@overdeck/desktop 0.45.22 → 0.45.24

package/sync-sources/agents/pan-inspect-agent.md

@@ -12,7 +12,7 @@ tools:
 
 # Overdeck Inspect Agent
 
-Per-item specification verifier. Runs against the scoped diff of a single vBRIEF item.
+Per-item specification verifier. Runs against the scoped diff of a single xBRIEF item.
 
 ## Responsibilities
 

package/sync-sources/agents/pan-merge-agent.md

@@ -17,7 +17,7 @@ Merge specialist. Runs after review + test specialists pass and the human clicks
 4. Re-run verification gates (typecheck, lint, test) after the rebase
 5. Push the rebased branch
 6. Run `gh pr merge --squash` to land the PR
-7. Trigger `postMergeLifecycle` cleanup (Docker network/container cleanup, vBRIEF transition to completed/, vBRIEF tasks close)
+7. Trigger `postMergeLifecycle` cleanup (Docker network/container cleanup, xBRIEF lifecycle completion, task-state finalization)
 
 ## Boundaries
 

package/sync-sources/agents/pan-planning-agent.md

@@ -1,6 +1,6 @@
 ---
 name: pan-planning-agent
-description: Overdeck planning agent — researches the issue and writes the executable vBRIEF plan. Never writes implementation code.
+description: Overdeck planning agent — researches the issue and writes the executable xBRIEF plan. Never writes implementation code.
 model: sonnet
 permissionMode: bypassPermissions
 effort: high
@@ -13,9 +13,9 @@ Research-only agent that produces an executable plan for an issue. Never writes
 ## Outputs
 
 1. **PRD draft** in `<projectRoot>/.pan/drafts/<ISSUE-ID>.md` if missing (markdown narrative)
-2. **vBRIEF plan** in `.pan/spec.vbrief.json` (workspace working copy — `plan-finalize` promotes it to main's canonical `.pan/specs/`)
+2. **xBRIEF plan** in `.pan/spec.vbrief.json` (deliberate legacy-compatible workspace path; `plan-finalize` promotes it to canonical state)
 3. **Continue context** in `.pan/continue.json` with decisions, hazards, and a clear `resumePoint` for the implementation agent
-`pan plan-finalize` stamps the plan and writes the canonical spec to `<projectRoot>/.pan/specs/<YYYY-MM-DD>-<ISSUE>-<slug>.vbrief.json` with `plan.status: "proposed"`. Work agents read the spec from main — item/subItem status changes live in the workspace continue file's `statusOverrides` map, not in the spec itself.
+`pan plan-finalize` stamps the plan and writes the canonical spec to `specs/<YYYY-MM-DD>-<ISSUE>-<slug>.xbrief.json` on `overdeck-state` with `plan.status: "proposed"`. Work agents read the immutable canonical spec through the read door — item/subItem status changes live in the workspace continue file's `statusOverrides` map, not in the spec itself.
 
 ## Process
 
@@ -34,4 +34,4 @@ Status is a JSON field, not a directory. `plan.status` advances `draft → propo
 
 - No implementation code. No commits to feature files. The implementation agent does that.
 - Caveman compression is disabled for this agent — narrative fields in continue.json must remain full prose so crash recovery and downstream specialists have the context they need.
-- Planning ends at finalization; implementation agents claim and complete vBRIEF items through `pan task`.
+- Planning ends at finalization; implementation agents claim and complete xBRIEF items through `pan task`.

package/sync-sources/agents/pan-work-agent.md

@@ -1,6 +1,6 @@
 ---
 name: pan-work-agent
-description: Autonomous Overdeck implementation agent — claims vBRIEF items, writes code, commits per item, and signals completion via pan done.
+description: Autonomous Overdeck implementation agent — claims xBRIEF items, writes code, commits per item, and signals completion via pan done.
 model: sonnet
 permissionMode: bypassPermissions
 effort: high

package/sync-sources/dev-skills/pan-commit/SKILL.md

@@ -29,7 +29,7 @@ Current expectations in this repo:
   - `workspace`
   - `cli`
   - `review`
-  - `vBRIEF tasks`
+  - `beads`
   - `db`
   - `specialists`
   - `terminal`

package/sync-sources/dev-skills/test-specialist-workflow/SKILL.md

@@ -191,7 +191,7 @@ If merge-agent can't complete:
 cd ~/Projects/overdeck
 git status
 
