@overdeck/desktop 0.45.23 → 0.45.24

package/drizzle/overdeck/0000_overdeck_init.sql

@@ -349,6 +349,8 @@ CREATE TABLE `review_status` (
 	`strike_ready_at` integer,
 	`strike_landing_state` text,
 	`strike_recovery_count` integer DEFAULT 0,
+	`strike_transport_retry_count` integer,
+	`strike_next_attempt_at` integer,
 	`strike_landing_attempts` text
 );
 --> statement-breakpoint

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/desktop",
-  "version": "0.45.23",
+  "version": "0.45.24",
   "description": "Overdeck Command Deck — AI agent monitoring desktop app",
   "publishConfig": {
     "access": "public"

package/server/{acceptance-criteria-DOA0KgXx.js → acceptance-criteria-DDCnXF58.js}

@@ -1,4 +1,4 @@
-import { m as readWorkspacePlanSync, o as init_io, v as init_types, y as subItemsOf } from "./io-B3_AHDfr.js";
+import { m as readWorkspacePlanSync, o as init_io, v as init_types, y as subItemsOf } from "./io-C9kF1wtJ.js";
 import "effect";
 //#region ../../lib/xbrief/acceptance-criteria.ts
 init_io();
@@ -59,4 +59,4 @@ function extractACFromDocument(doc) {
 //#endregion
 export { getXBriefACStatusSync as n, extractACFromDocument as t };
 
-//# sourceMappingURL=acceptance-criteria-DOA0KgXx.js.map
+//# sourceMappingURL=acceptance-criteria-DDCnXF58.js.map

package/server/{advancing-selfheal-BBu6DSNm.js → advancing-selfheal-BVwW4qRn.js}

@@ -1,8 +1,8 @@
-import { D as killSession, M as listSessionNames, w as init_tmux } from "./tmux-ftABRAmc.js";
-import { c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status } from "./review-status-A7quS5KJ.js";
-import { Wn as getAgentStateSync, Zn as markAgentStoppedState, b as init_agents, ir as saveAgentStateSync } from "./queries-6d7Cdtm7.js";
-import { c as logDeaconEventSync, o as init_persistent_logger } from "./session-history-CVZDpS3c.js";
-import { a as selectMergedAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-N3BTkmX_.js";
+import { D as killSession, M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status } from "./review-status-kZj_KyCk.js";
+import { Yn as getAgentStateSync, b as init_agents, lr as saveAgentStateSync, nr as markAgentStoppedState } from "./queries-CjNIf-Ub.js";
+import { c as logDeaconEventSync, o as init_persistent_logger } from "./session-history-BT3IvqhC.js";
+import { a as selectMergedAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-BtHPo6Xc.js";
 import { Effect } from "effect";
 //#region ../../lib/cloister/advancing-selfheal.ts
 init_agents();
@@ -135,4 +135,4 @@ async function runBootAdvancingSelfHeal(deps = defaultBootAdvancingSelfHealDeps)
 //#endregion
 export { checkMergedAdvancingSessions, markAdvancingSessionStopped, reconcileInFlightJournals, runBootAdvancingSelfHeal };
 
-//# sourceMappingURL=advancing-selfheal-BBu6DSNm.js.map
+//# sourceMappingURL=advancing-selfheal-BVwW4qRn.js.map

package/server/{agent-gc-BV1q_2EV.js → agent-gc-CHcnvonI.js}

@@ -1,6 +1,6 @@
-import { Mt as readIssueRecordForWorkspaceSync, Ot as init_record } from "./config-yaml-DvyMuOle.js";
-import { c as listAllAgentsSync, l as removeAgentSync, o as init_agents } from "./agents-B4Bjbkfv.js";
-import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-tnxxqROg.js";
+import { Mt as readIssueRecordForWorkspaceSync, Ot as init_record } from "./config-yaml-DySPNmKN.js";
+import { c as listAllAgentsSync, l as removeAgentSync, o as init_agents } from "./agents-EbI0zCJl.js";
+import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
 import { n as mapGitHubStateToCanonical, t as init_state_mapping } from "./state-mapping-BL_-3Yt8.js";
 import { readdir, readlink } from "fs/promises";
 import { execFile } from "child_process";
@@ -112,4 +112,4 @@ function pruneTerminalStoppedAgents() {
 //#endregion
 export { pidsWithCwdUnder as a, sweepAutoCloseOutCache as i, pruneTerminalStoppedAgents as n, getAutoCloseOutCanonicalState as r, pruneStoppedAgentsForIssue as t };
 
-//# sourceMappingURL=agent-gc-BV1q_2EV.js.map
+//# sourceMappingURL=agent-gc-CHcnvonI.js.map

package/server/agent-state-Bc3tzUC8.js

@@ -0,0 +1,3 @@
+import { Bn as clearAgentPausedSync, Hn as clearAgentTroubledSync, Xn as init_agent_state, Yn as getAgentStateSync, dr as setAgentPausedSync } from "./queries-CjNIf-Ub.js";
+init_agent_state();
+export { clearAgentPausedSync, clearAgentTroubledSync, getAgentStateSync, setAgentPausedSync };

package/server/{agent-state-service-HoK8U4jW.js → agent-state-service-BsgWxZuB.js}

