@overdeck/desktop 0.45.23 → 0.45.24

package/server/{specialists-JVO00bs7.js → specialists-CC4r-c2s.js}

@@ -1,44 +1,45 @@
 import { a as __toCommonJS } from "./rolldown-runtime-DNCzzKnI.js";
-import { A as canUseHarnessSync, Br as getOverdeckHome, D as resolveTieredExecutionEnabled, H as init_providers, I as UnknownModelError, Jn as extractPrefixSync, M as init_harness_policy, Nr as encodeClaudeProjectDir, O as resolveTieredExecutionEnabledForIssue, Qt as parsePorcelainStatusPaths, T as init_tier_table, Tn as init_projects, U as piProviderForModel, Ur as packageRoot, V as getProviderForModelSync, Vr as init_paths, Wr as resolveOhmypiExtensionPath, Yn as init_issue_id, Yt as init_state_plane, Zn as parseIssueIdSync, c as isClaudeCodeChannelsEnabled, f as loadConfigSync, in as shouldCommitLegacyWorkspaceArtifacts, ir as FsError, kn as listProjectsSync, mr as init_errors, nn as init_state_read_home, t as init_config_yaml, tt as resolveModel, yn as getProjectSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DvyMuOle.js";
+import { A as canUseHarnessSync, Br as getOverdeckHome, D as resolveTieredExecutionEnabled, H as init_providers, I as UnknownModelError, Jn as extractPrefixSync, M as init_harness_policy, Nr as encodeClaudeProjectDir, O as resolveTieredExecutionEnabledForIssue, Qt as parsePorcelainStatusPaths, T as init_tier_table, Tn as init_projects, U as piProviderForModel, Ur as packageRoot, V as getProviderForModelSync, Vr as init_paths, Wr as resolveOhmypiExtensionPath, Yn as init_issue_id, Yt as init_state_plane, Zn as parseIssueIdSync, c as isClaudeCodeChannelsEnabled, f as loadConfigSync, fn as findProjectByPathSync, in as shouldCommitLegacyWorkspaceArtifacts, ir as FsError, kn as listProjectsSync, mr as init_errors, nn as init_state_read_home, rn as resolveStateReadHomeSync, t as init_config_yaml, tt as resolveModel, yn as getProjectSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
 import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-CzaSOgul.js";
-import { $ as init_child_env, B as sendKeysAsync, D as killSession, H as sessionExists, M as listSessionNames, N as listSessions, Q as buildChildEnvWithoutTmuxSync, T as isHarnessProcessAlive, U as sessionExistsSync, V as sendRawKeystroke, W as setOption, X as BLANKED_PROVIDER_ENV, g as findManagedServerPidSync, i as capturePane, m as exactPaneTarget, s as createSession, w as init_tmux } from "./tmux-ftABRAmc.js";
-import { a as init_event_store, n as getEventStore } from "./event-store-tdiY5eDZ.js";
-import { k as normalizeChannelReplyPayload, o as getHarnessBehavior, t as init_src, x as DomainEvent } from "./src-U7_kTPEE.js";
-import { E as init_agent_state_sync, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, i as clearWorkspaceStuck, k as stateToOverdeckParamsForDb, l as init_review_status, w as AGENT_COLUMNS_FOR_DB } from "./review-status-A7quS5KJ.js";
-import { a as EventStoreService, c as ReadModelService, d as init_read_model, i as init_issue_lifecycle, s as init_domain_services, t as IssueLifecycle, u as getClosedIssueIdsForReadSource } from "./issue-lifecycle-CreaCkjW.js";
-import { d as isTerminalIssueStage, o as init_agents, u as getIssueStageSync } from "./agents-B4Bjbkfv.js";
-import { n as ensureSessionContextBriefingFile, r as init_briefing_freshness } from "./briefing-freshness-DWdW7vUm.js";
-import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-Ca0YTWDw.js";
-import { An as writeChannelsBridgeMcpConfig, Ar as init_codex_auth, At as deliverAgentPermissionDecision, Bn as getAgentDir, Cn as validateProviderHealth, Cr as getAgentRuntimeStateSync, F as init_tier_escalation, G as resumeAgent, Gt as transitionIssueToInProgress, H as restartAgent, Hn as getAgentState, In as clearAgentTroubled, Lt as BRIDGE_TOKEN_HEADER, Nt as setAgentDeliveryMethod, P as decideEscalation, Pn as clearAgentPaused, Q as operatorInterventionEvent, Rt as init_bridge_token, Sn as init_provider_health, Sr as getAgentRuntimeState, Tr as saveAgentRuntimeState, V as recoverAgent, Wn as getAgentStateSync, X as messageAgent, Xt as resolveStaffing, Z as init_operator_interventions, Zn as markAgentStoppedState, ar as setAgentPaused, at as saveSessionId, b as init_agents$1, bn as getProviderExportsForModel, cr as wipeAgentStateDirs, dn as piFifoPaths, et as getActivity, fn as init_ohmypi_fifo, fr as init_pty_token, ft as stopAgent, gr as clearReadySignal, hr as resolvePtySupervisorScriptPath, i as listRunningAgents, in as getProviderAuthMode, ir as saveAgentStateSync, kn as dismissDevChannelsDialog, kr as checkCodexAuthStatus, kt as deliverAgentMessage, lr as writeAgentStateJsonSync, mr as init_pty_supervisor_locate, nt as getLatestSessionIdSync, pn as ohmypiFifoPaths, pr as writePtyToken, qt as init_staffing, r as listAgentStates, rr as saveAgentState, rt as getSessionId, tn as getAgentRuntimeBaseCommand, tt as getLatestSessionId, un as init_pi_fifo, vn as determineModel, vr as normalizeAgentId, xr as waitForReadySignal, yn as getProviderEnvForModel, zt as writeBridgeTokenSync } from "./queries-6d7Cdtm7.js";
-import { a as performHandoff, i as checkAllTriggers, s as getAgentHealth, t as getCloisterService } from "./service-DCpB_SGd.js";
-import { o as init_persistent_logger, s as logAgentLifecycleSync } from "./session-history-CVZDpS3c.js";
-import { t as init_behavior } from "./behavior-B_-4EKF3.js";
-import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-B4itFzDo.js";
-import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-B5ushCvE.js";
-import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-Bb4XeV2x.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
+import { $ as init_child_env, B as sendKeysAsync, D as killSession, H as sessionExists, M as listSessionNames, N as listSessions, Q as buildChildEnvWithoutTmuxSync, T as isHarnessProcessAlive, U as sessionExistsSync, V as sendRawKeystroke, W as setOption, X as BLANKED_PROVIDER_ENV, g as findManagedServerPidSync, i as capturePane, m as exactPaneTarget, s as createSession, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { a as init_event_store, n as getEventStore } from "./event-store-CQL6NeqB.js";
+import { M as normalizeChannelReplyPayload, o as getHarnessBehavior, t as init_src, w as DomainEvent } from "./src-DtcUOZCq.js";
+import { E as init_agent_state_sync, b as setReviewStatusSync, c as getReviewStatusSync, d as loadReviewStatuses, i as clearWorkspaceStuck, k as stateToOverdeckParamsForDb, l as init_review_status, w as AGENT_COLUMNS_FOR_DB } from "./review-status-kZj_KyCk.js";
+import { a as EventStoreService, c as ReadModelService, d as init_read_model, i as init_issue_lifecycle, s as init_domain_services, t as IssueLifecycle, u as getClosedIssueIdsForReadSource } from "./issue-lifecycle-ojZAzDBP.js";
+import { d as isTerminalIssueStage, o as init_agents, u as getIssueStageSync } from "./agents-EbI0zCJl.js";
+import { n as ensureSessionContextBriefingFile, r as init_briefing_freshness } from "./briefing-freshness-D1wzUIWv.js";
+import { o as getPricingSync, s as init_cost, t as calculateCostSync } from "./cost-B2ddP6wq.js";
+import { Ar as saveAgentRuntimeState, At as deliverAgentPermissionDecision, Bt as assertWorkspaceStackHealthyForSpawn, Cr as normalizeAgentId, Dn as validateProviderHealth, Dr as getAgentRuntimeState, En as init_provider_health, Er as waitForReadySignal, F as init_tier_escalation, Fn as writeChannelsBridgeMcpConfig, Fr as init_codex_auth, G as resumeAgent, Gn as getAgentDir, Gt as transitionIssueToInProgress, H as restartAgent, Lt as BRIDGE_TOKEN_HEADER, Nt as setAgentDeliveryMethod, Or as getAgentRuntimeStateSync, P as decideEscalation, Pn as dismissDevChannelsDialog, Pr as checkCodexAuthStatus, Q as operatorInterventionEvent, Rt as init_bridge_token, Sn as determineModel, Ut as init_spawn_prep, V as recoverAgent, Vn as clearAgentTroubled, X as messageAgent, Xt as resolveStaffing, Yn as getAgentStateSync, Z as init_operator_interventions, _r as init_pty_token, an as getProviderAuthMode, at as saveSessionId, b as init_agents$1, br as resolvePtySupervisorScriptPath, cr as saveAgentState, et as getActivity, fn as init_pi_fifo, ft as stopAgent, hn as ohmypiFifoPaths, i as listRunningAgents, kt as deliverAgentMessage, lr as saveAgentStateSync, mn as init_ohmypi_fifo, mr as writeAgentStateJsonSync, nn as getAgentRuntimeBaseCommand, nr as markAgentStoppedState, nt as getLatestSessionIdSync, pn as piFifoPaths, pr as wipeAgentStateDirs, qn as getAgentState, qt as init_staffing, r as listAgentStates, rt as getSessionId, sn as init_runtime_command, tn as getAcpLauncherFields, tt as getLatestSessionId, un as waitForAcpHostReady, ur as setAgentPaused, vr as writePtyToken, wn as getProviderExportsForModel, xr as clearReadySignal, yr as init_pty_supervisor_locate, zn as clearAgentPaused, zt as writeBridgeTokenSync } from "./queries-CjNIf-Ub.js";
+import { a as performHandoff, i as checkAllTriggers, s as getAgentHealth, t as getCloisterService } from "./service-CLeAoU6G.js";
+import { o as init_persistent_logger, s as logAgentLifecycleSync } from "./session-history-BT3IvqhC.js";
+import { t as init_behavior } from "./behavior-B3exJ42O.js";
+import { a as init_tracker_config, t as getGitHubConfig } from "./tracker-config-G6latr8C.js";
+import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-Yx5DdmVJ.js";
+import { o as getInternalTokenSync, s as init_internal_token } from "./internal-token-s0-oKybJ.js";
 import { a as PAN_DIRNAME, i as PAN_CONTINUE_FILENAME, p as init_types } from "./types-hraoaQIp.js";
-import { a as generateXBriefFilename, o as init_lifecycle } from "./lifecycle-DfeyBDwA.js";
-import { f as readTierOverrides, g as serializeXBriefDocument, h as recordTierPromotion, m as readWorkspacePlanSync, o as init_io, r as findPlan, u as readPlan } from "./io-B3_AHDfr.js";
-import { B as removeFavorite, E as hasOtherActiveConversationOnTmuxSession, F as markConversationEnded, G as setConversationHarness, K as setConversationModel, M as listConversations, P as markConversationActive, Q as updateConversationDeliveryMethod, S as getConversationByName, W as setConversationEffort, g as backfillConversationModel, h as archiveConversation, k as init_conversations, nt as updateLastAttached, rt as updateSpawnError, x as getConversationById, y as createConversation } from "./conversations-DbOs1e9Q.js";
-import { n as recordFeatureRegistryLifecycle, t as init_feature_registry_population } from "./feature-registry-population-B0pmAz0a.js";
-import { a as requireModelOverrideSync, i as normalizeModelOverrideSync, n as init_launcher_generator, r as init_model_validation, t as generateLauncherScriptSync } from "./launcher-generator-CHVm7bGT.js";
-import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-H_5wHQZQ.js";
-import { h as workspaceContextFile, l as piGlobalContextFile, o as init_layers } from "./layers-DzxSTGNA.js";
-import { n as init_harness_binary, r as prepareHarnessLaunch } from "./harness-binary-CVio2m-u.js";
-import { a as init_stack_health, i as getWorkspaceStackHealth } from "./stack-health-puygdaMd.js";
-import { l as init_dag, o as getDispatchableItems } from "./dag-CdOjJVDT.js";
-import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-qHJBhy3Z.js";
-import { a as loadCloisterConfigSync, r as init_config } from "./config-DjLOdbgT.js";
-import { c as isStateMigrated, o as init_state_home } from "./state-home-CIGjwNfJ.js";
-import { a as init_lifecycle_io, c as updatePlanStatus, s as transitionXBriefOnMain } from "./lifecycle-io-D8iNBcux.js";
-import { _ as init_codex_conversation_parser, c as parseEntireConversation, d as init_pi_conversation_parser, g as parseOhmypiConversationMessages, m as init_ohmypi_conversation_parser, p as parsePiConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages } from "./conversation-service-Du-MTNpJ.js";
-import { _ as parseCodexApprovalPrompt, d as getAgentPendingQuestions$1, f as getAgentWorkspace$1, g as normalizeAwaitingInputPrompt, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment, u as getAgentJsonlPath$1 } from "./stuck-remediation-CzEov_fq.js";
-import { Dt as classifyMemoryPressure, It as getSystemHealthSnapshot, Pt as getResourceConfig } from "./deacon-pRnyD5w9.js";
-import { o as stopWorkspaceDocker, r as init_workspace_manager } from "./workspace-manager-hLUv3ADC.js";
-import { a as init_jsonl_parser, o as normalizeModelName } from "./jsonl-parser-Dhflo1SH.js";
-import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-aQ1IxeI3.js";
-import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-CskwzzhL.js";
+import { a as generateXBriefFilename, o as init_lifecycle } from "./lifecycle-yPd___5E.js";
+import { f as readTierOverrides, g as serializeXBriefDocument, h as recordTierPromotion, m as readWorkspacePlanSync, o as init_io, r as findPlan, u as readPlan } from "./io-C9kF1wtJ.js";
+import { B as removeFavorite, E as hasOtherActiveConversationOnTmuxSession, F as markConversationEnded, G as setConversationHarness, K as setConversationModel, M as listConversations, P as markConversationActive, Q as updateConversationDeliveryMethod, S as getConversationByName, W as setConversationEffort, g as backfillConversationModel, h as archiveConversation, k as init_conversations, nt as updateLastAttached, rt as updateSpawnError, x as getConversationById, y as createConversation } from "./conversations-6AfUfbwc.js";
+import { n as recordFeatureRegistryLifecycle, t as init_feature_registry_population } from "./feature-registry-population-DKZFMbFt.js";
