@overdeck/desktop 0.45.22 → 0.45.24

package/server/{specialists-Bg9v4z3F.js → specialists-CC4r-c2s.js}

@@ -1,43 +1,45 @@
 import { a as __toCommonJS } from "./rolldown-runtime-DNCzzKnI.js";
-import { A as canUseHarnessSync, D as resolveTieredExecutionEnabled, H as init_providers, Hn as init_projects, I as UnknownModelError, In as getProjectSync, Kn as listProjectsSync, M as init_harness_policy, O as resolveTieredExecutionEnabledForIssue, T as init_tier_table, U as piProviderForModel, V as getProviderForModelSync, Xr as encodeClaudeProjectDir, c as isClaudeCodeChannelsEnabled, dr as extractPrefixSync, f as loadConfigSync, fr as init_issue_id, ii as init_paths, jr as init_errors, mr as parseIssueIdSync, nr as resolveProjectFromIssueSync, oi as packageRoot, ri as getOverdeckHome, si as resolveOhmypiExtensionPath, t as init_config_yaml, tt as resolveModel, xn as shouldCommitLegacyWorkspaceArtifacts, xr as FsError, yn as init_state_read_home } from "./config-yaml-ig8Nwtiw.js";
+import { A as canUseHarnessSync, Br as getOverdeckHome, D as resolveTieredExecutionEnabled, H as init_providers, I as UnknownModelError, Jn as extractPrefixSync, M as init_harness_policy, Nr as encodeClaudeProjectDir, O as resolveTieredExecutionEnabledForIssue, Qt as parsePorcelainStatusPaths, T as init_tier_table, Tn as init_projects, U as piProviderForModel, Ur as packageRoot, V as getProviderForModelSync, Vr as init_paths, Wr as resolveOhmypiExtensionPath, Yn as init_issue_id, Yt as init_state_plane, Zn as parseIssueIdSync, c as isClaudeCodeChannelsEnabled, f as loadConfigSync, fn as findProjectByPathSync, in as shouldCommitLegacyWorkspaceArtifacts, ir as FsError, kn as listProjectsSync, mr as init_errors, nn as init_state_read_home, rn as resolveStateReadHomeSync, t as init_config_yaml, tt as resolveModel, yn as getProjectSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
 import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-D4iNWMA5.js";
-import { B as sendRawKeystroke, D as killSession, H as sessionExistsSync, J as BLANKED_PROVIDER_ENV, M as listSessions, T as isHarnessProcessAlive, U as setOption, V as sessionExists, X as buildChildEnvWithoutTmuxSync, Z as init_child_env, g as findManagedServerPidSync, i as capturePane, j as listSessionNames, m as exactPaneTarget, s as createSession, w as init_tmux, z as sendKeysAsync } from "./tmux-L5LgvGLp.js";
-import { a as init_event_store, n as getEventStore } from "./event-store-TnWdydfB.js";
-import { k as normalizeChannelReplyPayload, o as getHarnessBehavior, t as init_src, x as DomainEvent } from "./src-k039WVYY.js";
-import { C as AGENT_COLUMNS_FOR_DB, O as stateToOverdeckParamsForDb, T as init_agent_state_sync, c as init_review_status, s as getReviewStatusSync, u as loadReviewStatuses, y as setReviewStatusSync } from "./review-status-DFRjDFef.js";
-import { a as EventStoreService, c as ReadModelService, d as init_read_model, i as init_issue_lifecycle, s as init_domain_services, t as IssueLifecycle, u as getClosedIssueIdsForReadSource } from "./issue-lifecycle-CeyW_HoD.js";
-import { d as isTerminalIssueStage, o as init_agents, u as getIssueStageSync } from "./agents-DXdHmRTC.js";
-import { n as ensureSessionContextBriefingFile, r as init_briefing_freshness } from "./briefing-freshness-C12WgkaB.js";
-import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-Codk1pc2.js";
-import { $ as stopAgent, $n as init_pty_token, $t as init_ohmypi_fifo, Cn as clearAgentTroubled, Dn as getAgentDir, Et as writeBridgeTokenSync, Gn as saveAgentStateSync, Gt as getProviderAuthMode, H as getLatestSessionId, Ht as getAgentRuntimeBaseCommand, K as saveSessionId, Kn as setAgentPaused, L as messageAgent, Lt as resolveStaffing, M as resumeAgent, Mt as transitionIssueToInProgress, O as recoverAgent, Pt as init_staffing, Qt as piFifoPaths, R as init_operator_interventions, Rn as markAgentStoppedState, S as init_tier_escalation, Tt as init_bridge_token, U as getLatestSessionIdSync, V as getActivity, W as getSessionId, Wn as saveAgentState, Xn as writeAgentStateJsonSync, Yn as wipeAgentStateDirs, Zt as init_pi_fifo, _n as writeChannelsBridgeMcpConfig, _r as init_codex_auth, _t as deliverAgentPermissionDecision, an as determineModel, ar as normalizeAgentId, bt as setAgentDeliveryMethod, cr as waitForReadySignal, en as ohmypiFifoPaths, er as writePtyToken, fr as saveAgentRuntimeState, gn as dismissDevChannelsDialog, gr as checkCodexAuthStatus, gt as deliverAgentMessage, i as listRunningAgents, jn as getAgentStateSync, k as restartAgent, kn as getAgentState, ln as init_provider_health, lr as getAgentRuntimeState, nr as resolvePtySupervisorScriptPath, on as getProviderEnvForModel, r as listAgentStates, rr as clearReadySignal, s as init_agents$1, sn as getProviderExportsForModel, tr as init_pty_supervisor_locate, un as validateProviderHealth, ur as getAgentRuntimeStateSync, wt as BRIDGE_TOKEN_HEADER, x as decideEscalation, xn as clearAgentPaused, z as operatorInterventionEvent } from "./queries-ZABd5aXP.js";
-import { a as performHandoff, i as checkAllTriggers, s as getAgentHealth, t as getCloisterService } from "./service-Bagb90KZ.js";
-import { o as init_persistent_logger, s as logAgentLifecycleSync } from "./session-history-XdS0JKp3.js";
-import { t as init_behavior } from "./behavior-CGj16clS.js";
-import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-DdT-nUAM.js";
-import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-D_RVYBuL.js";
-import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-CXsfxslp.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
+import { $ as init_child_env, B as sendKeysAsync, D as killSession, H as sessionExists, M as listSessionNames, N as listSessions, Q as buildChildEnvWithoutTmuxSync, T as isHarnessProcessAlive, U as sessionExistsSync, V as sendRawKeystroke, W as setOption, X as BLANKED_PROVIDER_ENV, g as findManagedServerPidSync, i as capturePane, m as exactPaneTarget, s as createSession, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { a as init_event_store, n as getEventStore } from "./event-store-CQL6NeqB.js";
+import { M as normalizeChannelReplyPayload, o as getHarnessBehavior, t as init_src, w as DomainEvent } from "./src-DtcUOZCq.js";
+import { E as init_agent_state_sync, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, i as clearWorkspaceStuck, k as stateToOverdeckParamsForDb, l as init_review_status, w as AGENT_COLUMNS_FOR_DB } from "./review-status-kZj_KyCk.js";
+import { a as EventStoreService, c as ReadModelService, d as init_read_model, i as init_issue_lifecycle, s as init_domain_services, t as IssueLifecycle, u as getClosedIssueIdsForReadSource } from "./issue-lifecycle-ojZAzDBP.js";
+import { d as isTerminalIssueStage, o as init_agents, u as getIssueStageSync } from "./agents-EbI0zCJl.js";
+import { n as ensureSessionContextBriefingFile, r as init_briefing_freshness } from "./briefing-freshness-D1wzUIWv.js";
+import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-B2ddP6wq.js";
+import { Ar as saveAgentRuntimeState, At as deliverAgentPermissionDecision, Bt as assertWorkspaceStackHealthyForSpawn, Cr as normalizeAgentId, Dn as validateProviderHealth, Dr as getAgentRuntimeState, En as init_provider_health, Er as waitForReadySignal, F as init_tier_escalation, Fn as writeChannelsBridgeMcpConfig, Fr as init_codex_auth, G as resumeAgent, Gn as getAgentDir, Gt as transitionIssueToInProgress, H as restartAgent, Lt as BRIDGE_TOKEN_HEADER, Nt as setAgentDeliveryMethod, Or as getAgentRuntimeStateSync, P as decideEscalation, Pn as dismissDevChannelsDialog, Pr as checkCodexAuthStatus, Q as operatorInterventionEvent, Rt as init_bridge_token, Sn as determineModel, Ut as init_spawn_prep, V as recoverAgent, Vn as clearAgentTroubled, X as messageAgent, Xt as resolveStaffing, Yn as getAgentStateSync, Z as init_operator_interventions, _r as init_pty_token, an as getProviderAuthMode, at as saveSessionId, b as init_agents$1, br as resolvePtySupervisorScriptPath, cr as saveAgentState, et as getActivity, fn as init_pi_fifo, ft as stopAgent, hn as ohmypiFifoPaths, i as listRunningAgents, kt as deliverAgentMessage, lr as saveAgentStateSync, mn as init_ohmypi_fifo, mr as writeAgentStateJsonSync, nn as getAgentRuntimeBaseCommand, nr as markAgentStoppedState, nt as getLatestSessionIdSync, pn as piFifoPaths, pr as wipeAgentStateDirs, qn as getAgentState, qt as init_staffing, r as listAgentStates, rt as getSessionId, sn as init_runtime_command, tn as getAcpLauncherFields, tt as getLatestSessionId, un as waitForAcpHostReady, ur as setAgentPaused, vr as writePtyToken, wn as getProviderExportsForModel, xr as clearReadySignal, yr as init_pty_supervisor_locate, zn as clearAgentPaused, zt as writeBridgeTokenSync } from "./queries-CjNIf-Ub.js";
+import { a as performHandoff, i as checkAllTriggers, s as getAgentHealth, t as getCloisterService } from "./service-CLeAoU6G.js";
+import { o as init_persistent_logger, s as logAgentLifecycleSync } from "./session-history-BT3IvqhC.js";
+import { t as init_behavior } from "./behavior-B3exJ42O.js";
+import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-G6latr8C.js";
+import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-Yx5DdmVJ.js";
+import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-s0-oKybJ.js";
 import { a as PAN_DIRNAME, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-hraoaQIp.js";
-import { F as generateVBriefFilename, I as init_lifecycle, f as readTierOverrides, g as serializeVBriefDocument, h as recordTierPromotion, m as readWorkspacePlanSync, o as init_io, r as findPlan, u as readPlan } from "./io-DQR9PMgS.js";
-import { B as removeFavorite, E as hasOtherActiveConversationOnTmuxSession, F as markConversationEnded, G as setConversationHarness, K as setConversationModel, M as listConversations, P as markConversationActive, Q as updateConversationDeliveryMethod, S as getConversationByName, W as setConversationEffort, g as backfillConversationModel, h as archiveConversation, k as init_conversations, nt as updateLastAttached, rt as updateSpawnError, x as getConversationById, y as createConversation } from "./conversations-bYpM9-kZ.js";
-import { n as recordFeatureRegistryLifecycle, t as init_feature_registry_population } from "./feature-registry-population-B-CI9hgE.js";
-import { a as requireModelOverrideSync, i as normalizeModelOverrideSync, n as init_launcher_generator, r as init_model_validation, t as generateLauncherScriptSync } from "./launcher-generator-COgR2By1.js";
-import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-nSFKH78M.js";
-import { h as workspaceContextFile, l as piGlobalContextFile, o as init_layers } from "./layers-Cp1To4L8.js";
-import { n as init_harness_binary, r as prepareHarnessLaunch } from "./harness-binary-B2CTcD84.js";
-import { a as init_stack_health, i as getWorkspaceStackHealth } from "./stack-health-C-ifC7b0.js";
-import { l as init_dag, o as getDispatchableItems } from "./dag-CJpgf9A3.js";
-import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-D5FVQTmy.js";
-import { a as loadCloisterConfigSync, r as init_config } from "./config-DeTsoZdR.js";
-import { c as isStateMigrated, o as init_state_home } from "./state-home-CONQvZR0.js";
-import { a as init_lifecycle_io, c as updatePlanStatus, s as transitionVBriefOnMain } from "./lifecycle-io-taIb0PoH.js";
-import { _ as init_codex_conversation_parser, c as parseEntireConversation, d as init_pi_conversation_parser, g as parseOhmypiConversationMessages, m as init_ohmypi_conversation_parser, p as parsePiConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-C3avRVEr.js";
-import { _ as parseCodexApprovalPrompt, d as getAgentPendingQuestions$1, f as getAgentWorkspace$1, g as normalizeAwaitingInputPrompt, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment, u as getAgentJsonlPath$1 } from "./stuck-remediation-CKnIryGT.js";
-import { Mt as getResourceConfig, Pt as getSystemHealthSnapshot, Tt as classifyMemoryPressure } from "./deacon-CkT_kznS.js";
-import { o as stopWorkspaceDocker, r as init_workspace_manager } from "./workspace-manager-ClkCIWTe.js";
-import { a as init_jsonl_parser, o as normalizeModelName } from "./jsonl-parser-C3HVNR5d.js";
-import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-BoWm66Kh.js";
-import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-tiSRIWJP.js";
+import { a as generateXBriefFilename, o as init_lifecycle } from "./lifecycle-yPd___5E.js";
+import { f as readTierOverrides, g as serializeXBriefDocument, h as recordTierPromotion, m as readWorkspacePlanSync, o as init_io, r as findPlan, u as readPlan } from "./io-C9kF1wtJ.js";
+import { B as removeFavorite, E as hasOtherActiveConversationOnTmuxSession, F as markConversationEnded, G as setConversationHarness, K as setConversationModel, M as listConversations, P as markConversationActive, Q as updateConversationDeliveryMethod, S as getConversationByName, W as setConversationEffort, g as backfillConversationModel, h as archiveConversation, k as init_conversations, nt as updateLastAttached, rt as updateSpawnError, x as getConversationById, y as createConversation } from "./conversations-6AfUfbwc.js";
+import { n as recordFeatureRegistryLifecycle, t as init_feature_registry_population } from "./feature-registry-population-DKZFMbFt.js";
+import { a as normalizeModelOverrideSync, i as init_model_validation, n as init_launcher_generator, o as requireModelOverrideSync, r as MODEL_ID_PATTERN, t as generateLauncherScriptSync } from "./launcher-generator-BBWG_SiS.js";
+import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-DNWEVV6z.js";
+import { E as init_layers, I as workspaceContextFile, k as piGlobalContextFile } from "./assemble-J2ZZ2C15.js";
+import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
+import { a as getWorkspaceStackHealth, s as init_stack_health } from "./stack-health-DxSdG9cW.js";
+import { l as init_dag, o as getDispatchableItems } from "./dag-B1ucnjDU.js";
+import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-3lNZkyT4.js";
+import { a as loadCloisterConfigSync, r as init_config } from "./config-CKxYiCmX.js";
+import { c as isStateMigrated, o as init_state_home } from "./state-home-Cn_Qu8IX.js";
+import { a as init_lifecycle_io, c as updatePlanStatus, s as transitionXBriefOnMain } from "./lifecycle-io-BREGpnLk.js";
+import { _ as init_codex_conversation_parser, b as parseAcpConversationMessages, c as parseEntireConversation, d as init_pi_conversation_parser, g as parseOhmypiConversationMessages, m as init_ohmypi_conversation_parser, p as parsePiConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages, y as init_acp_conversation_parser } from "./conversation-service-DPJ71F33.js";
+import { _ as parseCodexApprovalPrompt, d as getAgentPendingQuestions$1, f as getAgentWorkspace$1, g as normalizeAwaitingInputPrompt, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment, u as getAgentJsonlPath$1 } from "./stuck-remediation-DYuPRYYw.js";
+import { B as getBook, H as liveOrderIssueLookup, T as resolveLiveFlywheelRunId, w as readFlywheelLaunchMetadata, y as getFlywheelRunDir, z as computeBookProgress } from "./flywheel-DHrgCphM.js";
+import { Dt as classifyMemoryPressure, It as getSystemHealthSnapshot, Pt as getResourceConfig } from "./deacon-CU_cAYSR.js";
+import { o as stopWorkspaceDocker, r as init_workspace_manager } from "./workspace-manager-CBhNdzE4.js";
+import { a as init_jsonl_parser, o as normalizeModelName } from "./jsonl-parser-BXSlHwEh.js";
+import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-CAAkqPLu.js";
+import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-_WygnyoX.js";
 import { basename, delimiter, dirname, join, resolve } from "node:path";
 import { Cause, Data, Effect, Layer, Option, Schema, Stream } from "effect";
 import { join as join$1 } from "path";
@@ -99,9 +101,8 @@ init_cost();
 init_behavior();
 init_persistent_logger();
 init_tracker_config();
-init_types();
-init_review_status();
 init_lifecycle();
+init_review_status();
 init_io();
 /**
 * Resolve the default cwd used when no project is selected — the "devroot"
@@ -200,10 +201,12 @@ init_layers();
 init_harness_binary();
 init_ohmypi_fifo();
 init_pi_fifo();
+init_runtime_command();
 init_stack_health();
 init_launcher_generator();
 init_dag();
 init_staffing();
+init_spawn_prep();
 init_harness_resolve();
 init_bridge_token();
 init_operator_interventions();
@@ -364,7 +367,215 @@ async function waitForSessionRespawn(sessionName, timeoutMs) {
