@overdeck/desktop 0.45.24 → 0.46.0

package/drizzle/overdeck/0000_overdeck_init.sql

@@ -422,6 +422,8 @@ CREATE TABLE `uat_generation_resolutions` (
 	`issue_ids` text NOT NULL,
 	`files` text NOT NULL,
 	`commit_sha` text NOT NULL,
+	`kind` text,
+	`note` text,
 	FOREIGN KEY (`uat_name`) REFERENCES `uat_generations`(`name`) ON UPDATE no action ON DELETE no action
 );
 --> statement-breakpoint
@@ -439,6 +441,36 @@ CREATE TABLE `uat_generations` (
 );
 --> statement-breakpoint
 CREATE INDEX `uat_status_idx` ON `uat_generations` (`status`);--> statement-breakpoint
+CREATE INDEX `uat_generations_uncleaned_terminal_idx` ON `uat_generations` (`project_root`,`status`) WHERE `cleaned_at` IS NULL;--> statement-breakpoint
+CREATE TABLE `uat_generation_repos` (
+	`uat_name` text NOT NULL,
+	`repo_key` text NOT NULL,
+	`repo_path` text NOT NULL,
+	`branch` text NOT NULL,
+	`base_sha` text NOT NULL,
+	`target_branch` text DEFAULT 'main' NOT NULL,
+	`worktree_path` text NOT NULL,
+	`merge_order` integer DEFAULT 0 NOT NULL,
+	`promoted_at` integer,
+	`merge_sha` text,
+	PRIMARY KEY(`uat_name`, `repo_key`),
+	FOREIGN KEY (`uat_name`) REFERENCES `uat_generations`(`name`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE INDEX `uat_generation_repos_uat_order_idx` ON `uat_generation_repos` (`uat_name`,`merge_order`);--> statement-breakpoint
+CREATE TABLE `uat_generation_member_repos` (
+	`uat_name` text NOT NULL,
+	`issue_id` text NOT NULL,
+	`repo_key` text NOT NULL,
+	`branch` text NOT NULL,
+	`head_sha` text NOT NULL,
+	`merge_order_in_repo` integer DEFAULT 0 NOT NULL,
+	PRIMARY KEY(`uat_name`, `issue_id`, `repo_key`),
+	FOREIGN KEY (`uat_name`) REFERENCES `uat_generations`(`name`) ON UPDATE no action ON DELETE no action,
+	FOREIGN KEY (`issue_id`) REFERENCES `issues`(`id`) ON UPDATE no action ON DELETE no action
+);
+--> statement-breakpoint
+CREATE INDEX `uat_generation_member_repos_uat_idx` ON `uat_generation_member_repos` (`uat_name`,`issue_id`);--> statement-breakpoint
 CREATE TABLE `discovered_sessions` (
 	`id` integer PRIMARY KEY AUTOINCREMENT NOT NULL,
 	`jsonl_path` text NOT NULL UNIQUE,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/desktop",
-  "version": "0.45.24",
+  "version": "0.46.0",
   "description": "Overdeck Command Deck — AI agent monitoring desktop app",
   "publishConfig": {
     "access": "public"

package/server/{acceptance-criteria-DDCnXF58.js → acceptance-criteria-CCwFGICj.js}

@@ -1,4 +1,4 @@
-import { m as readWorkspacePlanSync, o as init_io, v as init_types, y as subItemsOf } from "./io-C9kF1wtJ.js";
+import { m as readWorkspacePlanSync, o as init_io, v as init_types, y as subItemsOf } from "./io-VHvc0Ssp.js";
 import "effect";
 //#region ../../lib/xbrief/acceptance-criteria.ts
 init_io();
@@ -59,4 +59,4 @@ function extractACFromDocument(doc) {
 //#endregion
 export { getXBriefACStatusSync as n, extractACFromDocument as t };
 