@@ -1,6 +1,6 @@
-import { a as init_event_store, i as initEventStore } from "./event-store-tdiY5eDZ.js";
-import { d as applyEvent, t as init_src, u as INITIAL_READ_MODEL_STATE } from "./src-U7_kTPEE.js";
-import { f as markAgentStateServiceInProcess, l as getRuntimeSnapshot$1, p as setAgentRuntimeMirror, r as init_session_history, t as appendSessionIdToHistory, u as init_agent_runtime_mirror } from "./session-history-CVZDpS3c.js";
+import { a as init_event_store, i as initEventStore } from "./event-store-CQL6NeqB.js";
+import { m as applyEvent, p as INITIAL_READ_MODEL_STATE, t as init_src } from "./src-DtcUOZCq.js";
+import { f as markAgentStateServiceInProcess, l as getRuntimeSnapshot$1, p as setAgentRuntimeMirror, r as init_session_history, t as appendSessionIdToHistory, u as init_agent_runtime_mirror } from "./session-history-BT3IvqhC.js";
 import { Context, Effect, Layer, SubscriptionRef } from "effect";
 //#region services/agent-state-service.ts
 /**
@@ -58,7 +58,7 @@ const AgentStateServiceLive = Layer.effect(AgentStateService, Effect.gen(functio
 	const store = yield* Effect.promise(() => initEventStore());
 	const ref = yield* SubscriptionRef.make({});
 	const seedFromSources = Effect.gen(function* () {
-		const { reconstructCacheAuto } = yield* Effect.promise(() => import("./reconstruct-cache-uWbZfjms.js"));
+		const { reconstructCacheAuto } = yield* Effect.promise(() => import("./reconstruct-cache-C3Ui7ojV.js"));
 		const seeded = (yield* Effect.promise(() => reconstructCacheAuto())).agentRuntimeById;
 		if (Object.keys(seeded).length > 0) {
 			yield* SubscriptionRef.update(ref, (current) => mergeRuntimeBySequence(current, seeded));
@@ -107,4 +107,4 @@ function applyEventToRef(ref, ev) {
 //#endregion
 export { AgentStateServiceLive as n, getRuntimeSnapshot as r, AgentStateService as t };
 
-//# sourceMappingURL=agent-state-service-HoK8U4jW.js.map
+//# sourceMappingURL=agent-state-service-BsgWxZuB.js.map

package/server/{agent-state-service-CnzFKSAQ.js → agent-state-service-D5UGKIJL.js}

@@ -1,2 +1,2 @@
-import { n as AgentStateServiceLive, r as getRuntimeSnapshot, t as AgentStateService } from "./agent-state-service-HoK8U4jW.js";
+import { n as AgentStateServiceLive, r as getRuntimeSnapshot, t as AgentStateService } from "./agent-state-service-BsgWxZuB.js";
 export { AgentStateService, AgentStateServiceLive, getRuntimeSnapshot };

package/server/{agents-B4Bjbkfv.js → agents-EbI0zCJl.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DvyMuOle.js";
-import { _ as integer, a as EventBus, b as and, c as Records, d as getOverdeckDatabaseSync, f as init_infra, h as text, l as Tmux, m as sqliteTable, p as init_sqlite_core, r as Db, v as init_drizzle_orm, x as eq } from "./infra-CzaSOgul.js";
-import { n as init_issues, t as IssueId } from "./issues-B6ToV6x1.js";
+import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
+import { _ as integer, a as EventBus, b as and, c as Records, d as getOverdeckDatabaseSync, f as init_infra, h as text, l as Tmux, m as sqliteTable, p as init_sqlite_core, r as Db, v as init_drizzle_orm, x as eq } from "./infra-BEqFxlJc.js";
+import { n as init_issues, t as IssueId } from "./issues-BMmP_77e.js";
 import { join } from "node:path";
 import { Context, Effect, Layer, Schema } from "effect";
 import { readFileSync, readdirSync, rmSync, statSync } from "node:fs";
@@ -972,4 +972,4 @@ var init_agents = __esmMin((() => {
 //#endregion
 export { countAgentsByStatusRole as a, listAllAgentsSync as c, isTerminalIssueStage as d, countAgentsByStatus as i, removeAgentSync as l, AgentsResolverLive as n, init_agents as o, backfillAgentsSync as r, listAgentIdsByPrefixSync as s, AgentsResolver as t, getIssueStageSync as u };
 
-//# sourceMappingURL=agents-B4Bjbkfv.js.map
+//# sourceMappingURL=agents-EbI0zCJl.js.map