 	return Effect.runPromise(sessionExists(sessionName));
 }
 //#endregion
+//#region routes/dashboard-auth.ts
+init_state_read_home();
+init_state_plane();
+init_types();
+init_issue_lifecycle();
+init_codex_auth();
+init_config();
+init_state_home();
+init_internal_token();
+const DASHBOARD_SESSION_COOKIE = "overdeck_session";
+const DASHBOARD_CSRF_HEADER = "x-overdeck-csrf-token";
+const DASHBOARD_SESSION_MAX_AGE_SECONDS = 3600 * 24 * 30;
+let browserSessionToken;
+let browserCsrfToken;
+function getDashboardSessionToken() {
+	if (browserSessionToken) return browserSessionToken;
+	const override = process.env["OVERDECK_DASHBOARD_SESSION_TOKEN"];
+	if (override) {
+		browserSessionToken = override;
+		return browserSessionToken;
+	}
+	const internal = getInternalTokenSync();
+	browserSessionToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-session-v1").digest("base64url") : randomBytes(32).toString("base64url");
+	return browserSessionToken;
+}
+function dashboardCsrfToken() {
+	if (browserCsrfToken) return browserCsrfToken;
+	const override = process.env["OVERDECK_DASHBOARD_CSRF_TOKEN"];
+	if (override) {
+		browserCsrfToken = override;
+		return browserCsrfToken;
+	}
+	const internal = getInternalTokenSync();
+	browserCsrfToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-csrf-v1").digest("base64url") : randomBytes(32).toString("base64url");
+	return browserCsrfToken;
+}
+function constantTimeTokenEqual$1(provided, expected) {
+	if (!provided) return false;
+	return timingSafeEqual(createHash$1("sha256").update(provided).digest(), createHash$1("sha256").update(expected).digest());
+}
+function cookieValue(cookieHeader, name) {
+	if (!cookieHeader) return void 0;
+	for (const part of cookieHeader.split(";")) {
+		const [rawKey, ...rawValue] = part.trim().split("=");
+		if (rawKey !== name) continue;
+		try {
+			return decodeURIComponent(rawValue.join("="));
+		} catch {
+			return;
+		}
+	}
+}
+function dashboardSessionCookieHeader(options = {}) {
+	const secure = options.secure ? "; Secure" : "";
+	return `${DASHBOARD_SESSION_COOKIE}=${encodeURIComponent(getDashboardSessionToken())}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${DASHBOARD_SESSION_MAX_AGE_SECONDS}${secure}`;
+}
+function hasDashboardInternalTokenHeaders(headers) {
+	const expected = getInternalTokenSync();
+	if (!expected) return false;
+	if (constantTimeTokenEqual$1(getHeaderFromMap(headers, "x-overdeck-internal-token"), expected)) return true;
+	const authorization = getHeaderFromMap(headers, "authorization");
+	if (authorization) {
+		const [scheme, token] = authorization.split(/\s+/);
+		if (scheme?.toLowerCase() === "bearer" && constantTimeTokenEqual$1(token, expected)) return true;
+	}
+	return false;
+}
+function hasDashboardInternalToken(request) {
+	return hasDashboardInternalTokenHeaders(request.headers);
+}
+function hasDashboardAuthHeaders(headers) {
+	return hasDashboardInternalTokenHeaders(headers) || constantTimeTokenEqual$1(cookieValue(getHeaderFromMap(headers, "cookie"), "overdeck_session"), getDashboardSessionToken());
+}
+function hasDashboardAuth(request) {
+	return hasDashboardAuthHeaders(request.headers);
+}
+function isJsonContentType(headers) {
+	const contentType = getHeaderFromMap(headers, "content-type");
+	if (!contentType) return false;
+	const [mime] = contentType.toLowerCase().split(";");
+	return mime.trim() === "application/json";
+}
+function hasTrustedExactOrigin(headers) {
+	const origin = getHeaderFromMap(headers, "origin");
+	if (!origin) return false;
+	const normalized = normalizeOrigin(origin);
+	return !!normalized && getTrustedOrigins().includes(normalized);
+}
+function hasValidCsrfToken(headers) {
+	return constantTimeTokenEqual$1(getHeaderFromMap(headers, DASHBOARD_CSRF_HEADER), dashboardCsrfToken());
+}
+function rejectUnsafeDashboardMutationRequest(request) {
+	const authError = rejectUnauthorizedDashboardRequest(request);
+	if (authError) return authError;
+	const headers = request.headers;
+	if (!isJsonContentType(headers)) return jsonResponse({ error: "Content-Type must be application/json" }, { status: 400 });
+	if (hasDashboardInternalToken(request)) return null;
+	if (getHeaderFromMap(headers, "origin") && !hasTrustedExactOrigin(headers)) return jsonResponse({ error: "Invalid origin" }, { status: 403 });
+	if (!hasValidCsrfToken(headers)) return jsonResponse({ error: "Invalid CSRF token" }, { status: 403 });
+	return null;
+}
+function ipv4ToInt(value) {
+	const parts = value.split(".");
+	if (parts.length !== 4) return null;
+	let result = 0;
+	for (const part of parts) {
+		const octet = Number(part);
+		if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;
+		result = (result << 8 | octet) >>> 0;
+	}
+	return result;
+}
+/** RFC1918 private ranges — Docker bridges always fall inside one of these. */
+function isRfc1918(ip) {
+	return (ip & 4278190080) >>> 0 === 167772160 || (ip & 4293918720) >>> 0 === 2886729728 || (ip & 4294901760) >>> 0 === 3232235520;
+}
+/**
+* True when `addr` is the IP of a container on one of THIS host's Docker bridge
+* interfaces (docker0 / br-*). Such a peer can only be a process running on this
+* machine — our own host-local Traefik fronting overdeck.localhost, or another
+* Overdeck container — never a LAN client (a direct LAN hit to the 0.0.0.0
+* API port arrives with a LAN peer that is not inside any Docker bridge subnet).
+*
+* Pure for testability: the interface map is injected. We only ever trust
+* RFC1918 bridge subnets, so a misconfigured public-range br-* cannot widen
+* trust beyond the local Docker fabric.
+*/
+function peerIsHostLocalDockerBridge(addr, interfaces) {
+	const peer = ipv4ToInt(addr);
+	if (peer === null) return false;
+	for (const [name, addrs] of Object.entries(interfaces)) {
+		if (name !== "docker0" && !name.startsWith("br-")) continue;
+		for (const info of addrs ?? []) {
+			if (info.family !== "IPv4") continue;
+			const ifaceIp = ipv4ToInt(info.address);
+			const mask = ipv4ToInt(info.netmask);
+			if (ifaceIp === null || mask === null) continue;
+			const network = (ifaceIp & mask) >>> 0;
+			if (!isRfc1918(network)) continue;
+			if ((peer & mask) >>> 0 === network) return true;
+		}
+	}
+	return false;
+}
+/**
+* True when `addr` shares an RFC1918 subnet with one of THIS process's own
+* network interfaces. This is the in-container counterpart of
+* peerIsHostLocalDockerBridge: inside a container the Docker bridge is
+* invisible — the container sees only its veth endpoints (eth0/eth1), so the
+* docker0/br-* name filter never matches and the host-local Traefik fronting
+* the stack 401'd every session mint (first hit live on the PAN-1737 UAT
+* stack). A peer inside one of the container's attached Docker-network
+* subnets can only be another container on those networks — the server
+* publishes no host port (Traefik labels only), so no LAN client can ever
+* present such an address. Only consulted when running inside a container.
+*/
+function peerIsLocalContainerNetwork(addr, interfaces) {
+	const peer = ipv4ToInt(addr);
+	if (peer === null) return false;
+	for (const addrs of Object.values(interfaces)) for (const info of addrs ?? []) {
+		if (info.family !== "IPv4" || info.internal) continue;
+		const ifaceIp = ipv4ToInt(info.address);
+		const mask = ipv4ToInt(info.netmask);
+		if (ifaceIp === null || mask === null) continue;
+		const network = (ifaceIp & mask) >>> 0;
+		if (!isRfc1918(network)) continue;
+		if ((peer & mask) >>> 0 === network) return true;
+	}
+	return false;
+}
+/** Docker creates /.dockerenv in every container — stable in-container signal. */
+const runningInContainer = existsSync("/.dockerenv");
+/**
+* A request we trust to mint a session because it originated from this machine —
+* the local browser hitting the dashboard directly (127.0.0.1), or the
+* host-local Traefik that fronts overdeck.localhost. In Docker, that Traefik reaches
+* the host server from a Docker-bridge IP (e.g. 172.18.0.2), NOT 127.0.0.1, so
+* a literal-loopback check alone silently breaks the zero-step bootstrap for
+* every overdeck.localhost user — their session mint 401s and no cookie is ever set.
+*
+* This is the auto-bootstrap that removes the manual one-time #overdeck_token
+* step: any browser on overdeck.localhost gets a session with no user action. It is
+* NOT a security downgrade for the LAN — the raw API ports bind 0.0.0.0, but a
+* direct LAN hit has a non-loopback, non-Docker-bridge peer and is rejected. We
+* read ONLY the real TCP peer (request.remoteAddress), never X-Forwarded-For,
+* which a caller could spoof.
+*/
+function isLoopbackPeer(request) {
+	const remoteAddress = request.remoteAddress;
+	const raw = remoteAddress && typeof remoteAddress === "object" && "_tag" in remoteAddress ? Option.getOrElse(remoteAddress, () => "") : typeof remoteAddress === "string" ? remoteAddress : "";
+	if (!raw) return false;
+	const addr = raw.startsWith("::ffff:") ? raw.slice(7) : raw;
+	if (addr === "127.0.0.1" || addr === "::1") return true;
+	if (peerIsHostLocalDockerBridge(addr, networkInterfaces())) return true;
+	return runningInContainer && peerIsLocalContainerNetwork(addr, networkInterfaces());
+}
+function rejectUnauthorizedDashboardSessionMintRequest(request) {
+	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
+	if (!hasDashboardInternalToken(request) && !isLoopbackPeer(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
+	return null;
+}
+function rejectUnauthorizedDashboardRequest(request) {
+	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
+	if (!hasDashboardAuth(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
+	return null;
+}
+//#endregion
 //#region routes/jsonl-resolver.ts
+init_acp_conversation_parser();
 init_codex_conversation_parser();
 init_ohmypi_conversation_parser();
 init_pi_conversation_parser();
@@ -390,6 +601,8 @@ init_conversation_service();
 *                       order no longer reflects time-recency. We disambiguate
 *                       across all listed IDs by JSONL mtime.
 *   3. runtime state  — in-process mirror, populated by hooks
+*   4. agents registry — the DB row's session_id recorded at spawn; survives
+*                        janitor removal of the agent directory
 *
 * Async-only (fs/promises) because this code path runs inside the dashboard
 * server's event loop.
@@ -475,6 +688,10 @@ async function resolveClaudeSessionId(agentId, opts = {}) {
 		const runtimeState = await (opts.getRuntimeStateAsync ?? ((id) => Effect.runPromise(getAgentRuntimeState(id))))(agentId);
 		if (runtimeState?.claudeSessionId) return runtimeState.claudeSessionId;
 	} catch {}
+	if (!opts.agentsDirOverride) {
+		const registrySessionId = getAgentStateSync(agentId)?.sessionId?.trim();
+		if (registrySessionId) return registrySessionId;
+	}
 	return null;
 }
 /**
@@ -532,7 +749,7 @@ async function readRecordedState(agentId, opts) {
 * Resolve the harness for transcript routing. Reads state.json, then
 * self-corrects when the recorded value is stale.
 *
-* Trust an explicit non-default harness (codex / pi / ohmypi) — it was chosen
+* Trust an explicit non-default harness (codex / pi / ohmypi / acp) — it was chosen
 * by resolveHarness at spawn time and is not the generic fallback. The
 * 'claude-code' default, however, goes stale in one observed case: a
 * wipe-and-respawn that changed the provider-default harness left state.json
@@ -550,8 +767,9 @@ async function readRecordedState(agentId, opts) {
 */
 async function resolveAgentHarness(agentId, opts = {}) {
 	const recorded = (await readRecordedState(agentId, opts)).harness;
-	if (recorded === "codex" || recorded === "pi" || recorded === "ohmypi") return recorded;
+	if (recorded === "codex" || recorded === "pi" || recorded === "ohmypi" || recorded === "acp") return recorded;
 	if (await agentHasClaudeTranscript(agentId, opts)) return recorded ?? "claude-code";
+	if (await resolveAcpTranscriptPath(agentId, opts)) return "acp";
 	if (await resolveCodexRolloutPath(agentId, opts)) return "codex";
 	if (await resolvePiSessionPath(agentId, opts)) return "ohmypi";
 	return recorded;
@@ -581,7 +799,7 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 	const agentDir = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId);
 	const codexHome = join(agentDir, "codex-home");
 	if (!await pathExists$1(codexHome)) return null;
-	const { findRolloutPath, findLatestRollout } = await import("./codex-DNyiQDKW.js");
+	const { findRolloutPath, findLatestRollout } = await import("./codex-GcHuUF-k.js");
 	const threadId = (await readOptional(join(agentDir, "codex-thread-id")))?.trim();
 	if (threadId) {
 		const rollout = findRolloutPath(codexHome, threadId);
@@ -589,6 +807,11 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 	}
 	return findLatestRollout(codexHome);
 }
+/** Resolve the normalized transcript written by the persistent ACP host. */
+async function resolveAcpTranscriptPath(agentId, opts = {}) {
+	const transcriptPath = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId, "acp-session.jsonl");
+	return await pathExists$1(transcriptPath) ? transcriptPath : null;
+}
 /**
 * Resolve the pi/kimi session JSONL (PAN-1908). Pi writes its session transcript
 * as `<iso-ts>_<session-id>.jsonl` either in the agent dir's `sessions/` subdir
@@ -599,6 +822,7 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 async function resolvePiSessionPath(agentId, opts = {}) {
 	const agentDir = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId);
 	const NON_TRANSCRIPT = new Set([
+		"acp-session.jsonl",
 		"cost-events.jsonl",
 		"activity.jsonl",
 		"pending-events.jsonl"
@@ -637,17 +861,19 @@ async function resolveJsonlPath(agentId, workspacePath, opts = {}) {
 	const behavior = behaviorForHarness(harness);
 	if (behavior.transcriptKind === "codex-rollout-jsonl") return resolveCodexRolloutPath(agentId, opts);
 	if (behavior.transcriptKind === "ohmypi-jsonl") return resolvePiSessionPath(agentId, opts);
+	if (behavior.transcriptKind === "acp-jsonl") return resolveAcpTranscriptPath(agentId, opts);
 	const claudeSessionId = await resolveClaudeSessionId(agentId, opts);
 	if (!claudeSessionId) {
 		logTranscriptResolution(agentId, `missing-session-id:${harness ?? "unknown"}`, `failed harness=${harness ?? "unknown"} reason=no-session-id checked=session.id,sessions.json,runtime-state`, opts);
 		return null;
 	}
-	const jsonlPath = join(opts.claudeProjectsDirOverride ?? join(homedir(), ".claude", "projects"), encodeClaudeProjectDir(workspacePath), `${claudeSessionId}.jsonl`);
+	const effectiveWorkspacePath = (await readRecordedState(agentId, opts)).workspace ?? workspacePath;
+	const jsonlPath = join(opts.claudeProjectsDirOverride ?? join(homedir(), ".claude", "projects"), encodeClaudeProjectDir(effectiveWorkspacePath), `${claudeSessionId}.jsonl`);
 	if (await pathExists$1(jsonlPath)) {
 		logTranscriptResolution(agentId, `resolved:${jsonlPath}`, `resolved harness=${harness ?? "claude-code"} sessionId=${claudeSessionId} path=${jsonlPath}`, opts);
 		return jsonlPath;
 	}
-	logTranscriptResolution(agentId, `missing-jsonl:${jsonlPath}`, `failed harness=${harness ?? "claude-code"} reason=jsonl-missing sessionId=${claudeSessionId} workspace=${workspacePath} expectedPath=${jsonlPath}`, opts);
+	logTranscriptResolution(agentId, `missing-jsonl:${jsonlPath}`, `failed harness=${harness ?? "claude-code"} reason=jsonl-missing sessionId=${claudeSessionId} workspace=${effectiveWorkspacePath} expectedPath=${jsonlPath}`, opts);
 	return null;
 }
 //#endregion
@@ -807,7 +1033,7 @@ async function getWorkAgentLifecycleStateSnapshot(agentOrIssueId) {
 		runtimeState: runtime,
 		agentStatus,
 		canStartFresh: (!hasLiveTmuxSession || hasLiveTmuxSession && isStopped) && (!requiresSessionResetBeforeFreshStart || isOrphaned),
-		canResumeSession: !isRunning && hasResumableBackingState && (isStopped || isCrashed),
+		canResumeSession: !isRunning && hasSavedSession && hasResumableBackingState && (isStopped || isCrashed),
 		canRestartWithContext: hasAgentState && hasWorkspace,
 		canResetSession: hasSavedSession && hasResumableBackingState,
 		requiresSessionResetBeforeFreshStart,
@@ -834,15 +1060,14 @@ const getWorkAgentLifecycleState = (agentOrIssueId) => Effect.promise(() => getW
 *     expected feature branch. Reports drift and missing-workspace state
 *     because both are silent failure modes today.