-//# sourceMappingURL=acceptance-criteria-DDCnXF58.js.map
+//# sourceMappingURL=acceptance-criteria-CCwFGICj.js.map

package/server/activity-logger-CMthG6Vd.js

@@ -0,0 +1,3 @@
+import { i as emitActivityTtsSync, o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+init_activity_logger();
+export { emitActivityEntrySync, emitActivityTtsSync };

package/server/{activity-logger-DDlOIAML.js → activity-logger-CyteR4JO.js}

@@ -26,10 +26,13 @@ function getActivityEventStore() {
 		return null;
 	}
 }
-function appendActivityEventAsync(event) {
+async function persistActivityEvent(event) {
 	const store = getActivityEventStore();
-	if (!store) return;
-	store.appendAsync(event).catch(() => void 0);
+	if (!store) throw new Error("Activity event store is not initialized.");
+	await store.appendAsync(event);
+}
+function appendActivityEventAsync(event) {
+	persistActivityEvent(event).catch(() => void 0);
 }
 function appendActivityEvent(event) {
 	const store = getActivityEventStore();
@@ -39,22 +42,23 @@ function appendActivityEvent(event) {
 	} catch {}
 }
 /**
-* Emit an activity.entry domain event to the SQLite event store.
-* Non-blocking — throws silently if event store is not yet initialized.
-*
-* The event is persisted to SQLite immediately and PubSub notifies all
-* WebSocket subscribers so the ActivityPanel updates in real-time.
+* Emit an activity.entry domain event to the SQLite event store and wait until
+* it is durable. Reusing an id records a newer state transition for the same
+* logical activity.
 */
-function emitActivityEntrySync(options) {
-	appendActivityEventAsync({
+async function emitActivityEntryDurable(options) {
+	await persistActivityEvent({
 		type: "activity.entry",
 		timestamp: (/* @__PURE__ */ new Date()).toISOString(),
 		payload: {
-			id: randomUUID(),
+			id: options.id ?? randomUUID(),
 			source: options.source,
 			level: options.level,
+			status: options.status,
+			command: options.command,
 			message: options.message,
 			details: options.details,
+			output: options.output,
 			issueId: options.issueId,
 			link: options.link,
 			desktop: options.desktop
@@ -62,6 +66,13 @@ function emitActivityEntrySync(options) {
 	});
 }
 /**
+* Emit an activity.entry domain event without blocking the caller. Failures are
+* non-fatal because this path is also used during early dashboard boot.
+*/
+function emitActivityEntrySync(options) {
+	emitActivityEntryDurable(options).catch(() => void 0);
+}
+/**
 * Emit a detailed activity log entry — auto-generated from domain state changes.
 * Use for fine-grained visibility into agent lifecycle, plan changes, pipeline transitions.
 */
@@ -185,6 +196,6 @@ var init_activity_logger = __esmMin((() => {
 	activityEventStoreProvider = null;
 }));
 //#endregion
-export { init_activity_logger as a, emitDashboardLifecycleSync as i, emitActivityEntrySync as n, setActivityEventStoreProvider as o, emitActivityTtsSync as r, emitActivityDetailedSync as t };
+export { emitDashboardLifecycleSync as a, emitActivityTtsSync as i, emitActivityEntryDurable as n, init_activity_logger as o, emitActivityEntrySync as r, setActivityEventStoreProvider as s, emitActivityDetailedSync as t };
 
-//# sourceMappingURL=activity-logger-DDlOIAML.js.map
+//# sourceMappingURL=activity-logger-CyteR4JO.js.map

