZBdXP.js";
+import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-DdT-nUAM.js";
 import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, r as IssueNotFound, s as TrackerApiError } from "./typed-errors-2BTMxkZq.js";
 import { Context, Effect, Layer } from "effect";
 //#region services/github-client.ts
@@ -241,4 +241,4 @@ var init_github_client = __esmMin((() => {
 //#endregion
 export { init_github_client as i, GitHubClientLive as n, GitHubClientOptionalLive as r, GitHubClient as t };
 
-//# sourceMappingURL=github-client-Dslipypz.js.map
+//# sourceMappingURL=github-client-XjTJbBm7.js.map

package/server/{github-pr-lookup-DBP0YHMr.js → github-pr-lookup-CFGeVhqv.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-B3yfECo8.js";
+import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CDPtGF7J.js";
 import { Effect } from "effect";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -41,4 +41,4 @@ var init_github_pr_lookup = __esmMin((() => {
 //#endregion
 export { init_github_pr_lookup as n, lookupPullRequestNumberForBranch as r, githubPrLookupSource as t };
 
-//# sourceMappingURL=github-pr-lookup-DBP0YHMr.js.map
+//# sourceMappingURL=github-pr-lookup-CFGeVhqv.js.map

package/server/harness-binary-B2CTcD84.js

@@ -0,0 +1,106 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
+import { homedir } from "node:os";
+import { constants } from "node:fs";
+import { access } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+//#region ../../lib/harness-binary.ts
+async function firstExecutable(directories, binary, accessExecutable) {
+	const seen = /* @__PURE__ */ new Set();
+	for (const directory of directories) {
+		if (!directory) continue;
+		const candidate = join(directory, binary);
+		if (seen.has(candidate)) continue;
+		seen.add(candidate);
+		try {
+			await accessExecutable(candidate);
+			return candidate;
+		} catch {}
+	}
+	return null;
+}
+/** Resolve an executable to an absolute, executable path outside the server's inherited PATH alone. */
+async function resolveExecutable(binary, options = {}) {
+	if (!SAFE_BINARY_NAME.test(binary)) throw new Error(`Invalid executable name: ${binary}`);
+	const cwd = options.cwd ?? process.cwd();
+	const home = resolve(cwd, options.home ?? homedir());
+	const pathValue = options.pathValue ?? process.env["PATH"] ?? "";
+	const accessExecutable = options.accessExecutable ?? ((path) => access(path, constants.X_OK));
+	const runCommand = options.runCommand ?? defaultRunCommand;
+	const pathMatch = await firstExecutable(pathValue.split(delimiter).filter(Boolean).map((directory) => isAbsolute(directory) ? directory : resolve(cwd, directory)), binary, accessExecutable);
+	if (pathMatch) return pathMatch;
+	const fixedMatch = await firstExecutable([
+		join(home, ".local", "bin"),
+		join(home, ".claude", "local"),
+		join(home, ".npm-global", "bin")
+	], binary, accessExecutable);
+	if (fixedMatch) return fixedMatch;
+	try {
+		const npmPrefix = (await runCommand("npm", ["prefix", "-g"])).trim().split("\n")[0]?.trim();
+		if (npmPrefix) {
+			const npmMatch = await firstExecutable([join(resolve(cwd, npmPrefix), "bin")], binary, accessExecutable);
+			if (npmMatch) return npmMatch;
+		}
+	} catch {}
+	const bunMatch = await firstExecutable([join(home, ".bun", "bin")], binary, accessExecutable);
+	if (bunMatch) return bunMatch;
+	if (options.allowLoginShell !== false) {
+		const shell = options.shell ?? process.env["SHELL"];
+		if (shell) try {
+			const shellResult = (await runCommand(shell, ["-lc", `command -v ${binary}`])).trim().split("\n")[0]?.trim();
+			if (shellResult && isAbsolute(shellResult)) {
+				await accessExecutable(shellResult);
+				return shellResult;
+			}
+		} catch {}
+	}
+	return null;
+}
+function harnessBinaryName(harness) {
+	return HARNESS_BINARY_BY_RUNTIME[harness];
+}
+async function resolveHarnessBinary(harness, options) {
+	return resolveExecutable(harnessBinaryName(harness), options);
+}
+async function requireHarnessBinary(harness, options) {
+	const binary = harnessBinaryName(harness);
+	const resolved = await resolveExecutable(binary, options);
+	if (resolved) return resolved;
+	const harnessName = harness === "claude-code" ? "Claude Code" : harness === "ohmypi" ? "OhMyPi" : "Codex CLI";
+	throw new Error(`${harnessName} executable "${binary}" was not found. Install ${harnessName} or add its installation directory to PATH, then restart Overdeck. No terminal session was created.`);
+}
+function shellQuote(value) {
+	return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+function harnessPathExport(resolvedBinary) {
+	return `export PATH=${shellQuote(dirname(resolvedBinary))}:"$PATH"`;
+}
+async function prepareHarnessLaunch(harness, options) {
+	const binaryPath = await requireHarnessBinary(harness, options);
+	return {
+		binaryPath,
+		pathExport: harnessPathExport(binaryPath)
+	};
+}
+var execFileAsync, SAFE_BINARY_NAME, HARNESS_BINARY_BY_RUNTIME, defaultRunCommand;
+var init_harness_binary = __esmMin((() => {
+	execFileAsync = promisify(execFile);
+	SAFE_BINARY_NAME = /^[A-Za-z0-9._+-]+$/;
+	HARNESS_BINARY_BY_RUNTIME = {
+		"claude-code": "claude",
+		ohmypi: "omp",
+		codex: "codex"
+	};
+	defaultRunCommand = async (command, args) => {
+		const { stdout } = await execFileAsync(command, args, {
+			encoding: "utf-8",
+			timeout: 1e4
+		});
+		return stdout;
+	};
+}));
+//#endregion
+export { resolveHarnessBinary as a, resolveExecutable as i, init_harness_binary as n, prepareHarnessLaunch as r, harnessBinaryName as t };
+
+//# sourceMappingURL=harness-binary-B2CTcD84.js.map

