@overdeck/desktop 0.45.23 → 0.45.24

package/server/server.js

@@ -1,110 +1,110 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM, r as __exportAll, t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { A as canUseHarnessSync, Br as getOverdeckHome, Cr as LOGS_DIR, D as resolveTieredExecutionEnabled, E as resolveTieredExecutionBlock, Et as getIssueWorkspacePath, Fn as renameProject, Fr as getDocsDisableStatePath, Gr as sessionFilePath, H as init_providers, Hr as isDevMode, Ht as flushAutoCommits, I as UnknownModelError, Ir as getDocsIndexPath, J as defaultBackgroundAiFeatures, Jn as extractPrefixSync, Ln as resolveInfraRepo, Lr as getDocsTelemetryPath, M as init_harness_policy, Nr as encodeClaudeProjectDir, Nt as readIssueRecordSync, On as listProjects, Ot as init_record, Pn as registerProjectSync, Pr as getDocsBudgetStatePath, Q as computeModelOrigin, R as getBuiltInDefaultHarness, Rn as resolveProjectFromIssue, T as init_tier_table, Tn as init_projects, Un as setProjectAutoMergeDefaultSync, Ur as packageRoot, Ut as init_auto_commit, V as getProviderForModelSync, Vr as init_paths, Vt as flushAllPendingAutoCommits, Wn as setProjectSwarmPolicySync, X as DEFAULT_ROLES, Y as init_registry, Yn as init_issue_id, Z as DEFAULT_WORKHORSES, Zn as parseIssueIdSync, _ as getDefaultDocsConfig, at as getModelEffortLevelsSync, br as CLAUDE_DIR, cn as ProjectRenameError, ct as modelSupportsImagesSync, d as loadConfigNoMigration, er as require_dist$1, f as loadConfigSync, fn as findProjectByPathSync, fr as TrackerError, g as mergeConfigs, gn as getIssuePrefix, h as jsYaml, hr as AGENTS_DIR, ht as ROLE_EFFORTS, i as getConversationsConfig, ir as FsError, jr as SYNC_SOURCES, k as validateTieredExecutionConfig, kn as listProjectsSync, lt as resolveModelIdSync, m as init_js_yaml, mn as findProjectByTeamSync, mr as init_errors, mt as PARENT_MODEL_REF, n as clearConfigCache, nt as MODEL_CAPABILITIES, o as getGlobalConfigPath, or as GitHubApiError, ot as hasModelCapabilitySync, p as updateConversationsConfig, pt as COMPLIANCE_MODES, r as getConversationSearchConfigSync, rt as MODEL_DEPRECATIONS, s as init_load, st as init_model_capabilities, t as init_config_yaml, tt as resolveModel, u as isTldrEnabledSync, un as extractTeamPrefix, ur as ProcessSpawnError, v as getDefaultTtsDaemonConfig, w as TieredExecutionConfigError, wr as OVERDECK_HOME, y as mergeTtsDaemonConfigs, yn as getProjectSync, z as getKimiAnthropicBaseUrl, zn as resolveProjectFromIssueSync, zr as getLegacyHome } from "./config-yaml-DvyMuOle.js";
-import { a as shouldRefuseHostDashboardPort, i as readHostDashboardApiPort, n as getDashboardIdentity, r as isNonPrimaryCheckoutRoot } from "./deacon-nudge-log-Bjg8U4Y9.js";
-import { $ as runInBatches, A as handleConversationDelete, B as stopConversationRuntime, C as isPiControlChannelHarness, D as conversationNeedsRunningRepair, E as validateConversationControlAckOrigin, F as isInsideGitWorkTree, G as cleanupOrphanedConversationAttachments, H as waitForPiTuiReady, I as resolveAllowedHarness, J as extractConversationAttachmentPaths, K as cleanupUnreferencedConversationAttachments, L as shouldReportUnresolvedLiveSession, M as handleConversationResume, N as handleConversationStop, O as conversationSessionAliveFromState, P as handleConversationSwitchModel, Q as removeConversationAttachment, R as spawnConversationSession, S as handleConversationThinkingLevel, St as jsonStringResponse, T as resolveConversationDeliveryMethod, U as waitForTmuxSession$1, V as tmuxSessionExists, W as cleanupConversationAttachments, X as hasConversationAttachment, Y as getConversationAttachmentsRoot, Z as isManagedConversationAttachmentPath, _ as handleConversationCodexApproval, _t as validateOrigin$1, a as agentsRouteLayer, at as panCliInvocation, b as handleConversationDeliveryMethod, bt as getDefaultCwd, c as hasDashboardInternalToken, ct as resolveAgentHarness, d as rejectUnsafeDashboardMutationRequest, dt as resolveJsonlPath, et as evaluateSpawnGuardrails, f as saveAgentStateAndEmitEvent, ft as resolvePiSessionPath, g as handleConversationAbort, gt as isTrustedOriginForHost, h as deliverConversationViaControlChannel, ht as getHeaderFromMap, j as handleConversationRestartAll, k as handleConversationCreate, l as rejectUnauthorizedDashboardRequest, lt as resolveClaudeSessionId, m as codexConversationPendingInput, mt as waitForSessionRespawn, nt as resolveAgentGitInfo, o as dashboardCsrfToken, p as saveAgentStateAndEmitEventProgram, pt as isRespawnPending, q as ensureConversationAttachmentDir, rt as resolveConversationGitInfo, s as dashboardSessionCookieHeader, st as readLauncherPinnedSessionId, t as specialistsRouteLayer, tt as invalidateAgentsCache, u as rejectUnauthorizedDashboardSessionMintRequest, ut as resolveCodexRolloutPath, v as handleConversationCompact, vt as validateOriginHeaders, w as pickDeliverAs, x as handleConversationPlanAction, xt as jsonResponse, y as handleConversationControlAck, yt as httpHandler, z as startConversationModelBackfill } from "./specialists-JVO00bs7.js";
+import { A as canUseHarnessSync, Br as getOverdeckHome, Cr as LOGS_DIR, D as resolveTieredExecutionEnabled, E as resolveTieredExecutionBlock, Et as getIssueWorkspacePath, Fn as renameProject, Fr as getDocsDisableStatePath, Gr as sessionFilePath, H as init_providers, Hr as isDevMode, Ht as flushAutoCommits, I as UnknownModelError, Ir as getDocsIndexPath, J as defaultBackgroundAiFeatures, Jn as extractPrefixSync, Ln as resolveInfraRepo, Lr as getDocsTelemetryPath, M as init_harness_policy, Nr as encodeClaudeProjectDir, Nt as readIssueRecordSync, On as listProjects, Ot as init_record, Pn as registerProjectSync, Pr as getDocsBudgetStatePath, Q as computeModelOrigin, R as getBuiltInDefaultHarness, Rn as resolveProjectFromIssue, T as init_tier_table, Tn as init_projects, Un as setProjectAutoMergeDefaultSync, Ur as packageRoot, Ut as init_auto_commit, V as getProviderForModelSync, Vr as init_paths, Vt as flushAllPendingAutoCommits, Wn as setProjectSwarmPolicySync, X as DEFAULT_ROLES, Y as init_registry, Yn as init_issue_id, Z as DEFAULT_WORKHORSES, Zn as parseIssueIdSync, _ as getDefaultDocsConfig, at as getModelEffortLevelsSync, br as CLAUDE_DIR, cn as ProjectRenameError, ct as modelSupportsImagesSync, d as loadConfigNoMigration, er as require_dist$1, f as loadConfigSync, fn as findProjectByPathSync, fr as TrackerError, g as mergeConfigs, gn as getIssuePrefix, h as jsYaml, hr as AGENTS_DIR, ht as ROLE_EFFORTS, i as getConversationsConfig, ir as FsError, jn as loadProjectsConfigSync, jr as SYNC_SOURCES, k as validateTieredExecutionConfig, kn as listProjectsSync, lt as resolveModelIdSync, m as init_js_yaml, mn as findProjectByTeamSync, mr as init_errors, mt as PARENT_MODEL_REF, n as clearConfigCache, nn as init_state_read_home, nt as MODEL_CAPABILITIES, o as getGlobalConfigPath, or as GitHubApiError, ot as hasModelCapabilitySync, p as updateConversationsConfig, pt as COMPLIANCE_MODES, r as getConversationSearchConfigSync, rn as resolveStateReadHomeSync, rt as MODEL_DEPRECATIONS, s as init_load, st as init_model_capabilities, t as init_config_yaml, tt as resolveModel, u as isTldrEnabledSync, un as extractTeamPrefix, ur as ProcessSpawnError, v as getDefaultTtsDaemonConfig, w as TieredExecutionConfigError, wr as OVERDECK_HOME, y as mergeTtsDaemonConfigs, yn as getProjectSync, z as getKimiAnthropicBaseUrl, zn as resolveProjectFromIssueSync, zr as getLegacyHome } from "./config-yaml-DySPNmKN.js";
+import { a as shouldRefuseHostDashboardPort, i as readHostDashboardApiPort, n as getDashboardIdentity, r as isNonPrimaryCheckoutRoot } from "./deacon-nudge-log-6wVqAaqz.js";
+import { $ as panCliInvocation, A as resolveAllowedHarness, B as cleanupUnreferencedConversationAttachments, C as handleConversationCreate, Ct as jsonStringResponse, D as handleConversationStop, E as handleConversationResume, F as tmuxSessionExists, G as isManagedConversationAttachmentPath, H as extractConversationAttachmentPaths, I as waitForPiTuiReady, J as evaluateSpawnGuardrails, K as removeConversationAttachment, L as waitForTmuxSession$1, M as spawnConversationSession, N as startConversationModelBackfill, O as handleConversationSwitchModel, P as stopConversationRuntime, R as cleanupConversationAttachments, S as conversationSessionAliveFromState, St as jsonResponse, T as handleConversationRestartAll, U as getConversationAttachmentsRoot, V as ensureConversationAttachmentDir, W as hasConversationAttachment, X as resolveAgentGitInfo, Y as invalidateAgentsCache, Z as resolveConversationGitInfo, _ as isPiControlChannelHarness, _t as isTrustedOriginForHost, a as agentsRouteLayer, at as resolveCodexRolloutPath, b as validateConversationControlAckOrigin, bt as httpHandler, c as codexConversationPendingInput, ct as dashboardCsrfToken, d as handleConversationCodexApproval, dt as rejectUnauthorizedDashboardRequest, f as handleConversationCompact, ft as rejectUnauthorizedDashboardSessionMintRequest, g as handleConversationThinkingLevel, gt as getHeaderFromMap, h as handleConversationPlanAction, ht as waitForSessionRespawn, it as resolveClaudeSessionId, j as shouldReportUnresolvedLiveSession, k as isInsideGitWorkTree, l as deliverConversationViaControlChannel, lt as dashboardSessionCookieHeader, m as handleConversationDeliveryMethod, mt as isRespawnPending, nt as resolveAcpTranscriptPath, o as saveAgentStateAndEmitEvent, ot as resolveJsonlPath, p as handleConversationControlAck, pt as rejectUnsafeDashboardMutationRequest, q as runInBatches, rt as resolveAgentHarness, s as saveAgentStateAndEmitEventProgram, st as resolvePiSessionPath, t as specialistsRouteLayer, tt as readLauncherPinnedSessionId, u as handleConversationAbort, ut as hasDashboardInternalToken, v as pickDeliverAs, vt as validateOrigin$1, w as handleConversationDelete, x as conversationNeedsRunningRepair, xt as getDefaultCwd, y as resolveConversationDeliveryMethod, yt as validateOriginHeaders, z as cleanupOrphanedConversationAttachments } from "./specialists-CC4r-c2s.js";
 import { a as init_activity_logger, i as emitDashboardLifecycleSync, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-DDlOIAML.js";
-import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-CzaSOgul.js";
+import { A as init_paths$1, O as OVERDECK_MIGRATION_PATH, f as init_infra, i as DbLive, k as getOverdeckDatabasePath, u as TmuxLive } from "./infra-BEqFxlJc.js";
 import { n as openDatabase, t as init_driver } from "./driver-CKVGi51s.js";
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-Dq0t2uBG.js";
-import { $ as init_child_env, B as sendKeysAsync, C as getWindowDimensions, D as killSession, H as sessionExists, J as init_ui_theme, L as resizeWindow, M as listSessionNames, Q as buildChildEnvWithoutTmuxSync, T as isHarnessProcessAlive, Y as setUiTheme, Z as buildChildEnvSync, d as ensureManagedTmuxContextOnce, i as capturePane, l as deliveryVerifyLine, n as buildTmuxArgs, o as capturePaneText, s as createSession, w as init_tmux, z as sendKeys } from "./tmux-ftABRAmc.js";
-import { a as init_event_store, i as initEventStore, n as getEventStore } from "./event-store-tdiY5eDZ.js";
-import { D as AgentSnapshot, E as AgentRuntimeSnapshot, O as ReviewStatusSnapshot, S as SystemHealthSnapshot, _ as WS_METHODS, b as EDITORS, c as ContextPreviewRequest, g as PanRpcGroup, h as PanRpcError, l as FlywheelStats, n as compareIssueIds, o as getHarnessBehavior, s as ContextLayerSaveRequest, t as init_src, v as FlywheelRunId, w as MemoryObservation, x as DomainEvent, y as FlywheelStatus } from "./src-U7_kTPEE.js";
-import { a as fixStuckCommentedReviews, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status, n as clearReviewStatus, o as fixStuckReadyForMerge, p as markWorkspaceStuck, r as clearStuckMergeStatuses, s as getReviewStatus, u as loadReadyForMergeFlags, y as setReviewStatus } from "./review-status-A7quS5KJ.js";
-import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-CreaCkjW.js";
-import { c as listAllAgentsSync, n as AgentsResolverLive, o as init_agents } from "./agents-B4Bjbkfv.js";
-import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-_zEts6wc.js";
-import { i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, r as init_briefing_freshness, t as appendFreshBriefingUpdate } from "./briefing-freshness-DWdW7vUm.js";
-import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-_wUBRD3J.js";
-import { a as diffAgainstMain, c as diffCheckpoints, d as diffPatchSinceCommit, f as findCommitAtTime, h as listCheckpoints, l as diffFilesAgainstHead, m as init_checkpoint_manager, o as diffAgainstMainFiles, s as diffCheckpointFiles, t as captureCheckpoint, u as diffPatchFilesAgainstHead } from "./checkpoint-manager-DDqcGyu8.js";
-import { Ar as init_codex_auth, Bn as getAgentDir, Cr as getAgentRuntimeStateSync, D as init_tier_supervisor, E as deliverCommitForReview, Ft as init_transcript_landing, Hn as getAgentState, It as probeTranscriptSince, Pt as captureTranscriptUserRecordSnapshot, Q as operatorInterventionEvent, Sr as getAgentRuntimeState, Tn as init_openai_auth, Wn as getAgentStateSync, X as messageAgent, Yt as resolveImplicitStaffing, Z as init_operator_interventions, _t as emergencyBrake, a as listRunningAgentsSync, b as init_agents$1, c as getRuntimeCensus, d as panePidsForSession, dr as readAgentHarnessModelRecordSync, f as refreshRuntimeCensus, hn as init_claude_auth, i as listRunningAgents, in as getProviderAuthMode, ir as saveAgentStateSync, j as supervisorAgentId, kr as checkCodexAuthStatus, kt as deliverAgentMessage, l as getRuntimeCensusSnapshot, mn as getClaudeAuthStatus, n as init_queries, p as runtimeCensusHasHarnessProcess, qt as init_staffing, r as listAgentStates, sn as injectPiConversationMemory, u as init_runtime_census, ur as init_agent_record_sync, vr as normalizeAgentId, wn as getOpenAIAuthStatus, xr as waitForReadySignal, yn as getProviderEnvForModel, yt as init_concurrency } from "./queries-6d7Cdtm7.js";
-import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, p as queryCostEventsSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-C0VdGme1.js";
-import { c as getAgentsNeedingAttention, d as CostResolverLive, f as CostWriter, l as CostDoorLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-DCpB_SGd.js";
-import { u as init_agent_runtime_mirror } from "./session-history-CVZDpS3c.js";
-import { t as init_behavior } from "./behavior-B_-4EKF3.js";
-import { n as AgentStateServiceLive } from "./agent-state-service-HoK8U4jW.js";
-import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-B4itFzDo.js";
+import { n as updateIssueRecord, t as init_record_update } from "./record-update-dE1Aw83j.js";
+import { $ as init_child_env, B as sendKeysAsync, C as getWindowDimensions, D as killSession, H as sessionExists, J as init_ui_theme, L as resizeWindow, M as listSessionNames, Q as buildChildEnvWithoutTmuxSync, T as isHarnessProcessAlive, Y as setUiTheme, Z as buildChildEnvSync, d as ensureManagedTmuxContextOnce, i as capturePane, l as deliveryVerifyLine, n as buildTmuxArgs, o as capturePaneText, s as createSession, w as init_tmux, z as sendKeys } from "./tmux-R7N7y-Mh.js";
+import { a as init_event_store, i as initEventStore, n as getEventStore } from "./event-store-CQL6NeqB.js";
+import { A as AgentSnapshot, C as EDITORS, D as MemoryObservation, S as FlywheelStatus, T as SystemHealthSnapshot, b as WS_METHODS, c as ContextLayerSaveRequest, f as FlywheelStats, j as ReviewStatusSnapshot, k as AgentRuntimeSnapshot, l as ContextPreviewRequest, n as compareIssueIds, o as getHarnessBehavior, t as init_src, v as PanRpcError, w as DomainEvent, x as FlywheelRunId, y as PanRpcGroup } from "./src-DtcUOZCq.js";
+import { a as fixStuckCommentedReviews, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status, n as clearReviewStatus, o as fixStuckReadyForMerge, p as markWorkspaceStuck, r as clearStuckMergeStatuses, s as getReviewStatus, u as loadReadyForMergeFlags, y as setReviewStatus } from "./review-status-kZj_KyCk.js";
+import { a as EventStoreService, c as ReadModelService, d as init_read_model, f as toAgentResolution, i as init_issue_lifecycle, l as ReadModelServiceLive, m as toRole, n as IssueLifecycleLive, o as EventStoreServiceLive, p as toAgentStatus, s as init_domain_services, t as IssueLifecycle } from "./issue-lifecycle-ojZAzDBP.js";
+import { c as listAllAgentsSync, n as AgentsResolverLive, o as init_agents } from "./agents-EbI0zCJl.js";
+import { i as init_paths$2, l as resolveObservationsFile, r as ensureParentDir, s as resolveIssueMemoryRoot, t as assertMemorySafeSegment } from "./paths-D-xWGHdh.js";
+import { i as recordBriefingSessionStart, n as ensureSessionContextBriefingFile, r as init_briefing_freshness, t as appendFreshBriefingUpdate } from "./briefing-freshness-D1wzUIWv.js";
+import { n as listFeatureRegistryEntries, t as init_feature_registry_storage } from "./feature-registry-storage-BdPuLcBX.js";
+import { a as diffAgainstMain, c as diffCheckpoints, d as diffPatchSinceCommit, f as findCommitAtTime, h as listCheckpoints, l as diffFilesAgainstHead, m as init_checkpoint_manager, o as diffAgainstMainFiles, s as diffCheckpointFiles, t as captureCheckpoint, u as diffPatchFilesAgainstHead } from "./checkpoint-manager-BI1Wxoku.js";
+import { Cn as getProviderEnvForModel, Cr as normalizeAgentId, D as init_tier_supervisor, Dr as getAgentRuntimeState, E as deliverCommitForReview, Er as waitForReadySignal, Fr as init_codex_auth, Ft as init_transcript_landing, Gn as getAgentDir, It as probeTranscriptSince, On as getOpenAIAuthStatus, Or as getAgentRuntimeStateSync, Pr as checkCodexAuthStatus, Pt as captureTranscriptUserRecordSnapshot, Q as operatorInterventionEvent, X as messageAgent, Yn as getAgentStateSync, Yt as resolveImplicitStaffing, Z as init_operator_interventions, _t as emergencyBrake, a as listRunningAgentsSync, an as getProviderAuthMode, b as init_agents$1, c as getRuntimeCensus, cn as injectPiConversationMemory, d as panePidsForSession, f as refreshRuntimeCensus, gr as readAgentHarnessModelRecordSync, hr as init_agent_record_sync, i as listRunningAgents, j as supervisorAgentId, kn as init_openai_auth, kt as deliverAgentMessage, l as getRuntimeCensusSnapshot, lr as saveAgentStateSync, n as init_queries, p as runtimeCensusHasHarnessProcess, qn as getAgentState, qt as init_staffing, r as listAgentStates, u as init_runtime_census, vn as getClaudeAuthStatus, yn as init_claude_auth, yt as init_concurrency } from "./queries-CjNIf-Ub.js";
+import { a as getCostForIssueAggregateSync, c as getDailyTrendsSync, d as init_cost_sync, l as getModelRollupSync, n as getBackgroundCostBySourceSync, p as queryCostEventsSync, r as getCavemanExperimentDataSync, s as getCostsByIssueSync, u as getTodayCostSync } from "./cost-sync-BsN6ER0n.js";
+import { c as getAgentsNeedingAttention, d as CostResolverLive, f as CostWriter, l as CostDoorLive, n as readCloisterStateFile, o as generateHealthSummary, s as getAgentHealth, t as getCloisterService, u as CostResolver } from "./service-CLeAoU6G.js";
+import { u as init_agent_runtime_mirror } from "./session-history-BT3IvqhC.js";
+import { t as init_behavior } from "./behavior-B3exJ42O.js";
+import { n as AgentStateServiceLive } from "./agent-state-service-BsgWxZuB.js";
+import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-G6latr8C.js";
 import { d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-2BTMxkZq.js";
-import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-D4zqMnX7.js";
-import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client--XVlDpwM.js";
-import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-B1EJhfV0.js";
-import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-tnxxqROg.js";
-import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-B5ushCvE.js";
-import { i as ensureInternalTokenSync, o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-Bb4XeV2x.js";
-import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-D0ykk59O.js";
-import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-BhSQ0d0l.js";
+import { i as init_linear_client, r as LinearClientOptionalLive, t as LinearClient } from "./linear-client-BsuUvkdA.js";
+import { i as init_github_client, r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-BnIsSrEN.js";
+import { i as init_rally_client, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-lc-nokqr.js";
+import { a as resolveTrackerTypeSync, i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
+import { a as CacheService, i as startSharedIssueService, n as init_issue_service_singleton, o as init_cache_service, r as issue_service_singleton_exports, s as parseIntegerHeader, t as getSharedIssueService } from "./issue-service-singleton-Yx5DdmVJ.js";
+import { i as ensureInternalTokenSync, o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-s0-oKybJ.js";
+import { a as setPipelineHandlerSync, t as init_pipeline_notifier } from "./pipeline-notifier-BXkJzDC4.js";
+import { c as init_review_status_sync, i as getMergeBlockerReconcileCandidates } from "./review-status-sync-BTOpxtTC.js";
 import { n as init_review_status_source, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CxuEjLGg.js";
 import { a as PAN_DIRNAME, d as WORKSPACE_RUNTIME_DIRNAME, f as asPanSpecDocument, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-hraoaQIp.js";
-import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-DZ9dojJn.js";
-import { C as init_specs, D as writeSpecDocument, O as writeSpecForIssue, a as findWorkspaceDraftPlan, m as readWorkspacePlanSync, o as init_io, p as readWorkspacePlan, r as findPlan, s as isPlanningComplete, u as readPlan, v as init_types$1, x as findSpecByIssue, y as subItemsOf } from "./io-B3_AHDfr.js";
-import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-Bgb2XCqi.js";
-import { $ as updateConversationForkFallbackReason, A as isAgentConversationName, B as removeFavorite, C as getConversationByTmuxSession, D as importLegacyConversation, F as markConversationEnded, H as setClearedToConvId, I as markConversationRunning, J as setForkRequest, M as listConversations, N as listFavoritedIds, O as incrementForkRetryCount, P as markConversationActive, S as getConversationByName, T as getStuckForks, U as setConversationClaudeSessionId, X as unarchiveConversation, Y as setImportedConversationLinks, Z as updateConversationCost, _ as canRefineTitle, b as getConversationByClaudeSessionId, et as updateConversationTitle, gt as getDiscoveredSessionBySessionId, h as archiveConversation, j as listArchivedConversationsWithEnrichment, k as init_conversations, q as setFavorite, tt as updateForkStatus, v as canReplaceTitle, w as getConversationLedgerCosts, x as getConversationById, y as createConversation, yt as init_discovered_sessions, z as recordConversationHandoff } from "./conversations-DbOs1e9Q.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-Dhxz-wLc.js";
-import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-BZ5m1UCl.js";
-import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-DV7ec8l7.js";
-import { i as normalizeModelOverrideSync, n as init_launcher_generator, r as init_model_validation, t as generateLauncherScriptSync } from "./launcher-generator-CHVm7bGT.js";
-import { a as init_claude_permissions, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-H_5wHQZQ.js";
-import { a as globalContextFile$1, f as resolveProjectContextFile, h as workspaceContextFile, n as codexGlobalContextFile, o as init_layers, p as resolveWorkspaceContextFile, r as ensureProjectLayer } from "./layers-DzxSTGNA.js";
-import { l as init_codex, s as findRolloutPath } from "./codex-TmSi-yTv.js";
-import { n as init_harness_binary, r as prepareHarnessLaunch } from "./harness-binary-CVio2m-u.js";
-import { f as init_config, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-CCvjQf27.js";
-import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-aP1ANIlI.js";
-import { l as init_dag, r as compileGlob } from "./dag-CdOjJVDT.js";
-import { a as loadCloisterConfigSync, o as saveCloisterConfigSync, r as init_config$1, s as shouldAutoStart } from "./config-DjLOdbgT.js";
-import { c as isStateMigrated, i as ensureStateWorktree, o as init_state_home, r as clearStateMigrationCache, s as inspectStateMigration } from "./state-home-CIGjwNfJ.js";
-import { i as checkPrdGateSync, s as promoteWorkspacePrdDraft, t as init_pan_dir } from "./pan-dir-DeVUgwA7.js";
-import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-D8iNBcux.js";
-import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-CQ_fwUWF.js";
-import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-CTmczIfW.js";
-import { A as withConcurrencyLimit, D as createPromiseConcurrencyLimiter, E as verifyAppCanMerge, O as createSettledTtlPromiseCache, d as getPullRequestState, f as init_github_app, k as init_concurrency$1, l as getMergeBackendStatus, p as isGitHubAppConfigured } from "./github-app-CMBdIFBQ.js";
-import { C as getWorkspacePathForIssue, E as stopAgentOutputService, S as resolveIssueHeadlineCost, T as startAgentOutputService, _ as getCostsForIssueSync, b as processPendingFeedbackDeliveries, d as resumeQueuedMerges, f as syncWalFromAllProjects, g as migrateAllSessionsSync, h as reclassifyUnknownCostEventsSync, l as internalEventsRouteLayer, m as reconcilePiTranscripts, p as reconcile$1, t as workspacesRouteLayer, u as eventsRouteLayer, v as rebuildCacheSync, w as retainAgentOutputInterest, x as getCachedRunningAgents, y as syncCacheSync } from "./workspaces-hWvy9eKs.js";
-import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-Du-MTNpJ.js";
-import { c as countPendingAskUserQuestionsForAgent, h as detectAwaitingInputFromPaneSync, l as getAgentJsonlMtime, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment } from "./stuck-remediation-CzEov_fq.js";
-import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-D2743cp8.js";
-import { c as tailEventsSync, n as deduplicateEventsSync, o as readEventsSync } from "./events-CC1dgUpx.js";
-import { n as recordBackgroundAiCost, t as init_cost } from "./cost-CW4WSe72.js";
-import { a as getByIssueId, i as parseFlywheelStatsWindow, n as derivePipelineRunStatsInputs, o as markFixed, r as computeFlywheelStats, s as upsert } from "./substrate-bug-weights-service-BH66lhm7.js";
-import { c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard } from "./uat-train-CuEn0t9M.js";
-import { C as writeLatestFlywheelStatus, b as resolveLiveFlywheelRunId, g as listFlywheelRuns, h as isFlywheelRunId, p as getFlywheelRunDetail, u as buildClassifyLookups, v as readCurrentLatestFlywheelStatus, x as subscribeLatestFlywheelStatus } from "./flywheel-DSSpWmqF.js";
-import { At as getContainerHistory, Ct as paneShowsClaudeBootBlockingScreen, F as setAgentStatusChangedNotifier, Ft as getSystemHealthEvidenceSnapshot, I as setAgentStoppedNotifier, J as startBootReconciliation, K as isBootReconciliationCandidate, L as setMergeReadyNotifier, Lt as isSmeeConfiguredSync, Mt as getAcceptedSystemHealthSnapshot, Nt as getDeployStaleness, O as loadConfig, Ot as getResourceStacks, Rt as startSmeeProcessSync, jt as getCurrentDockerStats, k as loadState, kt as formatUptime, n as assessDeaconPatrolFreshness, q as listBootReconciliationCandidates, t as applyBootReconciliationDecision, x as getDeaconLogs, zt as classifyAgentHealth } from "./deacon-pRnyD5w9.js";
-import { l as detectPlatform, u as init_platform } from "./workspace-manager-hLUv3ADC.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-C9b6ccN1.js";
-import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-aQ1IxeI3.js";
-import { V as getReviewerSessionName, t as init_specialists } from "./specialists-DyFeedjn.js";
-import { c as findPrdAnywhereSync, l as init_prd_locations } from "./archive-planning-DYrYojxl.js";
-import { a as getShadowState, s as init_shadow_state } from "./shadow-state-Dh-HzF2J.js";
-import { n as init_issue_closed, t as clearIssueClosedCache } from "./issue-closed-zhdvQicO.js";
-import { b as resolveSwarmPolicy } from "./deacon-swarm-DftYRDo8.js";
-import { a as init_boot_gates, i as formatBootGateState, o as resolveBootGates } from "./no-resume-mode-Cx3K0hHi.js";
-import { _ as selectNeedsPlanning, c as classifyIssue, d as computeLanes, f as computeStats, g as normalizeGate, l as computeCohort, m as init_pickup, p as computeWaves, u as computeEpicGroups } from "./pickup-Dd0Znxxy.js";
