@overdeck/desktop 0.45.21 → 0.45.23

package/server/{rally-Dp0Gb1DN.js → rally-B708-nZn.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Er as TrackerError, Or as init_errors } from "./config-yaml-Ciyp2mYe.js";
-import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-DGaFz5L5.js";
+import { fr as TrackerError, mr as init_errors } from "./config-yaml-DvyMuOle.js";
+import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-nY0ZANw3.js";
 import { Effect } from "effect";
 //#region ../../lib/tracker/rally.ts
 /**
@@ -504,4 +504,4 @@ var init_rally = __esmMin((() => {
 //#endregion
 export { init_rally as n, RallyTracker as t };
 
-//# sourceMappingURL=rally-Dp0Gb1DN.js.map
+//# sourceMappingURL=rally-B708-nZn.js.map

package/server/{rally-api-DGaFz5L5.js → rally-api-nY0ZANw3.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Er as TrackerError, Or as init_errors } from "./config-yaml-Ciyp2mYe.js";
+import { fr as TrackerError, mr as init_errors } from "./config-yaml-DvyMuOle.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/tracker/interface.ts
 /**
@@ -162,4 +162,4 @@ var init_rally_api = __esmMin((() => {
 //#endregion
 export { TrackerAuthError as a, NotImplementedError as i, init_rally_api as n, init_interface as o, IssueNotFoundError as r, RallyRestApi as t };
 
-//# sourceMappingURL=rally-api-DGaFz5L5.js.map
+//# sourceMappingURL=rally-api-nY0ZANw3.js.map

package/server/{rally-api-CKr0O4DJ.js → rally-api-yjQ0TfHd.js}

@@ -1,3 +1,3 @@
-import { n as init_rally_api, t as RallyRestApi } from "./rally-api-DGaFz5L5.js";
+import { n as init_rally_api, t as RallyRestApi } from "./rally-api-nY0ZANw3.js";
 init_rally_api();
 export { RallyRestApi };

package/server/{rally-client-SVbjGvqj.js → rally-client-B1EJhfV0.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-DSFZBdXP.js";
+import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-B4itFzDo.js";
 import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, r as IssueNotFound, s as TrackerApiError } from "./typed-errors-2BTMxkZq.js";
 import { Context, Effect, Layer } from "effect";
 //#region services/rally-client.ts
@@ -46,7 +46,7 @@ function makeRallyClientImpl(config) {
 	let tracker = null;
 	async function getTracker() {
 		if (!tracker) {
-			const { RallyTracker } = await import("./rally-DGimSRBQ.js");
+			const { RallyTracker } = await import("./rally-njs_mJrt.js");
 			tracker = new RallyTracker({
 				apiKey: config.apiKey,
 				server: config.server,
@@ -106,7 +106,7 @@ var init_rally_client = __esmMin((() => {
 	RallyClientLive = Layer.effect(RallyClient, Effect.gen(function* () {
 		const config = getRallyConfig();
 		if (!config) return yield* Effect.fail(new TrackerNotConfigured({ tracker: "rally" }));
-		const { RallyTracker } = yield* Effect.promise(() => import("./rally-DGimSRBQ.js"));
+		const { RallyTracker } = yield* Effect.promise(() => import("./rally-njs_mJrt.js"));
 		const tracker = new RallyTracker({
 			apiKey: config.apiKey,
 			server: config.server,
@@ -158,4 +158,4 @@ var init_rally_client = __esmMin((() => {
 //#endregion
 export { init_rally_client as i, RallyClientLive as n, RallyClientOptionalLive as r, RallyClient as t };
 
-//# sourceMappingURL=rally-client-SVbjGvqj.js.map
+//# sourceMappingURL=rally-client-B1EJhfV0.js.map

package/server/{rally-client-Cqf6EX_r.js → rally-client-CULK2XAY.js}

@@ -1,3 +1,3 @@
-import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-SVbjGvqj.js";
+import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-B1EJhfV0.js";
 init_rally_client();
 export { RallyClient, RallyClientLive, RallyClientOptionalLive };

package/server/rally-njs_mJrt.js

@@ -0,0 +1,3 @@
+import { n as init_rally, t as RallyTracker } from "./rally-B708-nZn.js";
+init_rally();
+export { RallyTracker };