 *
-* Cache: in-memory, 30s TTL, keyed by absolute path. Cache entries are
-* invalidated when the mtime of <path>/.git/HEAD changes, so a checkout
-* under a live conversation is picked up on the next list call without
-* waiting for TTL.
+* Cache: in-memory, keyed by absolute path and invalidated when the mtime of
+* <path>/.git/HEAD changes. Every read still stats HEAD, so a checkout under a
+* live conversation is picked up immediately without periodically respawning
+* two git processes for every unchanged workspace.
 *
 * All I/O is async (execFile / fs.promises). No execSync, no readFileSync.
 */
 const execFileAsync$3 = promisify(execFile);
-const GIT_INFO_TTL_MS = 3e4;
 const GIT_INFO_TIMEOUT_MS = 2e3;
 const cache = /* @__PURE__ */ new Map();
 /**
@@ -917,22 +1142,20 @@ async function readGitInfoFresh(absPath) {
 	};
 }
 /**
-* Resolve branch + worktree status for a conversation cwd. Cached for
-* GIT_INFO_TTL_MS, invalidated on HEAD mtime change.
+* Resolve branch + worktree status for a conversation cwd. Cached until the
+* HEAD mtime changes.
 */
 async function resolveConversationGitInfo(absPath) {
-	const now = Date.now();
 	const headMtimeMs = await readHeadMtimeMs(absPath);
 	if (headMtimeMs === null) return {
 		branch: null,
 		isWorktree: false
 	};
 	const cached = cache.get(absPath);
-	if (cached && cached.expiresAt > now && cached.headMtimeMs === headMtimeMs) return cached.value;
+	if (cached && cached.headMtimeMs === headMtimeMs) return cached.value;
 	const value = await readGitInfoFresh(absPath);
 	cache.set(absPath, {
 		value,
-		expiresAt: now + GIT_INFO_TTL_MS,
 		headMtimeMs
 	});
 	return value;
@@ -976,7 +1199,8 @@ function buildPanStartArgs(input) {
 		"--model",
 		input.model,
 		...input.harness ? ["--harness", input.harness] : [],
-		...input.allowHost ? ["--host", "--yes"] : []
+		...input.allowHost ? ["--host", "--yes"] : [],
+		...input.offBook ? ["--off-book"] : []
 	];
 }
 /**
@@ -1085,7 +1309,7 @@ function emitStartAgentPhase(issueId, phase, status, reason, details = {}) {
 	});
 }
 const INTERNAL_TOKEN_HEADER = "x-overdeck-internal-token";
-function constantTimeTokenEqual$1(provided, expected) {
+function constantTimeTokenEqual(provided, expected) {
 	if (!provided) return false;
 	const providedBuffer = Buffer.from(provided, "utf8");
 	const expectedBuffer = Buffer.from(expected, "utf8");
@@ -1111,7 +1335,7 @@ async function validateAgentRuntimeEventAuth(request) {
 			error: "internal token not configured"
 		}, { status: 503 })
 	};
-	if (constantTimeTokenEqual$1(getHeaderFromMap(request.headers, INTERNAL_TOKEN_HEADER), expected)) return { ok: true };
+	if (constantTimeTokenEqual(getHeaderFromMap(request.headers, INTERNAL_TOKEN_HEADER), expected)) return { ok: true };
 	return {
 		ok: false,
 		response: jsonResponse({
@@ -1727,7 +1951,7 @@ const getAgentOutputRoute = HttpRouter.add("GET", "/api/agents/:id/output", http
 			} catch {}
 			let stdout;
 			if (isRemote && vmName) {
-				const { getRemoteAgentOutput } = await import("./remote-agents-D6O_zETW.js");
+				const { getRemoteAgentOutput } = await import("./remote-agents-CA3Ihlxj.js");
 				stdout = await getRemoteAgentOutput(id, vmName, parseInt(String(lines), 10) || 100);
 			} else stdout = await Effect.runPromise(capturePane(id, parseInt(String(lines), 10) || 100));
 			if (!stdout || stdout.trim() === "" || stdout.trim() === "Session not found") {
@@ -1792,6 +2016,20 @@ async function buildConversationResponse(id) {
 				streaming: false
 			};
 		}
+		if (harness === "acp") {
+			const sessionFile = await resolveAcpTranscriptPath(id);
+			if (!sessionFile || !existsSync(sessionFile)) return EMPTY_CONVERSATION;
+			const result = await parseAcpConversationMessages(sessionFile);
+			return {
+				...result,
+				messages: result.messages.map((message) => message.role === "assistant" ? {
+					...message,
+					completedAt: message.completedAt ?? message.createdAt,
+					streaming: false
+				} : message),
+				streaming: false
+			};
+		}
 		let jsonlPath = null;
 		const pinnedSessionId = await readLauncherPinnedSessionId(id);
 		if (pinnedSessionId) {
@@ -1907,7 +2145,7 @@ const postAgentTellRoute = postAgentMessageLikeRoute("/api/agents/:id/tell");
 const postAgentPokeRoute = HttpRouter.add("POST", "/api/agents/:id/poke", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	const { message } = yield* readJsonBody$1;
-	const pokeMsg = message || "You seem to have been inactive for a while. If you're stuck:\n1. Check your current task in continue.vbrief.json\n2. Try an alternative approach if blocked\n3. Ask for help if needed\n\nWhat's your current status?";
+	const pokeMsg = message || "You seem to have been inactive for a while. If you're stuck:\n1. Check your current xBRIEF task with `pan task show <issue> <item-id>`\n2. Try an alternative approach if blocked\n3. Ask for help if needed\n\nWhat's your current status?";
 	yield* Effect.promise(() => messageAgent(id, pokeMsg));
 	return jsonResponse({
 		success: true,
@@ -2148,7 +2386,7 @@ async function cleanupConversationAttachments(name) {
 *  sessions that the lifecycle poller missed. */
 async function cleanupOrphanedConversationAttachments() {
 	try {
-		const { listConversations } = await import("./conversations-H9if0bCQ.js");
+		const { listConversations } = await import("./conversations-CAsJF9kh.js");
 		const convNames = new Set(listConversations().map((c) => c.name));
 		const root = getConversationAttachmentsRoot();
 		await runInBatches((await readdir(root, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !convNames.has(entry.name)).map((entry) => join(root, entry.name)), 10, (path) => rm(path, {
@@ -2426,7 +2664,7 @@ async function stopConversationRuntime(conv, name) {
 function shellQuote(str) {
 	return "'" + str.replace(/'/g, "'\"'\"'") + "'";
 }
-const SAFE_MODEL_PATTERN = /^[a-zA-Z0-9_.:\/-]+$/;
+const SAFE_MODEL_PATTERN = MODEL_ID_PATTERN;
 const SAFE_EFFORT_PATTERN = /^(low|medium|high)$/;
 const SAFE_ISSUE_ID_PATTERN = /^[A-Z0-9]+-[0-9]+$/;
 const PI_CONVERSATION_SOURCE_CONTRACT = [
@@ -2438,7 +2676,7 @@ async function resolveAllowedHarness(requested, model) {
 	if (!model) return "claude-code";
 	return resolveHarness({
 		model,
-		explicit: requested === "ohmypi" || requested === "claude-code" || requested === "codex" ? requested : void 0
+		explicit: requested === "ohmypi" || requested === "claude-code" || requested === "codex" || requested === "acp" ? requested : void 0
 	});
 }
 async function isInsideGitWorkTree(dir) {
@@ -2520,6 +2758,10 @@ function shouldUseSupervisorForConversation(harness, options = {}) {
 	return getHarnessBehavior(harness).supportsPtySupervisor && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1";
 }
 async function waitForConversationRuntimeReady(tmuxSession, harness, mode) {
+	if (harness === "acp") {
+		await waitForAcpHostReady(tmuxSession);
+		return;
+	}
 	const transcriptKind = getHarnessBehavior(harness).transcriptKind;
 	if (transcriptKind === "ohmypi-jsonl") {
 		if (!await waitForPiTuiReady(tmuxSession)) throw new Error(`Pi (ohmypi) did not become interactive in ${tmuxSession} within the startup window — MCP server connections are likely still in progress. Retry once MCP servers finish connecting, or check ~/.claude/mcp.json for a slow/hanging server.`);
@@ -2535,7 +2777,7 @@ async function handleConversationSwitchModel(name, body) {
 	const currentHarness = conv.harness ?? "claude-code";
 	const requestedHarness = body["harness"];
 	let harness = currentHarness;
-	if (requestedHarness === "ohmypi" || requestedHarness === "pi" || requestedHarness === "claude-code" || requestedHarness === "codex") {
+	if (requestedHarness === "ohmypi" || requestedHarness === "pi" || requestedHarness === "claude-code" || requestedHarness === "codex" || requestedHarness === "acp") {
 		const requestedRuntime = requestedHarness === "pi" ? "ohmypi" : requestedHarness;
 		if (requestedRuntime !== currentHarness) {
 			const policyModel = model ?? conv.model ?? "";
@@ -2688,14 +2930,25 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 	let providerExportsStr = "";
 	let piFields;
 	let codexFields;
+	let acpFields;
 	let codexTransport;
-	if (model) {
+	if (behavior.launchCommandKind === "acp-host") {
+		if (!model) throw new Error("ACP conversation requires a model");
+		if (!SAFE_MODEL_PATTERN.test(model)) throw new Error("Invalid model name");
+		const sessionIdPath = join(getOverdeckHome(), "agents", tmuxSession, "acp-session-id");
+		const resumeSessionId = resume ? await readFile(sessionIdPath, "utf-8").then((value) => value.trim() || void 0).catch(() => void 0) : void 0;
+		await rm(sessionIdPath, { force: true });
+		acpFields = {
+			...getAcpLauncherFields(tmuxSession, model, cwd, harnessLaunch.binaryPath, "work"),
+			resumeSessionId
+		};
+		runtimeCommand = "acp-host";
+	} else if (model) {
 		if (!SAFE_MODEL_PATTERN.test(model)) throw new Error("Invalid model name");
 		runtimeCommand = await getAgentRuntimeBaseCommand(model, void 0, void 0, harness);
 		const mode = resolvePermissionModeSync();
 		if (!runtimeCommand.includes("--permission-mode")) runtimeCommand = `${runtimeCommand} --permission-mode ${mode === "auto" ? "auto" : BYPASS_PERMISSION_MODE}`;
 		providerExportsStr = (await getProviderExportsForModel(model)).trim();
-		await getProviderEnvForModel(model);
 		if (behavior.transcriptKind === "ohmypi-jsonl") {
 			if (getProviderForModelSync(model).name === "openai") {
 				const auth = await getOhmypiCodexAuthStatus({ refreshIfExpired: true });
@@ -2727,7 +2980,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 			const codexApprovalPolicy = codexPermMode === "full-access" ? "never" : "on-request";
 			const codexSandboxMode = codexPermMode === "full-access" ? "danger-full-access" : codexPermMode === "read-only" ? "read-only" : "workspace-write";
 			const codexApprovalsReviewer = codexPermMode === "auto-review" ? "auto_review" : void 0;
-			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-DNyiQDKW.js");
+			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-GcHuUF-k.js");
 			initCodexHome(codexHome, {
 				trustedDir: cwd,
 				approvalPolicy: codexApprovalPolicy,
@@ -2757,7 +3010,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		await writePtyToken(tmuxSession);
 	}
 	let channelsBridgeMcpConfig;
-	if (!piFields && !codexFields && !plainFork && isClaudeCodeChannelsEnabled() && (!model || getProviderForModelSync(model).name === "anthropic") && process.env.CLAUDE_CODE_USE_BEDROCK !== "1" && process.env.CLAUDE_CODE_USE_VERTEX !== "1" && process.env.CLAUDE_CODE_USE_FOUNDRY !== "1" && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1") {
+	if (!piFields && !codexFields && !acpFields && !plainFork && isClaudeCodeChannelsEnabled() && (!model || getProviderForModelSync(model).name === "anthropic") && process.env.CLAUDE_CODE_USE_BEDROCK !== "1" && process.env.CLAUDE_CODE_USE_VERTEX !== "1" && process.env.CLAUDE_CODE_USE_FOUNDRY !== "1" && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1") {
 		channelsBridgeMcpConfig = join(stateDir, "agent-mcp.json");
 		writeBridgeTokenSync(tmuxSession);
 		await writeChannelsBridgeMcpConfig(channelsBridgeMcpConfig, tmuxSession);
@@ -2771,19 +3024,19 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		unsetProviderEnv: true,
 		overdeckEnv: {
 			...issueId ? { issueId } : {},
-			...piFields || codexFields || useSupervisor ? { agentId: tmuxSession } : {}
+			...piFields || codexFields || acpFields || useSupervisor ? { agentId: tmuxSession } : {}
 		},
 		extraEnvExports: [harnessLaunch.pathExport, `export OVERDECK_DASHBOARD_URL="http://127.0.0.1:${process.env["API_PORT"] ?? process.env["PORT"] ?? "3011"}"`],
 		providerExports: providerExportsStr || void 0,
 		trapHup: true,
 		baseCommand: runtimeCommand,
-		appendSystemPromptFiles: piFields ? await piConversationSystemPromptFiles(cwd) : codexFields ? [] : await claudeConversationSystemPromptFiles(cwd),
+		appendSystemPromptFiles: piFields ? await piConversationSystemPromptFiles(cwd) : codexFields || acpFields ? [] : await claudeConversationSystemPromptFiles(cwd),
 		model: launcherModel,
-		...piFields ?? codexFields ?? {
+		...piFields ?? codexFields ?? acpFields ?? {
 			resumeSessionId: resume ? claudeSessionId : void 0,
 			sessionId: resume ? void 0 : claudeSessionId
 		},
-		extraArgs: !piFields && effort ? `--effort "${effort}"` : void 0,
+		extraArgs: !piFields && !acpFields && effort ? `--effort "${effort}"` : void 0,
 		keepAlive: true,
 		fileMode: 448,
 		channelsBridgeMcpConfig,
@@ -2796,7 +3049,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 	} catch {}
 	console.log(`[claude-invoke] purpose=conversation-session | model=${model || "default"} | source=conversations.ts:spawnConversationSession | session=${tmuxSession} | resume=${resume} | command="${runtimeCommand}"`);
 	try {
-		const { preTrustDirectory } = await import("./workspace-manager-B1WOfKvB.js");
+		const { preTrustDirectory } = await import("./workspace-manager-CWT55qeI.js");
 		preTrustDirectory(cwd);
 	} catch {}
 	try {
@@ -2813,7 +3066,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		const codexHomeDir = codexFields.codexHome;
 		(async () => {
 			try {
-				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-DNyiQDKW.js");
+				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-GcHuUF-k.js");
 				const rollout = await waitForCodexRollout(codexHomeDir, 12e4);
 				if (rollout) {
 					const threadId = extractThreadIdFromRollout(rollout);
@@ -2889,10 +3142,14 @@ async function handleConversationCreate(body, deps) {
 				await spawnConversationSession(tmuxSession, cwd, claudeSessionId, model, effort, issueId, false, harness);
 				console.log(`[conversations] tmux session ${tmuxSession} spawned, sessionId: ${claudeSessionId}`);
 				await waitForConversationRuntimeReady(tmuxSession, harness, "spawn");
-				if (message) await deliverAgentMessage(tmuxSession, message, "conversation-message", resolveConversationDeliveryMethod(conv));
+				if (message) {
+					const delivery = await deliverAgentMessage(tmuxSession, message, "conversation-message", resolveConversationDeliveryMethod(conv));
+					if (harness === "acp" && !delivery.ok) throw new Error(`ACP initial prompt did not land: ${delivery.failure ?? "unknown failure"}`);
+				}
 			} catch (spawnErr) {
 				const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
 				console.error(`[conversations] background spawn failed for ${tmuxSession}: ${msg}`);
+				if (harness === "acp") await stopConversationRuntime(conv, name);
 				updateSpawnError(name, msg);
 				getEventStore().emitOnly({
 					type: "conversation.created",
@@ -2978,6 +3235,9 @@ async function handleConversationResume(name, body, deps) {
 				reattached: false,
 				sessionAlive: true
 			});
+		} catch (error) {
+			if (harness === "acp") await stopConversationRuntime(conv, name);
+			throw error;
 		} finally {
 			respawn.done();
 		}
@@ -3012,13 +3272,16 @@ async function handleConversationRestartAll(deps) {
 		const results = [];
 		for (const conv of convs) {
 			const respawn = markRespawnPending(conv.tmuxSession);
+			let attemptedHarness = conv.harness ?? "claude-code";
 			try {
 				await Effect.runPromise(killSession(conv.tmuxSession).pipe(Effect.catch(() => Effect.succeed(void 0))));
 				const oldSessionId = conv.claudeSessionId;
 				const sessionFileForResume = await deps.resolveSessionFile(conv);
 				const canResume = !!oldSessionId && !!sessionFileForResume && existsSync(sessionFileForResume);
 				const harness = await resolveAllowedHarness(conv.harness, conv.model);
+				attemptedHarness = harness;
 				await spawnConversationSession(conv.tmuxSession, conv.cwd, oldSessionId ?? randomUUID$1(), conv.model ?? void 0, conv.effort ?? void 0, conv.issueId ?? void 0, canResume, harness);
+				if (harness === "acp") await waitForConversationRuntimeReady(conv.tmuxSession, harness, "respawn");
 				setConversationHarness(conv.name, harness);
 				markConversationActive(conv.name);
 				results.push({
@@ -3029,6 +3292,7 @@ async function handleConversationRestartAll(deps) {
 			} catch (err) {
 				const msg = err instanceof Error ? err.message : String(err);
 				console.error(`[conversations] Failed to restart ${conv.name}:`, msg);
+				if (attemptedHarness === "acp") await stopConversationRuntime(conv, conv.name);
 				results.push({
 					name: conv.name,
 					model: conv.model,
@@ -3232,6 +3496,7 @@ function pickDeliverAs(bodyDeliverAs) {
 }
 function resolveConversationDeliveryMethod(conv) {
 	const harness = conv.harness ?? "claude-code";
+	if (harness === "acp") return "auto";
 	if (isPiControlChannelHarness(harness)) return "auto";
 	if (harness === "codex" && loadConfigSync().config.codex?.transport !== "tui") return "auto";
 	return conv.deliveryMethod ?? (getHarnessBehavior(harness).deliveryKind === "rpc-fifo" ? "tmux" : "auto");
@@ -3692,14 +3957,14 @@ const postInternalAgentPermissionRequestRoute = HttpRouter.add("POST", "/api/int
 		error: "missing agent id"
 	}, { status: 400 });
 	const request = yield* HttpServerRequest.HttpServerRequest;
-	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-C9DdEOKY.js"));
+	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-BrcU6qfe.js"));
 	const expected = getInternalTokenSync();
 	if (!expected) return jsonResponse({
 		ok: false,
 		error: "internal token not configured"
 	}, { status: 503 });
 	const rawHeader = request.headers[INTERNAL_TOKEN_HEADER];
-	if (!constantTimeTokenEqual$1(Array.isArray(rawHeader) ? rawHeader[0] : rawHeader, expected)) return jsonResponse({
+	if (!constantTimeTokenEqual(Array.isArray(rawHeader) ? rawHeader[0] : rawHeader, expected)) return jsonResponse({
 		ok: false,
 		error: "forbidden"
 	}, { status: 403 });
@@ -3959,7 +4224,7 @@ const getAgentHealthHistoryRoute = HttpRouter.add("GET", "/api/agents/:id/health
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const urlOpt = HttpServerRequest.toURL(request);
 	const hours = Option.isSome(urlOpt) ? urlOpt.value.searchParams.get("hours") ?? "24" : "24";
-	const { getHealthHistory } = yield* Effect.promise(() => import("./health-events-C1whmd58.js"));
+	const { getHealthHistory } = yield* Effect.promise(() => import("./health-events-BDOHby5Q.js"));
 	const endTime = /* @__PURE__ */ new Date();
 	const startTime = /* @__PURE__ */ new Date(endTime.getTime() - parseInt(hours) * 60 * 60 * 1e3);
 	const events = getHealthHistory(id, startTime.toISOString(), endTime.toISOString());
@@ -4000,7 +4265,7 @@ function emitAgentRuntimeEvent(id, body, timestamp) {
 				detail: String(decoded.failure)
 			}, { status: 400 })
 		};
-		const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-CsQ07Pxe.js"));
+		const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-D5UGKIJL.js"));
 		yield* (yield* AgentStateService).emit(decoded.success);
 		return {
 			ok: true,
@@ -4082,7 +4347,7 @@ const getAgentRuntimeRoute = HttpRouter.add("GET", "/api/agents/:id/runtime", ht
 		success: false,
 		error: "missing agent id"
 	}, { status: 400 });
-	const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-CsQ07Pxe.js"));
+	const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-D5UGKIJL.js"));
 	const snapshot = yield* (yield* AgentStateService).get(id);
 	if (!snapshot) return jsonResponse({
 		success: false,
@@ -4146,57 +4411,129 @@ function saveAgentStateAndEmitEvent(state, event) {
 function saveAgentStateAndEmitEventProgram(state, event) {
 	return Effect.sync(() => saveAgentStateAndEmitEvent(state, event));
 }
-/**
-* Dependency-injected variant for tests.