-import { a as applyIssueObjectionLabel, c as applyIssueReleasedLabel, d as removeIssueBlocksMainLabel, f as removeIssueObjectionLabel, g as removeIssueVetoedLabel, h as removeIssueReleasedLabel, i as applyIssueBlocksMainLabel, l as applyIssueVetoedLabel, m as removeIssueReadyLabel, o as applyIssueParkedLabel, p as removeIssueParkedLabel, s as applyIssueReadyLabel, u as init_label_ops } from "./label-reconciler-DdWbHEBu.js";
-import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-Cg0zYj_E.js";
-import { c as init_resource_utils, i as gatherProjectLensSignals, l as parseIssueIdFromTextSync, n as init_pipeline_membership, o as init_pipeline_membership_gather, r as resolvePipelineMembership, s as listOpenPullRequestsSnapshot } from "./pipeline-membership-0HaEGDlH.js";
-import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-CskwzzhL.js";
-import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-DWAorh2B.js";
-import { d as killRemoteAgent, m as loadRemoteAgentState, o as getRemoteAgentOutput, r as checkRemoteSpendCap, s as init_remote_agents, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-nmty1mLu.js";
-import { r as spawnInspectAgent } from "./inspect-agent-DJKLWcVT.js";
-import { n as init_github_pr_lookup, r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-BRbDW-qk.js";
-import { a as fetchIssuePullRequestDiff, c as getCachedIssuePrTabResponse, d as setCachedIssuePrTabResponse, i as fetchIssuePullRequestDetails, l as getIssuePrTabCacheGeneration, n as fetchIssueCheckRuns, o as init_pull_requests, r as fetchIssuePullRequest, s as bumpIssuePrTabCacheGeneration, u as init_pr_tab_cache } from "./pull-requests-CXIhdCYD.js";
-import { t as DOD_ROWS } from "./dod-BrSfUHm0.js";
-import { t as enrichReviewStatus } from "./review-status-enrichment-tbOn_A_u.js";
-import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-CKgg0VKg.js";
-import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-WA0VD-Rr.js";
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-BDtLOIlO.js";
-import { T as listGitOperationsSync, w as init_git_activity } from "./merge-agent-XrB80vfT.js";
-import { t as readVerificationArtifact } from "./verification-artifact-BcnIbigL.js";
-import { t as getAgentCommandSync } from "./settings-ylxwqwQG.js";
-import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-sKkE1FEL.js";
-import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-Br-ZWVIP.js";
-import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-CbSz0Dvb.js";
-import { a as init_query_expansion, i as clearQueryExpansionCache, n as init_injection, o as buildMatchQuery, r as injectPromptTimeMemory, s as init_search } from "./injection-DZ0PfYa4.js";
-import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-DHhJIsAL.js";
-import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-CNbTLB86.js";
-import { a as init_render, d as validateTemplate, i as hasManagedRegion, l as init_harness, o as userContentOutsideRegion, t as init_context_layers, u as renderForHarness } from "./context-layers-ZYFcWiyc.js";
-import { r as parseArtifactRef } from "./forge-Ch9gCFod.js";
-import { t as getMergeBlockersPayload } from "./merge-blockers-BsFjGrQ8.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-BGY8gjg-.js";
-import "./supervisor-BO-Zk_h-.js";
-import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-C-AXLfYT.js";
+import { C as transitionToMerging, _ as markFailed, c as isFlywheelGloballyPaused, d as listDuePendingAutoMerges, f as listProblemAutoMerges, g as markBlocked, n as getActionableAutoMerge, o as init_merge_sync, t as cancelPending, u as listActiveAutoMerges, v as markMerged, x as scheduleAutoMergeWithResult, y as requeueToPending } from "./merge-sync-VPV28g0g.js";
+import { C as init_specs, D as writeSpecDocument, O as writeSpecForIssue, a as findWorkspaceDraftPlan, m as readWorkspacePlanSync, o as init_io, p as readWorkspacePlan, r as findPlan, s as isPlanningComplete, u as readPlan, v as init_types$1, x as findSpecByIssue, y as subItemsOf } from "./io-C9kF1wtJ.js";
+import { C as restartCliproxy, S as readPidFile, T as stopCliproxy, b as isCliproxyInstalled, d as getCliproxyAuthDir, o as bridgeCodexAuthToCliproxy, v as init_cliproxy, w as startCliproxy, x as isCliproxyRunning, y as installCliproxy } from "./cliproxy-C8a1vtTU.js";
+import { $ as updateConversationForkFallbackReason, A as isAgentConversationName, B as removeFavorite, C as getConversationByTmuxSession, D as importLegacyConversation, F as markConversationEnded, H as setClearedToConvId, I as markConversationRunning, J as setForkRequest, M as listConversations, N as listFavoritedIds, O as incrementForkRetryCount, P as markConversationActive, S as getConversationByName, T as getStuckForks, U as setConversationClaudeSessionId, X as unarchiveConversation, Y as setImportedConversationLinks, Z as updateConversationCost, _ as canRefineTitle, b as getConversationByClaudeSessionId, et as updateConversationTitle, gt as getDiscoveredSessionBySessionId, h as archiveConversation, j as listArchivedConversationsWithEnrichment, k as init_conversations, q as setFavorite, tt as updateForkStatus, v as canReplaceTitle, w as getConversationLedgerCosts, x as getConversationById, y as createConversation, yt as init_discovered_sessions, z as recordConversationHandoff } from "./conversations-6AfUfbwc.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-ez2271oH.js";
+import { i as init_settings, r as getMemoryWorkerConcurrency, t as areMemoryObservationsEnabled } from "./settings-BTMvpNFU.js";
+import { i as updateMemoryHealth, n as extractWithProviderPolicy, r as init_health, t as init_providers$1 } from "./providers-qQAwGQDW.js";
+import { a as normalizeModelOverrideSync, i as init_model_validation, n as init_launcher_generator, o as requireModelOverrideSync, r as MODEL_ID_PATTERN, t as generateLauncherScriptSync } from "./launcher-generator-BBWG_SiS.js";
+import { a as init_claude_permissions, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-DNWEVV6z.js";
+import { C as ensureProjectLayer, E as init_layers, I as workspaceContextFile, N as resolveProjectContextFile, P as resolveWorkspaceContextFile, S as codexGlobalContextFile, T as globalContextFile$1, b as validateTemplate, c as init_render, d as userContentOutsideRegion, i as workspaceContextWithoutProjectLayer, r as init_assemble, s as hasManagedRegion, v as init_harness, y as renderForHarness } from "./assemble-J2ZZ2C15.js";
+import { l as init_codex, s as findRolloutPath } from "./codex-BZXGhUVB.js";
+import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
+import { f as init_config, m as loadConfigSync$1, s as getDashboardApiUrlSync } from "./config-BZ0sHTju.js";
+import { C as setMergeTrainEnabled, S as setFlywheelRequireUatBeforeMerge, b as setFlywheelAutoPickupBacklog, c as isCloisterSpawnsPausedSync, d as isFlywheelAutoPickupBacklog, f as isFlywheelGloballyPaused$1, g as setCloisterSpawnsPausedSync, h as setBootReconciliationDecision, m as isMergeTrainEnabled, o as getSetting, p as isFlywheelRequireUatBeforeMerge, r as getBootReconciliationState, s as init_control_settings, u as isDeaconGloballyPausedSync, v as setDeaconGloballyPausedSync, w as setSetting } from "./control-settings-BQp7_4uD.js";
+import { l as init_dag, r as compileGlob } from "./dag-B1ucnjDU.js";
+import { a as loadCloisterConfigSync, o as saveCloisterConfigSync, r as init_config$1, s as shouldAutoStart } from "./config-CKxYiCmX.js";
+import { c as isStateMigrated, i as ensureStateWorktree, o as init_state_home, r as clearStateMigrationCache, s as inspectStateMigration } from "./state-home-Cn_Qu8IX.js";
+import { i as checkPrdGateSync, s as promoteWorkspacePrdDraft, t as init_pan_dir } from "./pan-dir-B0c3w0Ya.js";
+import { a as init_lifecycle_io, t as appendContinueSessionEntryForIssue } from "./lifecycle-io-BREGpnLk.js";
+import { r as init_swarm_readiness, t as analyzeSwarmReadiness } from "./swarm-readiness-DlP_UjHq.js";
+import { a as buildMatchQuery, c as init_query_expansion, i as resolveKnowledgeBundleRoot, n as init_injection, o as init_search, r as injectPromptTimeMemory, s as clearQueryExpansionCache } from "./injection-C8aiVJrF.js";
+import { i as runMemoryFtsTransaction, n as init_fts_db, r as runMemoryFtsStatement, t as closeMemoryFtsDatabases } from "./fts-db-CE46vDkZ.js";
+import { n as require_auth_errors, r as require_token_error, t as require_token_util } from "./token-util-DxXu-vd1.js";
+import { A as createSettledTtlPromiseCache, D as init_advisory_checks, E as verifyAppCanMerge, M as withConcurrencyLimit, O as isAdvisoryCheckName, d as getPullRequestState, f as init_github_app, j as init_concurrency$1, k as createPromiseConcurrencyLimiter, l as getMergeBackendStatus, p as isGitHubAppConfigured } from "./github-app-C3QrAUd0.js";
+import { C as getWorkspacePathForIssue, E as stopAgentOutputService, S as resolveIssueHeadlineCost, T as startAgentOutputService, _ as getCostsForIssueSync, b as processPendingFeedbackDeliveries, d as resumeQueuedMerges, f as syncWalFromAllProjects, g as migrateAllSessionsSync, h as reclassifyUnknownCostEventsSync, l as internalEventsRouteLayer, m as reconcilePiTranscripts, p as reconcile$1, t as workspacesRouteLayer, u as eventsRouteLayer, v as rebuildCacheSync, w as retainAgentOutputInterest, x as getCachedRunningAgents, y as syncCacheSync } from "./workspaces-Do_9J0LQ.js";
+import { _ as init_codex_conversation_parser, a as contextUsageFromParseResult, b as parseAcpConversationMessages, c as parseEntireConversation, d as init_pi_conversation_parser, f as isPiSessionFile, g as parseOhmypiConversationMessages, h as isOhmypiSessionFile, i as computeContextUsage, l as parseFromLastCompactBoundary, m as init_ohmypi_conversation_parser, n as gateSnapshotEmission, o as summarizeConversationActivity, p as parsePiConversationMessages, r as watchConversation, s as parseConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages, y as init_acp_conversation_parser } from "./conversation-service-DPJ71F33.js";
+import { c as countPendingAskUserQuestionsForAgent, h as detectAwaitingInputFromPaneSync, l as getAgentJsonlMtime, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment } from "./stuck-remediation-DYuPRYYw.js";
+import { i as CostThresholdError, l as embed, s as parseRelativeTime } from "./scanner-CnqEZeDy.js";
+import { c as tailEventsSync, n as deduplicateEventsSync, o as readEventsSync } from "./events-DTfAe4My.js";
+import { n as recordBackgroundAiCost, t as init_cost } from "./cost-R-m6Yi-W.js";
+import { a as getByIssueId, i as parseFlywheelStatsWindow, n as derivePipelineRunStatsInputs, o as markFixed, r as computeFlywheelStats, s as upsert } from "./substrate-bug-weights-service-B-FwCs5V.js";
+import { c as startUatTrainReconciler, d as openFlywheelRunReportForDashboard, f as pauseFlywheelRunForDashboard, g as runDashboardDbJob, h as startFlywheelRunForDashboard, l as stopUatTrainReconciler, m as resumeFlywheelRunForDashboard, p as readCurrentFlywheelStatusForDashboard, u as abortFlywheelRunForDashboard } from "./uat-train-DDSrSoV1.js";
+import { n as parseSequenceMd, r as writeSequenceMd, t as init_sequence_io } from "./sequence-io-D909zgeH.js";
+import { _ as selectNeedsPlanning, c as classifyIssue, d as computeLanes, f as computeStats, g as normalizeGate, l as computeCohort, m as init_pickup, p as computeWaves, u as computeEpicGroups } from "./pickup-DUCLWrJY.js";
+import { B as getBook, C as readCurrentLatestFlywheelStatus, E as subscribeLatestFlywheelStatus, F as setItemRequirements, H as liveOrderIssueLookup, I as setSettings, L as setStatus, M as moveItem, N as removeItem, O as writeLatestFlywheelStatus, P as renameBook, R as backlogCandidates, T as resolveLiveFlywheelRunId, V as listBooks, b as isFlywheelRunId, j as createBook, k as addItems, p as buildClassifyLookups, v as getFlywheelRunDetail, x as listFlywheelRuns, z as computeBookProgress } from "./flywheel-DHrgCphM.js";
+import { At as getContainerHistory, Ct as paneShowsClaudeBootBlockingScreen, F as setAgentStatusChangedNotifier, Ft as getSystemHealthEvidenceSnapshot, I as setAgentStoppedNotifier, J as startBootReconciliation, K as isBootReconciliationCandidate, L as setMergeReadyNotifier, Lt as isSmeeConfiguredSync, Mt as getAcceptedSystemHealthSnapshot, Nt as getDeployStaleness, O as loadConfig, Ot as getResourceStacks, Rt as startSmeeProcessSync, jt as getCurrentDockerStats, k as loadState, kt as formatUptime, n as assessDeaconPatrolFreshness, q as listBootReconciliationCandidates, t as applyBootReconciliationDecision, x as getDeaconLogs, zt as classifyAgentHealth } from "./deacon-CU_cAYSR.js";
+import { d as init_platform, u as detectPlatform } from "./workspace-manager-CBhNdzE4.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-CY5L1lB7.js";
+import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-CAAkqPLu.js";
+import { V as getReviewerSessionName, t as init_specialists } from "./specialists-jiuuyVkp.js";
+import { c as findPrdAnywhereSync, l as init_prd_locations } from "./archive-planning-Du25Jtst.js";
+import { a as getShadowState, s as init_shadow_state } from "./shadow-state-7a-524T8.js";
+import { n as init_issue_closed, t as clearIssueClosedCache } from "./issue-closed-CDJk4pIp.js";
+import { b as resolveSwarmPolicy } from "./deacon-swarm-BXZZ1Z2-.js";
+import { a as init_boot_gates, i as formatBootGateState, o as resolveBootGates } from "./no-resume-mode-Nw29vaFb.js";
+import { a as applyIssueObjectionLabel, c as applyIssueReleasedLabel, d as removeIssueBlocksMainLabel, f as removeIssueObjectionLabel, g as removeIssueVetoedLabel, h as removeIssueReleasedLabel, i as applyIssueBlocksMainLabel, l as applyIssueVetoedLabel, m as removeIssueReadyLabel, o as applyIssueParkedLabel, p as removeIssueParkedLabel, s as applyIssueReadyLabel, u as init_label_ops } from "./label-reconciler-B4iOAjlC.js";
+import { c as init_resource_utils, i as gatherProjectLensSignals, l as parseIssueIdFromTextSync, n as init_pipeline_membership, o as init_pipeline_membership_gather, r as resolvePipelineMembership, s as listOpenPullRequestsSnapshot } from "./pipeline-membership-mY3GprlK.js";
+import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-_WygnyoX.js";
+import { i as resolveAutoSpawnOnFinalize, o as spawnPlanningSession } from "./spawn-planning-session-DKpdFyOC.js";
+import { d as killRemoteAgent, m as loadRemoteAgentState, o as getRemoteAgentOutput, r as checkRemoteSpendCap, s as init_remote_agents, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-By1ige5O.js";
+import { r as spawnInspectAgent } from "./inspect-agent-BLuJ1AkT.js";
+import { n as init_github_pr_lookup, r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-D16NGsSO.js";
+import { a as fetchIssuePullRequestDiff, c as getCachedIssuePrTabResponse, d as setCachedIssuePrTabResponse, i as fetchIssuePullRequestDetails, l as getIssuePrTabCacheGeneration, n as fetchIssueCheckRuns, o as init_pull_requests, r as fetchIssuePullRequest, s as bumpIssuePrTabCacheGeneration, u as init_pr_tab_cache } from "./pull-requests-_lHueOHW.js";
+import { t as DOD_ROWS } from "./dod-C6n9RV3G.js";
+import { t as enrichReviewStatus } from "./review-status-enrichment-Dci-ZwEt.js";
+import { c as init_pending, l as maybeTriggerStatusRollup, o as readRecentObservations, r as init_rollup, u as writePendingTurn } from "./rollup-FGsKki9R.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-C-69c3OI.js";
+import { T as listGitOperationsSync, w as init_git_activity } from "./merge-agent-4WOWlSYA.js";
+import { t as readVerificationArtifact } from "./verification-artifact-TVFSz_q1.js";
+import { t as getAgentCommandSync } from "./settings-C0zgxOGf.js";
+import { n as init_review_agent, r as isExtendedReviewEnabled } from "./review-agent-CIGOQYBD.js";
+import { r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-C_2hasl7.js";
+import { n as init_claude_settings_overlay, t as detectProviderEnvConflicts } from "./claude-settings-overlay-CEdaqpWI.js";
+import { _ as init_transcript_adapter, a as generateFallbackSummary, c as handoffPreconditionFallbackReason, d as prependFallbackFocus, f as requestHandoffFromAgent, g as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as init_summary_fork, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, u as logHandoffFallback } from "./summary-fork-D1RAk9rJ.js";
+import { a as init_conversation_compaction, c as shouldInterceptManualCompact, n as compactConversationNative, o as isCompacting } from "./conversation-compaction-CgrR8YYp.js";
+import { t as init_context_layers } from "./context-layers-igZ4FI4_.js";
+import { r as parseArtifactRef } from "./forge-CNFnyqps.js";
+import { i as getMergeBlockersPayload, n as hasOrderIssuePrd, r as validateBookForStart, t as createOrderPrdLookup } from "./validate-IfDGkaVR.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent, n as clearFinishedSequencerRun, r as getSequencerRunStatus, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-CzkcK6P5.js";
+import "./supervisor-wM4ooB5O.js";
+import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-CQB1h765.js";
 import { createRequire } from "node:module";
 import * as sp from "node:path";
 import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
@@ -116,20 +116,23 @@ import { homedir as homedir$1, type } from "node:os";
 import { constants, createReadStream as createReadStream$1, existsSync as existsSync$1, mkdirSync as mkdirSync$1, promises as promises$1, readFileSync as readFileSync$1, readdirSync as readdirSync$1, readlinkSync, renameSync as renameSync$1, rmSync as rmSync$1, stat, statSync as statSync$1, symlinkSync as symlinkSync$1, unwatchFile, watch, watchFile } from "node:fs";
 import { FetchHttpClient, HttpRouter, HttpServer, HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
 import { EventEmitter } from "node:events";
-import { access, appendFile, chmod, lstat, mkdir, open, readFile, readdir, realpath, rename, rm, stat as stat$1, unlink, writeFile } from "node:fs/promises";
+import { access, appendFile, chmod, cp, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat as stat$1, unlink, writeFile } from "node:fs/promises";
 import { createHash, randomUUID } from "crypto";
 import { appendFile as appendFile$1, chmod as chmod$1, mkdir as mkdir$1, open as open$1, readFile as readFile$1, readdir as readdir$1, rename as rename$1, stat as stat$2, unlink as unlink$1, writeFile as writeFile$1 } from "fs/promises";
 import { exec, execFile, execFileSync, fork, spawn } from "node:child_process";
 import { promisify } from "node:util";
-import { createHmac, randomBytes, randomUUID as randomUUID$1, timingSafeEqual } from "node:crypto";
+import { createHash as createHash$1, createHmac, randomBytes, randomUUID as randomUUID$1, timingSafeEqual } from "node:crypto";
 import * as pty from "@lydell/node-pty";
 import { fileURLToPath } from "node:url";
+import http from "node:http";
 import { layer } from "@effect/platform-node/NodeServices";
+import https from "node:https";
+import { createServer } from "node:net";
+import { Worker } from "node:worker_threads";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { PassThrough, Readable } from "node:stream";
 import { RpcSerialization, RpcServer } from "effect/unstable/rpc";
 import { createInterface } from "readline";
-import { Worker } from "node:worker_threads";
 import { monitorEventLoopDelay } from "node:perf_hooks";
 import * as Result$1 from "effect/Result";
 import * as Multipart from "effect/unstable/http/Multipart";
@@ -383,6 +386,7 @@ init_driver();
 var import_dist = /* @__PURE__ */ __toESM(require_dist$1(), 1);
 init_issue_id();
 init_projects();
+init_state_read_home();
 init_auto_commit();
 init_record();
 init_record_update();
@@ -709,7 +713,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const plan = readWorkspacePlanSync(workspacePath);
 			if (!plan || plan.plan.items.length === 0) throw new PlanEmpty({ id: issueId });
-			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-FlIgQ3ql.js");
+			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-wi9NWzs2.js");
 			const normalizedId = normalizeAgentId(issueId);
 			if ((await Effect.runPromise(getAgentState(normalizedId)))?.status === "running") throw new AgentAlreadyRunning({ id: issueId });
 			return {
@@ -740,7 +744,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			const { workspacePath, projectPath, issue } = opts;
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const sessionName = opts.sessionName ?? `planning-${issueId.toLowerCase()}`;
-			const { spawnPlanningSession } = await import("./spawn-planning-session-KC_UduxD.js");
+			const { spawnPlanningSession } = await import("./spawn-planning-session-qUC2VWu3.js");
 			const result = await spawnPlanningSession({
 				issue: {
 					id: issue.id,
@@ -773,14 +777,14 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	kill: (agentId) => Effect.tryPromise({
 		try: async () => {
-			const { stopAgent } = await import("./agents-FlIgQ3ql.js");
+			const { stopAgent } = await import("./agents-wi9NWzs2.js");
 			await Effect.runPromise(stopAgent(agentId));
 		},
 		catch: () => void 0
 	}).pipe(Effect.ignore),
 	message: (agentId, msg) => Effect.tryPromise({
 		try: async () => {
-			const { messageAgent } = await import("./agents-FlIgQ3ql.js");
+			const { messageAgent } = await import("./agents-wi9NWzs2.js");
 			await messageAgent(agentId, msg);
 		},
 		catch: (err) => new AgentStartError({
@@ -791,8 +795,8 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	deepWipe: (issueId, opts) => Effect.tryPromise({
 		try: async () => {
-			const { deepWipe } = await import("./workflows-D90rMOya.js");
-			const { resolveProjectFromIssueSync } = await import("./projects-9SkRpES9.js");
+			const { deepWipe } = await import("./workflows-BQu4RFQ-.js");
+			const { resolveProjectFromIssueSync } = await import("./projects-vjjcmiN8.js");
 			const project = resolveProjectFromIssueSync(issueId);
 			const projectPath = project?.projectPath ?? process.cwd();
 			await Effect.runPromise(deepWipe({
@@ -851,8 +855,8 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath, branch } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (existsSync$1(workspacePath)) return workspacePath;
-				const { createWorkspace } = await import("./workspace-manager-ZTdJAy9M.js");
-				const { loadProjectsConfigSync } = await import("./projects-9SkRpES9.js");
+				const { createWorkspace } = await import("./workspace-manager-CWT55qeI.js");
+				const { loadProjectsConfigSync } = await import("./projects-vjjcmiN8.js");
 				const { projects } = loadProjectsConfigSync();
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
@@ -887,7 +891,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
-				const { removeWorkspace } = await import("./workspace-manager-ZTdJAy9M.js");
+				const { removeWorkspace } = await import("./workspace-manager-CWT55qeI.js");
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
 					id: issueId,
@@ -918,7 +922,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 			try: async () => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
-				const { stopWorkspaceDocker } = await import("./workspace-manager-ZTdJAy9M.js");
+				const { stopWorkspaceDocker } = await import("./workspace-manager-CWT55qeI.js");
 				await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 			},
 			catch: () => void 0
@@ -987,7 +991,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 					join(workspacePath, ".devcontainer", "docker-compose.devcontainer.yml")
 				];
 				if (!composePaths.find((p) => existsSync$1(p))) {
-					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-DRqaAkBR.js");
+					const { ensureDevcontainerSync } = await import("./ensure-devcontainer-BZgOhRo7.js");
 					const ensure = ensureDevcontainerSync({
 						workspacePath,
 						issueId
@@ -3236,8 +3240,8 @@ var require_extension = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../../node_modules/.bun/ws@8.20.1/node_modules/ws/lib/websocket.js
 var require_websocket = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const EventEmitter$2 = __require("events");
-	const https = __require("https");
-	const http$1 = __require("http");
+	const https$1 = __require("https");
+	const http$2 = __require("http");
 	const net = __require("net");
 	const tls = __require("tls");
 	const { randomBytes: randomBytes$1, createHash: createHash$3 } = __require("crypto");
@@ -3796,7 +3800,7 @@ var require_websocket = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		const defaultPort = isSecure ? 443 : 80;
 		const key = randomBytes$1(16).toString("base64");
-		const request = isSecure ? https.request : http$1.request;
+		const request = isSecure ? https$1.request : http$2.request;
 		const protocolSet = /* @__PURE__ */ new Set();
 		let perMessageDeflate;
 		opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -4366,7 +4370,7 @@ var require_subprotocol = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#region ../../../node_modules/.bun/ws@8.20.1/node_modules/ws/lib/websocket-server.js
 var require_websocket_server = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const EventEmitter$1 = __require("events");
-	const http = __require("http");
+	const http$1 = __require("http");
 	const { Duplex } = __require("stream");
 	const { createHash: createHash$2 } = __require("crypto");
 	const extension = require_extension();
@@ -4441,8 +4445,8 @@ var require_websocket_server = /* @__PURE__ */ __commonJSMin(((exports, module)
 			};
 			if (options.port == null && !options.server && !options.noServer || options.port != null && (options.server || options.noServer) || options.server && options.noServer) throw new TypeError("One and only one of the \"port\", \"server\", or \"noServer\" options must be specified");
 			if (options.port != null) {
-				this._server = http.createServer((req, res) => {
-					const body = http.STATUS_CODES[426];
+				this._server = http$1.createServer((req, res) => {
+					const body = http$1.STATUS_CODES[426];
 					res.writeHead(426, {
 						"Content-Length": body.length,
 						"Content-Type": "text/plain"
@@ -4710,7 +4714,7 @@ var require_websocket_server = /* @__PURE__ */ __commonJSMin(((exports, module)
 	* @private
 	*/
 	function abortHandshake(socket, code, message, headers) {
-		message = message || http.STATUS_CODES[code];
+		message = message || http$1.STATUS_CODES[code];
 		headers = {
 			Connection: "close",
 			"Content-Type": "text/html",
@@ -4718,7 +4722,7 @@ var require_websocket_server = /* @__PURE__ */ __commonJSMin(((exports, module)
 			...headers
 		};
 		socket.once("finish", socket.destroy);
-		socket.end(`HTTP/1.1 ${code} ${http.STATUS_CODES[code]}\r\n` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message);
+		socket.end(`HTTP/1.1 ${code} ${http$1.STATUS_CODES[code]}\r\n` + Object.keys(headers).map((h) => `${h}: ${headers[h]}`).join("\r\n") + "\r\n\r\n" + message);
 	}
 	/**
 	* Emit a `'wsClientError'` event on a `WebSocketServer` if there is at least
@@ -4857,7 +4861,7 @@ init_tmux();
 init_config();
 const reauthSessions = /* @__PURE__ */ new Map();
 const SESSION_MAX_AGE_MS = 3600 * 1e3;
-const readJsonBody$18 = Effect.gen(function* () {
+const readJsonBody$19 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	return text ? JSON.parse(text) : {};
 });
@@ -4962,7 +4966,7 @@ const postCodexReauthRoute = HttpRouter.add("POST", "/api/settings/codex-reauth"
 const postCodexReauthStatusRoute = HttpRouter.add("POST", "/api/settings/codex-reauth/status", httpHandler(Effect.gen(function* () {
 	const originError = rejectInvalidOrigin(yield* HttpServerRequest.HttpServerRequest);
 	if (originError) return originError;
-	const body = yield* readJsonBody$18;
+	const body = yield* readJsonBody$19;
 	const sessionName = typeof body.session === "string" ? body.session : "";
 	const token = typeof body.token === "string" ? body.token : "";
 	const session = getLiveReauthSession(sessionName);
@@ -5033,7 +5037,7 @@ function parseControlMessage(message) {
 function sendControl(ws, payload) {
 	if (ws.readyState === import_websocket.default.OPEN) ws.send(`\u0000${JSON.stringify(payload)}`);
 }
-function rejectUpgrade(socket, status, message) {
+function rejectUpgrade$1(socket, status, message) {
 	socket.write(`HTTP/1.1 ${status} ${message}\r\nConnection: close\r\nContent-Length: 0\r\n\r\n`);
 	socket.destroy();
 }