package/server/{harness-resolve-BGpO-OVM.js → harness-resolve-D5FVQTmy.js}

@@ -1,18 +1,16 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { A as init_harness_policy, B as init_providers, I as getBuiltInDefaultHarness, O as canUseHarnessSync, f as loadConfigSync, k as canUseModelWithAuthSync, t as init_config_yaml, z as getProviderForModelSync } from "./config-yaml-Ciyp2mYe.js";
-import { exec } from "child_process";
-import { promisify } from "util";
+import { A as canUseHarnessSync, H as init_providers, M as init_harness_policy, R as getBuiltInDefaultHarness, V as getProviderForModelSync, f as loadConfigSync, j as canUseModelWithAuthSync, t as init_config_yaml } from "./config-yaml-ig8Nwtiw.js";
+import { a as resolveHarnessBinary, n as init_harness_binary, t as harnessBinaryName } from "./harness-binary-B2CTcD84.js";
 //#region ../../lib/harness-resolve.ts
 async function getProviderAuthModeForModel(model) {
-	const { getProviderAuthMode } = await import("./agents-Czz6R57Z.js");
+	const { getProviderAuthMode } = await import("./agents-DyHKlq1I.js");
 	return getProviderAuthMode(model);
 }
 async function hasHarnessBinary(harness) {
-	const binary = BINARY_BY_HARNESS[harness];
-	if (!binary) return true;
+	if (harness === "claude-code") return true;
 	const cached = harnessAvailabilityCache.get(harness);
 	if (cached) return cached;
-	const check = execAsync(`command -v ${binary}`).then(() => true, () => false);
+	const check = resolveHarnessBinary(harness).then((resolved) => resolved !== null);
 	harnessAvailabilityCache.set(harness, check);
 	return check;
 }
@@ -40,23 +38,19 @@ async function resolveHarness(input) {
 		return "claude-code";
 	}
 	if (!await hasHarnessBinary(winner)) {
-		const binary = BINARY_BY_HARNESS[winner];
+		const binary = harnessBinaryName(winner);
 		if (builtInHarness && builtInHarness !== "claude-code") throw new HarnessResolutionError(`Harness ${winner} (provider default for ${input.model}) has no installed ${binary} binary at spawn — refusing to silently fall back to claude-code. Install ${binary} (check its PATH) and retry.`);
 		console.warn(`harness ${winner} requested for ${provider}, but ${binary} is not installed — falling back to native claude-code`);
 		return "claude-code";
 	}
 	return winner;
 }
-var execAsync, BINARY_BY_HARNESS, harnessAvailabilityCache, builtInDefaultNoticeProviders, HarnessResolutionError;
+var harnessAvailabilityCache, builtInDefaultNoticeProviders, HarnessResolutionError;
 var init_harness_resolve = __esmMin((() => {
 	init_harness_policy();
+	init_harness_binary();
 	init_providers();
 	init_config_yaml();
-	execAsync = promisify(exec);
-	BINARY_BY_HARNESS = {
-		ohmypi: "omp",
-		codex: "codex"
-	};
 	harnessAvailabilityCache = /* @__PURE__ */ new Map();
 	builtInDefaultNoticeProviders = /* @__PURE__ */ new Set();
 	HarnessResolutionError = class extends Error {
@@ -69,4 +63,4 @@ var init_harness_resolve = __esmMin((() => {
 //#endregion
 export { resolveHarness as n, init_harness_resolve as t };
 