+import { a as normalizeModelOverrideSync, i as init_model_validation, n as init_launcher_generator, o as requireModelOverrideSync, r as MODEL_ID_PATTERN, t as generateLauncherScriptSync } from "./launcher-generator-BBWG_SiS.js";
+import { a as init_claude_permissions, o as resolvePermissionModeSync, r as getClaudePermissionFlagsStringSync, t as BYPASS_PERMISSION_MODE } from "./claude-permissions-DNWEVV6z.js";
+import { E as init_layers, I as workspaceContextFile, k as piGlobalContextFile } from "./assemble-J2ZZ2C15.js";
+import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
+import { a as getWorkspaceStackHealth, s as init_stack_health } from "./stack-health-DxSdG9cW.js";
+import { l as init_dag, o as getDispatchableItems } from "./dag-B1ucnjDU.js";
+import { n as resolveHarness, t as init_harness_resolve } from "./harness-resolve-3lNZkyT4.js";
+import { a as loadCloisterConfigSync, r as init_config } from "./config-CKxYiCmX.js";
+import { c as isStateMigrated, o as init_state_home } from "./state-home-Cn_Qu8IX.js";
+import { a as init_lifecycle_io, c as updatePlanStatus, s as transitionXBriefOnMain } from "./lifecycle-io-BREGpnLk.js";
+import { _ as init_codex_conversation_parser, b as parseAcpConversationMessages, c as parseEntireConversation, d as init_pi_conversation_parser, g as parseOhmypiConversationMessages, m as init_ohmypi_conversation_parser, p as parsePiConversationMessages, t as init_conversation_service, v as parseCodexConversationMessages, y as init_acp_conversation_parser } from "./conversation-service-DPJ71F33.js";
+import { _ as parseCodexApprovalPrompt, d as getAgentPendingQuestions$1, f as getAgentWorkspace$1, g as normalizeAwaitingInputPrompt, m as detectAwaitingInputForAgent, o as getRuntimeForAgent, p as scanPendingInputsPromise, s as computeAgentEnrichment, u as getAgentJsonlPath$1 } from "./stuck-remediation-DYuPRYYw.js";
+import { B as getBook, H as liveOrderIssueLookup, T as resolveLiveFlywheelRunId, w as readFlywheelLaunchMetadata, y as getFlywheelRunDir, z as computeBookProgress } from "./flywheel-DHrgCphM.js";
+import { Dt as classifyMemoryPressure, It as getSystemHealthSnapshot, Pt as getResourceConfig } from "./deacon-CU_cAYSR.js";
+import { o as stopWorkspaceDocker, r as init_workspace_manager } from "./workspace-manager-CBhNdzE4.js";
+import { a as init_jsonl_parser, o as normalizeModelName } from "./jsonl-parser-BXSlHwEh.js";
+import { r as init_in_flight_guard, t as createInFlightGuard } from "./in-flight-guard-CAAkqPLu.js";
+import { a as loadWorkspaceMetadataSync } from "./workspace-metadata-_WygnyoX.js";
 import { basename, delimiter, dirname, join, resolve } from "node:path";
 import { Cause, Data, Effect, Layer, Option, Schema, Stream } from "effect";
 import { join as join$1 } from "path";
@@ -200,10 +201,12 @@ init_layers();
 init_harness_binary();
 init_ohmypi_fifo();
 init_pi_fifo();
+init_runtime_command();
 init_stack_health();
 init_launcher_generator();
 init_dag();
 init_staffing();
+init_spawn_prep();
 init_harness_resolve();
 init_bridge_token();
 init_operator_interventions();
@@ -364,7 +367,215 @@ async function waitForSessionRespawn(sessionName, timeoutMs) {
 	return Effect.runPromise(sessionExists(sessionName));
 }
 //#endregion
+//#region routes/dashboard-auth.ts
+init_state_read_home();
+init_state_plane();
+init_types();
+init_issue_lifecycle();
+init_codex_auth();
+init_config();
+init_state_home();
+init_internal_token();
+const DASHBOARD_SESSION_COOKIE = "overdeck_session";
+const DASHBOARD_CSRF_HEADER = "x-overdeck-csrf-token";
+const DASHBOARD_SESSION_MAX_AGE_SECONDS = 3600 * 24 * 30;
+let browserSessionToken;
+let browserCsrfToken;
+function getDashboardSessionToken() {
+	if (browserSessionToken) return browserSessionToken;
+	const override = process.env["OVERDECK_DASHBOARD_SESSION_TOKEN"];
+	if (override) {
+		browserSessionToken = override;
+		return browserSessionToken;
+	}
+	const internal = getInternalTokenSync();
+	browserSessionToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-session-v1").digest("base64url") : randomBytes(32).toString("base64url");
+	return browserSessionToken;
+}
+function dashboardCsrfToken() {
+	if (browserCsrfToken) return browserCsrfToken;
+	const override = process.env["OVERDECK_DASHBOARD_CSRF_TOKEN"];
+	if (override) {
+		browserCsrfToken = override;
+		return browserCsrfToken;
+	}
+	const internal = getInternalTokenSync();
+	browserCsrfToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-csrf-v1").digest("base64url") : randomBytes(32).toString("base64url");
+	return browserCsrfToken;
+}
+function constantTimeTokenEqual$1(provided, expected) {
+	if (!provided) return false;
+	return timingSafeEqual(createHash$1("sha256").update(provided).digest(), createHash$1("sha256").update(expected).digest());
+}
+function cookieValue(cookieHeader, name) {
+	if (!cookieHeader) return void 0;
+	for (const part of cookieHeader.split(";")) {
+		const [rawKey, ...rawValue] = part.trim().split("=");
+		if (rawKey !== name) continue;
+		try {
+			return decodeURIComponent(rawValue.join("="));
+		} catch {
+			return;
+		}
+	}
+}
+function dashboardSessionCookieHeader(options = {}) {
+	const secure = options.secure ? "; Secure" : "";
+	return `${DASHBOARD_SESSION_COOKIE}=${encodeURIComponent(getDashboardSessionToken())}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${DASHBOARD_SESSION_MAX_AGE_SECONDS}${secure}`;
+}
+function hasDashboardInternalTokenHeaders(headers) {
+	const expected = getInternalTokenSync();
+	if (!expected) return false;
+	if (constantTimeTokenEqual$1(getHeaderFromMap(headers, "x-overdeck-internal-token"), expected)) return true;
+	const authorization = getHeaderFromMap(headers, "authorization");
+	if (authorization) {
+		const [scheme, token] = authorization.split(/\s+/);
+		if (scheme?.toLowerCase() === "bearer" && constantTimeTokenEqual$1(token, expected)) return true;
+	}
+	return false;
+}
+function hasDashboardInternalToken(request) {
+	return hasDashboardInternalTokenHeaders(request.headers);
+}
+function hasDashboardAuthHeaders(headers) {
+	return hasDashboardInternalTokenHeaders(headers) || constantTimeTokenEqual$1(cookieValue(getHeaderFromMap(headers, "cookie"), "overdeck_session"), getDashboardSessionToken());
+}
+function hasDashboardAuth(request) {
+	return hasDashboardAuthHeaders(request.headers);
+}
+function isJsonContentType(headers) {
+	const contentType = getHeaderFromMap(headers, "content-type");
+	if (!contentType) return false;
+	const [mime] = contentType.toLowerCase().split(";");
+	return mime.trim() === "application/json";
+}
+function hasTrustedExactOrigin(headers) {
+	const origin = getHeaderFromMap(headers, "origin");
+	if (!origin) return false;
+	const normalized = normalizeOrigin(origin);
+	return !!normalized && getTrustedOrigins().includes(normalized);
+}
+function hasValidCsrfToken(headers) {
+	return constantTimeTokenEqual$1(getHeaderFromMap(headers, DASHBOARD_CSRF_HEADER), dashboardCsrfToken());
+}
+function rejectUnsafeDashboardMutationRequest(request) {
+	const authError = rejectUnauthorizedDashboardRequest(request);
+	if (authError) return authError;
+	const headers = request.headers;
+	if (!isJsonContentType(headers)) return jsonResponse({ error: "Content-Type must be application/json" }, { status: 400 });
+	if (hasDashboardInternalToken(request)) return null;
+	if (getHeaderFromMap(headers, "origin") && !hasTrustedExactOrigin(headers)) return jsonResponse({ error: "Invalid origin" }, { status: 403 });
+	if (!hasValidCsrfToken(headers)) return jsonResponse({ error: "Invalid CSRF token" }, { status: 403 });
+	return null;
+}
+function ipv4ToInt(value) {
+	const parts = value.split(".");
+	if (parts.length !== 4) return null;
+	let result = 0;
+	for (const part of parts) {
+		const octet = Number(part);
+		if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;
+		result = (result << 8 | octet) >>> 0;
+	}
+	return result;
+}
+/** RFC1918 private ranges — Docker bridges always fall inside one of these. */
+function isRfc1918(ip) {
+	return (ip & 4278190080) >>> 0 === 167772160 || (ip & 4293918720) >>> 0 === 2886729728 || (ip & 4294901760) >>> 0 === 3232235520;
+}
+/**
+* True when `addr` is the IP of a container on one of THIS host's Docker bridge
+* interfaces (docker0 / br-*). Such a peer can only be a process running on this
+* machine — our own host-local Traefik fronting overdeck.localhost, or another
+* Overdeck container — never a LAN client (a direct LAN hit to the 0.0.0.0
+* API port arrives with a LAN peer that is not inside any Docker bridge subnet).
+*
+* Pure for testability: the interface map is injected. We only ever trust
+* RFC1918 bridge subnets, so a misconfigured public-range br-* cannot widen
+* trust beyond the local Docker fabric.
+*/
+function peerIsHostLocalDockerBridge(addr, interfaces) {
+	const peer = ipv4ToInt(addr);
+	if (peer === null) return false;
+	for (const [name, addrs] of Object.entries(interfaces)) {
+		if (name !== "docker0" && !name.startsWith("br-")) continue;
+		for (const info of addrs ?? []) {
+			if (info.family !== "IPv4") continue;
+			const ifaceIp = ipv4ToInt(info.address);
+			const mask = ipv4ToInt(info.netmask);
+			if (ifaceIp === null || mask === null) continue;
+			const network = (ifaceIp & mask) >>> 0;
+			if (!isRfc1918(network)) continue;
+			if ((peer & mask) >>> 0 === network) return true;
+		}
+	}
+	return false;
+}
+/**
+* True when `addr` shares an RFC1918 subnet with one of THIS process's own
+* network interfaces. This is the in-container counterpart of
+* peerIsHostLocalDockerBridge: inside a container the Docker bridge is
+* invisible — the container sees only its veth endpoints (eth0/eth1), so the
+* docker0/br-* name filter never matches and the host-local Traefik fronting
+* the stack 401'd every session mint (first hit live on the PAN-1737 UAT
+* stack). A peer inside one of the container's attached Docker-network
+* subnets can only be another container on those networks — the server
+* publishes no host port (Traefik labels only), so no LAN client can ever
+* present such an address. Only consulted when running inside a container.
+*/
+function peerIsLocalContainerNetwork(addr, interfaces) {
+	const peer = ipv4ToInt(addr);
+	if (peer === null) return false;
+	for (const addrs of Object.values(interfaces)) for (const info of addrs ?? []) {
+		if (info.family !== "IPv4" || info.internal) continue;
+		const ifaceIp = ipv4ToInt(info.address);
+		const mask = ipv4ToInt(info.netmask);
+		if (ifaceIp === null || mask === null) continue;
+		const network = (ifaceIp & mask) >>> 0;
+		if (!isRfc1918(network)) continue;
+		if ((peer & mask) >>> 0 === network) return true;
+	}
+	return false;
+}
+/** Docker creates /.dockerenv in every container — stable in-container signal. */
+const runningInContainer = existsSync("/.dockerenv");
+/**
+* A request we trust to mint a session because it originated from this machine —
+* the local browser hitting the dashboard directly (127.0.0.1), or the
+* host-local Traefik that fronts overdeck.localhost. In Docker, that Traefik reaches
+* the host server from a Docker-bridge IP (e.g. 172.18.0.2), NOT 127.0.0.1, so
+* a literal-loopback check alone silently breaks the zero-step bootstrap for
+* every overdeck.localhost user — their session mint 401s and no cookie is ever set.
+*
+* This is the auto-bootstrap that removes the manual one-time #overdeck_token
+* step: any browser on overdeck.localhost gets a session with no user action. It is
+* NOT a security downgrade for the LAN — the raw API ports bind 0.0.0.0, but a
+* direct LAN hit has a non-loopback, non-Docker-bridge peer and is rejected. We
+* read ONLY the real TCP peer (request.remoteAddress), never X-Forwarded-For,
+* which a caller could spoof.
+*/
+function isLoopbackPeer(request) {
+	const remoteAddress = request.remoteAddress;
+	const raw = remoteAddress && typeof remoteAddress === "object" && "_tag" in remoteAddress ? Option.getOrElse(remoteAddress, () => "") : typeof remoteAddress === "string" ? remoteAddress : "";
+	if (!raw) return false;
+	const addr = raw.startsWith("::ffff:") ? raw.slice(7) : raw;
+	if (addr === "127.0.0.1" || addr === "::1") return true;
+	if (peerIsHostLocalDockerBridge(addr, networkInterfaces())) return true;
+	return runningInContainer && peerIsLocalContainerNetwork(addr, networkInterfaces());
+}
+function rejectUnauthorizedDashboardSessionMintRequest(request) {
+	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
+	if (!hasDashboardInternalToken(request) && !isLoopbackPeer(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
+	return null;
+}
+function rejectUnauthorizedDashboardRequest(request) {
+	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
+	if (!hasDashboardAuth(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
+	return null;
+}
+//#endregion
 //#region routes/jsonl-resolver.ts
+init_acp_conversation_parser();
 init_codex_conversation_parser();
 init_ohmypi_conversation_parser();
 init_pi_conversation_parser();
@@ -390,6 +601,8 @@ init_conversation_service();
 *                       order no longer reflects time-recency. We disambiguate
 *                       across all listed IDs by JSONL mtime.
 *   3. runtime state  — in-process mirror, populated by hooks
+*   4. agents registry — the DB row's session_id recorded at spawn; survives
+*                        janitor removal of the agent directory
 *
 * Async-only (fs/promises) because this code path runs inside the dashboard
 * server's event loop.