@@ -5127,7 +5131,7 @@ function setupTerminalWebSocket(server) {
 		if (new URL(request.url || "", `http://${request.headers.host}`).pathname === "/ws/terminal") {
 			const auth = authorizeTerminalUpgrade(request);
 			if (!auth.ok) {
-				rejectUpgrade(socket, auth.status, auth.message);
+				rejectUpgrade$1(socket, auth.status, auth.message);
 				return;
 			}
 			wss.handleUpgrade(request, socket, head, (ws) => {
@@ -5470,7 +5474,7 @@ function setupTerminalWebSocket(server) {
 	console.log("[ws-terminal] Raw WebSocket terminal handler installed on /ws/terminal");
 }
 //#endregion
-//#region ../../../node_modules/.bun/@ai-sdk+provider@3.0.10/node_modules/@ai-sdk/provider/dist/index.mjs
+//#region ../../lib/installers/node-runtime.ts
 init_briefing_freshness();
 init_agent_runtime_mirror();
 init_behavior();
@@ -5489,6 +5493,1289 @@ init_transcript_landing();
 init_operator_interventions();
 init_agents$1();
 init_runtime_census();
+const MINIMUM_NODE_MAJOR = 24;
+const OPEN_KNOWLEDGE_NODE_ENV = "OVERDECK_OPEN_KNOWLEDGE_NODE";
+const OVERDECK_SHIM_MARKER = "overdeck-managed shim";
+const MANAGERS = [
+	{
+		name: "nvm",
+		envVar: "NVM_DIR",
+		defaultRoots: (home) => [join(home, ".nvm"), join(home, ".config", "nvm")],
+		versionsDirectory: (root) => join(root, "versions", "node"),
+		nodePath: (versionsDirectory, versionDirectory) => join(versionsDirectory, versionDirectory, "bin", "node")
+	},
+	{
+		name: "fnm",
+		envVar: "FNM_DIR",
+		defaultRoots: (home) => [join(home, ".local", "share", "fnm"), join(home, "Library", "Application Support", "fnm")],
+		versionsDirectory: (root) => join(root, "node-versions"),
+		nodePath: (versionsDirectory, versionDirectory) => join(versionsDirectory, versionDirectory, "installation", "bin", "node")
+	},
+	{
+		name: "volta",
+		envVar: "VOLTA_HOME",
+		defaultRoots: (home) => [join(home, ".volta")],
+		versionsDirectory: (root) => join(root, "tools", "image", "node"),
+		nodePath: (versionsDirectory, versionDirectory) => join(versionsDirectory, versionDirectory, "bin", "node")
+	},
+	{
+		name: "mise",
+		envVar: "MISE_DATA_DIR",
+		defaultRoots: (home) => [join(home, ".local", "share", "mise")],
+		versionsDirectory: (root) => join(root, "installs", "node"),
+		nodePath: (versionsDirectory, versionDirectory) => join(versionsDirectory, versionDirectory, "bin", "node")
+	},
+	{
+		name: "asdf",
+		envVar: "ASDF_DATA_DIR",
+		defaultRoots: (home) => [join(home, ".asdf")],
+		versionsDirectory: (root) => join(root, "installs", "nodejs"),
+		nodePath: (versionsDirectory, versionDirectory) => join(versionsDirectory, versionDirectory, "bin", "node")
+	}
+];
+async function resolveNode24Runtime(options) {
+	const env = options.env ?? process.env;
+	const listDir = options.listDir ?? readdir;
+	const home = (options.homedir ?? homedir$1)();
+	const override = env[OPEN_KNOWLEDGE_NODE_ENV]?.trim();
+	if (override) try {
+		if (!isAbsolute(override)) throw new Error("the path must be absolute");
+		const nodePath = await (options.realpath ?? realpath)(override);
+		await validateNode24(nodePath, options.runCommand);
+		return {
+			kind: "runtime",
+			nodePath,
+			source: "override"
+		};
+	} catch (error) {
+		throw new Error(`${OPEN_KNOWLEDGE_NODE_ENV} points to an invalid Node 24+ binary at ${override}: ${errorMessage$3(error)}`);
+	}
+	const detectedManagers = await detectManagers(env, home, listDir);
+	if (detectedManagers.length === 0) return { kind: "none" };
+	const eligibleCandidates = (await Promise.all(detectedManagers.map((manager) => listRuntimeCandidates(manager, listDir)))).flat().filter((candidate) => candidate.version.major >= MINIMUM_NODE_MAJOR).sort((left, right) => compareVersions(right.version, left.version));
+	for (const candidate of eligibleCandidates) try {
+		await validateNode24(candidate.nodePath, options.runCommand);
+		return {
+			kind: "runtime",
+			nodePath: candidate.nodePath,
+			source: candidate.manager
+		};
+	} catch {}
+	return {
+		kind: "manager-without-24",
+		manager: detectedManagers[0].definition.name
+	};
+}
+async function readShimOwnership(shimPath) {
+	try {
+		return (await readFile(shimPath, "utf8")).includes(OVERDECK_SHIM_MARKER) ? "overdeck" : "foreign";
+	} catch (error) {
+		if (error.code === "ENOENT") return "absent";
+		throw error;
+	}
+}
+async function writeOkShim(options) {
+	const shimPath = options.shimPath ?? join(homedir$1(), ".local", "bin", "ok");
+	if (await readShimOwnership(shimPath) === "foreign") throw new Error(`Refusing to overwrite ${shimPath} because it is not an Overdeck-managed shim. Delete or fix that file, then retry.`);
+	const content = [
+		"#!/bin/sh",
+		"# overdeck-managed shim (PAN-2984): pins open-knowledge to a Node 24 runtime.",
+		"# Regenerate with `pan knowledge open`; safe to delete.",
+		`exec "${escapeDoubleQuotedShell(options.nodePath)}" "${escapeDoubleQuotedShell(options.entryScript)}" "$@"`,
+		""
+	].join("\n");
+	await mkdir(dirname(shimPath), { recursive: true });
+	await writeFile(shimPath, content, { mode: 493 });
+	await chmod(shimPath, 493);
+	return shimPath;
+}
+async function detectManagers(env, home, listDir) {
+	const detected = [];
+	for (const definition of MANAGERS) {
+		const configuredRoot = env[definition.envVar]?.trim();
+		const roots = unique([...configuredRoot ? [configuredRoot] : [], ...definition.defaultRoots(home)]);
+		for (const root of roots) if (await directoryExists(root, listDir)) {
+			detected.push({
+				definition,
+				root
+			});
+			break;
+		}
+	}
+	return detected;
+}
+async function listRuntimeCandidates(manager, listDir) {
+	const versionsDirectory = manager.definition.versionsDirectory(manager.root);
+	let versionDirectories;
+	try {
+		versionDirectories = await listDir(versionsDirectory);
+	} catch {
+		return [];
+	}
+	const candidates = [];
+	for (const versionDirectory of versionDirectories) {
+		const version = parseVersion$1(versionDirectory);
+		if (!version) continue;
+		const nodePath = manager.definition.nodePath(versionsDirectory, versionDirectory);
+		if (!await fileAppearsInDirectory(nodePath, listDir)) continue;
+		candidates.push({
+			manager: manager.definition.name,
+			nodePath,
+			version
+		});
+	}
+	return candidates;
+}
+async function directoryExists(directory, listDir) {
+	try {
+		await listDir(directory);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function fileAppearsInDirectory(filePath, listDir) {
+	try {
+		return (await listDir(dirname(filePath))).includes("node");
+	} catch {
+		return false;
+	}
+}
+async function validateNode24(nodePath, runCommand) {
+	const result = await runCommand(nodePath, ["--version"]);
+	const version = parseVersion$1(result.stdout.trim());
+	if (!version || version.major < MINIMUM_NODE_MAJOR) {
+		const reported = result.stdout.trim() || "no version";
+		throw new Error(`expected Node 24+ but ${nodePath} reported ${reported}`);
+	}
+}
+function parseVersion$1(value) {
+	const match = /^v?(\d+)(?:\.(\d+))?(?:\.(\d+))?/.exec(value);
+	if (!match) return null;
+	return {
+		major: Number(match[1]),
+		minor: Number(match[2] ?? 0),
+		patch: Number(match[3] ?? 0)
+	};
+}
+function compareVersions(left, right) {
+	return left.major - right.major || left.minor - right.minor || left.patch - right.patch;
+}
+function unique(values) {
+	return [...new Set(values)];
+}
+function escapeDoubleQuotedShell(value) {
+	return value.replace(/[\\"$`]/g, "\\$&");
+}
+function errorMessage$3(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region ../../lib/installers/open-knowledge.ts
+init_paths();
+const OPEN_KNOWLEDGE_PACKAGE = "@inkeep/open-knowledge";
+const MANUAL_INSTALL_COMMAND = `npm install -g ${OPEN_KNOWLEDGE_PACKAGE}`;
+const DEFAULT_START_RETRY_DELAY_MS = 250;
+const DEFAULT_START_MAX_ATTEMPTS = 40;
+const NVM_INSTALL_COMMAND = "PROFILE=/dev/null bash -c 'curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash'";
+var OpenKnowledgeError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "OpenKnowledgeError";
+	}
+};
+var OpenKnowledgeSetupRequiredError = class extends OpenKnowledgeError {
+	constructor(plan) {
+		super(plan.steps.join(" "));
+		this.plan = plan;
+		this.name = "OpenKnowledgeSetupRequiredError";
+	}
+};
+async function ensureOpenKnowledge(options = {}) {
+	const runCommand = options.runCommand ?? runCommandWithSpawn;
+	const existingCommand = await findExistingOpenKnowledgeCommand(runCommand, resolveShimPath(options));
+	if (existingCommand) return {
+		status: "already-installed",
+		command: existingCommand
+	};
+	if (!options.autoInstall) throw new OpenKnowledgeError(`open-knowledge is not installed. Install it manually with \`${MANUAL_INSTALL_COMMAND}\`.`);
+	const plan = await (options.resolveSetupPlan ?? (() => resolveOpenKnowledgeInstallPlan({
+		...options,
+		runCommand
+	})))();
+	if (plan.kind === "ready") return {
+		status: "already-installed",
+		command: plan.command
+	};
+	if (plan.kind === "install-node-via-manager" || plan.kind === "install-nvm") throw new OpenKnowledgeSetupRequiredError(plan);
+	let command;
+	try {
+		command = await (options.executeSetupPlan ?? ((setupPlan) => executeOpenKnowledgeSetupPlan(setupPlan, {
+			...options,
+			runCommand
+		})))(plan);
+	} catch (error) {
+		throw await installationError(error, runCommand);
+	}
+	const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+	const retryDelayMs = options.retryDelayMs ?? 500;
+	const maxHealthAttempts = options.maxHealthAttempts ?? 10;
+	for (let attempt = 1; attempt <= maxHealthAttempts; attempt += 1) {
+		if (await openKnowledgeBinaryWorks(command, runCommand)) return {
+			status: "installed",
+			command
+		};
+		if (attempt < maxHealthAttempts) await sleep(retryDelayMs);
+	}
+	throw await installationError(/* @__PURE__ */ new Error(`the ok binary did not pass \`${command} --version\` after installation`), runCommand);
+}
+async function resolveOpenKnowledgeSetupPlan(options = {}) {
+	const runCommand = options.runCommand ?? runCommandWithSpawn;
+	const existingCommand = await findExistingOpenKnowledgeCommand(runCommand, resolveShimPath(options));
+	if (existingCommand) return {
+		kind: "ready",
+		command: existingCommand
+	};
+	return resolveOpenKnowledgeInstallPlan({
+		...options,
+		runCommand
+	});
+}
+async function executeOpenKnowledgeSetupPlan(plan, options = {}) {
+	const runCommand = options.runCommand ?? runCommandWithSpawn;
+	if (plan.kind === "ready") return plan.command;
+	if (plan.kind === "install-under-runtime") return installOpenKnowledgeUnderRuntime(plan.nodePath, {
+		...options,
+		runCommand
+	});
+	const installCommand = plan.kind === "install-nvm" ? NVM_INSTALL_COMMAND : plan.installCommand;
+	await runCommand("bash", ["-c", installCommand]);
+	const nextPlan = await resolveOpenKnowledgeInstallPlan({
+		...options,
+		runCommand
+	});
+	if (nextPlan.kind === plan.kind) throw new OpenKnowledgeError(`Setup command completed but did not make a Node 24 runtime available: ${installCommand}`);
+	return executeOpenKnowledgeSetupPlan(nextPlan, {
+		...options,
+		runCommand
+	});
+}
+async function startReadOnlyOpenKnowledgeServer(bundlePath, options = {}) {
+	const prepareSnapshot = options.prepareSnapshot ?? prepareOpenKnowledgeSnapshot;
+	const runtimeBundlePath = await readOnlyOpenKnowledgeSnapshotPath(bundlePath, options.snapshotRoot);
+	const getStatus = options.getStatus ?? ((path) => getOpenKnowledgeStatus(path, options.runCommand, options.okCommand));
+	if (!liveStatus(await getStatus(runtimeBundlePath))) await prepareSnapshot(bundlePath, options.snapshotRoot);
+	return startOpenKnowledgeServer(runtimeBundlePath, {
+		...options,
+		getStatus
+	});
+}
+async function prepareOpenKnowledgeSnapshot(bundlePath, snapshotRoot = join(getOverdeckHome(), "cache", "knowledge-viewer")) {
+	const source = await realpath(bundlePath);
+	const destination = await readOnlyOpenKnowledgeSnapshotPath(source, snapshotRoot);
+	const parent = dirname(destination);
+	await mkdir(parent, { recursive: true });
+	const temporaryRoot = await mkdtemp(join(parent, ".snapshot-"));
+	const temporaryBundle = join(temporaryRoot, "bundle");
+	try {
+		await cp(source, temporaryBundle, {
+			recursive: true,
+			dereference: true,
+			filter: (path) => {
+				const relativePath = relative(source, path);
+				if (!relativePath) return true;
+				const firstSegment = relativePath.split(sep)[0];
+				return firstSegment !== ".git" && firstSegment !== ".ok";
+			}
+		});
+		await runCommandWithSpawn("git", [
+			"init",
+			"--quiet",
+			temporaryBundle
+		]);
+		await rm(destination, {
+			recursive: true,
+			force: true
+		});
+		await rename(temporaryBundle, destination);
+	} finally {
+		await rm(temporaryRoot, {
+			recursive: true,
+			force: true
+		});
+	}
+	return destination;
+}
+async function readOnlyOpenKnowledgeSnapshotPath(bundlePath, snapshotRoot = join(getOverdeckHome(), "cache", "knowledge-viewer")) {
+	let resolved = bundlePath;
+	try {
+		resolved = await realpath(bundlePath);
+	} catch {}
+	return join(snapshotRoot, createHash$1("sha256").update(resolved).digest("hex").slice(0, 24), "bundle");
+}
+async function getOpenKnowledgeStatus(bundlePath, runCommand = runCommandWithSpawn, okCommand = "ok") {
+	try {
+		const result = await runCommand(okCommand, [
+			"--cwd",
+			bundlePath,
+			"status",
+			"--json"
+		]);
+		const parsed = JSON.parse(result.stdout);
+		return {
+			server: normalizeProcessStatus(parsed.server, "server"),
+			ui: normalizeProcessStatus(parsed.ui, "ui")
+		};
+	} catch {
+		return missingStatus();
+	}
+}
+async function startOpenKnowledgeServer(bundlePath, options = {}) {
+	const runCommand = options.runCommand ?? runCommandWithSpawn;
+	const okCommand = options.okCommand ?? "ok";
+	const getStatus = options.getStatus ?? ((path) => getOpenKnowledgeStatus(path, runCommand, okCommand));
+	const fetchImpl = options.fetchImpl ?? fetch;
+	const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+	const retryDelayMs = options.retryDelayMs ?? DEFAULT_START_RETRY_DELAY_MS;
+	const maxHealthAttempts = options.maxHealthAttempts ?? DEFAULT_START_MAX_ATTEMPTS;
+	const reused = await readyResult(await getStatus(bundlePath), options.host ?? "127.0.0.1", fetchImpl);
+	if (reused) return {
+		...reused,
+		process: null,
+		owned: false,
+		reused: true,
+		runtimeBundlePath: bundlePath
+	};
+	if (!await (options.isInitialized ?? openKnowledgeIsInitialized)(bundlePath)) {
+		if (options.initializeIfNeeded === false) throw new OpenKnowledgeError(`open-knowledge is not initialized for ${bundlePath}. Run \`ok init\` first.`);
+		await runCommand(okCommand, [
+			"--cwd",
+			bundlePath,
+			"init",
+			"--no-mcp",
+			"--no-skills",
+			"--local-only",
+			"--content-dir",
+			".",
+			"--json"
+		]);
+	}
+	const host = options.host ?? "127.0.0.1";
+	const missingPortCount = Number(options.apiPort === void 0) + Number(options.uiPort === void 0);
+	const availablePorts = missingPortCount > 0 ? await (options.getAvailablePorts ?? findAvailablePorts)(missingPortCount, host) : [];
+	const apiPort = options.apiPort ?? availablePorts.shift();
+	const uiPort = options.uiPort ?? availablePorts.shift();
+	if (apiPort === void 0 || uiPort === void 0 || apiPort === uiPort) throw new OpenKnowledgeError("Could not allocate distinct API and UI ports for open-knowledge.");
+	const args = [
+		"--cwd",
+		bundlePath,
+		"start",
+		"--port",
+		String(apiPort),
+		"--ui-port",
+		String(uiPort),
+		"--host",
+		host,
+		"--mode",
+		options.mode ?? "browser"
+	];
+	if (options.openBrowser) args.push("--open");
+	const child = (options.spawnProcess ?? ((command, commandArgs, spawnOptions) => spawn(command, commandArgs, spawnOptions)))(okCommand, args, { stdio: "ignore" });
+	await waitForSpawn(child);
+	for (let attempt = 1; attempt <= maxHealthAttempts; attempt += 1) {
+		if (child.exitCode != null) throw new OpenKnowledgeError(`open-knowledge exited before becoming ready (code ${child.exitCode})`);
+		const ready = await readyResult(await getStatus(bundlePath), host, fetchImpl);
+		if (ready) return {
+			...ready,
+			process: child,
+			owned: true,
+			reused: false,
+			runtimeBundlePath: bundlePath
+		};
+		if (attempt < maxHealthAttempts) await sleep(retryDelayMs);
+	}
+	child.kill("SIGTERM");
+	throw new OpenKnowledgeError(`open-knowledge viewer did not become healthy for ${bundlePath}`);
+}
+function liveStatus(status) {
+	return status.server.alive && status.ui.alive && Number.isInteger(status.server.port) && Number.isInteger(status.ui.port);
+}
+async function readyResult(status, host, fetchImpl) {
+	if (!liveStatus(status)) return null;
+	const apiPort = status.server.port;
+	const port = status.ui.port;
+	const url = `http://${formatUrlHost(host)}:${port}`;
+	try {
+		if (!(await fetchImpl(url, { method: "GET" })).ok) return null;
+	} catch {
+		return null;
+	}
+	return {
+		port,
+		apiPort,
+		url
+	};
+}
+function normalizeProcessStatus(value, name) {
+	if (!value || typeof value !== "object") return {
+		name,
+		state: "missing",
+		alive: false
+	};
+	return {
+		name,
+		state: typeof value.state === "string" ? value.state : "missing",
+		alive: value.alive === true,
+		...Number.isInteger(value.pid) ? { pid: value.pid } : {},
+		...Number.isInteger(value.port) ? { port: value.port } : {}
+	};
+}
+function missingStatus() {
+	return {
+		server: {
+			name: "server",
+			state: "missing",
+			alive: false
+		},
+		ui: {
+			name: "ui",
+			state: "missing",
+			alive: false
+		}
+	};
+}
+async function findExistingOpenKnowledgeCommand(runCommand, shimPath) {
+	if (await openKnowledgeBinaryWorks("ok", runCommand)) return "ok";
+	if (await openKnowledgeBinaryWorks(shimPath, runCommand)) return shimPath;
+	return null;
+}
+async function openKnowledgeBinaryWorks(command, runCommand) {
+	try {
+		await runCommand(command, ["--version"]);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function resolveOpenKnowledgeInstallPlan(options) {
+	const runtime = await (options.resolveRuntime ?? resolveNode24Runtime)({
+		env: options.env,
+		homedir: options.homedir,
+		listDir: options.listDir,
+		realpath: options.realpath,
+		runCommand: options.runCommand
+	});
+	if (runtime.kind === "runtime") return {
+		kind: "install-under-runtime",
+		source: runtime.source,
+		nodePath: runtime.nodePath,
+		steps: [`Install ${OPEN_KNOWLEDGE_PACKAGE} under the Node 24+ runtime at ${runtime.nodePath}.`, "Write an Overdeck-managed shim at ~/.local/bin/ok that pins only the viewer to this runtime. Your default Node and shell configuration will not change."]
+	};
+	if (runtime.kind === "manager-without-24") {
+		const installCommand = managerInstallCommand(runtime.manager);
+		return {
+			kind: "install-node-via-manager",
+			manager: runtime.manager,
+			installCommand,
+			steps: [managerInstallStep(runtime.manager, installCommand)]
+		};
+	}
+	return {
+		kind: "install-nvm",
+		steps: [
+			`Install nvm with the official installer while suppressing shell-profile edits: \`${NVM_INSTALL_COMMAND}\`.`,
+			"Install Node 24 inside the setup subprocess, then restore the existing nvm default alias exactly—or remove the alias if none existed—before pinning only the OpenKnowledge viewer to that runtime.",
+			`For manual setup instead, install Node 24+ yourself, run \`${MANUAL_INSTALL_COMMAND}\`, and retry.`
+		],
+		manualCommand: MANUAL_INSTALL_COMMAND
+	};
+}
+async function installOpenKnowledgeUnderRuntime(nodePath, options) {
+	const runtimeBin = dirname(nodePath);
+	const runtimePrefix = dirname(runtimeBin);
+	const env = options.env ?? process.env;
+	const pathValue = env.PATH ? `${runtimeBin}${delimiter}${env.PATH}` : runtimeBin;
+	await options.runCommand(join(runtimeBin, "npm"), [
+		"install",
+		"-g",
+		OPEN_KNOWLEDGE_PACKAGE
+	], { env: {
+		...env,
+		PATH: pathValue
+	} });
+	const entryScript = await (options.realpath ?? realpath)(join(runtimePrefix, "bin", "ok"));
+	const shimPath = resolveShimPath(options);
+	return (options.writeShim ?? writeOkShim)({
+		nodePath,
+		entryScript,
+		shimPath
+	});
+}
+function resolveShimPath(options) {
+	return options.shimPath ?? join((options.homedir ?? homedir$1)(), ".local", "bin", "ok");
+}
+function managerInstallCommand(manager) {
+	switch (manager) {
+		case "nvm": return "bash -c 'NVM_ROOT=\"${NVM_DIR:-$HOME/.nvm}\"; [ -f \"$NVM_ROOT/nvm.sh\" ] || NVM_ROOT=\"$HOME/.config/nvm\"; . \"$NVM_ROOT/nvm.sh\"; DEFAULT_ALIAS_PATH=\"$NVM_ROOT/alias/default\"; DEFAULT_ALIAS_BACKUP=\"$(mktemp)\"; HAD_DEFAULT=0; if [ -f \"$DEFAULT_ALIAS_PATH\" ]; then HAD_DEFAULT=1; cp \"$DEFAULT_ALIAS_PATH\" \"$DEFAULT_ALIAS_BACKUP\"; fi; restore_default() { if [ \"$HAD_DEFAULT\" -eq 1 ]; then mkdir -p \"$(dirname \"$DEFAULT_ALIAS_PATH\")\"; cp \"$DEFAULT_ALIAS_BACKUP\" \"$DEFAULT_ALIAS_PATH\"; else rm -f \"$DEFAULT_ALIAS_PATH\"; fi; rm -f \"$DEFAULT_ALIAS_BACKUP\"; }; trap restore_default EXIT; nvm install --no-progress 24'";
+		case "fnm": return "fnm install 24";
+		case "volta": return "volta fetch node@24";
+		case "mise": return "mise install node@24";
+		case "asdf": return "asdf install nodejs latest:24";
+	}
+}
+function managerInstallStep(manager, installCommand) {
+	return `Install Node 24 with ${manager === "nvm" ? "nvm" : manager === "fnm" ? "fnm" : manager[0].toUpperCase() + manager.slice(1)} by running \`${installCommand}\`. ${manager === "nvm" ? "This shell-local install restores the existing default alias exactly, removes any newly created alias when none existed, and does not change your shell configuration." : `This installs a runtime for OpenKnowledge without changing your default Node or shell configuration.`}`;
+}
+async function installationError(error, runCommand) {
+	const version = await readNodeVersion(runCommand);
+	const major = version ? Number.parseInt(version.replace(/^v/, "").split(".")[0] ?? "", 10) : NaN;
+	if (version && Number.isFinite(major) && major < 24) return new OpenKnowledgeError(`open-knowledge requires Node 24+; found ${version}. Install Node 24+ or run '/okf open --no-install' after installing manually.`);
+	return new OpenKnowledgeError(`Failed to install open-knowledge with \`${MANUAL_INSTALL_COMMAND}\`: ${error instanceof Error ? error.message : String(error)}`);
+}
+async function readNodeVersion(runCommand) {
+	try {
+		const result = await runCommand("node", ["--version"]);
+		return result.stdout.trim() || result.stderr.trim() || null;
+	} catch {
+		return null;
+	}
+}
+async function openKnowledgeIsInitialized(bundlePath) {
+	try {
+		await access(join(bundlePath, ".ok", "config.yml"));
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function findAvailablePorts(count, host) {
+	const servers = Array.from({ length: count }, () => createServer());
+	try {
+		return await Promise.all(servers.map((server) => new Promise((resolve, reject) => {
+			server.once("error", reject);
+			server.listen(0, host, () => {
+				const address = server.address();
+				if (!address || typeof address === "string") {
+					reject(new OpenKnowledgeError("Could not resolve an available open-knowledge port."));
+					return;
+				}
+				resolve(address.port);
+			});
+		})));
+	} finally {
+		await Promise.all(servers.map((server) => new Promise((resolve) => {
+			if (!server.listening) {
+				resolve();
+				return;
+			}
+			server.close(() => resolve());
+		})));
+	}
+}
+async function waitForSpawn(child) {
+	await new Promise((resolve, reject) => {
+		const onError = (error) => {
+			child.removeListener("spawn", onSpawn);
+			reject(error);
+		};
+		const onSpawn = () => {
+			child.removeListener("error", onError);
+			resolve();
+		};
+		child.once("error", onError);
+		child.once("spawn", onSpawn);
+	});
+}
+async function runCommandWithSpawn(command, args, options = {}) {
+	return new Promise((resolve, reject) => {
+		const child = spawn(command, args, {
+			...options,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.setEncoding("utf8");
+		child.stderr?.setEncoding("utf8");
+		child.stdout?.on("data", (chunk) => {
+			stdout += chunk;
+		});
+		child.stderr?.on("data", (chunk) => {
+			stderr += chunk;
+		});
+		child.once("error", reject);
+		child.once("exit", (code) => {
+			if (code === 0) {
+				resolve({
+					stdout,
+					stderr
+				});
+				return;
+			}
+			reject(new OpenKnowledgeError(`${command} ${args.join(" ")} exited with code ${code}: ${stderr.trim()}`));
+		});
+	});
+}
+function formatUrlHost(host) {
+	return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+}
+//#endregion
+//#region services/knowledge-viewer.ts
+init_injection();
+init_projects();
+function createKnowledgeViewerService(dependencies = {}) {
+	const resolveBundle = dependencies.resolveBundle ?? resolveBundleForProject;
+	const ensure = dependencies.ensure ?? ((options) => ensureOpenKnowledge(options));
+	const resolveSetupPlan = dependencies.resolveSetupPlan ?? resolveOpenKnowledgeSetupPlan;
+	const start = dependencies.start ?? ((bundlePath, options) => startReadOnlyOpenKnowledgeServer(bundlePath, options));
+	const stop = dependencies.stop ?? stopOpenKnowledgeWithSpawn;
+	const fetchImpl = dependencies.fetchImpl ?? fetch;
+	const entries = /* @__PURE__ */ new Map();
+	const starts = /* @__PURE__ */ new Map();
+	let installedCache = null;
+	let missingInstallationCache = null;
+	async function getStatus(projectKey) {
+		const bundlePath = await resolveBundle(projectKey);
+		if (!bundlePath) return unavailableStatus(projectKey, starts.has(projectKey), "No OKF bundle is configured. Run `/okf init` first.");
+		if (!installedCache && !missingInstallationCache) try {
+			installedCache = await ensure({ autoInstall: false });
+		} catch (error) {
+			let message = errorMessage$2(error);
+			let setupPlan;
+			try {
+				const plan = await resolveSetupPlan();
+				if (plan.kind !== "ready") setupPlan = {
+					kind: plan.kind,
+					steps: plan.steps
+				};
+			} catch (planError) {
+				message = errorMessage$2(planError);
+			}
+			missingInstallationCache = {
+				message,
+				...setupPlan ? { setupPlan } : {}
+			};
+		}
+		const installed = installedCache !== null;
+		const installMessage = missingInstallationCache?.message;
+		const setupPlan = missingInstallationCache?.setupPlan;
+		const entry = entries.get(projectKey);
+		if (entry && isProcessLive(entry)) {
+			const probe = await probeViewer(entry.url, fetchImpl);
+			if (probe.healthy) return {
+				projectKey,
+				bundleConfigured: true,
+				installed,
+				starting: starts.has(projectKey),
+				running: true,
+				bundlePath,
+				port: entry.port,
+				apiPort: entry.apiPort,
+				url: entry.url,
+				embeddable: probe.embeddable,
+				...installMessage ? { message: installMessage } : {},
+				...setupPlan ? { setupPlan } : {}
+			};
+		}
+		if (entry) await stopEntry(projectKey, entry);
+		return {
+			projectKey,
+			bundleConfigured: true,
+			installed,
+			starting: starts.has(projectKey),
+			running: false,
+			bundlePath,
+			...installMessage ? { message: installMessage } : {},
+			...setupPlan ? { setupPlan } : {}
+		};
+	}
+	function getOrStartViewer(projectKey) {
+		const inFlight = starts.get(projectKey);
+		if (inFlight) return inFlight;
+		const promise = startViewer(projectKey).finally(() => {
+			if (starts.get(projectKey) === promise) starts.delete(projectKey);
+		});
+		starts.set(projectKey, promise);
+		return promise;
+	}
+	async function startViewer(projectKey) {
+		const status = await getStatus(projectKey);
+		if (!status.bundleConfigured || !status.installed || status.running) return status;
+		const okCommand = installedCache?.command ?? "ok";
+		let started;
+		try {
+			started = await start(status.bundlePath, {
+				openBrowser: false,
+				okCommand
+			});
+		} catch (error) {
+			installedCache = null;
+			missingInstallationCache = null;
+			throw error;
+		}
+		const entry = {
+			bundlePath: status.bundlePath,
+			runtimeBundlePath: started.runtimeBundlePath,
+			okCommand,
+			process: started.process,
+			owned: started.owned,
+			port: started.port,
+			apiPort: started.apiPort,
+			url: started.url,
+			exited: false
+		};
+		entries.set(projectKey, entry);
+		started.process?.once("exit", () => {
+			entry.exited = true;
+			if (entries.get(projectKey) === entry) entries.delete(projectKey);
+		});
+		const probe = await probeViewer(started.url, fetchImpl);
+		if (!probe.healthy) {