package/server/reap-terminal-sessions-MWnqdLCJ.js

@@ -0,0 +1,4 @@
+import { r as isRoleTerminal } from "./review-status-source-CxuEjLGg.js";
+import { i as selectAwaitingTestWorkSessions, o as selectMergedWorkSessions, s as selectNonMergedTerminalAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-N3BTkmX_.js";
+init_reap_terminal_sessions();
+export { isRoleTerminal, selectAwaitingTestWorkSessions, selectMergedWorkSessions, selectNonMergedTerminalAdvancingSessions };

package/server/{reap-terminal-sessions-CjqRAGw7.js → reap-terminal-sessions-N3BTkmX_.js}

@@ -1,4 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { n as init_review_status_source, r as isRoleTerminal, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CxuEjLGg.js";
 //#region ../../lib/cloister/reap-terminal-sessions.ts
 /**
 * Of the alive sessions, the ones belonging to `issueId`'s advancing `role`.
@@ -17,18 +18,6 @@ function sessionsToReapForRole(issueId, role, aliveSessions) {
 	});
 }
 /**
-* Whether an advancing role's phase verdict is terminal — the session can be reaped.
-* Ship is terminal once it has pushed (readyForMerge) or the merge itself resolved;
-* the merge is a separate server-side flow, not the ship tmux session's job.
-*/
-function isRoleTerminal(role, status) {
-	switch (role) {
-		case "review": return TERMINAL_REVIEW.has(status.reviewStatus ?? "");
-		case "test": return TERMINAL_TEST.has(status.testStatus ?? "");
-		case "ship": return status.readyForMerge === true || status.mergeStatus === "merged" || status.mergeStatus === "failed";
-	}
-}
-/**
 * Whether an issue's WORK session is safe to reap (PAN-1726).
 *
 * Once the issue has merged, its work agent (`agent-<id>`) has no remaining
@@ -65,13 +54,13 @@ function selectMergedWorkSessions(statuses, aliveSessions) {
 */
 function selectMergedAdvancingSessions(statuses, aliveSessions) {
 	const kill = /* @__PURE__ */ new Set();
-	for (const [issueId, status] of Object.entries(statuses)) {
-		if (status.mergeStatus !== "merged") continue;
-		for (const role of [
-			"review",
-			"test",
-			"ship"
-		]) for (const session of sessionsToReapForRole(issueId, role, aliveSessions)) kill.add(session);
+	for (const [issueId, status] of Object.entries(statuses)) for (const role of [
+		"review",
+		"test",
+		"ship"
+	]) {
+		if (classifyAdvancingSessionLifecycle(role, status, true) !== "orphaned") continue;
+		for (const session of sessionsToReapForRole(issueId, role, aliveSessions)) kill.add(session);
 	}
 	return [...kill];
 }
@@ -133,16 +122,10 @@ function selectAwaitingTestWorkSessions(statuses, aliveSessions) {
 	}
 	return candidates;
 }
-var TERMINAL_REVIEW, TERMINAL_TEST;
 var init_reap_terminal_sessions = __esmMin((() => {
-	TERMINAL_REVIEW = new Set([
-		"passed",
-		"failed",
-		"blocked"
-	]);
-	TERMINAL_TEST = new Set(["passed", "failed"]);
+	init_review_status_source();
 }));
 //#endregion
-export { selectAwaitingTestWorkSessions as a, selectNonMergedTerminalAdvancingSessions as c, isWorkReapable as i, sessionsToReapForRole as l, isAwaitingTestReapable as n, selectMergedAdvancingSessions as o, isRoleTerminal as r, selectMergedWorkSessions as s, init_reap_terminal_sessions as t };
+export { selectMergedAdvancingSessions as a, sessionsToReapForRole as c, selectAwaitingTestWorkSessions as i, isAwaitingTestReapable as n, selectMergedWorkSessions as o, isWorkReapable as r, selectNonMergedTerminalAdvancingSessions as s, init_reap_terminal_sessions as t };
 
