@overdeck/desktop 0.45.22 → 0.45.24

package/server/supervisor/pty-token-x-ea28Us.js

@@ -0,0 +1,43 @@
+import { t as __esmMin } from "./chunk-ruWRV7i3.js";
+import { et as getOverdeckHome, tt as init_paths } from "./paths-DehGY2Fj.js";
+import "node:fs";
+import { join } from "node:path";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+//#region src/lib/pty-token.ts
+function ptyTokenDir(agentId) {
+	return join(getOverdeckHome(), "agents", agentId);
+}
+function getPtyTokenPath(agentId) {
+	return join(ptyTokenDir(agentId), "pty-token");
+}
+async function readPtyToken(agentId) {
+	try {
+		const value = (await readFile(getPtyTokenPath(agentId), "utf8")).trim();
+		return value.length > 0 ? value : null;
+	} catch {
+		return null;
+	}
+}
+async function writePtyToken(agentId) {
+	await mkdir(ptyTokenDir(agentId), {
+		recursive: true,
+		mode: 448
+	});
+	const token = randomBytes(32).toString("hex");
+	const path = getPtyTokenPath(agentId);
+	await writeFile(path, `${token}\n`, { mode: 384 });
+	try {
+		await chmod(path, 384);
+	} catch {}
+	return token;
+}
+var PTY_TOKEN_HEADER;
+var init_pty_token = __esmMin((() => {
+	init_paths();
+	PTY_TOKEN_HEADER = "x-overdeck-pty-token";
+}));
+//#endregion
+export { writePtyToken as i, init_pty_token as n, readPtyToken as r, PTY_TOKEN_HEADER as t };
+
+//# sourceMappingURL=pty-token-x-ea28Us.js.map

package/server/supervisor-FTJAIsAK.js

@@ -0,0 +1,2 @@
+import { n as getSupervisorUrlSync } from "./supervisor-wM4ooB5O.js";
+export { getSupervisorUrlSync };

package/server/{supervisor-Ctt4eRYz.js → supervisor-wM4ooB5O.js}

@@ -1,6 +1,6 @@
-import { Br as LOGS_DIR, Rr as CONFIG_FILE, Vr as OVERDECK_HOME, Yr as TRAEFIK_DIR, ii as init_paths, jr as init_errors } from "./config-yaml-ig8Nwtiw.js";
+import { Cr as LOGS_DIR, Mr as TRAEFIK_DIR, Vr as init_paths, mr as init_errors, wr as OVERDECK_HOME, xr as CONFIG_FILE } from "./config-yaml-DySPNmKN.js";
 import { t as require_toml } from "./toml-CeLDATih.js";
-import { t as init_dev_supervisor } from "./dev-supervisor-C7p9kEpc.js";
+import { t as init_dev_supervisor } from "./dev-supervisor-bcOWqdQE.js";
 import { join } from "node:path";
 import "effect";
 import { existsSync, readFileSync } from "fs";
@@ -72,4 +72,4 @@ function getSupervisorUrlSync() {
 //#endregion
 export { getSupervisorUrlSync as n, getSupervisorPortSync as t };
 
-//# sourceMappingURL=supervisor-Ctt4eRYz.js.map
+//# sourceMappingURL=supervisor-wM4ooB5O.js.map

package/server/{swarm-readiness-DdmJVX7y.js → swarm-readiness-DlP_UjHq.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { C as init_specs } from "./io-DQR9PMgS.js";
-import { c as hasFileOverlap, l as init_dag, o as getDispatchableItems, r as compileGlob, s as groupItemsByWave } from "./dag-CJpgf9A3.js";
+import { C as init_specs } from "./io-C9kF1wtJ.js";
+import { c as hasFileOverlap, l as init_dag, o as getDispatchableItems, r as compileGlob, s as groupItemsByWave } from "./dag-B1ucnjDU.js";
 import "effect";
-//#region ../../lib/vbrief/swarm-readiness.ts
+//#region ../../lib/xbrief/swarm-readiness.ts
 function computeIssueFootprint(doc) {
 	const footprint = /* @__PURE__ */ new Set();
 	for (const item of doc.plan.items) for (const filePath of item.metadata?.files_scope ?? []) footprint.add(filePath);
@@ -112,4 +112,4 @@ var init_swarm_readiness = __esmMin((() => {
 //#endregion
 export { computeIssueFootprint as n, init_swarm_readiness as r, analyzeSwarmReadiness as t };
 
-//# sourceMappingURL=swarm-readiness-DdmJVX7y.js.map
+//# sourceMappingURL=swarm-readiness-DlP_UjHq.js.map

package/server/{system-prerequisites-DSXBvffY.js → system-prerequisites-DUDj1YHf.js}