-//# sourceMappingURL=harness-resolve-BGpO-OVM.js.map
+//# sourceMappingURL=harness-resolve-D5FVQTmy.js.map

package/server/{health-events-CnwV_SSz.js → health-events-C1whmd58.js}

@@ -1,2 +1,2 @@
-import { n as getLatestHealthEvent, r as writeHealthEvent, t as getHealthHistory } from "./health-events-CZGZ5I-A.js";
+import { n as getLatestHealthEvent, r as writeHealthEvent, t as getHealthHistory } from "./health-events-DREeevle.js";
 export { getHealthHistory, getLatestHealthEvent, writeHealthEvent };

package/server/{health-events-CZGZ5I-A.js → health-events-DREeevle.js}

@@ -1,4 +1,4 @@
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-DN2wSxle.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-D4iNWMA5.js";
 //#region ../../lib/overdeck/health-events.ts
 init_infra();
 function parseMetadata(row) {
@@ -66,4 +66,4 @@ function getHealthHistory(agentId, startTime, endTime) {
 //#endregion
 export { getLatestHealthEvent as n, writeHealthEvent as r, getHealthHistory as t };
 
-//# sourceMappingURL=health-events-CZGZ5I-A.js.map
+//# sourceMappingURL=health-events-DREeevle.js.map

package/server/{hooks-DvX33gY_.js → hooks-B-HItBiS.js}

@@ -1,3 +1,3 @@
-import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-CoNscX84.js";
+import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-yxRsjk-z.js";
 init_hooks();
 export { checkHook, checkHookSync, clearHook, clearHookSync, collectMail, collectMailSync, generateFixedPointPrompt, generateFixedPointPromptSync, getHook, getHookSync, initHook, initHookSync, popFromHook, popFromHookSync, pushToHook, pushToHookSync, reorderHookItems, reorderHookItemsSync, sendMail, sendMailSync };

package/server/{hooks-CoNscX84.js → hooks-yxRsjk-z.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Or as init_errors, kr as AGENTS_DIR, ti as init_paths, vr as FsError } from "./config-yaml-Ciyp2mYe.js";
+import { Mr as AGENTS_DIR, ii as init_paths, jr as init_errors, xr as FsError } from "./config-yaml-ig8Nwtiw.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -294,4 +294,4 @@ var init_hooks = __esmMin((() => {
 //#endregion
 export { pushToHookSync as _, collectMail as a, sendMail as b, generateFixedPointPromptSync as c, initHook as d, initHookSync as f, pushToHook as g, popFromHookSync as h, clearHookSync as i, getHook as l, popFromHook as m, checkHookSync as n, collectMailSync as o, init_hooks as p, clearHook as r, generateFixedPointPrompt as s, checkHook as t, getHookSync as u, reorderHookItems as v, sendMailSync as x, reorderHookItemsSync as y };
 