+			await stopEntry(projectKey, entry);
+			throw new Error(`open-knowledge viewer did not remain healthy at ${started.url}`);
+		}
+		return {
+			projectKey,
+			bundleConfigured: true,
+			installed: true,
+			starting: false,
+			running: true,
+			bundlePath: entry.bundlePath,
+			port: entry.port,
+			apiPort: entry.apiPort,
+			url: entry.url,
+			embeddable: probe.embeddable
+		};
+	}
+	async function stopEntry(projectKey, entry) {
+		if (entries.get(projectKey) === entry) entries.delete(projectKey);
+		if (!entry.owned) return;
+		try {
+			await stop(entry.runtimeBundlePath, entry.okCommand);
+		} catch {}
+		if (isProcessLive(entry)) entry.process?.kill("SIGTERM");
+	}
+	function invalidateInstallationCache() {
+		installedCache = null;
+		missingInstallationCache = null;
+	}
+	async function stopAll() {
+		await Promise.allSettled(starts.values());
+		starts.clear();
+		const active = [...entries.entries()];
+		entries.clear();
+		await Promise.all(active.map(async ([projectKey, entry]) => stopEntry(projectKey, entry)));
+	}
+	return {
+		getStatus,
+		getOrStartViewer,
+		invalidateInstallationCache,
+		stopAll
+	};
+}
+async function resolveBundleForProject(projectKey) {
+	const project = loadProjectsConfigSync().projects[projectKey];
+	if (!project) return null;
+	return resolveKnowledgeBundleRoot({ projectPath: project.path });
+}
+function unavailableStatus(projectKey, starting, message) {
+	return {
+		projectKey,
+		bundleConfigured: false,
+		installed: false,
+		starting,
+		running: false,
+		message
+	};
+}
+function isProcessLive(entry) {
+	return entry.process === null || !entry.exited && entry.process.exitCode == null;
+}
+async function probeViewer(url, fetchImpl) {
+	try {
+		const response = await fetchImpl(url, { method: "GET" });
+		return {
+			healthy: response.ok,
+			embeddable: response.ok && responseAllowsEmbedding(response.headers)
+		};
+	} catch {
+		return {
+			healthy: false,
+			embeddable: false
+		};
+	}
+}
+function responseAllowsEmbedding(headers) {
+	const frameOptions = headers.get("x-frame-options")?.trim().toLowerCase();
+	if (frameOptions === "deny" || frameOptions === "sameorigin") return false;
+	const frameAncestors = (headers.get("content-security-policy")?.toLowerCase() ?? "").match(/(?:^|;)\s*frame-ancestors\s+([^;]+)/)?.[1]?.trim();
+	if (!frameAncestors) return true;
+	return frameAncestors !== "'none'" && frameAncestors !== "'self'";
+}
+async function stopOpenKnowledgeWithSpawn(bundlePath, okCommand = "ok") {
+	await new Promise((resolve, reject) => {
+		const child = spawn(okCommand, [
+			"--cwd",
+			bundlePath,
+			"stop"
+		], { stdio: "ignore" });
+		child.once("error", reject);
+		child.once("exit", (code) => {
+			if (code === 0) resolve();
+			else reject(/* @__PURE__ */ new Error(`ok stop exited with code ${code}`));
+		});
+	});
+}
+function errorMessage$2(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+const defaultKnowledgeViewerService = createKnowledgeViewerService();
+const getKnowledgeViewerStatus = (projectKey) => defaultKnowledgeViewerService.getStatus(projectKey);
+const getOrStartViewer = (projectKey) => defaultKnowledgeViewerService.getOrStartViewer(projectKey);
+const invalidateKnowledgeViewerInstallationCache = () => defaultKnowledgeViewerService.invalidateInstallationCache();
+const stopAllKnowledgeViewers = () => defaultKnowledgeViewerService.stopAll();
+//#endregion
+//#region routes/knowledge-viewer.ts
+const VIEWER_HOST_PREFIX = "knowledge-";
+const VIEWER_ACCESS_COOKIE = "overdeck_knowledge_viewer";
+const MAX_QUEUED_WEBSOCKET_MESSAGES = 128;
+const MAX_QUEUED_WEBSOCKET_BYTES = 1024 * 1024;
+const MAX_CONFIG_RESPONSE_BYTES = 64 * 1024;
+const viewerAccessTokens = /* @__PURE__ */ new Map();
+const REQUEST_HEADER_ALLOWLIST = new Set([
+	"accept",
+	"accept-language",
+	"cache-control",
+	"content-type",
+	"if-match",
+	"if-modified-since",
+	"if-none-match",
+	"if-unmodified-since",
+	"range",
+	"user-agent"
+]);
+const RESPONSE_HEADER_ALLOWLIST = new Set([
+	"accept-ranges",
+	"cache-control",
+	"content-disposition",
+	"content-language",
+	"content-length",
+	"content-range",
+	"content-security-policy",
+	"content-type",
+	"etag",
+	"expires",
+	"last-modified",
+	"location",
+	"vary",
+	"x-frame-options"
+]);
+function createKnowledgeViewerRouteHandlers(dependencies = {}) {
+	const getStatus = dependencies.getStatus ?? getKnowledgeViewerStatus;
+	const ensure = dependencies.ensure ?? ((options) => ensureOpenKnowledge(options));
+	const executeSetupPlan = dependencies.executeSetupPlan ?? executeOpenKnowledgeSetupPlan;
+	const startViewer = dependencies.start ?? getOrStartViewer;
+	const invalidateInstallationCache = dependencies.invalidateInstallationCache ?? invalidateKnowledgeViewerInstallationCache;
+	async function status(projectKey) {
+		return getStatus(projectKey);
+	}
+	async function install(projectKey) {
+		try {
+			await ensure({ autoInstall: true });
+		} catch (error) {
+			if (!(error instanceof OpenKnowledgeSetupRequiredError)) throw error;
+			await executeSetupPlan(error.plan);
+			await ensure({ autoInstall: true });
+		}
+		invalidateInstallationCache();
+		return status(projectKey);
+	}
+	async function start(projectKey) {
+		return startViewer(projectKey);
+	}
+	async function resolveTarget(projectKey) {
+		const result = await status(projectKey);
+		return result.running && result.url ? result.url : null;
+	}
+	return {
+		status,
+		install,
+		start,
+		resolveTarget
+	};
+}
+function knowledgeViewerUpstreamUrl(requestUrl, targetUrl, websocket) {
+	const incoming = new URL(requestUrl, "http://localhost");
+	incoming.searchParams.delete("access");
+	const target = new URL(targetUrl);
+	target.protocol = websocket ? target.protocol === "https:" ? "wss:" : "ws:" : target.protocol;
+	target.pathname = incoming.pathname || "/";
+	target.search = incoming.search;
+	target.hash = "";
+	return target.toString();
+}
+function knowledgeViewerHost(projectKey, dashboardHost) {
+	const parsed = splitHostAndPort(dashboardHost);
+	const baseHost = isIpAddress(parsed.hostname) ? "localhost" : parsed.hostname;
+	return `${VIEWER_HOST_PREFIX}${Buffer.from(projectKey, "utf8").toString("hex")}.${baseHost}${parsed.port ? `:${parsed.port}` : ""}`;
+}
+function projectFromKnowledgeViewerHost(host) {
+	if (!host) return null;
+	const { hostname } = splitHostAndPort(host);
+	const firstDot = hostname.indexOf(".");
+	if (firstDot < 0) return null;
+	const label = hostname.slice(0, firstDot);
+	if (!label.startsWith(VIEWER_HOST_PREFIX)) return null;
+	const encoded = label.slice(10);
+	if (!encoded || encoded.length % 2 !== 0 || !/^[a-f0-9]+$/.test(encoded)) return null;
+	try {
+		const projectKey = Buffer.from(encoded, "hex").toString("utf8");
+		return Buffer.from(projectKey, "utf8").toString("hex") === encoded ? projectKey : null;
+	} catch {
+		return null;
+	}
+}
+function knowledgeViewerProxyUrl(projectKey, dashboardHost) {
+	const token = viewerAccessTokens.get(projectKey) ?? randomBytes(32).toString("base64url");
+	viewerAccessTokens.set(projectKey, token);
+	return `//${knowledgeViewerHost(projectKey, dashboardHost)}/?access=${encodeURIComponent(token)}`;
+}
+function filterKnowledgeViewerRequestHeaders(headers) {
+	const filtered = {};
+	for (const [name, value] of Object.entries(headers)) {
+		const lower = name.toLowerCase();
+		if (!value || !REQUEST_HEADER_ALLOWLIST.has(lower)) continue;
+		filtered[lower] = value;
+	}
+	return filtered;
+}
+function filterKnowledgeViewerResponseHeaders(headers) {
+	const filtered = {};
+	if (headers instanceof Headers) {
+		headers.forEach((value, name) => {
+			if (RESPONSE_HEADER_ALLOWLIST.has(name.toLowerCase())) filtered[name.toLowerCase()] = value;
+		});
+		return filtered;
+	}
+	for (const [name, value] of Object.entries(headers)) {
+		if (!value || !RESPONSE_HEADER_ALLOWLIST.has(name.toLowerCase())) continue;
+		filtered[name.toLowerCase()] = value;
+	}
+	return filtered;
+}
+function projectFromRequestUrl(requestUrl) {
+	return new URL(requestUrl, "http://localhost").searchParams.get("project");
+}
+function parseProjectBody(text) {
+	try {
+		const parsed = JSON.parse(text);
+		return typeof parsed.project === "string" && parsed.project.trim() ? parsed.project.trim() : null;
+	} catch {
+		return null;
+	}
+}
+function withProxyUrl(status, request) {
+	const host = request.headers.host;
+	if (!status.running || !status.url || !host) return status;
+	return {
+		...status,
+		proxyUrl: knowledgeViewerProxyUrl(status.projectKey, host)
+	};
+}
+const handlers = createKnowledgeViewerRouteHandlers();
+const statusRoute = HttpRouter.add("GET", "/api/knowledge-viewer/status", httpHandler(Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const authError = rejectUnauthorizedDashboardRequest(request);
+	if (authError) return authError;
+	const projectKey = projectFromRequestUrl(request.url);
+	if (!projectKey) return jsonResponse({ error: "project query parameter is required" }, { status: 400 });
+	return jsonResponse(withProxyUrl(yield* Effect.promise(() => handlers.status(projectKey)), request));
+})));
+const installRoute = HttpRouter.add("POST", "/api/knowledge-viewer/install", httpHandler(Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const authError = rejectUnsafeDashboardMutationRequest(request);
+	if (authError) return authError;
+	const projectKey = parseProjectBody(yield* request.text);
+	if (!projectKey) return jsonResponse({ error: "project is required in the request body" }, { status: 400 });
+	try {
+		return jsonResponse(withProxyUrl(yield* Effect.promise(() => handlers.install(projectKey)), request));
+	} catch (error) {
+		return jsonResponse({ error: errorMessage$1(error) }, { status: 500 });
+	}
+})));
+const startRoute$1 = HttpRouter.add("POST", "/api/knowledge-viewer/start", httpHandler(Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const authError = rejectUnsafeDashboardMutationRequest(request);
+	if (authError) return authError;
+	const projectKey = parseProjectBody(yield* request.text);
+	if (!projectKey) return jsonResponse({ error: "project is required in the request body" }, { status: 400 });
+	try {
+		const status = yield* Effect.promise(() => handlers.start(projectKey));
+		return jsonResponse(withProxyUrl(status, request), { status: status.running ? 200 : 409 });
+	} catch (error) {
+		return jsonResponse({ error: errorMessage$1(error) }, { status: 500 });
+	}
+})));
+const legacyProxyRedirectRoute = HttpRouter.add("GET", "/knowledge-viewer/*", httpHandler(Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const authError = rejectUnauthorizedDashboardRequest(request);
+	if (authError) return authError;
+	const projectKey = projectFromRequestUrl(request.url);
+	if (!projectKey) return jsonResponse({ error: "project query parameter is required" }, { status: 400 });
+	const result = withProxyUrl(yield* Effect.promise(() => handlers.status(projectKey)), request);
+	if (!result.proxyUrl) return jsonResponse({ error: "Knowledge viewer is not running" }, { status: 503 });
+	return HttpServerResponse.redirect(result.proxyUrl);
+})));
+const knowledgeViewerRouteLayer = Layer.mergeAll(statusRoute, installRoute, startRoute$1, legacyProxyRedirectRoute);
+function setupKnowledgeViewerProxy(server, routeHandlers = handlers) {
+	const wss = new import_websocket_server.default({ noServer: true });
+	const originalOn = server.on.bind(server);
+	server.on = function(event, listener) {
+		if (event === "request") {
+			const wrapped = (request, response) => {
+				const projectKey = projectFromKnowledgeViewerHost(request.headers.host);
+				if (projectKey) {
+					proxyKnowledgeViewerHttp(request, response, projectKey, routeHandlers);
+					return;
+				}
+				listener(request, response);
+			};
+			return originalOn(event, wrapped);
+		}
+		if (event === "upgrade") {
+			const wrapped = (request, socket, head) => {
+				if (projectFromKnowledgeViewerHost(request.headers.host)) return;
+				listener(request, socket, head);
+			};
+			return originalOn(event, wrapped);
+		}
+		return originalOn(event, listener);
+	};
+	originalOn("upgrade", (request, socket, head) => {
+		const projectKey = projectFromKnowledgeViewerHost(request.headers.host);
+		if (!projectKey) return;
+		if (!authorizeViewerRequest(request, projectKey).ok) {
+			rejectUpgrade(socket, 401, "Unauthorized");
+			return;
+		}
+		if (!viewerOriginIsAllowed(request)) {
+			rejectUpgrade(socket, 403, "Invalid origin");
+			return;
+		}
+		routeHandlers.resolveTarget(projectKey).then((target) => {
+			if (!target) {
+				rejectUpgrade(socket, 503, "Knowledge viewer is not running");
+				return;
+			}
+			wss.handleUpgrade(request, socket, head, (client) => {
+				bridgeWebSocket(client, request, knowledgeViewerUpstreamUrl(request.url || "/", target, true));
+			});
+		}).catch((error) => rejectUpgrade(socket, 502, errorMessage$1(error)));
+	});
+}
+async function proxyKnowledgeViewerHttp(request, response, projectKey, routeHandlers) {
+	const access = authorizeViewerRequest(request, projectKey);
+	if (!access.ok) {
+		writeJsonError(response, 401, "unauthorized");
+		return;
+	}
+	const target = await routeHandlers.resolveTarget(projectKey);
+	if (!target) {
+		writeJsonError(response, 503, "Knowledge viewer is not running");
+		return;
+	}
+	const upstreamUrl = knowledgeViewerUpstreamUrl(request.url || "/", target, false);
+	const upstreamRequest = (upstreamUrl.startsWith("https:") ? https : http).request(upstreamUrl, {
+		method: request.method,
+		headers: filterKnowledgeViewerRequestHeaders(request.headers)
+	}, (upstreamResponse) => {
+		const headers = filterKnowledgeViewerResponseHeaders(upstreamResponse.headers);
+		headers["referrer-policy"] = "no-referrer";
+		const location = upstreamResponse.headers.location;
+		if (location) headers.location = rewriteLocation(location, upstreamUrl, target);
+		if (access.grantCookie) headers["set-cookie"] = viewerCookieHeader(access.token, request);
+		if (new URL(request.url || "/", "http://localhost").pathname === "/api/config") {
+			proxyKnowledgeViewerConfigResponse(request, response, upstreamResponse, headers);
+			return;
+		}
+		response.writeHead(upstreamResponse.statusCode ?? 502, headers);
+		upstreamResponse.pipe(response);
+	});
+	upstreamRequest.on("error", (error) => {
+		if (!response.headersSent) writeJsonError(response, 502, errorMessage$1(error));
+		else response.destroy(error);
+	});
+	request.on("aborted", () => upstreamRequest.destroy());
+	request.pipe(upstreamRequest);
+}
+async function proxyKnowledgeViewerConfigResponse(request, response, upstreamResponse, headers) {
+	try {
+		const chunks = [];
+		let size = 0;
+		for await (const chunk of upstreamResponse) {
+			const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+			size += buffer.length;
+			if (size > MAX_CONFIG_RESPONSE_BYTES) throw new Error("open-knowledge config response exceeded 64 KiB");
+			chunks.push(buffer);
+		}
+		const config = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+		const host = request.headers.host;
+		if (!host) throw new Error("knowledge viewer request host is missing");
+		const secure = firstHeader(request.headers["x-forwarded-proto"]) === "https" || "encrypted" in request.socket;
+		if (typeof config.collabUrl === "string") {
+			const collabUrl = new URL(config.collabUrl);
+			config.collabUrl = `${secure ? "wss" : "ws"}://${host}${collabUrl.pathname}${collabUrl.search}`;
+		}
+		if (typeof config.previewUrl === "string") {
+			const previewUrl = new URL(config.previewUrl);
+			config.previewUrl = `${secure ? "https" : "http"}://${host}${previewUrl.pathname}${previewUrl.search}`;
+		}
+		const body = Buffer.from(JSON.stringify(config));
+		headers["content-length"] = body.length;
+		response.writeHead(upstreamResponse.statusCode ?? 502, headers);
+		response.end(body);
+	} catch (error) {
+		if (!response.headersSent) writeJsonError(response, 502, errorMessage$1(error));
+		else response.destroy(error instanceof Error ? error : void 0);
+	}
+}
+function authorizeViewerRequest(request, projectKey) {
+	const expected = viewerAccessTokens.get(projectKey);
+	if (!expected) return { ok: false };
+	const queryToken = new URL(request.url || "/", "http://localhost").searchParams.get("access");
+	const cookieToken = cookieValue(request.headers.cookie, VIEWER_ACCESS_COOKIE);
+	if (constantTimeEqual(queryToken, expected)) return {
+		ok: true,
+		token: expected,
+		grantCookie: true
+	};
+	if (constantTimeEqual(cookieToken, expected)) return {
+		ok: true,
+		token: expected,
+		grantCookie: false
+	};
+	return { ok: false };
+}
+function viewerOriginIsAllowed(request) {
+	const origin = request.headers.origin;
+	if (origin) try {
+		if (new URL(origin).host === request.headers.host) return true;
+	} catch {
+		return false;
+	}
+	return validateOriginHeaders(request.headers, request.method ?? "GET").ok;
+}
+function viewerCookieHeader(token, _request) {
+	return `${VIEWER_ACCESS_COOKIE}=${encodeURIComponent(token)}; HttpOnly; SameSite=None; Secure; Path=/`;
+}
+function bridgeWebSocket(client, request, upstreamUrl) {
+	const protocols = (request.headers["sec-websocket-protocol"] ?? "").split(",").map((value) => value.trim()).filter(Boolean);
+	const upstream = new import_websocket.default(upstreamUrl, protocols.length > 0 ? protocols : void 0, { headers: { origin: new URL(upstreamUrl).origin.replace(/^ws/, "http") } });
+	const queued = [];
+	let queuedBytes = 0;
+	client.on("message", (data, binary) => {
+		const payload = Buffer.isBuffer(data) ? data : Buffer.from(data);
+		if (upstream.readyState === import_websocket.default.OPEN) {
+			upstream.send(payload, { binary });
+			return;
+		}
+		if (queued.length >= MAX_QUEUED_WEBSOCKET_MESSAGES || queuedBytes + payload.byteLength > MAX_QUEUED_WEBSOCKET_BYTES) {
+			client.close(1009, "knowledge-viewer-queue-limit");
+			upstream.terminate();
+			return;
+		}
+		queued.push({
+			data: payload,
+			binary
+		});
+		queuedBytes += payload.byteLength;
+	});
+	upstream.once("open", () => {
+		for (const message of queued.splice(0)) upstream.send(message.data, { binary: message.binary });
+		queuedBytes = 0;
+	});
+	upstream.on("message", (data, binary) => {
+		if (client.readyState === import_websocket.default.OPEN) client.send(data, { binary });
+	});
+	upstream.on("close", (code, reason) => {
+		if (client.readyState === import_websocket.default.OPEN) client.close(code, reason.toString());
+	});
+	upstream.on("error", () => {
+		if (client.readyState === import_websocket.default.OPEN) client.close(1011, "knowledge-viewer-upstream-error");
+	});
+	client.on("close", () => {
+		if (upstream.readyState === import_websocket.default.OPEN || upstream.readyState === import_websocket.default.CONNECTING) upstream.close();
+	});
+}
+function rewriteLocation(location, upstreamUrl, targetUrl) {
+	const resolved = new URL(location, upstreamUrl);
+	const target = new URL(targetUrl);
+	if (resolved.origin !== target.origin) return location;
+	return `${resolved.pathname}${resolved.search}${resolved.hash}`;
+}
+function splitHostAndPort(host) {
+	try {
+		const parsed = new URL(`http://${host}`);
+		return {
+			hostname: parsed.hostname.toLowerCase(),
+			port: parsed.port
+		};
+	} catch {
+		return {
+			hostname: host.toLowerCase(),
+			port: ""
+		};
+	}
+}
+function isIpAddress(hostname) {
+	return /^\d{1,3}(?:\.\d{1,3}){3}$/.test(hostname) || hostname.includes(":");
+}
+function cookieValue(cookieHeader, name) {
+	if (!cookieHeader) return null;
+	for (const part of cookieHeader.split(";")) {
+		const [key, ...rest] = part.trim().split("=");
+		if (key === name) return decodeURIComponent(rest.join("="));
+	}
+	return null;
+}
+function constantTimeEqual(value, expected) {
+	if (!value) return false;
+	const actualBuffer = Buffer.from(value);
+	const expectedBuffer = Buffer.from(expected);
+	return actualBuffer.length === expectedBuffer.length && timingSafeEqual(actualBuffer, expectedBuffer);
+}
+function firstHeader(value) {
+	return Array.isArray(value) ? value[0] : value;
+}
+function writeJsonError(response, status, message) {
+	const body = JSON.stringify({ error: message });
+	response.writeHead(status, {
+		"content-type": "application/json",
+		"content-length": Buffer.byteLength(body)
+	});
+	response.end(body);
+}
+function rejectUpgrade(socket, status, message) {
+	socket.write(`HTTP/1.1 ${status} ${message}\r\nConnection: close\r\nContent-Length: 0\r\n\r\n`);
+	socket.destroy();
+}
+function errorMessage$1(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region ../../../node_modules/.bun/@ai-sdk+provider@3.0.10/node_modules/@ai-sdk/provider/dist/index.mjs
+init_paths$2();
+init_cost_sync();
+init_features();
+init_settings();
+init_health();
+init_providers$1();
+init_query_expansion();
+init_fts_db();
+init_search();
 var marker$2 = "vercel.ai.error";
 var symbol$3 = Symbol.for(marker$2);
 var _a$5, _b$2;
@@ -5869,7 +7156,7 @@ function mergeDefs(...defs) {
 function esc(str) {
 	return JSON.stringify(str);
 }
-function slugify(input) {
+function slugify$1(input) {
 	return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
 }
 const captureStackTrace = "captureStackTrace" in Error ? Error.captureStackTrace : (..._args) => {};
@@ -8593,7 +9880,7 @@ function _toUpperCase() {
 }
 /* @__NO_SIDE_EFFECTS__ */
 function _slugify() {
-	return /* @__PURE__ */ _overwrite((input) => slugify(input));
+	return /* @__PURE__ */ _overwrite((input) => slugify$1(input));
 }
 /* @__NO_SIDE_EFFECTS__ */
 function _array(Class, element, params) {
@@ -10058,7 +11345,7 @@ const ZodRecord$1 = /* @__PURE__ */ $constructor("ZodRecord", (inst, def) => {
 	inst.keyType = def.keyType;
 	inst.valueType = def.valueType;
 });
-function record(keyType, valueType, params) {
+function record$1(keyType, valueType, params) {
 	if (!valueType || !valueType._zod) return new ZodRecord$1({
 		type: "record",
 		keyType: string(),
@@ -15968,7 +17255,7 @@ var require_get_vercel_oidc_token = /* @__PURE__ */ __commonJSMin(((exports, mod
 			err = error;
 		}
 		try {
-			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-DrHg8abn.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-CsOhvw42.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
+			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-DuPuNriz.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-BK6t8BIT.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
 			if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
 				await refreshToken(options);
 				token = getVercelOidcTokenSync();
@@ -16738,7 +18025,7 @@ var GatewayEmbeddingModel = class {
 var gatewayEmbeddingResponseSchema = lazySchema(() => zodSchema(object$1({
 	embeddings: array$1(array$1(number$1())),
 	usage: object$1({ tokens: number$1() }).nullish(),
-	providerMetadata: record(string(), record(string(), unknown())).optional()
+	providerMetadata: record$1(string(), record$1(string(), unknown())).optional()
 })));
 var GatewayImageModel = class {
 	constructor(modelId, config) {
@@ -16836,7 +18123,7 @@ var gatewayImageUsageSchema = object$1({
 var gatewayImageResponseSchema = object$1({
 	images: array$1(string()),
 	warnings: array$1(gatewayImageWarningSchema).optional(),
-	providerMetadata: record(string(), providerMetadataEntrySchema).optional(),
+	providerMetadata: record$1(string(), providerMetadataEntrySchema).optional(),
 	usage: gatewayImageUsageSchema.optional()
 });
 var GatewayVideoModel = class {
@@ -16984,7 +18271,7 @@ var gatewayVideoEventSchema = discriminatedUnion("type", [object$1({
 	type: literal("result"),
 	videos: array$1(gatewayVideoDataSchema),
 	warnings: array$1(gatewayVideoWarningSchema).optional(),
-	providerMetadata: record(string(), providerMetadataEntrySchema2).optional()
+	providerMetadata: record$1(string(), providerMetadataEntrySchema2).optional()
 }), object$1({
 	type: literal("error"),
 	message: string(),
@@ -17049,7 +18336,7 @@ var gatewayRerankingResponseSchema = lazySchema(() => zodSchema(object$1({
 		index: number$1(),
 		relevanceScore: number$1()
 	})),
-	providerMetadata: record(string(), record(string(), unknown())).optional()
+	providerMetadata: record$1(string(), record$1(string(), unknown())).optional()
 })));
 var parallelSearchToolFactory = createProviderToolFactoryWithOutputSchema({
 	id: "gateway.parallel_search",
@@ -19169,10 +20456,10 @@ var jsonValueSchema$1 = lazy(() => union([
 	string(),
 	number$1(),
 	boolean(),
-	record(string(), jsonValueSchema$1.optional()),
+	record$1(string(), jsonValueSchema$1.optional()),
 	array$1(jsonValueSchema$1)
 ]));
-var providerMetadataSchema = record(string(), record(string(), jsonValueSchema$1.optional()));
+var providerMetadataSchema = record$1(string(), record$1(string(), jsonValueSchema$1.optional()));
 var textPartSchema = object$1({
 	type: literal("text"),
 	text: string(),
@@ -19257,7 +20544,7 @@ var outputSchema = discriminatedUnion("type", [
 			}),
 			object$1({
 				type: literal("file-id"),
-				fileId: union([string(), record(string(), string())]),
+				fileId: union([string(), record$1(string(), string())]),
 				providerOptions: providerMetadataSchema.optional()
 			}),
 			object$1({
@@ -19273,7 +20560,7 @@ var outputSchema = discriminatedUnion("type", [
 			}),
 			object$1({
 				type: literal("image-file-id"),
-				fileId: union([string(), record(string(), string())]),
+				fileId: union([string(), record$1(string(), string())]),
 				providerOptions: providerMetadataSchema.optional()
 			}),
 			object$1({
@@ -21398,7 +22685,7 @@ function asContent({ content, toolCalls, toolOutputs, toolApprovalRequests, tool
 	];
 }
 TransformStream;
-var toolMetadataSchema = record(string(), jsonValueSchema$1.optional());
+var toolMetadataSchema = record$1(string(), jsonValueSchema$1.optional());
 lazySchema(() => zodSchema(union([
 	strictObject({
 		type: literal("text-start"),
@@ -21561,7 +22848,7 @@ createIdGenerator({
 	prefix: "aitxt",
 	size: 24
 });
-var toolMetadataSchema2 = record(string(), jsonValueSchema$1.optional());
+var toolMetadataSchema2 = record$1(string(), jsonValueSchema$1.optional());
 lazySchema(() => zodSchema(array$1(object$1({
 	id: string(),
 	role: _enum([
@@ -22383,7 +23670,7 @@ var openaiLanguageModelChatOptions = lazySchema(() => zodSchema(object$1({
 	* Accepts a JSON object that maps tokens (specified by their token ID in
 	* the GPT tokenizer) to an associated bias value from -100 to 100.
 	*/
-	logitBias: record(number(), number$1()).optional(),
+	logitBias: record$1(number(), number$1()).optional(),
 	/**
 	* Return the log probabilities of the tokens.
 	*
@@ -22425,11 +23712,11 @@ var openaiLanguageModelChatOptions = lazySchema(() => zodSchema(object$1({
 	/**
 	* Metadata to associate with the request.
 	*/
-	metadata: record(string().max(64), string().max(512)).optional(),
+	metadata: record$1(string().max(64), string().max(512)).optional(),
 	/**
 	* Parameters for prediction mode.
 	*/
-	prediction: record(string(), any()).optional(),
+	prediction: record$1(string(), any()).optional(),
 	/**
 	* Service tier for the request.
 	* - 'auto': Default service tier. The request will be processed with the service tier configured in the
@@ -23093,7 +24380,7 @@ var openaiCompletionResponseSchema = lazySchema(() => zodSchema(object$1({
 		logprobs: object$1({
 			tokens: array$1(string()),
 			token_logprobs: array$1(number$1()),
-			top_logprobs: array$1(record(string(), number$1())).nullish()
+			top_logprobs: array$1(record$1(string(), number$1())).nullish()
 		}).nullish()
 	})),
 	usage: object$1({
@@ -23113,7 +24400,7 @@ var openaiCompletionChunkSchema = lazySchema(() => zodSchema(union([object$1({
 		logprobs: object$1({
 			tokens: array$1(string()),
 			token_logprobs: array$1(number$1()),
-			top_logprobs: array$1(record(string(), number$1())).nullish()
+			top_logprobs: array$1(record$1(string(), number$1())).nullish()
 		}).nullish()
 	})),
 	usage: object$1({
@@ -23141,7 +24428,7 @@ var openaiLanguageModelCompletionOptions = lazySchema(() => zodSchema(object$1({
 	* As an example, you can pass {"50256": -100} to prevent the <|endoftext|>
 	* token from being generated.
 	*/
-	logitBias: record(string(), number$1()).optional(),
+	logitBias: record$1(string(), number$1()).optional(),
 	/**
 	* The suffix that comes after a completion of inserted text.