package/server/agents-wi9NWzs2.js

@@ -0,0 +1,3 @@
+import { $ as appendActivity, $n as isRole, $t as OHMYPI_AGENT_READY_TIMEOUT_SECONDS, An as buildDefaultResumeContinueMessage, Ar as saveAgentRuntimeState, At as deliverAgentPermissionDecision, B as detectCrashedAgents, Bn as clearAgentPausedSync, Bt as assertWorkspaceStackHealthyForSpawn, C as replayCrashedStandingAgent, Cn as getProviderEnvForModel, Cr as normalizeAgentId, Dr as getAgentRuntimeState, Er as waitForReadySignal, Fn as writeChannelsBridgeMcpConfig, G as resumeAgent, Gn as getAgentDir, Gt as transitionIssueToInProgress, H as restartAgent, Hn as clearAgentTroubledSync, In as GOVERNOR_SLOT_PAUSE_REASON_PREFIX, Jn as getAgentStateFilePath, Kt as transitionIssueToInReview, Ln as SESSION_EXITED_BEFORE_KICKOFF, Mn as decideChannelsForWorkAgent, Mt as deliverResumeMessageWithTranscriptConfirmation, Nn as decideSupervisorForWorkAgent, Nt as setAgentDeliveryMethod, Or as getAgentRuntimeStateSync, Pn as dismissDevChannelsDialog, Qn as isAgentTroubled, Rn as __testInternals, S as contextWindowForModel, Sn as determineModel, Sr as isQualifiedAgentId, T as shouldReplayCompactAtTierRunBoundary, Tn as getProviderTmuxFlags, Tr as waitForAgentIdle, U as buildCompactRecoverySeed, Un as clearYieldForResumeSync, V as recoverAgent, Vn as clearAgentTroubled, Vt as buildAgentLaunchConfig, Wt as retrieveSpawnTimeMemoryContext, X as messageAgent, Yn as getAgentStateSync, Zn as isAgentPaused, a as listRunningAgentsSync, an as getProviderAuthMode, ar as recordAgentFailureSync, at as saveSessionId, b as init_agents, bn as buildCavemanExports, cn as injectPiConversationMemory, cr as saveAgentState, dn as waitForPromptReady, dr as setAgentPausedSync, en as describeOhmypiSpawnFailure, et as getActivity, fr as setAgentYieldedSync, ft as stopAgent, i as listRunningAgents, ir as recordAgentFailure, jn as buildResumeContinueMessage, jt as deliverInitialPromptWithRetry, kt as deliverAgentMessage, ln as roleAgentDefinitionPath, lr as saveAgentStateSync, lt as spawnAgent, mr as writeAgentStateJsonSync, nn as getAgentRuntimeBaseCommand, nr as markAgentStoppedState, nt as getLatestSessionIdSync, o as warnOnBareNumericIssueIds, on as getRoleRuntimeBaseCommand, pr as wipeAgentStateDirs, pt as stopAgentSync, qn as getAgentState, r as listAgentStates, rr as markAgentTroubled, rt as getSessionId, sr as resetAgentFailureCount, t as dropLegacyAgentStatesMissingRoleAsync, tr as markAgentRunningState, tt as getLatestSessionId, ur as setAgentPaused, ut as spawnRun, w as replayStandingAgent, wn as getProviderExportsForModel, wr as resolveAgentTargetSync, x as compactAtTierRunBoundary, xn as buildSpawnEnvForModel, xr as clearReadySignal, z as autoRecoverAgents, zn as clearAgentPaused } from "./queries-CjNIf-Ub.js";
+init_agents();
+export { GOVERNOR_SLOT_PAUSE_REASON_PREFIX, OHMYPI_AGENT_READY_TIMEOUT_SECONDS, SESSION_EXITED_BEFORE_KICKOFF, __testInternals, appendActivity, assertWorkspaceStackHealthyForSpawn, autoRecoverAgents, buildAgentLaunchConfig, buildCavemanExports, buildCompactRecoverySeed, buildDefaultResumeContinueMessage, buildResumeContinueMessage, buildSpawnEnvForModel, clearAgentPaused, clearAgentPausedSync, clearAgentTroubled, clearAgentTroubledSync, clearReadySignal, clearYieldForResumeSync, compactAtTierRunBoundary, contextWindowForModel, decideChannelsForWorkAgent, decideSupervisorForWorkAgent, deliverAgentMessage, deliverAgentPermissionDecision, deliverInitialPromptWithRetry, deliverResumeMessageWithTranscriptConfirmation, describeOhmypiSpawnFailure, detectCrashedAgents, determineModel, dismissDevChannelsDialog, dropLegacyAgentStatesMissingRoleAsync, getActivity, getAgentDir, getAgentRuntimeBaseCommand, getAgentRuntimeState, getAgentRuntimeStateSync, getAgentState, getAgentStateFilePath, getAgentStateSync, getLatestSessionId, getLatestSessionIdSync, getProviderAuthMode, getProviderEnvForModel, getProviderExportsForModel, getProviderTmuxFlags, getRoleRuntimeBaseCommand, getSessionId, injectPiConversationMemory, isAgentPaused, isAgentTroubled, isQualifiedAgentId, isRole, listAgentStates, listRunningAgents, listRunningAgentsSync, markAgentRunningState, markAgentStoppedState, markAgentTroubled, messageAgent, normalizeAgentId, recordAgentFailure, recordAgentFailureSync, recoverAgent, replayCrashedStandingAgent, replayStandingAgent, resetAgentFailureCount, resolveAgentTargetSync, restartAgent, resumeAgent, retrieveSpawnTimeMemoryContext, roleAgentDefinitionPath, saveAgentRuntimeState, saveAgentState, saveAgentStateSync, saveSessionId, setAgentDeliveryMethod, setAgentPaused, setAgentPausedSync, setAgentYieldedSync, shouldReplayCompactAtTierRunBoundary, spawnAgent, spawnRun, stopAgent, stopAgentSync, transitionIssueToInProgress, transitionIssueToInReview, waitForAgentIdle, waitForPromptReady, waitForReadySignal, warnOnBareNumericIssueIds, wipeAgentStateDirs, writeAgentStateJsonSync, writeChannelsBridgeMcpConfig };