-*/
-function saveAgentStateAndEmitEventWithDeps(db, eventStore, state, event) {
-	prepareAgentStateForSave(state);
-	writeAgentStateJsonSync(state);
+function writeProjectionRows(db, state, event) {
 	const record = event;
 	const timestamp = record["timestamp"] ?? (/* @__PURE__ */ new Date()).toISOString();
 	const timestampMs = new Date(timestamp).getTime();
 	const payload = JSON.stringify(record["payload"] ?? {});
 	const updatedAt = Date.now();
+	db.prepare(`INSERT OR IGNORE INTO issues (id, stage, updated_at) VALUES (?, 'working', ?)`).run(state.issueId, updatedAt);
+	db.prepare(`INSERT OR REPLACE INTO agents (${AGENT_COLUMNS_FOR_DB.join(", ")}) VALUES (${AGENT_COLUMNS_FOR_DB.map(() => "?").join(", ")})`).run(...stateToOverdeckParamsForDb(state, updatedAt));
+	db.prepare(`INSERT INTO events (type, timestamp, payload) VALUES (?, ?, ?)`).run(event.type, timestampMs, payload);
+	const sequence = db.prepare(`SELECT last_insert_rowid() AS sequence`).get()?.sequence ?? 0;
+	return {
+		sequence,
+		stored: buildStoredEvent(event, sequence)
+	};
+}
+function emitCommittedProjection(eventStore, state, event, rows) {
+	eventStore.emitStored(rows.stored);
+	logAgentLifecycleSync(state.id, `projected ${event.type} (seq=${rows.sequence}) for ${state.id}`);
+	return { sequence: rows.sequence };
+}
+function rollbackTransaction(db) {
+	try {
+		db.exec("ROLLBACK");
+	} catch {}
+}
+function saveAgentStateAndEmitEventWithDeps(db, eventStore, state, event) {
+	prepareAgentStateForSave(state);
+	writeAgentStateJsonSync(state);
 	db.exec("BEGIN IMMEDIATE");
 	try {
-		db.prepare(`INSERT OR IGNORE INTO issues (id, stage, updated_at) VALUES (?, 'working', ?)`).run(state.issueId, updatedAt);
-		db.prepare(`INSERT OR REPLACE INTO agents (${AGENT_COLUMNS_FOR_DB.join(", ")}) VALUES (${AGENT_COLUMNS_FOR_DB.map(() => "?").join(", ")})`).run(...stateToOverdeckParamsForDb(state, updatedAt));
-		db.prepare(`INSERT INTO events (type, timestamp, payload) VALUES (?, ?, ?)`).run(event.type, timestampMs, payload);
-		const sequence = db.prepare(`SELECT last_insert_rowid() AS sequence`).get()?.sequence ?? 0;
+		const rows = writeProjectionRows(db, state, event);
 		db.exec("COMMIT");
-		const stored = buildStoredEvent(event, sequence);
-		eventStore.emitStored(stored);
-		logAgentLifecycleSync(state.id, `projected ${event.type} (seq=${sequence}) for ${state.id}`);
-		return { sequence };
+		return emitCommittedProjection(eventStore, state, event, rows);
 	} catch (err) {
-		try {
-			db.exec("ROLLBACK");
-		} catch {}
+		rollbackTransaction(db);
 		throw err;
 	}
 }
-//#endregion
-//#region routes/agents/lifecycle-stop.ts
-init_agents$1();
-init_activity_logger();
-init_tmux();
-init_domain_services();
-function createAgentStopHandler(lifecycleEvent) {
-	return httpHandler(Effect.gen(function* () {
-		const originCheck = validateOrigin(yield* HttpServerRequest.HttpServerRequest);
-		if (!originCheck.ok) return jsonResponse({
-			ok: false,
-			error: originCheck.error
-		}, { status: 403 });
-		const id = (yield* HttpRouter.params)["id"] ?? "";
+/**
+* Claim the single in-flight work-spawn slot and project its starting state.
+* The SQLite write lock makes the status check and placeholder insert one
+* operation, so concurrent dashboard requests cannot both launch `pan start`.
+*/
+function claimAgentStartPlaceholderWithDeps(db, eventStore, state, event, hasLiveTmuxSession) {
+	if (hasLiveTmuxSession) return {
+		claimed: false,
+		reason: "live-session"
+	};
+	prepareAgentStateForSave(state);
+	db.exec("BEGIN IMMEDIATE");
+	try {
+		const current = db.prepare(`SELECT status, started_at AS startedAt FROM agents WHERE id = ?`).get(state.id);
+		const startingWithinGrace = current?.status === "starting" && current.startedAt !== null && Date.now() - current.startedAt < 12e4;
+		if (current?.status === "running" || startingWithinGrace) {
+			rollbackTransaction(db);
+			return {
+				claimed: false,
+				reason: "active-state"
+			};
+		}
+		writeAgentStateJsonSync(state);
+		const rows = writeProjectionRows(db, state, event);
+		db.exec("COMMIT");
+		emitCommittedProjection(eventStore, state, event, rows);
+		return { claimed: true };
+	} catch (err) {
+		rollbackTransaction(db);
+		throw err;
+	}
+}
+function claimAgentStartPlaceholderProgram(state, event, hasLiveTmuxSession) {
+	return Effect.sync(() => claimAgentStartPlaceholderWithDeps(getOverdeckDatabaseSync(), getEventStore(), state, event, hasLiveTmuxSession));
+}
+/**
+* Roll back only the placeholder owned by this failed spawn attempt. If the
+* agent has already advanced to a real running state, the compare fails and
+* the successful concurrent launch is left untouched.
+*/
+function rollbackAgentStartPlaceholderWithDeps(db, eventStore, placeholder, fallback, event) {
+	prepareAgentStateForSave(fallback);
+	db.exec("BEGIN IMMEDIATE");
+	try {
+		const current = db.prepare(`SELECT status, model, started_at AS startedAt FROM agents WHERE id = ?`).get(placeholder.id);
+		const placeholderStartedAt = new Date(placeholder.startedAt).getTime();
+		if (!(current?.status === "starting" && current.model === "pending-work-spawn" && current.startedAt === placeholderStartedAt)) {
+			rollbackTransaction(db);
+			return false;
+		}
+		writeAgentStateJsonSync(fallback);
+		const rows = writeProjectionRows(db, fallback, event);
+		db.exec("COMMIT");
+		emitCommittedProjection(eventStore, fallback, event, rows);
+		return true;
+	} catch (err) {
+		rollbackTransaction(db);
+		throw err;
+	}
+}
+function rollbackAgentStartPlaceholderProgram(placeholder, fallback, event) {
+	return Effect.sync(() => rollbackAgentStartPlaceholderWithDeps(getOverdeckDatabaseSync(), getEventStore(), placeholder, fallback, event));
+}
+//#endregion
+//#region routes/agents/lifecycle-stop.ts
+init_agents$1();
+init_activity_logger();
+init_tmux();
+init_domain_services();
+function createAgentStopHandler(lifecycleEvent) {
+	return httpHandler(Effect.gen(function* () {
+		const originCheck = validateOrigin(yield* HttpServerRequest.HttpServerRequest);
+		if (!originCheck.ok) return jsonResponse({
+			ok: false,
+			error: originCheck.error
+		}, { status: 403 });
+		const id = (yield* HttpRouter.params)["id"] ?? "";
 		yield* EventStoreService;
 		const stateBeforeStop = yield* getAgentState(id);
 		yield* Effect.promise(() => appendAgentLifecycleLog(id, lifecycleEvent));
 		yield* stopAgent(id);
 		if (stateBeforeStop?.issueId) yield* Effect.promise(async () => {
 			try {
-				const { resolveProjectFromIssueSync } = await import("./projects-BKkwpH6q.js");
-				const { findWorkspacePath } = await import("./archive-planning-Cp_DC1j-.js");
+				const { resolveProjectFromIssueSync } = await import("./projects-vjjcmiN8.js");
+				const { findWorkspacePath } = await import("./archive-planning-BZDgzoEj.js");
 				const issueLower = stateBeforeStop.issueId.toLowerCase();
 				const workspacePath = findWorkspacePath(resolveProjectFromIssueSync(stateBeforeStop.issueId)?.projectPath ?? process.cwd(), issueLower);
 				if (workspacePath) {
@@ -4332,9 +4669,18 @@ const postAgentUnpauseRoute = HttpRouter.add("POST", "/api/agents/:id/unpause",
 		payload: buildAgentControlEventPayload(updatedState, toAgentStatusPayload(stateBeforeUnpause.status), hasLiveTmuxSession)
 	});
 	invalidateAgentsCache();
+	let resumeTriggered = false;
+	if ((yield* getWorkAgentLifecycleState(id)).canResumeSession && updatedState.troubled !== true) {
+		resumeTriggered = true;
+		yield* Effect.promise(() => appendAgentLifecycleLog(id, "agent.unpause_immediate_resume_triggered"));
+		import("./resume-BFv1PGpA.js").then(({ resumeAgent }) => resumeAgent(id)).then((result) => {
+			if (!result.success) console.warn(`[agents] immediate resume after unpause failed for ${id}: ${result.error}`);
+		}).catch((err) => console.warn(`[agents] immediate resume after unpause errored for ${id}:`, err));
+	}
 	return jsonResponse({
 		success: true,
-		agent: updatedState
+		agent: updatedState,
+		resumeTriggered
 	});
 })));
 const postAgentUntroubledRoute = HttpRouter.add("POST", "/api/agents/:id/untroubled", httpHandler(Effect.gen(function* () {
@@ -4372,6 +4718,7 @@ const postAgentUntroubledRoute = HttpRouter.add("POST", "/api/agents/:id/untroub
 init_config_yaml();
 init_agents$1();
 init_harness_policy();
+init_model_validation();
 init_operator_interventions();
 init_projects();
 init_tmux();
@@ -5020,7 +5367,6 @@ const postAgentsRestartWithConfigRoute = HttpRouter.add("POST", "/api/agents/res
 })));
 //#endregion
 //#region routes/agents/control.ts
-init_config();
 init_jsonl_parser();
 init_model_validation();
 init_paths();
@@ -5174,10 +5520,328 @@ const postAgentSwitchModelRoute = HttpRouter.add("POST", "/api/agents/:id/switch
 	return jsonResponse({ error: `Agent ${(yield* HttpRouter.params)["id"] ?? ""} model is locked once the agent is spawned` }, { status: 409 });
 })));
 //#endregion
-//#region ../../lib/vbrief/auto-synthesize.ts
-init_state_read_home();
-init_codex_auth();
-init_state_home();
+//#region ../../lib/orders/eligibility.ts
+function evaluateOrderDispatchEligibility(input) {
+	const issueId = input.issueId.toUpperCase();
+	const item = input.book.items.find((candidate) => candidate.issue.toUpperCase() === issueId);
+	if (!item) {
+		const overrideUsed = input.offBook === true;
+		return {
+			eligible: overrideUsed,
+			overrideUsed,
+			...overrideUsed ? {} : {
+				code: "off-book",
+				message: `Issue ${issueId} is not in active order book ${input.book.id}; work-agent dispatch is blocked. Retry with --off-book only for an intentional exception.`
+			},
+			conditions: [{
+				key: "book-membership",
+				met: overrideUsed,
+				detail: overrideUsed ? `Issue ${issueId} is outside the book and the operator supplied --off-book.` : `Issue ${issueId} is not a member of ${input.book.id}.`
+			}]
+		};
+	}
+	const terminalByIssue = new Map(input.progress.items.map((progress) => [progress.issue.toUpperCase(), progress.terminal]));
+	for (const [issue, terminal] of input.prerequisiteTerminal ?? []) if (!terminalByIssue.has(issue.toUpperCase())) terminalByIssue.set(issue.toUpperCase(), terminal);
+	const unmetPrereq = item.prereqs.find((prereq) => terminalByIssue.get(prereq.toUpperCase()) !== true);
+	const prereqsMet = unmetPrereq === void 0;
+	const otherInFlight = input.book.items.filter((candidate) => candidate.issue.toUpperCase() !== issueId && input.inFlightIssues.has(candidate.issue.toUpperCase()));
+	const laneBBlocker = item.lane === "B" ? otherInFlight.find((candidate) => candidate.lane === "B") : void 0;
+	const laneAInFlight = otherInFlight.filter((candidate) => candidate.lane === "A").length;
+	const laneSlotFree = item.lane === "B" ? laneBBlocker === void 0 : laneAInFlight < input.book.settings.laneAConcurrency;
+	const postureOpen = input.book.settings.posture === "open";
+	const prdReverified = !item.reVerify;
+	const conditions = [
+		{
+			key: "book-membership",
+			met: true,
+			detail: `${issueId} is a member of ${input.book.id}.`
+		},
+		{
+			key: "pickup-posture",
+			met: postureOpen,
+			detail: postureOpen ? "Order-book pickup posture is OPEN." : "Order-book pickup posture is DRAIN."
