@overdeck/desktop 0.45.23 → 0.46.0

package/sync-sources/skills/pan-peer-review/SKILL.md

@@ -0,0 +1,195 @@
+---
+name: pan-peer-review
+description: "Workflow: spawn an independent adversarial reviewer on a different model to verify or refute your own findings. EXPENSIVE — invoke only when the operator explicitly asks for a peer/second-opinion review."
+triggers:
+  - peer review my findings
+  - get independent feedback
+  - second opinion from another model
+  - have another model review this
+  - adversarial review of my analysis
+allowed-tools:
+  - Bash
+  - Read
+  - Write
+---
+
+# pan peer-review — independent second opinion from another model
+
+Spawn a conversation on a **different model family** to adversarially verify or
+refute an analysis you produced, then read its findings back. Use it when a
+conclusion is expensive to get wrong: a root-cause diagnosis about to become a
+PRD, a refactor plan, a security claim, a "this is safe to merge" call.
+
+## ⚠️ Operator-invoked only — never launch this on your own initiative
+
+**Do not start a peer review because you think your work would benefit from
+one.** A peer review spawns a second full agent that reads source, burns a
+frontier-model context, and runs for many minutes. That cost is the operator's
+call, not yours.
+
+Launch only when the operator explicitly asks — "get a second opinion", "run
+this by another model", "have K3 review it", "peer review this". If you believe
+a review is warranted and they have not asked, say so in one sentence and let
+them decide.
+
+Corollary: never chain reviews. One reviewer, one pass. If the reviewer
+disagrees with you, bring the disagreement back to the operator rather than
+spawning a third model to break the tie.
+
+## Why a different model, and what "independent" buys you
+
+A reviewer on the same model as the author tends to agree — it reconstructs the
+same reasoning from the same priors. The value comes from a different family
+reading the same source: Opus/Fable reviewing GPT work, K3 reviewing Claude
+work, GPT reviewing Claude work.
+
+Pick the reviewer by contrast with whoever produced the analysis:
+
+| Author | Good reviewer |
+| --- | --- |
+| Claude (Opus/Fable/Sonnet) | `k3` (Kimi), `gpt-5.6-sol` |
+| GPT | `claude-opus-5`, `k3` |
+| Kimi | `claude-opus-5`, `gpt-5.6-sol` |
+
+Never pass `--harness`. Harness routing is config-owned and the operator sets it
+deliberately; `--model` is the only routing flag this workflow uses, and only
+because the operator asked for a specific reviewer.
+
+Leave reasoning effort alone. It inherits `high`, which is the right tier —
+never raise it to `xhigh`/`max` for a review.
+
+## The workflow
+
+### 1. Write the brief to a file — never into the focus
+
+The `pan handoff` focus is hard-capped at 500 characters. A real review brief is
+thousands. Write it to a file in the reviewer's future cwd and let the focus
+point at it.
+
+A brief that produces a useful review has these parts:
+
+- **Adversarial framing, stated first.** "Assume each claim may be wrong. A
+  claim that survives refutation is worth more than agreement. Do not soften
+  findings to be agreeable." Without this you get a politeness echo.
+- **Read-only rules.** No edits to source, no commits, no `pan` commands, no
+  POST/DELETE. The reviewer writes exactly one file: its findings.
+- **A glossary** of every term of art before you use it — the reviewer has none
+  of your conversation's context.
+- **Absolute paths for evidence outside the worktree** — live workspaces, logs,
+  config, API endpoints. The reviewer cannot find them otherwise.
+- **Each claim stated separately**, with the exact file:line it rests on, the
+  evidence you used, and the fix you propose.
+- **Per-claim questions that invite refutation** — "does the fix actually
+  terminate the loop?", "what is the blast radius?", "would this regress the
+  monorepo path?". Generic "please review" produces generic output.
+- **Cross-cutting questions**, including at least one that asks for things you
+  did *not* find: "search for every other site with this pattern and report any
+  beyond the ones named here."
+- **An explicit output contract** — a verdict vocabulary (CONFIRMED /
+  PARTIALLY CONFIRMED / REFUTED / CANNOT VERIFY), where to write findings, and
+  a request to also summarize in-conversation.
+
+### 2. Create a detached worktree
+
+The reviewer needs the source, isolated from your working tree. Spawned agents
+must never get the primary worktree as their cwd.
+
+```bash
+git worktree add --detach /home/eltmon/Projects/hoff-<slug> main
+```
+
+`--detach` is required: a plain `git worktree add <path> main` fails with
+`fatal: 'main' is already used by worktree at ...` whenever main is checked out
+somewhere, which on a dev machine is always. Detached HEAD is correct here —
+the reviewer never commits.
+
+Then write the brief into that worktree.
+
+### 3. Launch the handoff
+
+```bash
+pan handoff --model <reviewer-model> --cwd /home/eltmon/Projects/hoff-<slug> self \
+  "Read REVIEW-BRIEF.md in your cwd FIRST and follow it exactly. You are an INDEPENDENT ADVERSARIAL reviewer — verify or refute each claim against real source and critique each proposed fix. Read-only. Write findings to FEEDBACK-<model>.md."
+```
+
+`self` must come before the focus text. Omitting it makes the CLI read your
+focus as a conversation name and fail with `Conversation not found`.
+
+**The command can exceed a two-minute tool timeout while the handoff document is
+authored — that is normal and does not mean it failed.** Either run it with
+`run_in_background: true`, or let it time out and verify the spawn afterwards:
+
+```bash
+tmux -L overdeck list-sessions | grep conv-
+```
+
+### 4. Correct the frame — the step everyone skips
+
+`pan handoff` seeds the new conversation with an **authored handoff document
+describing your session's state and open work**. It does not deliver your focus
+as an instruction. The reviewer therefore wakes up believing it is *you,
+continuing your work* — and if your open-work list said "launch a peer review",
+it will try to launch one, recursively.
+
+Check what it actually received before assuming it is reviewing:
+
+```bash
+tmux -L overdeck capture-pane -t <conv-id> -p -S -30
+```
+
+If it is acting as a continuation rather than as a reviewer, correct it with
+`pan tell` (never raw tmux keystroke injection):
+
+```bash
+pan tell <conv-id> "STOP. You are NOT continuing that conversation's work. You ARE the independent reviewer it wanted to spawn. Read <brief path> and follow it exactly. Read-only. Begin now."
+```
+
+Budget for this step every time. Treat the handoff document as context the
+reviewer happens to have, and your `pan tell` as the actual task assignment.
+
+### 5. Wait on the artifact, not the pane
+
+Poll for the findings file rather than watching output scroll:
+
+```bash
+until [ -s /home/eltmon/Projects/hoff-<slug>/FEEDBACK-<model>.md ]; do sleep 20; done
+```
+
+Run that in the background so you can keep working.
+
+### 6. Read the findings critically, then report
+
+The reviewer is not an oracle. Treat REFUTED verdicts as claims to check, the
+same way you asked it to treat yours — a reviewer that misreads a call site can
+be confidently wrong. Verify anything that would change what you do next.
+
+Report back to the operator with: what the reviewer confirmed, what it refuted
+and whether you agree, what it found that you missed, and where you still
+disagree after checking. Never launder its output as consensus.
+
+### 7. Clean up
+
+```bash
+git worktree remove /home/eltmon/Projects/hoff-<slug>
+```
+
+Keep the findings file if it is going into an issue or PRD — copy it out before
+removing the worktree.
+
+## Failure modes and what they mean
+
+| Symptom | Cause | Fix |
+| --- | --- | --- |
+| `fatal: 'main' is already used by worktree at ...` | `git worktree add` without `--detach` | Add `--detach` |
+| `Conversation not found` | Focus text passed without `self` first | `pan handoff ... self "<focus>"` |
+| `Focus is N characters — the limit is 500`, no conversation created | Brief crammed into the focus | Put the brief in a file, point the focus at it |
+| Handoff command times out at 2 minutes | Handoff document authoring is slow | Normal — verify the spawn with `tmux -L overdeck list-sessions` |
+| Reviewer starts doing your open-work list, or tries to spawn its own review | It received the handoff doc, not your focus | `pan tell` it the real task (step 4) |
+| Reviewer agrees with everything | Brief lacked adversarial framing, or reviewer shares the author's model family | Rewrite the framing; pick a different family |
+| `state.json has no issueId` on `pan tell` | Informational — conversations have no issue | Ignore; the message still delivers |
+
+## Related
+
+- `/pan-handoff` — the underlying command and its full semantics
+- `/pan-code-review` — reviewing a *diff*; this skill reviews an *analysis*
+- `/pan-tell` — the sanctioned way to message a running conversation