package/server/{archive-planning-zkJb3BeM.js → archive-planning-BZDgzoEj.js}

@@ -1,3 +1,3 @@
-import { i as findWorkspacePath, o as init_archive_planning } from "./archive-planning-DYrYojxl.js";
+import { i as findWorkspacePath, o as init_archive_planning } from "./archive-planning-Du25Jtst.js";
 init_archive_planning();
 export { findWorkspacePath };

package/server/{archive-planning-DYrYojxl.js → archive-planning-Du25Jtst.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Dr as PROJECT_PRDS_COMPLETED_SUBDIR, Er as PROJECT_PRDS_ACTIVE_SUBDIR, Or as PROJECT_PRDS_PLANNED_SUBDIR, Tr as PROJECT_DOCS_SUBDIR, Vr as init_paths, gr as ARCHIVES_DIR, kr as PROJECT_PRDS_SUBDIR } from "./config-yaml-DvyMuOle.js";
+import { Dr as PROJECT_PRDS_COMPLETED_SUBDIR, Er as PROJECT_PRDS_ACTIVE_SUBDIR, Or as PROJECT_PRDS_PLANNED_SUBDIR, Tr as PROJECT_DOCS_SUBDIR, Vr as init_paths, gr as ARCHIVES_DIR, kr as PROJECT_PRDS_SUBDIR } from "./config-yaml-DySPNmKN.js";
 import { a as PAN_DIRNAME, c as PAN_SESSIONS_FILENAME, i as PAN_CONTINUE_FILENAME, n as PAN_CONTEXT_FILENAME, s as PAN_FEEDBACK_DIRNAME, u as PAN_SPEC_FILENAME } from "./types-hraoaQIp.js";
-import { a as getDraftPath, o as getIssueDraftPath, t as init_pan_dir } from "./pan-dir-DeVUgwA7.js";
-import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-BBNjPcqU.js";
+import { a as getDraftPath, o as getIssueDraftPath, t as init_pan_dir } from "./pan-dir-B0c3w0Ya.js";
+import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-5M0lupud.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync } from "fs";
 import { dirname, join } from "path";
@@ -290,4 +290,4 @@ var init_archive_planning = __esmMin((() => {
 //#endregion
 export { inferBranchFromWorkspace as a, findPrdAnywhereSync as c, findWorkspacePath as i, init_prd_locations as l, archiveWorkspaceArtifacts as n, init_archive_planning as o, findAllWorkspacePaths as r, movePrd as s, archivePlanning as t };
 
-//# sourceMappingURL=archive-planning-DYrYojxl.js.map
+//# sourceMappingURL=archive-planning-Du25Jtst.js.map

package/server/{artifact-index-jobs-C-xy7Z5v.js → artifact-index-jobs-CbEDfCDu.js}

@@ -1,4 +1,4 @@
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DvyMuOle.js";
+import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
 import { n as openDatabase, t as init_driver } from "./driver-CKVGi51s.js";
 import { dirname, join } from "node:path";
 import { mkdirSync } from "node:fs";
@@ -208,4 +208,4 @@ function unshareArtifactBySlugJob(slug) {
 //#endregion
 export { getArtifactBySlugJob, listArtifactsForWorkspaceOrIssueJob, unshareArtifactBySlugJob };
 
-//# sourceMappingURL=artifact-index-jobs-C-xy7Z5v.js.map
+//# sourceMappingURL=artifact-index-jobs-CbEDfCDu.js.map