+		},
+		{
+			key: "lane-slot",
+			met: laneSlotFree,
+			detail: item.lane === "B" ? laneBBlocker ? `Lane B is occupied by ${laneBBlocker.issue}.` : "Lane B has no issue in flight." : `${laneAInFlight}/${input.book.settings.laneAConcurrency} Lane A slots are in flight.`
+		},
+		{
+			key: "prerequisites",
+			met: prereqsMet,
+			detail: unmetPrereq ? `Prerequisite ${unmetPrereq.toUpperCase()} is not terminal.` : "Every prerequisite is landed or parked."
+		},
+		{
+			key: "prd-reverified",
+			met: prdReverified,
+			detail: prdReverified ? "No PRD re-verification is pending." : `${issueId} requires PRD re-verification before dispatch.`
+		}
+	];
+	if (!postureOpen) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "book-draining",
+		message: `Issue ${issueId} cannot start because order book ${input.book.id} is in DRAIN posture; no new book items may dispatch.`,
+		conditions
+	};
+	if (unmetPrereq) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "prerequisite-unmet",
+		message: `Issue ${issueId} cannot start because prerequisite ${unmetPrereq.toUpperCase()} has not landed or been parked.`,
+		conditions
+	};
+	if (!prdReverified) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "reverify-required",
+		message: `Issue ${issueId} cannot start until its PRD has been re-verified against current main.`,
+		conditions
+	};
+	if (laneBBlocker) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "lane-b-busy",
+		message: `Issue ${issueId} cannot start in Lane B because ${laneBBlocker.issue} is still in flight; Lane B allows one active issue at a time.`,
+		conditions
+	};
+	if (item.lane === "A" && !laneSlotFree) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "lane-a-full",
+		message: `Issue ${issueId} cannot start in Lane A because ${laneAInFlight} issues are already in flight and laneAConcurrency is ${input.book.settings.laneAConcurrency}.`,
+		conditions
+	};
+	return {
+		eligible: true,
+		overrideUsed: false,
+		conditions
+	};
+}
+//#endregion
+//#region ../../lib/orders/dispatch-gate.ts
+init_review_status();
+init_projects();
+function stateRootFor(projectRoot) {
+	const project = findProjectByPathSync(projectRoot);
+	if (!project) throw new Error(`No configured project contains ${projectRoot}`);
+	return resolveStateReadHomeSync(project).root;
+}
+function defaultInFlightIssues(_bookId, issueIds) {
+	const inFlight = /* @__PURE__ */ new Set();
+	for (const issueId of issueIds) {
+		const lifecycle = getWorkAgentLifecycleStateSync(issueId);
+		const review = getReviewStatusSync(issueId);
+		if (lifecycle.isRunning || review !== null && review.reviewStatus !== "pending") inFlight.add(issueId.toUpperCase());
+	}
+	return inFlight;
+}
+const booklessDecision = {
+	eligible: true,
+	overrideUsed: false,
+	conditions: []
+};
+async function checkActiveOrderDispatch(projectRoot, issueId, options = {}, deps = {}) {
+	const runId = await (deps.resolveRunId ?? resolveLiveFlywheelRunId)();
+	if (!runId) return {
+		ordersBound: false,
+		decision: booklessDecision
+	};
+	const launch = await (deps.readLaunch ?? readFlywheelLaunchMetadata)(runId);
+	const bookId = launch?.orders?.bookId;
+	if (!bookId) return {
+		ordersBound: false,
+		runId,
+		decision: booklessDecision
+	};
+	const stateRoot = (deps.stateRoot ?? stateRootFor)(launch?.workspace ?? projectRoot);
+	const book = (deps.getOrderBook ?? getBook)(stateRoot, bookId);
+	if (!book) throw new Error(`Active Flywheel run ${runId} references missing order book ${bookId}`);
+	const progress = (deps.computeProgress ?? computeBookProgress)(book);
+	const prerequisiteIds = [...new Set(book.items.flatMap((item) => item.prereqs.map((prereq) => prereq.toUpperCase())))];
+	const prerequisiteState = (deps.issueLookup ?? liveOrderIssueLookup)(prerequisiteIds);
+	const prerequisiteTerminal = new Map(prerequisiteIds.map((prereq) => {
+		const state = prerequisiteState.get(prereq);
+		return [prereq, state ? !state.open || state.parked : false];
+	}));
+	const inFlightIssues = new Set((deps.inFlightIssues ?? defaultInFlightIssues)(book.id, book.items.filter((item) => !progress.items.find((entry) => entry.issue === item.issue)?.terminal).map((item) => item.issue)));
+	for (const reserved of deps.reservedIssues ?? []) inFlightIssues.add(reserved.toUpperCase());
+	return {
+		ordersBound: true,
+		runId,
+		bookId,
+		decision: evaluateOrderDispatchEligibility({
+			book,
+			progress,
+			issueId,
+			inFlightIssues,
+			prerequisiteTerminal,
+			offBook: options.offBook
+		})
+	};
+}
+async function recordOffBookOverride(runId, bookId, issueId, actor = process.env["OVERDECK_AGENT_ID"] ?? "operator") {
+	const runDir = getFlywheelRunDir(runId);
+	const path = join(runDir, "orders-overrides.jsonl");
+	await mkdir(runDir, { recursive: true });
+	await appendFile(path, `${JSON.stringify({
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		runId,
+		bookId,
+		issueId: issueId.toUpperCase(),
+		actor,
+		override: "off-book"
+	})}\n`, "utf8");
+	return path;
+}
+//#endregion
+//#region ../../lib/orders/dispatch-reservation.ts
+var OrderDispatchReservationError = class extends Error {
+	constructor(check) {
+		super(check.decision.message ?? "Order-book dispatch is blocked.");
+		this.check = check;
+		this.name = "OrderDispatchReservationError";
+	}
+};
+const DEFAULT_STALE_MS = 900 * 1e3;
+const processLocks = /* @__PURE__ */ new Map();
+let reservationSequence = 0;
+async function withProcessLock(key, action) {
+	const previous = processLocks.get(key) ?? Promise.resolve();
+	let release;
+	const current = new Promise((resolve) => {
+		release = resolve;
+	});
+	const tail = previous.then(() => current);
+	processLocks.set(key, tail);
+	await previous;
+	try {
+		return await action();
+	} finally {
+		release();
+		if (processLocks.get(key) === tail) processLocks.delete(key);
+	}
+}
+function paths(root) {
+	return {
+		state: join(root, "orders-dispatch-reservations.json"),
+		temp: join(root, `orders-dispatch-reservations.${process.pid}.tmp`),
+		lock: join(root, "orders-dispatch-reservations.lock")
+	};
+}
+async function acquireFileLock(path, staleMs, now) {
+	try {
+		await mkdir(path);
+		return;
+	} catch (error) {
+		if ((typeof error === "object" && error !== null && "code" in error ? error.code : void 0) !== "EEXIST") throw error;
+	}
+	if (await stat$1(path).then((value) => now.getTime() - value.mtimeMs).catch(() => 0) <= staleMs) throw new Error("Another order-book dispatch admission is in progress; retry after it finishes.");
+	await rm(path, {
+		recursive: true,
+		force: true
+	});
+	await mkdir(path);
+}
+async function readReservations(path) {
+	try {
+		const parsed = JSON.parse(await readFile(path, "utf8"));
+		return Array.isArray(parsed) ? parsed : [];
+	} catch (error) {
+		if ((typeof error === "object" && error !== null && "code" in error ? error.code : void 0) === "ENOENT") return [];
+		throw error;
+	}
+}
+async function writeReservations(path, tempPath, reservations) {
+	await writeFile(tempPath, `${JSON.stringify(reservations, null, 2)}\n`, {
+		encoding: "utf8",
+		mode: 384
+	});
+	await rename(tempPath, path);
+}
+function freshReservations(reservations, now, staleMs) {
+	return reservations.filter((reservation) => {
+		const reservedAt = Date.parse(reservation.reservedAt);
+		return Number.isFinite(reservedAt) && now.getTime() - reservedAt <= staleMs;
+	});
+}
+async function reserveActiveOrderDispatch(projectRoot, issueId, options = {}, deps = {}) {
+	const initial = await checkActiveOrderDispatch(projectRoot, issueId, options, deps);
+	if (!initial.ordersBound || !initial.runId || !initial.bookId || !initial.decision.eligible) return {
+		check: initial,
+		release: async () => {}
+	};
+	const root = (deps.reservationRoot ?? getFlywheelRunDir)(initial.runId);
+	await mkdir(root, { recursive: true });
+	const reservationPaths = paths(root);
+	const staleMs = deps.staleMs ?? DEFAULT_STALE_MS;
+	const now = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
+	const reservationId = `${process.pid}-${now.getTime()}-${reservationSequence++}`;
+	let check = initial;
+	await withProcessLock(reservationPaths.lock, async () => {
+		await acquireFileLock(reservationPaths.lock, staleMs, now);
+		try {
+			const current = freshReservations(await readReservations(reservationPaths.state), now, staleMs);
+			check = await checkActiveOrderDispatch(projectRoot, issueId, options, {
+				...deps,
+				reservedIssues: new Set(current.filter((reservation) => reservation.bookId === initial.bookId).map((reservation) => reservation.issueId))
+			});
+			if (!check.decision.eligible) return;
+			current.push({
+				id: reservationId,
+				bookId: initial.bookId,
+				issueId: issueId.toUpperCase(),
+				reservedAt: now.toISOString()
+			});
+			await writeReservations(reservationPaths.state, reservationPaths.temp, current);
+		} finally {
+			await rm(reservationPaths.lock, {
+				recursive: true,
+				force: true
+			});
+		}
+	});
+	if (!check.decision.eligible) return {
+		check,
+		release: async () => {}
+	};
+	if (options.recordOverride && check.decision.overrideUsed) await (deps.recordOverride ?? recordOffBookOverride)(initial.runId, initial.bookId, issueId);
+	let released = false;
+	return {
+		check,
+		release: async () => {
+			if (released) return;
+			released = true;
+			const releasedAt = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
+			await withProcessLock(reservationPaths.lock, async () => {
+				await acquireFileLock(reservationPaths.lock, staleMs, releasedAt);
+				try {
+					const current = freshReservations(await readReservations(reservationPaths.state), releasedAt, staleMs).filter((reservation) => reservation.id !== reservationId);
+					await writeReservations(reservationPaths.state, reservationPaths.temp, current);
+				} finally {
+					await rm(reservationPaths.lock, {
+						recursive: true,
+						force: true
+					});
+				}
+			});
+		}
+	};
+}
+async function withActiveOrderDispatchReservation(projectRoot, issueId, options, action, deps = {}) {
+	const reservation = await reserveActiveOrderDispatch(projectRoot, issueId, options, deps);
+	if (!reservation.check.decision.eligible) return { check: reservation.check };
+	try {
+		return {
+			check: reservation.check,
+			result: await action()
+		};
+	} finally {
+		await reservation.release();
+	}
+}
+//#endregion
+//#region ../../lib/xbrief/auto-synthesize.ts
 init_io();
 function cleanMarkdownLine(line) {
 	return line.replace(/^[-*+]\s+\[[ xX]\]\s+/, "").replace(/^[-*+]\s+/, "").replace(/^#+\s+/, "").replace(/`([^`]+)`/g, "$1").trim();
@@ -5198,7 +5862,7 @@ function extractAcceptanceCriteriaFromIssue(title, body) {
 	}
 	return [`Issue's stated fix implemented with tests`];
 }
-function synthesizeMinimalVBrief(issue) {
+function synthesizeMinimalXBrief(issue) {
 	const issueId = issue.issueId.toUpperCase();
 	const issueLabel = issueId.toLowerCase();
 	const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -5209,9 +5873,9 @@ function synthesizeMinimalVBrief(issue) {
 		created: now,
 		metadata: { kind: "acceptance_criterion" }
 	}));
-	const canonicalFilename = generateVBriefFilename(issueId, issue.title, now);
+	const canonicalFilename = generateXBriefFilename(issueId, issue.title, now);
 	return {
-		vBRIEFInfo: {
+		xBRIEFInfo: {
 			version: "0.8",
 			created: now,
 			updated: now,
@@ -5258,8 +5922,8 @@ function synthesizeMinimalVBrief(issue) {
 		}
 	};
 }
-async function writeAutoStartVBriefPromise(projectRoot, workspacePath, issue) {
-	const document = synthesizeMinimalVBrief(issue);
+async function writeAutoStartXBriefPromise(projectRoot, workspacePath, issue) {
+	const document = synthesizeMinimalXBrief(issue);
 	const canonicalFilename = document.plan.metadata?.canonicalFilename;
 	const projectSpecsDir = join$1(projectRoot, ".pan", "specs");
 	const projectSpecPath = join$1(projectSpecsDir, canonicalFilename);
@@ -5271,7 +5935,7 @@ async function writeAutoStartVBriefPromise(projectRoot, workspacePath, issue) {
 		}
 	};
 	await mkdir$1(projectSpecsDir, { recursive: true });
-	await writeFile$1(projectSpecPath, serializeVBriefDocument(projectDocument), "utf-8");
+	await writeFile$1(projectSpecPath, serializeXBriefDocument(projectDocument), "utf-8");
 	return {
 		document,
 		workspaceSpecPath: projectSpecPath,
@@ -5280,235 +5944,34 @@ async function writeAutoStartVBriefPromise(projectRoot, workspacePath, issue) {
 	};
 }
 /**
-* Effect variant of writeAutoStartVBrief. Wraps mkdir + writeFile in a typed
+* Effect variant of writeAutoStartXBrief. Wraps mkdir + writeFile in a typed
 * FsError channel so callers in Effect-native code can compose with this
 * synthesis step without losing failure typing.
