@overdeck/desktop 0.45.23 → 0.46.0

package/server/assemble-DnffNpOo.js

@@ -0,0 +1,339 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { Qr as SYNC_SOURCES, ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
+import { join } from "path";
+//#region ../../lib/context-layers/layers.ts
+/**
+* Context layer model (PAN-1201).
+*
+* Three layers of context compose at sync time:
+*
+*   global    — ~/.overdeck/context/global.md  (+ global/{skills,agents}/)
+*               Applies to every harness invocation, everywhere.
+*   project   — <projectRoot>/.overdeck/context/project.md
+*               Applies when CWD is under a registered project. Committed.
+*   workspace — <workspace>/.overdeck/context/workspace.md
+*               Auto-assembled by Overdeck at spawn time. Gitignored.
+*
+* The global layer lives under ~/.overdeck (per-machine). Project and
+* Project and workspace context live outside the permanent state plane under
+* `.overdeck/`. Reads retain a `.pan/context/` compatibility fallback.
+*/
+/** `~/.overdeck/context` — the global layer directory. */
+function globalContextDir() {
+	return join(getOverdeckHome(), "context");
+}
+/** `~/.overdeck/context/global.md` — the global layer's canonical source. */
+function globalContextFile() {
+	return join(globalContextDir(), "global.md");
+}
+/** `<projectRoot>/.overdeck/context` — a registered project's layer directory. */
+function projectContextDir(projectRoot) {
+	return join(projectRoot, ".overdeck", "context");
+}
+/** `<projectRoot>/.overdeck/context/project.md` — a project's canonical source. */
+function projectContextFile(projectRoot) {
+	return join(projectContextDir(projectRoot), "project.md");
+}
+function legacyProjectContextFile(projectRoot) {
+	return join(projectRoot, ".pan", "context", "project.md");
+}
+function resolveProjectContextFile(projectRoot) {
+	const canonical = projectContextFile(projectRoot);
+	return existsSync(canonical) ? canonical : legacyProjectContextFile(projectRoot);
+}
+/** `<workspace>/.overdeck/context` — a workspace's layer directory. */
+function workspaceContextDir(workspacePath) {
+	return join(workspacePath, ".overdeck", "context");
+}
+/** `<workspace>/.pan/context/workspace.md` — the auto-assembled bundle. */
+function workspaceContextFile(workspacePath) {
+	return join(workspaceContextDir(workspacePath), "workspace.md");
+}
+function legacyWorkspaceContextFile(workspacePath) {
+	return join(workspacePath, ".pan", "context", "workspace.md");
+}
+function resolveWorkspaceContextFile(workspacePath) {
+	const canonical = workspaceContextFile(workspacePath);
+	return existsSync(canonical) ? canonical : legacyWorkspaceContextFile(workspacePath);
+}
+/** `~/.overdeck/context/pi-global.md` — the rendered global layer for Pi. */
+function piGlobalContextFile() {
+	return join(getOverdeckHome(), "context", "pi-global.md");
+}
+/** `~/.overdeck/context/codex-global.md` — the rendered global layer for Codex. */
+function codexGlobalContextFile() {
+	return join(getOverdeckHome(), "context", "codex-global.md");
+}
+/**
+* Ensure a project's layer dir exists with a stub `project.md`. Idempotent.
+* Returns true when a file was created. Called by `pan projects add`.
+*/
+function ensureProjectLayer(projectRoot) {
+	const file = projectContextFile(projectRoot);
+	if (existsSync(file)) return false;
+	mkdirSync(projectContextDir(projectRoot), { recursive: true });
+	writeFileSync(file, PROJECT_STARTER, "utf-8");
+	return true;
+}
+/** Read a layer's canonical markdown, or '' when the file does not exist. */
+function readLayerContent(file) {
+	return existsSync(file) ? readFileSync(file, "utf-8") : "";