package/server/assemble-J2ZZ2C15.js

@@ -0,0 +1,339 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { Br as getOverdeckHome, Vr as init_paths, jr as SYNC_SOURCES } from "./config-yaml-DySPNmKN.js";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
+import { join } from "path";
+//#region ../../lib/context-layers/layers.ts
+/**
+* Context layer model (PAN-1201).
+*
+* Three layers of context compose at sync time:
+*
+*   global    — ~/.overdeck/context/global.md  (+ global/{skills,agents}/)
+*               Applies to every harness invocation, everywhere.
+*   project   — <projectRoot>/.overdeck/context/project.md
+*               Applies when CWD is under a registered project. Committed.
+*   workspace — <workspace>/.overdeck/context/workspace.md
+*               Auto-assembled by Overdeck at spawn time. Gitignored.
+*
+* The global layer lives under ~/.overdeck (per-machine). Project and
+* Project and workspace context live outside the permanent state plane under
+* `.overdeck/`. Reads retain a `.pan/context/` compatibility fallback.
+*/
+/** `~/.overdeck/context` — the global layer directory. */
+function globalContextDir() {
+	return join(getOverdeckHome(), "context");
+}
+/** `~/.overdeck/context/global.md` — the global layer's canonical source. */
+function globalContextFile() {
+	return join(globalContextDir(), "global.md");
+}
+/** `<projectRoot>/.overdeck/context` — a registered project's layer directory. */
+function projectContextDir(projectRoot) {
+	return join(projectRoot, ".overdeck", "context");
+}
+/** `<projectRoot>/.overdeck/context/project.md` — a project's canonical source. */
+function projectContextFile(projectRoot) {
+	return join(projectContextDir(projectRoot), "project.md");
+}
+function legacyProjectContextFile(projectRoot) {
+	return join(projectRoot, ".pan", "context", "project.md");
+}
+function resolveProjectContextFile(projectRoot) {
+	const canonical = projectContextFile(projectRoot);
+	return existsSync(canonical) ? canonical : legacyProjectContextFile(projectRoot);
+}
+/** `<workspace>/.overdeck/context` — a workspace's layer directory. */
+function workspaceContextDir(workspacePath) {
+	return join(workspacePath, ".overdeck", "context");
+}
+/** `<workspace>/.pan/context/workspace.md` — the auto-assembled bundle. */
+function workspaceContextFile(workspacePath) {
+	return join(workspaceContextDir(workspacePath), "workspace.md");
+}
+function legacyWorkspaceContextFile(workspacePath) {
+	return join(workspacePath, ".pan", "context", "workspace.md");
+}
+function resolveWorkspaceContextFile(workspacePath) {
+	const canonical = workspaceContextFile(workspacePath);
+	return existsSync(canonical) ? canonical : legacyWorkspaceContextFile(workspacePath);
+}
+/** `~/.overdeck/context/pi-global.md` — the rendered global layer for Pi. */
+function piGlobalContextFile() {
+	return join(getOverdeckHome(), "context", "pi-global.md");
+}
+/** `~/.overdeck/context/codex-global.md` — the rendered global layer for Codex. */
+function codexGlobalContextFile() {
+	return join(getOverdeckHome(), "context", "codex-global.md");
+}
+/**
+* Ensure a project's layer dir exists with a stub `project.md`. Idempotent.
+* Returns true when a file was created. Called by `pan projects add`.
+*/
+function ensureProjectLayer(projectRoot) {
+	const file = projectContextFile(projectRoot);
+	if (existsSync(file)) return false;
+	mkdirSync(projectContextDir(projectRoot), { recursive: true });
+	writeFileSync(file, PROJECT_STARTER, "utf-8");
+	return true;
+}
+/** Read a layer's canonical markdown, or '' when the file does not exist. */
+function readLayerContent(file) {
+	return existsSync(file) ? readFileSync(file, "utf-8") : "";
+}
+var PROJECT_STARTER;
+var init_layers = __esmMin((() => {
+	init_paths();
+	PROJECT_STARTER = `# Project Context
+
+Context for this project specifically. \`pan sync\` renders it into the
+project's CLAUDE.md (and equivalents) when CWD is under this project.
+
+This file is committed to the repo; \`workspace.md\` is not.
+`;
+}));
+//#endregion
+//#region ../../lib/context-layers/harness.ts
+/**
+* Render a canonical layer body for a single harness.
+*
+* Strips every `{{#harness:*}}` / `{{/harness:*}}` marker and drops the spans
+* that are not covered by the target harness. Runs of 3+ blank lines left by
+* removed spans collapse to a single blank line so output stays tidy.
+*/
+function renderForHarness(content, harness) {
+	const target = HARNESS_MARKERS[harness];
+	const openCounts = /* @__PURE__ */ new Map();
+	let out = "";
+	let lastIndex = 0;
+	const emit = (text) => {
+		let covered = false;
+		let anyOpen = false;
+		for (const [name, count] of openCounts) if (count > 0) {
+			anyOpen = true;
+			if (name === target) covered = true;
+		}
+		if (!anyOpen || covered) out += text;
+	};
+	MARKER_RE.lastIndex = 0;
+	let m;
+	while ((m = MARKER_RE.exec(content)) !== null) {
+		emit(content.slice(lastIndex, m.index));
+		const [, kind, name] = m;
+		const delta = kind === "#" ? 1 : -1;
+		openCounts.set(name, (openCounts.get(name) ?? 0) + delta);
+		lastIndex = m.index + m[0].length;
+	}
+	emit(content.slice(lastIndex));
+	return out.replace(/\n{3,}/g, "\n\n");
+}
+/**
+* Lint a context-layer template for malformed harness blocks.
+*
+* Errors: an unclosed `{{#harness:x}}` or a stray `{{/harness:x}}` with no
+* matching open. Warnings: a marker naming a harness Overdeck has no
+* adapter for (allowed for forward compatibility, surfaced so typos —
+* `{{#harness:clade}}` — do not pass silently).
+*/
+function validateTemplate(content) {
+	const issues = [];
+	const openCounts = /* @__PURE__ */ new Map();
+	const seen = /* @__PURE__ */ new Set();
+	MARKER_RE.lastIndex = 0;
+	let m;
+	while ((m = MARKER_RE.exec(content)) !== null) {
+		const [, kind, name] = m;
+		seen.add(name);
+		if (kind === "#") openCounts.set(name, (openCounts.get(name) ?? 0) + 1);
+		else {
+			const next = (openCounts.get(name) ?? 0) - 1;
+			openCounts.set(name, next);
+			if (next < 0) issues.push({
+				severity: "error",
+				message: `stray closing marker {{/harness:${name}}} with no matching {{#harness:${name}}}`
+			});
+		}
+	}
+	for (const [name, count] of openCounts) if (count > 0) issues.push({
+		severity: "error",
+		message: `unclosed block: {{#harness:${name}}} opened ${count} time(s) without a matching {{/harness:${name}}}`
+	});
+	for (const name of seen) if (!KNOWN_HARNESS_MARKERS.has(name)) issues.push({
+		severity: "warning",
+		message: `unknown harness "${name}" — Overdeck ships adapters for: ${[...KNOWN_HARNESS_MARKERS].join(", ")}`
+	});
+	return {
+		ok: !issues.some((i) => i.severity === "error"),
+		issues
+	};
+}
+var HARNESS_MARKERS, KNOWN_HARNESS_MARKERS, MARKER_RE;
+var init_harness = __esmMin((() => {
+	HARNESS_MARKERS = {
+		"claude-code": "claude",
+		ohmypi: "ohmypi",
+		codex: "codex",
+		acp: "acp"
+	};
+	KNOWN_HARNESS_MARKERS = new Set([
+		"claude",
+		"pi",
+		"ohmypi",
+		"codex",
+		"acp"
+	]);
+	MARKER_RE = /\{\{([#/])harness:([a-zA-Z0-9_-]+)\}\}/g;
+}));
+//#endregion
+//#region ../../lib/context-layers/rules.ts
+/**
+* Bundled engineering rules (PAN-1201).
+*
+* Overdeck ships a small set of engineering rules under sync-sources/rules/.
+* Each rule carries a `scope:` frontmatter key:
+*