-//# sourceMappingURL=reap-terminal-sessions-CjqRAGw7.js.map
+//# sourceMappingURL=reap-terminal-sessions-N3BTkmX_.js.map

package/server/{rebuild-stack-DHqCLvLX.js → rebuild-stack-Dp4eLkt4.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { $n as resolveProjectFromIssueSync, Nn as getProjectSync, zn as init_projects } from "./config-yaml-Ciyp2mYe.js";
-import { a as init_stack_health, c as init_docker_stats, l as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot } from "./stack-health-DV_f-lK0.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-Dfw3QDyZ.js";
-import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-BXqfOP4-.js";
-import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-CFpQatOc.js";
+import { Tn as init_projects, yn as getProjectSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DvyMuOle.js";
+import { a as init_stack_health, c as init_docker_stats, l as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot } from "./stack-health-puygdaMd.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-zhdvQicO.js";
+import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-m73vGebA.js";
+import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-DseivYEy.js";
 import { dirname, join } from "node:path";
 import { Effect } from "effect";
 import { existsSync, readFileSync, rmSync } from "node:fs";
@@ -184,4 +184,4 @@ var init_rebuild_stack = __esmMin((() => {
 //#endregion
 export { init_rebuild_stack as n, rebuildWorkspaceStack as r, composeProjectNameForWorkspace as t };
 
-//# sourceMappingURL=rebuild-stack-DHqCLvLX.js.map
+//# sourceMappingURL=rebuild-stack-Dp4eLkt4.js.map

package/server/{rebuild-stack-DjdpALr1.js → rebuild-stack-kA7XngID.js}

@@ -1,3 +1,3 @@
-import { n as init_rebuild_stack, r as rebuildWorkspaceStack } from "./rebuild-stack-DHqCLvLX.js";
+import { n as init_rebuild_stack, r as rebuildWorkspaceStack } from "./rebuild-stack-Dp4eLkt4.js";
 init_rebuild_stack();
 export { rebuildWorkspaceStack };

package/server/{reconstruct-cache-BqrCQt0o.js → reconstruct-cache-uWbZfjms.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { At as init_record, Lt as resolveProjectForIssue, Nt as readIssueRecord, Un as listProjectsSync, zn as init_projects } from "./config-yaml-Ciyp2mYe.js";
-import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-DbrHWunF.js";
-import { i as listRunningAgents, s as init_agents$1 } from "./queries-B5hl7lMQ.js";
-import { a as init_pipeline_membership_gather, i as gatherProjectLensSignalsForProjects, n as resolvePipelineMembership, r as gatherProjectLensSignals, t as init_pipeline_membership } from "./pipeline-membership-BtKMNY7v.js";
+import { Ft as resolveProjectForIssue, Ot as init_record, Tn as init_projects, jt as readIssueRecord, kn as listProjectsSync } from "./config-yaml-DvyMuOle.js";
+import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-B4Bjbkfv.js";
+import { b as init_agents$1, i as listRunningAgents } from "./queries-6d7Cdtm7.js";
+import { a as gatherProjectLensSignalsForProjects, i as gatherProjectLensSignals, n as init_pipeline_membership, o as init_pipeline_membership_gather, r as resolvePipelineMembership } from "./pipeline-membership-0HaEGDlH.js";
 import { Effect } from "effect";
 //#region ../../lib/reconstruct/enumerate-in-flight.ts
 async function enumerateInFlightIssuesFromSources(projects, gather = gatherProjectLensSignals) {
@@ -138,7 +138,7 @@ async function loadInFlightIssueIds(projects) {
 	return enumerateInFlightIssuesFromSources(projects);
 }
 async function fetchPrState(issueId) {
-	const { fetchIssuePullRequest } = await import("./pull-requests-D3N6HQzI.js");
+	const { fetchIssuePullRequest } = await import("./pull-requests--Ib2jTgy.js");
 	const result = await fetchIssuePullRequest(issueId);
 	if (!result.pr) return {
 		hasPr: false,
@@ -269,4 +269,4 @@ __esmMin((() => {
 }))();
 export { reconstructCache, reconstructCacheAuto };
 