package/sync-sources/skills/pan-reload/SKILL.md

@@ -11,17 +11,17 @@ Use this after code changes that should run in the local Overdeck dashboard.
 
 ```bash
 pan reload
-pan reload --force   # explicitly bypass the agent deploy-window gate
+pan reload --force   # explicit operator bypass of the deploy-window gate
 ```
 
-`pan reload` runs `bun install` and then `npm run build` first. If either fails, it leaves the current dashboard running and exits non-zero. If both succeed, it restarts the dashboard and waits for `http://127.0.0.1:3011/api/health`.
+`pan reload` fetches `origin/main`, creates a temporary detached worktree at that commit, and runs `bun install` followed by `npm run build` there — never in the primary working tree. If the primary tree has uncommitted changes or its `HEAD` differs from `origin/main`, the command notes that those changes are excluded and continues with the canonical build. If installation or build fails, it leaves the current dashboard running and exits non-zero; after a successful build, it keeps the detached worktree as the active deployment root and launches its `dist/dashboard/server.js` with its canonical runtime dependencies and workspace packages intact, leaves the primary checkout's `node_modules/` untouched, refreshes the primary `dist/` CLI mirror with a dependency link back to that deployment root, then restarts the dashboard and waits for `http://127.0.0.1:3011/api/health`. Deployments alternate between two fixed generation worktrees. A failure before the new process is left running restores the prior marker and primary `dist/` and removes the failed generation. A health timeout keeps the new deployment active because the dashboard is deliberately left running so a slow boot can finish or a failed boot can be inspected. Retries still reuse one of the two fixed slots, so failures cannot accumulate unbounded dependency trees.
 