-//# sourceMappingURL=hooks-CoNscX84.js.map
+//# sourceMappingURL=hooks-yxRsjk-z.js.map

package/server/hume-BmhvfVbV.js

@@ -0,0 +1,3 @@
+import { i as init_hume, r as deleteHumeConfig } from "./hume-Dz_OymXE.js";
+init_hume();
+export { deleteHumeConfig };

package/server/{hume-DSJt5eA_.js → hume-Dz_OymXE.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-BAAsAv-o.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-Bigl_-Lk.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/hume.ts
 /**
@@ -189,4 +189,4 @@ var init_hume = __esmMin((() => {
 //#endregion
 export { init_hume as i, createHumeConfig as n, deleteHumeConfig as r, HumeApiError as t };
 
-//# sourceMappingURL=hume-DSJt5eA_.js.map
+//# sourceMappingURL=hume-Dz_OymXE.js.map

package/server/{idle-stack-reaper-5DVRoY6P.js → idle-stack-reaper-DrCv0OAG.js}

@@ -1,2 +1,2 @@
-import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-BfL8HqYy.js";
+import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-Yf34xXxY.js";
 export { handleAgentLifecycleEventForIdleStack };

package/server/{idle-stack-reaper-BfL8HqYy.js → idle-stack-reaper-Yf34xXxY.js}

@@ -1,5 +1,5 @@
 import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { j as listSessionNames, w as init_tmux } from "./tmux-y1blSxks.js";
+import { j as listSessionNames, w as init_tmux } from "./tmux-L5LgvGLp.js";
 import { Effect } from "effect";
 import { exec } from "child_process";
 import { promisify } from "util";
@@ -132,4 +132,4 @@ async function reconcileIdleWorkspaceStacks(deps = {}) {
 //#endregion
 export { reconcileIdleWorkspaceStacks as n, handleAgentLifecycleEventForIdleStack as t };
 
-//# sourceMappingURL=idle-stack-reaper-BfL8HqYy.js.map
+//# sourceMappingURL=idle-stack-reaper-Yf34xXxY.js.map

package/server/{in-flight-guard-tVGiI5ee.js → in-flight-guard-BoWm66Kh.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { w as init_tmux } from "./tmux-y1blSxks.js";
+import { w as init_tmux } from "./tmux-L5LgvGLp.js";
 import "effect";
 import "fs";
 import "path";
@@ -95,4 +95,4 @@ var init_in_flight_guard = __esmMin((() => {}));
 //#endregion
 export { init_review_convoy_liveness as a, init_review_monitor as c, evaluateReviewConvoyLiveness as i, createPromiseCoalescer as n, reviewTimestampMs as o, init_in_flight_guard as r, REVIEW_SUB_ROLES as s, createInFlightGuard as t };
 
-//# sourceMappingURL=in-flight-guard-tVGiI5ee.js.map
+//# sourceMappingURL=in-flight-guard-BoWm66Kh.js.map