@@ -475,6 +688,10 @@ async function resolveClaudeSessionId(agentId, opts = {}) {
 		const runtimeState = await (opts.getRuntimeStateAsync ?? ((id) => Effect.runPromise(getAgentRuntimeState(id))))(agentId);
 		if (runtimeState?.claudeSessionId) return runtimeState.claudeSessionId;
 	} catch {}
+	if (!opts.agentsDirOverride) {
+		const registrySessionId = getAgentStateSync(agentId)?.sessionId?.trim();
+		if (registrySessionId) return registrySessionId;
+	}
 	return null;
 }
 /**
@@ -532,7 +749,7 @@ async function readRecordedState(agentId, opts) {
 * Resolve the harness for transcript routing. Reads state.json, then
 * self-corrects when the recorded value is stale.
 *
-* Trust an explicit non-default harness (codex / pi / ohmypi) — it was chosen
+* Trust an explicit non-default harness (codex / pi / ohmypi / acp) — it was chosen
 * by resolveHarness at spawn time and is not the generic fallback. The
 * 'claude-code' default, however, goes stale in one observed case: a
 * wipe-and-respawn that changed the provider-default harness left state.json
@@ -550,8 +767,9 @@ async function readRecordedState(agentId, opts) {
 */
 async function resolveAgentHarness(agentId, opts = {}) {
 	const recorded = (await readRecordedState(agentId, opts)).harness;
-	if (recorded === "codex" || recorded === "pi" || recorded === "ohmypi") return recorded;
+	if (recorded === "codex" || recorded === "pi" || recorded === "ohmypi" || recorded === "acp") return recorded;
 	if (await agentHasClaudeTranscript(agentId, opts)) return recorded ?? "claude-code";
+	if (await resolveAcpTranscriptPath(agentId, opts)) return "acp";
 	if (await resolveCodexRolloutPath(agentId, opts)) return "codex";
 	if (await resolvePiSessionPath(agentId, opts)) return "ohmypi";
 	return recorded;
@@ -581,7 +799,7 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 	const agentDir = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId);
 	const codexHome = join(agentDir, "codex-home");
 	if (!await pathExists$1(codexHome)) return null;
-	const { findRolloutPath, findLatestRollout } = await import("./codex-Dg7Is5yb.js");
+	const { findRolloutPath, findLatestRollout } = await import("./codex-GcHuUF-k.js");
 	const threadId = (await readOptional(join(agentDir, "codex-thread-id")))?.trim();
 	if (threadId) {
 		const rollout = findRolloutPath(codexHome, threadId);
@@ -589,6 +807,11 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 	}
 	return findLatestRollout(codexHome);
 }
+/** Resolve the normalized transcript written by the persistent ACP host. */
+async function resolveAcpTranscriptPath(agentId, opts = {}) {
+	const transcriptPath = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId, "acp-session.jsonl");
+	return await pathExists$1(transcriptPath) ? transcriptPath : null;
+}
 /**
 * Resolve the pi/kimi session JSONL (PAN-1908). Pi writes its session transcript
 * as `<iso-ts>_<session-id>.jsonl` either in the agent dir's `sessions/` subdir
@@ -599,6 +822,7 @@ async function resolveCodexRolloutPath(agentId, opts = {}) {
 async function resolvePiSessionPath(agentId, opts = {}) {
 	const agentDir = join(opts.agentsDirOverride ?? join(getOverdeckHome(), "agents"), agentId);
 	const NON_TRANSCRIPT = new Set([
+		"acp-session.jsonl",
 		"cost-events.jsonl",
 		"activity.jsonl",
 		"pending-events.jsonl"
@@ -637,6 +861,7 @@ async function resolveJsonlPath(agentId, workspacePath, opts = {}) {
 	const behavior = behaviorForHarness(harness);
 	if (behavior.transcriptKind === "codex-rollout-jsonl") return resolveCodexRolloutPath(agentId, opts);
 	if (behavior.transcriptKind === "ohmypi-jsonl") return resolvePiSessionPath(agentId, opts);
+	if (behavior.transcriptKind === "acp-jsonl") return resolveAcpTranscriptPath(agentId, opts);
 	const claudeSessionId = await resolveClaudeSessionId(agentId, opts);
 	if (!claudeSessionId) {
 		logTranscriptResolution(agentId, `missing-session-id:${harness ?? "unknown"}`, `failed harness=${harness ?? "unknown"} reason=no-session-id checked=session.id,sessions.json,runtime-state`, opts);
@@ -808,7 +1033,7 @@ async function getWorkAgentLifecycleStateSnapshot(agentOrIssueId) {
 		runtimeState: runtime,
 		agentStatus,
 		canStartFresh: (!hasLiveTmuxSession || hasLiveTmuxSession && isStopped) && (!requiresSessionResetBeforeFreshStart || isOrphaned),
-		canResumeSession: !isRunning && hasResumableBackingState && (isStopped || isCrashed),
+		canResumeSession: !isRunning && hasSavedSession && hasResumableBackingState && (isStopped || isCrashed),
 		canRestartWithContext: hasAgentState && hasWorkspace,
 		canResetSession: hasSavedSession && hasResumableBackingState,
 		requiresSessionResetBeforeFreshStart,
@@ -974,7 +1199,8 @@ function buildPanStartArgs(input) {
 		"--model",
 		input.model,
 		...input.harness ? ["--harness", input.harness] : [],
-		...input.allowHost ? ["--host", "--yes"] : []
+		...input.allowHost ? ["--host", "--yes"] : [],
+		...input.offBook ? ["--off-book"] : []
 	];
 }
 /**
@@ -1083,7 +1309,7 @@ function emitStartAgentPhase(issueId, phase, status, reason, details = {}) {
 	});
 }
 const INTERNAL_TOKEN_HEADER = "x-overdeck-internal-token";
-function constantTimeTokenEqual$1(provided, expected) {
+function constantTimeTokenEqual(provided, expected) {
 	if (!provided) return false;
 	const providedBuffer = Buffer.from(provided, "utf8");
 	const expectedBuffer = Buffer.from(expected, "utf8");
@@ -1109,7 +1335,7 @@ async function validateAgentRuntimeEventAuth(request) {
 			error: "internal token not configured"
 		}, { status: 503 })
 	};
-	if (constantTimeTokenEqual$1(getHeaderFromMap(request.headers, INTERNAL_TOKEN_HEADER), expected)) return { ok: true };
+	if (constantTimeTokenEqual(getHeaderFromMap(request.headers, INTERNAL_TOKEN_HEADER), expected)) return { ok: true };
 	return {
 		ok: false,
 		response: jsonResponse({
@@ -1725,7 +1951,7 @@ const getAgentOutputRoute = HttpRouter.add("GET", "/api/agents/:id/output", http
 			} catch {}
 			let stdout;
 			if (isRemote && vmName) {
-				const { getRemoteAgentOutput } = await import("./remote-agents-CRCg1L4H.js");
+				const { getRemoteAgentOutput } = await import("./remote-agents-CA3Ihlxj.js");
 				stdout = await getRemoteAgentOutput(id, vmName, parseInt(String(lines), 10) || 100);
 			} else stdout = await Effect.runPromise(capturePane(id, parseInt(String(lines), 10) || 100));
 			if (!stdout || stdout.trim() === "" || stdout.trim() === "Session not found") {
@@ -1790,6 +2016,20 @@ async function buildConversationResponse(id) {
 				streaming: false
 			};
 		}
+		if (harness === "acp") {
+			const sessionFile = await resolveAcpTranscriptPath(id);
+			if (!sessionFile || !existsSync(sessionFile)) return EMPTY_CONVERSATION;
+			const result = await parseAcpConversationMessages(sessionFile);
+			return {
+				...result,
+				messages: result.messages.map((message) => message.role === "assistant" ? {
+					...message,
+					completedAt: message.completedAt ?? message.createdAt,
+					streaming: false
+				} : message),
+				streaming: false
+			};
+		}
 		let jsonlPath = null;
 		const pinnedSessionId = await readLauncherPinnedSessionId(id);
 		if (pinnedSessionId) {
@@ -2146,7 +2386,7 @@ async function cleanupConversationAttachments(name) {
 *  sessions that the lifecycle poller missed. */
 async function cleanupOrphanedConversationAttachments() {
 	try {
-		const { listConversations } = await import("./conversations-6mPANqvL.js");
+		const { listConversations } = await import("./conversations-CAsJF9kh.js");
 		const convNames = new Set(listConversations().map((c) => c.name));
 		const root = getConversationAttachmentsRoot();
 		await runInBatches((await readdir(root, { withFileTypes: true })).filter((entry) => entry.isDirectory() && !convNames.has(entry.name)).map((entry) => join(root, entry.name)), 10, (path) => rm(path, {
@@ -2424,7 +2664,7 @@ async function stopConversationRuntime(conv, name) {
 function shellQuote(str) {
 	return "'" + str.replace(/'/g, "'\"'\"'") + "'";
 }
-const SAFE_MODEL_PATTERN = /^[a-zA-Z0-9_.:\/-]+$/;
+const SAFE_MODEL_PATTERN = MODEL_ID_PATTERN;
 const SAFE_EFFORT_PATTERN = /^(low|medium|high)$/;
 const SAFE_ISSUE_ID_PATTERN = /^[A-Z0-9]+-[0-9]+$/;
 const PI_CONVERSATION_SOURCE_CONTRACT = [
@@ -2436,7 +2676,7 @@ async function resolveAllowedHarness(requested, model) {
 	if (!model) return "claude-code";
 	return resolveHarness({
 		model,
-		explicit: requested === "ohmypi" || requested === "claude-code" || requested === "codex" ? requested : void 0
+		explicit: requested === "ohmypi" || requested === "claude-code" || requested === "codex" || requested === "acp" ? requested : void 0
 	});
 }
 async function isInsideGitWorkTree(dir) {
@@ -2518,6 +2758,10 @@ function shouldUseSupervisorForConversation(harness, options = {}) {
 	return getHarnessBehavior(harness).supportsPtySupervisor && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1";
 }
 async function waitForConversationRuntimeReady(tmuxSession, harness, mode) {
+	if (harness === "acp") {
+		await waitForAcpHostReady(tmuxSession);
+		return;
+	}
 	const transcriptKind = getHarnessBehavior(harness).transcriptKind;
 	if (transcriptKind === "ohmypi-jsonl") {
 		if (!await waitForPiTuiReady(tmuxSession)) throw new Error(`Pi (ohmypi) did not become interactive in ${tmuxSession} within the startup window — MCP server connections are likely still in progress. Retry once MCP servers finish connecting, or check ~/.claude/mcp.json for a slow/hanging server.`);
@@ -2533,7 +2777,7 @@ async function handleConversationSwitchModel(name, body) {
 	const currentHarness = conv.harness ?? "claude-code";
 	const requestedHarness = body["harness"];
 	let harness = currentHarness;
-	if (requestedHarness === "ohmypi" || requestedHarness === "pi" || requestedHarness === "claude-code" || requestedHarness === "codex") {
+	if (requestedHarness === "ohmypi" || requestedHarness === "pi" || requestedHarness === "claude-code" || requestedHarness === "codex" || requestedHarness === "acp") {
 		const requestedRuntime = requestedHarness === "pi" ? "ohmypi" : requestedHarness;
 		if (requestedRuntime !== currentHarness) {
 			const policyModel = model ?? conv.model ?? "";
@@ -2686,14 +2930,25 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 	let providerExportsStr = "";
 	let piFields;
 	let codexFields;
+	let acpFields;
 	let codexTransport;
-	if (model) {
+	if (behavior.launchCommandKind === "acp-host") {
+		if (!model) throw new Error("ACP conversation requires a model");
+		if (!SAFE_MODEL_PATTERN.test(model)) throw new Error("Invalid model name");
+		const sessionIdPath = join(getOverdeckHome(), "agents", tmuxSession, "acp-session-id");
+		const resumeSessionId = resume ? await readFile(sessionIdPath, "utf-8").then((value) => value.trim() || void 0).catch(() => void 0) : void 0;
+		await rm(sessionIdPath, { force: true });
+		acpFields = {
+			...getAcpLauncherFields(tmuxSession, model, cwd, harnessLaunch.binaryPath, "work"),
+			resumeSessionId
+		};
+		runtimeCommand = "acp-host";
+	} else if (model) {
 		if (!SAFE_MODEL_PATTERN.test(model)) throw new Error("Invalid model name");
 		runtimeCommand = await getAgentRuntimeBaseCommand(model, void 0, void 0, harness);
 		const mode = resolvePermissionModeSync();
 		if (!runtimeCommand.includes("--permission-mode")) runtimeCommand = `${runtimeCommand} --permission-mode ${mode === "auto" ? "auto" : BYPASS_PERMISSION_MODE}`;
 		providerExportsStr = (await getProviderExportsForModel(model)).trim();
-		await getProviderEnvForModel(model);
 		if (behavior.transcriptKind === "ohmypi-jsonl") {
 			if (getProviderForModelSync(model).name === "openai") {
 				const auth = await getOhmypiCodexAuthStatus({ refreshIfExpired: true });
@@ -2725,7 +2980,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 			const codexApprovalPolicy = codexPermMode === "full-access" ? "never" : "on-request";
 			const codexSandboxMode = codexPermMode === "full-access" ? "danger-full-access" : codexPermMode === "read-only" ? "read-only" : "workspace-write";
 			const codexApprovalsReviewer = codexPermMode === "auto-review" ? "auto_review" : void 0;
-			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-Dg7Is5yb.js");
+			const { initCodexHome, extractThreadIdFromRollout } = await import("./codex-GcHuUF-k.js");
 			initCodexHome(codexHome, {
 				trustedDir: cwd,
 				approvalPolicy: codexApprovalPolicy,
@@ -2755,7 +3010,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		await writePtyToken(tmuxSession);
 	}
 	let channelsBridgeMcpConfig;
-	if (!piFields && !codexFields && !plainFork && isClaudeCodeChannelsEnabled() && (!model || getProviderForModelSync(model).name === "anthropic") && process.env.CLAUDE_CODE_USE_BEDROCK !== "1" && process.env.CLAUDE_CODE_USE_VERTEX !== "1" && process.env.CLAUDE_CODE_USE_FOUNDRY !== "1" && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1") {
+	if (!piFields && !codexFields && !acpFields && !plainFork && isClaudeCodeChannelsEnabled() && (!model || getProviderForModelSync(model).name === "anthropic") && process.env.CLAUDE_CODE_USE_BEDROCK !== "1" && process.env.CLAUDE_CODE_USE_VERTEX !== "1" && process.env.CLAUDE_CODE_USE_FOUNDRY !== "1" && process.env.OVERDECK_DOCKER_WORKSPACE !== "1" && process.env.PAN_DOCKER !== "1") {
 		channelsBridgeMcpConfig = join(stateDir, "agent-mcp.json");
 		writeBridgeTokenSync(tmuxSession);
 		await writeChannelsBridgeMcpConfig(channelsBridgeMcpConfig, tmuxSession);
@@ -2769,19 +3024,19 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		unsetProviderEnv: true,
 		overdeckEnv: {
 			...issueId ? { issueId } : {},
-			...piFields || codexFields || useSupervisor ? { agentId: tmuxSession } : {}
+			...piFields || codexFields || acpFields || useSupervisor ? { agentId: tmuxSession } : {}
 		},
 		extraEnvExports: [harnessLaunch.pathExport, `export OVERDECK_DASHBOARD_URL="http://127.0.0.1:${process.env["API_PORT"] ?? process.env["PORT"] ?? "3011"}"`],
 		providerExports: providerExportsStr || void 0,
 		trapHup: true,