-//# sourceMappingURL=reconstruct-cache-BqrCQt0o.js.map
+//# sourceMappingURL=reconstruct-cache-uWbZfjms.js.map

package/server/record-t6V-3Dcj.js

@@ -0,0 +1,3 @@
+import { Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Nt as readIssueRecordSync, Ot as init_record, Pt as readRecordContinueViewSync, vt as appendSessionEntry, zt as writeRecordTieredExecutionOverride } from "./config-yaml-DvyMuOle.js";
+init_record();
+export { appendSessionEntry, getProjectConfigFromWorkspacePath, readIssueRecordSync, readRecordContinueViewSync, resolveProjectForIssue, writeRecordTieredExecutionOverride };

package/server/{record-update-BlB8mpKO.js → record-update-DACtKh6_.js}

@@ -1,3 +1,3 @@
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-RviRDSNs.js";
+import { n as updateIssueRecord, t as init_record_update } from "./record-update-Dq0t2uBG.js";
 init_record_update();
 export { updateIssueRecord };

package/server/record-update-Dq0t2uBG.js

@@ -0,0 +1,310 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { At as queueIssueRecordCommit, Br as getOverdeckHome, Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ht as flushAutoCommits, Nt as readIssueRecordSync, Ot as init_record, Rt as writeIssueRecordSync, St as ensureIssueRecordSync, Tn as init_projects, Ut as init_auto_commit, Vr as init_paths, kn as listProjectsSync, nn as init_state_read_home, rn as resolveStateReadHomeSync, tn as STATE_BRANCH, wt as getIssueRecordPath } from "./config-yaml-DvyMuOle.js";
+import { dirname, join, relative } from "node:path";
+import { Effect } from "effect";
+import { hostname } from "node:os";
+import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+//#region ../../lib/pan-dir/fs-lock.ts
+/** Cross-process per-issue record locking (PAN-2648 CD-2). */
+function safeSegment(value) {
+	return value.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-");
+}
+function recordLockPath(project, issueId) {
+	const configuredKey = listProjectsSync().find(({ config }) => config.path === project.path)?.key;
+	const projectKey = safeSegment(configuredKey ?? project.name ?? project.path) || "unknown-project";
+	return join(getOverdeckHome(), "locks", "records", projectKey, `${issueId.toUpperCase()}.lock`);
+}
+function isPidDead(pid) {
+	if (!pid || pid <= 0 || pid === process.pid) return false;
+	try {
+		process.kill(pid, 0);
+		return false;
+	} catch (error) {
+		return error.code === "ESRCH";
+	}
+}
+async function sweepRecordTmpFiles(recordPath) {
+	try {
+		const dir = dirname(recordPath);
+		const base = recordPath.slice(dir.length + 1);
+		const entries = await readdir(dir);
+		await Promise.all(entries.filter((entry) => entry.startsWith(`${base}.`) && entry.endsWith(".tmp")).map((entry) => rm(join(dir, entry), { force: true })));
+	} catch {}
+}
+async function readOwner(lockPath) {
+	try {
+		const owner = JSON.parse(await readFile(join(lockPath, "owner.json"), "utf8"));
+		return {
+			description: `${owner.writerId ?? "unknown writer"} pid=${owner.pid ?? "unknown"} acquiredAt=${owner.acquiredAt ?? "unknown"}`,
+			pid: owner.pid
+		};
+	} catch {
+		return { description: "unknown writer" };
+	}
+}
+async function acquireRecordLock(lockPath, options) {
+	await mkdir(dirname(lockPath), {
+		recursive: true,
+		mode: 448
+	});
+	const delays = options.retryDelaysMs ?? RECORD_LOCK_RETRY_DELAYS_MS;
+	let lastOwner = "unknown writer";
+	for (let attempt = 0; attempt <= delays.length; attempt += 1) {
+		try {
+			await mkdir(lockPath, { mode: 448 });
+			const owner = {
+				writerId: options.writerId,
+				pid: process.pid,
+				acquiredAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			try {
+				await writeFile(join(lockPath, "owner.json"), JSON.stringify(owner, null, 2), "utf8");
+			} catch (error) {
+				try {
+					await rm(lockPath, {
+						recursive: true,
+						force: true
+					});
+				} catch {}
+				throw error;
+			}
+			await sweepRecordTmpFiles(options.recordPath);
+			return owner;
+		} catch (error) {
+			if (error.code !== "EEXIST") throw error;