 */
-const writeAutoStartVBrief = (projectRoot, workspacePath, issue) => Effect.tryPromise({
-	try: () => writeAutoStartVBriefPromise(projectRoot, workspacePath, issue),
+const writeAutoStartXBrief = (projectRoot, workspacePath, issue) => Effect.tryPromise({
+	try: () => writeAutoStartXBriefPromise(projectRoot, workspacePath, issue),
 	catch: (cause) => new FsError({
 		path: projectRoot,
-		operation: "writeAutoStartVBrief",
+		operation: "writeAutoStartXBrief",
 		cause
 	})
 });
 //#endregion
-//#region routes/dashboard-auth.ts
-init_issue_lifecycle();
-init_internal_token();
-const DASHBOARD_SESSION_COOKIE = "overdeck_session";
-const DASHBOARD_CSRF_HEADER = "x-overdeck-csrf-token";
-const DASHBOARD_SESSION_MAX_AGE_SECONDS = 3600 * 24 * 30;
-let browserSessionToken;
-let browserCsrfToken;
-function getDashboardSessionToken() {
-	if (browserSessionToken) return browserSessionToken;
-	const override = process.env["OVERDECK_DASHBOARD_SESSION_TOKEN"];
-	if (override) {
-		browserSessionToken = override;
-		return browserSessionToken;
-	}
-	const internal = getInternalTokenSync();
-	browserSessionToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-session-v1").digest("base64url") : randomBytes(32).toString("base64url");
-	return browserSessionToken;
-}
-function dashboardCsrfToken() {
-	if (browserCsrfToken) return browserCsrfToken;
-	const override = process.env["OVERDECK_DASHBOARD_CSRF_TOKEN"];
-	if (override) {
-		browserCsrfToken = override;
-		return browserCsrfToken;
-	}
-	const internal = getInternalTokenSync();
-	browserCsrfToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-csrf-v1").digest("base64url") : randomBytes(32).toString("base64url");
-	return browserCsrfToken;
-}
-function constantTimeTokenEqual(provided, expected) {
-	if (!provided) return false;
-	return timingSafeEqual(createHash$1("sha256").update(provided).digest(), createHash$1("sha256").update(expected).digest());
-}
-function cookieValue(cookieHeader, name) {
-	if (!cookieHeader) return void 0;
-	for (const part of cookieHeader.split(";")) {
-		const [rawKey, ...rawValue] = part.trim().split("=");
-		if (rawKey !== name) continue;
-		try {
-			return decodeURIComponent(rawValue.join("="));
-		} catch {
-			return;
-		}
-	}
-}
-function dashboardSessionCookieHeader(options = {}) {
-	const secure = options.secure ? "; Secure" : "";
-	return `${DASHBOARD_SESSION_COOKIE}=${encodeURIComponent(getDashboardSessionToken())}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${DASHBOARD_SESSION_MAX_AGE_SECONDS}${secure}`;
-}
-function hasDashboardInternalTokenHeaders(headers) {
-	const expected = getInternalTokenSync();
-	if (!expected) return false;
-	if (constantTimeTokenEqual(getHeaderFromMap(headers, "x-overdeck-internal-token"), expected)) return true;
-	const authorization = getHeaderFromMap(headers, "authorization");
-	if (authorization) {
-		const [scheme, token] = authorization.split(/\s+/);
-		if (scheme?.toLowerCase() === "bearer" && constantTimeTokenEqual(token, expected)) return true;
-	}
-	return false;
-}
-function hasDashboardInternalToken(request) {
-	return hasDashboardInternalTokenHeaders(request.headers);
-}
-function hasDashboardAuthHeaders(headers) {
-	return hasDashboardInternalTokenHeaders(headers) || constantTimeTokenEqual(cookieValue(getHeaderFromMap(headers, "cookie"), "overdeck_session"), getDashboardSessionToken());
-}
-function hasDashboardAuth(request) {
-	return hasDashboardAuthHeaders(request.headers);
-}
-function isJsonContentType(headers) {
-	const contentType = getHeaderFromMap(headers, "content-type");
-	if (!contentType) return false;
-	const [mime] = contentType.toLowerCase().split(";");
-	return mime.trim() === "application/json";
-}
-function hasTrustedExactOrigin(headers) {
-	const origin = getHeaderFromMap(headers, "origin");
-	if (!origin) return false;
-	const normalized = normalizeOrigin(origin);
-	return !!normalized && getTrustedOrigins().includes(normalized);
-}
-function hasValidCsrfToken(headers) {
-	return constantTimeTokenEqual(getHeaderFromMap(headers, DASHBOARD_CSRF_HEADER), dashboardCsrfToken());
-}
-function rejectUnsafeDashboardMutationRequest(request) {
-	const authError = rejectUnauthorizedDashboardRequest(request);
-	if (authError) return authError;
-	const headers = request.headers;
-	if (!isJsonContentType(headers)) return jsonResponse({ error: "Content-Type must be application/json" }, { status: 400 });
-	if (hasDashboardInternalToken(request)) return null;
-	if (getHeaderFromMap(headers, "origin") && !hasTrustedExactOrigin(headers)) return jsonResponse({ error: "Invalid origin" }, { status: 403 });
-	if (!hasValidCsrfToken(headers)) return jsonResponse({ error: "Invalid CSRF token" }, { status: 403 });
-	return null;
-}
-function ipv4ToInt(value) {
-	const parts = value.split(".");
-	if (parts.length !== 4) return null;
-	let result = 0;
-	for (const part of parts) {
-		const octet = Number(part);
-		if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;
-		result = (result << 8 | octet) >>> 0;
-	}
-	return result;
-}
-/** RFC1918 private ranges — Docker bridges always fall inside one of these. */
-function isRfc1918(ip) {
-	return (ip & 4278190080) >>> 0 === 167772160 || (ip & 4293918720) >>> 0 === 2886729728 || (ip & 4294901760) >>> 0 === 3232235520;
-}
-/**
-* True when `addr` is the IP of a container on one of THIS host's Docker bridge
-* interfaces (docker0 / br-*). Such a peer can only be a process running on this
-* machine — our own host-local Traefik fronting overdeck.localhost, or another
-* Overdeck container — never a LAN client (a direct LAN hit to the 0.0.0.0
-* API port arrives with a LAN peer that is not inside any Docker bridge subnet).
-*
-* Pure for testability: the interface map is injected. We only ever trust
-* RFC1918 bridge subnets, so a misconfigured public-range br-* cannot widen
-* trust beyond the local Docker fabric.
-*/
-function peerIsHostLocalDockerBridge(addr, interfaces) {
-	const peer = ipv4ToInt(addr);
-	if (peer === null) return false;
-	for (const [name, addrs] of Object.entries(interfaces)) {
-		if (name !== "docker0" && !name.startsWith("br-")) continue;
-		for (const info of addrs ?? []) {
-			if (info.family !== "IPv4") continue;
-			const ifaceIp = ipv4ToInt(info.address);
-			const mask = ipv4ToInt(info.netmask);
-			if (ifaceIp === null || mask === null) continue;
-			const network = (ifaceIp & mask) >>> 0;
-			if (!isRfc1918(network)) continue;
-			if ((peer & mask) >>> 0 === network) return true;
-		}
-	}
-	return false;
-}
-/**
-* True when `addr` shares an RFC1918 subnet with one of THIS process's own
-* network interfaces. This is the in-container counterpart of
-* peerIsHostLocalDockerBridge: inside a container the Docker bridge is
-* invisible — the container sees only its veth endpoints (eth0/eth1), so the
-* docker0/br-* name filter never matches and the host-local Traefik fronting
-* the stack 401'd every session mint (first hit live on the PAN-1737 UAT
-* stack). A peer inside one of the container's attached Docker-network
-* subnets can only be another container on those networks — the server
-* publishes no host port (Traefik labels only), so no LAN client can ever
-* present such an address. Only consulted when running inside a container.
-*/
-function peerIsLocalContainerNetwork(addr, interfaces) {
-	const peer = ipv4ToInt(addr);
-	if (peer === null) return false;
-	for (const addrs of Object.values(interfaces)) for (const info of addrs ?? []) {
-		if (info.family !== "IPv4" || info.internal) continue;
-		const ifaceIp = ipv4ToInt(info.address);
-		const mask = ipv4ToInt(info.netmask);
-		if (ifaceIp === null || mask === null) continue;
-		const network = (ifaceIp & mask) >>> 0;
-		if (!isRfc1918(network)) continue;
-		if ((peer & mask) >>> 0 === network) return true;
-	}
-	return false;
-}
-/** Docker creates /.dockerenv in every container — stable in-container signal. */
-const runningInContainer = existsSync("/.dockerenv");
-/**
-* A request we trust to mint a session because it originated from this machine —
-* the local browser hitting the dashboard directly (127.0.0.1), or the
-* host-local Traefik that fronts overdeck.localhost. In Docker, that Traefik reaches
-* the host server from a Docker-bridge IP (e.g. 172.18.0.2), NOT 127.0.0.1, so
-* a literal-loopback check alone silently breaks the zero-step bootstrap for
-* every overdeck.localhost user — their session mint 401s and no cookie is ever set.
-*
-* This is the auto-bootstrap that removes the manual one-time #overdeck_token
-* step: any browser on overdeck.localhost gets a session with no user action. It is
-* NOT a security downgrade for the LAN — the raw API ports bind 0.0.0.0, but a
-* direct LAN hit has a non-loopback, non-Docker-bridge peer and is rejected. We
-* read ONLY the real TCP peer (request.remoteAddress), never X-Forwarded-For,
-* which a caller could spoof.
-*/
-function isLoopbackPeer(request) {
-	const remoteAddress = request.remoteAddress;
-	const raw = remoteAddress && typeof remoteAddress === "object" && "_tag" in remoteAddress ? Option.getOrElse(remoteAddress, () => "") : typeof remoteAddress === "string" ? remoteAddress : "";
-	if (!raw) return false;
-	const addr = raw.startsWith("::ffff:") ? raw.slice(7) : raw;
-	if (addr === "127.0.0.1" || addr === "::1") return true;
-	if (peerIsHostLocalDockerBridge(addr, networkInterfaces())) return true;
-	return runningInContainer && peerIsLocalContainerNetwork(addr, networkInterfaces());
-}
-function rejectUnauthorizedDashboardSessionMintRequest(request) {
-	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
-	if (!hasDashboardInternalToken(request) && !isLoopbackPeer(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
-	return null;
-}
-function rejectUnauthorizedDashboardRequest(request) {
-	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
-	if (!hasDashboardAuth(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
-	return null;
-}
-//#endregion
 //#region routes/agents/spawn-helpers.ts
 init_child_env();
 init_agents$1();
 function handleRemoteAgentSpawn(input) {
 	return Effect.gen(function* () {
 		const { issueId, workspacePath, workspaceMetadata, spawnModel, projectPath, spawnGuardrails, lifecycle } = input;
-		const { spawnRemoteAgent, checkRemoteSpendCap } = yield* Effect.promise(() => import("./remote-agents-D6O_zETW.js"));
-		const { createFlyProviderFromConfig } = yield* Effect.promise(() => import("./remote-Dr5kGYSZ.js"));
-		const { loadConfigSync: loadPanConfig } = yield* Effect.promise(() => import("./config-BJKocXKd.js"));
+		const { spawnRemoteAgent, checkRemoteSpendCap } = yield* Effect.promise(() => import("./remote-agents-CA3Ihlxj.js"));
+		const { createFlyProviderFromConfig } = yield* Effect.promise(() => import("./remote-ChgimyYa.js"));
+		const { loadConfigSync: loadPanConfig } = yield* Effect.promise(() => import("./config-DzV30TOm.js"));
 		const panConfig = loadPanConfig();
 		const spendCap = checkRemoteSpendCap(panConfig);
 		if (!spendCap.allowed) return jsonResponse({ error: spendCap.message }, { status: 429 });
 		const fly = createFlyProviderFromConfig(panConfig.remote);
 		yield* Effect.promise(() => fly.syncAllCredentials(workspaceMetadata.vmName));
-		const { buildWorkAgentPrompt, getTrackerContext } = yield* Effect.promise(() => import("./work-agent-prompt-DLthEPAq.js"));
+		const { buildWorkAgentPrompt, getTrackerContext } = yield* Effect.promise(() => import("./work-agent-prompt-Du8Vh2aJ.js"));
 		const trackerContext = yield* Effect.promise(() => getTrackerContext(issueId, workspacePath));
 		const agentPrompt = yield* Effect.promise(() => buildWorkAgentPrompt({
 			issueId,
@@ -5829,10 +6292,23 @@ init_child_env();
 init_harness_policy();
 init_activity_logger();
 init_projects();
+init_review_status();
+init_state_read_home();
 init_io();
 init_read_model();
 init_domain_services();
 init_tmux();
+function orderDispatchConflict(decision) {
+	if (decision.eligible) return null;
+	return {
+		status: 409,
+		body: {
+			error: decision.message ?? "Order-book dispatch is blocked.",
+			code: decision.code ?? "order-dispatch-blocked",
+			conditions: decision.conditions
+		}
+	};
+}
 /**
 * PAN-2386: emit a dashboard activity event when start-agent refuses to spawn
 * because the workspace is dirty. Kept as a pure function so the refusal path
@@ -5852,6 +6328,25 @@ function emitDirtyWorkspaceRefusalActivity(issueId, porcelain) {
 		});
 	} catch {}
 }
+const LEGACY_WORKSPACE_RUNTIME_FILES = new Set([
+	".pan/continue.json",
+	".pan/spec.vbrief.json",
+	".pan/kickoff.md",
+	".pan/sessions.jsonl",
+	".pan/pipeline-verdict.json",
+	".pan/verification-latest.json",
+	".pan/agent-mcp.json"
+]);
+function isOverdeckWorkspaceRuntimePath(path) {
+	if (path === ".overdeck" || path.startsWith(".overdeck/")) return true;
+	if (path === ".pan" || path === ".pan/") return true;
+	if (LEGACY_WORKSPACE_RUNTIME_FILES.has(path)) return true;
+	return path.startsWith(".pan/feedback/") || path.startsWith(".pan/review/") || path.startsWith(".pan/test/") || path.startsWith(".pan/handoff-");
+}
+/** True when git porcelain contains only Overdeck-owned workspace runtime files. */
+function isOnlyOverdeckRuntimeWorkspaceChanges(porcelain) {
+	return parsePorcelainStatusPaths(porcelain).every(isOverdeckWorkspaceRuntimePath);
+}
 function spawnGuardrailResourcesHint(hint) {
 	const resourcesHint = "Open /resources to inspect Machine Room pressure before retrying.";
 	return hint ? `${hint} ${resourcesHint}` : resourcesHint;
@@ -5882,6 +6377,7 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	const { issueId, projectId } = body;
 	const autoStart = body.auto === true;
 	const guardrailAcknowledged = body.guardrailAcknowledged === true;
+	const offBook = body.offBook === true;
 	const requestedHostOverride = body.host === true || body.allowHost === true;
 	if (!issueId) return jsonResponse({ error: "issueId required" }, { status: 400 });
 	const legacyFields = [
@@ -5937,6 +6433,8 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	const resolvedProject = resolveProjectFromIssueSync(String(issueId));
 	const projectConfig = resolvedProject ? getProjectSync(resolvedProject.projectKey) : null;
 	const projectPath = projectConfig?.path ?? getProjectPath(projectId, issuePrefix);
+	const orderConflict = orderDispatchConflict((yield* Effect.promise(() => checkActiveOrderDispatch(projectPath, issueId, { offBook }))).decision);
+	if (orderConflict) return jsonResponse(orderConflict.body, { status: orderConflict.status });
 	const workspacePath = join(projectPath, "workspaces", `feature-${issueLower}`);
 	if (!existsSync(workspacePath)) try {
 		const nodeDir = dirname(process.execPath);
@@ -5956,7 +6454,7 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	const workspacePanContinuePath = join(workspacePanDir, PAN_CONTINUE_FILENAME);
 	let planPath = yield* findPlan(workspacePath);
 	if (autoStart && !planPath) {
-		yield* writeAutoStartVBrief(projectPath, workspacePath, {
+		yield* writeAutoStartXBrief(projectPath, workspacePath, {
 			issueId,
 			title: cachedIssue?.title || issueId,
 			body: cachedIssue?.description || "",
@@ -5965,7 +6463,7 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		planPath = yield* findPlan(workspacePath);
 	}
 	if (!planPath) return jsonResponse({
-		error: `No workspace vBRIEF found for ${issueId}. Work agents require a finalized plan.`,
+		error: `No workspace xBRIEF found for ${issueId}. Work agents require a finalized plan.`,
 		hint: "Run planning first, or use auto-start to synthesize a plan before starting the work agent.",
 		issueId
 	}, { status: 422 });
@@ -5982,8 +6480,8 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	if (planReadResult._tag === "failure") {
 		const { planErr } = planReadResult;
 		return jsonResponse({
-			error: `Could not read workspace vBRIEF for ${issueId}: ${planErr instanceof Error ? planErr.message : String(planErr)}`,
-			hint: "Re-run planning to produce a readable vBRIEF before starting the work agent.",
+			error: `Could not read workspace xBRIEF for ${issueId}: ${planErr instanceof Error ? planErr.message : String(planErr)}`,
+			hint: "Re-run planning to produce a readable xBRIEF before starting the work agent.",
 			issueId
 		}, { status: 422 });
 	}
@@ -6081,10 +6579,18 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	}
 	if (!isRemote) {
 		emitStartAgentPhase(issueId, "stackHealthGate", "start", "checking workspace docker stack health", { workspacePath });
-		const stackHealth = yield* getWorkspaceStackHealth(issueId, {
+		let stackHealth = yield* getWorkspaceStackHealth(issueId, {
 			projectConfig,
 			workspacePath
 		});
+		if (!stackHealth.healthy && !allowHost) {
+			emitStartAgentPhase(issueId, "stackHealthGate", "start", "stack unhealthy — attempting workspace stack rebuild", { workspacePath });
+			yield* Effect.promise(() => assertWorkspaceStackHealthyForSpawn(issueId, "work", false, workspacePath).catch(() => void 0));
+			stackHealth = yield* getWorkspaceStackHealth(issueId, {
+				projectConfig,
+				workspacePath
+			});
+		}
 		if (!stackHealth.healthy) {
 			yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.start_blocked_stack_unhealthy", {
 				issueId,
@@ -6146,33 +6652,6 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			}).unref();
 		}
 	}).pipe(Effect.catch(() => Effect.void));
-	yield* transitionVBriefOnMain(projectPath, issueId, "active", "approved", `scope: approve ${issueId.toUpperCase()} vBRIEF`).pipe(Effect.match({
-		onSuccess: (result) => {
-			if (result.moved) console.log(`[start-agent] vBRIEF moved ${result.fromDir} → active for ${issueId}`);