 		baseCommand: runtimeCommand,
-		appendSystemPromptFiles: piFields ? await piConversationSystemPromptFiles(cwd) : codexFields ? [] : await claudeConversationSystemPromptFiles(cwd),
+		appendSystemPromptFiles: piFields ? await piConversationSystemPromptFiles(cwd) : codexFields || acpFields ? [] : await claudeConversationSystemPromptFiles(cwd),
 		model: launcherModel,
-		...piFields ?? codexFields ?? {
+		...piFields ?? codexFields ?? acpFields ?? {
 			resumeSessionId: resume ? claudeSessionId : void 0,
 			sessionId: resume ? void 0 : claudeSessionId
 		},
-		extraArgs: !piFields && effort ? `--effort "${effort}"` : void 0,
+		extraArgs: !piFields && !acpFields && effort ? `--effort "${effort}"` : void 0,
 		keepAlive: true,
 		fileMode: 448,
 		channelsBridgeMcpConfig,
@@ -2794,7 +3049,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 	} catch {}
 	console.log(`[claude-invoke] purpose=conversation-session | model=${model || "default"} | source=conversations.ts:spawnConversationSession | session=${tmuxSession} | resume=${resume} | command="${runtimeCommand}"`);
 	try {
-		const { preTrustDirectory } = await import("./workspace-manager-ZTdJAy9M.js");
+		const { preTrustDirectory } = await import("./workspace-manager-CWT55qeI.js");
 		preTrustDirectory(cwd);
 	} catch {}
 	try {
@@ -2811,7 +3066,7 @@ async function spawnConversationSession(tmuxSession, cwd, claudeSessionId, model
 		const codexHomeDir = codexFields.codexHome;
 		(async () => {
 			try {
-				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-Dg7Is5yb.js");
+				const { waitForCodexRollout, extractThreadIdFromRollout, writeThreadId } = await import("./codex-GcHuUF-k.js");
 				const rollout = await waitForCodexRollout(codexHomeDir, 12e4);
 				if (rollout) {
 					const threadId = extractThreadIdFromRollout(rollout);
@@ -2887,10 +3142,14 @@ async function handleConversationCreate(body, deps) {
 				await spawnConversationSession(tmuxSession, cwd, claudeSessionId, model, effort, issueId, false, harness);
 				console.log(`[conversations] tmux session ${tmuxSession} spawned, sessionId: ${claudeSessionId}`);
 				await waitForConversationRuntimeReady(tmuxSession, harness, "spawn");
-				if (message) await deliverAgentMessage(tmuxSession, message, "conversation-message", resolveConversationDeliveryMethod(conv));
+				if (message) {
+					const delivery = await deliverAgentMessage(tmuxSession, message, "conversation-message", resolveConversationDeliveryMethod(conv));
+					if (harness === "acp" && !delivery.ok) throw new Error(`ACP initial prompt did not land: ${delivery.failure ?? "unknown failure"}`);
+				}
 			} catch (spawnErr) {
 				const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
 				console.error(`[conversations] background spawn failed for ${tmuxSession}: ${msg}`);
+				if (harness === "acp") await stopConversationRuntime(conv, name);
 				updateSpawnError(name, msg);
 				getEventStore().emitOnly({
 					type: "conversation.created",
@@ -2976,6 +3235,9 @@ async function handleConversationResume(name, body, deps) {
 				reattached: false,
 				sessionAlive: true
 			});
+		} catch (error) {
+			if (harness === "acp") await stopConversationRuntime(conv, name);
+			throw error;
 		} finally {
 			respawn.done();
 		}
@@ -3010,13 +3272,16 @@ async function handleConversationRestartAll(deps) {
 		const results = [];
 		for (const conv of convs) {
 			const respawn = markRespawnPending(conv.tmuxSession);
+			let attemptedHarness = conv.harness ?? "claude-code";
 			try {
 				await Effect.runPromise(killSession(conv.tmuxSession).pipe(Effect.catch(() => Effect.succeed(void 0))));
 				const oldSessionId = conv.claudeSessionId;
 				const sessionFileForResume = await deps.resolveSessionFile(conv);
 				const canResume = !!oldSessionId && !!sessionFileForResume && existsSync(sessionFileForResume);
 				const harness = await resolveAllowedHarness(conv.harness, conv.model);
+				attemptedHarness = harness;
 				await spawnConversationSession(conv.tmuxSession, conv.cwd, oldSessionId ?? randomUUID$1(), conv.model ?? void 0, conv.effort ?? void 0, conv.issueId ?? void 0, canResume, harness);
+				if (harness === "acp") await waitForConversationRuntimeReady(conv.tmuxSession, harness, "respawn");
 				setConversationHarness(conv.name, harness);
 				markConversationActive(conv.name);
 				results.push({
@@ -3027,6 +3292,7 @@ async function handleConversationRestartAll(deps) {
 			} catch (err) {
 				const msg = err instanceof Error ? err.message : String(err);
 				console.error(`[conversations] Failed to restart ${conv.name}:`, msg);
+				if (attemptedHarness === "acp") await stopConversationRuntime(conv, conv.name);
 				results.push({
 					name: conv.name,
 					model: conv.model,
@@ -3230,6 +3496,7 @@ function pickDeliverAs(bodyDeliverAs) {
 }
 function resolveConversationDeliveryMethod(conv) {
 	const harness = conv.harness ?? "claude-code";
+	if (harness === "acp") return "auto";
 	if (isPiControlChannelHarness(harness)) return "auto";
 	if (harness === "codex" && loadConfigSync().config.codex?.transport !== "tui") return "auto";
 	return conv.deliveryMethod ?? (getHarnessBehavior(harness).deliveryKind === "rpc-fifo" ? "tmux" : "auto");
@@ -3690,14 +3957,14 @@ const postInternalAgentPermissionRequestRoute = HttpRouter.add("POST", "/api/int
 		error: "missing agent id"
 	}, { status: 400 });
 	const request = yield* HttpServerRequest.HttpServerRequest;
-	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-DXdfprGr.js"));
+	const { INTERNAL_TOKEN_HEADER, getInternalTokenSync } = yield* Effect.promise(() => import("./internal-token-BrcU6qfe.js"));
 	const expected = getInternalTokenSync();
 	if (!expected) return jsonResponse({
 		ok: false,
 		error: "internal token not configured"
 	}, { status: 503 });
 	const rawHeader = request.headers[INTERNAL_TOKEN_HEADER];
-	if (!constantTimeTokenEqual$1(Array.isArray(rawHeader) ? rawHeader[0] : rawHeader, expected)) return jsonResponse({
+	if (!constantTimeTokenEqual(Array.isArray(rawHeader) ? rawHeader[0] : rawHeader, expected)) return jsonResponse({
 		ok: false,
 		error: "forbidden"
 	}, { status: 403 });
@@ -3957,7 +4224,7 @@ const getAgentHealthHistoryRoute = HttpRouter.add("GET", "/api/agents/:id/health
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const urlOpt = HttpServerRequest.toURL(request);
 	const hours = Option.isSome(urlOpt) ? urlOpt.value.searchParams.get("hours") ?? "24" : "24";
-	const { getHealthHistory } = yield* Effect.promise(() => import("./health-events-CpfvuVmm.js"));
+	const { getHealthHistory } = yield* Effect.promise(() => import("./health-events-BDOHby5Q.js"));
 	const endTime = /* @__PURE__ */ new Date();
 	const startTime = /* @__PURE__ */ new Date(endTime.getTime() - parseInt(hours) * 60 * 60 * 1e3);
 	const events = getHealthHistory(id, startTime.toISOString(), endTime.toISOString());
@@ -3998,7 +4265,7 @@ function emitAgentRuntimeEvent(id, body, timestamp) {
 				detail: String(decoded.failure)
 			}, { status: 400 })
 		};
-		const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-CnzFKSAQ.js"));
+		const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-D5UGKIJL.js"));
 		yield* (yield* AgentStateService).emit(decoded.success);
 		return {
 			ok: true,
@@ -4080,7 +4347,7 @@ const getAgentRuntimeRoute = HttpRouter.add("GET", "/api/agents/:id/runtime", ht
 		success: false,
 		error: "missing agent id"
 	}, { status: 400 });
-	const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-CnzFKSAQ.js"));
+	const { AgentStateService } = yield* Effect.promise(() => import("./agent-state-service-D5UGKIJL.js"));
 	const snapshot = yield* (yield* AgentStateService).get(id);
 	if (!snapshot) return jsonResponse({
 		success: false,
@@ -4265,8 +4532,8 @@ function createAgentStopHandler(lifecycleEvent) {
 		yield* stopAgent(id);
 		if (stateBeforeStop?.issueId) yield* Effect.promise(async () => {
 			try {
-				const { resolveProjectFromIssueSync } = await import("./projects-9SkRpES9.js");
-				const { findWorkspacePath } = await import("./archive-planning-zkJb3BeM.js");
+				const { resolveProjectFromIssueSync } = await import("./projects-vjjcmiN8.js");
+				const { findWorkspacePath } = await import("./archive-planning-BZDgzoEj.js");
 				const issueLower = stateBeforeStop.issueId.toLowerCase();
 				const workspacePath = findWorkspacePath(resolveProjectFromIssueSync(stateBeforeStop.issueId)?.projectPath ?? process.cwd(), issueLower);
 				if (workspacePath) {
@@ -4402,9 +4669,18 @@ const postAgentUnpauseRoute = HttpRouter.add("POST", "/api/agents/:id/unpause",
 		payload: buildAgentControlEventPayload(updatedState, toAgentStatusPayload(stateBeforeUnpause.status), hasLiveTmuxSession)
 	});
 	invalidateAgentsCache();
+	let resumeTriggered = false;
+	if ((yield* getWorkAgentLifecycleState(id)).canResumeSession && updatedState.troubled !== true) {
+		resumeTriggered = true;
+		yield* Effect.promise(() => appendAgentLifecycleLog(id, "agent.unpause_immediate_resume_triggered"));
+		import("./resume-BFv1PGpA.js").then(({ resumeAgent }) => resumeAgent(id)).then((result) => {
+			if (!result.success) console.warn(`[agents] immediate resume after unpause failed for ${id}: ${result.error}`);
+		}).catch((err) => console.warn(`[agents] immediate resume after unpause errored for ${id}:`, err));
+	}
 	return jsonResponse({
 		success: true,
-		agent: updatedState
+		agent: updatedState,
+		resumeTriggered
 	});
 })));
 const postAgentUntroubledRoute = HttpRouter.add("POST", "/api/agents/:id/untroubled", httpHandler(Effect.gen(function* () {
@@ -4442,6 +4718,7 @@ const postAgentUntroubledRoute = HttpRouter.add("POST", "/api/agents/:id/untroub
 init_config_yaml();
 init_agents$1();
 init_harness_policy();
+init_model_validation();
 init_operator_interventions();
 init_projects();
 init_tmux();
@@ -5090,7 +5367,6 @@ const postAgentsRestartWithConfigRoute = HttpRouter.add("POST", "/api/agents/res
 })));
 //#endregion
 //#region routes/agents/control.ts
-init_config();
 init_jsonl_parser();
 init_model_validation();
 init_paths();
@@ -5244,35 +5520,351 @@ const postAgentSwitchModelRoute = HttpRouter.add("POST", "/api/agents/:id/switch
 	return jsonResponse({ error: `Agent ${(yield* HttpRouter.params)["id"] ?? ""} model is locked once the agent is spawned` }, { status: 409 });
 })));
 //#endregion
-//#region ../../lib/xbrief/auto-synthesize.ts
-init_state_read_home();
-init_state_plane();
-init_types();
-init_codex_auth();
-init_state_home();
-init_io();
-function cleanMarkdownLine(line) {
-	return line.replace(/^[-*+]\s+\[[ xX]\]\s+/, "").replace(/^[-*+]\s+/, "").replace(/^#+\s+/, "").replace(/`([^`]+)`/g, "$1").trim();
-}
-function extractAcceptanceCriteriaFromIssue(title, body) {
-	const text = body?.trim() ?? "";
-	if (!text) return [`Implement ${title}`];
-	const lines = text.split(/\r?\n/);
-	const headingIndex = lines.findIndex((line) => /^#{1,6}\s+.*acceptance(\s+criteria)?\b/i.test(line) || /^\s*\*{0,2}acceptance criteria\*{0,2}:?\s*$/i.test(line));
-	if (headingIndex >= 0) {
-		const sectionEndIndex = lines.findIndex((line, idx) => idx > headingIndex && /^#+\s+/.test(line));
-		const endIndex = sectionEndIndex >= 0 ? sectionEndIndex : lines.length;
-		const sectionLines = lines.slice(headingIndex + 1, endIndex);
-		const checklist = sectionLines.filter((line) => /^\s*[-*+]\s+\[[ xX]\]\s+/.test(line)).map(cleanMarkdownLine).filter(Boolean);
-		if (checklist.length > 0) return checklist;
-		const bullets = sectionLines.filter((line) => /^\s*[-*+]\s+/.test(line)).map(cleanMarkdownLine).filter(Boolean).slice(0, 8);
-		if (bullets.length > 0) return bullets;
+//#region ../../lib/orders/eligibility.ts
+function evaluateOrderDispatchEligibility(input) {
+	const issueId = input.issueId.toUpperCase();
+	const item = input.book.items.find((candidate) => candidate.issue.toUpperCase() === issueId);
+	if (!item) {
+		const overrideUsed = input.offBook === true;
+		return {
+			eligible: overrideUsed,
+			overrideUsed,
+			...overrideUsed ? {} : {
+				code: "off-book",
+				message: `Issue ${issueId} is not in active order book ${input.book.id}; work-agent dispatch is blocked. Retry with --off-book only for an intentional exception.`
+			},
+			conditions: [{
+				key: "book-membership",
+				met: overrideUsed,
+				detail: overrideUsed ? `Issue ${issueId} is outside the book and the operator supplied --off-book.` : `Issue ${issueId} is not a member of ${input.book.id}.`
+			}]
+		};
 	}
-	return [`Issue's stated fix implemented with tests`];
-}
-function synthesizeMinimalXBrief(issue) {
-	const issueId = issue.issueId.toUpperCase();
-	const issueLabel = issueId.toLowerCase();
+	const terminalByIssue = new Map(input.progress.items.map((progress) => [progress.issue.toUpperCase(), progress.terminal]));
+	for (const [issue, terminal] of input.prerequisiteTerminal ?? []) if (!terminalByIssue.has(issue.toUpperCase())) terminalByIssue.set(issue.toUpperCase(), terminal);
+	const unmetPrereq = item.prereqs.find((prereq) => terminalByIssue.get(prereq.toUpperCase()) !== true);
+	const prereqsMet = unmetPrereq === void 0;
+	const otherInFlight = input.book.items.filter((candidate) => candidate.issue.toUpperCase() !== issueId && input.inFlightIssues.has(candidate.issue.toUpperCase()));
+	const laneBBlocker = item.lane === "B" ? otherInFlight.find((candidate) => candidate.lane === "B") : void 0;
+	const laneAInFlight = otherInFlight.filter((candidate) => candidate.lane === "A").length;
+	const laneSlotFree = item.lane === "B" ? laneBBlocker === void 0 : laneAInFlight < input.book.settings.laneAConcurrency;
+	const postureOpen = input.book.settings.posture === "open";
+	const prdReverified = !item.reVerify;
+	const conditions = [
+		{
+			key: "book-membership",
+			met: true,
+			detail: `${issueId} is a member of ${input.book.id}.`
+		},
+		{
+			key: "pickup-posture",
+			met: postureOpen,
+			detail: postureOpen ? "Order-book pickup posture is OPEN." : "Order-book pickup posture is DRAIN."