+}
+var PROJECT_STARTER;
+var init_layers = __esmMin((() => {
+	init_paths();
+	PROJECT_STARTER = `# Project Context
+
+Context for this project specifically. \`pan sync\` renders it into the
+project's CLAUDE.md (and equivalents) when CWD is under this project.
+
+This file is committed to the repo; \`workspace.md\` is not.
+`;
+}));
+//#endregion
+//#region ../../lib/context-layers/harness.ts
+/**
+* Render a canonical layer body for a single harness.
+*
+* Strips every `{{#harness:*}}` / `{{/harness:*}}` marker and drops the spans
+* that are not covered by the target harness. Runs of 3+ blank lines left by
+* removed spans collapse to a single blank line so output stays tidy.
+*/
+function renderForHarness(content, harness) {
+	const target = HARNESS_MARKERS[harness];
+	const openCounts = /* @__PURE__ */ new Map();
+	let out = "";
+	let lastIndex = 0;
+	const emit = (text) => {
+		let covered = false;
+		let anyOpen = false;
+		for (const [name, count] of openCounts) if (count > 0) {
+			anyOpen = true;
+			if (name === target) covered = true;
+		}
+		if (!anyOpen || covered) out += text;
+	};
+	MARKER_RE.lastIndex = 0;
+	let m;
+	while ((m = MARKER_RE.exec(content)) !== null) {
+		emit(content.slice(lastIndex, m.index));
+		const [, kind, name] = m;
+		const delta = kind === "#" ? 1 : -1;
+		openCounts.set(name, (openCounts.get(name) ?? 0) + delta);
+		lastIndex = m.index + m[0].length;
+	}
+	emit(content.slice(lastIndex));
+	return out.replace(/\n{3,}/g, "\n\n");
+}
+/**
+* Lint a context-layer template for malformed harness blocks.
+*
+* Errors: an unclosed `{{#harness:x}}` or a stray `{{/harness:x}}` with no
+* matching open. Warnings: a marker naming a harness Overdeck has no
+* adapter for (allowed for forward compatibility, surfaced so typos —
+* `{{#harness:clade}}` — do not pass silently).
+*/
+function validateTemplate(content) {
+	const issues = [];
+	const openCounts = /* @__PURE__ */ new Map();
+	const seen = /* @__PURE__ */ new Set();
+	MARKER_RE.lastIndex = 0;
+	let m;
+	while ((m = MARKER_RE.exec(content)) !== null) {
+		const [, kind, name] = m;
+		seen.add(name);
+		if (kind === "#") openCounts.set(name, (openCounts.get(name) ?? 0) + 1);
+		else {
+			const next = (openCounts.get(name) ?? 0) - 1;
+			openCounts.set(name, next);
+			if (next < 0) issues.push({
+				severity: "error",
+				message: `stray closing marker {{/harness:${name}}} with no matching {{#harness:${name}}}`
+			});
+		}
+	}
+	for (const [name, count] of openCounts) if (count > 0) issues.push({
+		severity: "error",
+		message: `unclosed block: {{#harness:${name}}} opened ${count} time(s) without a matching {{/harness:${name}}}`
+	});
+	for (const name of seen) if (!KNOWN_HARNESS_MARKERS.has(name)) issues.push({
+		severity: "warning",
+		message: `unknown harness "${name}" — Overdeck ships adapters for: ${[...KNOWN_HARNESS_MARKERS].join(", ")}`
+	});
+	return {
+		ok: !issues.some((i) => i.severity === "error"),
+		issues
+	};
+}
+var HARNESS_MARKERS, KNOWN_HARNESS_MARKERS, MARKER_RE;
+var init_harness = __esmMin((() => {
+	HARNESS_MARKERS = {
+		"claude-code": "claude",
+		ohmypi: "ohmypi",
+		codex: "codex",
+		acp: "acp"
+	};
+	KNOWN_HARNESS_MARKERS = new Set([
+		"claude",
+		"pi",
+		"ohmypi",
+		"codex",
+		"acp"
+	]);
+	MARKER_RE = /\{\{([#/])harness:([a-zA-Z0-9_-]+)\}\}/g;
+}));
+//#endregion
+//#region ../../lib/context-layers/rules.ts
+/**
+* Bundled engineering rules (PAN-1201).
+*
+* Overdeck ships a small set of engineering rules under sync-sources/rules/.
+* Each rule carries a `scope:` frontmatter key:
+*