+*   universal — distributed everywhere (relevant to anyone running agents)
+*   dev       — distributed only on a overdeck checkout (rules about
+*               developing Overdeck itself)
+*
+* `pan sync` folds the applicable rules into the rendered global CLAUDE.md.
+* Their `paths:` frontmatter (Claude Code path-scoping) is dropped on fold —
+* a folded rule is always-on.
+*/
+/**
+* Parse a rule file into `{ scope, body }`. Rules with no frontmatter, or
+* frontmatter without a recognised `scope:`, default to `universal`.
+*/
+function parseRule(name, raw) {
+	const m = FRONTMATTER_RE.exec(raw);
+	let scope = "universal";
+	let body = raw;
+	if (m) {
+		body = raw.slice(m[0].length);
+		const value = m[1].split(/\r?\n/).find((l) => /^\s*scope\s*:/.test(l))?.split(":")[1]?.trim().replace(/['"]/g, "");
+		if (value === "dev" || value === "universal") scope = value;
+	}
+	return {
+		name,
+		scope,
+		body: body.trim()
+	};
+}
+/** Read every bundled rule from sync-sources/rules/, sorted by name. */
+function readBundledRules() {
+	const dir = SYNC_SOURCES.rules;
+	if (!existsSync(dir)) return [];
+	return readdirSync(dir).filter((f) => f.endsWith(".md")).sort().map((f) => parseRule(f.replace(/\.md$/, ""), readFileSync(join(dir, f), "utf-8")));
+}
+/**
+* Render the applicable bundled rules into one CLAUDE.md section.
+*
+* `includeDev` admits `scope: dev` rules — set it from `isDevMode()` so they
+* only fold in on a overdeck checkout. Each rule body is rendered for
+* the target harness so any `{{#harness:*}}` blocks resolve. Returns '' when
+* no rules apply.
+*/
+function renderBundledRules(harness, includeDev) {
+	const sections = readBundledRules().filter((r) => includeDev || r.scope === "universal").map((r) => renderForHarness(r.body, harness).trim()).filter((s) => s.length > 0);
+	if (sections.length === 0) return "";
+	return `## Overdeck Engineering Rules\n\n${sections.join("\n\n")}`;
+}
+var FRONTMATTER_RE;
+var init_rules = __esmMin((() => {
+	init_paths();
+	init_harness();
+	FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+}));
+//#endregion
+//#region ../../lib/context-layers/render.ts
+/** True when `existing` already contains a Overdeck-managed region. */
+function hasManagedRegion(existing) {
+	const beginIdx = existing.indexOf(REGION_BEGIN);
+	const endIdx = existing.indexOf(REGION_END);
+	return beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx;
+}
+/**
+* Return `existing` with the Overdeck-managed region removed — i.e. only the
+* hand-authored content the user owns, trimmed. When there is no region, the
+* whole (trimmed) file is the user's. Used to decide whether a target file has
+* pre-existing content worth preserving and backing up before first injection.
+*/
+function userContentOutsideRegion(existing) {
+	const beginIdx = existing.indexOf(REGION_BEGIN);
+	const endIdx = existing.lastIndexOf(REGION_END);
+	if (beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx) return (existing.slice(0, beginIdx) + existing.slice(endIdx + 29)).trim();
+	return existing.trim();
+}
+/**
+* Render the global layer for one harness: `global.md` rendered, with the
+* applicable bundled engineering rules folded in below it.
+*
+* The result is the *managed content* — caller wraps it via
+* {@link applyManagedRegion} when writing the harness's CLAUDE.md.
+*/
+function renderGlobalLayer(harness, includeDevRules) {
+	return [renderForHarness(readLayerContent(globalContextFile()), harness).trim(), renderBundledRules(harness, includeDevRules)].filter((s) => s.length > 0).join("\n\n---\n\n");
+}
+/**
+* Render a project layer for one harness. Returns '' when the project has no
+* `project.md` — sync then leaves that project's CLAUDE.md alone.
+*/
+function renderProjectLayer(projectRoot, harness) {
+	const raw = readLayerContent(resolveProjectContextFile(projectRoot));
+	if (raw.trim().length === 0) return "";
+	return renderForHarness(raw, harness).trim();
+}
+var REGION_BEGIN, REGION_END;
+var init_render = __esmMin((() => {
+	init_harness();
+	init_rules();
+	init_layers();
+	REGION_BEGIN = "<!-- BEGIN OVERDECK CONTEXT — managed by `pan sync`; edit the layer source, not this region -->";
+	REGION_END = "<!-- END OVERDECK CONTEXT -->";
+}));
+//#endregion
+//#region ../../lib/context-layers/assemble.ts
+function removeMarkedProjectLayer(content) {
+	const start = content.indexOf(PROJECT_LAYER_START);
+	if (start < 0) return null;
+	const markerEnd = content.indexOf("-->", start + 33);
+	if (markerEnd < 0) return null;
+	const marker = content.slice(start, markerEnd + 3);
+	const lengthMatch = /\schars=(\d+)\s-->$/.exec(marker);
+	if (!lengthMatch) return null;
+	const projectEnd = markerEnd + 4 + Number(lengthMatch[1]);
+	if (content[markerEnd + 3] !== "\n") return null;
+	if (content.slice(projectEnd, projectEnd + 1 + 35) !== `\n<!-- overdeck:project-layer:end -->`) return null;
+	const end = projectEnd + 1;
+	let before = content.slice(0, start);
+	let after = content.slice(end + 35);
+	if (before.endsWith(SECTION_SEPARATOR) && after.startsWith(SECTION_SEPARATOR)) before = before.slice(0, -7);
+	else if (before.endsWith(SECTION_SEPARATOR)) before = before.slice(0, -7);
+	else if (after.startsWith(SECTION_SEPARATOR)) after = after.slice(7);
+	return `${before}${after}`.trim();
+}
+/**
+* Remove the project layer embedded in a workspace bundle.
+*
+* New bundles carry reserved structural markers, so project Markdown can contain
+* horizontal rules without becoming ambiguous. Legacy bundles predate those
+* markers; their only safely identifiable workspace-owned section is the
+* generated header before the first top-level separator. Keeping that header is
+* preferable to forwarding an unknown amount of stale, harness-specific text.
+*/
+function workspaceContextWithoutProjectLayer(content) {
+	const marked = removeMarkedProjectLayer(content);
+	if (marked !== null) return marked;
+	const firstSeparator = content.indexOf(SECTION_SEPARATOR);
+	return (firstSeparator < 0 ? content : content.slice(0, firstSeparator)).trim();
+}
+var SECTION_SEPARATOR, PROJECT_LAYER_START, PROJECT_LAYER_END;
+var init_assemble = __esmMin((() => {
+	init_render();
+	SECTION_SEPARATOR = "\n\n---\n\n";
+	PROJECT_LAYER_START = "<!-- overdeck:project-layer:start";
+	PROJECT_LAYER_END = "<!-- overdeck:project-layer:end -->";
+}));
+//#endregion
+export { projectContextDir as A, ensureProjectLayer as C, legacyProjectContextFile as D, init_layers as E, workspaceContextDir as F, workspaceContextFile as I, readLayerContent as M, resolveProjectContextFile as N, legacyWorkspaceContextFile as O, resolveWorkspaceContextFile as P, codexGlobalContextFile as S, globalContextFile as T, KNOWN_HARNESS_MARKERS as _, REGION_BEGIN as a, validateTemplate as b, init_render as c, userContentOutsideRegion as d, init_rules as f, HARNESS_MARKERS as g, renderBundledRules as h, workspaceContextWithoutProjectLayer as i, projectContextFile as j, piGlobalContextFile as k, renderGlobalLayer as l, readBundledRules as m, PROJECT_LAYER_START as n, REGION_END as o, parseRule as p, init_assemble as r, hasManagedRegion as s, PROJECT_LAYER_END as t, renderProjectLayer as u, init_harness as v, globalContextDir as w, PROJECT_STARTER as x, renderForHarness as y };
+
+//# sourceMappingURL=assemble-J2ZZ2C15.js.map