@@ -1,4 +1,4 @@
-import { i as resolveExecutable, n as init_harness_binary } from "./harness-binary-B2CTcD84.js";
+import { a as resolveExecutable, o as resolveHarnessBinary, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
 import { homedir } from "node:os";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -127,6 +127,18 @@ const PREREQUISITES = [
 			mac: "npm install -g @openai/codex",
 			win: "npm install -g @openai/codex"
 		}
+	},
+	{
+		id: "kimi",
+		name: "Kimi Code CLI",
+		required: false,
+		purpose: "Kimi Code agents through the Agent Client Protocol (ACP)",
+		versionArgs: ["--version"],
+		install: {
+			linux: "https://www.kimi.com/code/docs/en/kimi-code-cli/guides/getting-started.html",
+			mac: "https://www.kimi.com/code/docs/en/kimi-code-cli/guides/getting-started.html",
+			win: "https://www.kimi.com/code/docs/en/kimi-code-cli/guides/getting-started.html"
+		}
 	}
 ];
 const defaultProbe = async (cmd, args) => {
@@ -136,6 +148,17 @@ const defaultProbe = async (cmd, args) => {
 	});
 	return stdout;
 };
+const defaultResolver = async (command, options) => {
+	const resolutionOptions = options?.pathValue !== void 0 ? { pathValue: options.pathValue } : void 0;
+	return options?.acpHarness ? resolveHarnessBinary("acp", resolutionOptions) : resolveExecutable(command, resolutionOptions);
+};
+function resolvePrerequisiteExecutable(id, resolver, pathValue) {
+	const options = {
+		...id === "kimi" ? { acpHarness: true } : {},
+		...pathValue !== void 0 ? { pathValue } : {}
+	};
+	return Object.keys(options).length > 0 ? resolver(id, options) : resolver(id);
+}
 function firstLine(output) {
 	return output.split("\n")[0]?.trim() || null;
 }
@@ -150,18 +173,18 @@ function failureKind(error) {
 	return "probe failed";
 }
 /** Build a bounded, secret-free support report from the dashboard process environment. */
-async function collectSetupDiagnostics(overdeckVersion) {
+async function collectSetupDiagnostics(overdeckVersion, probe = defaultProbe, resolver = defaultResolver) {
 	const pathValue = process.env["PATH"] ?? "";
 	const toolLines = await Promise.all(PREREQUISITES.map(async ({ id, versionArgs }) => {
-		const resolvedPath = await resolveExecutable(id, { pathValue });
+		const resolvedPath = await resolvePrerequisiteExecutable(id, resolver, pathValue);
 		if (!resolvedPath) return `✗ ${id}: command not found`;
 		try {
-			return `✓ ${id}: ${firstLine(await defaultProbe(resolvedPath, versionArgs)) ?? "version unavailable"} — ${redactHome(resolvedPath)}`;
+			return `✓ ${id}: ${firstLine(await probe(resolvedPath, versionArgs)) ?? "version unavailable"} — ${redactHome(resolvedPath)}`;
 		} catch (error) {
 			return `✗ ${id}: ${failureKind(error)} — ${redactHome(resolvedPath)}`;
 		}
 	}));
-	const claudePath = await resolveExecutable("claude", { pathValue });
+	const claudePath = await resolvePrerequisiteExecutable("claude", resolver, pathValue);
 	const likelyCause = claudePath ? "Claude resolved to an executable path; conversation and agent launchers will prepend that directory to PATH." : "Claude was not found on the server PATH, in common user install locations, under the global npm prefix, or through the login shell.";
 	return {
 		schemaVersion: 1,
@@ -188,29 +211,33 @@ async function collectSetupDiagnostics(overdeckVersion) {
 		].join("\n").slice(0, 16384)
 	};
 }
-async function checkSystemPrerequisites(probe = defaultProbe, resolver = resolveExecutable) {
-	const checks = await Promise.all(PREREQUISITES.map(async ({ versionArgs, ...definition }) => {
-		try {
-			const executable = await resolver(definition.id);
-			if (!executable) return {
-				...definition,
-				found: false,
-				version: null
-			};
-			const output = await probe(executable, versionArgs);
-			return {
-				...definition,
-				found: true,
-				version: firstLine(output)
-			};
-		} catch {
-			return {
-				...definition,
-				found: false,
-				version: null
-			};
-		}
-	}));
+async function checkSystemPrerequisite(id, probe = defaultProbe, resolver = defaultResolver) {
+	const definition = PREREQUISITES.find((candidate) => candidate.id === id);
+	if (!definition) throw new Error(`Unknown system prerequisite: ${id}`);
+	const { versionArgs, ...checkDefinition } = definition;
+	try {
+		const executable = await resolvePrerequisiteExecutable(id, resolver);
+		if (!executable) return {
+			...checkDefinition,
+			found: false,
+			version: null
+		};
+		const output = await probe(executable, versionArgs);
+		return {
+			...checkDefinition,
+			found: true,
+			version: firstLine(output)
+		};
+	} catch {
+		return {
+			...checkDefinition,
+			found: false,
+			version: null
+		};
+	}
+}
+async function checkSystemPrerequisites(probe = defaultProbe, resolver = defaultResolver) {
+	const checks = await Promise.all(PREREQUISITES.map(({ id }) => checkSystemPrerequisite(id, probe, resolver)));
 	return {
 		platform: process.platform,
 		allRequiredFound: checks.every((check) => check.found || !check.required),
@@ -220,4 +247,4 @@ async function checkSystemPrerequisites(probe = defaultProbe, resolver = resolve
 //#endregion
 export { checkSystemPrerequisites, collectSetupDiagnostics };
 