+*   universal — distributed everywhere (relevant to anyone running agents)
+*   dev       — distributed only on a overdeck checkout (rules about
+*               developing Overdeck itself)
+*
+* `pan sync` folds the applicable rules into the rendered global CLAUDE.md.
+* Their `paths:` frontmatter (Claude Code path-scoping) is dropped on fold —
+* a folded rule is always-on.
+*/
+/**
+* Parse a rule file into `{ scope, body }`. Rules with no frontmatter, or
+* frontmatter without a recognised `scope:`, default to `universal`.
+*/
+function parseRule(name, raw) {
+	const m = FRONTMATTER_RE.exec(raw);
+	let scope = "universal";
+	let body = raw;
+	if (m) {
+		body = raw.slice(m[0].length);
+		const value = m[1].split(/\r?\n/).find((l) => /^\s*scope\s*:/.test(l))?.split(":")[1]?.trim().replace(/['"]/g, "");
+		if (value === "dev" || value === "universal") scope = value;
+	}
+	return {
+		name,
+		scope,
+		body: body.trim()
+	};
+}
+/** Read every bundled rule from sync-sources/rules/, sorted by name. */
+function readBundledRules() {
+	const dir = SYNC_SOURCES.rules;
+	if (!existsSync(dir)) return [];
+	return readdirSync(dir).filter((f) => f.endsWith(".md")).sort().map((f) => parseRule(f.replace(/\.md$/, ""), readFileSync(join(dir, f), "utf-8")));
+}
+/**
+* Render the applicable bundled rules into one CLAUDE.md section.
+*
+* `includeDev` admits `scope: dev` rules — set it from `isDevMode()` so they
+* only fold in on a overdeck checkout. Each rule body is rendered for
+* the target harness so any `{{#harness:*}}` blocks resolve. Returns '' when
+* no rules apply.
+*/
+function renderBundledRules(harness, includeDev) {
+	const sections = readBundledRules().filter((r) => includeDev || r.scope === "universal").map((r) => renderForHarness(r.body, harness).trim()).filter((s) => s.length > 0);
+	if (sections.length === 0) return "";
+	return `## Overdeck Engineering Rules\n\n${sections.join("\n\n")}`;
+}
+var FRONTMATTER_RE;
+var init_rules = __esmMin((() => {
+	init_paths();
+	init_harness();
+	FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+}));
+//#endregion
+//#region ../../lib/context-layers/render.ts
+/** True when `existing` already contains a Overdeck-managed region. */
+function hasManagedRegion(existing) {
+	const beginIdx = existing.indexOf(REGION_BEGIN);
+	const endIdx = existing.indexOf(REGION_END);
+	return beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx;
+}
+/**
+* Return `existing` with the Overdeck-managed region removed — i.e. only the
+* hand-authored content the user owns, trimmed. When there is no region, the
+* whole (trimmed) file is the user's. Used to decide whether a target file has
+* pre-existing content worth preserving and backing up before first injection.
+*/
+function userContentOutsideRegion(existing) {
+	const beginIdx = existing.indexOf(REGION_BEGIN);
+	const endIdx = existing.lastIndexOf(REGION_END);
+	if (beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx) return (existing.slice(0, beginIdx) + existing.slice(endIdx + 29)).trim();
+	return existing.trim();
+}
+/**
+* Render the global layer for one harness: `global.md` rendered, with the
+* applicable bundled engineering rules folded in below it.
+*
+* The result is the *managed content* — caller wraps it via
+* {@link applyManagedRegion} when writing the harness's CLAUDE.md.
+*/
+function renderGlobalLayer(harness, includeDevRules) {
+	return [renderForHarness(readLayerContent(globalContextFile()), harness).trim(), renderBundledRules(harness, includeDevRules)].filter((s) => s.length > 0).join("\n\n---\n\n");
+}
+/**
+* Render a project layer for one harness. Returns '' when the project has no