 	*/
@@ -23802,7 +25089,7 @@ var fileSearchArgsSchema = lazySchema(() => zodSchema(object$1({
 var fileSearchOutputSchema = lazySchema(() => zodSchema(object$1({
 	queries: array$1(string()),
 	results: array$1(object$1({
-		attributes: record(string(), unknown()),
+		attributes: record$1(string(), unknown()),
 		fileId: string(),
 		filename: string(),
 		score: number$1(),
@@ -23861,7 +25148,7 @@ var localShellInputSchema = lazySchema(() => zodSchema(object$1({ action: object
 	timeoutMs: number$1().optional(),
 	user: string().optional(),
 	workingDirectory: string().optional(),
-	env: record(string(), string()).optional()
+	env: record$1(string(), string()).optional()
 }) })));
 var localShellOutputSchema = lazySchema(() => zodSchema(object$1({ output: string() })));
 var localShell = createProviderToolFactoryWithOutputSchema({
@@ -23938,13 +25225,13 @@ var shell = createProviderToolFactoryWithOutputSchema({
 var toolSearchArgsSchema = lazySchema(() => zodSchema(object$1({
 	execution: _enum(["server", "client"]).optional(),
 	description: string().optional(),
-	parameters: record(string(), unknown()).optional()
+	parameters: record$1(string(), unknown()).optional()
 })));
 var toolSearchInputSchema = lazySchema(() => zodSchema(object$1({
 	arguments: unknown().optional(),
 	call_id: string().nullish()
 })));
-var toolSearchOutputSchema = lazySchema(() => zodSchema(object$1({ tools: array$1(record(string(), unknown())) })));
+var toolSearchOutputSchema = lazySchema(() => zodSchema(object$1({ tools: array$1(record$1(string(), unknown())) })));
 var toolSearchToolFactory = createProviderToolFactoryWithOutputSchema({
 	id: "openai.tool_search",
 	inputSchema: toolSearchInputSchema,
@@ -24035,7 +25322,7 @@ var jsonValueSchema = lazy(() => union([
 	boolean(),
 	_null(),
 	array$1(jsonValueSchema),
-	record(string(), jsonValueSchema)
+	record$1(string(), jsonValueSchema)
 ]));
 var mcpArgsSchema = lazySchema(() => zodSchema(object$1({
 	serverLabel: string(),
@@ -24045,7 +25332,7 @@ var mcpArgsSchema = lazySchema(() => zodSchema(object$1({
 	})]).optional(),
 	authorization: string().optional(),
 	connectorId: string().optional(),
-	headers: record(string(), string()).optional(),
+	headers: record$1(string(), string()).optional(),
 	requireApproval: union([_enum(["always", "never"]), object$1({ never: object$1({ toolNames: array$1(string()).optional() }).optional() })]).optional(),
 	serverDescription: string().optional(),
 	serverUrl: string().optional()
@@ -24781,7 +26068,7 @@ var jsonValueSchema2 = lazy(() => union([
 	boolean(),
 	_null(),
 	array$1(jsonValueSchema2),
-	record(string(), jsonValueSchema2.optional())
+	record$1(string(), jsonValueSchema2.optional())
 ]));
 var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 	object$1({
@@ -24984,7 +26271,7 @@ var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 					"completed",
 					"incomplete"
 				]),
-				tools: array$1(record(string(), jsonValueSchema2.optional()))
+				tools: array$1(record$1(string(), jsonValueSchema2.optional()))
 			})
 		])
 	}),
@@ -25069,7 +26356,7 @@ var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 				id: string(),
 				queries: array$1(string()),
 				results: array$1(object$1({
-					attributes: record(string(), union([
+					attributes: record$1(string(), union([
 						string(),
 						number$1(),
 						boolean()
@@ -25090,7 +26377,7 @@ var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 					timeout_ms: number$1().optional(),
 					user: string().optional(),
 					working_directory: string().optional(),
-					env: record(string(), string()).optional()
+					env: record$1(string(), string()).optional()
 				})
 			}),
 			object$1({
@@ -25121,7 +26408,7 @@ var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 					name: string(),
 					description: string().optional(),
 					input_schema: any(),
-					annotations: record(string(), unknown()).optional()
+					annotations: record$1(string(), unknown()).optional()
 				})),
 				error: union([string(), object$1({
 					type: string().optional(),
@@ -25210,7 +26497,7 @@ var openaiResponsesChunkSchema = lazySchema(() => zodSchema(union([
 					"completed",
 					"incomplete"
 				]),
-				tools: array$1(record(string(), jsonValueSchema2.optional()))
+				tools: array$1(record$1(string(), jsonValueSchema2.optional()))
 			})
 		])
 	}),
@@ -25408,7 +26695,7 @@ var openaiResponsesResponseSchema = lazySchema(() => zodSchema(object$1({
 			id: string(),
 			queries: array$1(string()),
 			results: array$1(object$1({
-				attributes: record(string(), union([
+				attributes: record$1(string(), union([
 					string(),
 					number$1(),
 					boolean()
@@ -25447,7 +26734,7 @@ var openaiResponsesResponseSchema = lazySchema(() => zodSchema(object$1({
 				timeout_ms: number$1().optional(),
 				user: string().optional(),
 				working_directory: string().optional(),
-				env: record(string(), string()).optional()
+				env: record$1(string(), string()).optional()
 			})
 		}),
 		object$1({
@@ -25502,7 +26789,7 @@ var openaiResponsesResponseSchema = lazySchema(() => zodSchema(object$1({
 				name: string(),
 				description: string().optional(),
 				input_schema: any(),
-				annotations: record(string(), unknown()).optional()
+				annotations: record$1(string(), unknown()).optional()
 			})),
 			error: union([string(), object$1({
 				type: string().optional(),
@@ -25591,7 +26878,7 @@ var openaiResponsesResponseSchema = lazySchema(() => zodSchema(object$1({
 				"completed",
 				"incomplete"
 			]),
-			tools: array$1(record(string(), jsonValueSchema2.optional()))
+			tools: array$1(record$1(string(), jsonValueSchema2.optional()))
 		})
 	])).optional(),
 	service_tier: string().nullish(),
@@ -28285,7 +29572,7 @@ var GoogleCloudTranscription = class {
 	}
 	async start(apiKey, model) {
 		try {
-			const { SpeechClient } = await import("./src-CG9mCkP6.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
+			const { SpeechClient } = await import("./src-CXmtj0im.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
 			if (this.closed) return;
 			const stream = new SpeechClient({ apiKey }).streamingRecognize({
 				config: {
@@ -28549,7 +29836,7 @@ const DEFAULT_VOICE_SETTINGS = {
 		model: "gpt-4.1-mini"
 	}
 };
-const readJsonBody$17 = Effect.gen(function* () {
+const readJsonBody$18 = Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const contentLength = Number(request.headers["content-length"] ?? 0);
 	if (Number.isFinite(contentLength) && contentLength > MAX_VOICE_SETTINGS_BODY_BYTES) return {
@@ -28672,7 +29959,7 @@ const getVoiceSettingsRoute = HttpRouter.add("GET", "/api/voice/settings", httpH
 const putVoiceSettingsRoute = HttpRouter.add("PUT", "/api/voice/settings", httpHandler(Effect.gen(function* () {
 	const originError = requireTrustedOrigin$2(yield* HttpServerRequest.HttpServerRequest);
 	if (originError) return originError;
-	const parsed = yield* readJsonBody$17;
+	const parsed = yield* readJsonBody$18;
 	if (!parsed.ok) return jsonResponse({ error: parsed.error }, { status: 413 });
 	const body = parsed.body;
 	if (!isVoiceSettings(body)) return jsonResponse({ error: "Invalid voice settings payload" }, { status: 400 });
@@ -28966,6 +30253,7 @@ function streamAgentOutput(eventStore, agentId) {
 }
 //#endregion
 //#region services/read-workspace-file.ts
+init_acp_conversation_parser();
 init_codex_conversation_parser();
 init_ohmypi_conversation_parser();
 init_pi_conversation_parser();
@@ -29472,8 +30760,10 @@ function ohmypiSnapshotParser(harness) {
 }
 function streamHarnessFullParseSnapshots(sessionName, harness, model, unresolvedMeansEmpty = false) {
 	const behavior = getHarnessBehavior(harness);
-	if (behavior.transcriptKind === "ohmypi-jsonl") return streamResolvedFullParseSnapshots(() => resolvePiSessionPath(sessionName), ohmypiSnapshotParser(harness), model, unresolvedMeansEmpty);
-	if (behavior.transcriptKind === "codex-rollout-jsonl") return streamResolvedFullParseSnapshots(() => resolveCodexRolloutPath(sessionName), parseCodexConversationMessages, model, unresolvedMeansEmpty);
+	const streamResolved = (resolve, parse) => streamResolvedFullParseSnapshots(resolve, parse, model, unresolvedMeansEmpty);
+	if (behavior.transcriptKind === "ohmypi-jsonl") return streamResolved(() => resolvePiSessionPath(sessionName), ohmypiSnapshotParser(harness));
+	if (behavior.transcriptKind === "codex-rollout-jsonl") return streamResolved(() => resolveCodexRolloutPath(sessionName), parseCodexConversationMessages);
+	if (behavior.transcriptKind === "acp-jsonl") return streamResolved(() => resolveAcpTranscriptPath(sessionName), parseAcpConversationMessages);
 	return null;
 }
 function buildAgentIssueLookup(agents) {
@@ -30456,7 +31746,7 @@ const execFileAsync$18 = promisify(execFile);
 async function loadTrackerIssues() {
 	const map = /* @__PURE__ */ new Map();
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-DabvBWUp.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-BvJ09SaR.js");
 		const issues = (await getSharedIssueService()).getIssues();
 		for (const issue of issues) if (issue.identifier) map.set(issue.identifier.toUpperCase(), issue);
 	} catch {}
@@ -30479,7 +31769,7 @@ async function loadDockerContainers() {
 }
 async function loadActiveRemoteAgentStates() {
 	try {
-		const { listActiveRemoteAgentStates } = await import("./remote-agents-CRCg1L4H.js");
+		const { listActiveRemoteAgentStates } = await import("./remote-agents-CA3Ihlxj.js");
 		return listActiveRemoteAgentStates();
 	} catch {
 		return [];
@@ -30508,6 +31798,7 @@ async function captureSharedResourceSignals() {
 //#endregion
 //#region review-status.ts
 init_concurrency$1();
+init_advisory_checks();
 init_github_app();
 init_resource_utils();
 init_pipeline_membership_gather();
@@ -30532,7 +31823,13 @@ function refreshMembershipSnapshot(project, snapshot, getMembership, now) {
 	snapshot.refresh = scheduleMembershipRefresh(() => getMembership(project)).then((value) => {
 		snapshot.value = value;
 		snapshot.refreshedAt = now();
-	}).catch(() => {}).finally(() => {
+		snapshot.lastError = void 0;
+		snapshot.lastErrorAt = void 0;
+	}).catch((error) => {
+		snapshot.lastError = error instanceof Error ? error.message : String(error);
+		snapshot.lastErrorAt = now();
+		console.warn(`[pipeline-membership] refresh failed for ${project.name ?? project.path}; keeping last-good snapshot:`, snapshot.lastError);
+	}).finally(() => {
 		snapshot.refresh = void 0;
 	});
 	return snapshot.refresh;
@@ -30541,12 +31838,13 @@ function refreshMembershipSnapshot(project, snapshot, getMembership, now) {
 function readPipelineMembershipSnapshotsForProjects(projects) {
 	return projects.map((project) => {
 		const snapshot = membershipSnapshots.get(project.path);
-		return snapshot?.refreshedAt ? {
+		if (snapshot?.refreshedAt) return {
 			project,
 			memberships: snapshot.value
-		} : {
+		};
+		return {
 			project,
-			error: /* @__PURE__ */ new Error("Pipeline membership snapshot is loading")
+			error: /* @__PURE__ */ new Error(snapshot?.lastError ? `Pipeline membership refresh failed: ${snapshot.lastError}` : "Pipeline membership snapshot is loading")
 		};
 	});
 }
@@ -32182,7 +33480,7 @@ async function closeIssuePullRequest(issueId, reason = "Canceled via Overdeck")
 			timeout: 15e3
 		});
 		try {
-			const { setReviewStatusSync } = await import("./review-status-C6n6-9f_.js");
+			const { setReviewStatusSync } = await import("./review-status-btEYlaxA.js");
 			setReviewStatusSync(issueId.toUpperCase(), { prUrl: void 0 });
 		} catch {}
 		return [`Closed PR #${prNumber} on ${githubCheck.owner}/${githubCheck.repo}`];
@@ -32236,7 +33534,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	const { ctx, projectConfig } = buildLifecycleContext(id, getIssueDataService$8().getIssueSource(id) ?? void 0);
 	const deleteWorkspace = opts.deleteWorkspace ?? true;
 	cleanupLog.push(...await closeIssuePullRequest(id, mode === "cancel" ? "Canceled via Overdeck" : "Reset to Todo via Overdeck"));
-	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-sycO16hj.js");
+	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-xmBfK2GJ.js");
 	const workflow = mode === "cancel" ? cancelIssueWorkflow : resetToTodo;
 	const result = await Effect.runPromise(workflow(ctx, {
 		deleteWorkspace,
@@ -32251,7 +33549,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	}));
 	cleanupLog.push(...result.steps.flatMap((step) => step.details || [step.error].filter(Boolean)));
 	if (mode === "cancel") try {
-		const { transitionXBriefOnMain } = await import("./lifecycle-io-Bsnr2K4F.js");
+		const { transitionXBriefOnMain } = await import("./lifecycle-io-DPo7x11I.js");
 		const tx = await Effect.runPromise(transitionXBriefOnMain(ctx.projectPath, id, "cancelled", "cancelled", `scope: cancel ${id.toUpperCase()} xBRIEF`));
 		if (tx.moved) cleanupLog.push(`xBRIEF moved ${tx.fromDir} → cancelled`);
 		if (tx.committed) cleanupLog.push(`Committed xBRIEF cancellation on main`);
@@ -32259,8 +33557,8 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push(`xBRIEF cancel transition failed (non-fatal): ${err?.message ?? err}`);
 	}
 	try {
-		const { killAllReviewerSessions } = await import("./review-agent-DJRO8EG8.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-9SkRpES9.js");
+		const { killAllReviewerSessions } = await import("./review-agent-DNboMyW4.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-vjjcmiN8.js");
 		const projectKey = resolveProjectFromIssueSync(id)?.projectKey;
 		if (projectKey) {
 			const { killed } = await Effect.runPromise(killAllReviewerSessions(projectKey, id.toUpperCase()));
@@ -32274,7 +33572,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push("Cleared review status");
 	} catch {}
 	try {
-		const { resetPostMergeState } = await import("./merge-agent-BQM3a8z5.js");
+		const { resetPostMergeState } = await import("./merge-agent-CKkgIBPB.js");
 		resetPostMergeState(id);
 		resetPostMergeState(id.toUpperCase());
 		cleanupLog.push("Cleared merge state");
@@ -32294,7 +33592,7 @@ function closeIssueTransition(options) {
 		const { issueId, body, eventStore } = options;
 		const { reason } = body;
 		const projectPath = getProjectPath$3(void 0, extractPrefixSync(issueId) ?? issueId.split("-")[0]);
-		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-sycO16hj.js"));
+		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-xmBfK2GJ.js"));
 		const githubCheck = isGitHubIssue$4(issueId);
 		const issueDataService = getIssueDataService$8();
 		const issueSource = issueDataService.getIssueSource(issueId);
@@ -32561,7 +33859,7 @@ function reopenIssueTransition(options) {
 				else clearReviewStatus(id.toUpperCase());
 			} catch {}
 			try {
-				const { resetPostMergeState } = await import("./merge-agent-BQM3a8z5.js");
+				const { resetPostMergeState } = await import("./merge-agent-CKkgIBPB.js");
 				resetPostMergeState(id);
 				resetPostMergeState(id.toUpperCase());
 			} catch {}
@@ -32625,7 +33923,7 @@ function moveIssueStatus(options) {
 			"done"
 		];
 		if (!targetStatus || !validStatuses.includes(targetStatus)) return jsonResponse({ error: `Invalid targetStatus. Must be one of: ${validStatuses.join(", ")}` }, { status: 400 });
-		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-C2_epgx2.js"));
+		const { updateShadowState } = yield* Effect.promise(() => import("./shadow-state-DnDyjujH.js"));
 		const issueState = {
 			backlog: "open",
 			todo: "open",
@@ -32852,7 +34150,7 @@ async function copySettingsToWorkspace(id) {
 		success: false,
 		error: "Workspace not found"
 	}, { status: 404 });
-	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-ZTdJAy9M.js");
+	const { copyOverdeckSettingsToWorkspaceSync } = await import("./workspace-manager-CWT55qeI.js");
 	const result = copyOverdeckSettingsToWorkspaceSync(workspacePath);
 	return jsonResponse({
 		success: result.errors.length === 0 || result.copied.length > 0,
@@ -32962,7 +34260,25 @@ function startPlanningForIssue(options) {
 	return Effect.gen(function* () {
 		const { id, body, eventStore, linear, github, rally, lifecycle } = options;
 		const { skipWorkspace = false, startDocker = false, workspaceLocation = "local", shadowMode = false, model: modelOverride, effort, auto = false, autoStart = false, probe = false, harness = "claude-code" } = body;
-		const requestedHarness = harness === "ohmypi" || harness === "claude-code" || harness === "codex" ? harness : "claude-code";
+		const requestedHarness = harness === "ohmypi" || harness === "claude-code" || harness === "codex" || harness === "acp" ? harness : "claude-code";
+		const workModelRaw = body.workModel;
+		if (typeof workModelRaw === "string" && workModelRaw.trim()) {
+			const staffingProject = (() => {
+				const resolved = resolveProjectFromIssueSync(id);
+				return resolved ? getProjectSync(resolved.projectKey) : null;
+			})();
+			if (!staffingProject) return jsonResponse({ error: `Issue project not found for ${id}` }, { status: 404 });
+			let normalizedWorkModel;
+			try {
+				normalizedWorkModel = requireModelOverrideSync(workModelRaw.trim());
+			} catch (err) {
+				return jsonResponse({ error: err instanceof Error ? err.message : String(err) }, { status: 400 });
+			}
+			yield* Effect.promise(() => updateIssueRecord(staffingProject, id.toUpperCase(), (record) => {
+				record.workModel = normalizedWorkModel;
+			}));
+			console.log(`[start-planning] ${id} work agent model recorded: ${normalizedWorkModel} (planning agent uses the configured default)`);
+		}
 		console.log(`[start-planning] START for ${id}, workspaceLocation=${workspaceLocation}, shadow=${shadowMode}`);
 		emitActivityEntrySync({
 			source: "plan",
@@ -33315,7 +34631,7 @@ function restartFromPlan(options) {
 		});
 		const resetResult = yield* Effect.promise(async () => {
 			try {
-				const { runGitResetHard } = await import("./dangerous-git-ops-CT-IypG3.js");
+				const { runGitResetHard } = await import("./dangerous-git-ops-BXqeWVSf.js");
 				async function findPlanningCommit(grep, label) {
 					try {
 						const { stdout } = await execAsync$6(`git log --grep="${grep.replace(/"/g, "\\\"")}" --format=%H -1`, {
@@ -33461,7 +34777,6 @@ function getPlanningState(id) {
 }
 //#endregion
 //#region ../../lib/overdeck/discussions.ts
-init_cost_sync();
 init_pull_requests();
 init_issue_id();
 init_github_pr_lookup();
@@ -33768,7 +35083,7 @@ function closeOutIssue(id, opts = {}) {
 		}
 		const closeOutResult = yield* Effect.promise(async () => {
 			try {
-				const { closeOut } = await import("./lifecycle-sycO16hj.js");
+				const { closeOut } = await import("./lifecycle-xmBfK2GJ.js");
 				return {
 					ok: true,
 					result: await Effect.runPromise(closeOut(ctx, {
@@ -33857,7 +35172,7 @@ function bulkCloseOut(body) {
 		const invalidIds = issueIds.filter((id) => !isValidIssueId(id));
 		if (invalidIds.length > 0) return jsonResponse({ error: `Invalid issue ID format: ${invalidIds.join(", ")}` }, { status: 400 });
 		const eventStore = yield* EventStoreService;
-		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-sycO16hj.js"));
+		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-xmBfK2GJ.js"));
 		const issueDataService = getIssueDataService$5();
 		const tasks = [];
 		const agentChecks = yield* withConcurrencyLimit(issueIds.map((id) => Effect.promise(async () => {
@@ -34025,7 +35340,7 @@ const execFileAsync$13 = promisify(execFile);
 function getIssueDataService$4() {
 	return getSharedIssueService();
 }
-const readJsonBody$16 = Effect.gen(function* () {
+const readJsonBody$17 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -34083,8 +35398,8 @@ const getIssueShipLogRoute = HttpRouter.add("GET", "/api/issues/:id/ship-log", h
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { getShipLog } = await import("./ship-log-ClSMIzZX.js");
-		const { getReviewStatusSync } = await import("./review-status-C6n6-9f_.js");
+		const { getShipLog } = await import("./ship-log-D9MlVzYU.js");
+		const { getReviewStatusSync } = await import("./review-status-btEYlaxA.js");
 		const log = getShipLog(id);
 		const rs = getReviewStatusSync(id);
 		return jsonResponse({
@@ -34099,8 +35414,8 @@ const getIssueVerificationRoute = HttpRouter.add("GET", "/api/issues/:id/verific
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* Effect.promise(async () => {
-		const { readVerificationArtifact } = await import("./verification-artifact-C-lIHfUa.js");
-		const { getReviewStatusSync } = await import("./review-status-C6n6-9f_.js");
+		const { readVerificationArtifact } = await import("./verification-artifact-B3itKTxu.js");
+		const { getReviewStatusSync } = await import("./review-status-btEYlaxA.js");
 		const { join } = await import("node:path");
 		const resolved = resolveProjectFromIssueSync(id);
 		const workspacePath = resolved ? join(resolved.projectPath, "workspaces", `feature-${id.toLowerCase()}`) : null;
@@ -34118,7 +35433,7 @@ const postIssueCloseRoute = HttpRouter.add("POST", "/api/issues/:issueId/close",
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* closeIssueTransition({
 		issueId,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -34127,7 +35442,7 @@ const postIssueStartPlanningRoute = HttpRouter.add("POST", "/api/issues/:id/star
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* startPlanningForIssue({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		eventStore: yield* EventStoreService,
 		linear: yield* LinearClient,
 		github: yield* GitHubClient,
@@ -34140,7 +35455,7 @@ const postIssueAbortPlanningRoute = HttpRouter.add("POST", "/api/issues/:id/abor
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* abortPlanningForIssue({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		lifecycle: yield* IssueLifecycle,
 		linear: yield* LinearClient,
 		eventStore: yield* EventStoreService
@@ -34150,7 +35465,7 @@ const postIssueCompletePlanningRoute = HttpRouter.add("POST", "/api/issues/:id/c
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const id = (yield* HttpRouter.params)["id"] ?? "";
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
-	const body = yield* readJsonBody$16;
+	const body = yield* readJsonBody$17;
 	const eventStore = yield* EventStoreService;
 	const linear = yield* LinearClient;
 	const lifecycle = yield* IssueLifecycle;
@@ -34176,7 +35491,7 @@ const postIssueResetRoute = HttpRouter.add("POST", "/api/issues/:id/reset", http
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* resetIssueTransition({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -34200,7 +35515,7 @@ const postIssueCancelRoute = HttpRouter.add("POST", "/api/issues/:id/cancel", ht
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* cancelIssueTransition({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		eventStore: yield* EventStoreService
 	});
 })));
@@ -34211,7 +35526,7 @@ const postIssueReopenRoute = HttpRouter.add("POST", "/api/issues/:id/reopen", ht
 	if (authError) return authError;
 	return yield* reopenIssueTransition({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		lifecycle: yield* IssueLifecycle,
 		linear: yield* LinearClient,
 		eventStore: yield* EventStoreService
@@ -34231,7 +35546,7 @@ const postIssueMoveStatusRoute = HttpRouter.add("POST", "/api/issues/:id/move-st
 	if (!parseIssueIdSync(id)) return jsonResponse({ error: "Invalid issue ID" }, { status: 400 });
 	return yield* moveIssueStatus({
 		id,
-		body: yield* readJsonBody$16,
+		body: yield* readJsonBody$17,
 		eventStore: yield* EventStoreService,
 		lifecycle: yield* IssueLifecycle
 	});
@@ -34243,7 +35558,7 @@ const postIssueCleanupWorkspaceRoute = HttpRouter.add("POST", "/api/issues/:id/c
 })));
 const postIssueDeepWipeRoute = HttpRouter.add("POST", "/api/issues/:id/deep-wipe", httpHandler(Effect.gen(function* () {
 	const id = (yield* HttpRouter.params)["id"] ?? "";
-	const body = yield* readJsonBody$16;
+	const body = yield* readJsonBody$17;
 	const eventStore = yield* EventStoreService;
 	return yield* Effect.promise(() => deepWipeIssue(id, body, eventStore));
 })));
@@ -34299,7 +35614,7 @@ const postIssueTaskInspectRoute = HttpRouter.add("POST", "/api/issues/:id/tasks/
 	return yield* inspectIssueTask({
 		id: (params["id"] ?? "").toUpperCase(),
 		itemId: params["itemId"] ?? "",
-		body: yield* readJsonBody$16
+		body: yield* readJsonBody$17
 	});
 })));
 const getIssuePlanningStateRoute = HttpRouter.add("GET", "/api/issues/:id/planning-state", httpHandler(Effect.gen(function* () {
@@ -34418,6 +35733,21 @@ const getIssueCostsRoute = HttpRouter.add("GET", "/api/issues/:id/costs", httpHa
 const getResourceAllocatedIssuesRoute = HttpRouter.add("GET", "/api/issues/resource-allocated", httpHandler(Effect.gen(function* () {
 	return yield* getResourceAllocatedIssues();
 })));
+const getIssueResourceDetailsRoute = HttpRouter.add("GET", "/api/issues/:id/resource-details", httpHandler(Effect.gen(function* () {
+	return yield* getIssueResourceDetails((yield* HttpRouter.params)["id"] ?? "");
+})));
+const issuesRouteLayer = Layer.mergeAll(getIssuesRoute, getIssueAnalyzeRoute, getIssueShipLogRoute, getIssueVerificationRoute, postIssueCloseRoute, postIssueStartPlanningRoute, postIssueAbortPlanningRoute, postIssueCompletePlanningRoute, postIssueAbortRoute, postIssueResetRoute, postIssueResetToPlannedRoute, postIssueCancelRoute, postIssueReopenRoute, postIssueRestartFromPlanRoute, postIssueMoveStatusRoute, postIssueCleanupWorkspaceRoute, postIssueDeepWipeRoute, postIssueCopySettingsRoute, postIssueCloseOutRoute, postIssuesBulkCloseOutRoute, getIssueTasksRoute, postIssueTaskInspectRoute, getIssuePlanningStateRoute, postIssueGenerateTasksRoute, getIssueCostsRoute, getResourceAllocatedIssuesRoute, getIssueResourceDetailsRoute, getIssuePrRoute, getIssuePrDiffRoute, getIssuePrDetailsRoute, getIssueCheckRunsRoute, getIssueDiscussionsRoute);
+//#endregion
+//#region routes/pipeline-membership.ts
+/**
+* Pipeline-membership route module — the dashboard read/retry doors over the
+* cached membership snapshots (docs/PIPELINE-MEMBERSHIP.md).