-//# sourceMappingURL=system-prerequisites-DSXBvffY.js.map
+//# sourceMappingURL=system-prerequisites-DUDj1YHf.js.map

package/server/{teardown-workspace-DDCf5n-a.js → teardown-workspace-DeTTImn-.js}

@@ -1,10 +1,10 @@
-import { Mr as AGENTS_DIR, ii as init_paths } from "./config-yaml-ig8Nwtiw.js";
-import { D as killSession, V as sessionExists, j as listSessionNames, w as init_tmux } from "./tmux-L5LgvGLp.js";
-import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-ClkCIWTe.js";
-import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-CNmQy0pL.js";
-import { a as pidsWithCwdUnder } from "./agent-gc-Dj2gncak.js";
-import { i as findWorkspacePath, o as init_archive_planning, r as findAllWorkspacePaths } from "./archive-planning-BvDuWNMo.js";
-import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-7-GnJn0t.js";
+import { Vr as init_paths, hr as AGENTS_DIR } from "./config-yaml-DySPNmKN.js";
+import { D as killSession, H as sessionExists, M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-CBhNdzE4.js";
+import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-_d6XhyND.js";
+import { a as pidsWithCwdUnder } from "./agent-gc-CHcnvonI.js";
+import { i as findWorkspacePath, o as init_archive_planning, r as findAllWorkspacePaths } from "./archive-planning-Du25Jtst.js";
+import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-5M0lupud.js";
 import { Effect } from "effect";
 import { existsSync } from "fs";
 import { basename, join } from "path";
@@ -84,7 +84,7 @@ async function stopTldrDaemonImpl(workspacePath) {
 	const venvPath = join(workspacePath, ".venv");
 	if (!existsSync(venvPath)) return stepSkipped(step, ["No .venv found"]);
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-B8_oT5gx.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
 		await getTldrDaemonServiceSync(workspacePath, venvPath).stop();
 		return stepOk(step, ["Stopped TLDR daemon"]);
 	} catch {
@@ -103,7 +103,7 @@ function stopDocker(workspacePath, issueLower) {
 async function stopDockerImpl(workspacePath, issueLower) {
 	const step = "teardown:docker";
 	try {
-		const { stopWorkspaceDocker } = await import("./workspace-manager-B1WOfKvB.js");
+		const { stopWorkspaceDocker } = await import("./workspace-manager-CWT55qeI.js");
 		await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 		return stepOk(step, ["Stopped Docker containers"]);
 	} catch {
@@ -407,7 +407,7 @@ function clearShadowState(issueId) {
 async function clearShadowStateImpl(issueId) {
 	const step = "teardown:shadow-state";
 	try {
-		const { removeShadowState } = await import("./shadow-state-CbvsN3qG.js");
+		const { removeShadowState } = await import("./shadow-state-DnDyjujH.js");
 		if (removeShadowState(issueId).success) return stepOk(step, [`Cleared shadow state for ${issueId}`]);
 		return stepSkipped(step, ["No shadow state found"]);
 	} catch {
@@ -457,7 +457,7 @@ function buildPlaceholders(ctx, opts, workspacePath) {
 function removeTunnelConfig(tunnelConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { removeTunnelIngress } = await import("./tunnel-BIFl98rc.js");
+			const { removeTunnelIngress } = await import("./tunnel-DGdUkGoZ.js");
 			return stepOk("teardown:tunnel", (await Effect.runPromise(removeTunnelIngress(tunnelConfig, placeholders))).steps || ["Removed tunnel ingress"]);
 		},
 		catch: (err) => err
@@ -469,7 +469,7 @@ function removeTunnelConfig(tunnelConfig, placeholders) {
 function removeHumeEviConfig(humeConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { deleteHumeConfig } = await import("./hume-BmhvfVbV.js");
+			const { deleteHumeConfig } = await import("./hume-ccTf4wTX.js");
 			return stepOk("teardown:hume", (await Effect.runPromise(deleteHumeConfig(humeConfig, placeholders))).steps || ["Removed Hume EVI config"]);
 		},
 		catch: (err) => err
@@ -514,7 +514,7 @@ function pruneSpecialistRegistry(issueId) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:specialist-registry";
-			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-Dqe6_HE5.js");
+			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-DM6bWjsi.js");
 			const removed = pruneSpecialistRegistryEntriesForIssue(issueId);
 			return removed > 0 ? stepOk(step, [`Pruned ${removed} specialist registry entr${removed === 1 ? "y" : "ies"} for ${issueId}`]) : stepSkipped(step, [`No specialist registry entries for ${issueId}`]);
 		},
@@ -525,7 +525,7 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:checkpoint-refs";
-			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-rOgT98WY.js");
+			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-DwbQoqrC.js");
 			const agentIds = [
 				`agent-${issueLower}`,
 				`planning-${issueLower}`,
@@ -539,4 +539,4 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 //#endregion
 export { teardownWorkspace as t };
 