+			const owner = await readOwner(lockPath);
+			lastOwner = owner.description;
+			if (isPidDead(owner.pid)) {
+				await rm(lockPath, {
+					recursive: true,
+					force: true
+				});
+				continue;
+			}
+		}
+		const delay = delays[attempt];
+		if (delay === void 0) break;
+		await new Promise((resolve) => setTimeout(resolve, delay));
+	}
+	throw new RecordLockError(lockPath, lastOwner);
+}
+async function releaseRecordLock(lockPath) {
+	await rm(lockPath, {
+		recursive: true,
+		force: true
+	});
+}
+async function withRecordFsLock(project, issueId, options, operation) {
+	const lockPath = recordLockPath(project, issueId);
+	await acquireRecordLock(lockPath, options);
+	try {
+		return await operation();
+	} finally {
+		await releaseRecordLock(lockPath);
+	}
+}
+var RECORD_LOCK_RETRY_DELAYS_MS, RecordLockError;
+var init_fs_lock = __esmMin((() => {
+	init_paths();
+	init_projects();
+	RECORD_LOCK_RETRY_DELAYS_MS = [
+		5,
+		10,
+		20,
+		40,
+		80,
+		160,
+		320,
+		360
+	];
+	RecordLockError = class extends Error {
+		constructor(lockPath, owner) {
+			super(`The per-issue record lock at ${lockPath} is held by ${owner}. Retry the command after that writer finishes.`);
+			this.lockPath = lockPath;
+			this.owner = owner;
+			this.name = "RecordLockError";
+		}
+	};
+}));
+//#endregion
+//#region ../../lib/pan-dir/record-update.ts
+/** The single locked read-modify-write door for per-issue records. */
+function updateIssueRecordForWorkspace(workspacePath, issueId, mutator, options = {}) {
+	return updateIssueRecord(resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath), issueId, mutator, options);
+}
+async function git(gitRoot, args) {
+	return (await execFileAsync("git", args, {
+		cwd: gitRoot,
+		encoding: "utf8",
+		timeout: 3e4,
+		maxBuffer: 16 * 1024 * 1024,
+		env: {
+			...process.env,
+			HUSKY: "0"
+		}
+	})).stdout.trim();
+}
+function gitFailureMessage(error) {
+	if (error && typeof error === "object") {
+		const failure = error;
+		return failure.stderr?.trim() || failure.stdout?.trim() || failure.message;
+	}
+	return String(error);
+}
+function isRemoteRefRaceError(message) {
+	return /non-fast-forward|fetch first|stale info|cannot lock ref.*expected|failed to update ref/i.test(message);
+}
+async function abortRebase(gitRoot) {
+	try {
+		await git(gitRoot, ["rebase", "--abort"]);
+	} catch {}
+}
+async function replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath) {
+	const relativeRecordPath = relative(gitRoot, recordPath).replace(/\\/g, "/");
+	const conflicts = (await git(gitRoot, [
+		"diff",
+		"--name-only",
+		"--diff-filter=U"
+	])).split("\n").map((path) => path.trim()).filter(Boolean);
+	if (conflicts.length !== 1 || conflicts[0] !== relativeRecordPath) throw new Error(`state rebase conflicted outside ${relativeRecordPath}: ${conflicts.join(", ") || "unknown conflict"}`);
+	await git(gitRoot, [
+		"restore",
+		`--source=origin/${STATE_BRANCH}`,
+		"--worktree",
+		"--",
+		relativeRecordPath
+	]);
+	const remoteRecord = readIssueRecordSync(project, issueId);
+	if (!remoteRecord) throw new Error(`Remote ${issueId} state record is unreadable`);
+	writeIssueRecordSync(project, issueId, await mutator(remoteRecord) ?? remoteRecord);
+	await git(gitRoot, [
+		"add",
+		"--",
+		relativeRecordPath
+	]);
+	await git(gitRoot, [
+		"-c",
+		"core.editor=true",
+		"rebase",
+		"--continue"
+	]);
+}
+async function restoreRetryableRecord(project, issueId, original, recordPath) {
+	const stateHome = resolveStateReadHomeSync(project);
+	const gitRoot = stateHome.root;
+	const relativeRecordPath = relative(gitRoot, recordPath).replace(/\\/g, "/");
+	await abortRebase(gitRoot);
+	let restored = structuredClone(original);
+	const branch = stateHome.migrated ? STATE_BRANCH : await git(gitRoot, ["branch", "--show-current"]);
+	try {
+		await git(gitRoot, [
+			"fetch",
+			"origin",
+			branch
+		]);
+		restored = JSON.parse(await git(gitRoot, ["show", `origin/${branch}:${relativeRecordPath}`]));