-# If .vBRIEF tasks/ files are modified, that's OK (should be ignored)
+# Workspace `.overdeck/` runtime files are gitignored and should not be staged
 # Other uncommitted changes need to be committed or stashed
 ```
 

package/sync-sources/hooks/record-cost-event.js

@@ -25962,9 +25962,11 @@ function stateMigrationLockPath(projectKey) {
 	return join$1(getOverdeckHome(), "locks", "state-migration", `${projectKey}.lock`);
 }
 function isStateMigrationLocked(projectKey) {
+	const path = stateMigrationLockPath(projectKey);
+	mkdirSync$1(dirname$1(path), { recursive: true });
 	try {
-		closeSync$1(openSync$1(stateMigrationLockPath(projectKey), "wx"));
-		rmSync(stateMigrationLockPath(projectKey));
+		closeSync$1(openSync$1(path, "wx"));
+		rmSync(path);
 		return false;
 	} catch {
 		return true;
@@ -26025,7 +26027,9 @@ async function isStatePlaneOnlyDiff(baseSha, tipSha, repoRoot) {
 * sync-state-via-commit shape this helper produces is the substrate for that.
 */
 const spawnerLayer = layer$4.pipe(provide$2(mergeAll(layer$2, layer)));
+const DEFAULT_STATE_GIT_TIMEOUT_MS = 3e4;
 const DEFAULT_STATE_PUSH_TIMEOUT_MS = 3e4;
+const DEFAULT_STATE_FLUSH_TIMEOUT_MS = 6e4;
 function parsePositiveInteger(value, fallback) {
 	if (!value) return fallback;
 	const parsed = Number(value);
@@ -26054,9 +26058,10 @@ function isAutoCommitExcludedPath(relativePath) {
 	return false;
 }
 const pending = /* @__PURE__ */ new Map();
-let serializer = Promise.resolve();
+const active = /* @__PURE__ */ new Map();
+const serializers = /* @__PURE__ */ new Map();
 /** Run a git subcommand. Fails with GitError on non-zero exit. */
-function runGit(args, cwd) {
+function runGitRaw(args, cwd) {
 	return gen(function* () {
 		const handle = yield* make$1("git", [...args], {
 			cwd,
@@ -26076,10 +26081,13 @@ function runGit(args, cwd) {
 			stderr: stderrBuf.toString("utf-8"),
 			exitCode
 		};
-	}).pipe(scoped, provide(spawnerLayer), catchCause((cause) => fail(causeToGitError(cause, args))));
+	}).pipe(scoped, provide(spawnerLayer));
+}
+function runGit(args, cwd) {
+	return runGitWithTimeout(args, cwd, parsePositiveInteger(process.env.OVERDECK_STATE_GIT_TIMEOUT_MS, DEFAULT_STATE_GIT_TIMEOUT_MS));
 }
 function runGitWithTimeout(args, cwd, timeoutMs) {
-	return runGit(args, cwd).pipe(timeout(millis(timeoutMs)), catchCause((cause) => fail(causeToGitError(cause, args))));
+	return runGitRaw(args, cwd).pipe(timeout(millis(timeoutMs)), catchCause((cause) => fail(causeToGitError(cause, args))));
 }
 function causeToGitError(cause, args) {
 	const squashed = squash(cause);
@@ -26139,31 +26147,120 @@ function queueAutoCommit(opts) {
 	});
 }
 /**
-* Force a flush of any pending commits for `projectRoot`. Returns an Effect that
-* resolves after the commit attempt (success or no-op).
+* Force a flush of every pending or active commit that targets the same Git
+* checkout as `projectRoot`. Callers may pass either a logical project root or
+* the effective Git root; the Effect resolves only after every matching writer
+* has settled.
 */
-function flushAutoCommits(projectRoot) {
-	return promise(() => flushPromise(projectRoot));
+function flushAutoCommits(projectRoot, signal) {
+	return promise(() => flushPromise(projectRoot, signal));
 }
-function flushPromise(projectRoot) {
-	const batch = pending.get(projectRoot);
-	if (!batch) return Promise.resolve({
-		committed: false,
-		reason: "no pending"
-	});
-	clearTimeout(batch.timer);
-	return flushInner(projectRoot);
+function flushPromise(projectRoot, signal) {
+	const gitRoot = pending.get(projectRoot)?.repoRoot ?? active.get(projectRoot)?.gitRoot ?? projectRoot;