-//# sourceMappingURL=teardown-workspace-DDCf5n-a.js.map
+//# sourceMappingURL=teardown-workspace-DeTTImn-.js.map

package/server/{test-agent-queue-BJZ9Nfcc.js → test-agent-queue-MbxX5vqq.js}

@@ -1,8 +1,8 @@
-import { Hn as init_projects, nr as resolveProjectFromIssueSync } from "./config-yaml-ig8Nwtiw.js";
-import { c as init_review_status, y as setReviewStatusSync } from "./review-status-DFRjDFef.js";
-import { Z as spawnRun, s as init_agents } from "./queries-ZABd5aXP.js";
-import { n as shouldSkipDispatchAsMerged, t as init_merge_verification } from "./merge-verification-CqnUzGEK.js";
-import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-Cp5tljlJ.js";
+import { Tn as init_projects, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
+import { b as setReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
+import { b as init_agents, ut as spawnRun } from "./queries-CjNIf-Ub.js";
+import { n as shouldSkipDispatchAsMerged, t as init_merge_verification } from "./merge-verification-BkaOqPsw.js";
+import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-bWYBtqBg.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/cloister/test-agent-queue.ts
 /**
@@ -34,7 +34,7 @@ Run the role-based verification flow for this already-reviewed branch.
 Required steps:
 1. Before every repository command, verify you are in the workspace above with \`pwd\`. If not, stop and switch back to that workspace before continuing.
 2. Work only in the workspace above. Never run build, test, git, or dashboard commands from the main checkout or another worktree.
-3. Read .pan/records/${options.issueId.toLowerCase()}.json, the canonical vBRIEF under .pan/specs/ for ${options.issueId}, issue notes, and project instructions to determine required verification. Do not require retired workspace-local .pan/continue.json or .pan/spec.vbrief.json files to exist.
+3. Read .pan/records/${options.issueId.toLowerCase()}.json, the canonical xBRIEF under .pan/specs/ for ${options.issueId}, issue notes, and project instructions to determine required verification. Do not require retired workspace-local .pan/continue.json or .pan/spec.vbrief.json files to exist.
 4. Run the configured project gates (at minimum typecheck, lint, and tests when present/applicable).
 5. Decide whether browser UAT is required from acceptance criteria, issue notes, PR notes, or UI/dashboard wording.
 6. If UAT is required, build and run the dashboard from the workspace above, not from main. If a dashboard from another checkout is already running, stop it and start the workspace-built dashboard.
@@ -163,4 +163,4 @@ const dispatchTestAgentAndNotify = (issueId, workspace, branch, notifyAgent) =>
 //#endregion
 export { buildTestRolePrompt, dispatchTestAgentAndNotify };
 
-//# sourceMappingURL=test-agent-queue-BJZ9Nfcc.js.map
+//# sourceMappingURL=test-agent-queue-MbxX5vqq.js.map

package/server/{test-verdict-Cp5tljlJ.js → test-verdict-bWYBtqBg.js}

@@ -102,4 +102,4 @@ var init_test_verdict = __esmMin((() => {}));
 //#endregion
 export { testVerdictArtifactPath as a, readTestVerdictArtifact as i, decideUnsignaledTestAction as n, init_test_verdict as r, clearTestVerdictArtifact as t };
 