+*
+* Endpoints:
+*   GET  /api/pipeline/membership?project=<key>          — snapshot read only
+*   POST /api/pipeline/membership/refresh?project=<key>  — operator retry (PAN-2972)
+*/
+init_projects();
 const getPipelineMembershipRoute = HttpRouter.add("GET", "/api/pipeline/membership", httpHandler(Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const projectKey = new URL(request.url, "http://localhost").searchParams.get("project");
@@ -34426,12 +35756,22 @@ const getPipelineMembershipRoute = HttpRouter.add("GET", "/api/pipeline/membersh
 	if (!project) return jsonResponse({ error: `Project not found: ${projectKey}` }, { status: 404 });
 	const snapshot = readPipelineMembershipSnapshotsForProjects([project])[0];
 	if (snapshot?.memberships) return jsonResponse(snapshot.memberships);
-	return jsonResponse({ error: "Pipeline membership snapshot is loading" }, { status: 503 });
+	return jsonResponse({ error: snapshot?.error instanceof Error ? snapshot.error.message : "Pipeline membership snapshot is loading" }, { status: 503 });
 })));
-const getIssueResourceDetailsRoute = HttpRouter.add("GET", "/api/issues/:id/resource-details", httpHandler(Effect.gen(function* () {
-	return yield* getIssueResourceDetails((yield* HttpRouter.params)["id"] ?? "");
+const postPipelineMembershipRefreshRoute = HttpRouter.add("POST", "/api/pipeline/membership/refresh", httpHandler(Effect.gen(function* () {
+	const request = yield* HttpServerRequest.HttpServerRequest;
+	const authError = rejectUnsafeDashboardMutationRequest(request);
+	if (authError) return authError;
+	const projectKey = new URL(request.url, "http://localhost").searchParams.get("project");
+	if (!projectKey) return jsonResponse({ error: "project query parameter is required" }, { status: 400 });
+	const project = getProjectSync(projectKey);
+	if (!project) return jsonResponse({ error: `Project not found: ${projectKey}` }, { status: 404 });
+	yield* Effect.promise(() => refreshMembershipSnapshotsForProjects([project]));
+	const snapshot = readPipelineMembershipSnapshotsForProjects([project])[0];
+	if (snapshot?.memberships) return jsonResponse(snapshot.memberships);
+	return jsonResponse({ error: snapshot?.error instanceof Error ? snapshot.error.message : "Pipeline membership refresh failed" }, { status: 502 });
 })));
-const issuesRouteLayer = Layer.mergeAll(getIssuesRoute, getIssueAnalyzeRoute, getIssueShipLogRoute, getIssueVerificationRoute, postIssueCloseRoute, postIssueStartPlanningRoute, postIssueAbortPlanningRoute, postIssueCompletePlanningRoute, postIssueAbortRoute, postIssueResetRoute, postIssueResetToPlannedRoute, postIssueCancelRoute, postIssueReopenRoute, postIssueRestartFromPlanRoute, postIssueMoveStatusRoute, postIssueCleanupWorkspaceRoute, postIssueDeepWipeRoute, postIssueCopySettingsRoute, postIssueCloseOutRoute, postIssuesBulkCloseOutRoute, getIssueTasksRoute, postIssueTaskInspectRoute, getIssuePlanningStateRoute, postIssueGenerateTasksRoute, getIssueCostsRoute, getResourceAllocatedIssuesRoute, getPipelineMembershipRoute, getIssueResourceDetailsRoute, getIssuePrRoute, getIssuePrDiffRoute, getIssuePrDetailsRoute, getIssueCheckRunsRoute, getIssueDiscussionsRoute);
+const pipelineMembershipRouteLayer = Layer.mergeAll(getPipelineMembershipRoute, postPipelineMembershipRefreshRoute);
 //#endregion
 //#region routes/costs.ts
 /**
@@ -34968,7 +36308,7 @@ function reloadDurableCloisterConfig(deps = {}) {
 */
 init_config$1();
 init_agents$1();
-const readJsonBody$15 = Effect.gen(function* () {
+const readJsonBody$16 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -35071,7 +36411,7 @@ const getCloisterConfigRoute = HttpRouter.add("GET", "/api/cloister/config", htt
 	catch: (err) => new Error(err instanceof Error ? err.message : String(err))
 })));
 const putCloisterConfigRoute = HttpRouter.add("PUT", "/api/cloister/config", httpHandler(Effect.gen(function* () {
-	const updates = yield* readJsonBody$15;
+	const updates = yield* readJsonBody$16;
 	yield* Effect.try({
 		try: () => {
 			saveCloisterConfigSync(updates);
@@ -36444,7 +37784,7 @@ const getStackTeardownEstimateRoute = HttpRouter.add("GET", "/api/resources/stac
 })));
 const postStackTeardownRoute = HttpRouter.add("POST", "/api/resources/stacks/:issueId/teardown", httpHandler(Effect.gen(function* () {
 	const params = yield* HttpRouter.params;
-	const body = yield* readJsonBody$14;
+	const body = yield* readJsonBody$15;
 	return yield* postStackTeardownEffect(params["issueId"] ?? "", body);
 })));
 function getStackTeardownEstimateEffect(issue) {
@@ -36618,7 +37958,7 @@ function lines(value) {
 function isDockerIdentifier(value) {
 	return /^[a-zA-Z0-9][a-zA-Z0-9_.:-]{0,127}$/.test(value);
 }
-const readJsonBody$14 = Effect.gen(function* () {
+const readJsonBody$15 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -36990,7 +38330,7 @@ function validateModelRef(fieldPath, ref, effectiveWorkhorses, errors, warnings,
 }
 function validateRoleFields(fieldPath, roleConfig, errors) {
 	const harness = roleConfig.harness;
-	if (harness !== void 0 && harness !== null && harness !== "" && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex") errors.push(`${fieldPath}.harness must be claude-code, ohmypi, codex, null, or empty string`);
+	if (harness !== void 0 && harness !== null && harness !== "" && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex" && harness !== "acp") errors.push(`${fieldPath}.harness must be claude-code, ohmypi, codex, acp, null, or empty string`);
 	const effort = roleConfig.effort;
 	if (effort !== void 0 && !ROLE_EFFORTS.includes(effort)) errors.push(`${fieldPath}.effort must be one of ${ROLE_EFFORTS.join(", ")}`);
 	const maxAgents = roleConfig.maxAgents;
@@ -37449,7 +38789,7 @@ function validateSettingsApi(settings) {
 			errors.push(`Unknown provider harness entry "${provider}"`);
 			continue;
 		}
-		if (harness !== void 0 && harness !== "" && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex") errors.push(`models.provider_harnesses.${provider} must be claude-code, ohmypi, codex, or empty string`);
+		if (harness !== void 0 && harness !== "" && harness !== "claude-code" && harness !== "ohmypi" && harness !== "codex" && harness !== "acp") errors.push(`models.provider_harnesses.${provider} must be claude-code, ohmypi, codex, acp, or empty string`);
 	}
 	if (settings.models?.overrides) {
 		const validModelIds = Object.keys(MODEL_CAPABILITIES);
@@ -38002,7 +39342,7 @@ function getProjectPath$1(issuePrefix) {
 	}
 	return setProjectPathCache(issuePrefix, join(homedir$1(), "Projects"));
 }
-const readJsonBody$13 = Effect.gen(function* () {
+const readJsonBody$14 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -38052,21 +39392,22 @@ async function fetchActivityDataWithContext(issueId, context = {}) {
 	const planningAgentId = `planning-${issueLower}`;
 	const planRunAgentId = `agent-${issueLower}-plan`;
 	const knowledgeAgentId = `agent-${issueLower}-knowledge`;
+	const strikeAgentId = `strike-${issueLower}`;
 	const agentsDir = join(homedir$1(), ".overdeck", "agents");
 	let hasPlanningSection = false;
 	for (const checkId of [
 		planningAgentId,
 		agentId,
 		planRunAgentId,
-		knowledgeAgentId
+		knowledgeAgentId,
+		strikeAgentId
 	]) {
 		const agentDir = join(agentsDir, checkId);
-		if (!await pathExists$4(agentDir)) continue;
 		const state = getAgentStateSync(checkId);
 		if (!state) continue;
 		try {
 			const isPlanning = checkId.startsWith("planning-") || state.role === "plan";
-			const sectionType = isPlanning ? "planning" : checkId.endsWith("-knowledge") ? "knowledge" : "work";
+			const sectionType = isPlanning ? "planning" : checkId.startsWith("strike-") ? "strike" : checkId.endsWith("-knowledge") ? "knowledge" : "work";
 			if (isPlanning) hasPlanningSection = true;
 			let transcript = "";
 			let transcriptFromPane = false;
@@ -38089,7 +39430,7 @@ async function fetchActivityDataWithContext(issueId, context = {}) {
 			const projectedAwaitingInput = awaitingInputFromProjection$1(checkId, context.agentSnapshotsById);
 			const awaitingInput = projectedAwaitingInput !== void 0 ? projectedAwaitingInput : transcriptFromPane ? detectAwaitingInputFromPaneSync(transcript, { isPlanning }) : tmuxSessionNames.has(checkId) ? await Effect.runPromise(detectAwaitingInputForAgent(checkId, { isPlanning })) : null;
 			const jsonlPath = await resolveJsonlPath(checkId, workspacePath);
-			const exposeInteractiveTerminal = sectionType === "work" || sectionType === "planning";
+			const exposeInteractiveTerminal = sectionType === "work" || sectionType === "planning" || sectionType === "strike";
 			const tmuxAlive = tmuxSessionNames.has(checkId);
 			const endedAt = rtState?.state === "suspended" || presence === "ended" || !!state.stoppedAt && !tmuxAlive ? state.stoppedAt || state.lastActivity || state.startedAt : void 0;
 			sections.push({
@@ -38690,7 +40031,7 @@ Be specific: reference actual file names, function names, requirement text, disc
 	const { command: cliCmd, args: cliArgs } = getAgentCommandSync(statusModelId);
 	const modelFlag = cliArgs.length > 0 ? ` ${cliArgs.join(" ")}` : "";
 	const promptFile = join(planningDir, ".status-review-prompt.tmp");
-	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-DKkBXhxU.js");
+	const { getProviderForModelSync, getProviderEnvSync } = await import("./providers-u4Ga0jOr.js");
 	let providerEnvStr = "";
 	let providerEnv = {};
 	const statusProvider = getProviderForModelSync(statusModelId);
@@ -38765,7 +40106,7 @@ ${issueContext ? `## Issue Tracker Data\n${issueContext}\n` : ""}---
 }
 const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/planning/:issueId/upload", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
-	const { type, filename, content } = yield* readJsonBody$13;
+	const { type, filename, content } = yield* readJsonBody$14;
 	const issueLower = issueId.toLowerCase();
 	const issuePrefix = extractPrefixSync(issueId) ?? issueId.split("-")[0];
 	if (!type || !filename || !content) return jsonResponse({ error: "type, filename, and content are required" }, { status: 400 });
@@ -38773,7 +40114,7 @@ const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/
 	let safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "-");
 	let processedContent = content;
 	if (safeName.endsWith(".vtt")) {
-		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-DKpNNW5i.js"));
+		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-DYPbKcIJ.js"));
 		processedContent = vttToMarkdown(content);
 		safeName = safeName.replace(/\.vtt$/, ".md");
 	}
@@ -38794,7 +40135,7 @@ const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/
 const postMissionControlSyncDiscussionsRoute = HttpRouter.add("POST", "/api/command-deck/planning/:issueId/sync-discussions", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
 	if (!parseIssueIdSync(issueId)) return jsonResponse({ error: "Invalid issue id: " + issueId }, { status: 400 });
-	const body = yield* readJsonBody$13;
+	const body = yield* readJsonBody$14;
 	const linear = yield* LinearClient;
 	const { tracker } = body;
 	const issueLower = issueId.toLowerCase();
@@ -38940,7 +40281,7 @@ const postMissionControlSyncDiscussionsRoute = HttpRouter.add("POST", "/api/comm
 })));
 const postMissionControlPlanningInitRoute = HttpRouter.add("POST", "/api/command-deck/planning/:issueId/init", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
-	const body = yield* readJsonBody$13;
+	const body = yield* readJsonBody$14;
 	const eventStore = yield* EventStoreService;
 	const { shadow } = body;
 	const issueLower = issueId.toLowerCase();
@@ -39025,7 +40366,7 @@ async function listRemoteWorkspaceMetadata() {
 	}
 	return workspaces;
 }
-const readJsonBody$12 = Effect.gen(function* () {
+const readJsonBody$13 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -39140,7 +40481,7 @@ const stopRemoteWorkspaceRoute = HttpRouter.add("POST", "/api/remote/workspaces/
 })));
 const startRemoteAgentRoute = HttpRouter.add("POST", "/api/remote/workspaces/:issueId/agent/start", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
-	const body = yield* readJsonBody$12;
+	const body = yield* readJsonBody$13;
 	const eventStore = yield* EventStoreService;
 	const { prompt, model } = body;
 	const metadata = yield* Effect.promise(() => loadRemoteWorkspaceMetadata(issueId));
@@ -39204,7 +40545,7 @@ const getRemoteAgentOutputRoute = HttpRouter.add("GET", "/api/remote/workspaces/
 })));
 const tellRemoteAgentRoute = HttpRouter.add("POST", "/api/remote/workspaces/:issueId/agent/tell", httpHandler(Effect.gen(function* () {
 	const issueId = (yield* HttpRouter.params)["issueId"] ?? "";
-	const { message } = yield* readJsonBody$12;
+	const { message } = yield* readJsonBody$13;
 	if (!message) return jsonResponse({ error: "Message is required" }, { status: 400 });
 	const metadata = yield* Effect.promise(() => loadRemoteWorkspaceMetadata(issueId));
 	if (!metadata) return jsonResponse({ error: "Remote workspace not found" }, { status: 404 });
@@ -39240,7 +40581,8 @@ async function buildHarnessPolicyDecisions(models, resolveAuthMode) {
 		decisions[model] = {
 			"claude-code": canUseHarnessSync("claude-code", model, authMode),
 			ohmypi: canUseHarnessSync("ohmypi", model, authMode),
-			codex: canUseHarnessSync("codex", model, authMode)
+			codex: canUseHarnessSync("codex", model, authMode),
+			acp: canUseHarnessSync("acp", model, authMode)
 		};
 	}
 	return decisions;
@@ -40033,7 +41375,7 @@ const state$1 = {
 	queue: [],
 	processing: false
 };
-function optionalString(value) {
+function optionalString$1(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function eventPriority(event) {
@@ -40062,9 +41404,9 @@ async function speakActivityTts(event) {
 	try {
 		if (await Effect.runPromise(resolveAndSpeak({
 			text: payload.utterance,
-			source: optionalString(payload.source),
-			eventType: optionalString(payload.eventType),
-			issueId: optionalString(payload.issueId),
+			source: optionalString$1(payload.source),
+			eventType: optionalString$1(payload.eventType),
+			issueId: optionalString$1(payload.issueId),
 			priority: typeof payload.priority === "number" ? payload.priority : void 0
 		}, { config })) === "daemon-unavailable") console.warn("[tts-playback] TTS daemon unavailable");
 	} catch (error) {
@@ -41953,6 +43295,12 @@ function prepareStmts(db) {
       DELETE FROM chunks_vec WHERE rowid IN (
         SELECT rowid FROM chunks WHERE session_id = ?
       )
+    `),
+		listFileCursors: db.prepare(`
+      SELECT file_path FROM file_cursors
+    `),
+		deleteCursor: db.prepare(`
+      DELETE FROM file_cursors WHERE file_path = ?
     `)
 	};
 }
@@ -42002,6 +43350,8 @@ function openEmbeddingsDb(dbPath, dimensions, options = {}) {
 			lastIndexedAt: null
 		}),
 		deleteSession: () => {},
+		listFileCursors: () => [],
+		deleteCursor: () => {},
 		close: () => {}
 	});
 	if (!Number.isInteger(dimensions) || dimensions <= 0) return unavailable(`Invalid embedding dimensions: ${dimensions}`);
@@ -42090,6 +43440,12 @@ function openEmbeddingsDb(dbPath, dimensions, options = {}) {
 			stmts.deleteEmbeddingsBySession.run(sessionId);
 			stmts.deleteChunksBySession.run(sessionId);
 		},
+		listFileCursors() {
+			return stmts.listFileCursors.all().map((row) => row.file_path);
+		},
+		deleteCursor(filePath) {
+			stmts.deleteCursor.run(filePath);
+		},
 		close() {
 			db.close();
 		}
@@ -42510,6 +43866,7 @@ const EMPTY_RESULT = {
 	filesIndexed: 0,
 	chunksIndexed: 0,
 	chunksSkipped: 0,
+	sessionsPruned: 0,
 	errors: [],
 	disabled: false
 };
@@ -42547,6 +43904,7 @@ async function indexConversationSearch(options = {}) {
 		};
 	}
 	try {
+		result.sessionsPruned = await pruneStaleIndexedSessions(owned.db, files);
 		let processed = 0;
 		for (const filePath of files) {
 			throwIfAborted(options.signal);
@@ -42776,6 +44134,25 @@ async function discoverConversationJsonlFiles(roots, signal) {
 	for (const root of roots) await collectJsonlFiles(root, files, signal);
 	return files.sort();
 }
+/**
+* Drop index rows whose JSONL transcript no longer exists on disk. Without this,
+* chunks and cursors outlive deleted sessions forever and palette search surfaces
+* hits that 404 when opened. Cursor paths are absolute, so the check is exact;
+* a session id still present in the discovered set keeps its chunks (the file was
+* moved or renamed, not deleted).
+*/
+async function pruneStaleIndexedSessions(db, files) {
+	const liveSessionIds = new Set(files.map(sessionIdFromPath));
+	let pruned = 0;
+	for (const cursorPath of db.listFileCursors()) {
+		if (await promises$1.stat(cursorPath).then(() => true, () => false)) continue;
+		db.deleteCursor(cursorPath);
+		if (liveSessionIds.has(sessionIdFromPath(cursorPath))) continue;
+		db.deleteSession(sessionIdFromPath(cursorPath));
+		pruned += 1;
+	}
+	return pruned;
+}
 async function collectJsonlFiles(dir, files, signal) {
 	throwIfAborted(signal);
 	let entries;
@@ -42831,6 +44208,18 @@ const DEFAULT_DEBOUNCE_MS = 250;
 const DEFAULT_WRITE_STABILITY_MS = 250;
 const DEFAULT_WRITE_POLL_MS = 50;
 let activeWatcher = null;
+/** Drop a deleted transcript's chunks and indexing cursor so search stops surfacing it. */
+async function defaultRemoveFile(options) {
+	const { filePath, config } = options;
+	const db = openEmbeddingsDb(config.dbPath, dimensionsForModel(config.model));
+	try {
+		if (!db.available) return;
+		db.deleteCursor(filePath);
+		db.deleteSession(sessionIdFromPath(filePath));
+	} finally {
+		db.close();
+	}
+}
 function watcherSignature(config, roots) {
 	return JSON.stringify({
 		enabled: config.enabled,
@@ -42848,6 +44237,7 @@ var ConversationSearchWatcher = class {
 	watchFactory;
 	indexAll;
 	indexFile;
+	removeFile;
 	maxConcurrentIndexers;
 	log;
 	signature;
@@ -42869,6 +44259,7 @@ var ConversationSearchWatcher = class {
 		this.watchFactory = options.watchFactory ?? ((paths, watchOptions) => watch$2(paths, watchOptions));
 		this.indexAll = options.indexAll ?? indexConversationSearch;
 		this.indexFile = options.indexFile ?? indexConversationFile;
+		this.removeFile = options.removeFile ?? defaultRemoveFile;
 		this.maxConcurrentIndexers = Math.max(1, options.maxConcurrentIndexers ?? 1);
 		this.log = options.log ?? console;
 	}
@@ -42884,7 +44275,10 @@ var ConversationSearchWatcher = class {
 		}).then((result) => {
 			if (signal.aborted || this.stopped) return;
 			if (result.disabled) this.log.warn(`[conversation-search] startup index skipped: ${result.unavailableReason ?? "disabled"}`);
-			else this.log.log(`[conversation-search] startup indexed ${result.chunksIndexed} chunk${result.chunksIndexed === 1 ? "" : "s"} across ${result.filesScanned} file${result.filesScanned === 1 ? "" : "s"}`);
+			else {
+				const prunedNote = result.sessionsPruned > 0 ? `, pruned ${result.sessionsPruned} stale session${result.sessionsPruned === 1 ? "" : "s"}` : "";
+				this.log.log(`[conversation-search] startup indexed ${result.chunksIndexed} chunk${result.chunksIndexed === 1 ? "" : "s"} across ${result.filesScanned} file${result.filesScanned === 1 ? "" : "s"}${prunedNote}`);
+			}
 			this.log.log(`[boot-timing] conversation-search startup index completed at +${Math.round(performance.now() - startupT0)}ms`);
 		}).catch((error) => {
 			if (!isAbortError(error)) this.log.warn("[conversation-search] startup index failed:", error);
@@ -42900,7 +44294,7 @@ var ConversationSearchWatcher = class {
 				pollInterval: DEFAULT_WRITE_POLL_MS
 			}
 		});
-		this.watcher.on("add", (filePath) => this.schedule(filePath)).on("change", (filePath) => this.schedule(filePath)).on("error", (error) => this.log.warn("[conversation-search] watcher error:", error));
+		this.watcher.on("add", (filePath) => this.schedule(filePath)).on("change", (filePath) => this.schedule(filePath)).on("unlink", (filePath) => this.remove(filePath)).on("error", (error) => this.log.warn("[conversation-search] watcher error:", error));
 	}
 	async stop() {
 		if (this.stopped) return;
@@ -42935,6 +44329,23 @@ var ConversationSearchWatcher = class {
 		this.queued.add(filePath);
 		this.drainQueue();
 	}
+	remove(filePath) {
+		if (this.stopped || !filePath.endsWith(".jsonl")) return;
+		const timer = this.pending.get(filePath);
+		if (timer) clearTimeout(timer);
+		this.pending.delete(filePath);
+		this.queued.delete(filePath);
+		this.rerun.delete(filePath);
+		const task = Promise.resolve().then(() => this.removeFile({
+			filePath,
+			config: this.config
+		})).catch((error) => {
+			this.log.warn(`[conversation-search] failed to prune deleted session ${filePath}:`, error);
+		}).finally(() => {
+			this.activeTasks.delete(task);
+		});
+		this.activeTasks.add(task);
+	}
 	drainQueue() {
 		if (this.stopped || this.startupTask) return;
 		const signal = this.abortController?.signal;
@@ -43275,7 +44686,7 @@ function consumeReindexConfirmationNonce(nonce, estimatedUsd) {
 	reindexConfirmationNonces.delete(nonce);
 	return !!entry && entry.expiresAt > Date.now() && Math.abs(entry.estimatedUsd - estimatedUsd) < 1e-6;
 }
-const readJsonBody$11 = Effect.gen(function* () {
+const readJsonBody$12 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -43348,7 +44759,7 @@ const getOpenAIAuthRoute = HttpRouter.add("GET", "/api/settings/openai-auth", ht
 	return jsonResponse(yield* getOpenAIAuthStatus());
 })));
 const postTestApiKeyRoute = HttpRouter.add("POST", "/api/settings/test-api-key", httpHandler(Effect.gen(function* () {
-	const { provider, apiKey, model } = yield* readJsonBody$11;
+	const { provider, apiKey, model } = yield* readJsonBody$12;
 	if (!provider || !apiKey) return jsonResponse({ error: "Provider and apiKey are required" }, { status: 400 });
 	return yield* Effect.promise(async () => {
 		let success = false;
@@ -43658,7 +45069,7 @@ const postTestApiKeyRoute = HttpRouter.add("POST", "/api/settings/test-api-key",
 	});
 })));
 const postValidateApiKeyRoute = HttpRouter.add("POST", "/api/settings/validate-api-key", httpHandler(Effect.gen(function* () {
-	const { provider, apiKey } = yield* readJsonBody$11;
+	const { provider, apiKey } = yield* readJsonBody$12;
 	if (!provider || !apiKey) return jsonResponse({ error: "Provider and apiKey are required" }, { status: 400 });
 	if (![
 		"openai",
@@ -43893,7 +45304,7 @@ const getConversationSearchReindexEstimateRoute = HttpRouter.add("GET", "/api/se
 const postConversationSearchReindexRoute = HttpRouter.add("POST", "/api/settings/conversation-search/reindex", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const body = yield* readJsonBody$11;
+	const body = yield* readJsonBody$12;
 	return yield* Effect.promise(async () => {
 		if (activeConversationSearchReindex) return jsonResponse({ error: "Conversation search reindex already in progress" }, { status: 409 });
 		const job = (async () => {
@@ -43943,7 +45354,7 @@ const getConversationSearchReindexProgressRoute = HttpRouter.add("GET", "/api/se
 	return jsonResponse(conversationReindexProgress);
 })));
 const putSettingsRoute = HttpRouter.add("PUT", "/api/settings", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$11;
+	const body = yield* readJsonBody$12;
 	return yield* Effect.promise(async () => {
 		try {
 			const newSettings = body;
@@ -43964,7 +45375,7 @@ const putSettingsRoute = HttpRouter.add("PUT", "/api/settings", httpHandler(Effe
 	});
 })));
 const putUiThemeRoute = HttpRouter.add("PUT", "/api/settings/ui-theme", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$11;
+	const body = yield* readJsonBody$12;
 	return yield* Effect.promise(async () => {
 		const theme = body?.theme;
 		if (theme !== "light" && theme !== "dark") return jsonResponse({ error: "theme must be 'light' or 'dark'" }, { status: 400 });
@@ -43979,7 +45390,7 @@ const getOpenRouterModelsRoute = HttpRouter.add("GET", "/api/settings/openrouter
 	});
 })));
 const putOpenRouterFavoritesRoute = HttpRouter.add("PUT", "/api/settings/openrouter/favorites", httpHandler(Effect.gen(function* () {
-	const { favorites } = yield* readJsonBody$11;
+	const { favorites } = yield* readJsonBody$12;
 	if (!Array.isArray(favorites)) return jsonResponse({ error: "favorites must be an array of model IDs" }, { status: 400 });
 	const modelIds = favorites.filter((f) => typeof f === "string");
 	return yield* Effect.promise(async () => {
@@ -43995,7 +45406,7 @@ const putOpenRouterFavoritesRoute = HttpRouter.add("PUT", "/api/settings/openrou
 	});
 })));
 const putOpenRouterApiKeyRoute = HttpRouter.add("PUT", "/api/settings/openrouter/api-key", httpHandler(Effect.gen(function* () {
-	const { apiKey } = yield* readJsonBody$11;
+	const { apiKey } = yield* readJsonBody$12;
 	if (apiKey !== void 0 && typeof apiKey !== "string") return jsonResponse({ error: "apiKey must be a string when provided" }, { status: 400 });
 	return yield* Effect.promise(async () => {
 		try {
@@ -44010,7 +45421,7 @@ const putOpenRouterApiKeyRoute = HttpRouter.add("PUT", "/api/settings/openrouter
 	});
 })));
 const postOpenRouterTestKeyRoute = HttpRouter.add("POST", "/api/settings/openrouter/test-key", httpHandler(Effect.gen(function* () {
-	const { apiKey } = yield* readJsonBody$11;
+	const { apiKey } = yield* readJsonBody$12;
 	if (!apiKey) return jsonResponse({ error: "apiKey is required" }, { status: 400 });
 	return jsonResponse(yield* (yield* OpenRouterService).validateApiKey(apiKey));
 })));
@@ -44063,7 +45474,7 @@ const getLegacyImportPreviewRoute = HttpRouter.add("GET", "/api/settings/legacy-
 const postLegacyImportRoute = HttpRouter.add("POST", "/api/settings/legacy-import/conversations", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const body = yield* readJsonBody$11;
+	const body = yield* readJsonBody$12;
 	return yield* Effect.try({
 		try: () => {
 			const { path, names } = body;
@@ -44075,7 +45486,7 @@ const postLegacyImportRoute = HttpRouter.add("POST", "/api/settings/legacy-impor
 const settingsRouteLayer = Layer.mergeAll(getSettingsRoute, getAvailableModelsRoute, getOptimalDefaultsRoute, getMiniMaxDefaultsRoute, getClaudeAuthRoute, getOpenAIAuthRoute, postTestApiKeyRoute, postValidateApiKeyRoute, getConversationSearchStatusRoute, getConversationSearchReindexEstimateRoute, postConversationSearchReindexRoute, getConversationSearchReindexProgressRoute, putSettingsRoute, putUiThemeRoute, getOpenRouterModelsRoute, putOpenRouterFavoritesRoute, putOpenRouterApiKeyRoute, postOpenRouterTestKeyRoute, getHarnessPolicyRoute, getProviderEnvConflictsRoute, getLegacyImportPreviewRoute, postLegacyImportRoute);
 //#endregion
 //#region routes/autopreso.ts
-const readJsonBody$10 = Effect.gen(function* () {
+const readJsonBody$11 = Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const contentLength = Number(request.headers["content-length"] ?? 0);
 	if (Number.isFinite(contentLength) && contentLength > 256e3) return {
@@ -44106,7 +45517,7 @@ function requireTrustedOrigin$1(request) {
 const startRoute = HttpRouter.add("POST", "/api/autopreso/start", httpHandler(Effect.gen(function* () {
 	const originError = requireTrustedOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (originError) return originError;
-	const parsed = yield* readJsonBody$10;
+	const parsed = yield* readJsonBody$11;
 	if (!parsed.ok) return jsonResponse({ error: parsed.error }, { status: 413 });
 	const elements = readElementLikes(parsed.body);
 	const validation = validateAutoPresoCanvasElements(elements);
@@ -44312,7 +45723,7 @@ const metricsRouteLayer = Layer.mergeAll(getMetricsSummaryRoute, getMetricsCosts
 //#region routes/boot-reconciliation.ts
 init_tmux();
 init_control_settings();
-const readJsonBody$9 = Effect.gen(function* () {
+const readJsonBody$10 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -44368,7 +45779,7 @@ function parsePerAgentMap(value) {
 	return parsed;
 }
 const postBootReconciliationDecisionRoute = HttpRouter.add("POST", "/api/boot-reconciliation/decision", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$9;
+	const body = yield* readJsonBody$10;
 	if (!isBootReconciliationDecision(body.decision)) return jsonResponse({
 		ok: false,
 		error: "Body must include decision resume_all, hold_all, or per_agent"
@@ -44465,7 +45876,7 @@ function getGitHubLocalPaths() {
 	}
 	return out;
 }
-const readJsonBody$8 = Effect.gen(function* () {
+const readJsonBody$9 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -44477,7 +45888,7 @@ const readJsonBody$8 = Effect.gen(function* () {
 //#region routes/misc/project-mappings.ts
 const getProjectMappingsRoute = HttpRouter.add("GET", "/api/project-mappings", httpHandler(Effect.promise(() => getProjectMappings().then((m) => jsonResponse(m)))));
 const putProjectMappingsRoute = HttpRouter.add("PUT", "/api/project-mappings", Effect.gen(function* () {
-	const mappings = yield* readJsonBody$8;
+	const mappings = yield* readJsonBody$9;
 	if (!Array.isArray(mappings)) return jsonResponse({ error: "Expected array of mappings" }, { status: 400 });
 	yield* Effect.promise(() => saveProjectMappings(mappings));
 	return jsonResponse({
@@ -44486,7 +45897,7 @@ const putProjectMappingsRoute = HttpRouter.add("PUT", "/api/project-mappings", E
 	});
 }));
 const postProjectMappingsRoute = HttpRouter.add("POST", "/api/project-mappings", Effect.gen(function* () {
-	const { linearProjectId, linearProjectName, linearPrefix, localPath } = yield* readJsonBody$8;
+	const { linearProjectId, linearProjectName, linearPrefix, localPath } = yield* readJsonBody$9;
 	if (!linearProjectId || !localPath) return jsonResponse({ error: "linearProjectId and localPath required" }, { status: 400 });
 	return yield* Effect.promise(async () => {
 		try {
@@ -44593,14 +46004,14 @@ const getTrackerStatusRoute = HttpRouter.add("GET", "/api/tracker-status", Effec
 	}
 }));
 const postRallyValidateRoute = HttpRouter.add("POST", "/api/rally/validate", Effect.gen(function* () {
-	const { apiKey, server, workspace, project } = yield* readJsonBody$8;
+	const { apiKey, server, workspace, project } = yield* readJsonBody$9;
 	if (!apiKey) return jsonResponse({
 		valid: false,
 		error: "API key is required"
 	}, { status: 400 });
 	return yield* Effect.promise(async () => {
 		try {
-			const { RallyRestApi } = await import("./rally-api-yjQ0TfHd.js");
+			const { RallyRestApi } = await import("./rally-api-ClOSd-Tt.js");
 			const api = new RallyRestApi({
 				apiKey,
 				server: server || "https://rally1.rallydev.com"
@@ -44942,7 +46353,7 @@ const getDeaconPauseRoute = HttpRouter.add("GET", "/api/deacon/pause", Effect.tr
 * Persists to `app_settings` so the flag survives dashboard restarts.
 */
 const postDeaconPauseRoute = HttpRouter.add("POST", "/api/deacon/pause", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$8;
+	const body = yield* readJsonBody$9;
 	if (typeof body.paused !== "boolean") return jsonResponse({ error: "Body must include { paused: boolean }" }, { status: 400 });
 	setDeaconGloballyPausedSync(body.paused);
 	console.log(`[deacon] Global pause flag set to ${body.paused}`);
@@ -44985,7 +46396,7 @@ const getPlanningStatusRoute = HttpRouter.add("GET", "/api/planning/:issueId/sta
 			const remoteState = loadRemoteAgentState(sessionName);
 			const isRemote = !!remoteState;
 			const vmName = remoteState?.vmName ?? "";
-			const { getAgentStateSync } = await import("./agents-FlIgQ3ql.js");
+			const { getAgentStateSync } = await import("./agents-wi9NWzs2.js");
 			const agentStarting = getAgentStateSync(sessionName)?.status === "starting";
 			let tmuxSessionAlive = false;
 			if (!isRemote) try {
@@ -45037,7 +46448,7 @@ const postPlanningMessageRoute = HttpRouter.add("POST", "/api/planning/:issueId/
 	const issueId = new URL(request.url, "http://localhost").pathname.split("/")[3] || "";
 	const sessionName = `planning-${issueId.toLowerCase()}`;
 	const issueLower = issueId.toLowerCase();
-	const { message } = yield* readJsonBody$8;
+	const { message } = yield* readJsonBody$9;
 	const eventStore = yield* EventStoreService;
 	if (!message) return jsonResponse({ error: "Message required" }, { status: 400 });
 	return yield* Effect.promise(async () => {
@@ -45129,7 +46540,7 @@ Continue the PLANNING session. Do NOT implement anything.
 			const agentCwd = workspacePath;
 			const harnessLaunch = await prepareHarnessLaunch("claude-code");
 			if (existsSync$1(outputFile)) await rename(outputFile, join(planningDir, `output-${Date.now()}.jsonl`));
-			const { getAgentCommandSync } = await import("./settings-D0OSwos5.js");
+			const { getAgentCommandSync } = await import("./settings-66A6uvIA.js");
 			let msgPlanningModel = "claude-sonnet-5";
 			try {
 				msgPlanningModel = resolveModel("plan", void 0, loadConfigSync().config);
@@ -45251,7 +46662,7 @@ async function getIndexStats(rootPath, isMain) {
 }
 const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DL566HbH.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		const results = [];
@@ -45296,7 +46707,7 @@ const getTldrStatusRoute = HttpRouter.add("GET", "/api/services/tldr/status", Ef
 }));
 const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DL566HbH.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -45313,7 +46724,7 @@ const postTldrStartRoute = HttpRouter.add("POST", "/api/services/tldr/start", Ef
 }));
 const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DL566HbH.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
 		const projectRoot = process.cwd();
 		const venvPath = join(projectRoot, ".venv");
 		if (!existsSync$1(venvPath)) return jsonResponse({ error: "No .venv found in project root" }, { status: 404 });
@@ -45330,7 +46741,7 @@ const postTldrStopRoute = HttpRouter.add("POST", "/api/services/tldr/stop", Effe
 }));
 const postTldrReloadRoute = HttpRouter.add("POST", "/api/services/tldr/reload", Effect.promise(async () => {
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-DL566HbH.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
 		const enabled = isTldrEnabledSync();
 		const projectRoot = process.cwd();
 		const targets = [];
@@ -45518,7 +46929,7 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	const version = await getOverdeckVersion();
 	let supervisorUrl = null;
 	try {
-		const { getSupervisorUrlSync } = await import("./supervisor-BPy-o1A8.js");
+		const { getSupervisorUrlSync } = await import("./supervisor-FTJAIsAK.js");
 		supervisorUrl = getSupervisorUrlSync();
 	} catch {}
 	return jsonResponse({
@@ -45528,11 +46939,11 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	});
 }));
 const getPrerequisitesRoute = HttpRouter.add("GET", "/api/prerequisites", Effect.promise(async () => {
-	const { checkSystemPrerequisites } = await import("./system-prerequisites-Bza0ffAh.js");
+	const { checkSystemPrerequisites } = await import("./system-prerequisites-DUDj1YHf.js");
 	return jsonResponse(await checkSystemPrerequisites());
 }));
 const getSetupDiagnosticsRoute = HttpRouter.add("GET", "/api/diagnostics/setup", Effect.promise(async () => {
-	const { collectSetupDiagnostics } = await import("./system-prerequisites-Bza0ffAh.js");
+	const { collectSetupDiagnostics } = await import("./system-prerequisites-DUDj1YHf.js");
 	return jsonResponse(await collectSetupDiagnostics(await getOverdeckVersion()));
 }));
 const getSyncStatusRoute = HttpRouter.add("GET", "/api/sync-status", Effect.sync(() => {
@@ -45576,7 +46987,7 @@ const getConfirmationsRoute = HttpRouter.add("GET", "/api/confirmations", Effect
 const postConfirmationRespondRoute = HttpRouter.add("POST", "/api/confirmations/:id/respond", Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const id = new URL(request.url, "http://localhost").pathname.split("/")[3] || "";
-	const { confirmed } = yield* readJsonBody$8;
+	const { confirmed } = yield* readJsonBody$9;
 	const confirmationRequest = pendingConfirmations.get(id);
 	if (!confirmationRequest) return jsonResponse({ error: "Confirmation request not found" }, { status: 404 });
 	return yield* Effect.promise(async () => {
@@ -45712,7 +47123,7 @@ const postShadowMonitorRoute = HttpRouter.add("POST", "/api/shadow/:issueId/moni
 			const projectPath = await getProjectPath(issuePrefix);
 			const workspacePath = join(projectPath, "workspaces", `feature-${issueLower}`);
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
-			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-BlxG6Xye.js");
+			const { gatherArtifacts, generateBasicInference, updateInferenceDocumentSync } = await import("./shadow-engineering-BJfgm-hX.js");
 			const config = {
 				issueId,
 				workspacePath,
@@ -45734,7 +47145,7 @@ const postShadowObserveRoute = HttpRouter.add("POST", "/api/shadow/:issueId/obse
 	const issueId = new URL(request.url, "http://localhost").pathname.split("/")[3] || "";
 	const issueLower = issueId.toLowerCase();
 	const issuePrefix = extractPrefixSync(issueId) ?? issueId.split("-")[0];
-	const { mode } = yield* readJsonBody$8;
+	const { mode } = yield* readJsonBody$9;
 	return yield* Effect.promise(async () => {
 		try {
 			const projectPath = await getProjectPath(issuePrefix);
@@ -45742,7 +47153,7 @@ const postShadowObserveRoute = HttpRouter.add("POST", "/api/shadow/:issueId/obse
 			if (!existsSync$1(workspacePath)) return jsonResponse({ error: "Workspace not found" }, { status: 404 });
 			const ghConfig = getGitHubConfig();
 			if (!ghConfig) return jsonResponse({ error: "GitHub not configured - Observer requires GitHub" }, { status: 400 });
-			const { runObserverCycle } = await import("./shadow-engineering-BlxG6Xye.js");
+			const { runObserverCycle } = await import("./shadow-engineering-BJfgm-hX.js");
 			const firstRepo = ghConfig.repos[0];
 			const config = {
 				issueId,
@@ -46023,8 +47434,6 @@ const updatesRouteLayer = Layer.mergeAll(getUpdateStatusRoute, postUpdateCheckRo
 const miscRouteLayer = Layer.mergeAll(trackersRouteLayer, projectMappingsRouteLayer, healthRouteLayer$1, deaconRouteLayer, bootReconciliationRouteLayer, planningRouteLayer, tldrRouteLayer, metaRouteLayer, updatesRouteLayer);
 //#endregion
 //#region ../../lib/conversation-search/ranker.ts
-init_fts_db();
-init_search();
 const DEFAULT_LIMIT$1 = 10;
 const DEFAULT_CANDIDATE_LIMIT = 50;
 const DEFAULT_RRF_K = 60;
@@ -46175,13 +47584,30 @@ async function searchConversationChunks(input) {
 					searchVector: (embedding, candidateLimit) => handle.db.searchVector(embedding, candidateLimit)
 				},
 				provider: handle.provider
-			}).then(resolve, (error) => {
+			}).then((hits) => filterLiveHits(handle.db, hits)).then(resolve, (error) => {
 				console.error("[conversation-search] service search failed:", error);
 				resolve([]);
 			});
 		});
 	});
 }
+/**
+* Drop hits whose transcript no longer exists on disk. Index pruning lags behind
+* file deletion (and only runs on full passes), so without this the palette can
+* surface a session whose JSONL is already gone — opening it 404s. Cursor paths
+* are the absolute paths the indexer wrote, so the stat is exact.