 `npm run build` already rebuilds the dashboard **server** bundle (via `build-post-cli.mjs` → `build:dashboard:server:bundle`), so `pan reload` picks up server/deacon code changes — you do **not** need a separate `npm run build:dashboard:server`. The `bun install` step runs first so a merge/rebase that added a runtime dependency (e.g. `chokidar`) can't produce a freshly-built server that boot-crashes with `ERR_MODULE_NOT_FOUND`.
 
 ## Options
 
 - `--skip-build` — restart the current bundle without running `bun install` or `npm run build`.
-- `--force` — bypass the deploy-window gate for an agent-issued reload. Without it, active verification, merge, post-merge, flywheel, restart, or `pan dev` ownership refuses the reload because it would disconnect live conversations and terminals.
+- `--force` — explicitly bypass the deploy-window gate. Without it, a refused agent-issued reload queues the deploy, reports its age and distinct verification blockers, and self-fires at the next safe verification boundary. Do not retry-loop or use `--force` to interrupt healthy verification; reserve the bypass for exceptional operator recovery.
 - `--health-timeout <ms>` — set the dashboard health-check budget. The default is `30000`.
 - `--no-deacon` — restart without Cloister/Deacon auto-start.
 

package/sync-sources/skills/pan-restart/SKILL.md

@@ -34,7 +34,7 @@ pan restart --traefik
 pan restart --full       # nuclear — stops & restarts everything
 
 # Explicit force cases
-pan restart --force              # bypass the agent deploy-window gate
+pan restart --force              # explicit operator bypass of the deploy-window gate
 pan restart --cliproxy --force   # redownload the pinned CLIProxy binary
 ```
 
@@ -61,9 +61,10 @@ server is a failure, not a successful restart.
 - `pan restart --dashboard` NEVER touches CLIProxy, Traefik, or TLDR — that
   scope contract is enforced by tests.
 - Agent-issued dashboard and full restarts consult the deploy-window gate before
-  acquiring the restart lock. Active verification, merge, post-merge, flywheel,
-  restart, or `pan dev` ownership refuses the restart because it would disconnect
-  live conversations and terminals; `--force` explicitly bypasses this gate.
+  acquiring the restart lock. A refusal queues the deploy, reports its age and
+  distinct verification blockers, and self-fires at the next safe verification
+  boundary. Do not retry in a loop or use `--force` to interrupt healthy verification;
+  `--force` remains the explicit operator bypass for exceptional recovery.
 - For `--cliproxy`, `--force` has a separate meaning: it redownloads the binary at
   the pinned version before restarting it.
 - If the dashboard restart fails, shared sidecars are left running so recovery

package/sync-sources/skills/pan-review/SKILL.md

@@ -1,12 +1,13 @@
 ---
 name: pan-review
-description: "pan review <subcommand> — manage the code review lifecycle: list pending work, set quick/full mode, re-request review, reset/abort/restart review cycles"
+description: "pan review <subcommand> — manage the code review lifecycle: list pending work, re-request review, heal status drift, reset/abort/restart review cycles"
 triggers:
   - pan review
   - review pending
   - request review
   - review mode
   - reset review
+  - resync review
   - restart review
   - abort review
   - code review lifecycle
@@ -30,6 +31,7 @@ pan review pending --blocked                       # List blocked review/test/me
 pan review request <id>                            # Re-request review after fixing feedback
 pan review mode <id> <quick|full>                  # Set this issue's review mode override
 pan review reset <id> [--session]                  # Reset review/test/merge cycles (human override)
+pan review resync <id>                             # Re-emit canonical status to heal dashboard drift
 pan review abort <id>                              # Kill all running reviewers, leave worker idle
 pan review restart <id> [--model <m>] [--role <r>] # Kill reviewers and dispatch a fresh review pipeline
 ```
@@ -54,6 +56,9 @@ pan review restart <id> [--model <m>] [--role <r>] # Kill reviewers and dispatch
   pipeline can be re-dispatched from scratch. Use when the saved state is
   inconsistent or corrupt. `--session` additionally clears the saved Claude
   session for each reviewer so they restart with a clean conversation.
+- **`resync <id>`** — Reads the canonical review status and re-emits it without
+  changing any verdict. Use when an issue passed review but is missing from
+  Awaiting Merge or its actions are wrongly gated by stale dashboard state.
 - **`abort <id>`** — Kills any currently running reviewer sessions but
   leaves the work agent alone. Use when reviewers are stuck or running
   against the wrong commit and you want to halt without resetting state.
@@ -77,6 +82,7 @@ pan review restart <id> [--model <m>] [--role <r>] # Kill reviewers and dispatch
 | This issue needs the full review convoy | `pan review mode <id> full` |
 | Return an issue to default quick review | `pan review mode <id> quick` |
 | Pipeline state is inconsistent, need a clean slate | `pan review reset <id>` |
+| Issue passed but is missing from Awaiting Merge or actions are wrongly gated | `pan review resync <id>` |
 | Same as above plus reviewer Claude sessions are bad | `pan review reset <id> --session` |
 | Reviewer is hung, just kill it | `pan review abort <id>` |
 | Reviewer crashed, want a fresh convoy with a different model | `pan review restart <id> --model gpt-5.4` |