+	const matching = /* @__PURE__ */ new Set();
+	for (const [queuedProjectRoot, batch] of pending) {
+		if ((batch.repoRoot ?? queuedProjectRoot) !== gitRoot) continue;
+		clearTimeout(batch.timer);
+		const started = flushInner(queuedProjectRoot);
+		if (started) matching.add(started);
+	}
+	for (const activeFlush of active.values()) if (activeFlush.gitRoot === gitRoot) matching.add(activeFlush);
+	if (matching.size === 0) {
+		signal?.throwIfAborted();
+		return Promise.resolve({
+			committed: false,
+			reason: "no pending"
+		});
+	}
+	return waitForFlushes(gitRoot, [...matching], signal);
 }
 function flushInner(projectRoot) {
 	const batch = pending.get(projectRoot);
-	if (!batch) return Promise.resolve({
-		committed: false,
-		reason: "no pending"
-	});
+	if (!batch) return active.get(projectRoot);
 	pending.delete(projectRoot);
-	const task = serializer.then(() => runPromise(doCommit(projectRoot, batch)));
-	serializer = task.catch(() => void 0);
-	return task;
+	return startSerializedFlush(projectRoot, batch.repoRoot ?? projectRoot, doBoundedCommit(projectRoot, batch));
+}
+function startSerializedFlush(projectRoot, gitRoot, operation) {
+	const prior = serializers.get(gitRoot) ?? Promise.resolve();
+	const controller = new AbortController();
+	const promise = prior.then(() => {
+		controller.signal.throwIfAborted();
+		return runPromise(operation, { signal: controller.signal });
+	});
+	const activeFlush = {
+		controller,
+		gitRoot,
+		promise
+	};
+	active.set(projectRoot, activeFlush);
+	const tail = promise.catch(() => void 0);
+	serializers.set(gitRoot, tail);
+	promise.then(() => clearActiveFlush(projectRoot, activeFlush, tail), () => clearActiveFlush(projectRoot, activeFlush, tail));
+	return activeFlush;
+}
+async function waitForFlushes(gitRoot, activeFlushes, signal) {
+	const completion = Promise.all(activeFlushes.map((flush) => flush.promise)).then(combineFlushResults);
+	if (!signal) return completion;
+	if (signal.aborted) {
+		await abortAndSettleGitRoot(gitRoot, signal.reason);
+		throw signal.reason;
+	}
+	return new Promise((resolve, reject) => {
+		let completed = false;
+		const onAbort = () => {
+			if (completed) return;
+			completed = true;
+			signal.removeEventListener("abort", onAbort);
+			abortAndSettleGitRoot(gitRoot, signal.reason).then(() => reject(signal.reason), reject);
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		completion.then((result) => {
+			if (completed) return;
+			completed = true;
+			signal.removeEventListener("abort", onAbort);
+			resolve(result);
+		}, (error) => {
+			if (completed) return;
+			completed = true;
+			signal.removeEventListener("abort", onAbort);
+			reject(error);
+		});
+		if (signal.aborted) onAbort();
+	});
+}
+function combineFlushResults(results) {
+	if (results.length === 1) return results[0];
+	const combined = { committed: results.some((result) => result.committed) };
+	const committed = results.filter((result) => result.committed);
+	if (committed.some((result) => result.pushed === false)) combined.pushed = false;
+	else if (committed.length > 0 && committed.every((result) => result.pushed === true)) combined.pushed = true;
+	if (results.some((result) => result.errored)) combined.errored = true;
+	const reasons = results.flatMap((result) => result.reason ? [result.reason] : []);
+	if (reasons.length > 0) combined.reason = reasons.join("; ");
+	return combined;
+}
+async function abortAndSettleGitRoot(gitRoot, reason) {
+	const matching = [...active.values()].filter((flush) => flush.gitRoot === gitRoot);
+	for (const flush of matching) flush.controller.abort(reason);