-			if (result.committed) console.log(`[start-agent] Committed approval transition on main for ${issueId}`);
-		},
-		onFailure: (err) => {
-			console.warn(`[start-agent] vBRIEF approval transition failed (non-fatal): ${err?.message ?? err}`);
-		}
-	}));
-	if (existsSync(planPath)) try {
-		updatePlanStatus(planPath, "running");
-		console.log(`[start-agent] Set plan.status=running for ${issueId}`);
-	} catch (planStatusErr) {
-		console.warn(`[start-agent] Failed to set plan.status=running (non-fatal): ${planStatusErr?.message ?? planStatusErr}`);
-	}
-	try {
-		const { appendSessionEntry, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = yield* Effect.promise(() => import("./record-rwK-nKv_.js"));
-		const recordProject = resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath);
-		yield* Effect.promise(() => appendSessionEntry(recordProject, issueId, {
-			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-			reason: "start",
-			agentModel: spawnModel
-		}));
-		console.log(`[start-agent] Wrote start session entry to record for ${issueId}`);
-	} catch (continueErr) {
-		console.warn(`[start-agent] Failed to write start entry to record (non-fatal): ${continueErr?.message ?? continueErr}`);
-	}
 	let gatesCommitted = false;
 	const commitClearedGates = async () => {
 		if (!startGateBlock || gatesCommitted) return;
@@ -6193,8 +6672,43 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			troubled: startGateBlock.troubled
 		});
 	};
+	let workStartAccepted = false;
+	const markWorkStartAccepted = async () => {
+		if (workStartAccepted) return;
+		workStartAccepted = true;
+		await Effect.runPromise(transitionXBriefOnMain(projectPath, issueId, "active", "approved", `scope: approve ${issueId.toUpperCase()} xBRIEF`).pipe(Effect.match({
+			onSuccess: (result) => {
+				if (result.moved) console.log(`[start-agent] xBRIEF moved ${result.fromDir} → active for ${issueId}`);
+				if (result.committed) console.log(`[start-agent] Committed approval transition for ${issueId}`);
+			},
+			onFailure: (err) => {
+				console.warn(`[start-agent] xBRIEF approval transition failed (non-fatal): ${err?.message ?? err}`);
+			}
+		})));
+		if (existsSync(planPath)) try {
+			updatePlanStatus(planPath, "running");
+			console.log(`[start-agent] Set plan.status=running for ${issueId}`);
+		} catch (planStatusErr) {
+			console.warn(`[start-agent] Failed to set plan.status=running (non-fatal): ${planStatusErr?.message ?? planStatusErr}`);
+		}
+		try {
+			const { appendSessionEntry, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = await import("./record-CN0pj4_5.js");
+			await appendSessionEntry(resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath), issueId, {
+				timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+				reason: "start",
+				agentModel: spawnModel
+			});
+			console.log(`[start-agent] Wrote start session entry to record for ${issueId}`);
+		} catch (continueErr) {
+			console.warn(`[start-agent] Failed to write start entry to record (non-fatal): ${continueErr?.message ?? continueErr}`);
+		}
+		if (getReviewStatusSync(issueId)?.stuckReason === "planning_auto_handoff_failed") clearWorkspaceStuck(issueId);
+	};
 	if (isRemote && workspaceMetadata) {
-		const response = yield* Effect.promise(() => spawnAfterClearingStartGates({
+		const admitted = yield* Effect.promise(() => withActiveOrderDispatchReservation(projectPath, issueId, {
+			offBook,
+			recordOverride: true
+		}, () => spawnAfterClearingStartGates({
 			agentSessionName,
 			gate: startGateBlock,
 			initialState: initialAgentState,
@@ -6208,9 +6722,13 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 				lifecycle
 			})),
 			isSuccessful: (remoteResponse) => remoteResponse.status >= 200 && remoteResponse.status < 300
-		}));
+		})));
+		const admittedConflict = orderDispatchConflict(admitted.check.decision);
+		if (admittedConflict) return jsonResponse(admittedConflict.body, { status: admittedConflict.status });
+		const response = admitted.result;
 		if (response.status < 200 || response.status >= 300) return response;
 		yield* Effect.promise(commitClearedGates);
+		yield* Effect.promise(markWorkStartAccepted);
 		return response;
 	}
 	const devScript = join(workspacePath, "dev");
@@ -6242,11 +6760,11 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		console.log(`[start-agent] Killed stale tmux session ${agentSessionName}`);
 	}).pipe(Effect.catch(() => Effect.void));
 	if (!(body.acknowledgeDirtyWorkspace === true)) try {
-		const { stdout: statusOut } = yield* Effect.promise(() => execAsync$2("git status --porcelain", {
+		const { stdout: statusOut } = yield* Effect.promise(() => execAsync$2("git status --porcelain --untracked-files=all", {
 			cwd: workspacePath,
 			encoding: "utf-8"
 		}));
-		if (statusOut.trim()) {
+		if (statusOut.trim() && !isOnlyOverdeckRuntimeWorkspaceChanges(statusOut)) {
 			const { stdout: diffOut } = yield* Effect.promise(() => execAsync$2("git diff HEAD --stat", {
 				cwd: workspacePath,
 				encoding: "utf-8"
@@ -6275,11 +6793,14 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		console.warn(`[start-agent] Failed to check workspace status for ${issueId}: ${message}`);
 	}
 	const bodyHarness = body.harness;
-	const userPickedHarness = bodyHarness === "ohmypi" || bodyHarness === "claude-code" || bodyHarness === "codex" ? bodyHarness : null;
+	const userPickedHarness = bodyHarness === "ohmypi" || bodyHarness === "claude-code" || bodyHarness === "codex" || bodyHarness === "acp" ? bodyHarness : null;
 	let effectiveHarness = null;
 	if (userPickedHarness !== null) effectiveHarness = (yield* Effect.promise(async () => canUseHarnessSync(userPickedHarness, spawnModel, await getProviderAuthMode(spawnModel)))).allowed ? userPickedHarness : "claude-code";
 	const spawnPanCommand = async (args, cwd) => {
-		const activityId = await spawnAfterClearingStartGates({
+		const admitted = await withActiveOrderDispatchReservation(projectPath, issueId, {
+			offBook,
+			recordOverride: false
+		}, () => spawnAfterClearingStartGates({
 			agentSessionName,
 			gate: gatesCommitted ? null : startGateBlock,
 			initialState: initialAgentState,
@@ -6291,9 +6812,10 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 				args,
 				cwd
 			})
-		});
+		}));
+		if (!admitted.check.decision.eligible || !admitted.result) throw new OrderDispatchReservationError(admitted.check);
 		await commitClearedGates();
-		return activityId;
+		return admitted.result;
 	};
 	const updateIssueStatus = async () => {
 		await Effect.runPromise(lifecycle.transitionTo(issueId, "in_progress").pipe(Effect.catch(() => Effect.void)));
@@ -6313,7 +6835,58 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		spawnPanCommand,
 		updateIssueStatus
 	});
-	if (containerResponse) return containerResponse;
+	if (containerResponse) {
+		if (containerResponse.status >= 200 && containerResponse.status < 300) yield* Effect.promise(markWorkStartAccepted);
+		return containerResponse;
+	}
+	const placeholderStartedAt = (/* @__PURE__ */ new Date()).toISOString();
+	const placeholderState = {
+		id: agentSessionName,
+		issueId,
+		workspace: workspacePath,
+		role,
+		...effectiveHarness ? { harness: effectiveHarness } : {},
+		model: "pending-work-spawn",
+		status: "starting",
+		startedAt: placeholderStartedAt,
+		hostOverride: allowHost || void 0
+	};
+	const hasLiveTmuxSession = yield* sessionExists(agentSessionName).pipe(Effect.catch(() => Effect.succeed(true)));
+	const placeholderClaim = yield* claimAgentStartPlaceholderProgram(placeholderState, {
+		type: "agent.started",
+		timestamp: placeholderStartedAt,
+		payload: {
+			agentId: agentSessionName,
+			issueId,
+			agent: {
+				id: agentSessionName,
+				issueId,
+				workspace: workspacePath,
+				status: "starting",
+				startedAt: placeholderStartedAt,
+				role,
+				...effectiveHarness ? { runtime: effectiveHarness } : {}
+			}
+		}
+	}, hasLiveTmuxSession);
+	if (!placeholderClaim.claimed) {
+		yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.start_placeholder_blocked", {
+			issueId,
+			role,
+			workspacePath,
+			reason: placeholderClaim.reason
+		}));
+		return jsonResponse({
+			error: `Agent ${agentSessionName} is already starting or running.`,
+			code: "AGENT_START_IN_FLIGHT"
+		}, { status: 409 });
+	}
+	yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.start_placeholder_created", {
+		issueId,
+		role,
+		workspacePath,
+		startedAt: placeholderStartedAt
+	}));
 	yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.work_spawn_requested", {
 		issueId,
 		role,
@@ -6326,13 +6899,42 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			issueId,
 			model: spawnModel,
 			harness: effectiveHarness,
-			allowHost
+			allowHost,
+			offBook
 		}), workspacePath));
+		yield* Effect.promise(markWorkStartAccepted);
 		emitStartAgentPhase(issueId, "spawn", "success", "local work agent spawn requested", {
 			workspacePath,
 			activityId
 		});
 	} catch (error) {
+		const initialStateIsPlaceholder = initialAgentState?.model.startsWith("pending-") === true;
+		const fallbackState = initialAgentState && !initialStateIsPlaceholder ? { ...initialAgentState } : {
+			...placeholderState,
+			model: spawnModel,
+			status: "stopped",
+			stoppedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		const rolledBack = yield* rollbackAgentStartPlaceholderProgram(placeholderState, fallbackState, {
+			type: "agent.status_changed",
+			timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+			payload: {
+				agentId: agentSessionName,
+				status: fallbackState.status,
+				previousStatus: "starting",
+				hasLiveTmuxSession: false
+			}
+		});
+		yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.start_placeholder_rollback", {
+			issueId,
+			rolledBack,
+			fallbackStatus: fallbackState.status
+		}));
+		invalidateAgentsCache();
+		if (error instanceof OrderDispatchReservationError) {
+			const conflict = orderDispatchConflict(error.check.decision);
+			return jsonResponse(conflict.body, { status: conflict.status });
+		}
 		const output = String(error?.output ?? error?.message ?? "");
 		if (output.includes(`Workspace docker stack for ${issueId}`) && output.includes("is not healthy")) {
 			const failedStackHealth = yield* getWorkspaceStackHealth(issueId, {
@@ -6376,55 +6978,8 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			activityId: error?.activityId
 		}, { status: 500 });
 	}
-	const earlyAgentId = agentSessionName;
-	const earlyStateDir = join(homedir(), ".overdeck", "agents", earlyAgentId);
-	yield* Effect.promise(() => mkdir(earlyStateDir, { recursive: true }));
-	saveAgentStateSync({
-		id: earlyAgentId,
-		issueId,
-		...effectiveHarness ? { harness: effectiveHarness } : {},
-		model: "pending-work-spawn",
-		status: "starting",
-		startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		workspace: workspacePath,
-		role,
-		hostOverride: allowHost || void 0
-	});
-	updateRegistryForAgentStart(issueId, workspacePath, earlyAgentId);
-	yield* Effect.promise(() => appendAgentLifecycleLog(earlyAgentId, "agent.start_placeholder_created", {
-		issueId,
-		role,
-		workspacePath,
-		activityId
-	}));
+	updateRegistryForAgentStart(issueId, workspacePath, agentSessionName);
 	yield* Effect.promise(() => updateIssueStatus());
-	yield* saveAgentStateAndEmitEventProgram({
-		id: earlyAgentId,
-		issueId,
-		workspace: workspacePath,
-		role,
-		...effectiveHarness ? { harness: effectiveHarness } : {},
-		model: "pending-work-spawn",
-		status: "starting",
-		startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-		hostOverride: allowHost || void 0
-	}, {
-		type: "agent.started",
-		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-		payload: {
-			agentId: earlyAgentId,
-			issueId,
-			agent: {
-				id: earlyAgentId,
-				issueId,
-				workspace: workspacePath,
-				status: "starting",
-				startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-				role,
-				...effectiveHarness ? { runtime: effectiveHarness } : {}
-			}
-		}
-	});
 	try {
 		getIssueDataService().patchIssue(issueId, {
 			status: "In Progress",
@@ -6589,10 +7144,10 @@ const _serverManagedMerges = /* @__PURE__ */ new Set();
 function firePostMergeLifecycle(issueId, options) {
 	const started = postMergeGuard.run(issueId, async () => {
 		const projectPath = getProjectPathForIssue(extractPrefixSync(issueId) ?? issueId.split("-")[0]);
-		const { postMergeLifecycle } = await import("./merge-agent-B-SnXOoc.js");
+		const { postMergeLifecycle } = await import("./merge-agent-CKkgIBPB.js");
 		await postMergeLifecycle(issueId, projectPath, options?.sourceBranch, options?.verifiedMergedRef ? { verifiedMergedRef: options.verifiedMergedRef } : void 0);
 		console.log(`[merge] post-merge lifecycle completed for ${issueId}`);
-		const { runMergeTrainReconcile } = await import("./merge-train-CKana8EH.js");
+		const { runMergeTrainReconcile } = await import("./merge-train-CHopycP0.js");
 		const outcomes = await runMergeTrainReconcile(issueId);
 		if (outcomes.length > 0) console.log(`[merge-train] reconciled ${outcomes.length} sibling(s) after ${issueId}: ` + outcomes.map((o) => `${o.issueId}=${o.result}`).join(", "));
 	}, (err) => console.error(`[merge] post-merge lifecycle failed for ${issueId}:`, err));
@@ -6613,15 +7168,15 @@ init_io();
 init_domain_services();
 init_tmux();
 const getSpecialistsRoute = HttpRouter.add("GET", "/api/specialists", httpHandler(Effect.gen(function* () {
-	const { getAllSpecialistStatus, getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { getAllSpecialistStatus, getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	return jsonResponse({
 		specialists: yield* Effect.promise(() => getAllSpecialistStatus()),
 		projects: yield* Effect.promise(() => getAllProjectSpecialistStatuses())
 	});
 })));
 const postSpecialistsResetAllRoute = HttpRouter.add("POST", "/api/specialists/reset-all", httpHandler(Effect.gen(function* () {
-	const { getAllSpecialists, isRunning, getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
-	const { clearHookSync } = yield* Effect.promise(() => import("./hooks-B-HItBiS.js"));
+	const { getAllSpecialists, isRunning, getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
+	const { clearHookSync } = yield* Effect.promise(() => import("./hooks-DPVX1rwQ.js"));
 	const specialists = getAllSpecialists();
 	const results = [];
 	for (const specialist of specialists) {
@@ -6673,11 +7228,11 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 		if (!itemId) return jsonResponse({ error: "itemId is required for a passed inspect verdict" }, { status: 400 });
 		const project = resolveProjectFromIssueSync(normalizedIssueId);
 		const workspacePath = project && join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`);
-		if (!(workspacePath ? readWorkspacePlanSync(workspacePath) : void 0)?.plan.items.some((item) => item.id === itemId)) return jsonResponse({ error: `Item "${itemId}" does not exist in the vBRIEF for ${normalizedIssueId}` }, { status: 400 });
+		if (!(workspacePath ? readWorkspacePlanSync(workspacePath) : void 0)?.plan.items.some((item) => item.id === itemId)) return jsonResponse({ error: `Item "${itemId}" does not exist in the xBRIEF for ${normalizedIssueId}` }, { status: 400 });
 	}
 	console.log(`[specialists/done] ${specialist} signaling ${status} for ${normalizedIssueId}`);
 	if (specialist === "merge") {
-		const { reportSpecialistCompletion } = yield* Effect.promise(() => import("./specialist-completion-CqmduO92.js"));
+		const { reportSpecialistCompletion } = yield* Effect.promise(() => import("./specialist-completion-Ky9wCDpb.js"));
 		if (yield* reportSpecialistCompletion(normalizedIssueId, {
 			status,
 			notes
@@ -6724,7 +7279,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	if (specialist === "inspect" && status === "failed") yield* Effect.promise(() => reportTieredInspectFailureEscalation(normalizedIssueId, notes));
 	yield* Effect.promise(async () => {
 		try {
-			const { getTmuxSessionName, updateRunMetadata, makeSpecialistRegistryKey } = await import("./specialists-Dqe6_HE5.js");
+			const { getTmuxSessionName, updateRunMetadata, makeSpecialistRegistryKey } = await import("./specialists-DM6bWjsi.js");
 			const projectKey = resolveProjectFromIssueSync(normalizedIssueId)?.projectKey;
 			const tmuxSession = projectKey ? getTmuxSessionName(`${specialist}-agent`, projectKey, normalizedIssueId) : getTmuxSessionName(`${specialist}-agent`);
 			saveAgentRuntimeState(tmuxSession, {
@@ -6743,7 +7298,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 				});
 				console.log(`[specialists/done] Cleared registry lock for ${registryKey} (${projectKey})`);
 			}
-			const { updateSpecialistHandoffStatus } = await import("./specialist-handoff-logger-Dnjlwt7g.js");
+			const { updateSpecialistHandoffStatus } = await import("./specialist-handoff-logger-CMEwYxa2.js");
 			if (await Effect.runPromise(updateSpecialistHandoffStatus(normalizedIssueId, `${specialist}-agent`, status === "passed" ? "completed" : "failed", status === "passed" ? "success" : "failure"))) console.log(`[specialists/done] Updated handoff log: ${specialist}-agent ${normalizedIssueId} → ${status}`);
 		} catch (err) {
 			console.error(`[specialists/done] Error managing specialist state:`, err);
@@ -6755,7 +7310,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 			if (project) {
 				const workspacePath = join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`);
 				if (existsSync(workspacePath)) {
-					const { getWorkspaceGitInfo } = await import("./git-utils-CsKGnzFA.js");