package/sync-sources/skills/pan-start/SKILL.md

@@ -31,6 +31,7 @@ pan start PAN-123 --fresh  # Drop the saved session and start a new one (e.g. sw
 pan start PAN-123 --harness codex  # Explicitly use the Codex harness
 pan start PAN-123 --model gpt-5.6-sol --swarm off --review-mode full
 pan start PAN-123 --review-model gpt-5.6-sol  # Pin the convoy review model
+pan start PAN-123 --plan-model k3 --model k3  # Auto-plan AND work on Kimi k3
 pan start PAN-123 --remote --tier durable  # Remote Fly.io workspace with persistent volume
 pan start PAN-123 --remote --tier ephemeral  # Remote Fly.io workspace that winds down on stale heartbeat
 ```
@@ -63,6 +64,9 @@ Start-time policy flags are persisted on the issue before planning or work begin
 sets the durable work-model override used by later respawns, `--swarm` accepts `off`, `auto`,
 or `always`, `--review-mode` accepts `quick`, `full`, or `none`, and `--review-model` pins the
 model used by the review convoy. Omitted flags leave existing and inherited policy untouched.
+When this start also kicks off planning (no plan exists yet), `--plan-model <model>` overrides
+the planning agent's model for that session only — it is a one-shot override, not persisted
+policy, and it never changes the work agent's model (`--model`).
 
 If an agent is paused, `pan start <id>` refuses to spawn until you run `pan unpause <id>`.
 Use `--force` only when you intentionally want to clear that pause gate and start anyway.

package/sync-sources/skills/pan-sync-main/SKILL.md

@@ -30,12 +30,12 @@ curl -X POST http://localhost:3011/api/issues/PAN-XXX/sync-main
 ## What It Does
 
 1. Checks for uncommitted changes (blocks if any — must commit, explicitly discard, or surface to the operator first; agents never `git stash`)
-2. Cleans up any stale git locks
-3. Runs `git fetch origin main`
-4. Runs `git merge origin/main`
-5. If clean merge: reports commit count and changed files
-6. If conflicts: wakes the merge-agent specialist to resolve them
-7. After conflict resolution: scans for leftover markers, then reports result
+2. Resolves the workspace's required git repos; monorepos produce one repo root
+3. Cleans up stale git locks in each repo
+4. Fetches and merges each repo's configured target branch sequentially in config order
+5. Stops at the first failed or conflicted repo and marks later repos skipped
+6. If clean: reports aggregate commit/file totals plus one result per repo
+7. If conflicts remain: aborts that repo's merge and reports its conflict files
 
 ## Outcomes
 
@@ -44,14 +44,15 @@ curl -X POST http://localhost:3011/api/issues/PAN-XXX/sync-main
 | Already up to date | Main has no new commits since last sync |
 | Success (N commits) | Clean merge or agent-resolved conflicts |
 | Uncommitted changes | Commit or discard workspace changes first |
-| Conflict (unresolvable) | Agent could not resolve — merge aborted, workspace unchanged |
+| Conflict (unresolvable) | The failing repo's merge is aborted and its conflict files are reported |
+| Per-repo / skipped | Polyrepo output shows each repo's result; repos after the first failure are skipped |
 
 ## Design Decisions
 
 - **Merge, not rebase** — Rebase rewrites SHAs and requires force-push. Merge commits serve as audit markers.
 - **No tests/builds** — Feature branch is WIP. Running tests after sync would fail on pre-existing issues.
 - **No push to remote** — This is a local workspace operation only.
-- **All-or-nothing for polyrepo** — If any repo fails, all are aborted (not implemented yet; sync is per-workspace).
+- **Sequential polyrepo sync** — Required repos sync in config order. The first failure stops iteration; earlier merges remain, later repos are skipped, and output reports every repo's result.
 
 ## Examples
 

package/sync-sources/skills/pipeline-status/SKILL.md

@@ -86,7 +86,11 @@ don't appear via `/api/issues` filtering.
 ### 1. Generate the table
 
 Run this script. It gets the row universe from `GET /api/pipeline/membership`,
-then joins issue titles, review status, tmux, and agent state as annotations.
+then joins issue titles, review status, tmux, and agent state as annotations. A
+bare array is a successful answer. An HTTP 200 object with
+`status: "unavailable"` is a typed blind spot; show its `projectKey`, `reason`,
+and `message`, then stop instead of deriving membership from another source.
+HTTP 503 means the first snapshot is still loading and may be retried later.
 