+	} catch {}
+	writeIssueRecordSync(project, issueId, restored);
+	await git(gitRoot, [
+		"add",
+		"--",
+		relativeRecordPath
+	]);
+	try {
+		await git(gitRoot, [
+			"diff",
+			"--cached",
+			"--quiet",
+			"--",
+			relativeRecordPath
+		]);
+		return;
+	} catch {}
+	await git(gitRoot, [
+		"commit",
+		"-m",
+		`chore(records): restore ${issueId} after failed state push`,
+		"--",
+		relativeRecordPath
+	]);
+}
+async function reconcileStatePush(project, issueId, mutator, recordPath) {
+	const gitRoot = resolveStateReadHomeSync(project).root;
+	for (let attempt = 0; attempt < MAX_STATE_PUSH_RECONCILIATIONS; attempt += 1) {
+		await git(gitRoot, [
+			"fetch",
+			"origin",
+			STATE_BRANCH
+		]);
+		try {
+			await git(gitRoot, ["rebase", `origin/${STATE_BRANCH}`]);
+		} catch (error) {
+			try {
+				await replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath);
+			} catch (replayError) {
+				await abortRebase(gitRoot);
+				throw new Error(`Failed to reconcile ${issueId} state after push race: ${gitFailureMessage(replayError)}`, { cause: error });
+			}
+		}
+		try {
+			await git(gitRoot, [
+				"push",
+				"origin",
+				STATE_BRANCH
+			]);
+			const record = readIssueRecordSync(project, issueId);
+			if (!record) throw new Error(`Reconciled ${issueId} state record is unreadable`);
+			return record;
+		} catch (error) {
+			const message = gitFailureMessage(error);
+			if (!isRemoteRefRaceError(message)) throw new Error(`Failed to push reconciled ${issueId} state: ${message}`, { cause: error });
+		}
+	}
+	throw new Error(`Failed to push ${issueId} state after ${MAX_STATE_PUSH_RECONCILIATIONS} reconciliation attempts`);
+}
+async function updateIssueRecord(project, issueId, mutator, options = {}) {
+	const normalizedIssueId = issueId.toUpperCase();
+	const recordPath = getIssueRecordPath(project, normalizedIssueId);
+	return withRecordFsLock(project, normalizedIssueId, {
+		writerId: options.writerId ?? process.env.OVERDECK_AGENT_ID ?? `process-${process.pid}@${hostname()}`,
+		recordPath
+	}, async () => {
+		const current = readIssueRecordSync(project, normalizedIssueId) ?? ensureIssueRecordSync(project, normalizedIssueId);
+		const original = structuredClone(current);
+		const next = await mutator(current) ?? current;
+		const path = writeIssueRecordSync(project, normalizedIssueId, next);
+		if (options.autoCommit === false) return readIssueRecordSync(project, normalizedIssueId) ?? next;
+		try {
+			const commitRoot = queueIssueRecordCommit(project, normalizedIssueId, path);
+			const flushed = await Effect.runPromise(flushAutoCommits(commitRoot));
+			if (flushed.pushed === false) {
+				if (resolveStateReadHomeSync(project).migrated && isRemoteRefRaceError(flushed.reason ?? "")) return await reconcileStatePush(project, normalizedIssueId, mutator, path);
+				throw new Error(`Failed to push ${normalizedIssueId} state: ${flushed.reason ?? "unknown push failure"}`);
+			}
+			if (!flushed.committed && !["no diff", "no pending"].includes(flushed.reason ?? "")) throw new Error(`Failed to commit ${normalizedIssueId} state: ${flushed.reason ?? "unknown commit failure"}`);
+			return readIssueRecordSync(project, normalizedIssueId) ?? next;
+		} catch (error) {
+			try {
+				await restoreRetryableRecord(project, normalizedIssueId, original, path);
+			} catch (restoreError) {
+				throw new Error(`Failed to persist ${normalizedIssueId} state and restore retryability: ${gitFailureMessage(restoreError)}`, { cause: error });
+			}
+			throw error;
+		}
+	});
+}
+var execFileAsync, MAX_STATE_PUSH_RECONCILIATIONS;
+var init_record_update = __esmMin((() => {
+	init_state_read_home();
+	init_auto_commit();
+	init_fs_lock();
+	init_record();
+	execFileAsync = promisify(execFile);
+	MAX_STATE_PUSH_RECONCILIATIONS = 3;
+}));
+//#endregion
+export { isPidDead as a, init_fs_lock as i, updateIssueRecord as n, updateIssueRecordForWorkspace as r, init_record_update as t };
+
+//# sourceMappingURL=record-update-Dq0t2uBG.js.map