+*/
+async function filterLiveHits(db, hits) {
+	if (hits.length === 0) return hits;
+	const pathBySessionId = /* @__PURE__ */ new Map();
+	for (const filePath of db.listFileCursors()) pathBySessionId.set(sessionIdFromPath(filePath), filePath);
+	const live = await Promise.all(hits.map(async (hit) => {
+		const filePath = pathBySessionId.get(hit.sessionId);
+		if (!filePath) return false;
+		return stat$1(filePath).then(() => true, () => false);
+	}));
+	return hits.filter((_, index) => live[index]);
+}
 //#endregion
 //#region routes/palette.ts
 /**
@@ -46850,7 +48276,7 @@ function parseArchivedConversationListOptions(params) {
 	const rawLimit = parseOptionalNumberParam(params, "limit");
 	const rawOffset = parseOptionalNumberParam(params, "offset");
 	if (workspacePath) options.workspacePath = workspacePath;
-	if (harness === "claude-code" || harness === "ohmypi" || harness === "codex") options.harness = harness;
+	if (harness === "claude-code" || harness === "ohmypi" || harness === "codex" || harness === "acp") options.harness = harness;
 	if (primaryModel) options.primaryModel = primaryModel;
 	if (since) options.since = parseRelativeTime(since);
 	if (params.get("enriched") === "true") options.enriched = true;
@@ -47112,7 +48538,6 @@ async function getConversationDiffTurn(name, turnId, fileFilter, deps) {
 }
 //#endregion
 //#region ../../lib/conversations/discovered-session-file.ts
-init_features();
 async function resolveDiscoveredSessionFile(locator) {
 	if (!locator) return null;
 	const discovered = getDiscoveredSessionBySessionId(locator);
@@ -48791,6 +50216,7 @@ function isInGraphQLCooldown() {
 *
 * Dispatches verified webhook events to per-type handlers that update
 * review_status blockerReasons based on GitHub-native merge blockers.
+* Shared advisory-check classification excludes signals such as CodeRabbit from merge gates.
 */
 init_review_status();
 init_tracker_config();
@@ -48926,7 +50352,7 @@ async function refreshMergeStateFromGitHub(issueId, repo, prNumber) {
 		let mergeState;
 		let isDraft;
 		let checksFailed;
-		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-CPfoFAdV.js");
+		const { isGitHubAppConfigured, getPullRequestState } = await import("./github-app-ClZ2lk8D.js");
 		if (isGitHubAppConfigured()) {
 			const prState = await Effect.runPromise(getPullRequestState(owner, repoName, prNumber));
 			mergeable = prState.mergeable === null ? "UNKNOWN" : prState.mergeable ? "MERGEABLE" : "CONFLICTING";
@@ -48961,7 +50387,7 @@ async function refreshMergeStateFromGitHub(issueId, repo, prNumber) {
 			mergeable = (pr.mergeable ?? "").toUpperCase();
 			mergeState = (pr.mergeStateStatus ?? "").toUpperCase();
 			isDraft = pr.isDraft === true;
-			checksFailed = (pr.statusCheckRollup ?? []).some((c) => FAILING_CHECK_CONCLUSIONS.has((c.conclusion || c.state || "").toUpperCase()));
+			checksFailed = (pr.statusCheckRollup ?? []).some((check) => !isAdvisoryCheckName(check.name ?? check.context) && FAILING_CHECK_CONCLUSIONS.has((check.conclusion || check.state || "").toUpperCase()));
 		}
 		const status = await Effect.runPromise(getReviewStatus(issueId));
 		if (!status) return;
@@ -49040,10 +50466,12 @@ async function handleCheckRunPromise(payload) {
 	if (!run.pull_requests || run.pull_requests.length === 0) return;
 	const repo = payload.repository.full_name;
 	const sourceKey = `check_run:${run.name ?? String(run.id ?? "unknown")}`;
+	const isAdvisory = isAdvisoryCheckName(run.name);
 	for (const pr of run.pull_requests) {
 		const issueId = issueIdFromBranch(pr.head.ref);
 		if (!issueId) continue;
 		bumpIssuePrTabCacheGeneration(issueId);
+		if (isAdvisory) continue;
 		const status = await loadAndValidateStatus(issueId, repo, pr.number, pr.head.sha);
 		if (!status) continue;
 		let blockers = [...status.blockerReasons ?? []];
@@ -49075,8 +50503,8 @@ async function handlePullRequestPromise(payload) {
 	bumpIssuePrTabCacheGeneration(issueId);
 	const repo = payload.repository.full_name;
 	if (payload.action === "closed" && pr.merged === true) try {
-		const { postMergeLifecycle } = await import("./merge-agent-BQM3a8z5.js");
-		const { resolveProjectFromIssueSync } = await import("./projects-9SkRpES9.js");
+		const { postMergeLifecycle } = await import("./merge-agent-CKkgIBPB.js");
+		const { resolveProjectFromIssueSync } = await import("./projects-vjjcmiN8.js");
 		const project = resolveProjectFromIssueSync(issueId);
 		if (project) {
 			const branchName = pr.head.ref;
@@ -49241,11 +50669,14 @@ async function handleStatusPromise(payload) {
 	const branches = payload.branches;
 	if (!state || !branches || branches.length === 0) return;
 	const repo = payload.repository.full_name;
-	const sourceKey = `status:${payload.context ?? "default"}`;
+	const context = payload.context ?? "default";
+	const sourceKey = `status:${context}`;
+	const isAdvisory = isAdvisoryCheckName(context);
 	for (const branch of branches) {
 		const issueId = issueIdFromBranch(branch.name);
 		if (issueId) {
 			bumpIssuePrTabCacheGeneration(issueId);
+			if (isAdvisory) continue;
 			const status = await loadAndValidateStatus(issueId, repo, void 0, payload.sha);
 			if (!status) continue;
 			let blockers = [...status.blockerReasons ?? []];
@@ -49371,6 +50802,7 @@ async function reconcileStaleGitHubBlockers() {
 //#endregion
 //#region ../../lib/overdeck/conversation-forks.ts
 init_issue_id();
+init_model_validation();
 init_conversations();
 init_agents$1();
 init_providers();
@@ -49378,7 +50810,7 @@ init_paths();
 init_behavior();
 init_tmux();
 const execFileAsync$4 = promisify(execFile);
-const SAFE_MODEL_PATTERN = /^[a-zA-Z0-9_.:\/-]+$/;
+const SAFE_MODEL_PATTERN = MODEL_ID_PATTERN;
 const SESSION_FILE_MISS_TTL_MS = 2e3;
 const sessionFileByIdCache = /* @__PURE__ */ new Map();
 async function findClaudeSessionFileById(sessionId) {
@@ -49919,7 +51351,7 @@ startConversationModelBackfill(resolveSessionFile);
 function conversationReadJson(response) {
 	return jsonResponse(response.body, response.status === void 0 ? void 0 : { status: response.status });
 }
-const readJsonBody$7 = Effect.gen(function* () {
+const readJsonBody$8 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -49979,7 +51411,7 @@ const postConversationRoute = HttpRouter.add("POST", "/api/conversations", Effec
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const originCheck = validateOrigin$1(request);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	const reqOrigin = getHeader(request, "origin") ?? "none";
 	const reqReferer = getHeader(request, "referer") ?? "none";
 	const reqUserAgent = getHeader(request, "user-agent") ?? "none";
@@ -49998,14 +51430,14 @@ const postConversationResumeRoute = HttpRouter.add("POST", "/api/conversations/:
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => handleConversationResume(name, body, { resolveSessionFile }));
 }));
 const postConversationSwitchModelRoute = HttpRouter.add("POST", "/api/conversations/:name/switch-model", Effect.gen(function* () {
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			return await handleConversationSwitchModel(name, body);
@@ -50020,7 +51452,7 @@ const postConversationThinkingLevelRoute = HttpRouter.add("POST", "/api/conversa
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			return await handleConversationThinkingLevel(name, body);
@@ -50116,7 +51548,7 @@ const postConversationDeleteImageRoute = HttpRouter.add("POST", "/api/conversati
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			return await handleConversationImageDelete(name, body);
@@ -50131,7 +51563,7 @@ const postConversationMessageRoute = HttpRouter.add("POST", "/api/conversations/
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			return await handleConversationMessage(name, body, conversationMessageDependencies);
@@ -50151,14 +51583,14 @@ const postConversationCodexApprovalRoute = HttpRouter.add("POST", "/api/conversa
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const rawId = (yield* HttpRouter.params)["id"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(() => handleConversationCodexApproval(rawId, body));
 }));
 const postConversationDeliveryMethodRoute = HttpRouter.add("POST", "/api/conversations/:name/delivery-method", Effect.gen(function* () {
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			return await handleConversationDeliveryMethod(name, body);
@@ -50173,7 +51605,7 @@ const postConversationControlAckRoute = HttpRouter.add("POST", "/api/conversatio
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const originCheck = validateConversationControlAckOrigin(request.headers, request.method);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			const result = handleConversationControlAck(body);
@@ -50189,7 +51621,7 @@ const patchConversationRoute = HttpRouter.add("PATCH", "/api/conversations/:name
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(async () => {
 		try {
 			const result = patchConversationTitle(name, body);
@@ -50276,14 +51708,14 @@ const postConversationSummaryForkRoute = HttpRouter.add("POST", "/api/conversati
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const params = yield* HttpRouter.params;
 	const name = decodeURIComponent(params["name"] ?? "");
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(() => handleConversationSummaryFork(name, body));
 }));
 const postConversationPlanActionRoute = HttpRouter.add("POST", "/api/conversations/:name/plan-action", Effect.gen(function* () {
 	const originCheck = validateOrigin$1(yield* HttpServerRequest.HttpServerRequest);
 	if (!originCheck.ok) return jsonResponse({ error: originCheck.error }, { status: 403 });
 	const name = (yield* HttpRouter.params)["name"] ?? "";
-	const body = yield* readJsonBody$7;
+	const body = yield* readJsonBody$8;
 	return yield* Effect.promise(() => handleConversationPlanAction(name, body));
 }));
 const conversationDiffDependencies = {
@@ -50385,7 +51817,7 @@ const showRouteLayer = Layer.mergeAll(getShowRoute, getShowShadowRoute, getShowH
 //#endregion
 //#region routes/project-rename.ts
 init_projects();
-const readJsonBody$6 = Effect.gen(function* () {
+const readJsonBody$7 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -50397,7 +51829,7 @@ const postProjectRenameRoute = HttpRouter.add("POST", "/api/projects/:projectKey
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const projectIdentifier = (yield* HttpRouter.params)["projectKey"] ?? "";
-	const body = yield* readJsonBody$6;
+	const body = yield* readJsonBody$7;
 	if (typeof body.name !== "string") return jsonResponse({ error: "Project name must be a string" }, { status: 400 });
 	const result = yield* Effect.result(renameProject(projectIdentifier, body.name));
 	if (Result$1.isFailure(result)) {
@@ -50472,7 +51904,7 @@ async function registerProjectFromPath(opts) {
 	registerProjectSync(key, projectConfig);
 	const seededContextLayer = ensureProjectLayer(fullPath);
 	try {
-		const { preTrustDirectorySync } = await import("./workspace-manager-ZTdJAy9M.js");
+		const { preTrustDirectorySync } = await import("./workspace-manager-CWT55qeI.js");
 		preTrustDirectorySync(fullPath);
 	} catch {}
 	let hooksInstalled = 0;
@@ -50489,6 +51921,7 @@ async function registerProjectFromPath(opts) {
 //#region ../../lib/overdeck/specs.ts
 init_harness();
 init_render();
+init_assemble();
 init_specs();
 const findSpecByIssueThroughOverdeck = findSpecByIssue;
 //#endregion
@@ -50496,8 +51929,10 @@ const findSpecByIssueThroughOverdeck = findSpecByIssue;
 /** Projects route module — Effect HttpRouter.Layer (PAN-821). */
 init_projects();
 init_record();
+init_record_update();
 init_config_yaml();
 init_tier_table();
+init_model_validation();
 init_issue_id();
 init_tmux();
 init_concurrency$1();
@@ -50510,7 +51945,7 @@ init_specs();
 init_paths();
 const execAsync$2 = promisify(exec);
 async function getIssueDataService() {
-	const { getSharedIssueService } = await import("./issue-service-singleton-DabvBWUp.js");
+	const { getSharedIssueService } = await import("./issue-service-singleton-BvJ09SaR.js");
 	return getSharedIssueService();
 }
 /** Returns true if the path exists (any type). */
@@ -50651,7 +52086,6 @@ async function collectSessionTreeNodes(issueId, workspacePath, projectPath, cont
 	}
 	for (const sessionName of context.tmuxSessionNames) if (slotWorkSessionPattern.test(sessionName)) candidateSessionIds.add(sessionName);
 	for (const checkId of [...candidateSessionIds].sort((a, b) => compareSessionTreeSessionIds(a, b, issueLower))) {
-		if (!await pathExists$1(join(agentsDir, checkId))) continue;
 		const state = getAgentStateSync(checkId);
 		if (!state) continue;
 		try {
@@ -50896,17 +52330,19 @@ async function fetchProjectSessionTree(projectKey, sharedContext) {
 			const agentDir = join(getOverdeckHome(), "agents", `agent-${c.issueLower}`);
 			const planningAgentDir = join(getOverdeckHome(), "agents", `planning-${c.issueLower}`);
 			const planRunAgentDir = join(getOverdeckHome(), "agents", `agent-${c.issueLower}-plan`);
+			const strikeAgentDir = join(getOverdeckHome(), "agents", `strike-${c.issueLower}`);
 			const panDir = join(workspacesDir, c.name, PAN_DIRNAME);
 			const overdeckDir = join(workspacesDir, c.name, WORKSPACE_RUNTIME_DIRNAME);
 			const hasIssueTmux = liveTmuxIssueIds.has(c.issueLower);
-			const [hasAgent, hasPlanning, hasPlanningAgent, hasPlanRunAgent, hasOverdeck] = await Promise.all([
+			const [hasAgent, hasPlanning, hasPlanningAgent, hasPlanRunAgent, hasStrikeAgent, hasOverdeck] = await Promise.all([
 				pathExists$1(agentDir),
 				pathExists$1(panDir),
 				pathExists$1(planningAgentDir),
 				pathExists$1(planRunAgentDir),
+				pathExists$1(strikeAgentDir),
 				pathExists$1(overdeckDir)
 			]);
-			const hasAnySignal = hasAgent || hasPlanning || hasPlanningAgent || hasPlanRunAgent || hasOverdeck || hasIssueTmux;
+			const hasAnySignal = hasAgent || hasPlanning || hasPlanningAgent || hasPlanRunAgent || hasStrikeAgent || hasOverdeck || hasIssueTmux;
 			if (!hasAnySignal) return null;
 			try {
 				const workspacePath = join(workspacesDir, c.name);
@@ -50967,7 +52403,7 @@ const getProjectReleaseStatusRoute = HttpRouter.add("GET", "/api/projects/:proje
 	const projectKey = (yield* HttpRouter.params)["projectKey"] ?? "";
 	return jsonResponse(yield* Effect.tryPromise({
 		try: async () => {
-			const { fetchProjectReleaseStatus } = await import("./project-pipelines-2sK1apsO.js");
+			const { fetchProjectReleaseStatus } = await import("./project-pipelines-C0MWUeCU.js");
 			return fetchProjectReleaseStatus(projectKey);
 		},
 		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
@@ -51213,7 +52649,8 @@ init_domain_services();
 const PREVIEW_HARNESSES = [
 	"claude-code",
 	"ohmypi",
-	"codex"
+	"codex",
+	"acp"
 ];
 const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
 const execFileAsync$3 = promisify(execFile);
@@ -51377,7 +52814,7 @@ async function buildSyncTargets(projects) {
 	for (const { key, config } of projects) {
 		if (!(await readOptionalFile(resolveProjectContextFile(config.path))).exists) continue;
 		targets.push(await describeSyncTarget("claude-code", "project", key, `${config.name} · CLAUDE.md`, join(config.path, "CLAUDE.md")));
-		targets.push(await describeSyncTarget("pi", "project", key, `${config.name} · AGENTS.md`, join(config.path, "AGENTS.md")));
+		targets.push(await describeSyncTarget("ohmypi", "project", key, `${config.name} · AGENTS.md`, join(config.path, "AGENTS.md")));
 	}
 	return targets;
 }
@@ -51450,7 +52887,8 @@ async function renderBundledRulesAsync(harness) {
 }
 function renderLayerSections(layers, drafts, harness) {
 	return layers.map((layer) => {
-		const rendered = renderForHarness(contentForLayer(layer, drafts), harness).trim();
+		const raw = contentForLayer(layer, drafts);
+		const rendered = renderForHarness(harness === "acp" && layer.kind === "workspace" ? workspaceContextWithoutProjectLayer(raw) : raw, harness).trim();
 		return `## ${layer.kind === "global" ? "Global layer" : layer.kind === "project" ? `Project layer: ${layer.projectKey}` : `Workspace layer: ${layer.workspacePath}`}\n\n${rendered || "_No context in this layer._"}`;
 	}).join("\n\n---\n\n");
 }
@@ -51479,6 +52917,10 @@ function fullPromptPreview(previews) {
 		"",
 		previews.codex || "(no rendered context)",
 		"",
+		"## Overdeck-controlled ACP bundle",
+		"",
+		previews.acp || "(no rendered context)",
+		"",
 		"## Runtime-only sections",
 		"",
 		"- Memory retrieval: injected at agent spawn when enabled; unavailable in this layer editor preview.",
@@ -51516,6 +52958,7 @@ async function previewContextLayers(projects, requestOrSelectedLayer, maybeDraft
 			"claude-code": previews["claude-code"],
 			ohmypi: previews.ohmypi,
 			codex: previews.codex,
+			acp: previews.acp,
 			fullPrompt: fullPromptPreview(previews)
 		},
 		diagnostics: diagnosticsForLayers(layers, drafts)
@@ -51594,7 +53037,7 @@ function issueIdFromWorkspacePath(workspacePath) {
 	const match = /(?:^|[^a-z0-9])([a-z]+-\d+)(?:[^a-z0-9]|$)/i.exec(workspacePath);
 	return match ? match[1].toUpperCase() : null;
 }
-function readJsonBody$5() {
+function readJsonBody$6() {
 	return Effect.gen(function* () {
 		const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 		return text ? JSON.parse(text) : {};
@@ -51608,7 +53051,7 @@ const getContextLayersRoute = HttpRouter.add("GET", "/api/context/layers", httpH
 	return jsonResponse(yield* Effect.promise(() => loadContextLayers(projects)));
 })));
 const postContextPreviewRoute = HttpRouter.add("POST", "/api/context/preview", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$5();
+	const body = yield* readJsonBody$6();
 	const parsed = yield* Effect.try({
 		try: () => decodePreviewRequest(body),
 		catch: (error) => new Error(error instanceof Error ? error.message : String(error))
@@ -51617,7 +53060,7 @@ const postContextPreviewRoute = HttpRouter.add("POST", "/api/context/preview", h
 	return jsonResponse(yield* Effect.promise(() => previewContextLayers(projects, parsed)));
 })));
 const putContextLayerRoute = HttpRouter.add("PUT", "/api/context/layers", httpHandler(Effect.gen(function* () {
-	const body = yield* readJsonBody$5();
+	const body = yield* readJsonBody$6();
 	const parsed = yield* Effect.try({
 		try: () => decodeSaveRequest(body),
 		catch: (error) => new Error(error instanceof Error ? error.message : String(error))
@@ -51934,7 +53377,7 @@ async function installOx() {
 *   GET  /api/prereqs/:feature    — check which tools are missing for a feature
 *   POST /api/prereqs/install     — install a specific tool by name
 */
-const readJsonBody$4 = Effect.gen(function* () {
+const readJsonBody$5 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return text ? JSON.parse(text) : {};
@@ -51971,7 +53414,7 @@ const checkFeatureRoute = HttpRouter.add("GET", "/api/prereqs/:feature", httpHan
 	});
 })));
 const installToolRoute = HttpRouter.add("POST", "/api/prereqs/install", httpHandler(Effect.gen(function* () {
-	const tool = (yield* readJsonBody$4).tool;
+	const tool = (yield* readJsonBody$5).tool;
 	if (!tool) return jsonResponse({ error: "Missing 'tool' in request body" }, { status: 400 });
 	if (!INSTALLABLE_TOOLS.some((t) => t === tool)) return jsonResponse({ error: `Tool '${tool}' is not auto-installable` }, { status: 400 });
 	const result = yield* Effect.promise(() => installTool(tool));
@@ -52491,7 +53934,6 @@ const webhooksRouteLayer = HttpRouter.add("POST", "/api/webhooks/github", httpHa
 })));
 //#endregion
 //#region ../../lib/overdeck/title-refinement.ts
-init_paths$2();
 /**
 * Hook-driven progressive conversation title refinement.
 *
@@ -52600,12 +54042,7 @@ function isCurrentSessionMiss(observation, identity) {
 }
 //#endregion
 //#region ../../lib/memory/checkpoint-client.ts
-init_settings();
-init_health();
-init_providers$1();
 init_pending();
-init_query_expansion();
-init_injection();
 let worker = null;
 let nextRequestId = 1;
 const pendingRequests = /* @__PURE__ */ new Map();
@@ -52638,7 +54075,7 @@ function getCheckpointWorker() {
 	return worker;
 }
 async function runInline(operation, payload) {
-	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-CpgCjAlN.js");
+	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-BJIs5QIA.js");
 	switch (operation) {
 		case "claimTranscriptRange": return claimTranscriptRange(payload);
 		case "commitTranscriptRange": return commitTranscriptRange(payload);
@@ -53792,7 +55229,7 @@ function buildPendingTurn(input, fromOffset, toOffset, compressed) {
 	};
 }
 async function emitMemoryObservationCreated(observation, timestamp) {
-	const { initEventStore } = await import("./event-store-Cr5PQwFC.js");
+	const { initEventStore } = await import("./event-store-EV2cMiXj.js");
 	await (await initEventStore()).appendAsync({
 		type: "memory.observation_created",
 		timestamp,
@@ -54818,6 +56255,7 @@ init_paths$2();
 init_read_model();
 init_conversations();
 init_briefing_freshness();
+init_injection();
 init_settings();
 const MEMORY_INJECT_FAST_RESPONSE_TIMEOUT_MS = 750;
 const CLEAR_ON = new Set([
@@ -55472,7 +56910,7 @@ const diffsRouteLayer = Layer.mergeAll(getDiffsRoute, getTurnDiffRoute, getFullD
 * folded into that RPC surface.