+		},
+		{
+			key: "lane-slot",
+			met: laneSlotFree,
+			detail: item.lane === "B" ? laneBBlocker ? `Lane B is occupied by ${laneBBlocker.issue}.` : "Lane B has no issue in flight." : `${laneAInFlight}/${input.book.settings.laneAConcurrency} Lane A slots are in flight.`
+		},
+		{
+			key: "prerequisites",
+			met: prereqsMet,
+			detail: unmetPrereq ? `Prerequisite ${unmetPrereq.toUpperCase()} is not terminal.` : "Every prerequisite is landed or parked."
+		},
+		{
+			key: "prd-reverified",
+			met: prdReverified,
+			detail: prdReverified ? "No PRD re-verification is pending." : `${issueId} requires PRD re-verification before dispatch.`
+		}
+	];
+	if (!postureOpen) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "book-draining",
+		message: `Issue ${issueId} cannot start because order book ${input.book.id} is in DRAIN posture; no new book items may dispatch.`,
+		conditions
+	};
+	if (unmetPrereq) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "prerequisite-unmet",
+		message: `Issue ${issueId} cannot start because prerequisite ${unmetPrereq.toUpperCase()} has not landed or been parked.`,
+		conditions
+	};
+	if (!prdReverified) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "reverify-required",
+		message: `Issue ${issueId} cannot start until its PRD has been re-verified against current main.`,
+		conditions
+	};
+	if (laneBBlocker) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "lane-b-busy",
+		message: `Issue ${issueId} cannot start in Lane B because ${laneBBlocker.issue} is still in flight; Lane B allows one active issue at a time.`,
+		conditions
+	};
+	if (item.lane === "A" && !laneSlotFree) return {
+		eligible: false,
+		overrideUsed: false,
+		code: "lane-a-full",
+		message: `Issue ${issueId} cannot start in Lane A because ${laneAInFlight} issues are already in flight and laneAConcurrency is ${input.book.settings.laneAConcurrency}.`,
+		conditions
+	};
+	return {
+		eligible: true,
+		overrideUsed: false,
+		conditions
+	};
+}
+//#endregion
+//#region ../../lib/orders/dispatch-gate.ts
+init_review_status();
+init_projects();
+function stateRootFor(projectRoot) {
+	const project = findProjectByPathSync(projectRoot);
+	if (!project) throw new Error(`No configured project contains ${projectRoot}`);
+	return resolveStateReadHomeSync(project).root;
+}
+function defaultInFlightIssues(_bookId, issueIds) {
+	const inFlight = /* @__PURE__ */ new Set();
+	for (const issueId of issueIds) {
+		const lifecycle = getWorkAgentLifecycleStateSync(issueId);
+		const review = getReviewStatusSync(issueId);
+		if (lifecycle.isRunning || review !== null && review.reviewStatus !== "pending") inFlight.add(issueId.toUpperCase());
+	}
+	return inFlight;
+}
+const booklessDecision = {
+	eligible: true,
+	overrideUsed: false,
+	conditions: []
+};
+async function checkActiveOrderDispatch(projectRoot, issueId, options = {}, deps = {}) {
+	const runId = await (deps.resolveRunId ?? resolveLiveFlywheelRunId)();
+	if (!runId) return {
+		ordersBound: false,
+		decision: booklessDecision
+	};
+	const launch = await (deps.readLaunch ?? readFlywheelLaunchMetadata)(runId);
+	const bookId = launch?.orders?.bookId;
+	if (!bookId) return {
+		ordersBound: false,
+		runId,
+		decision: booklessDecision
+	};
+	const stateRoot = (deps.stateRoot ?? stateRootFor)(launch?.workspace ?? projectRoot);
+	const book = (deps.getOrderBook ?? getBook)(stateRoot, bookId);
+	if (!book) throw new Error(`Active Flywheel run ${runId} references missing order book ${bookId}`);
+	const progress = (deps.computeProgress ?? computeBookProgress)(book);
+	const prerequisiteIds = [...new Set(book.items.flatMap((item) => item.prereqs.map((prereq) => prereq.toUpperCase())))];
+	const prerequisiteState = (deps.issueLookup ?? liveOrderIssueLookup)(prerequisiteIds);
+	const prerequisiteTerminal = new Map(prerequisiteIds.map((prereq) => {
+		const state = prerequisiteState.get(prereq);
+		return [prereq, state ? !state.open || state.parked : false];
+	}));
+	const inFlightIssues = new Set((deps.inFlightIssues ?? defaultInFlightIssues)(book.id, book.items.filter((item) => !progress.items.find((entry) => entry.issue === item.issue)?.terminal).map((item) => item.issue)));
+	for (const reserved of deps.reservedIssues ?? []) inFlightIssues.add(reserved.toUpperCase());
+	return {
+		ordersBound: true,
+		runId,
+		bookId,
+		decision: evaluateOrderDispatchEligibility({
+			book,
+			progress,
+			issueId,
+			inFlightIssues,
+			prerequisiteTerminal,
+			offBook: options.offBook
+		})
+	};
+}
+async function recordOffBookOverride(runId, bookId, issueId, actor = process.env["OVERDECK_AGENT_ID"] ?? "operator") {
+	const runDir = getFlywheelRunDir(runId);
+	const path = join(runDir, "orders-overrides.jsonl");
+	await mkdir(runDir, { recursive: true });
+	await appendFile(path, `${JSON.stringify({
+		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+		runId,
+		bookId,
+		issueId: issueId.toUpperCase(),
+		actor,
+		override: "off-book"
+	})}\n`, "utf8");
+	return path;
+}
+//#endregion
+//#region ../../lib/orders/dispatch-reservation.ts
+var OrderDispatchReservationError = class extends Error {
+	constructor(check) {
+		super(check.decision.message ?? "Order-book dispatch is blocked.");
+		this.check = check;
+		this.name = "OrderDispatchReservationError";
+	}
+};
+const DEFAULT_STALE_MS = 900 * 1e3;
+const processLocks = /* @__PURE__ */ new Map();
+let reservationSequence = 0;
+async function withProcessLock(key, action) {
+	const previous = processLocks.get(key) ?? Promise.resolve();
+	let release;
+	const current = new Promise((resolve) => {
+		release = resolve;
+	});
+	const tail = previous.then(() => current);
+	processLocks.set(key, tail);
+	await previous;
+	try {
+		return await action();
+	} finally {
+		release();
+		if (processLocks.get(key) === tail) processLocks.delete(key);
+	}
+}
+function paths(root) {
+	return {
+		state: join(root, "orders-dispatch-reservations.json"),
+		temp: join(root, `orders-dispatch-reservations.${process.pid}.tmp`),
+		lock: join(root, "orders-dispatch-reservations.lock")
+	};
+}
+async function acquireFileLock(path, staleMs, now) {
+	try {
+		await mkdir(path);
+		return;
+	} catch (error) {
+		if ((typeof error === "object" && error !== null && "code" in error ? error.code : void 0) !== "EEXIST") throw error;
+	}
+	if (await stat$1(path).then((value) => now.getTime() - value.mtimeMs).catch(() => 0) <= staleMs) throw new Error("Another order-book dispatch admission is in progress; retry after it finishes.");
+	await rm(path, {
+		recursive: true,
+		force: true
+	});
+	await mkdir(path);
+}
+async function readReservations(path) {
+	try {
+		const parsed = JSON.parse(await readFile(path, "utf8"));
+		return Array.isArray(parsed) ? parsed : [];
+	} catch (error) {
+		if ((typeof error === "object" && error !== null && "code" in error ? error.code : void 0) === "ENOENT") return [];
+		throw error;
+	}
+}
+async function writeReservations(path, tempPath, reservations) {
+	await writeFile(tempPath, `${JSON.stringify(reservations, null, 2)}\n`, {
+		encoding: "utf8",
+		mode: 384
+	});
+	await rename(tempPath, path);
+}
+function freshReservations(reservations, now, staleMs) {
+	return reservations.filter((reservation) => {
+		const reservedAt = Date.parse(reservation.reservedAt);
+		return Number.isFinite(reservedAt) && now.getTime() - reservedAt <= staleMs;
+	});
+}
+async function reserveActiveOrderDispatch(projectRoot, issueId, options = {}, deps = {}) {
+	const initial = await checkActiveOrderDispatch(projectRoot, issueId, options, deps);
+	if (!initial.ordersBound || !initial.runId || !initial.bookId || !initial.decision.eligible) return {
+		check: initial,
+		release: async () => {}
+	};
+	const root = (deps.reservationRoot ?? getFlywheelRunDir)(initial.runId);
+	await mkdir(root, { recursive: true });
+	const reservationPaths = paths(root);
+	const staleMs = deps.staleMs ?? DEFAULT_STALE_MS;
+	const now = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
+	const reservationId = `${process.pid}-${now.getTime()}-${reservationSequence++}`;
+	let check = initial;
+	await withProcessLock(reservationPaths.lock, async () => {
+		await acquireFileLock(reservationPaths.lock, staleMs, now);
+		try {
+			const current = freshReservations(await readReservations(reservationPaths.state), now, staleMs);
+			check = await checkActiveOrderDispatch(projectRoot, issueId, options, {
+				...deps,
+				reservedIssues: new Set(current.filter((reservation) => reservation.bookId === initial.bookId).map((reservation) => reservation.issueId))
+			});
+			if (!check.decision.eligible) return;
+			current.push({
+				id: reservationId,
+				bookId: initial.bookId,
+				issueId: issueId.toUpperCase(),
+				reservedAt: now.toISOString()
+			});
+			await writeReservations(reservationPaths.state, reservationPaths.temp, current);
+		} finally {
+			await rm(reservationPaths.lock, {
+				recursive: true,
+				force: true
+			});
+		}
+	});
+	if (!check.decision.eligible) return {
+		check,
+		release: async () => {}
+	};
+	if (options.recordOverride && check.decision.overrideUsed) await (deps.recordOverride ?? recordOffBookOverride)(initial.runId, initial.bookId, issueId);
+	let released = false;
+	return {
+		check,
+		release: async () => {
+			if (released) return;
+			released = true;
+			const releasedAt = (deps.now ?? (() => /* @__PURE__ */ new Date()))();
+			await withProcessLock(reservationPaths.lock, async () => {
+				await acquireFileLock(reservationPaths.lock, staleMs, releasedAt);
+				try {
+					const current = freshReservations(await readReservations(reservationPaths.state), releasedAt, staleMs).filter((reservation) => reservation.id !== reservationId);
+					await writeReservations(reservationPaths.state, reservationPaths.temp, current);
+				} finally {
+					await rm(reservationPaths.lock, {
+						recursive: true,
+						force: true
+					});
+				}
+			});
+		}
+	};
+}
+async function withActiveOrderDispatchReservation(projectRoot, issueId, options, action, deps = {}) {
+	const reservation = await reserveActiveOrderDispatch(projectRoot, issueId, options, deps);
+	if (!reservation.check.decision.eligible) return { check: reservation.check };
+	try {
+		return {
+			check: reservation.check,
+			result: await action()
+		};
+	} finally {
+		await reservation.release();
+	}
+}
+//#endregion
+//#region ../../lib/xbrief/auto-synthesize.ts
+init_io();
+function cleanMarkdownLine(line) {
+	return line.replace(/^[-*+]\s+\[[ xX]\]\s+/, "").replace(/^[-*+]\s+/, "").replace(/^#+\s+/, "").replace(/`([^`]+)`/g, "$1").trim();
+}
+function extractAcceptanceCriteriaFromIssue(title, body) {
+	const text = body?.trim() ?? "";
+	if (!text) return [`Implement ${title}`];
+	const lines = text.split(/\r?\n/);
+	const headingIndex = lines.findIndex((line) => /^#{1,6}\s+.*acceptance(\s+criteria)?\b/i.test(line) || /^\s*\*{0,2}acceptance criteria\*{0,2}:?\s*$/i.test(line));
+	if (headingIndex >= 0) {
+		const sectionEndIndex = lines.findIndex((line, idx) => idx > headingIndex && /^#+\s+/.test(line));
+		const endIndex = sectionEndIndex >= 0 ? sectionEndIndex : lines.length;
+		const sectionLines = lines.slice(headingIndex + 1, endIndex);
+		const checklist = sectionLines.filter((line) => /^\s*[-*+]\s+\[[ xX]\]\s+/.test(line)).map(cleanMarkdownLine).filter(Boolean);
+		if (checklist.length > 0) return checklist;
+		const bullets = sectionLines.filter((line) => /^\s*[-*+]\s+/.test(line)).map(cleanMarkdownLine).filter(Boolean).slice(0, 8);
+		if (bullets.length > 0) return bullets;
+	}
+	return [`Issue's stated fix implemented with tests`];
+}
+function synthesizeMinimalXBrief(issue) {
+	const issueId = issue.issueId.toUpperCase();
+	const issueLabel = issueId.toLowerCase();
 	const now = (/* @__PURE__ */ new Date()).toISOString();
 	const items = extractAcceptanceCriteriaFromIssue(issue.title, issue.body).map((criterion, index) => ({
 		id: `auto-start.ac${index + 1}`,
@@ -5365,222 +5957,21 @@ const writeAutoStartXBrief = (projectRoot, workspacePath, issue) => Effect.tryPr
 	})
 });
 //#endregion
-//#region routes/dashboard-auth.ts
-init_issue_lifecycle();
-init_internal_token();
-const DASHBOARD_SESSION_COOKIE = "overdeck_session";
-const DASHBOARD_CSRF_HEADER = "x-overdeck-csrf-token";
-const DASHBOARD_SESSION_MAX_AGE_SECONDS = 3600 * 24 * 30;
-let browserSessionToken;
-let browserCsrfToken;
-function getDashboardSessionToken() {
-	if (browserSessionToken) return browserSessionToken;
-	const override = process.env["OVERDECK_DASHBOARD_SESSION_TOKEN"];
-	if (override) {
-		browserSessionToken = override;
-		return browserSessionToken;
-	}
-	const internal = getInternalTokenSync();
-	browserSessionToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-session-v1").digest("base64url") : randomBytes(32).toString("base64url");
-	return browserSessionToken;
-}
-function dashboardCsrfToken() {
-	if (browserCsrfToken) return browserCsrfToken;
-	const override = process.env["OVERDECK_DASHBOARD_CSRF_TOKEN"];
-	if (override) {
-		browserCsrfToken = override;
-		return browserCsrfToken;
-	}
-	const internal = getInternalTokenSync();
-	browserCsrfToken = internal ? createHmac("sha256", internal).update("overdeck-dashboard-csrf-v1").digest("base64url") : randomBytes(32).toString("base64url");
-	return browserCsrfToken;
-}
-function constantTimeTokenEqual(provided, expected) {