 ```bash
 python3 - <<'PY'
@@ -100,6 +104,11 @@ issues_data = json.loads(subprocess.check_output(['curl','-s','http://localhost:
 membership = json.loads(subprocess.check_output([
     'curl','-s','http://localhost:3011/api/pipeline/membership?project=overdeck'
 ]))
+if isinstance(membership, dict) and membership.get('status') == 'unavailable':
+    raise SystemExit(
+        'PIPELINE MEMBERSHIP UNAVAILABLE: '
+        f"{membership.get('projectKey')} — {membership.get('reason')}: {membership.get('message')}"
+    )
 issues_by_id = {(i.get('identifier') or '').upper(): i for i in issues_data}
 panissues = []
 for member in membership:

package/sync-sources/skills/workspace-add-repo/SKILL.md

@@ -14,6 +14,7 @@ Run from the workspace root:
 ```bash
 pan workspace add-repo <workspace-id> <repo-name> [repo-name...]
 pan workspace add-repo <workspace-id> --group <group-name>
+pan workspace add-repo <workspace-id> --new <git-url>
 ```
 
 Examples:
@@ -25,8 +26,11 @@ pan workspace add-repo int-123 int-provider-a int-canonical-to-hs
 # Add a named group
 pan workspace add-repo int-123 --group simphony
 