-//# sourceMappingURL=test-verdict-Cp5tljlJ.js.map
+//# sourceMappingURL=test-verdict-bWYBtqBg.js.map

package/server/{test-verdict-D_-sXIz_.js → test-verdict-gscuksPv.js}

@@ -1,3 +1,3 @@
-import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-Cp5tljlJ.js";
+import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-bWYBtqBg.js";
 init_test_verdict();
 export { readTestVerdictArtifact };

package/server/{tldr-daemon-B8_oT5gx.js → tldr-daemon-BYFkts95.js}

@@ -1,3 +1,3 @@
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-BQFmmFp0.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-C-69c3OI.js";
 init_tldr_daemon();
 export { getTldrDaemonServiceSync };

package/server/{tldr-daemon-BQFmmFp0.js → tldr-daemon-C-69c3OI.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { jr as init_errors } from "./config-yaml-ig8Nwtiw.js";
+import { mr as init_errors } from "./config-yaml-DySPNmKN.js";
 import "effect";
 import { existsSync, readFileSync, statSync } from "fs";
 import { join } from "path";
@@ -221,4 +221,4 @@ var init_tldr_daemon = __esmMin((() => {
 //#endregion
 export { getTldrDaemonServiceSync as n, init_tldr_daemon as r, TldrDaemonService as t };
 
-//# sourceMappingURL=tldr-daemon-BQFmmFp0.js.map
+//# sourceMappingURL=tldr-daemon-C-69c3OI.js.map

package/server/tmux-B6z7h_vZ.js

@@ -0,0 +1,3 @@
+import { D as killSession, E as isPaneDead, H as sessionExists, M as listSessionNames, k as listAllPaneRecords, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+init_tmux();
+export { isPaneDead, killSession, listAllPaneRecords, listSessionNames, sessionExists };