-	if (!provided) return false;
-	return timingSafeEqual(createHash$1("sha256").update(provided).digest(), createHash$1("sha256").update(expected).digest());
-}
-function cookieValue(cookieHeader, name) {
-	if (!cookieHeader) return void 0;
-	for (const part of cookieHeader.split(";")) {
-		const [rawKey, ...rawValue] = part.trim().split("=");
-		if (rawKey !== name) continue;
-		try {
-			return decodeURIComponent(rawValue.join("="));
-		} catch {
-			return;
-		}
-	}
-}
-function dashboardSessionCookieHeader(options = {}) {
-	const secure = options.secure ? "; Secure" : "";
-	return `${DASHBOARD_SESSION_COOKIE}=${encodeURIComponent(getDashboardSessionToken())}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${DASHBOARD_SESSION_MAX_AGE_SECONDS}${secure}`;
-}
-function hasDashboardInternalTokenHeaders(headers) {
-	const expected = getInternalTokenSync();
-	if (!expected) return false;
-	if (constantTimeTokenEqual(getHeaderFromMap(headers, "x-overdeck-internal-token"), expected)) return true;
-	const authorization = getHeaderFromMap(headers, "authorization");
-	if (authorization) {
-		const [scheme, token] = authorization.split(/\s+/);
-		if (scheme?.toLowerCase() === "bearer" && constantTimeTokenEqual(token, expected)) return true;
-	}
-	return false;
-}
-function hasDashboardInternalToken(request) {
-	return hasDashboardInternalTokenHeaders(request.headers);
-}
-function hasDashboardAuthHeaders(headers) {
-	return hasDashboardInternalTokenHeaders(headers) || constantTimeTokenEqual(cookieValue(getHeaderFromMap(headers, "cookie"), "overdeck_session"), getDashboardSessionToken());
-}
-function hasDashboardAuth(request) {
-	return hasDashboardAuthHeaders(request.headers);
-}
-function isJsonContentType(headers) {
-	const contentType = getHeaderFromMap(headers, "content-type");
-	if (!contentType) return false;
-	const [mime] = contentType.toLowerCase().split(";");
-	return mime.trim() === "application/json";
-}
-function hasTrustedExactOrigin(headers) {
-	const origin = getHeaderFromMap(headers, "origin");
-	if (!origin) return false;
-	const normalized = normalizeOrigin(origin);
-	return !!normalized && getTrustedOrigins().includes(normalized);
-}
-function hasValidCsrfToken(headers) {
-	return constantTimeTokenEqual(getHeaderFromMap(headers, DASHBOARD_CSRF_HEADER), dashboardCsrfToken());
-}
-function rejectUnsafeDashboardMutationRequest(request) {
-	const authError = rejectUnauthorizedDashboardRequest(request);
-	if (authError) return authError;
-	const headers = request.headers;
-	if (!isJsonContentType(headers)) return jsonResponse({ error: "Content-Type must be application/json" }, { status: 400 });
-	if (hasDashboardInternalToken(request)) return null;
-	if (getHeaderFromMap(headers, "origin") && !hasTrustedExactOrigin(headers)) return jsonResponse({ error: "Invalid origin" }, { status: 403 });
-	if (!hasValidCsrfToken(headers)) return jsonResponse({ error: "Invalid CSRF token" }, { status: 403 });
-	return null;
-}
-function ipv4ToInt(value) {
-	const parts = value.split(".");
-	if (parts.length !== 4) return null;
-	let result = 0;
-	for (const part of parts) {
-		const octet = Number(part);
-		if (!Number.isInteger(octet) || octet < 0 || octet > 255) return null;
-		result = (result << 8 | octet) >>> 0;
-	}
-	return result;
-}
-/** RFC1918 private ranges — Docker bridges always fall inside one of these. */
-function isRfc1918(ip) {
-	return (ip & 4278190080) >>> 0 === 167772160 || (ip & 4293918720) >>> 0 === 2886729728 || (ip & 4294901760) >>> 0 === 3232235520;
-}
-/**
-* True when `addr` is the IP of a container on one of THIS host's Docker bridge
-* interfaces (docker0 / br-*). Such a peer can only be a process running on this
-* machine — our own host-local Traefik fronting overdeck.localhost, or another
-* Overdeck container — never a LAN client (a direct LAN hit to the 0.0.0.0
-* API port arrives with a LAN peer that is not inside any Docker bridge subnet).
-*
-* Pure for testability: the interface map is injected. We only ever trust
-* RFC1918 bridge subnets, so a misconfigured public-range br-* cannot widen
-* trust beyond the local Docker fabric.
-*/
-function peerIsHostLocalDockerBridge(addr, interfaces) {
-	const peer = ipv4ToInt(addr);
-	if (peer === null) return false;
-	for (const [name, addrs] of Object.entries(interfaces)) {
-		if (name !== "docker0" && !name.startsWith("br-")) continue;
-		for (const info of addrs ?? []) {
-			if (info.family !== "IPv4") continue;
-			const ifaceIp = ipv4ToInt(info.address);
-			const mask = ipv4ToInt(info.netmask);
-			if (ifaceIp === null || mask === null) continue;
-			const network = (ifaceIp & mask) >>> 0;
-			if (!isRfc1918(network)) continue;
-			if ((peer & mask) >>> 0 === network) return true;
-		}
-	}
-	return false;
-}
-/**
-* True when `addr` shares an RFC1918 subnet with one of THIS process's own
-* network interfaces. This is the in-container counterpart of
-* peerIsHostLocalDockerBridge: inside a container the Docker bridge is
-* invisible — the container sees only its veth endpoints (eth0/eth1), so the
-* docker0/br-* name filter never matches and the host-local Traefik fronting
-* the stack 401'd every session mint (first hit live on the PAN-1737 UAT
-* stack). A peer inside one of the container's attached Docker-network
-* subnets can only be another container on those networks — the server
-* publishes no host port (Traefik labels only), so no LAN client can ever
-* present such an address. Only consulted when running inside a container.
-*/
-function peerIsLocalContainerNetwork(addr, interfaces) {
-	const peer = ipv4ToInt(addr);
-	if (peer === null) return false;
-	for (const addrs of Object.values(interfaces)) for (const info of addrs ?? []) {
-		if (info.family !== "IPv4" || info.internal) continue;
-		const ifaceIp = ipv4ToInt(info.address);
-		const mask = ipv4ToInt(info.netmask);
-		if (ifaceIp === null || mask === null) continue;
-		const network = (ifaceIp & mask) >>> 0;
-		if (!isRfc1918(network)) continue;
-		if ((peer & mask) >>> 0 === network) return true;
-	}
-	return false;
-}
-/** Docker creates /.dockerenv in every container — stable in-container signal. */
-const runningInContainer = existsSync("/.dockerenv");
-/**
-* A request we trust to mint a session because it originated from this machine —
-* the local browser hitting the dashboard directly (127.0.0.1), or the
-* host-local Traefik that fronts overdeck.localhost. In Docker, that Traefik reaches
-* the host server from a Docker-bridge IP (e.g. 172.18.0.2), NOT 127.0.0.1, so
-* a literal-loopback check alone silently breaks the zero-step bootstrap for
-* every overdeck.localhost user — their session mint 401s and no cookie is ever set.
-*
-* This is the auto-bootstrap that removes the manual one-time #overdeck_token
-* step: any browser on overdeck.localhost gets a session with no user action. It is
-* NOT a security downgrade for the LAN — the raw API ports bind 0.0.0.0, but a
-* direct LAN hit has a non-loopback, non-Docker-bridge peer and is rejected. We
-* read ONLY the real TCP peer (request.remoteAddress), never X-Forwarded-For,
-* which a caller could spoof.
-*/
-function isLoopbackPeer(request) {
-	const remoteAddress = request.remoteAddress;
-	const raw = remoteAddress && typeof remoteAddress === "object" && "_tag" in remoteAddress ? Option.getOrElse(remoteAddress, () => "") : typeof remoteAddress === "string" ? remoteAddress : "";
-	if (!raw) return false;
-	const addr = raw.startsWith("::ffff:") ? raw.slice(7) : raw;
-	if (addr === "127.0.0.1" || addr === "::1") return true;
-	if (peerIsHostLocalDockerBridge(addr, networkInterfaces())) return true;
-	return runningInContainer && peerIsLocalContainerNetwork(addr, networkInterfaces());
-}
-function rejectUnauthorizedDashboardSessionMintRequest(request) {
-	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
-	if (!hasDashboardInternalToken(request) && !isLoopbackPeer(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
-	return null;
-}
-function rejectUnauthorizedDashboardRequest(request) {
-	if (!getInternalTokenSync()) return jsonResponse({ error: "dashboard session token not configured" }, { status: 503 });
-	if (!hasDashboardAuth(request)) return jsonResponse({ error: "unauthorized" }, { status: 401 });
-	return null;
-}
-//#endregion
 //#region routes/agents/spawn-helpers.ts
 init_child_env();
 init_agents$1();
 function handleRemoteAgentSpawn(input) {
 	return Effect.gen(function* () {
 		const { issueId, workspacePath, workspaceMetadata, spawnModel, projectPath, spawnGuardrails, lifecycle } = input;
-		const { spawnRemoteAgent, checkRemoteSpendCap } = yield* Effect.promise(() => import("./remote-agents-CRCg1L4H.js"));
-		const { createFlyProviderFromConfig } = yield* Effect.promise(() => import("./remote-4tiENDaI.js"));
-		const { loadConfigSync: loadPanConfig } = yield* Effect.promise(() => import("./config-DUIhMN_T.js"));
+		const { spawnRemoteAgent, checkRemoteSpendCap } = yield* Effect.promise(() => import("./remote-agents-CA3Ihlxj.js"));
+		const { createFlyProviderFromConfig } = yield* Effect.promise(() => import("./remote-ChgimyYa.js"));
+		const { loadConfigSync: loadPanConfig } = yield* Effect.promise(() => import("./config-DzV30TOm.js"));
 		const panConfig = loadPanConfig();
 		const spendCap = checkRemoteSpendCap(panConfig);
 		if (!spendCap.allowed) return jsonResponse({ error: spendCap.message }, { status: 429 });
 		const fly = createFlyProviderFromConfig(panConfig.remote);
 		yield* Effect.promise(() => fly.syncAllCredentials(workspaceMetadata.vmName));
-		const { buildWorkAgentPrompt, getTrackerContext } = yield* Effect.promise(() => import("./work-agent-prompt-Yb2bd3Fq.js"));
+		const { buildWorkAgentPrompt, getTrackerContext } = yield* Effect.promise(() => import("./work-agent-prompt-Du8Vh2aJ.js"));
 		const trackerContext = yield* Effect.promise(() => getTrackerContext(issueId, workspacePath));
 		const agentPrompt = yield* Effect.promise(() => buildWorkAgentPrompt({
 			issueId,
@@ -5902,10 +6293,22 @@ init_harness_policy();
 init_activity_logger();
 init_projects();
 init_review_status();
+init_state_read_home();
 init_io();
 init_read_model();
 init_domain_services();
 init_tmux();
+function orderDispatchConflict(decision) {
+	if (decision.eligible) return null;
+	return {
+		status: 409,
+		body: {
+			error: decision.message ?? "Order-book dispatch is blocked.",
+			code: decision.code ?? "order-dispatch-blocked",
+			conditions: decision.conditions
+		}
+	};
+}
 /**
 * PAN-2386: emit a dashboard activity event when start-agent refuses to spawn
 * because the workspace is dirty. Kept as a pure function so the refusal path
@@ -5974,6 +6377,7 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	const { issueId, projectId } = body;
 	const autoStart = body.auto === true;
 	const guardrailAcknowledged = body.guardrailAcknowledged === true;
+	const offBook = body.offBook === true;
 	const requestedHostOverride = body.host === true || body.allowHost === true;
 	if (!issueId) return jsonResponse({ error: "issueId required" }, { status: 400 });
 	const legacyFields = [
@@ -6029,6 +6433,8 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	const resolvedProject = resolveProjectFromIssueSync(String(issueId));
 	const projectConfig = resolvedProject ? getProjectSync(resolvedProject.projectKey) : null;
 	const projectPath = projectConfig?.path ?? getProjectPath(projectId, issuePrefix);
+	const orderConflict = orderDispatchConflict((yield* Effect.promise(() => checkActiveOrderDispatch(projectPath, issueId, { offBook }))).decision);
+	if (orderConflict) return jsonResponse(orderConflict.body, { status: orderConflict.status });
 	const workspacePath = join(projectPath, "workspaces", `feature-${issueLower}`);
 	if (!existsSync(workspacePath)) try {
 		const nodeDir = dirname(process.execPath);
@@ -6173,10 +6579,18 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 	}
 	if (!isRemote) {
 		emitStartAgentPhase(issueId, "stackHealthGate", "start", "checking workspace docker stack health", { workspacePath });
-		const stackHealth = yield* getWorkspaceStackHealth(issueId, {
+		let stackHealth = yield* getWorkspaceStackHealth(issueId, {
 			projectConfig,
 			workspacePath
 		});
+		if (!stackHealth.healthy && !allowHost) {
+			emitStartAgentPhase(issueId, "stackHealthGate", "start", "stack unhealthy — attempting workspace stack rebuild", { workspacePath });
+			yield* Effect.promise(() => assertWorkspaceStackHealthyForSpawn(issueId, "work", false, workspacePath).catch(() => void 0));
+			stackHealth = yield* getWorkspaceStackHealth(issueId, {
+				projectConfig,
+				workspacePath
+			});
+		}
 		if (!stackHealth.healthy) {
 			yield* Effect.promise(() => appendAgentLifecycleLog(agentSessionName, "agent.start_blocked_stack_unhealthy", {
 				issueId,
@@ -6278,7 +6692,7 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			console.warn(`[start-agent] Failed to set plan.status=running (non-fatal): ${planStatusErr?.message ?? planStatusErr}`);
 		}
 		try {
-			const { appendSessionEntry, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = await import("./record-t6V-3Dcj.js");
+			const { appendSessionEntry, getProjectConfigFromWorkspacePath, resolveProjectForIssue } = await import("./record-CN0pj4_5.js");
 			await appendSessionEntry(resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath), issueId, {