package/server/{recovery-trip-l1Hsi37x.js → recovery-trip-BJtIQuag.js}

@@ -1,4 +1,4 @@
-import { r as updateIssueRecordForWorkspace, t as init_record_update } from "./record-update-RviRDSNs.js";
+import { r as updateIssueRecordForWorkspace, t as init_record_update } from "./record-update-Dq0t2uBG.js";
 //#region ../../lib/cloister/recovery-trip.ts
 init_record_update();
 async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligationGeneration, threshold = 25, now = /* @__PURE__ */ new Date()) {
@@ -41,4 +41,4 @@ async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligat
 //#endregion
 export { recordRecoveryFailure as t };
 
-//# sourceMappingURL=recovery-trip-l1Hsi37x.js.map
+//# sourceMappingURL=recovery-trip-BJtIQuag.js.map

package/server/{release-engine-CSI4K6Oj.js → release-engine-DZpmGGzb.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { En as findProjectByPathSync, Nn as getProjectSync, zn as init_projects } from "./config-yaml-Ciyp2mYe.js";
-import { c as init_review_status, y as setReviewStatusSync } from "./review-status-CCgPVK1h.js";
-import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-D7YNU1ZB.js";
-import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-BywwggrE.js";
+import { Tn as init_projects, fn as findProjectByPathSync, yn as getProjectSync } from "./config-yaml-DvyMuOle.js";
+import { b as setReviewStatusSync, l as init_review_status } from "./review-status-A7quS5KJ.js";
+import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-DLz0MkGT.js";
+import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-hnXd_kga.js";
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
 //#region ../../lib/release/release-plan.ts
@@ -303,4 +303,4 @@ __esmMin((() => {
 }))();
 export { runRelease };
 
-//# sourceMappingURL=release-engine-CSI4K6Oj.js.map
+//# sourceMappingURL=release-engine-DZpmGGzb.js.map

package/server/{release-set-BywwggrE.js → release-set-hnXd_kga.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { lr as init_issue_id, pr as resolveIssueIdSync } from "./config-yaml-Ciyp2mYe.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-DN2wSxle.js";
+import { $n as resolveIssueIdSync, Yn as init_issue_id } from "./config-yaml-DvyMuOle.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-CzaSOgul.js";
 import "effect";
 //#region ../../lib/overdeck/release-sync.ts
 function isoFromMillis(value) {
@@ -122,4 +122,4 @@ var init_release_set = __esmMin((() => {
 //#endregion
 export { withComponentStateSync as i, init_release_set as n, upsertReleaseSetSync as r, getReleaseSetSync as t };
 
-//# sourceMappingURL=release-set-BywwggrE.js.map
+//# sourceMappingURL=release-set-hnXd_kga.js.map

package/server/{remote-DYziAkiZ.js → remote-4tiENDaI.js}

@@ -1,4 +1,4 @@
-import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-DIL5_U4c.js";
-import { S as createFlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as FlyProvider, y as spawnRemoteAgent } from "./remote-agents-CZ2rc8I0.js";
-import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-cnoeuDWn.js";
+import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-CskwzzhL.js";
+import { S as createFlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as FlyProvider, y as spawnRemoteAgent } from "./remote-agents-nmty1mLu.js";
+import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-Br-ZWVIP.js";
 export { FlyProvider, WORKSPACES_DIR, checkRemoteSpendCap, createFlyProvider, createFlyProviderFromConfig, deleteWorkspaceMetadataSync, findRemoteWorkspaceMetadataSync, getRemoteAgentOutput, getRemoteProvider, isRemoteAgentRunning, isRemoteAvailable, killRemoteAgent, listRemoteAgents, listWorkspaceMetadataSync, loadRemoteAgentState, loadWorkspaceMetadataSync, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveWorkspaceMetadataSync, sendToRemoteAgent, spawnRemoteAgent };