+* `project.md` — sync then leaves that project's CLAUDE.md alone.
+*/
+function renderProjectLayer(projectRoot, harness) {
+	const raw = readLayerContent(resolveProjectContextFile(projectRoot));
+	if (raw.trim().length === 0) return "";
+	return renderForHarness(raw, harness).trim();
+}
+var REGION_BEGIN, REGION_END;
+var init_render = __esmMin((() => {
+	init_harness();
+	init_rules();
+	init_layers();
+	REGION_BEGIN = "<!-- BEGIN OVERDECK CONTEXT — managed by `pan sync`; edit the layer source, not this region -->";
+	REGION_END = "<!-- END OVERDECK CONTEXT -->";
+}));
+//#endregion
+//#region ../../lib/context-layers/assemble.ts
+function removeMarkedProjectLayer(content) {
+	const start = content.indexOf(PROJECT_LAYER_START);
+	if (start < 0) return null;
+	const markerEnd = content.indexOf("-->", start + 33);
+	if (markerEnd < 0) return null;
+	const marker = content.slice(start, markerEnd + 3);
+	const lengthMatch = /\schars=(\d+)\s-->$/.exec(marker);
+	if (!lengthMatch) return null;
+	const projectEnd = markerEnd + 4 + Number(lengthMatch[1]);
+	if (content[markerEnd + 3] !== "\n") return null;
+	if (content.slice(projectEnd, projectEnd + 1 + 35) !== `\n<!-- overdeck:project-layer:end -->`) return null;
+	const end = projectEnd + 1;
+	let before = content.slice(0, start);
+	let after = content.slice(end + 35);
+	if (before.endsWith(SECTION_SEPARATOR) && after.startsWith(SECTION_SEPARATOR)) before = before.slice(0, -7);
+	else if (before.endsWith(SECTION_SEPARATOR)) before = before.slice(0, -7);
+	else if (after.startsWith(SECTION_SEPARATOR)) after = after.slice(7);
+	return `${before}${after}`.trim();
+}
+/**
+* Remove the project layer embedded in a workspace bundle.
+*
+* New bundles carry reserved structural markers, so project Markdown can contain
+* horizontal rules without becoming ambiguous. Legacy bundles predate those
+* markers; their only safely identifiable workspace-owned section is the
+* generated header before the first top-level separator. Keeping that header is
+* preferable to forwarding an unknown amount of stale, harness-specific text.
+*/
+function workspaceContextWithoutProjectLayer(content) {
+	const marked = removeMarkedProjectLayer(content);
+	if (marked !== null) return marked;
+	const firstSeparator = content.indexOf(SECTION_SEPARATOR);
+	return (firstSeparator < 0 ? content : content.slice(0, firstSeparator)).trim();
+}
+var SECTION_SEPARATOR, PROJECT_LAYER_START, PROJECT_LAYER_END;
+var init_assemble = __esmMin((() => {
+	init_render();
+	SECTION_SEPARATOR = "\n\n---\n\n";
+	PROJECT_LAYER_START = "<!-- overdeck:project-layer:start";
+	PROJECT_LAYER_END = "<!-- overdeck:project-layer:end -->";
+}));
+//#endregion
+export { projectContextDir as A, ensureProjectLayer as C, legacyProjectContextFile as D, init_layers as E, workspaceContextDir as F, workspaceContextFile as I, readLayerContent as M, resolveProjectContextFile as N, legacyWorkspaceContextFile as O, resolveWorkspaceContextFile as P, codexGlobalContextFile as S, globalContextFile as T, KNOWN_HARNESS_MARKERS as _, REGION_BEGIN as a, validateTemplate as b, init_render as c, userContentOutsideRegion as d, init_rules as f, HARNESS_MARKERS as g, renderBundledRules as h, workspaceContextWithoutProjectLayer as i, projectContextFile as j, piGlobalContextFile as k, renderGlobalLayer as l, readBundledRules as m, PROJECT_LAYER_START as n, REGION_END as o, parseRule as p, init_assemble as r, hasManagedRegion as s, PROJECT_LAYER_END as t, renderProjectLayer as u, init_harness as v, globalContextDir as w, PROJECT_STARTER as x, renderForHarness as y };
+
+//# sourceMappingURL=assemble-DnffNpOo.js.map