package/server/{tmux-L5LgvGLp.js → tmux-R7N7y-Mh.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Or as TmuxError, f as loadConfigSync, ii as init_paths, jr as init_errors, ri as getOverdeckHome, t as init_config_yaml } from "./config-yaml-ig8Nwtiw.js";
+import { Br as getOverdeckHome, Vr as init_paths, dr as TmuxError, f as loadConfigSync, mr as init_errors, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
 import { Effect } from "effect";
 import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -120,6 +120,50 @@ var init_ui_theme = __esmMin((() => {
 	};
 }));
 //#endregion
+//#region ../../lib/tmux-process-tree.ts
+/**
+* True when a pane process tree contains a real harness rather than only the
+* launcher shell and its keep-alive sleep loop. `psTable` is `ps -eo
+* pid=,ppid=,comm=` output.
+*/
+function paneTreeHasHarnessProcess(panePids, psTable) {
+	const childrenByPpid = /* @__PURE__ */ new Map();
+	const commByPid = /* @__PURE__ */ new Map();
+	for (const line of psTable.split("\n")) {
+		const match = line.trim().match(/^(\d+)\s+(\d+)\s+(.+)$/);
+		if (!match) continue;
+		const pid = Number(match[1]);
+		const ppid = Number(match[2]);
+		commByPid.set(pid, match[3].trim());
+		const siblings = childrenByPpid.get(ppid);
+		if (siblings) siblings.push(pid);
+		else childrenByPpid.set(ppid, [pid]);
+	}
+	const queue = [...panePids];
+	const seen = /* @__PURE__ */ new Set();
+	while (queue.length > 0) {
+		const pid = queue.pop();
+		if (seen.has(pid)) continue;
+		seen.add(pid);
+		const comm = commByPid.get(pid);
+		if (comm && !KEEPALIVE_FOREGROUND_COMMANDS.has(comm)) return true;
+		const children = childrenByPpid.get(pid);
+		if (children) queue.push(...children);
+	}
+	return false;
+}
+var KEEPALIVE_FOREGROUND_COMMANDS;
+var init_tmux_process_tree = __esmMin((() => {
+	KEEPALIVE_FOREGROUND_COMMANDS = new Set([
+		"sleep",
+		"bash",
+		"sh",
+		"dash",
+		"zsh",
+		"ash"
+	]);
+}));
+//#endregion
 //#region ../../lib/tmux.ts
 function validateSessionName(name) {
 	if (!VALID_SESSION_NAME_RE.test(name)) throw new Error(`Invalid tmux session name: ${name}`);
@@ -729,38 +773,6 @@ async function listPaneValuesText(target, format) {
 	}
 }
 /**
-* Pure tree walk behind isHarnessProcessAlive, exported for tests: true when
-* any process in the pane's tree (the pane pids themselves or any descendant)
-* is something other than a shell or `sleep`. `psTable` is `ps -eo
-* pid=,ppid=,comm=` output.
-*/
-function paneTreeHasHarnessProcess(panePids, psTable) {
-	const childrenByPpid = /* @__PURE__ */ new Map();
-	const commByPid = /* @__PURE__ */ new Map();
-	for (const line of psTable.split("\n")) {
-		const match = line.trim().match(/^(\d+)\s+(\d+)\s+(.+)$/);
-		if (!match) continue;
-		const pid = Number(match[1]);
-		const ppid = Number(match[2]);
-		commByPid.set(pid, match[3].trim());
-		const siblings = childrenByPpid.get(ppid);
-		if (siblings) siblings.push(pid);
-		else childrenByPpid.set(ppid, [pid]);
-	}
-	const queue = [...panePids];
-	const seen = /* @__PURE__ */ new Set();
-	while (queue.length > 0) {
-		const pid = queue.pop();
-		if (seen.has(pid)) continue;
-		seen.add(pid);
-		const comm = commByPid.get(pid);
-		if (comm && !KEEPALIVE_FOREGROUND_COMMANDS.has(comm)) return true;
-		const children = childrenByPpid.get(pid);
-		if (children) queue.push(...children);
-	}
-	return false;
-}
-/**
 * Honest liveness signal for a launcher-managed session: true only when the
 * session exists AND a real harness process is running in it — not the post-exit
 * keep-alive loop. `sessionExists` alone cannot tell a live session from a
@@ -817,6 +829,21 @@ function detectTerminalApiErrorSync(paneOutput) {
 	}
 	return null;
 }
+function parseTmuxPaneRecords(output) {
+	return output.split("\n").flatMap((line) => {
+		if (!line) return [];
+		const [sessionName = "", panePidRaw = "", paneDeadRaw = "", paneDeadStatusRaw = ""] = line.split("	");
+		const panePid = Number.parseInt(panePidRaw, 10);
+		if (!sessionName || !Number.isInteger(panePid) || panePid <= 0) return [];
+		const paneDeadStatus = Number.parseInt(paneDeadStatusRaw, 10);
+		return [{
+			sessionName,
+			panePid,
+			paneDead: paneDeadRaw === "1",
+			paneDeadStatus: Number.isInteger(paneDeadStatus) ? paneDeadStatus : null
+		}];
+	});
+}
 async function sendKeysAsync(sessionName, key, caller) {
 	validateSessionName(sessionName);
 	const target = exactPaneTarget(sessionName);
@@ -846,13 +873,14 @@ function deliveryVerifyLine(content) {
 	const lines = content.split("\n");
 	return ([...lines].reverse().find((line) => line.trim().length >= 3) ?? lines[lines.length - 1])?.trim() ?? "";
 }