+	await Promise.allSettled(matching.map((flush) => flush.promise));
+}
+function clearActiveFlush(projectRoot, activeFlush, tail) {
+	if (active.get(projectRoot) === activeFlush) active.delete(projectRoot);
+	if (serializers.get(activeFlush.gitRoot) === tail) serializers.delete(activeFlush.gitRoot);
+}
+function doBoundedCommit(projectRoot, batch) {
+	return boundStateFlush(doCommit(projectRoot, batch));
+}
+function boundStateFlush(operation, timeoutMs = parsePositiveInteger(process.env.OVERDECK_STATE_FLUSH_TIMEOUT_MS, DEFAULT_STATE_FLUSH_TIMEOUT_MS)) {
+	return operation.pipe(timeout(millis(timeoutMs)), catchCause((cause) => {
+		const reason = `state writer timed out after ${timeoutMs / 1e3}s: ${String(squash(cause))}`;
+		console.warn(`[pan-dir/auto-commit] ${reason}`);
+		return succeed({
+			committed: false,
+			errored: true,
+			reason
+		});
+	}));
 }
 function doCommit(projectRoot, batch) {
 	const gitRoot = batch.repoRoot ?? projectRoot;
@@ -26443,10 +26540,10 @@ function getIssueRecordBasePath(project, issueId) {
 */
 function preserveCloseOutSync(path, record) {
 	const incoming = record.closeOut;
-	if (!(!incoming || Object.keys(incoming.usage?.byStage ?? {}).length === 0 && Object.keys(incoming.usage?.totals ?? {}).length === 0 && (incoming.merges ?? []).length === 0) || !existsSync$1(path)) return record;
+	if (!(!incoming || Object.keys(incoming.usage?.byStage ?? {}).length === 0 && Object.keys(incoming.usage?.totals ?? {}).length === 0 && (incoming.merges ?? []).length === 0 && !incoming.dodGate) || !existsSync$1(path)) return record;
 	try {
 		const disk = JSON.parse(readFileSync$1(path, "utf-8")).closeOut;
-		if (disk && (Object.keys(disk.usage?.byStage ?? {}).length > 0 || Object.keys(disk.usage?.totals ?? {}).length > 0 || (disk.merges ?? []).length > 0)) {
+		if (disk && (Object.keys(disk.usage?.byStage ?? {}).length > 0 || Object.keys(disk.usage?.totals ?? {}).length > 0 || (disk.merges ?? []).length > 0 || Boolean(disk.dodGate))) {
 			console.warn(`[record] Preserving populated closeOut for ${record.issueId} — incoming write carried an empty closeOut (PAN-2466 guard)`);
 			return {
 				...record,
@@ -26490,7 +26587,7 @@ function preserveCorruptRecordSync(path) {
 * renamed file parses as JSON. A mid-write crash can no longer truncate the
 * record in place (rename is atomic); a write that somehow produces unparseable
 * bytes throws instead of leaving a corrupt record for readers to silently
-* fabricate over. Modeled on writePlanFileAtomic (src/lib/vbrief/dag-cli.ts:101).
+* fabricate over. Modeled on writePlanFileAtomic (src/lib/xbrief/dag-cli.ts:101).
 */
 function writeRecordFileAtomicSync(path, record) {
 	preserveCorruptRecordSync(path);
@@ -28024,7 +28121,8 @@ function validateRoleFields(role, roleConfig) {
 			if (!Number.isInteger(entry.weight) || entry.weight <= 0) throw new Error(`config.yaml: roles.${role}.model[${i}].weight must be a positive integer`);
 		}
 	}
-	if (roleConfig.harness !== void 0 && roleConfig.harness !== "claude-code" && roleConfig.harness !== "ohmypi" && roleConfig.harness !== "codex") throw new Error(`config.yaml: roles.${role}.harness must be claude-code, ohmypi, or codex`);
+	if (roleConfig.autonomousModel !== void 0 && typeof roleConfig.autonomousModel !== "string") throw new Error(`config.yaml: roles.${role}.autonomousModel must be a scalar model reference`);
+	if (roleConfig.harness !== void 0 && roleConfig.harness !== "claude-code" && roleConfig.harness !== "ohmypi" && roleConfig.harness !== "codex" && roleConfig.harness !== "acp") throw new Error(`config.yaml: roles.${role}.harness must be claude-code, ohmypi, codex, or acp`);