package/server/{backlog-auto-trigger-GtG71X8H.js → backlog-auto-trigger-Dh-i9PQf.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-Cx3K0hHi.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-BGY8gjg-.js";
+import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-C5ULAXwO.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-B2WeCtGi.js";
 //#region ../../lib/backlog/backlog-auto-trigger.ts
 /**
 * PAN-2396: --no-resume is the operator's full-quiescence escape hatch —
@@ -37,4 +37,4 @@ __esmMin((() => {
 }))();
 export { triggerDebouncedIncrementalPass };
 
-//# sourceMappingURL=backlog-auto-trigger-GtG71X8H.js.map
+//# sourceMappingURL=backlog-auto-trigger-Dh-i9PQf.js.map

package/server/{behavior-B_-4EKF3.js → behavior-CfIg6pKp.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { t as init_src } from "./src-U7_kTPEE.js";
+import { t as init_src } from "./src-CRmCHlma.js";
 //#region ../../lib/runtimes/behavior.ts
 var init_behavior = __esmMin((() => {
 	init_src();
@@ -7,4 +7,4 @@ var init_behavior = __esmMin((() => {
 //#endregion
 export { init_behavior as t };
 
-//# sourceMappingURL=behavior-B_-4EKF3.js.map
+//# sourceMappingURL=behavior-CfIg6pKp.js.map

package/server/bridge-pool-patrol-CUFmjVDN.js

@@ -0,0 +1,136 @@
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { promises } from "fs";
+import { exec } from "child_process";
+import { promisify } from "util";
+//#region ../../lib/docker-bridge-pool.ts
+init_activity_logger();
+/** Lists every bridge network on the host, one name per line. */
+const LIST_BRIDGE_NETWORKS_COMMAND = `docker network ls --filter driver=bridge --format '{{.Name}}'`;
+const DOCKER_DAEMON_JSON_PATH = "/etc/docker/daemon.json";
+/** `overdeck-feature-pan-2997_devnet`, `myn-feature-min-852_default`, … */
+const FEATURE_NETWORK_RE = /^(.+?)-feature-[a-z0-9]+-\d+_(?:devnet|default)$/i;
+function parseBridgeNetworkNames(stdout) {
+	return stdout.split("\n").map((line) => line.trim()).filter(Boolean);
+}
+/**
+* Groups networks by the project prefix of their compose project name so the
+* message names which project is consuming the pool. Anything that is not a
+* workspace stack network (`bridge`, `overdeck`, a project's main stack) lands
+* in `other`.
+*/
+function groupBridgeNetworkNames(names) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const name of names) {
+		const match = name.match(FEATURE_NETWORK_RE);
+		const label = match ? `${match[1]}-feature-*` : "other";
+		counts.set(label, (counts.get(label) ?? 0) + 1);
+	}
+	return [...counts.entries()].map(([label, count]) => ({
+		label,
+		count
+	})).sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+}
+/**
+* Capacity declared by `default-address-pools`: each pool yields
+* `2^(size - baseMaskBits)` subnets. Returns null when the config is absent or
+* malformed so the caller falls back to the measured default limit rather than
+* trusting a number it could not derive.
+*/
+function bridgePoolLimitFromPools(pools) {
+	if (!Array.isArray(pools) || pools.length === 0) return null;
+	let capacity = 0;
+	for (const pool of pools) {
+		const entry = pool;
+		if (typeof entry?.base !== "string" || typeof entry?.size !== "number") return null;
+		const baseMask = Number(entry.base.split("/")[1]);
+		if (!Number.isInteger(baseMask) || baseMask < 0 || baseMask > 32) return null;