-# Add all repos
+# Add all configured repos
 pan workspace add-repo int-123 --group all
+
+# Register a repo created as part of this issue
+pan workspace add-repo int-123 --new git@github.com:acme/new-service.git
 ```
 
 ## How to decide which repos you need
@@ -40,7 +44,18 @@ pan workspace add-repo int-123 --group all
 The new repos appear as subdirectories in the workspace with feature branches ready.
 Run git commands inside each repo subdirectory.
 
+## New deliverable repositories
+
+Run `--new <git-url>` before cloning or committing in a repository created during the issue. Overdeck clones the project-level source repo, creates the issue feature worktree, and registers it so review, inspection, and merge include it.
+
+If the repo name inferred from the URL is not suitable, pass the workspace directory name before `--new`:
+
+```bash
+pan workspace add-repo int-123 service --new git@github.com:acme/new-service.git
+```
+
 ## Notes
 
+- An unknown repo name without `--new` fails instead of silently reporting success
 - Meta repos (symlinked) are readonly — do NOT commit changes to them
 - Use `--dry-run` first to see what would be added without making changes

package/sync-sources/templates/traefik/dynamic/overdeck.yml.template

@@ -30,6 +30,16 @@ http:
       service: overdeck-api
       tls: {}
 
+    # Origin-isolated OpenKnowledge viewers. The dashboard server derives the
+    # project from the hex-encoded host label and proxies every root-relative
+    # HTTP/WebSocket path to that project's viewer process.
+    overdeck-knowledge-viewer:
+      rule: "HostRegexp(`^knowledge-[a-f0-9]+\\.{{TRAEFIK_DOMAIN}}$`)"
+      entryPoints:
+        - websecure
+      service: overdeck-api
+      tls: {}
+
     # Published HTML artifacts
     overdeck-artifacts:
       rule: "Host(`artifacts.{{TRAEFIK_DOMAIN}}`) && PathPrefix(`/a/`)"

package/server/activity-logger-OEUBdfZ8.js

@@ -1,3 +0,0 @@
-import { a as init_activity_logger, n as emitActivityEntrySync, r as emitActivityTtsSync } from "./activity-logger-DDlOIAML.js";
-init_activity_logger();
-export { emitActivityEntrySync, emitActivityTtsSync };

package/server/agent-state-Bg0lhqwj.js

@@ -1,3 +0,0 @@
-import { Fn as clearAgentPausedSync, Gn as init_agent_state, Ln as clearAgentTroubledSync, Wn as getAgentStateSync, or as setAgentPausedSync } from "./queries-6d7Cdtm7.js";
-init_agent_state();
-export { clearAgentPausedSync, clearAgentTroubledSync, getAgentStateSync, setAgentPausedSync };

package/server/agents-FlIgQ3ql.js

@@ -1,3 +0,0 @@
-import { $ as appendActivity, $n as recordAgentFailure, $t as OHMYPI_AGENT_READY_TIMEOUT_SECONDS, An as writeChannelsBridgeMcpConfig, At as deliverAgentPermissionDecision, B as detectCrashedAgents, Bn as getAgentDir, Bt as assertWorkspaceStackHealthyForSpawn, C as replayCrashedStandingAgent, Cr as getAgentRuntimeStateSync, Dn as decideChannelsForWorkAgent, En as buildDefaultResumeContinueMessage, Fn as clearAgentPausedSync, G as resumeAgent, Gt as transitionIssueToInProgress, H as restartAgent, Hn as getAgentState, In as clearAgentTroubled, Jn as isRole, Kn as isAgentPaused, Kt as transitionIssueToInReview, Ln as clearAgentTroubledSync, Mn as SESSION_EXITED_BEFORE_KICKOFF, Mt as deliverResumeMessageWithTranscriptConfirmation, Nn as __testInternals, Nt as setAgentDeliveryMethod, On as decideSupervisorForWorkAgent, Pn as clearAgentPaused, Qn as markAgentTroubled, Rn as clearYieldForResumeSync, S as contextWindowForModel, Sr as getAgentRuntimeState, T as shouldReplayCompactAtTierRunBoundary, Tr as saveAgentRuntimeState, U as buildCompactRecoverySeed, Un as getAgentStateFilePath, V as recoverAgent, Vt as buildAgentLaunchConfig, Wn as getAgentStateSync, Wt as retrieveSpawnTimeMemoryContext, X as messageAgent, Xn as markAgentRunningState, Zn as markAgentStoppedState, _n as buildSpawnEnvForModel, _r as isQualifiedAgentId, a as listRunningAgentsSync, an as getRoleRuntimeBaseCommand, ar as setAgentPaused, at as saveSessionId, b as init_agents, bn as getProviderExportsForModel, br as waitForAgentIdle, cn as roleAgentDefinitionPath, cr as wipeAgentStateDirs, en as describeOhmypiSpawnFailure, er as recordAgentFailureSync, et as getActivity, ft as stopAgent, gn as buildCavemanExports, gr as clearReadySignal, i as listRunningAgents, in as getProviderAuthMode, ir as saveAgentStateSync, jn as GOVERNOR_SLOT_PAUSE_REASON_PREFIX, jt as deliverInitialPromptWithRetry, kn as dismissDevChannelsDialog, kt as deliverAgentMessage, ln as waitForPromptReady, lr as writeAgentStateJsonSync, lt as spawnAgent, nr as resetAgentFailureCount, nt as getLatestSessionIdSync, o as warnOnBareNumericIssueIds, or as setAgentPausedSync, pt as stopAgentSync, qn as isAgentTroubled, r as listAgentStates, rr as saveAgentState, rt as getSessionId, sn as injectPiConversationMemory, sr as setAgentYieldedSync, t as dropLegacyAgentStatesMissingRoleAsync, tn as getAgentRuntimeBaseCommand, tt as getLatestSessionId, ut as spawnRun, vn as determineModel, vr as normalizeAgentId, w as replayStandingAgent, x as compactAtTierRunBoundary, xn as getProviderTmuxFlags, xr as waitForReadySignal, yn as getProviderEnvForModel, yr as resolveAgentTargetSync, z as autoRecoverAgents } from "./queries-6d7Cdtm7.js";