package/server/{infra-DN2wSxle.js → infra-D4iNWMA5.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { At as init_record, Et as getIssueRecordPath, Ft as readIssueRecordSync, ei as getOverdeckHome, ri as packageRoot, ti as init_paths$1 } from "./config-yaml-Ciyp2mYe.js";
+import { Nt as init_record, Rt as readIssueRecordSync, ii as init_paths$1, kt as getIssueRecordPath, oi as packageRoot, ri as getOverdeckHome } from "./config-yaml-ig8Nwtiw.js";
 import { n as openDatabase, t as init_driver$1 } from "./driver-CKVGi51s.js";
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-RviRDSNs.js";
-import { D as killSession, V as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-y1blSxks.js";
+import { n as updateIssueRecord, t as init_record_update } from "./record-update-Crz74r-6.js";
+import { D as killSession, V as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-L5LgvGLp.js";
 import { dirname, isAbsolute, join } from "node:path";
 import { Context, Effect, Layer, Queue, Stream } from "effect";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -5093,4 +5093,4 @@ var init_infra = __esmMin((() => {
 //#endregion
 export { init_paths as A, inArray as C, sql as D, like as E, OVERDECK_MIGRATION_PATH as O, gte as S, isNull as T, integer as _, EventBus as a, and as b, Records as c, getOverdeckDatabaseSync as d, init_infra as f, real as g, text as h, DbLive as i, getOverdeckDatabasePath as k, Tmux as l, sqliteTable as m, CostArchiveLive as n, EventBusLive as o, init_sqlite_core as p, Db as r, Forge as s, CostArchive as t, TmuxLive as u, init_drizzle_orm as v, isNotNull as w, eq as x, desc as y };
 
-//# sourceMappingURL=infra-DN2wSxle.js.map
+//# sourceMappingURL=infra-D4iNWMA5.js.map

package/server/{injection-DK9zh_HL.js → injection-BVNa4MQW.js}

@@ -1,3 +1,3 @@
-import { n as init_injection, r as injectPromptTimeMemory } from "./injection-DtlT8Akv.js";
+import { n as init_injection, r as injectPromptTimeMemory } from "./injection-D7T75Pye.js";
 init_injection();
 export { injectPromptTimeMemory };

package/server/{injection-DtlT8Akv.js → injection-D7T75Pye.js}

@@ -1,10 +1,10 @@
 import { n as __esmMin, o as __toESM } from "./rolldown-runtime-DNCzzKnI.js";
-import { $n as resolveProjectFromIssueSync, Gn as loadProjectsConfigSync, mr as require_dist, zn as init_projects } from "./config-yaml-Ciyp2mYe.js";
-import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-FP8v3lTz.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features--fOza5g5.js";
-import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-DP2OYLXL.js";
-import { n as extractWithProviderPolicy, t as init_providers } from "./providers-d3pwXGVE.js";
-import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-6ponMie2.js";
+import { Hn as init_projects, Jn as loadProjectsConfigSync, _r as require_dist, nr as resolveProjectFromIssueSync } from "./config-yaml-ig8Nwtiw.js";
+import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-DooHpt9p.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-Bc-Bmiye.js";
+import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-BNbocWOg.js";
+import { n as extractWithProviderPolicy, t as init_providers } from "./providers-BDDPULlp.js";
+import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-DmAcuCkV.js";
 import { Result, Schema } from "effect";
 import { extname, isAbsolute, join, relative, resolve } from "path";
 import { createHash, randomUUID } from "crypto";
@@ -815,4 +815,4 @@ var init_injection = __esmMin((() => {
 //#endregion
 export { init_query_expansion as a, clearQueryExpansionCache as i, init_injection as n, buildMatchQuery as o, injectPromptTimeMemory as r, init_search as s, PROMPT_TIME_MEMORY_BUDGETS as t };
 
-//# sourceMappingURL=injection-DtlT8Akv.js.map
+//# sourceMappingURL=injection-D7T75Pye.js.map