 				timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 				reason: "start",
@@ -6291,7 +6705,10 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		if (getReviewStatusSync(issueId)?.stuckReason === "planning_auto_handoff_failed") clearWorkspaceStuck(issueId);
 	};
 	if (isRemote && workspaceMetadata) {
-		const response = yield* Effect.promise(() => spawnAfterClearingStartGates({
+		const admitted = yield* Effect.promise(() => withActiveOrderDispatchReservation(projectPath, issueId, {
+			offBook,
+			recordOverride: true
+		}, () => spawnAfterClearingStartGates({
 			agentSessionName,
 			gate: startGateBlock,
 			initialState: initialAgentState,
@@ -6305,7 +6722,10 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 				lifecycle
 			})),
 			isSuccessful: (remoteResponse) => remoteResponse.status >= 200 && remoteResponse.status < 300
-		}));
+		})));
+		const admittedConflict = orderDispatchConflict(admitted.check.decision);
+		if (admittedConflict) return jsonResponse(admittedConflict.body, { status: admittedConflict.status });
+		const response = admitted.result;
 		if (response.status < 200 || response.status >= 300) return response;
 		yield* Effect.promise(commitClearedGates);
 		yield* Effect.promise(markWorkStartAccepted);
@@ -6373,11 +6793,14 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 		console.warn(`[start-agent] Failed to check workspace status for ${issueId}: ${message}`);
 	}
 	const bodyHarness = body.harness;
-	const userPickedHarness = bodyHarness === "ohmypi" || bodyHarness === "claude-code" || bodyHarness === "codex" ? bodyHarness : null;
+	const userPickedHarness = bodyHarness === "ohmypi" || bodyHarness === "claude-code" || bodyHarness === "codex" || bodyHarness === "acp" ? bodyHarness : null;
 	let effectiveHarness = null;
 	if (userPickedHarness !== null) effectiveHarness = (yield* Effect.promise(async () => canUseHarnessSync(userPickedHarness, spawnModel, await getProviderAuthMode(spawnModel)))).allowed ? userPickedHarness : "claude-code";
 	const spawnPanCommand = async (args, cwd) => {
-		const activityId = await spawnAfterClearingStartGates({
+		const admitted = await withActiveOrderDispatchReservation(projectPath, issueId, {
+			offBook,
+			recordOverride: false
+		}, () => spawnAfterClearingStartGates({
 			agentSessionName,
 			gate: gatesCommitted ? null : startGateBlock,
 			initialState: initialAgentState,
@@ -6389,9 +6812,10 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 				args,
 				cwd
 			})
-		});
+		}));
+		if (!admitted.check.decision.eligible || !admitted.result) throw new OrderDispatchReservationError(admitted.check);
 		await commitClearedGates();
-		return activityId;
+		return admitted.result;
 	};
 	const updateIssueStatus = async () => {
 		await Effect.runPromise(lifecycle.transitionTo(issueId, "in_progress").pipe(Effect.catch(() => Effect.void)));
@@ -6475,7 +6899,8 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			issueId,
 			model: spawnModel,
 			harness: effectiveHarness,
-			allowHost
+			allowHost,
+			offBook
 		}), workspacePath));
 		yield* Effect.promise(markWorkStartAccepted);
 		emitStartAgentPhase(issueId, "spawn", "success", "local work agent spawn requested", {
@@ -6506,6 +6931,10 @@ const postAgentsRoute = HttpRouter.add("POST", "/api/agents", httpHandler(Effect
 			fallbackStatus: fallbackState.status
 		}));
 		invalidateAgentsCache();
+		if (error instanceof OrderDispatchReservationError) {
+			const conflict = orderDispatchConflict(error.check.decision);
+			return jsonResponse(conflict.body, { status: conflict.status });
+		}
 		const output = String(error?.output ?? error?.message ?? "");
 		if (output.includes(`Workspace docker stack for ${issueId}`) && output.includes("is not healthy")) {
 			const failedStackHealth = yield* getWorkspaceStackHealth(issueId, {
@@ -6715,10 +7144,10 @@ const _serverManagedMerges = /* @__PURE__ */ new Set();
 function firePostMergeLifecycle(issueId, options) {
 	const started = postMergeGuard.run(issueId, async () => {
 		const projectPath = getProjectPathForIssue(extractPrefixSync(issueId) ?? issueId.split("-")[0]);
-		const { postMergeLifecycle } = await import("./merge-agent-BQM3a8z5.js");
+		const { postMergeLifecycle } = await import("./merge-agent-CKkgIBPB.js");
 		await postMergeLifecycle(issueId, projectPath, options?.sourceBranch, options?.verifiedMergedRef ? { verifiedMergedRef: options.verifiedMergedRef } : void 0);
 		console.log(`[merge] post-merge lifecycle completed for ${issueId}`);
-		const { runMergeTrainReconcile } = await import("./merge-train-DxDfBTjr.js");
+		const { runMergeTrainReconcile } = await import("./merge-train-CHopycP0.js");
 		const outcomes = await runMergeTrainReconcile(issueId);
 		if (outcomes.length > 0) console.log(`[merge-train] reconciled ${outcomes.length} sibling(s) after ${issueId}: ` + outcomes.map((o) => `${o.issueId}=${o.result}`).join(", "));
 	}, (err) => console.error(`[merge] post-merge lifecycle failed for ${issueId}:`, err));
@@ -6739,15 +7168,15 @@ init_io();
 init_domain_services();
 init_tmux();
 const getSpecialistsRoute = HttpRouter.add("GET", "/api/specialists", httpHandler(Effect.gen(function* () {
-	const { getAllSpecialistStatus, getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { getAllSpecialistStatus, getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	return jsonResponse({
 		specialists: yield* Effect.promise(() => getAllSpecialistStatus()),
 		projects: yield* Effect.promise(() => getAllProjectSpecialistStatuses())
 	});
 })));
 const postSpecialistsResetAllRoute = HttpRouter.add("POST", "/api/specialists/reset-all", httpHandler(Effect.gen(function* () {
-	const { getAllSpecialists, isRunning, getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
-	const { clearHookSync } = yield* Effect.promise(() => import("./hooks-ltecuFqZ.js"));
+	const { getAllSpecialists, isRunning, getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
+	const { clearHookSync } = yield* Effect.promise(() => import("./hooks-DPVX1rwQ.js"));
 	const specialists = getAllSpecialists();
 	const results = [];
 	for (const specialist of specialists) {
@@ -6803,7 +7232,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	}
 	console.log(`[specialists/done] ${specialist} signaling ${status} for ${normalizedIssueId}`);
 	if (specialist === "merge") {
-		const { reportSpecialistCompletion } = yield* Effect.promise(() => import("./specialist-completion-BXhav38U.js"));
+		const { reportSpecialistCompletion } = yield* Effect.promise(() => import("./specialist-completion-Ky9wCDpb.js"));
 		if (yield* reportSpecialistCompletion(normalizedIssueId, {
 			status,
 			notes
@@ -6850,7 +7279,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	if (specialist === "inspect" && status === "failed") yield* Effect.promise(() => reportTieredInspectFailureEscalation(normalizedIssueId, notes));
 	yield* Effect.promise(async () => {
 		try {
-			const { getTmuxSessionName, updateRunMetadata, makeSpecialistRegistryKey } = await import("./specialists-DVj0hvaL.js");
+			const { getTmuxSessionName, updateRunMetadata, makeSpecialistRegistryKey } = await import("./specialists-DM6bWjsi.js");
 			const projectKey = resolveProjectFromIssueSync(normalizedIssueId)?.projectKey;
 			const tmuxSession = projectKey ? getTmuxSessionName(`${specialist}-agent`, projectKey, normalizedIssueId) : getTmuxSessionName(`${specialist}-agent`);
 			saveAgentRuntimeState(tmuxSession, {
@@ -6869,7 +7298,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 				});
 				console.log(`[specialists/done] Cleared registry lock for ${registryKey} (${projectKey})`);
 			}
-			const { updateSpecialistHandoffStatus } = await import("./specialist-handoff-logger-C45ouoZ6.js");
+			const { updateSpecialistHandoffStatus } = await import("./specialist-handoff-logger-CMEwYxa2.js");
 			if (await Effect.runPromise(updateSpecialistHandoffStatus(normalizedIssueId, `${specialist}-agent`, status === "passed" ? "completed" : "failed", status === "passed" ? "success" : "failure"))) console.log(`[specialists/done] Updated handoff log: ${specialist}-agent ${normalizedIssueId} → ${status}`);
 		} catch (err) {
 			console.error(`[specialists/done] Error managing specialist state:`, err);
@@ -6881,7 +7310,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 			if (project) {
 				const workspacePath = join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`);
 				if (existsSync(workspacePath)) {
-					const { getWorkspaceGitInfo } = await import("./git-utils-Dry_Ka_D.js");
+					const { getWorkspaceGitInfo } = await import("./git-utils-D0_yhCgF.js");
 					const { HEAD } = await Effect.runPromise(getWorkspaceGitInfo(workspacePath));
 					setReviewStatusSync(normalizedIssueId, { reviewedAtCommit: HEAD });
 					console.log(`[specialists/done] Snapshotted reviewedAtCommit=${HEAD.substring(0, 8)} for ${normalizedIssueId}`);
@@ -6893,7 +7322,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	});
 	if (specialist === "inspect" && status === "passed") yield* Effect.promise(async () => {
 		try {
-			const { onInspectComplete } = await import("./inspect-agent-ch-F-5Ci.js");
+			const { onInspectComplete } = await import("./inspect-agent-Brtz0URj.js");
 			const project = resolveProjectFromIssueSync(normalizedIssueId);
 			if (project) {
 				const workspacePath = join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`);
@@ -6909,7 +7338,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 			if (project) {
 				if (existsSync(join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`))) {
 					setReviewStatusSync(normalizedIssueId, { testStatus: "passed" });
-					const { initEventStore } = await import("./event-store-Cr5PQwFC.js");
+					const { initEventStore } = await import("./event-store-EV2cMiXj.js");
 					await (await initEventStore()).appendAsync({
 						type: "test.passed",
 						timestamp: (/* @__PURE__ */ new Date()).toISOString(),
@@ -6962,8 +7391,8 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 		if (notes?.toLowerCase().includes("conflict")) yield* Effect.promise(async () => {
 			try {
 				const workAgentId = `agent-${normalizedIssueId.toLowerCase()}`;
-				const { sessionExists } = await import("./tmux-DoThH6aj.js");
-				const { messageAgent, spawnAgent, getAgentStateSync } = await import("./agents-FlIgQ3ql.js");
+				const { sessionExists } = await import("./tmux-B6z7h_vZ.js");
+				const { messageAgent, spawnAgent, getAgentStateSync } = await import("./agents-wi9NWzs2.js");
 				if (await Effect.runPromise(sessionExists(workAgentId))) {
 					await messageAgent(workAgentId, `MERGE CONFLICT: The merge-agent could not rebase your branch onto main due to conflicts. Please fix this now:\n\n1. git fetch origin main\n2. git rebase origin/main\n3. Resolve any conflicts (git add <file> && git rebase --continue)\n4. git push --force-with-lease\n5. Resubmit: curl -s -X POST http://localhost:3011/api/review/${normalizedIssueId}/request -H "Content-Type: application/json" -d "{}"\n\nConflict details: ${notes}`);
 					console.log(`[specialists/done] Sent rebase instructions to ${workAgentId}`);
@@ -6977,7 +7406,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 		try {
 			const project = resolveProjectFromIssueSync(normalizedIssueId);
 			const workspacePath = project ? join(project.projectPath, "workspaces", `feature-${normalizedIssueId.toLowerCase()}`) : void 0;
-			const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-C1Kg8n7t.js");
+			const { deliverReviewVerdictFeedback } = await import("./review-verdict-feedback-CTd4QMBu.js");
 			const result = await Effect.runPromise(deliverReviewVerdictFeedback({
 				issueId: normalizedIssueId,
 				verdict: status === "failed" ? "failed" : "blocked",
@@ -7018,7 +7447,7 @@ const postSpecialistsDoneRoute = HttpRouter.add("POST", "/api/specialists/done",
 	});
 })));
 const postSpecialistsLogsCleanupAllRoute = HttpRouter.add("POST", "/api/specialists/logs/cleanup-all", httpHandler(Effect.gen(function* () {
-	const { cleanupAllLogsSync } = yield* Effect.promise(() => import("./specialist-logs-DJ3RzKxW.js"));
+	const { cleanupAllLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const results = cleanupAllLogsSync();
 	return jsonResponse({
 		success: true,
@@ -7028,7 +7457,7 @@ const postSpecialistsLogsCleanupAllRoute = HttpRouter.add("POST", "/api/speciali
 	});
 })));
 const getSpecialistsProjectsRoute = HttpRouter.add("GET", "/api/specialists/projects", httpHandler(Effect.gen(function* () {
-	const { getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { getAllProjectSpecialistStatuses } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	return jsonResponse(yield* Effect.promise(() => getAllProjectSpecialistStatuses()));
 })));
 const postSpecialistWakeRoute = HttpRouter.add("POST", "/api/specialists/:name/wake", httpHandler(Effect.gen(function* () {
@@ -7072,7 +7501,7 @@ const postSpecialistReportStatusRoute = HttpRouter.add("POST", "/api/specialists
 		"blocked",
 		"failed"
 	].includes(status)) {
-		const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+		const { getTmuxSessionName } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 		saveAgentRuntimeState(getTmuxSessionName(name), {
 			state: "idle",
 			lastActivity: (/* @__PURE__ */ new Date()).toISOString()