+					const { getWorkspaceGitInfo } = await import("./git-utils-D0_yhCgF.js");
 					const { HEAD } = await Effect.runPromise(getWorkspaceGitInfo(workspacePath));
 					setReviewStatusSync(normalizedIssueId, { reviewedAtCommit: HEAD });
 					console.log(`[specialists/done] Snapshotted reviewedAtCommit=${HEAD.substring(0, 8)} for ${normalizedIssueId}`);
@@ -6767,7 +7322,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	});
 	if (specialist === "inspect" && status === "passed") yield* Effect.promise(async () => {
 		try {
-			const { onInspectComplete } = await import("./inspect-agent-Dq0z1k3H.js");
+			const { onInspectComplete } = await import("./inspect-agent-Brtz0URj.js");
 			const project = resolveProjectFromIssueSync(normalizedIssueId);
 			if (project) {
 				const workspacePath = join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`);
@@ -6783,7 +7338,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 			if (project) {
 				if (existsSync(join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`))) {
 					setReviewStatusSync(normalizedIssueId, { testStatus: "passed" });
-					const { initEventStore } = await import("./event-store-CpBGsO6_.js");
+					const { initEventStore } = await import("./event-store-EV2cMiXj.js");
 					await (await initEventStore()).appendAsync({
 						type: "test.passed",
 						timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -6836,8 +7391,8 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 		if (notes?.toLowerCase().includes("conflict")) yield* Effect.promise(async () => {
 			try {
 				const workAgentId = `agent-${normalizedIssueId.toLowerCase()}`;
-				const { sessionExists } = await import("./tmux-BAvtac_u.js");
-				const { messageAgent, spawnAgent, getAgentStateSync } = await import("./agents-DyHKlq1I.js");
+				const { sessionExists } = await import("./tmux-B6z7h_vZ.js");
+				const { messageAgent, spawnAgent, getAgentStateSync } = await import("./agents-wi9NWzs2.js");
 				if (await Effect.runPromise(sessionExists(workAgentId))) {
 					await messageAgent(workAgentId, `MERGE CONFLICT: The merge-agent could not rebase your branch onto main due to conflicts. Please fix this now:\n\n1. git fetch origin main\n2. git rebase origin/main\n3. Resolve any conflicts (git add <file> && git rebase --continue)\n4. git push --force-with-lease\n5. Resubmit: curl -s -X POST http://localhost:3011/api/review/${normalizedIssueId}/request -H "Content-Type: application/json" -d "{}"\n\nConflict details: ${notes}`);
 					console.log(`[specialists/done] Sent rebase instructions to ${workAgentId}`);
@@ -6851,7 +7406,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 		try {
 			const project = resolveProjectFromIssueSync(normalizedIssueId);
 			const workspacePath = project ? join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`) : void 0;
-			const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-JImjut0z.js");
+			const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-CTd4QMBu.js");
 			const result = await Effect.runPromise(deliverReviewVerdictFeedback({
 				issueId: normalizedIssueId,
 				verdict: status === "failed" ? "failed" : "blocked",
@@ -6892,7 +7447,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	});
 })));
 const postSpecialistsLogsCleanupAllRoute = HttpRouter.add("POST", "/api/specialists/logs/cleanup-all", httpHandler(Effect.gen(function* () {
-	const { cleanupAllLogsSync } = yield* Effect.promise(() => import("./specialist-logs-CQnKzuZs.js"));
+	const { cleanupAllLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const results = cleanupAllLogsSync();
 	return jsonResponse({
 		success: true,
@@ -6902,7 +7457,7 @@ const postSpecialistsLogsCleanupAllRoute = HttpRouter.add("POST", "/api/speciali
 	});
 })));
 const getSpecialistsProjectsRoute = HttpRouter.add("GET", "/api/specialists/projects", httpHandler(Effect.gen(function* () {
-	const { getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	return jsonResponse(yield* Effect.promise(() => getAllProjectSpecialistStatuses()));
 })));
 const postSpecialistWakeRoute = HttpRouter.add("POST", "/api/specialists/:name/wake", httpHandler(Effect.gen(function* () {
@@ -6946,7 +7501,7 @@ const postSpecialistReportStatusRoute = HttpRouter.add("POST", "/api/specialists
 		"blocked",
 		"failed"
 	].includes(status)) {
-		const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+		const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 		saveAgentRuntimeState(getTmuxSessionName(name), {
 			state: "idle",
 			lastActivity: (/* @__PURE__ */ new Date()).toISOString()
@@ -7067,7 +7622,7 @@ const postProjectSpecialistKillRoute = HttpRouter.add("POST", "/api/specialists/
 	const issueId = params["issueId"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { getTmuxSessionName, makeSpecialistRegistryKey, getRunMetadata } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { getTmuxSessionName, makeSpecialistRegistryKey, getRunMetadata } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	const tmuxSession = getRunMetadata(project, makeSpecialistRegistryKey(type, issueId)).tmuxSession ?? getTmuxSessionName(type, project, issueId);
 	yield* Effect.promise(() => Effect.runPromise(killSession(tmuxSession)).catch(() => {}));
 	saveAgentRuntimeState(tmuxSession, {
@@ -7094,7 +7649,7 @@ const getProjectSpecialistRunsRoute = HttpRouter.add("GET", "/api/specialists/:p
 		if (limitParam) limit = parseInt(limitParam, 10);
 		if (offsetParam) offset = parseInt(offsetParam, 10);
 	}
-	const { listRunLogsSync } = yield* Effect.promise(() => import("./specialist-logs-CQnKzuZs.js"));
+	const { listRunLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	return jsonResponse(listRunLogsSync(project, type, {
 		limit,
 		offset
@@ -7105,7 +7660,7 @@ const getProjectSpecialistRunStreamRoute = HttpRouter.add("GET", "/api/specialis
 	const project = params["project"];
 	const type = params["type"];
 	const runId = params["runId"];
-	const { getRunLogPath, isRunLogActive } = yield* Effect.promise(() => import("./specialist-logs-CQnKzuZs.js"));
+	const { getRunLogPath, isRunLogActive } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const logPath = getRunLogPath(project, type, runId);
 	if (!existsSync(logPath)) return jsonResponse({ error: "Run log not found" }, { status: 404 });
 	const encoder = new TextEncoder();
@@ -7164,7 +7719,7 @@ const getProjectSpecialistRunRoute = HttpRouter.add("GET", "/api/specialists/:pr
 	const project = params["project"];
 	const type = params["type"];
 	const runId = params["runId"];
-	const { getRunLogSync, parseLogMetadata } = yield* Effect.promise(() => import("./specialist-logs-CQnKzuZs.js"));
+	const { getRunLogSync, parseLogMetadata } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const content = getRunLogSync(project, type, runId);
 	if (!content) return jsonResponse({ error: "Run log not found" }, { status: 404 });
 	return jsonResponse({
@@ -7178,7 +7733,7 @@ const postProjectSpecialistRunTerminateRoute = HttpRouter.add("POST", "/api/spec
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { terminateSpecialist } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { terminateSpecialist } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	yield* Effect.promise(() => terminateSpecialist(project, type));
 	return jsonResponse({
 		success: true,
@@ -7190,7 +7745,7 @@ const postProjectSpecialistGracePauseRoute = HttpRouter.add("POST", "/api/specia
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { pauseGracePeriod } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { pauseGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	if (pauseGracePeriod(project, type)) return jsonResponse({
 		success: true,
 		message: "Grace period paused"
@@ -7202,7 +7757,7 @@ const postProjectSpecialistGraceResumeRoute = HttpRouter.add("POST", "/api/speci
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { resumeGracePeriod } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { resumeGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	if (resumeGracePeriod(project, type)) return jsonResponse({
 		success: true,
 		message: "Grace period resumed"
@@ -7214,7 +7769,7 @@ const postProjectSpecialistGraceExitRoute = HttpRouter.add("POST", "/api/special
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { exitGracePeriod } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { exitGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	exitGracePeriod(project, type);
 	return jsonResponse({
 		success: true,
@@ -7226,7 +7781,7 @@ const getProjectSpecialistGraceRoute = HttpRouter.add("GET", "/api/specialists/:
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { getGracePeriodState } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { getGracePeriodState } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	const state = getGracePeriodState(project, type);
 	if (state) return jsonResponse(state);
 	else return jsonResponse({ error: "No active grace period" }, { status: 404 });
@@ -7235,7 +7790,7 @@ const getProjectSpecialistContextRoute = HttpRouter.add("GET", "/api/specialists
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { loadContextDigest } = yield* Effect.promise(() => import("./specialist-context-CJ-QjFR-.js"));
+	const { loadContextDigest } = yield* Effect.promise(() => import("./specialist-context-Bn3dCGS2.js"));
 	const digest = loadContextDigest(project, type);
 	if (digest) return jsonResponse({ digest });
 	else return jsonResponse({ error: "No context digest found" }, { status: 404 });
@@ -7244,7 +7799,7 @@ const postProjectSpecialistContextRegenerateRoute = HttpRouter.add("POST", "/api
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { regenerateContextDigest } = yield* Effect.promise(() => import("./specialist-context-CJ-QjFR-.js"));
+	const { regenerateContextDigest } = yield* Effect.promise(() => import("./specialist-context-Bn3dCGS2.js"));
 	const digest = yield* Effect.promise(() => regenerateContextDigest(project, type));
 	if (digest) return jsonResponse({
 		digest,
@@ -7263,7 +7818,7 @@ const postProjectSpecialistCompleteRoute = HttpRouter.add("POST", "/api/speciali
 		"blocked"
 	].includes(status)) return jsonResponse({ error: "Valid status (passed/failed/blocked) is required" }, { status: 400 });
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { signalSpecialistCompletion } = yield* Effect.promise(() => import("./specialists-Dqe6_HE5.js"));
+	const { signalSpecialistCompletion } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	signalSpecialistCompletion(project, type, {
 		status,
 		notes
@@ -7297,8 +7852,8 @@ const postProjectSpecialistLogsCleanupRoute = HttpRouter.add("POST", "/api/speci
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { cleanupOldLogsSync } = yield* Effect.promise(() => import("./specialist-logs-CQnKzuZs.js"));
-	const { getSpecialistRetention } = yield* Effect.promise(() => import("./projects-BKkwpH6q.js"));
+	const { cleanupOldLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
+	const { getSpecialistRetention } = yield* Effect.promise(() => import("./projects-vjjcmiN8.js"));
 	const retention = getSpecialistRetention(project);
 	const deleted = cleanupOldLogsSync(project, type, {
 		maxDays: retention.max_days,
@@ -7319,7 +7874,7 @@ const postProjectReviewRestartRoute = HttpRouter.add("POST", "/api/specialists/:
 	const project = params["project"];
 	const issueId = params["issueId"];
 	const { model, harness } = yield* readJsonBody;
-	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-CCum8sGe.js"));
+	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-DNboMyW4.js"));
 	const killResult = yield* killAllReviewerSessions(project, issueId);
 	const projectConfig = resolveProjectFromIssueSync(issueId);
 	if (!projectConfig) return jsonResponse({ error: `Cannot resolve project for ${issueId}` }, { status: 404 });
@@ -7333,7 +7888,7 @@ const postProjectReviewRestartRoute = HttpRouter.add("POST", "/api/specialists/:
 		}));
 		branch = stdout.trim() || "unknown";
 	} catch {}
-	const { spawnReviewRoleForIssue } = yield* Effect.promise(() => import("./review-agent-CCum8sGe.js"));
+	const { spawnReviewRoleForIssue } = yield* Effect.promise(() => import("./review-agent-DNboMyW4.js"));
 	const prUrl = getReviewStatusSync(issueId)?.prUrl;
 	const result = yield* spawnReviewRoleForIssue({
 		issueId,
@@ -7482,6 +8037,6 @@ const specialistsProjectRouteLayer = Layer.mergeAll(getProjectSpecialistStatusRo
 */
 const specialistsRouteLayer = Layer.mergeAll(specialistsLegacyRouteLayer, specialistsProjectRouteLayer);
 //#endregion
-export { runInBatches as $, handleConversationDelete as A, stopConversationRuntime as B, isPiControlChannelHarness as C, conversationNeedsRunningRepair as D, validateConversationControlAckOrigin as E, isInsideGitWorkTree as F, cleanupOrphanedConversationAttachments as G, waitForPiTuiReady as H, resolveAllowedHarness as I, extractConversationAttachmentPaths as J, cleanupUnreferencedConversationAttachments as K, shouldReportUnresolvedLiveSession as L, handleConversationResume as M, handleConversationStop as N, conversationSessionAliveFromState as O, handleConversationSwitchModel as P, removeConversationAttachment as Q, spawnConversationSession as R, handleConversationThinkingLevel as S, resolveConversationDeliveryMethod as T, waitForTmuxSession as U, tmuxSessionExists as V, cleanupConversationAttachments as W, hasConversationAttachment as X, getConversationAttachmentsRoot as Y, isManagedConversationAttachmentPath as Z, handleConversationCodexApproval as _, validateOrigin as _t, agentsRouteLayer as a, panCliInvocation as at, handleConversationDeliveryMethod as b, getDefaultCwd as bt, hasDashboardInternalToken as c, resolveAgentHarness as ct, rejectUnsafeDashboardMutationRequest as d, resolveJsonlPath as dt, evaluateSpawnGuardrails as et, saveAgentStateAndEmitEvent as f, resolvePiSessionPath as ft, handleConversationAbort as g, isTrustedOriginForHost as gt, deliverConversationViaControlChannel as h, getHeaderFromMap as ht, validateSpecialistAutoCompleteMetadata as i, getWorkAgentLifecycleStateSync as it, handleConversationRestartAll as j, handleConversationCreate as k, rejectUnauthorizedDashboardRequest as l, resolveClaudeSessionId as lt, codexConversationPendingInput as m, waitForSessionRespawn as mt, _serverManagedMerges as n, resolveAgentGitInfo as nt, dashboardCsrfToken as o, spawnPanCli as ot, saveAgentStateAndEmitEventProgram as p, isRespawnPending as pt, ensureConversationAttachmentDir as q, firePostMergeLifecycle as r, resolveConversationGitInfo as rt, dashboardSessionCookieHeader as s, readLauncherPinnedSessionId as st, specialistsRouteLayer as t, invalidateAgentsCache as tt, rejectUnauthorizedDashboardSessionMintRequest as u, resolveCodexRolloutPath as ut, handleConversationCompact as v, validateOriginHeaders as vt, pickDeliverAs as w, handleConversationPlanAction as x, jsonResponse as xt, handleConversationControlAck as y, httpHandler as yt, startConversationModelBackfill as z };
+export { panCliInvocation as $, resolveAllowedHarness as A, cleanupUnreferencedConversationAttachments as B, handleConversationCreate as C, jsonStringResponse as Ct, handleConversationStop as D, handleConversationResume as E, tmuxSessionExists as F, isManagedConversationAttachmentPath as G, extractConversationAttachmentPaths as H, waitForPiTuiReady as I, evaluateSpawnGuardrails as J, removeConversationAttachment as K, waitForTmuxSession as L, spawnConversationSession as M, startConversationModelBackfill as N, handleConversationSwitchModel as O, stopConversationRuntime as P, getWorkAgentLifecycleStateSync as Q, cleanupConversationAttachments as R, conversationSessionAliveFromState as S, jsonResponse as St, handleConversationRestartAll as T, getConversationAttachmentsRoot as U, ensureConversationAttachmentDir as V, hasConversationAttachment as W, resolveAgentGitInfo as X, invalidateAgentsCache as Y, resolveConversationGitInfo as Z, isPiControlChannelHarness as _, isTrustedOriginForHost as _t, agentsRouteLayer as a, resolveCodexRolloutPath as at, validateConversationControlAckOrigin as b, httpHandler as bt, codexConversationPendingInput as c, dashboardCsrfToken as ct, handleConversationCodexApproval as d, rejectUnauthorizedDashboardRequest as dt, spawnPanCli as et, handleConversationCompact as f, rejectUnauthorizedDashboardSessionMintRequest as ft, handleConversationThinkingLevel as g, getHeaderFromMap as gt, handleConversationPlanAction as h, waitForSessionRespawn as ht, validateSpecialistAutoCompleteMetadata as i, resolveClaudeSessionId as it, shouldReportUnresolvedLiveSession as j, isInsideGitWorkTree as k, deliverConversationViaControlChannel as l, dashboardSessionCookieHeader as lt, handleConversationDeliveryMethod as m, isRespawnPending as mt, _serverManagedMerges as n, resolveAcpTranscriptPath as nt, saveAgentStateAndEmitEvent as o, resolveJsonlPath as ot, handleConversationControlAck as p, rejectUnsafeDashboardMutationRequest as pt, runInBatches as q, firePostMergeLifecycle as r, resolveAgentHarness as rt, saveAgentStateAndEmitEventProgram as s, resolvePiSessionPath as st, specialistsRouteLayer as t, readLauncherPinnedSessionId as tt, handleConversationAbort as u, hasDashboardInternalToken as ut, pickDeliverAs as v, validateOrigin as vt, handleConversationDelete as w, conversationNeedsRunningRepair as x, getDefaultCwd as xt, resolveConversationDeliveryMethod as y, validateOriginHeaders as yt, cleanupOrphanedConversationAttachments as z };
 
-//# sourceMappingURL=specialists-Bg9v4z3F.js.map
+//# sourceMappingURL=specialists-CC4r-c2s.js.map