-var execFileAsync, VALID_SESSION_NAME_RE, DEFAULT_TMUX_WINDOW_COLS, DEFAULT_TMUX_WINDOW_ROWS, MANAGED_TMUX_SERVER_UNIT, SERVER_ALIVE_POLL_MS, SERVER_ALIVE_TIMEOUT_MS, MANAGED_TMUX_CONFIG_CONTENT, tmuxContextPrepared, warnedManagedServerTmuxSpawnScope, warnedManagedServerDirtyCmdline, MessageDeliveryFailed, KEEPALIVE_FOREGROUND_COMMANDS, TERMINAL_API_ERROR_PATTERNS, toTmuxError, ensureManagedTmuxContextOnce, listSessions, listSessionNames, getWindowDimensions, sessionExists, createSession, killSession, setOption, resizeWindow, sendRawKeystroke, sendKeys, capturePane, listPaneValues, isPaneDead, getAgentSessions;
+var execFileAsync, VALID_SESSION_NAME_RE, DEFAULT_TMUX_WINDOW_COLS, DEFAULT_TMUX_WINDOW_ROWS, MANAGED_TMUX_SERVER_UNIT, SERVER_ALIVE_POLL_MS, SERVER_ALIVE_TIMEOUT_MS, MANAGED_TMUX_CONFIG_CONTENT, tmuxContextPrepared, warnedManagedServerTmuxSpawnScope, warnedManagedServerDirtyCmdline, MessageDeliveryFailed, TERMINAL_API_ERROR_PATTERNS, toTmuxError, ensureManagedTmuxContextOnce, listSessions, listSessionNames, listAllPaneRecords, getWindowDimensions, sessionExists, createSession, killSession, setOption, resizeWindow, sendRawKeystroke, sendKeys, capturePane, listPaneValues, isPaneDead, getAgentSessions;
 var init_tmux = __esmMin((() => {
 	init_paths();
 	init_config_yaml();
 	init_child_env();
 	init_errors();
 	init_ui_theme();
+	init_tmux_process_tree();
 	execFileAsync = promisify(execFile);
 	VALID_SESSION_NAME_RE = /^[a-zA-Z0-9._-]+$/;
 	DEFAULT_TMUX_WINDOW_COLS = 200;
@@ -886,14 +914,6 @@ var init_tmux = __esmMin((() => {
 			this.name = "MessageDeliveryFailed";
 		}
 	};
-	KEEPALIVE_FOREGROUND_COMMANDS = new Set([
-		"sleep",
-		"bash",
-		"sh",
-		"dash",
-		"zsh",
-		"ash"
-	]);
 	TERMINAL_API_ERROR_PATTERNS = [
 		{
 			re: /usage limit for this billing cycle/i,
@@ -998,6 +1018,18 @@ var init_tmux = __esmMin((() => {
 		},
 		catch: (cause) => toTmuxError("list-session-names", cause)
 	});
+	listAllPaneRecords = () => Effect.tryPromise({
+		try: async () => {
+			const { stdout } = await tmuxExecAsync([
+				"list-panes",
+				"-a",
+				"-F",
+				"#{session_name}	#{pane_pid}	#{pane_dead}	#{pane_dead_status}"
+			], { encoding: "utf-8" });
+			return parseTmuxPaneRecords(String(stdout));
+		},
+		catch: (cause) => toTmuxError("list-all-pane-records", cause)
+	});
 	getWindowDimensions = (sessionName) => Effect.tryPromise({
 		try: async () => {
 			try {
@@ -1218,6 +1250,6 @@ var init_tmux = __esmMin((() => {
 	getAgentSessions = () => listSessions().pipe(Effect.map((sessions) => sessions.filter((s) => s.name.startsWith("agent-"))));
 }));
 //#endregion
-export { listPaneValuesSync as A, sendRawKeystroke as B, getWindowDimensions as C, killSession as D, isPaneDead as E, querySessionSync as F, getUiThemeSync as G, sessionExistsSync as H, resizeWindow as I, BLANKED_PROVIDER_ENV as J, init_ui_theme as K, sendEscapeKeyAsync as L, listSessions as M, listSessionsSync as N, killSessionSync as O, paneTreeHasHarnessProcess as P, sendKeys as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, setOption as U, sessionExists as V, colorFgBgForTheme as W, buildChildEnvWithoutTmuxSync as X, buildChildEnvSync as Y, init_child_env as Z, getAgentSessions as _, capturePaneSync as a, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, listSessionNames as j, listPaneValues as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, capturePaneText as o, ensureOverdeckTmuxServerSync as p, setUiTheme as q, buildTmuxCommandString as r, createSession as s, MessageDeliveryFailed as t, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeysAsync as z };
+export { init_child_env as $, listPaneValues as A, sendKeysAsync as B, getWindowDimensions as C, killSession as D, isPaneDead as E, parseTmuxPaneRecords as F, paneTreeHasHarnessProcess as G, sessionExists as H, querySessionSync as I, init_ui_theme as J, colorFgBgForTheme as K, resizeWindow as L, listSessionNames as M, listSessions as N, killSessionSync as O, listSessionsSync as P, buildChildEnvWithoutTmuxSync as Q, sendEscapeKeyAsync as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, sessionExistsSync as U, sendRawKeystroke as V, setOption as W, BLANKED_PROVIDER_ENV as X, setUiTheme as Y, buildChildEnvSync as Z, getAgentSessions as _, capturePaneSync as a, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, listPaneValuesSync as j, listAllPaneRecords as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, capturePaneText as o, ensureOverdeckTmuxServerSync as p, getUiThemeSync as q, buildTmuxCommandString as r, createSession as s, MessageDeliveryFailed as t, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeys as z };
 