@@ -7193,7 +7622,7 @@ const postProjectSpecialistKillRoute = HttpRouter.add("POST", "/api/specialists/
 	const issueId = params["issueId"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { getTmuxSessionName, makeSpecialistRegistryKey, getRunMetadata } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { getTmuxSessionName, makeSpecialistRegistryKey, getRunMetadata } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	const tmuxSession = getRunMetadata(project, makeSpecialistRegistryKey(type, issueId)).tmuxSession ?? getTmuxSessionName(type, project, issueId);
 	yield* Effect.promise(() => Effect.runPromise(killSession(tmuxSession)).catch(() => {}));
 	saveAgentRuntimeState(tmuxSession, {
@@ -7220,7 +7649,7 @@ const getProjectSpecialistRunsRoute = HttpRouter.add("GET", "/api/specialists/:p
 		if (limitParam) limit = parseInt(limitParam, 10);
 		if (offsetParam) offset = parseInt(offsetParam, 10);
 	}
-	const { listRunLogsSync } = yield* Effect.promise(() => import("./specialist-logs-DJ3RzKxW.js"));
+	const { listRunLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	return jsonResponse(listRunLogsSync(project, type, {
 		limit,
 		offset
@@ -7231,7 +7660,7 @@ const getProjectSpecialistRunStreamRoute = HttpRouter.add("GET", "/api/specialis
 	const project = params["project"];
 	const type = params["type"];
 	const runId = params["runId"];
-	const { getRunLogPath, isRunLogActive } = yield* Effect.promise(() => import("./specialist-logs-DJ3RzKxW.js"));
+	const { getRunLogPath, isRunLogActive } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const logPath = getRunLogPath(project, type, runId);
 	if (!existsSync(logPath)) return jsonResponse({ error: "Run log not found" }, { status: 404 });
 	const encoder = new TextEncoder();
@@ -7290,7 +7719,7 @@ const getProjectSpecialistRunRoute = HttpRouter.add("GET", "/api/specialists/:pr
 	const project = params["project"];
 	const type = params["type"];
 	const runId = params["runId"];
-	const { getRunLogSync, parseLogMetadata } = yield* Effect.promise(() => import("./specialist-logs-DJ3RzKxW.js"));
+	const { getRunLogSync, parseLogMetadata } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
 	const content = getRunLogSync(project, type, runId);
 	if (!content) return jsonResponse({ error: "Run log not found" }, { status: 404 });
 	return jsonResponse({
@@ -7304,7 +7733,7 @@ const postProjectSpecialistRunTerminateRoute = HttpRouter.add("POST", "/api/spec
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { terminateSpecialist } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { terminateSpecialist } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	yield* Effect.promise(() => terminateSpecialist(project, type));
 	return jsonResponse({
 		success: true,
@@ -7316,7 +7745,7 @@ const postProjectSpecialistGracePauseRoute = HttpRouter.add("POST", "/api/specia
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { pauseGracePeriod } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { pauseGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	if (pauseGracePeriod(project, type)) return jsonResponse({
 		success: true,
 		message: "Grace period paused"
@@ -7328,7 +7757,7 @@ const postProjectSpecialistGraceResumeRoute = HttpRouter.add("POST", "/api/speci
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { resumeGracePeriod } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { resumeGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	if (resumeGracePeriod(project, type)) return jsonResponse({
 		success: true,
 		message: "Grace period resumed"
@@ -7340,7 +7769,7 @@ const postProjectSpecialistGraceExitRoute = HttpRouter.add("POST", "/api/special
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { exitGracePeriod } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { exitGracePeriod } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	exitGracePeriod(project, type);
 	return jsonResponse({
 		success: true,
@@ -7352,7 +7781,7 @@ const getProjectSpecialistGraceRoute = HttpRouter.add("GET", "/api/specialists/:
 	const project = params["project"];
 	const type = params["type"];
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { getGracePeriodState } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { getGracePeriodState } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	const state = getGracePeriodState(project, type);
 	if (state) return jsonResponse(state);
 	else return jsonResponse({ error: "No active grace period" }, { status: 404 });
@@ -7361,7 +7790,7 @@ const getProjectSpecialistContextRoute = HttpRouter.add("GET", "/api/specialists
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { loadContextDigest } = yield* Effect.promise(() => import("./specialist-context-DtrYvGJ-.js"));
+	const { loadContextDigest } = yield* Effect.promise(() => import("./specialist-context-Bn3dCGS2.js"));
 	const digest = loadContextDigest(project, type);
 	if (digest) return jsonResponse({ digest });
 	else return jsonResponse({ error: "No context digest found" }, { status: 404 });
@@ -7370,7 +7799,7 @@ const postProjectSpecialistContextRegenerateRoute = HttpRouter.add("POST", "/api
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { regenerateContextDigest } = yield* Effect.promise(() => import("./specialist-context-DtrYvGJ-.js"));
+	const { regenerateContextDigest } = yield* Effect.promise(() => import("./specialist-context-Bn3dCGS2.js"));
 	const digest = yield* Effect.promise(() => regenerateContextDigest(project, type));
 	if (digest) return jsonResponse({
 		digest,
@@ -7389,7 +7818,7 @@ const postProjectSpecialistCompleteRoute = HttpRouter.add("POST", "/api/speciali
 		"blocked"
 	].includes(status)) return jsonResponse({ error: "Valid status (passed/failed/blocked) is required" }, { status: 400 });
 	if (!validateSpecialistAgentName(type)) return jsonResponse({ error: "Invalid specialist type. Must be review-agent, test-agent, or merge-agent" }, { status: 400 });
-	const { signalSpecialistCompletion } = yield* Effect.promise(() => import("./specialists-DVj0hvaL.js"));
+	const { signalSpecialistCompletion } = yield* Effect.promise(() => import("./specialists-DM6bWjsi.js"));
 	signalSpecialistCompletion(project, type, {
 		status,
 		notes
@@ -7423,8 +7852,8 @@ const postProjectSpecialistLogsCleanupRoute = HttpRouter.add("POST", "/api/speci
 	const params = yield* HttpRouter.params;
 	const project = params["project"];
 	const type = params["type"];
-	const { cleanupOldLogsSync } = yield* Effect.promise(() => import("./specialist-logs-DJ3RzKxW.js"));
-	const { getSpecialistRetention } = yield* Effect.promise(() => import("./projects-9SkRpES9.js"));
+	const { cleanupOldLogsSync } = yield* Effect.promise(() => import("./specialist-logs-C5p8G7tx.js"));
+	const { getSpecialistRetention } = yield* Effect.promise(() => import("./projects-vjjcmiN8.js"));
 	const retention = getSpecialistRetention(project);
 	const deleted = cleanupOldLogsSync(project, type, {
 		maxDays: retention.max_days,
@@ -7445,7 +7874,7 @@ const postProjectReviewRestartRoute = HttpRouter.add("POST", "/api/specialists/:
 	const project = params["project"];
 	const issueId = params["issueId"];
 	const { model, harness } = yield* readJsonBody;
-	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-DJRO8EG8.js"));
+	const { killAllReviewerSessions } = yield* Effect.promise(() => import("./review-agent-DNboMyW4.js"));
 	const killResult = yield* killAllReviewerSessions(project, issueId);
 	const projectConfig = resolveProjectFromIssueSync(issueId);
 	if (!projectConfig) return jsonResponse({ error: `Cannot resolve project for ${issueId}` }, { status: 404 });
@@ -7459,7 +7888,7 @@ const postProjectReviewRestartRoute = HttpRouter.add("POST", "/api/specialists/:
 		}));
 		branch = stdout.trim() || "unknown";
 	} catch {}
-	const { spawnReviewRoleForIssue } = yield* Effect.promise(() => import("./review-agent-DJRO8EG8.js"));
+	const { spawnReviewRoleForIssue } = yield* Effect.promise(() => import("./review-agent-DNboMyW4.js"));
 	const prUrl = getReviewStatusSync(issueId)?.prUrl;
 	const result = yield* spawnReviewRoleForIssue({
 		issueId,
@@ -7608,6 +8037,6 @@ const specialistsProjectRouteLayer = Layer.mergeAll(getProjectSpecialistStatusRo
 */
 const specialistsRouteLayer = Layer.mergeAll(specialistsLegacyRouteLayer, specialistsProjectRouteLayer);
 //#endregion
-export { runInBatches as $, handleConversationDelete as A, stopConversationRuntime as B, isPiControlChannelHarness as C, conversationNeedsRunningRepair as D, validateConversationControlAckOrigin as E, isInsideGitWorkTree as F, cleanupOrphanedConversationAttachments as G, waitForPiTuiReady as H, resolveAllowedHarness as I, extractConversationAttachmentPaths as J, cleanupUnreferencedConversationAttachments as K, shouldReportUnresolvedLiveSession as L, handleConversationResume as M, handleConversationStop as N, conversationSessionAliveFromState as O, handleConversationSwitchModel as P, removeConversationAttachment as Q, spawnConversationSession as R, handleConversationThinkingLevel as S, jsonStringResponse as St, resolveConversationDeliveryMethod as T, waitForTmuxSession as U, tmuxSessionExists as V, cleanupConversationAttachments as W, hasConversationAttachment as X, getConversationAttachmentsRoot as Y, isManagedConversationAttachmentPath as Z, handleConversationCodexApproval as _, validateOrigin as _t, agentsRouteLayer as a, panCliInvocation as at, handleConversationDeliveryMethod as b, getDefaultCwd as bt, hasDashboardInternalToken as c, resolveAgentHarness as ct, rejectUnsafeDashboardMutationRequest as d, resolveJsonlPath as dt, evaluateSpawnGuardrails as et, saveAgentStateAndEmitEvent as f, resolvePiSessionPath as ft, handleConversationAbort as g, isTrustedOriginForHost as gt, deliverConversationViaControlChannel as h, getHeaderFromMap as ht, validateSpecialistAutoCompleteMetadata as i, getWorkAgentLifecycleStateSync as it, handleConversationRestartAll as j, handleConversationCreate as k, rejectUnauthorizedDashboardRequest as l, resolveClaudeSessionId as lt, codexConversationPendingInput as m, waitForSessionRespawn as mt, _serverManagedMerges as n, resolveAgentGitInfo as nt, dashboardCsrfToken as o, spawnPanCli as ot, saveAgentStateAndEmitEventProgram as p, isRespawnPending as pt, ensureConversationAttachmentDir as q, firePostMergeLifecycle as r, resolveConversationGitInfo as rt, dashboardSessionCookieHeader as s, readLauncherPinnedSessionId as st, specialistsRouteLayer as t, invalidateAgentsCache as tt, rejectUnauthorizedDashboardSessionMintRequest as u, resolveCodexRolloutPath as ut, handleConversationCompact as v, validateOriginHeaders as vt, pickDeliverAs as w, handleConversationPlanAction as x, jsonResponse as xt, handleConversationControlAck as y, httpHandler as yt, startConversationModelBackfill as z };
+export { panCliInvocation as $, resolveAllowedHarness as A, cleanupUnreferencedConversationAttachments as B, handleConversationCreate as C, jsonStringResponse as Ct, handleConversationStop as D, handleConversationResume as E, tmuxSessionExists as F, isManagedConversationAttachmentPath as G, extractConversationAttachmentPaths as H, waitForPiTuiReady as I, evaluateSpawnGuardrails as J, removeConversationAttachment as K, waitForTmuxSession as L, spawnConversationSession as M, startConversationModelBackfill as N, handleConversationSwitchModel as O, stopConversationRuntime as P, getWorkAgentLifecycleStateSync as Q, cleanupConversationAttachments as R, conversationSessionAliveFromState as S, jsonResponse as St, handleConversationRestartAll as T, getConversationAttachmentsRoot as U, ensureConversationAttachmentDir as V, hasConversationAttachment as W, resolveAgentGitInfo as X, invalidateAgentsCache as Y, resolveConversationGitInfo as Z, isPiControlChannelHarness as _, isTrustedOriginForHost as _t, agentsRouteLayer as a, resolveCodexRolloutPath as at, validateConversationControlAckOrigin as b, httpHandler as bt, codexConversationPendingInput as c, dashboardCsrfToken as ct, handleConversationCodexApproval as d, rejectUnauthorizedDashboardRequest as dt, spawnPanCli as et, handleConversationCompact as f, rejectUnauthorizedDashboardSessionMintRequest as ft, handleConversationThinkingLevel as g, getHeaderFromMap as gt, handleConversationPlanAction as h, waitForSessionRespawn as ht, validateSpecialistAutoCompleteMetadata as i, resolveClaudeSessionId as it, shouldReportUnresolvedLiveSession as j, isInsideGitWorkTree as k, deliverConversationViaControlChannel as l, dashboardSessionCookieHeader as lt, handleConversationDeliveryMethod as m, isRespawnPending as mt, _serverManagedMerges as n, resolveAcpTranscriptPath as nt, saveAgentStateAndEmitEvent as o, resolveJsonlPath as ot, handleConversationControlAck as p, rejectUnsafeDashboardMutationRequest as pt, runInBatches as q, firePostMergeLifecycle as r, resolveAgentHarness as rt, saveAgentStateAndEmitEventProgram as s, resolvePiSessionPath as st, specialistsRouteLayer as t, readLauncherPinnedSessionId as tt, handleConversationAbort as u, hasDashboardInternalToken as ut, pickDeliverAs as v, validateOrigin as vt, handleConversationDelete as w, conversationNeedsRunningRepair as x, getDefaultCwd as xt, resolveConversationDeliveryMethod as y, validateOriginHeaders as yt, cleanupOrphanedConversationAttachments as z };
 
-//# sourceMappingURL=specialists-JVO00bs7.js.map
+//# sourceMappingURL=specialists-CC4r-c2s.js.map