+		if (!Number.isInteger(entry.size) || entry.size < baseMask || entry.size > 32) return null;
+		capacity += 2 ** (entry.size - baseMask);
+	}
+	return capacity > 0 ? capacity : null;
+}
+/**
+* Reads `default-address-pools` from daemon.json. Returns null when the file is
+* missing, unreadable, or declares no pools — which is itself the signal that
+* the host is on Docker's narrow built-in pools.
+*/
+async function readDockerDaemonPools() {
+	try {
+		const text = await promises.readFile(DOCKER_DAEMON_JSON_PATH, "utf-8");
+		const pools = JSON.parse(text)["default-address-pools"];
+		return Array.isArray(pools) ? pools : null;
+	} catch {
+		return null;
+	}
+}
+function assessBridgePoolPressure(names, limit = 31) {
+	const total = names.length;
+	const effectiveLimit = Math.max(1, limit);
+	return {
+		total,
+		limit: effectiveLimit,
+		headroom: Math.max(0, effectiveLimit - total),
+		underPressure: total >= effectiveLimit - 5,
+		exhausted: total >= effectiveLimit,
+		groups: groupBridgeNetworkNames(names)
+	};
+}
+/** `myn-feature-* 13, overdeck-feature-* 6, other 5` — empty when nothing to show. */
+function formatBridgePoolBreakdown(groups) {
+	return groups.map((group) => `${group.label} ${group.count}`).join(", ");
+}
+//#endregion
+//#region ../../lib/cloister/bridge-pool-patrol.ts
+const execAsync = promisify(exec);
+/** Last reported level. Module-level so it survives across patrol cycles. */
+let lastLevel = "ok";
+function defaultDeps() {
+	return {
+		listBridgeNetworkNames: async () => {
+			const { stdout } = await execAsync(LIST_BRIDGE_NETWORKS_COMMAND, { timeout: 15e3 });
+			return parseBridgeNetworkNames(stdout);
+		},
+		readPools: readDockerDaemonPools,
+		emit: (level, message) => {
+			emitActivityEntrySync({
+				source: "cloister",
+				level,
+				message
+			});
+		}
+	};
+}
+async function patrolDockerBridgePool(deps = {}) {
+	const d = {
+		...defaultDeps(),
+		...deps
+	};
+	let names;
+	try {
+		names = await d.listBridgeNetworkNames();
+	} catch {
+		return [];
+	}
+	const pools = await d.readPools().catch(() => null);
+	const pressure = assessBridgePoolPressure(names, bridgePoolLimitFromPools(pools) ?? 31);
+	const level = pressure.exhausted ? "exhausted" : pressure.underPressure ? "warn" : "ok";
+	if (level === lastLevel) return [];
+	const previous = lastLevel;
+	lastLevel = level;
+	const breakdown = formatBridgePoolBreakdown(pressure.groups);
+	const detail = breakdown ? ` (${breakdown})` : "";
+	if (level === "ok") {
+		const action = `Docker bridge network pool recovered — ${pressure.total} of ~${pressure.limit} slots used, ${pressure.headroom} free${detail}`;
+		d.emit("info", `[deacon] ${action}`);
+		console.log(`[deacon] ${action}`);
+		return [action];
+	}
+	const action = level === "exhausted" ? `Docker bridge network pool EXHAUSTED — ${pressure.total} of ~${pressure.limit} slots used; workspace stacks cannot be rebuilt and queued agent feedback will not be delivered${detail}` : `Docker bridge network pool under pressure — ${pressure.total} of ~${pressure.limit} slots used, only ${pressure.headroom} left${detail}`;
+	d.emit(level === "exhausted" ? "error" : "warn", `[deacon] ${action}`);
+	console.warn(`[deacon] ${action} (was ${previous})`);
+	return [action];
+}
+//#endregion
+export { patrolDockerBridgePool };
+
+//# sourceMappingURL=bridge-pool-patrol-CUFmjVDN.js.map