 	if (roleConfig.effort !== void 0 && !ROLE_EFFORTS.includes(roleConfig.effort)) throw new Error(`config.yaml: roles.${role}.effort must be one of ${ROLE_EFFORTS.join(", ")}`);
 	if (roleConfig.mode !== void 0 && roleConfig.mode !== "quick" && roleConfig.mode !== "full" && roleConfig.mode !== "none") throw new Error(`config.yaml: roles.${role}.mode must be quick, full, or none`);
 	if (roleConfig.reReviewScope !== void 0 && roleConfig.reReviewScope !== "all" && roleConfig.reReviewScope !== "changed" && roleConfig.reReviewScope !== "blockers") throw new Error(`config.yaml: roles.${role}.reReviewScope must be all, changed, or blockers`);
@@ -28041,6 +28139,7 @@ function validateRoleModelRefs(config) {
 	}
 	for (const [role, roleConfig] of Object.entries(config.roles ?? {})) {
 		validateRoleFields(role, roleConfig);
+		if (typeof roleConfig.autonomousModel === "string") derefWorkhorse(roleConfig.autonomousModel, config, `roles.${role}.autonomousModel`);
 		if (Array.isArray(roleConfig.model)) for (let i = 0; i < roleConfig.model.length; i++) derefWorkhorse(roleConfig.model[i].model, config, `roles.${role}.model[${i}].model`);
 		else if (roleConfig.model) {
 			const resolvedModel = derefWorkhorse(roleConfig.model, config, `roles.${role}.model`);
@@ -28637,7 +28736,7 @@ const DEFAULT_TIERED_EXECUTION_CONFIG = {
 	difficultyToTier: {}
 };
 function isRuntimeName(value) {
-	return value === "claude-code" || value === "ohmypi" || value === "codex";
+	return value === "claude-code" || value === "ohmypi" || value === "codex" || value === "acp";
 }
 function isDifficulty(value) {
 	return TIERED_EXECUTION_DIFFICULTIES.includes(value);
@@ -28660,7 +28759,7 @@ function knownModelIds() {
 	return ids;
 }
 function validateHarness(harness, path) {
-	if (!isRuntimeName(harness)) throw new TieredExecutionConfigError(`${path}.harness '${harness}' is unknown; expected claude-code, ohmypi, or codex`);
+	if (!isRuntimeName(harness)) throw new TieredExecutionConfigError(`${path}.harness '${harness}' is unknown; expected claude-code, ohmypi, codex, or acp`);
 }
 function validateModel(model, path) {
 	const resolved = resolveModelIdSync(model);
@@ -29191,7 +29290,7 @@ function normalizeProviderConfig(providerConfig, fallbackKey) {
 	};
 }
 function validateProviderHarness(provider, harness) {
-	if (harness !== void 0 && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex") throw new Error(`config.yaml: models.providers.${provider}.harness must be claude-code, ohmypi, or codex`);
+	if (harness !== void 0 && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex" && harness !== "acp") throw new Error(`config.yaml: models.providers.${provider}.harness must be claude-code, ohmypi, codex, or acp`);
 }
 function applyProviderHarness(result, provider, harness) {
 	validateProviderHarness(provider, harness);
@@ -32263,7 +32362,196 @@ function getOverdeckDatabasePath() {
 	return join$1(getOverdeckHome(), "overdeck.db");
 }
 //#endregion
+//#region ../../src/lib/overdeck/schema-audit.ts
+const EMPTY_TOP_UP_EXPECTATIONS = {
+	columns: [],
+	indexes: []
+};
+function splitTableDefinitions(body) {
+	const definitions = [];
+	let start = 0;
+	let depth = 0;
+	let quote = null;
+	for (let index = 0; index < body.length; index += 1) {
+		const character = body[index];
+		if (quote) {
+			if (character === quote && body[index - 1] !== "\\") quote = null;
+			continue;
+		}
+		if (character === "'" || character === "\"" || character === "`") {
+			quote = character;
+			continue;
+		}
+		if (character === "(") depth += 1;
+		if (character === ")") depth -= 1;