package/server/{remote-cnoeuDWn.js → remote-Br-ZWVIP.js}

@@ -1,5 +1,5 @@
-import "./workspace-metadata-DIL5_U4c.js";
-import { C as init_fly_provider, S as createFlyProvider, s as init_remote_agents } from "./remote-agents-CZ2rc8I0.js";
+import "./workspace-metadata-CskwzzhL.js";
+import { C as init_fly_provider, S as createFlyProvider, s as init_remote_agents } from "./remote-agents-nmty1mLu.js";
 import { Effect } from "effect";
 //#region ../../lib/remote/index.ts
 init_fly_provider();
@@ -52,4 +52,4 @@ function createFlyProviderFromConfig(remoteConfig, tierOverride) {
 //#endregion
 export { getRemoteProvider as n, isRemoteAvailable as r, createFlyProviderFromConfig as t };
 
-//# sourceMappingURL=remote-cnoeuDWn.js.map
+//# sourceMappingURL=remote-Br-ZWVIP.js.map

package/server/{remote-agents-BNORDWAX.js → remote-agents-CRCg1L4H.js}

@@ -1,3 +1,3 @@
-import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-CZ2rc8I0.js";
+import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-nmty1mLu.js";
 init_remote_agents();
 export { assertFlyRemoteStateSupported, checkRemoteDurabilityPreflight, checkRemoteSpendCap, generateEphemeralWatchdogScript, generatePushDaemonScript, getRemoteAgentOutput, installEphemeralWatchdog, installPushDaemon, isRemoteAgentRunning, killRemoteAgent, listActiveRemoteAgentStates, listRemoteAgents, loadRemoteAgentState, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveRemoteAgentState, sendToRemoteAgent, spawnRemoteAgent, writeRemoteFile };

package/server/{remote-agents-CZ2rc8I0.js → remote-agents-nmty1mLu.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin, o as __toESM } from "./rolldown-runtime-DNCzzKnI.js";
-import { At as init_record, Lt as resolveProjectForIssue, Or as init_errors, mr as require_dist } from "./config-yaml-Ciyp2mYe.js";
-import { w as init_tmux, y as getManagedTmuxSocketName } from "./tmux-y1blSxks.js";
-import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-5DJRiovn.js";
-import { a as init_claude_permissions, i as getClaudePermissionFlagsSync, n as buildClaudeUserSettingsSync, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-C2OrLYKL.js";
-import { c as isStateMigrated, o as init_state_home } from "./state-home-DixkE-up.js";
+import { Ft as resolveProjectForIssue, Ot as init_record, er as require_dist, mr as init_errors } from "./config-yaml-DvyMuOle.js";
+import { w as init_tmux, y as getManagedTmuxSocketName } from "./tmux-ftABRAmc.js";
+import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-CHVm7bGT.js";
+import { a as init_claude_permissions, i as getClaudePermissionFlagsSync, n as buildClaudeUserSettingsSync, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-H_5wHQZQ.js";
+import { c as isStateMigrated, o as init_state_home } from "./state-home-CIGjwNfJ.js";
 import { Data, Effect, Stream } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -1232,4 +1232,4 @@ var init_remote_agents = __esmMin((() => {
 //#endregion
 export { init_fly_provider as C, createFlyProvider as S, saveRemoteAgentState as _, generatePushDaemonScript as a, writeRemoteFile as b, installEphemeralWatchdog as c, killRemoteAgent as d, listActiveRemoteAgentStates as f, refreshHostHeartbeatForEphemeralVms as g, pollRemoteAgentStatus as h, generateEphemeralWatchdogScript as i, installPushDaemon as l, loadRemoteAgentState as m, checkRemoteDurabilityPreflight as n, getRemoteAgentOutput as o, listRemoteAgents as p, checkRemoteSpendCap as r, init_remote_agents as s, assertFlyRemoteStateSupported as t, isRemoteAgentRunning as u, sendToRemoteAgent as v, FlyProvider as x, spawnRemoteAgent as y };
 
-//# sourceMappingURL=remote-agents-CZ2rc8I0.js.map
+//# sourceMappingURL=remote-agents-nmty1mLu.js.map