package/server/{inspect-agent-DKByUS_F.js → inspect-agent-BXCgNeZ4.js}

@@ -1,11 +1,12 @@
-import { B as init_providers, C as init_tier_table, F as clearCredentialFileAuthSync, Or as init_errors, Q as resolveModel, T as resolveTieredExecutionEnabled, U as setupCredentialFileAuthSync, f as loadConfigSync, t as init_config_yaml, wr as ProcessSpawnError, yr as GitError, z as getProviderForModelSync } from "./config-yaml-Ciyp2mYe.js";
-import { D as killSession, V as sessionExists, s as createSession, w as init_tmux } from "./tmux-y1blSxks.js";
-import { c as init_review_status, y as setReviewStatusSync } from "./review-status-CCgPVK1h.js";
-import { Wn as saveAgentState, _ as spawnTierSupervisor, fr as saveAgentRuntimeState, h as loadPrdDraft, m as init_tier_supervisor, on as getProviderEnvForModel, p as deliverCommitForReview, s as init_agents, v as supervisorAgentId } from "./queries-B5hl7lMQ.js";
-import { m as readWorkspacePlanSync, o as init_io } from "./io-BiM-7Zsx.js";
-import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-5DJRiovn.js";
-import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-C2OrLYKL.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-Dfw3QDyZ.js";
+import { D as resolveTieredExecutionEnabled, Dr as ProcessSpawnError, G as setupCredentialFileAuthSync, H as init_providers, L as clearCredentialFileAuthSync, Sr as GitError, T as init_tier_table, V as getProviderForModelSync, f as loadConfigSync, jr as init_errors, t as init_config_yaml, tt as resolveModel } from "./config-yaml-ig8Nwtiw.js";
+import { D as killSession, V as sessionExists, s as createSession, w as init_tmux } from "./tmux-L5LgvGLp.js";
+import { c as init_review_status, y as setReviewStatusSync } from "./review-status-DFRjDFef.js";
+import { Wn as saveAgentState, _ as spawnTierSupervisor, fr as saveAgentRuntimeState, h as loadPrdDraft, m as init_tier_supervisor, on as getProviderEnvForModel, p as deliverCommitForReview, s as init_agents, v as supervisorAgentId } from "./queries-ZABd5aXP.js";
+import { m as readWorkspacePlanSync, o as init_io } from "./io-DQR9PMgS.js";
+import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-COgR2By1.js";
+import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-nSFKH78M.js";
+import { n as init_harness_binary, r as prepareHarnessLaunch } from "./harness-binary-B2CTcD84.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-DtmJM0D0.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
@@ -146,6 +147,7 @@ function getCurrentHead(workspacePath) {
 */
 init_errors();
 init_review_status();
+init_harness_binary();
 init_launcher_generator();
 init_tmux();
 init_config_yaml();
@@ -220,6 +222,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 		}
 		const supervisorRoute = await routeInspectToStandingSupervisorIfEnabled(context);
 		if (supervisorRoute) return supervisorRoute;
+		const harnessLaunch = await prepareHarnessLaunch("claude-code");
 		if (await Effect.runPromise(sessionExists(tmuxSession))) await Effect.runPromise(killSession(tmuxSession)).catch(() => {});
 		const prompt = await Effect.runPromise(buildInspectPrompt(context));
 		setReviewStatusSync(context.issueId.toUpperCase(), {
@@ -246,6 +249,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 			workingDir: context.workspace,
 			setTerminalEnv: true,
 			unsetProviderEnv: true,
+			extraEnvExports: [harnessLaunch.pathExport],
 			providerExports: Object.entries(providerEnv).map(([k, v]) => `export ${k}='${v.replace(/'/g, "'\"'\"'")}'`).join("\n") + (Object.keys(providerEnv).length ? "\n" : ""),
 			overdeckEnv: {
 				agentId: tmuxSession,
@@ -337,4 +341,4 @@ function onInspectComplete(projectKey, issueId, itemId, status, workspacePath) {
 //#endregion
 export { onInspectComplete as n, spawnInspectAgent as r, buildInspectPrompt as t };
 
-//# sourceMappingURL=inspect-agent-DKByUS_F.js.map
+//# sourceMappingURL=inspect-agent-BXCgNeZ4.js.map

package/server/inspect-agent-Dq0z1k3H.js

@@ -0,0 +1,2 @@
+import { n as onInspectComplete } from "./inspect-agent-BXCgNeZ4.js";
+export { onInspectComplete };

package/server/{internal-token-7bYL5v6K.js → internal-token-C9DdEOKY.js}

@@ -1,3 +1,3 @@
-import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DhfFiwW7.js";
+import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-CXsfxslp.js";
 init_internal_token();
 export { INTERNAL_TOKEN_HEADER, _resetInternalTokenCacheForTests, ensureInternalToken, ensureInternalTokenSync, getInternalToken, getInternalTokenSync };