+		if (character === "," && depth === 0) {
+			definitions.push(body.slice(start, index).trim());
+			start = index + 1;
+		}
+	}
+	definitions.push(body.slice(start).trim());
+	return definitions.filter(Boolean);
+}
+function parseOverdeckSchemaExpectations(migrationSql, topUps = EMPTY_TOP_UP_EXPECTATIONS) {
+	const tables = /* @__PURE__ */ new Map();
+	const indexes = /* @__PURE__ */ new Set();
+	for (const statement of migrationSql.split("--> statement-breakpoint")) {
+		const trimmed = statement.trim();
+		const tableMatch = trimmed.match(/^CREATE TABLE(?: IF NOT EXISTS)?\s+`([^`]+)`\s*\(([\s\S]*)\)\s*;?$/i);
+		if (tableMatch) {
+			const [, tableName, body] = tableMatch;
+			const columns = /* @__PURE__ */ new Set();
+			for (const definition of splitTableDefinitions(body)) {
+				const columnMatch = definition.match(/^`([^`]+)`\s+/);
+				if (columnMatch) columns.add(columnMatch[1]);
+			}
+			tables.set(tableName, columns);
+			continue;
+		}
+		const indexMatch = trimmed.match(/^CREATE (?:UNIQUE )?INDEX(?: IF NOT EXISTS)?\s+`([^`]+)`\s+ON\s+`[^`]+`/i);
+		if (indexMatch) indexes.add(indexMatch[1]);
+	}
+	for (const { table, column } of topUps.columns) {
+		const columns = tables.get(table) ?? /* @__PURE__ */ new Set();
+		columns.add(column);
+		tables.set(table, columns);
+	}
+	for (const index of topUps.indexes) indexes.add(index);
+	return {
+		tables,
+		indexes
+	};
+}
+function readOverdeckSchemaExpectationsSync(topUps = EMPTY_TOP_UP_EXPECTATIONS) {
+	return parseOverdeckSchemaExpectations(readFileSync$1(OVERDECK_MIGRATION_PATH, "utf8"), topUps);
+}
+function quoteIdentifier(identifier) {
+	return `"${identifier.replaceAll("\"", "\"\"")}"`;
+}
+function auditOverdeckSchemaSync(db, topUps = EMPTY_TOP_UP_EXPECTATIONS) {
+	const expected = readOverdeckSchemaExpectationsSync(topUps);
+	const artifacts = db.prepare(`
+      SELECT type, name
+      FROM sqlite_master
+      WHERE type IN ('table', 'index')
+        AND name NOT LIKE 'sqlite_%'
+    `).all();
+	const actualTables = new Set(artifacts.filter((artifact) => artifact.type === "table").map((artifact) => artifact.name));
+	const actualIndexes = new Set(artifacts.filter((artifact) => artifact.type === "index").map((artifact) => artifact.name));
+	const missingTables = [...expected.tables.keys()].filter((table) => !actualTables.has(table)).sort();
+	const missingIndexes = [...expected.indexes].filter((index) => !actualIndexes.has(index)).sort();
+	const missingColumns = [];
+	for (const [table, expectedColumns] of expected.tables) {
+		if (!actualTables.has(table)) continue;
+		const actualColumns = new Set(db.prepare(`PRAGMA table_info(${quoteIdentifier(table)})`).all().map((column) => column.name));
+		for (const column of expectedColumns) if (!actualColumns.has(column)) missingColumns.push({
+			table,
+			column
+		});
+	}
+	missingColumns.sort((left, right) => left.table === right.table ? left.column.localeCompare(right.column) : left.table.localeCompare(right.table));
+	return {
+		missingTables,
+		missingIndexes,
+		missingColumns
+	};
+}
+//#endregion
 //#region ../../src/lib/overdeck/infra.ts
+/**
+* Runtime infrastructure for the canonical overdeck.db cache.
+* Schema top-ups tolerate idempotency errors, log unexpected failures without
+* blocking boot, and getOverdeckDatabaseSync follows them with a report-only
+* schema audit that warns about drift without mutating the database.
+*/
+const OVERDECK_SCHEMA_TOP_UP_EXPECTATIONS = {
+	columns: [
+		{
+			table: "discovered_sessions",
+			column: "harness"
+		},
+		{
+			table: "flywheel_substrate_bugs",
+			column: "affected_criteria"
+		},
+		{