package/server/{briefing-freshness-DWdW7vUm.js → briefing-freshness-DHmCSLar.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DvyMuOle.js";
+import { ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
 import { dirname, join } from "path";
 import { randomUUID } from "crypto";
 import { mkdir, readFile, rename, stat, writeFile } from "fs/promises";
@@ -128,4 +128,4 @@ var init_briefing_freshness = __esmMin((() => {
 //#endregion
 export { resolveSessionContextBriefingPath as a, recordBriefingSessionStart as i, ensureSessionContextBriefingFile as n, init_briefing_freshness as r, appendFreshBriefingUpdate as t };
 
-//# sourceMappingURL=briefing-freshness-DWdW7vUm.js.map
+//# sourceMappingURL=briefing-freshness-DHmCSLar.js.map

package/server/{build-info-DgTqZkL5.js → build-info-BP160gU7.js}

@@ -1,3 +1,3 @@
-import { n as init_build_info, t as getBuildInfo } from "./build-info-BT096lEl.js";
+import { n as init_build_info, t as getBuildInfo } from "./build-info-CuFfxZxp.js";
 init_build_info();
 export { getBuildInfo };

package/server/{build-info-BT096lEl.js → build-info-CuFfxZxp.js}

@@ -2,12 +2,14 @@ import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
 //#region ../../lib/deploy/build-info.ts
 function getBuildInfo() {
 	return {
-		buildCommit: "3824685a47cd1a723b2a2ef7e57d46abf82957ae",
-		builtAt: "2026-07-20T03:34:02.499Z"
+		buildCommit: "5d0b41f1bfcdabdec46ca1212b17f0d4b6edb14a",
+		builtAt: "2026-07-27T02:12:59.776Z",
+		buildDirty: false,
+		buildBranch: null
 	};
 }
 var init_build_info = __esmMin((() => {}));
 //#endregion
 export { init_build_info as n, getBuildInfo as t };
 
-//# sourceMappingURL=build-info-BT096lEl.js.map
+//# sourceMappingURL=build-info-CuFfxZxp.js.map

package/server/{checkpoint-manager-DDqcGyu8.js → checkpoint-manager-DEWD82qK.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Kt as STATE_BRANCH_PATHS, Yt as init_state_plane, mr as init_errors, pr as VcsError, sr as InvalidAgentIdError, tr as CheckpointError } from "./config-yaml-DvyMuOle.js";
+import { Fr as init_errors, Or as InvalidAgentIdError, Pr as VcsError, Sr as CheckpointError, fn as STATE_BRANCH_PATHS, hn as init_state_plane } from "./config-yaml-CmOPzmBb.js";
 import { Effect, Layer } from "effect";
 import { join } from "path";
 import { tmpdir } from "os";
@@ -663,4 +663,4 @@ var init_checkpoint_manager = __esmMin((() => {
 //#endregion
 export { pruneStaleCheckpointRefs as _, diffAgainstMain as a, diffCheckpoints as c, diffPatchSinceCommit as d, findCommitAtTime as f, pruneCheckpointRefsForAgents as g, listCheckpoints as h, deleteLegacyCheckpointRefs as i, diffFilesAgainstHead as l, init_checkpoint_manager as m, checkpointStateExclusions as n, diffAgainstMainFiles as o, getCheckpointTimestamp as p, deleteCheckpoint as r, diffCheckpointFiles as s, captureCheckpoint as t, diffPatchFilesAgainstHead as u };
 
-//# sourceMappingURL=checkpoint-manager-DDqcGyu8.js.map
+//# sourceMappingURL=checkpoint-manager-DEWD82qK.js.map

package/server/{checkpoint-manager-B7Bt29J0.js → checkpoint-manager-Dxh0FYsv.js}

@@ -1,3 +1,3 @@
-import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-DDqcGyu8.js";
+import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-DEWD82qK.js";
 init_checkpoint_manager();
 export { deleteLegacyCheckpointRefs, diffCheckpointFiles, getCheckpointTimestamp, listCheckpoints, pruneCheckpointRefsForAgents, pruneStaleCheckpointRefs };

package/server/checkpoint-worker.js

@@ -1,4 +1,4 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-C-AXLfYT.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CZvbtLnr.js";
 import { parentPort } from "node:worker_threads";
 //#region ../../lib/memory/checkpoint-worker.ts
 function runOperation(operation, payload) {

package/server/{checkpoints-C-AXLfYT.js → checkpoints-CZvbtLnr.js}

@@ -1,4 +1,4 @@
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-CzaSOgul.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BjuxvjdS.js";
 import { randomUUID } from "node:crypto";
 //#region ../../lib/overdeck/transcript-checkpoint-sync.ts
 /**
@@ -195,4 +195,4 @@ function getTranscriptCheckpoint(sessionId) {
 //#endregion
 export { releaseTranscriptRange as a, listTranscriptCheckpoints as i, commitTranscriptRange as n, getTranscriptCheckpoint as r, claimTranscriptRange as t };
 
-//# sourceMappingURL=checkpoints-C-AXLfYT.js.map
+//# sourceMappingURL=checkpoints-CZvbtLnr.js.map

package/server/{checkpoints-CpgCjAlN.js → checkpoints-DMTgXuLG.js}

@@ -1,2 +1,2 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-C-AXLfYT.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CZvbtLnr.js";
 export { claimTranscriptRange, commitTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints, releaseTranscriptRange };

package/server/{claude-hooks-provision-C8wdRnN1.js → claude-hooks-provision-CN-xo-do.js}