package/server/{backlog-auto-trigger-GtG71X8H.js → backlog-auto-trigger-2R2jog7n.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-Cx3K0hHi.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-BGY8gjg-.js";
+import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-Nw29vaFb.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-CzkcK6P5.js";
 //#region ../../lib/backlog/backlog-auto-trigger.ts
 /**
 * PAN-2396: --no-resume is the operator's full-quiescence escape hatch —
@@ -37,4 +37,4 @@ __esmMin((() => {
 }))();
 export { triggerDebouncedIncrementalPass };
 
-//# sourceMappingURL=backlog-auto-trigger-GtG71X8H.js.map
+//# sourceMappingURL=backlog-auto-trigger-2R2jog7n.js.map

package/server/{behavior-B_-4EKF3.js → behavior-B3exJ42O.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { t as init_src } from "./src-U7_kTPEE.js";
+import { t as init_src } from "./src-DtcUOZCq.js";
 //#region ../../lib/runtimes/behavior.ts
 var init_behavior = __esmMin((() => {
 	init_src();
@@ -7,4 +7,4 @@ var init_behavior = __esmMin((() => {
 //#endregion
 export { init_behavior as t };
 
-//# sourceMappingURL=behavior-B_-4EKF3.js.map
+//# sourceMappingURL=behavior-B3exJ42O.js.map

package/server/{briefing-freshness-DWdW7vUm.js → briefing-freshness-D1wzUIWv.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DvyMuOle.js";
+import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
 import { dirname, join } from "path";
 import { randomUUID } from "crypto";
 import { mkdir, readFile, rename, stat, writeFile } from "fs/promises";
@@ -128,4 +128,4 @@ var init_briefing_freshness = __esmMin((() => {
 //#endregion
 export { resolveSessionContextBriefingPath as a, recordBriefingSessionStart as i, ensureSessionContextBriefingFile as n, init_briefing_freshness as r, appendFreshBriefingUpdate as t };
 