+			table: "review_status",
+			column: "release_status"
+		},
+		{
+			table: "review_status",
+			column: "release_notes"
+		},
+		{
+			table: "review_status",
+			column: "inspect_owner_session"
+		},
+		{
+			table: "review_status",
+			column: "strike_ready_head"
+		},
+		{
+			table: "review_status",
+			column: "strike_ready_at"
+		},
+		{
+			table: "review_status",
+			column: "strike_landing_state"
+		},
+		{
+			table: "review_status",
+			column: "strike_recovery_count"
+		},
+		{
+			table: "review_status",
+			column: "strike_landing_attempts"
+		},
+		{
+			table: "agents",
+			column: "yielded_by_scheduler"
+		},
+		{
+			table: "agents",
+			column: "review_discovery_pending"
+		},
+		{
+			table: "agents",
+			column: "review_context_manifest_path"
+		},
+		{
+			table: "agents",
+			column: "review_discovery_ready_at"
+		},
+		{
+			table: "agents",
+			column: "review_convoy_forked_at"
+		},
+		{
+			table: "agents",
+			column: "review_fork_cache_checked"
+		},
+		{
+			table: "agents",
+			column: "review_forked_from_parent"
+		},
+		{
+			table: "agents",
+			column: "yielded_at"
+		},
+		{
+			table: "agents",
+			column: "last_yield_resume_at"
+		}
+	],
+	indexes: [
+		"cost_session_id_idx",
+		"idx_cost_agent_id",
+		"idx_cost_issue_upper",
+		"release_sets_project_idx",
+		"release_set_components_issue_component_idx",
+		"release_set_components_issue_order_idx"
+	]
+};
 const overdeckEvents = sqliteTable("events", {
 	sequence: integer("sequence").primaryKey({ autoIncrement: true }),
 	type: text("type").notNull(),
@@ -32282,56 +32570,50 @@ function runOverdeckMigrationSync(db) {
 	}
 }
 /**
+* Run one idempotent schema top-up without hiding unexpected SQLite failures.
+* Only duplicate DDL is silent; missing tables and other failures are logged so
+* schema drift remains observable without blocking later top-ups or startup.
+*/
+function runSchemaTopUp(db, statement) {
+	try {
+		db.exec(statement);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		if (/duplicate column name|already exists/i.test(message)) return;
+		console.error(`[schema] top-up failed: ${statement}\n${message}`);
+	}
+}
+/**
 * Idempotent schema top-ups for databases created before a field/index existed
 * in the init migration. The init migration only runs on a fresh database.
 * PAN-2220: the conversation ledger-cost query joins cost_events on session_id;
 * without this index SQLite builds an automatic index on every query (~76ms → 7ms).
 */
 function ensureRuntimeIndexesSync(db) {
-	try {
-		db.exec("ALTER TABLE `discovered_sessions` ADD COLUMN `harness` text");
-	} catch {}
-	try {
-		db.exec("UPDATE `discovered_sessions` SET `harness` = 'claude-code' WHERE `harness` IS NULL");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `review_status` ADD COLUMN `release_status` text");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `review_status` ADD COLUMN `release_notes` text");
-	} catch {}
+	runSchemaTopUp(db, "ALTER TABLE `discovered_sessions` ADD COLUMN `harness` text");
+	runSchemaTopUp(db, "UPDATE `discovered_sessions` SET `harness` = 'claude-code' WHERE `harness` IS NULL");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `release_status` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `release_notes` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `inspect_owner_session` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_ready_head` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_ready_at` integer");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_landing_state` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_recovery_count` integer DEFAULT 0");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_landing_attempts` text");