package/server/{advancing-selfheal-BVwW4qRn.js → advancing-selfheal-De1L-Sb4.js}

@@ -1,8 +1,8 @@
-import { D as killSession, M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
-import { c as getReviewStatusSync, d as loadReviewStatuses, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { Yn as getAgentStateSync, b as init_agents, lr as saveAgentStateSync, nr as markAgentStoppedState } from "./queries-CjNIf-Ub.js";
-import { c as logDeaconEventSync, o as init_persistent_logger } from "./session-history-BT3IvqhC.js";
-import { a as selectMergedAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-BtHPo6Xc.js";
+import { D as killSession, M as listSessionNames, w as init_tmux } from "./tmux-B1Wbxz5o.js";
+import { f as init_review_status, m as loadReviewStatuses, u as getReviewStatusSync } from "./review-status-yljtTd-q.js";
+import { _r as saveAgentStateSync, b as init_agents, rr as getAgentStateSync, ur as markAgentStoppedState } from "./queries-DHJm7bTd.js";
+import { c as logDeaconEventSync, o as init_persistent_logger } from "./session-history-BUyK29eq.js";
+import { a as selectMergedAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-CvmwaqKv.js";
 import { Effect } from "effect";
 //#region ../../lib/cloister/advancing-selfheal.ts
 init_agents();
@@ -135,4 +135,4 @@ async function runBootAdvancingSelfHeal(deps = defaultBootAdvancingSelfHealDeps)
 //#endregion
 export { checkMergedAdvancingSessions, markAdvancingSessionStopped, reconcileInFlightJournals, runBootAdvancingSelfHeal };
 
-//# sourceMappingURL=advancing-selfheal-BVwW4qRn.js.map
+//# sourceMappingURL=advancing-selfheal-De1L-Sb4.js.map

package/server/{agent-gc-CHcnvonI.js → agent-gc-CBULruzm.js}

@@ -1,7 +1,7 @@
-import { Mt as readIssueRecordForWorkspaceSync, Ot as init_record } from "./config-yaml-DySPNmKN.js";
-import { c as listAllAgentsSync, l as removeAgentSync, o as init_agents } from "./agents-EbI0zCJl.js";
-import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
-import { n as mapGitHubStateToCanonical, t as init_state_mapping } from "./state-mapping-BL_-3Yt8.js";
+import { Pt as init_record, Rt as readIssueRecordForWorkspaceSync } from "./config-yaml-CmOPzmBb.js";
+import { c as listAllAgentsSync, l as removeAgentSync, o as init_agents } from "./agents-C5rWYhb6.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-L0FKtjq2.js";
+import { n as mapGitHubStateToCanonical, t as init_state_mapping } from "./state-mapping-BVldLhBf.js";
 import { readdir, readlink } from "fs/promises";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -112,4 +112,4 @@ function pruneTerminalStoppedAgents() {
 //#endregion
 export { pidsWithCwdUnder as a, sweepAutoCloseOutCache as i, pruneTerminalStoppedAgents as n, getAutoCloseOutCanonicalState as r, pruneStoppedAgentsForIssue as t };
 
-//# sourceMappingURL=agent-gc-CHcnvonI.js.map
+//# sourceMappingURL=agent-gc-CBULruzm.js.map

package/server/agent-state-VQk8fY9F.js

@@ -0,0 +1,3 @@
+import { Jn as clearAgentPausedSync, Xn as clearAgentTroubledSync, ir as init_agent_state, rr as getAgentStateSync, yr as setAgentPausedSync } from "./queries-DHJm7bTd.js";
+init_agent_state();
+export { clearAgentPausedSync, clearAgentTroubledSync, getAgentStateSync, setAgentPausedSync };

package/server/{agent-state-service-BsgWxZuB.js → agent-state-service-BlnSkRFA.js}

@@ -1,6 +1,6 @@
-import { a as init_event_store, i as initEventStore } from "./event-store-CQL6NeqB.js";
-import { m as applyEvent, p as INITIAL_READ_MODEL_STATE, t as init_src } from "./src-DtcUOZCq.js";
-import { f as markAgentStateServiceInProcess, l as getRuntimeSnapshot$1, p as setAgentRuntimeMirror, r as init_session_history, t as appendSessionIdToHistory, u as init_agent_runtime_mirror } from "./session-history-BT3IvqhC.js";
+import { a as init_event_store, i as initEventStore } from "./event-store-zY5MJHgF.js";
+import { h as applyEvent, m as INITIAL_READ_MODEL_STATE, t as init_src } from "./src-CRmCHlma.js";
+import { f as markAgentStateServiceInProcess, l as getRuntimeSnapshot$1, p as setAgentRuntimeMirror, r as init_session_history, t as appendSessionIdToHistory, u as init_agent_runtime_mirror } from "./session-history-BUyK29eq.js";
 import { Context, Effect, Layer, SubscriptionRef } from "effect";
 //#region services/agent-state-service.ts
 /**
@@ -58,7 +58,7 @@ const AgentStateServiceLive = Layer.effect(AgentStateService, Effect.gen(functio
 	const store = yield* Effect.promise(() => initEventStore());
 	const ref = yield* SubscriptionRef.make({});
 	const seedFromSources = Effect.gen(function* () {
-		const { reconstructCacheAuto } = yield* Effect.promise(() => import("./reconstruct-cache-C3Ui7ojV.js"));
+		const { reconstructCacheAuto } = yield* Effect.promise(() => import("./reconstruct-cache-BbYFsqLa.js"));
 		const seeded = (yield* Effect.promise(() => reconstructCacheAuto())).agentRuntimeById;
 		if (Object.keys(seeded).length > 0) {
 			yield* SubscriptionRef.update(ref, (current) => mergeRuntimeBySequence(current, seeded));
@@ -107,4 +107,4 @@ function applyEventToRef(ref, ev) {
 //#endregion
 export { AgentStateServiceLive as n, getRuntimeSnapshot as r, AgentStateService as t };
 