@@ -1,3 +1,3 @@
-import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-but-_qGY.js";
+import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-fvy4RD2b.js";
 init_claude_hooks_provision();
 export { provisionClaudeHooks };

package/server/{claude-hooks-provision-but-_qGY.js → claude-hooks-provision-fvy4RD2b.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Vr as init_paths, _r as BIN_DIR, jr as SYNC_SOURCES } from "./config-yaml-DvyMuOle.js";
+import { Qr as SYNC_SOURCES, Rr as BIN_DIR, ci as init_paths } from "./config-yaml-CmOPzmBb.js";
 import { join } from "node:path";
 import { copyFileSync, existsSync, mkdirSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "fs";
 import { basename as basename$1, dirname as dirname$1, join as join$1 } from "path";
@@ -104,6 +104,7 @@ var init_claude_hooks_registration = __esmMin((() => {
 		"pan-hook-lib.sh",
 		"pre-tool-hook",
 		"ask-user-question-hook",
+		"linear-mcp-auth-hook",
 		"auto-approve-hook",
 		"heartbeat-hook",
 		"stop-hook",
@@ -151,6 +152,16 @@ var init_claude_hooks_registration = __esmMin((() => {
 			hookType: "PostToolUse",
 			scriptName: "heartbeat-hook"
 		},
+		{
+			hookType: "PostToolUse",
+			scriptName: "linear-mcp-auth-hook",
+			matcher: "mcp__linear__.*"
+		},
+		{
+			hookType: "PostToolUseFailure",
+			scriptName: "linear-mcp-auth-hook",
+			matcher: "mcp__linear__.*"
+		},
 		{
 			hookType: "PostToolUse",
 			scriptName: "permission-event-hook"
@@ -375,4 +386,4 @@ var init_claude_hooks_provision = __esmMin((() => {
 //#endregion
 export { provisionClaudeHooks as n, init_claude_hooks_provision as t };
 
-//# sourceMappingURL=claude-hooks-provision-but-_qGY.js.map
+//# sourceMappingURL=claude-hooks-provision-fvy4RD2b.js.map

package/server/{claude-permissions-H_5wHQZQ.js → claude-permissions-CN0cSCPp.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { f as loadConfigSync, t as init_config_yaml } from "./config-yaml-DvyMuOle.js";
+import { f as loadConfigSync, t as init_config_yaml } from "./config-yaml-CmOPzmBb.js";
 import "effect";
 //#region ../../lib/claude-permissions.ts
 /** Read PAN_YOLO from the current process env. Returns the implied mode, or undefined if unset/unparseable. */
@@ -94,4 +94,4 @@ var init_claude_permissions = __esmMin((() => {
 //#endregion
 export { init_claude_permissions as a, getClaudePermissionFlagsSync as i, buildClaudeUserSettingsSync as n, resolvePermissionModeSync as o, getClaudePermissionFlagsStringSync as r, BYPASS_PERMISSION_MODE as t };
 
-//# sourceMappingURL=claude-permissions-H_5wHQZQ.js.map
+//# sourceMappingURL=claude-permissions-CN0cSCPp.js.map

package/server/{claude-settings-overlay-CbSz0Dvb.js → claude-settings-overlay-CJn35FHQ.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { ir as FsError, mr as init_errors } from "./config-yaml-DvyMuOle.js";
+import { Fr as init_errors, Tr as FsError } from "./config-yaml-CmOPzmBb.js";
 import { Effect, FileSystem } from "effect";
 import { join } from "path";
 import { homedir, tmpdir } from "os";
@@ -142,4 +142,4 @@ var init_claude_settings_overlay = __esmMin((() => {
 //#endregion
 export { init_claude_settings_overlay as n, injectOverdeckInfraDeny as r, detectProviderEnvConflicts as t };
 
-//# sourceMappingURL=claude-settings-overlay-CbSz0Dvb.js.map
+//# sourceMappingURL=claude-settings-overlay-CJn35FHQ.js.map