-//# sourceMappingURL=briefing-freshness-DWdW7vUm.js.map
+//# sourceMappingURL=briefing-freshness-D1wzUIWv.js.map

package/server/{build-info-DgTqZkL5.js → build-info-CZk_TITh.js}

@@ -1,3 +1,3 @@
-import { n as init_build_info, t as getBuildInfo } from "./build-info-BT096lEl.js";
+import { n as init_build_info, t as getBuildInfo } from "./build-info-Ie_D0_BT.js";
 init_build_info();
 export { getBuildInfo };

package/server/{build-info-BT096lEl.js → build-info-Ie_D0_BT.js}

@@ -2,12 +2,12 @@ import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
 //#region ../../lib/deploy/build-info.ts
 function getBuildInfo() {
 	return {
-		buildCommit: "3824685a47cd1a723b2a2ef7e57d46abf82957ae",
-		builtAt: "2026-07-20T03:34:02.499Z"
+		buildCommit: "470dfaba75ec7478787a15f9854f20df5c960c05",
+		builtAt: "2026-07-23T14:20:17.760Z"
 	};
 }
 var init_build_info = __esmMin((() => {}));
 //#endregion
 export { init_build_info as n, getBuildInfo as t };
 
-//# sourceMappingURL=build-info-BT096lEl.js.map
+//# sourceMappingURL=build-info-Ie_D0_BT.js.map

package/server/{checkpoint-manager-DDqcGyu8.js → checkpoint-manager-BI1Wxoku.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Kt as STATE_BRANCH_PATHS, Yt as init_state_plane, mr as init_errors, pr as VcsError, sr as InvalidAgentIdError, tr as CheckpointError } from "./config-yaml-DvyMuOle.js";
+import { Kt as STATE_BRANCH_PATHS, Yt as init_state_plane, mr as init_errors, pr as VcsError, sr as InvalidAgentIdError, tr as CheckpointError } from "./config-yaml-DySPNmKN.js";
 import { Effect, Layer } from "effect";
 import { join } from "path";
 import { tmpdir } from "os";
@@ -663,4 +663,4 @@ var init_checkpoint_manager = __esmMin((() => {
 //#endregion
 export { pruneStaleCheckpointRefs as _, diffAgainstMain as a, diffCheckpoints as c, diffPatchSinceCommit as d, findCommitAtTime as f, pruneCheckpointRefsForAgents as g, listCheckpoints as h, deleteLegacyCheckpointRefs as i, diffFilesAgainstHead as l, init_checkpoint_manager as m, checkpointStateExclusions as n, diffAgainstMainFiles as o, getCheckpointTimestamp as p, deleteCheckpoint as r, diffCheckpointFiles as s, captureCheckpoint as t, diffPatchFilesAgainstHead as u };
 
-//# sourceMappingURL=checkpoint-manager-DDqcGyu8.js.map
+//# sourceMappingURL=checkpoint-manager-BI1Wxoku.js.map

package/server/{checkpoint-manager-B7Bt29J0.js → checkpoint-manager-DwbQoqrC.js}

@@ -1,3 +1,3 @@
-import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-DDqcGyu8.js";
+import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-BI1Wxoku.js";
 init_checkpoint_manager();
 export { deleteLegacyCheckpointRefs, diffCheckpointFiles, getCheckpointTimestamp, listCheckpoints, pruneCheckpointRefsForAgents, pruneStaleCheckpointRefs };

package/server/checkpoint-worker.js

@@ -1,4 +1,4 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-C-AXLfYT.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CQB1h765.js";
 import { parentPort } from "node:worker_threads";
 //#region ../../lib/memory/checkpoint-worker.ts
 function runOperation(operation, payload) {

package/server/{checkpoints-CpgCjAlN.js → checkpoints-BJIs5QIA.js}

@@ -1,2 +1,2 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-C-AXLfYT.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CQB1h765.js";
 export { claimTranscriptRange, commitTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints, releaseTranscriptRange };

package/server/{checkpoints-C-AXLfYT.js → checkpoints-CQB1h765.js}

@@ -1,4 +1,4 @@
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-CzaSOgul.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
 import { randomUUID } from "node:crypto";
 //#region ../../lib/overdeck/transcript-checkpoint-sync.ts
 /**
@@ -195,4 +195,4 @@ function getTranscriptCheckpoint(sessionId) {
 //#endregion
 export { releaseTranscriptRange as a, listTranscriptCheckpoints as i, commitTranscriptRange as n, getTranscriptCheckpoint as r, claimTranscriptRange as t };
 
-//# sourceMappingURL=checkpoints-C-AXLfYT.js.map
+//# sourceMappingURL=checkpoints-CQB1h765.js.map

package/server/{claude-hooks-provision-C8wdRnN1.js → claude-hooks-provision-8Ngo8TpT.js}

@@ -1,3 +1,3 @@
-import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-but-_qGY.js";
+import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-D8GXF3_s.js";
 init_claude_hooks_provision();
 export { provisionClaudeHooks };