 */
 init_tmux();
-const readJsonBody$3 = Effect.gen(function* () {
+const readJsonBody$4 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	return text ? JSON.parse(text) : {};
 });
@@ -55496,7 +56934,7 @@ function generateTerminalSessionName() {
 const postTerminalRoute = HttpRouter.add("POST", "/api/terminals", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnauthorized(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const cwd = resolveCwd((yield* readJsonBody$3).cwd);
+	const cwd = resolveCwd((yield* readJsonBody$4).cwd);
 	const sessionName = generateTerminalSessionName();
 	yield* createSession(sessionName, cwd, void 0, { env: { PATH: process.env.PATH || "" } });
 	return jsonResponse({
@@ -56579,7 +58017,7 @@ async function assertWritePathInsideRoot(projectRoot, candidate) {
 	}
 	return { ok: true };
 }
-const readJsonBody$2 = Effect.gen(function* () {
+const readJsonBody$3 = Effect.gen(function* () {
 	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
 	try {
 		return {
@@ -56804,7 +58242,7 @@ async function getFlywheelConversationPayload() {
 	};
 }
 async function postFlywheelReportPayload() {
-	const { flywheelReportCommand } = await import("./flywheel-DcBkQvgE.js");
+	const { flywheelReportCommand } = await import("./flywheel-DzGtWnJ1.js");
 	await flywheelReportCommand({ cwd: process.cwd() });
 	return {
 		status: 200,
@@ -56962,11 +58400,11 @@ const getMergeBlockersRoute = HttpRouter.add("GET", "/api/flywheel/merge-blocker
 async function defaultGetOrderedIssueIds() {
 	const status = await readCurrentFlywheelStatusForDashboard();
 	if (!status) return [];
-	const { computeMergeQueue } = await import("./flywheel-merge-order-C-6zRLvM.js");
+	const { computeMergeQueue } = await import("./flywheel-merge-order-UUcsCDb6.js");
 	return (await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd()).pipe(Effect.provide(layer)))).map((i) => i.issueId);
 }
 async function defaultMergeOne(issueId) {
-	const { triggerMerge } = await import("./merge-ops-DlB1IM0Y.js");
+	const { triggerMerge } = await import("./merge-ops-CR44oU9-.js");
 	const r = await triggerMerge(issueId);
 	return r.success ? { ok: true } : {
 		ok: false,
@@ -56986,7 +58424,7 @@ async function postFlywheelMergeNextPayload(payload, deps = {}) {
 		body: { error: "n must be a positive integer" }
 	};
 	const issueIds = (await (deps.getOrderedIssueIds ?? defaultGetOrderedIssueIds)()).slice(0, n);
-	const { shipMergeBatch } = await import("./merge-batch-Bwoyr8Je.js");
+	const { shipMergeBatch } = await import("./merge-batch-ClFn2T-y.js");
 	return {
 		status: 200,
 		body: { outcomes: await shipMergeBatch(issueIds, { merge: deps.merge ?? defaultMergeOne }) }
@@ -57120,7 +58558,7 @@ const getFlywheelBriefRoute = HttpRouter.add("GET", "/api/flywheel/brief", httpH
 const postFlywheelBriefRoute = HttpRouter.add("POST", "/api/flywheel/brief", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnauthorizedDashboardRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const parsed = yield* readJsonBody$2;
+	const parsed = yield* readJsonBody$3;
 	if (!parsed.ok) return jsonResponse({ error: parsed.error }, { status: 400 });
 	const body = parsed.body;
 	if (typeof body.content !== "string") return jsonResponse({ error: "content must be a string" }, { status: 400 });
@@ -57143,7 +58581,7 @@ const getFlywheelMergeQueueRoute = HttpRouter.add("GET", "/api/flywheel/merge-qu
 	return yield* Effect.promise(async () => {
 		const status = await readCurrentFlywheelStatusForDashboard();
 		if (!status) return jsonResponse([]);
-		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-C-6zRLvM.js");
+		const { computeMergeQueue, resolveMergeQueuePrUrl } = await import("./flywheel-merge-order-UUcsCDb6.js");
 		return jsonResponse(await Effect.runPromise(computeMergeQueue(status.activePipeline, process.cwd(), { getPrUrl: resolveMergeQueuePrUrl }).pipe(Effect.provide(layer))));
 	});
 })));
@@ -57157,18 +58595,18 @@ function uatGenerationNameFromParam(param) {
 	return decoded.startsWith("uat/") ? decoded : `uat/${decoded}`;
 }
 const getUatGenerationsRoute = HttpRouter.add("GET", "/api/flywheel/uat-generations", httpHandler(Effect.gen(function* () {
-	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-cKfM-_WW.js"));
+	const { getUatGenerationsPayload } = yield* Effect.promise(() => import("./uat-train-B05BWkp-.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatGenerationsPayload()));
 })));
 const getUatCandidateRoute = HttpRouter.add("GET", "/api/flywheel/uat-candidate", httpHandler(Effect.gen(function* () {
-	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-cKfM-_WW.js"));
+	const { getUatCandidatePayload } = yield* Effect.promise(() => import("./uat-train-B05BWkp-.js"));
 	return jsonResponse(yield* Effect.promise(() => getUatCandidatePayload()));
 })));
 const postUatGenerationStackRoute = HttpRouter.add("POST", "/api/flywheel/uat-generations/:name/stack", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-cKfM-_WW.js"));
+	const { postUatGenerationStackPayload } = yield* Effect.promise(() => import("./uat-train-B05BWkp-.js"));
 	const result = yield* Effect.promise(() => postUatGenerationStackPayload(name));
 	if (!result.ok) return jsonResponse({ error: result.error }, { status: result.status });
 	return jsonResponse({
@@ -57180,8 +58618,8 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
 	const name = uatGenerationNameFromParam((yield* HttpRouter.params)["name"] ?? "");
-	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-cKfM-_WW.js"));
-	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-D5fRZXmN.js"));
+	const { postUatGenerationPromotePayload } = yield* Effect.promise(() => import("./uat-train-B05BWkp-.js"));
+	const { firePostMergeLifecycle } = yield* Effect.promise(() => import("./specialists-CShuVGWT.js"));
 	const result = yield* Effect.promise(() => postUatGenerationPromotePayload(name, firePostMergeLifecycle));
 	if (!result.success) return jsonResponse(result, { status: result.reason === "not-found" ? 404 : result.reason === "merge-failed" ? 500 : 409 });
 	return jsonResponse(result);
@@ -57194,7 +58632,7 @@ const postUatGenerationPromoteRoute = HttpRouter.add("POST", "/api/flywheel/uat-
 const postFlywheelAssembleUatRoute = HttpRouter.add("POST", "/api/flywheel/assemble-uat", httpHandler(Effect.gen(function* () {
 	const authError = rejectUnsafeDashboardMutationRequest(yield* HttpServerRequest.HttpServerRequest);
 	if (authError) return authError;
-	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-cKfM-_WW.js"));
+	const { runUatTrainReconcile } = yield* Effect.promise(() => import("./uat-train-B05BWkp-.js"));
 	return jsonResponse(yield* Effect.promise(() => runUatTrainReconcile({ force: true })));
 })));
 const getFlywheelStateRoute = HttpRouter.add("GET", "/api/flywheel/state", httpHandler(Effect.gen(function* () {
@@ -57202,6 +58640,419 @@ const getFlywheelStateRoute = HttpRouter.add("GET", "/api/flywheel/state", httpH
 })));
 const flywheelRouteLayer = Layer.mergeAll(getFlywheelRunsRoute, getFlywheelRunRoute, getFlywheelConversationRoute, getFlywheelCurrentRoute, getFlywheelStatsRoute, getSubstrateBugWeightsRoute, getFlywheelConfigRoute, postFlywheelConfigRoute, getPendingAutoMergeRoute, getAutoMergeProblemsRoute, getMergeBlockersRoute, getMergeBackendRoute, postAutoMergeScheduleRoute, postFlywheelMergeNextRoute, deleteAutoMergeRoute, getFlywheelMergeQueueRoute, getUatGenerationsRoute, getUatCandidateRoute, postUatGenerationStackRoute, postUatGenerationPromoteRoute, postFlywheelAssembleUatRoute, getFlywheelStateRoute, postFlywheelStatusRoute, postFlywheelStartRoute, postFlywheelPauseRoute, postFlywheelResumeRoute, postFlywheelAbortRoute, postFlywheelReportRoute, postFlywheelReportOpenRoute, getFlywheelBriefRoute, postFlywheelBriefRoute);
 //#endregion
+//#region routes/orders.ts
+init_projects();
+function stateRootFor(deps) {
+	if (deps.stateRoot) return deps.stateRoot();
+	const project = findProjectByPathSync(process.cwd());
+	if (!project) throw new Error(`No configured project contains ${process.cwd()}`);
+	return resolveStateReadHomeSync(project).root;
+}
+function errorResult(error) {
+	const message = error instanceof Error ? error.message : String(error);
+	if (/not found/i.test(message)) return {
+		status: 404,
+		body: { error: message }
+	};
+	if (/already (exists|belongs|running|active)|multiple non-complete/i.test(message)) return {
+		status: 409,
+		body: { error: message }
+	};
+	if (/invalid|required|must be|cannot be empty|positive integer|server-controlled|may only transition/i.test(message)) return {
+		status: 400,
+		body: { error: message }
+	};
+	return {
+		status: 500,
+		body: { error: message }
+	};
+}
+async function routeResult(action) {
+	try {
+		return {
+			status: 200,
+			body: await action()
+		};
+	} catch (error) {
+		return errorResult(error);
+	}
+}
+function resultResponse(result) {
+	return jsonResponse(result.body, { status: result.status });
+}
+function requireBook(stateRoot, bookId) {
+	const book = getBook(stateRoot, bookId);
+	if (!book) throw new Error(`Order book not found: ${bookId}`);
+	return book;
+}
+function requireString(value, field) {
+	if (typeof value !== "string" || !value.trim()) throw new Error(`${field} is required`);
+	return value.trim();
+}
+function optionalString(value, field) {
+	if (value === void 0) return void 0;
+	if (typeof value !== "string") throw new Error(`${field} must be a string`);
+	return value;
+}
+function optionalBoolean(value, field) {
+	if (value === void 0) return void 0;
+	if (typeof value !== "boolean") throw new Error(`${field} must be a boolean`);
+	return value;
+}
+function lane(value, fallback) {
+	if (value === void 0 && fallback) return fallback;
+	if (value !== "A" && value !== "B") throw new Error("lane must be A or B");
+	return value;
+}
+function positiveInteger(value, field, fallback) {
+	if (value === void 0 && fallback !== void 0) return fallback;
+	if (!Number.isInteger(value) || Number(value) < 1) throw new Error(`${field} must be a positive integer`);
+	return Number(value);
+}
+function stringArray(value, field) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string" || !entry.trim())) throw new Error(`${field} must be an array of non-empty strings`);
+	return value.map((entry) => entry.trim().toUpperCase());
+}
+function record(value, field) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${field} must be an object`);
+	return value;
+}
+function settingsPatch(value) {
+	const raw = record(value, "settings");
+	if ("postureSetAt" in raw || "postureSetBy" in raw) throw new Error("postureSetAt and postureSetBy are server-controlled");
+	const result = {};
+	if ("laneAConcurrency" in raw) result.laneAConcurrency = positiveInteger(raw["laneAConcurrency"], "laneAConcurrency");
+	if ("briefOverlay" in raw) result.briefOverlay = optionalString(raw["briefOverlay"], "briefOverlay");
+	if ("posture" in raw) {
+		if (raw["posture"] !== "open" && raw["posture"] !== "drain") throw new Error("posture must be open or drain");
+		result.posture = raw["posture"];
+	}
+	if ("postureReason" in raw) result.postureReason = optionalString(raw["postureReason"], "postureReason");
+	return result;
+}
+function slugify(value) {
+	return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "order-book";
+}
+function nextBookId(stateRoot, name, now) {
+	const base = `${now.toISOString().slice(0, 10)}-${slugify(name)}`;
+	if (!getBook(stateRoot, base)) return base;
+	let suffix = 2;
+	while (getBook(stateRoot, `${base}-${suffix}`)) suffix += 1;
+	return `${base}-${suffix}`;
+}
+function buildOrdersReadSnapshot(deps) {
+	const stateRoot = stateRootFor(deps);
+	const books = listBooks(stateRoot);
+	const issueIds = [...new Set(books.flatMap((book) => book.items.flatMap((item) => [item.issue, ...item.prereqs])))];
+	const issueState = (deps.issueLookup ?? liveOrderIssueLookup)(issueIds);
+	const issueLookup = (requested) => new Map(requested.flatMap((issueId) => {
+		const state = issueState.get(issueId.toUpperCase());
+		return state ? [[issueId.toUpperCase(), state]] : [];
+	}));
+	return {
+		stateRoot,
+		books,
+		issueState,
+		issueLookup,
+		hasPrd: deps.hasPrd ?? createOrderPrdLookup(stateRoot)
+	};
+}
+function enrichedBook(book, deps, snapshot) {
+	const stateRoot = snapshot?.stateRoot ?? stateRootFor(deps);
+	const hasPrd = snapshot?.hasPrd ?? deps.hasPrd ?? ((issueId) => hasOrderIssuePrd(stateRoot, issueId));
+	const issueLookup = snapshot?.issueLookup ?? deps.issueLookup;
+	const prerequisiteIds = [...new Set(book.items.flatMap((item) => item.prereqs.map((prereq) => prereq.toUpperCase())))];
+	const prerequisiteState = snapshot?.issueState ?? issueLookup?.(prerequisiteIds) ?? /* @__PURE__ */ new Map();
+	return {
+		...book,
+		progress: computeBookProgress(book, issueLookup),
+		validation: validateBookForStart(stateRoot, book, {
+			issueLookup,
+			hasPrd,
+			books: snapshot?.books
+		}),
+		itemReadiness: Object.fromEntries(book.items.map((item) => [item.issue, { hasPrd: hasPrd(item.issue) }])),
+		prerequisiteTerminal: Object.fromEntries(prerequisiteIds.map((issue) => {
+			const state = prerequisiteState.get(issue);
+			return [issue, state ? !state.open || state.parked : false];
+		}))
+	};
+}
+function parseItems(book, value) {
+	const rawItems = Array.isArray(value) ? value : [value];
+	if (rawItems.length === 0) throw new Error("items is required");
+	const laneCounts = new Map([["A", book.items.filter((item) => item.lane === "A").length], ["B", book.items.filter((item) => item.lane === "B").length]]);
+	return rawItems.map((entry, index) => {
+		const raw = record(entry, `items[${index}]`);
+		const itemLane = lane(raw["lane"], "A");
+		const nextOrder = (laneCounts.get(itemLane) ?? 0) + 1;
+		laneCounts.set(itemLane, nextOrder);
+		const planAtPickup = optionalBoolean(raw["planAtPickup"], "planAtPickup");
+		return {
+			issue: requireString(raw["issue"], "issue").toUpperCase(),
+			lane: itemLane,
+			order: positiveInteger(raw["order"], "order", nextOrder),
+			prereqs: stringArray(raw["prereqs"], "prereqs"),
+			reVerify: optionalBoolean(raw["reVerify"], "reVerify") ?? false,
+			...planAtPickup === void 0 ? {} : { planAtPickup }
+		};
+	});
+}
+function previewBrief(book) {
+	const lines = [
+		`# Special orders: ${book.name}`,
+		"",
+		`Order book: ${book.id}`,
+		`Posture: ${book.settings.posture.toUpperCase()}`,
+		"",
+		"This order book defines the operator-released scope. Standard flywheel doctrine and the standard brief remain in force."
+	];
+	for (const laneName of ["A", "B"]) {
+		lines.push("", `## Lane ${laneName}`);
+		const items = book.items.filter((item) => item.lane === laneName).sort((left, right) => left.order - right.order);
+		if (items.length === 0) {
+			lines.push("- Empty");
+			continue;
+		}
+		for (const item of items) {
+			const flags = [
+				item.prereqs.length > 0 ? `after ${item.prereqs.join(", ")}` : "",
+				item.reVerify ? "re-verify PRD" : "",
+				item.planAtPickup ? "plan at pickup" : ""
+			].filter(Boolean);
+			lines.push(`- ${laneName}${item.order} ${item.issue}${flags.length ? ` — ${flags.join("; ")}` : ""}`);
+		}
+	}
+	return `${lines.join("\n")}\n`;
+}
+async function defaultStartOrderBook(book) {
+	const { startFlywheelRun } = await import("./flywheel-DzGtWnJ1.js");
+	return startFlywheelRun({
+		cwd: process.cwd(),
+		orders: book.id
+	});
+}
+async function getOrdersPayload(deps = {}) {
+	return routeResult(async () => {
+		const snapshot = buildOrdersReadSnapshot(deps);
+		return { books: snapshot.books.map((book) => enrichedBook(book, deps, snapshot)) };
+	});
+}
+async function postOrderPayload(body, deps = {}) {
+	return routeResult(async () => {
+		const stateRoot = stateRootFor(deps);
+		const name = requireString(body["name"], "name");
+		return enrichedBook(await createBook(stateRoot, {
+			id: body["id"] === void 0 ? nextBookId(stateRoot, name, (deps.now ?? (() => /* @__PURE__ */ new Date()))()) : requireString(body["id"], "id"),
+			name,
+			settings: body["settings"] === void 0 ? void 0 : settingsPatch(body["settings"])
+		}), deps);
+	});
+}
+async function getOrderPayload(bookId, deps = {}) {
+	return routeResult(async () => enrichedBook(requireBook(stateRootFor(deps), bookId), deps));
+}
+async function patchOrderPayload(bookId, body, deps = {}) {
+	return routeResult(async () => {
+		const stateRoot = stateRootFor(deps);
+		const patch = body["settings"] === void 0 ? void 0 : settingsPatch(body["settings"]);
+		if (patch?.posture !== void 0) {
+			patch.postureSetAt = (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString();
+			patch.postureSetBy = (deps.actor ?? (() => "dashboard"))();
+		}
+		if (body["status"] !== void 0) {
+			if (body["status"] !== "ready") throw new Error("status may only transition to ready through this route");
+			if (body["runId"] !== void 0) throw new Error("runId is server-controlled");
+			if (requireBook(stateRoot, bookId).status !== "draft") throw new Error(`Order book ${bookId} must be draft before it can be queued`);
+		}
+		let changed = false;
+		if (body["name"] !== void 0) {
+			await renameBook(stateRoot, bookId, requireString(body["name"], "name"));
+			changed = true;
+		}
+		if (patch !== void 0) {
+			await setSettings(stateRoot, bookId, patch);
+			changed = true;
+		}
+		if (body["status"] !== void 0) {
+			await setStatus(stateRoot, bookId, "ready");
+			changed = true;
+		}
+		if (!changed) throw new Error("name, settings, or status is required");
+		return enrichedBook(requireBook(stateRoot, bookId), deps);
+	});
+}
+async function postOrderItemsPayload(bookId, body, deps = {}) {
+	return routeResult(async () => {
+		const stateRoot = stateRootFor(deps);
+		const book = requireBook(stateRoot, bookId);
+		const input = body["items"] ?? body["item"];
+		if (input === void 0) throw new Error("items is required");
+		const actor = (deps.actor ?? (() => "dashboard"))();
+		return enrichedBook(await addItems(stateRoot, bookId, parseItems(book, input), actor), deps);
+	});
+}
+async function deleteOrderItemPayload(bookId, issueId, deps = {}) {
+	return routeResult(async () => enrichedBook(await removeItem(stateRootFor(deps), bookId, issueId), deps));
+}
+async function patchOrderItemPayload(bookId, issueId, body, deps = {}) {
+	return routeResult(async () => {
+		const stateRoot = stateRootFor(deps);
+		const existing = requireBook(stateRoot, bookId).items.find((item) => item.issue.toUpperCase() === issueId.toUpperCase());
+		if (!existing) throw new Error(`Issue ${issueId.toUpperCase()} is not in order book ${bookId}`);
+		let changed = false;
+		if (body["lane"] !== void 0 || body["order"] !== void 0) {
+			await moveItem(stateRoot, bookId, issueId, lane(body["lane"], existing.lane), positiveInteger(body["order"], "order", existing.order));
+			changed = true;
+		}
+		if (body["prereqs"] !== void 0 || body["reVerify"] !== void 0 || body["planAtPickup"] !== void 0) {
+			await setItemRequirements(stateRoot, bookId, issueId, {
+				prereqs: body["prereqs"] === void 0 ? void 0 : stringArray(body["prereqs"], "prereqs"),
+				reVerify: optionalBoolean(body["reVerify"], "reVerify"),
+				planAtPickup: optionalBoolean(body["planAtPickup"], "planAtPickup")
+			});
+			changed = true;
+		}
+		if (!changed) throw new Error("lane, order, prereqs, reVerify, or planAtPickup is required");
+		return enrichedBook(requireBook(stateRoot, bookId), deps);
+	});
+}
+async function getBacklogCandidatesPayload(limit, deps = {}) {
+	return routeResult(async () => ({ candidates: backlogCandidates(stateRootFor(deps), Math.max(1, Math.min(100, limit))) }));
+}
+async function postOrderStartPayload(bookId, deps = {}) {
+	return routeResult(async () => {
+		const stateRoot = stateRootFor(deps);
+		const book = requireBook(stateRoot, bookId);
+		const validation = validateBookForStart(stateRoot, book, {
+			issueLookup: deps.issueLookup,
+			hasPrd: deps.hasPrd
+		});
+		if (validation.blocks.length > 0) return {
+			__routeStatus: 422,
+			error: `Order book ${bookId} cannot start`,
+			findings: validation.blocks,
+			warnings: validation.warns
+		};
+		return {
+			ok: true,
+			runId: (await (deps.startOrderBook ?? defaultStartOrderBook)(book)).runId,
+			warnings: validation.warns
+		};
+	}).then((result) => {
+		if (result.status === 200 && result.body && typeof result.body === "object" && "__routeStatus" in result.body) {
+			const { __routeStatus, ...body } = result.body;
+			return {
+				status: Number(__routeStatus),
+				body
+			};
+		}
+		return result;
+	});
+}
+async function getPreviewBriefPayload(bookId, deps = {}) {
+	return routeResult(async () => {
+		const book = requireBook(stateRootFor(deps), bookId);
+		return {
+			bookId: book.id,
+			brief: previewBrief(book)
+		};
+	});
+}
+const readJsonBody$2 = Effect.gen(function* () {
+	const text = yield* (yield* HttpServerRequest.HttpServerRequest).text;
+	if (!text) return {
+		ok: true,
+		body: {}
+	};
+	try {
+		const parsed = JSON.parse(text);
+		if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {
+			ok: false,
+			body: {}
+		};
+		return {
+			ok: true,
+			body: parsed
+		};
+	} catch {
+		return {
+			ok: false,
+			body: {}
+		};
+	}
+});
+function mutationAuth(request) {
+	return rejectUnsafeDashboardMutationRequest(request);
+}
+function makeOrdersRouteLayer(deps = {}) {
+	const getBacklogCandidatesRoute = HttpRouter.add("GET", "/api/orders/backlog-candidates", httpHandler(Effect.gen(function* () {
+		const request = yield* HttpServerRequest.HttpServerRequest;
+		const url = HttpServerRequest.toURL(request);
+		const rawLimit = url._tag === "Some" ? url.value.searchParams.get("limit") : null;
+		const limit = rawLimit === null ? 10 : Number.parseInt(rawLimit, 10);
+		if (!Number.isInteger(limit) || limit < 1) return jsonResponse({ error: "limit must be a positive integer" }, { status: 400 });
+		return resultResponse(yield* Effect.promise(() => getBacklogCandidatesPayload(limit, deps)));
+	})));
+	const getOrdersRoute = HttpRouter.add("GET", "/api/orders", httpHandler(Effect.gen(function* () {
+		return resultResponse(yield* Effect.promise(() => getOrdersPayload(deps)));
+	})));
+	const postOrderRoute = HttpRouter.add("POST", "/api/orders", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const parsed = yield* readJsonBody$2;
+		if (!parsed.ok) return jsonResponse({ error: "Request body must be a JSON object" }, { status: 400 });
+		return resultResponse(yield* Effect.promise(() => postOrderPayload(parsed.body, deps)));
+	})));
+	const getOrderRoute = HttpRouter.add("GET", "/api/orders/:id", httpHandler(Effect.gen(function* () {
+		const id = (yield* HttpRouter.params)["id"] ?? "";
+		return resultResponse(yield* Effect.promise(() => getOrderPayload(id, deps)));
+	})));
+	const patchOrderRoute = HttpRouter.add("PATCH", "/api/orders/:id", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const parsed = yield* readJsonBody$2;
+		if (!parsed.ok) return jsonResponse({ error: "Request body must be a JSON object" }, { status: 400 });
+		const id = (yield* HttpRouter.params)["id"] ?? "";
+		return resultResponse(yield* Effect.promise(() => patchOrderPayload(id, parsed.body, deps)));
+	})));
+	const postOrderItemsRoute = HttpRouter.add("POST", "/api/orders/:id/items", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const parsed = yield* readJsonBody$2;
+		if (!parsed.ok) return jsonResponse({ error: "Request body must be a JSON object" }, { status: 400 });
+		const id = (yield* HttpRouter.params)["id"] ?? "";
+		return resultResponse(yield* Effect.promise(() => postOrderItemsPayload(id, parsed.body, deps)));
+	})));
+	const deleteOrderItemRoute = HttpRouter.add("DELETE", "/api/orders/:id/items/:issue", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const params = yield* HttpRouter.params;
+		return resultResponse(yield* Effect.promise(() => deleteOrderItemPayload(params["id"] ?? "", params["issue"] ?? "", deps)));
+	})));
+	const patchOrderItemRoute = HttpRouter.add("PATCH", "/api/orders/:id/items/:issue", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const parsed = yield* readJsonBody$2;
+		if (!parsed.ok) return jsonResponse({ error: "Request body must be a JSON object" }, { status: 400 });
+		const params = yield* HttpRouter.params;
+		return resultResponse(yield* Effect.promise(() => patchOrderItemPayload(params["id"] ?? "", params["issue"] ?? "", parsed.body, deps)));
+	})));
+	const postOrderStartRoute = HttpRouter.add("POST", "/api/orders/:id/start", httpHandler(Effect.gen(function* () {
+		const authError = mutationAuth(yield* HttpServerRequest.HttpServerRequest);
+		if (authError) return authError;
+		const id = (yield* HttpRouter.params)["id"] ?? "";
+		return resultResponse(yield* Effect.promise(() => postOrderStartPayload(id, deps)));
+	})));
+	const getPreviewBriefRoute = HttpRouter.add("GET", "/api/orders/:id/preview-brief", httpHandler(Effect.gen(function* () {
+		const id = (yield* HttpRouter.params)["id"] ?? "";
+		return resultResponse(yield* Effect.promise(() => getPreviewBriefPayload(id, deps)));
+	})));
+	return Layer.mergeAll(getBacklogCandidatesRoute, getOrdersRoute, postOrderRoute, getPreviewBriefRoute, postOrderStartRoute, postOrderItemsRoute, deleteOrderItemRoute, patchOrderItemRoute, getOrderRoute, patchOrderRoute);
+}
+const ordersRouteLayer = makeOrdersRouteLayer();
+//#endregion
 //#region ../../lib/artifacts/thumbnails.ts
 init_paths();
 const DEFAULT_THUMBNAIL_WIDTH = 640;
@@ -57615,9 +59466,9 @@ const postArtifactUnshareRoute = HttpRouter.add("POST", "/api/artifacts/:slug/un
 const artifactsRouteLayer = Layer.mergeAll(getRawArtifactRoute, getArtifactDetailRoute, getWorkspaceArtifactsRoute, getArtifactThumbnailRoute, postArtifactUnshareRoute);
 //#endregion
 //#region ../../lib/database/agent-mappers.ts
+init_sequence_io();
 init_pickup();
 init_label_ops();
-init_sequence_io();
 function agentStateToDbAgent(state) {
 	return {
 		id: state.id,
@@ -60066,6 +61917,7 @@ const HttpServerLive = Layer.unwrap(Effect.gen(function* () {
 	const bind = retryDashboardBind(NodeHttpServer.make(() => {
 		const nodeServer = NodeHttp.createServer();
 		setupTerminalWebSocket(nodeServer);
+		setupKnowledgeViewerProxy(nodeServer);
 		setupVoiceWebSocket(nodeServer);
 		setupAutoPresoWebSocket(nodeServer);
 		return nodeServer;
@@ -60155,7 +62007,7 @@ const staticRouteLayer = HttpRouter.add("GET", "*", Effect.gen(function* () {
 	if (filePath.endsWith("index.html")) return HttpServerResponse.setHeader(res, "Cache-Control", "no-cache, no-store, must-revalidate");
 	return res;
 }));
-const makeRoutesLayer = Layer.mergeAll(healthRouteLayer, dashboardSessionPreflightRouteLayer, dashboardSessionRouteLayer, websocketRpcRouteLayer, issuesRouteLayer, agentsRouteLayer, workspacesRouteLayer, specialistsRouteLayer, costsRouteLayer, cloisterRouteLayer, resourcesRouteLayer, commandDeckRouteLayer, remoteRouteLayer, settingsRouteLayer, voiceRouteLayer, autopresoRouteLayer, metricsRouteLayer, miscRouteLayer, paletteRouteLayer, conversationsRouteLayer, eventsRouteLayer, showRouteLayer, projectsRouteLayer, contextRouteLayer, adminRouteLayer, prereqsRouteLayer, cliproxyRouteLayer, ttsRouteLayer, webhooksRouteLayer, hooksRouteLayer, diffsRouteLayer, codexAuthRouteLayer, terminalsRouteLayer, discoveredSessionsRouteLayer, flywheelRouteLayer, artifactsRouteLayer, featureRegistryRouteLayer, fsRouteLayer, tieredCalloutsRouteLayer, backlogRouteLayer, internalEventsRouteLayer, staticRouteLayer);
+const makeRoutesLayer = Layer.mergeAll(healthRouteLayer, dashboardSessionPreflightRouteLayer, dashboardSessionRouteLayer, websocketRpcRouteLayer, issuesRouteLayer, pipelineMembershipRouteLayer, agentsRouteLayer, workspacesRouteLayer, specialistsRouteLayer, costsRouteLayer, cloisterRouteLayer, resourcesRouteLayer, commandDeckRouteLayer, remoteRouteLayer, settingsRouteLayer, voiceRouteLayer, autopresoRouteLayer, metricsRouteLayer, miscRouteLayer, paletteRouteLayer, conversationsRouteLayer, eventsRouteLayer, showRouteLayer, projectsRouteLayer, contextRouteLayer, adminRouteLayer, prereqsRouteLayer, cliproxyRouteLayer, ttsRouteLayer, webhooksRouteLayer, hooksRouteLayer, diffsRouteLayer, codexAuthRouteLayer, terminalsRouteLayer, discoveredSessionsRouteLayer, flywheelRouteLayer, ordersRouteLayer, artifactsRouteLayer, featureRegistryRouteLayer, fsRouteLayer, tieredCalloutsRouteLayer, backlogRouteLayer, internalEventsRouteLayer, knowledgeViewerRouteLayer, staticRouteLayer);
 const OverdeckAgentsResolverLive = AgentsResolverLive.pipe(Layer.provide(Layer.mergeAll(DbLive, TmuxLive)));
 const OverdeckCostResolverLive = CostResolverLive.pipe(Layer.provide(DbLive));
 const ReadModelWithOverdeckLive = ReadModelServiceLive.pipe(Layer.provide(OverdeckAgentsResolverLive));
@@ -62176,7 +64028,7 @@ const RESTART_MARKER = join$1(homedir(), ".overdeck", "dashboard-restarting.json
 * loads new content-hashed chunk filenames (no ERR_MODULE_NOT_FOUND after rebuild).
 */
 async function defaultLifecycleRunner(pending) {
-	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-BQM3a8z5.js");
+	const { postMergeLifecycle, notifyTldrDaemon } = await import("./merge-agent-CKkgIBPB.js");
 	await postMergeLifecycle(pending.issueId, pending.projectPath, pending.sourceBranch, { skipDeploy: true });
 	if (pending.sourceBranch) await notifyTldrDaemon(pending.projectPath, pending.sourceBranch);
 }
@@ -62497,7 +64349,7 @@ function failureReason(result) {
 	return result.error ?? result.message ?? `merge returned status ${result.statusCode ?? "unknown"}`;
 }
 async function defaultMergeIssue(issueId) {
-	const { triggerMerge } = await import("./merge-ops-DlB1IM0Y.js");
+	const { triggerMerge } = await import("./merge-ops-CR44oU9-.js");
 	return triggerMerge(issueId);
 }
 function defaultAnnounceFailure(issueId, reason) {
@@ -62744,7 +64596,7 @@ const defaultDependencies = {
 	inspect: inspectStateMigration,
 	ensureWorktree: ensureStateWorktree,
 	migrate: async (projectKey, project, signal) => {
-		const { migrateProjectState } = await import("./state-migrate-Dkzaxvny.js");
+		const { migrateProjectState } = await import("./state-migrate-BGg2ZaOt.js");
 		await migrateProjectState(projectKey, { signal }, project);
 	},
 	clearCache: clearStateMigrationCache,
@@ -62952,7 +64804,7 @@ if (shouldStartStaleCheckRetriggerService()) {
 }
 if (process.env.OVERDECK_MODE === "desktop") (async () => {
 	try {
-		const { provisionClaudeHooks } = await import("./claude-hooks-provision-C8wdRnN1.js");
+		const { provisionClaudeHooks } = await import("./claude-hooks-provision-8Ngo8TpT.js");
 		const result = await provisionClaudeHooks();
 		if (!result.ok) console.warn(`[overdeck] Claude hook provisioning skipped: ${result.reason}`);
 		else if (result.changed) console.log(`[overdeck] Claude hooks provisioned: ${result.binariesSynced} scripts, registered ${result.registered.length} hook(s)${result.pruned.length ? `, pruned ${result.pruned.length} stale` : ""}`);
@@ -63293,9 +65145,10 @@ const handleShutdownSignal = async (signal) => {
 	stopCostReconcileService();
 	stopStaleCheckRetriggerService();
 	stopRestartAnnouncer();
+	await stopAllKnowledgeViewers().catch((err) => console.warn("[knowledge-viewer] shutdown failed:", err?.message ?? err));
 	await stopDeaconChild().catch((err) => console.warn("[deacon-supervisor] child shutdown failed:", err?.message ?? err));
 	try {
-		const { killAllGateProcessGroups } = await import("./validation-CIi6pnI2.js");
+		const { killAllGateProcessGroups } = await import("./validation-CC9OPqJZ.js");
 		const reaped = killAllGateProcessGroups();
 		if (reaped > 0) console.log(`[overdeck] reaped ${reaped} in-flight gate process group(s)`);
 	} catch (err) {
@@ -63350,7 +65203,7 @@ reconcileStaleGitHubBlockers().then((n) => {
 	}
 }).catch((err) => console.warn(`[overdeck] Startup blocker reconciliation failed: ${err.message}`));
 try {
-	const { resetProcessingToQueued } = await import("./merge-sync-SSv3E-pl.js");
+	const { resetProcessingToQueued } = await import("./merge-sync-BJYeOODr.js");
 	const resetCount = resetProcessingToQueued();
 	if (resetCount > 0) {
 		console.log(`[overdeck] Reset ${resetCount} stuck merge queue entries to queued`);
@@ -63372,7 +65225,7 @@ else {
 	console.log("[overdeck] Auto-merge executor started");
 }
 try {
-	const { reconcileInterruptedVerifications } = await import("./verification-runner-CDj4lD4t.js");
+	const { reconcileInterruptedVerifications } = await import("./verification-runner-BW4HOKAz.js");
 	const interrupted = reconcileInterruptedVerifications();
 	if (interrupted > 0) console.log(`[overdeck] recovered ${interrupted} orphaned verification worker(s)`);
 } catch (err) {