-init_agents();
-export { GOVERNOR_SLOT_PAUSE_REASON_PREFIX, OHMYPI_AGENT_READY_TIMEOUT_SECONDS, SESSION_EXITED_BEFORE_KICKOFF, __testInternals, appendActivity, assertWorkspaceStackHealthyForSpawn, autoRecoverAgents, buildAgentLaunchConfig, buildCavemanExports, buildCompactRecoverySeed, buildDefaultResumeContinueMessage, buildSpawnEnvForModel, clearAgentPaused, clearAgentPausedSync, clearAgentTroubled, clearAgentTroubledSync, clearReadySignal, clearYieldForResumeSync, compactAtTierRunBoundary, contextWindowForModel, decideChannelsForWorkAgent, decideSupervisorForWorkAgent, deliverAgentMessage, deliverAgentPermissionDecision, deliverInitialPromptWithRetry, deliverResumeMessageWithTranscriptConfirmation, describeOhmypiSpawnFailure, detectCrashedAgents, determineModel, dismissDevChannelsDialog, dropLegacyAgentStatesMissingRoleAsync, getActivity, getAgentDir, getAgentRuntimeBaseCommand, getAgentRuntimeState, getAgentRuntimeStateSync, getAgentState, getAgentStateFilePath, getAgentStateSync, getLatestSessionId, getLatestSessionIdSync, getProviderAuthMode, getProviderEnvForModel, getProviderExportsForModel, getProviderTmuxFlags, getRoleRuntimeBaseCommand, getSessionId, injectPiConversationMemory, isAgentPaused, isAgentTroubled, isQualifiedAgentId, isRole, listAgentStates, listRunningAgents, listRunningAgentsSync, markAgentRunningState, markAgentStoppedState, markAgentTroubled, messageAgent, normalizeAgentId, recordAgentFailure, recordAgentFailureSync, recoverAgent, replayCrashedStandingAgent, replayStandingAgent, resetAgentFailureCount, resolveAgentTargetSync, restartAgent, resumeAgent, retrieveSpawnTimeMemoryContext, roleAgentDefinitionPath, saveAgentRuntimeState, saveAgentState, saveAgentStateSync, saveSessionId, setAgentDeliveryMethod, setAgentPaused, setAgentPausedSync, setAgentYieldedSync, shouldReplayCompactAtTierRunBoundary, spawnAgent, spawnRun, stopAgent, stopAgentSync, transitionIssueToInProgress, transitionIssueToInReview, waitForAgentIdle, waitForPromptReady, waitForReadySignal, warnOnBareNumericIssueIds, wipeAgentStateDirs, writeAgentStateJsonSync, writeChannelsBridgeMcpConfig };

package/server/archive-planning-zkJb3BeM.js

@@ -1,3 +0,0 @@
-import { i as findWorkspacePath, o as init_archive_planning } from "./archive-planning-DYrYojxl.js";
-init_archive_planning();
-export { findWorkspacePath };

package/server/cli-BsVIHwzC.js

@@ -1,3 +0,0 @@
-import { r as init_cli, t as createResetMarker } from "./cli-vBeXbPrq.js";
-init_cli();
-export { createResetMarker };

package/server/context-layers-B3Nt58jl.js

@@ -1,4 +0,0 @@
-import { l as piGlobalContextFile, n as codexGlobalContextFile } from "./layers-DzxSTGNA.js";
-import { t as init_context_layers } from "./context-layers-ZYFcWiyc.js";
-init_context_layers();
-export { codexGlobalContextFile, piGlobalContextFile };

package/server/context-layers-ZYFcWiyc.js

@@ -1,165 +0,0 @@
-import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Vr as init_paths, mr as init_errors } from "./config-yaml-DvyMuOle.js";
-import { o as init_layers } from "./layers-DzxSTGNA.js";
-import "effect";
-import "fs";
-import "path";
-import "os";
-//#region ../../lib/context-layers/harness.ts
-/**
-* Render a canonical layer body for a single harness.
-*
-* Strips every `{{#harness:*}}` / `{{/harness:*}}` marker and drops the spans
-* that are not covered by the target harness. Runs of 3+ blank lines left by
-* removed spans collapse to a single blank line so output stays tidy.
-*/
-function renderForHarness(content, harness) {
-	const target = HARNESS_MARKERS[harness];
-	const openCounts = /* @__PURE__ */ new Map();
-	let out = "";
-	let lastIndex = 0;
-	const emit = (text) => {
-		let covered = false;
-		let anyOpen = false;
-		for (const [name, count] of openCounts) if (count > 0) {
-			anyOpen = true;
-			if (name === target) covered = true;
-		}
-		if (!anyOpen || covered) out += text;
-	};
-	MARKER_RE.lastIndex = 0;
-	let m;
-	while ((m = MARKER_RE.exec(content)) !== null) {
-		emit(content.slice(lastIndex, m.index));
-		const [, kind, name] = m;
-		const delta = kind === "#" ? 1 : -1;
-		openCounts.set(name, (openCounts.get(name) ?? 0) + delta);
-		lastIndex = m.index + m[0].length;
-	}
-	emit(content.slice(lastIndex));
-	return out.replace(/\n{3,}/g, "\n\n");
-}
-/**
-* Lint a context-layer template for malformed harness blocks.
-*
-* Errors: an unclosed `{{#harness:x}}` or a stray `{{/harness:x}}` with no
-* matching open. Warnings: a marker naming a harness Overdeck has no
-* adapter for (allowed for forward compatibility, surfaced so typos —
-* `{{#harness:clade}}` — do not pass silently).
-*/
-function validateTemplate(content) {
-	const issues = [];
-	const openCounts = /* @__PURE__ */ new Map();