-//# sourceMappingURL=tmux-L5LgvGLp.js.map
+//# sourceMappingURL=tmux-R7N7y-Mh.js.map

package/server/{token-BkQLy4yS.js → token-BK6t8BIT.js}

@@ -1,5 +1,5 @@
 import { t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as require_token_error, t as require_token_util } from "./token-util-DI8sGlmF.js";
+import { r as require_token_error, t as require_token_util } from "./token-util-DxXu-vd1.js";
 //#region ../../../node_modules/.bun/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js
 var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var __defProp = Object.defineProperty;
@@ -54,4 +54,4 @@ var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 export default require_token();
 export {};
 
-//# sourceMappingURL=token-BkQLy4yS.js.map
+//# sourceMappingURL=token-BK6t8BIT.js.map

package/server/token-util-DuPuNriz.js

@@ -0,0 +1,3 @@
+import { t as require_token_util } from "./token-util-DxXu-vd1.js";
+export default require_token_util();
+export {};

package/server/{token-util-DI8sGlmF.js → token-util-DxXu-vd1.js}

@@ -432,4 +432,4 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 export { require_auth_errors as n, require_token_error as r, require_token_util as t };
 
-//# sourceMappingURL=token-util-DI8sGlmF.js.map
+//# sourceMappingURL=token-util-DxXu-vd1.js.map

package/server/{tracker-config-DdT-nUAM.js → tracker-config-G6latr8C.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Hn as init_projects, Jn as loadProjectsConfigSync, Nn as getIssuePrefix, f as loadConfigSync, t as init_config_yaml } from "./config-yaml-ig8Nwtiw.js";
+import { Tn as init_projects, f as loadConfigSync, gn as getIssuePrefix, jn as loadProjectsConfigSync, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
 import { existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
@@ -142,4 +142,4 @@ var init_tracker_config = __esmMin((() => {
 //#endregion
 export { init_tracker_config as a, initTrackerConfigCache as i, getLinearApiKey as n, validateRallyConfig as o, getRallyConfig as r, getGitHubConfig as t };
 
-//# sourceMappingURL=tracker-config-DdT-nUAM.js.map
+//# sourceMappingURL=tracker-config-G6latr8C.js.map

package/server/{tracker-utils-DV3h1FYG.js → tracker-utils-B4ylXZQK.js}

@@ -1,3 +1,3 @@
-import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-CawsPSS2.js";
+import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
 init_tracker_utils();
 export { resolveGitHubIssueSync };

package/server/{tracker-utils-CawsPSS2.js → tracker-utils-DHv5pSDT.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Hn as init_projects, Jn as loadProjectsConfigSync, Nn as getIssuePrefix, dr as extractPrefixSync, fr as init_issue_id, jr as init_errors, mr as parseIssueIdSync, ur as extractNumberSync } from "./config-yaml-ig8Nwtiw.js";
+import { Jn as extractPrefixSync, Tn as init_projects, Yn as init_issue_id, Zn as parseIssueIdSync, gn as getIssuePrefix, jn as loadProjectsConfigSync, mr as init_errors, qn as extractNumberSync } from "./config-yaml-DySPNmKN.js";
 import "effect";
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
@@ -120,4 +120,4 @@ var init_tracker_utils = __esmMin((() => {
 //#endregion
 export { resolveTrackerTypeSync as a, resolveGitHubIssueSync as i, init_tracker_utils as n, parseGitHubReposSync as r, extractIssuePrefix as t };
 
-//# sourceMappingURL=tracker-utils-CawsPSS2.js.map
+//# sourceMappingURL=tracker-utils-DHv5pSDT.js.map

package/server/{traefik-connect-C6mJckNs.js → traefik-connect-Df2uXPsQ.js}

@@ -69,4 +69,4 @@ var init_traefik_connect = __esmMin((() => {
 //#endregion
 export { reconcileTraefikNetworks as n, init_traefik_connect as t };
 
-//# sourceMappingURL=traefik-connect-C6mJckNs.js.map
+//# sourceMappingURL=traefik-connect-Df2uXPsQ.js.map

package/server/{tunnel-IdK1iTHx.js → tunnel-CDVKJpRv.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { jr as init_errors, kr as TrackerError } from "./config-yaml-ig8Nwtiw.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-Bigl_-Lk.js";
+import { fr as TrackerError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CIVWZOQr.js";
 import { Effect } from "effect";
 import { readFileSync } from "fs";
 import { resolve } from "path";
@@ -217,4 +217,4 @@ var init_tunnel = __esmMin((() => {
 //#endregion
 export { init_tunnel as n, removeTunnelIngress as r, addTunnelIngress as t };
 
-//# sourceMappingURL=tunnel-IdK1iTHx.js.map
+//# sourceMappingURL=tunnel-CDVKJpRv.js.map

package/server/{tunnel-BIFl98rc.js → tunnel-DGdUkGoZ.js}

@@ -1,3 +1,3 @@
-import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-IdK1iTHx.js";
+import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-CDVKJpRv.js";
 init_tunnel();
 export { removeTunnelIngress };