 	ensureReleaseSetTablesSync(db);
-	try {
-		db.exec("ALTER TABLE `flywheel_substrate_bugs` ADD COLUMN `affected_criteria` text");
-	} catch {}
-	db.exec("CREATE INDEX IF NOT EXISTS `cost_session_id_idx` ON `cost_events` (`session_id`)");
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `yielded_by_scheduler` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_discovery_pending` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_context_manifest_path` text");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_discovery_ready_at` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_convoy_forked_at` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_fork_cache_checked` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `review_forked_from_parent` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `yielded_at` integer");
-	} catch {}
-	try {
-		db.exec("ALTER TABLE `agents` ADD COLUMN `last_yield_resume_at` integer");
-	} catch {}
+	runSchemaTopUp(db, "ALTER TABLE `flywheel_substrate_bugs` ADD COLUMN `affected_criteria` text");
+	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `cost_session_id_idx` ON `cost_events` (`session_id`)");
+	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `idx_cost_agent_id` ON `cost_events` (`agent_id`, `ts`)");
+	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `idx_cost_issue_upper` ON `cost_events` (UPPER(`issue_id`))");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `yielded_by_scheduler` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_discovery_pending` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_context_manifest_path` text");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_discovery_ready_at` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_convoy_forked_at` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_fork_cache_checked` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_forked_from_parent` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `yielded_at` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `last_yield_resume_at` integer");
 }
 /**
 * Idempotent schema top-up for release set tables (PAN-399). Existing overdeck.db
@@ -32373,6 +32655,17 @@ function ensureReleaseSetTablesSync(db) {
 	db.exec("CREATE UNIQUE INDEX IF NOT EXISTS `release_set_components_issue_component_idx` ON `release_set_components` (`issue_id`,`component_key`)");
 	db.exec("CREATE INDEX IF NOT EXISTS `release_set_components_issue_order_idx` ON `release_set_components` (`issue_id`,`release_order`,`component_key`)");
 }
+function warnSchemaDriftSync(db) {
+	try {
+		const report = auditOverdeckSchemaSync(db, OVERDECK_SCHEMA_TOP_UP_EXPECTATIONS);
+		for (const table of report.missingTables) console.warn(`[schema-audit] missing table: ${table}`);
+		for (const index of report.missingIndexes) console.warn(`[schema-audit] missing index: ${index}`);
+		for (const { table, column } of report.missingColumns) console.warn(`[schema-audit] missing column: ${table}.${column}`);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		console.warn(`[schema-audit] audit failed: ${message}`);
+	}
+}
 function getOverdeckDatabaseSync(dbPath = getOverdeckDatabasePath()) {
 	if (overdeckDbSync?.path === dbPath) return overdeckDbSync.db;
 	if (overdeckDbSync) {
@@ -32387,6 +32680,7 @@ function getOverdeckDatabaseSync(dbPath = getOverdeckDatabasePath()) {
 	db.pragma("synchronous = NORMAL");
 	runOverdeckMigrationSync(db);
 	ensureRuntimeIndexesSync(db);
+	warnSchemaDriftSync(db);
 	overdeckDbSync = {
 		path: dbPath,
 		db