-	const seen = /* @__PURE__ */ new Set();
-	MARKER_RE.lastIndex = 0;
-	let m;
-	while ((m = MARKER_RE.exec(content)) !== null) {
-		const [, kind, name] = m;
-		seen.add(name);
-		if (kind === "#") openCounts.set(name, (openCounts.get(name) ?? 0) + 1);
-		else {
-			const next = (openCounts.get(name) ?? 0) - 1;
-			openCounts.set(name, next);
-			if (next < 0) issues.push({
-				severity: "error",
-				message: `stray closing marker {{/harness:${name}}} with no matching {{#harness:${name}}}`
-			});
-		}
-	}
-	for (const [name, count] of openCounts) if (count > 0) issues.push({
-		severity: "error",
-		message: `unclosed block: {{#harness:${name}}} opened ${count} time(s) without a matching {{/harness:${name}}}`
-	});
-	for (const name of seen) if (!KNOWN_HARNESS_MARKERS.has(name)) issues.push({
-		severity: "warning",
-		message: `unknown harness "${name}" — Overdeck ships adapters for: ${[...KNOWN_HARNESS_MARKERS].join(", ")}`
-	});
-	return {
-		ok: !issues.some((i) => i.severity === "error"),
-		issues
-	};
-}
-var HARNESS_MARKERS, KNOWN_HARNESS_MARKERS, MARKER_RE;
-var init_harness = __esmMin((() => {
-	HARNESS_MARKERS = {
-		"claude-code": "claude",
-		ohmypi: "ohmypi",
-		codex: "codex"
-	};
-	KNOWN_HARNESS_MARKERS = new Set([
-		"claude",
-		"pi",
-		"ohmypi",
-		"codex"
-	]);
-	MARKER_RE = /\{\{([#/])harness:([a-zA-Z0-9_-]+)\}\}/g;
-}));
-//#endregion
-//#region ../../lib/context-layers/rules.ts
-var init_rules = __esmMin((() => {
-	init_paths();
-}));
-//#endregion
-//#region ../../lib/context-layers/render.ts
-/** True when `existing` already contains a Overdeck-managed region. */
-function hasManagedRegion(existing) {
-	const beginIdx = existing.indexOf(REGION_BEGIN);
-	const endIdx = existing.indexOf(REGION_END);
-	return beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx;
-}
-/**
-* Return `existing` with the Overdeck-managed region removed — i.e. only the
-* hand-authored content the user owns, trimmed. When there is no region, the
-* whole (trimmed) file is the user's. Used to decide whether a target file has
-* pre-existing content worth preserving and backing up before first injection.
-*/
-function userContentOutsideRegion(existing) {
-	const beginIdx = existing.indexOf(REGION_BEGIN);
-	const endIdx = existing.lastIndexOf(REGION_END);
-	if (beginIdx !== -1 && endIdx !== -1 && endIdx > beginIdx) return (existing.slice(0, beginIdx) + existing.slice(endIdx + 29)).trim();
-	return existing.trim();
-}
-var REGION_BEGIN, REGION_END;
-var init_render = __esmMin((() => {
-	init_rules();
-	init_layers();
-	REGION_BEGIN = "<!-- BEGIN OVERDECK CONTEXT — managed by `pan sync`; edit the layer source, not this region -->";
-	REGION_END = "<!-- END OVERDECK CONTEXT -->";
-}));
-//#endregion
-//#region ../../lib/context-layers/assemble.ts
-var init_assemble = __esmMin((() => {
-	init_render();
-}));
-//#endregion
-//#region ../../lib/backup.ts
-var init_backup = __esmMin((() => {
-	init_paths();
-	init_errors();
-}));
-//#endregion
-//#region ../../lib/context-layers/legacy-beads-cleanup.ts
-var init_legacy_beads_cleanup = __esmMin((() => {
-	init_backup();
-	init_render();
-}));
-//#endregion
-//#region ../../lib/context-layers/migrate.ts
-var init_migrate = __esmMin((() => {
-	init_layers();
-}));
-//#endregion
-//#region ../../lib/context-layers/index.ts
-var init_context_layers = __esmMin((() => {
-	init_harness();
-	init_layers();
-	init_rules();
-	init_render();
-	init_assemble();
-	init_legacy_beads_cleanup();
-	init_migrate();
-}));
-//#endregion
-export { init_render as a, KNOWN_HARNESS_MARKERS as c, validateTemplate as d, hasManagedRegion as i, init_harness as l, REGION_BEGIN as n, userContentOutsideRegion as o, REGION_END as r, HARNESS_MARKERS as s, init_context_layers as t, renderForHarness as u };
-
-//# sourceMappingURL=context-layers-ZYFcWiyc.js.map

package/server/conversation-service-Up7FEzIC.js

@@ -1,3 +0,0 @@
-import { i as computeContextUsage, t as init_conversation_service } from "./conversation-service-Du-MTNpJ.js";
-init_conversation_service();
-export { computeContextUsage };

package/server/deacon-DYSEJb48.js

@@ -1,4 +0,0 @@
-import "./config-yaml-DvyMuOle.js";
-import { E as handleAgentStoppedForOrphanReviewerSessions, T as handleAgentStoppedEvent, mt as handleWorkCompleted, pt as handleReviewCoordinatorDied, w as handleAgentHeartbeatDeadEvent } from "./deacon-pRnyD5w9.js";
-import "./deacon-swarm-DftYRDo8.js";
-export { handleAgentHeartbeatDeadEvent, handleAgentStoppedEvent, handleAgentStoppedForOrphanReviewerSessions, handleReviewCoordinatorDied, handleWorkCompleted };

package/server/deacon-swarm-9jRLS5Ke.js

@@ -1,2 +0,0 @@
-import { r as coordinateSwarmSlots } from "./deacon-swarm-DftYRDo8.js";
-export { coordinateSwarmSlots };

package/server/deploy-window-CM6W1-c6.js

@@ -1,3 +0,0 @@
-import { n as init_deploy_window, t as getDeployBlockReason } from "./deploy-window-DeP_OIRk.js";
-init_deploy_window();
-export { getDeployBlockReason };