-//# sourceMappingURL=agent-state-service-BsgWxZuB.js.map
+//# sourceMappingURL=agent-state-service-BlnSkRFA.js.map

package/server/{agent-state-service-D5UGKIJL.js → agent-state-service-hZpxIw1E.js}

@@ -1,2 +1,2 @@
-import { n as AgentStateServiceLive, r as getRuntimeSnapshot, t as AgentStateService } from "./agent-state-service-BsgWxZuB.js";
+import { n as AgentStateServiceLive, r as getRuntimeSnapshot, t as AgentStateService } from "./agent-state-service-BlnSkRFA.js";
 export { AgentStateService, AgentStateServiceLive, getRuntimeSnapshot };

package/server/agents-BKKkxKgK.js

@@ -0,0 +1,3 @@
+import { $n as getAgentDir, An as getProviderExportsForModel, Ar as isQualifiedAgentId, B as detectCrashedAgents, Bn as dismissDevChannelsDialog, C as replayCrashedStandingAgent, Dn as buildSpawnEnvForModel, En as buildCavemanExports, Fr as getAgentRuntimeState, Ft as deliverResumeMessageWithTranscriptConfirmation, G as resumeAgent, Gn as SESSION_EXITED_BEFORE_KICKOFF, Gt as assertWorkspaceStackHealthyForSpawn, H as restartAgent, In as buildDefaultResumeContinueMessage, Ir as getAgentRuntimeStateSync, Jn as clearAgentPausedSync, Kn as __testInternals, Kt as buildAgentLaunchConfig, Ln as buildResumeContinueMessage, Mr as resolveAgentTargetSync, Mt as deliverAgentMessage, Nr as waitForAgentIdle, Nt as deliverAgentPermissionDecision, On as determineModel, Pr as waitForReadySignal, Pt as deliverInitialPromptWithRetry, Rn as decideChannelsForWorkAgent, Rr as saveAgentRuntimeState, Rt as setAgentDeliveryMethod, S as contextWindowForModel, Sr as writeAgentStateJsonSync, T as shouldReplayCompactAtTierRunBoundary, U as buildCompactRecoverySeed, Un as writeChannelsBridgeMcpConfig, V as recoverAgent, Wn as GOVERNOR_SLOT_PAUSE_REASON_PREFIX, X as messageAgent, Xn as clearAgentTroubledSync, Xt as transitionIssueToInProgress, Yn as clearAgentTroubled, Yt as retrieveSpawnTimeMemoryContext, Zn as clearYieldForResumeSync, Zt as transitionIssueToInReview, _n as waitForPromptReady, _r as saveAgentStateSync, a as listRunningAgentsSync, an as OHMYPI_AGENT_READY_TIMEOUT_SECONDS, ar as isAgentPaused, b as init_agents, br as setAgentYieldedSync, cn as getAgentRuntimeBaseCommand, dn as getProviderAuthMode, dr as markAgentTroubled, dt as spawnRun, et as appendActivity, fn as getRoleRuntimeBaseCommand, fr as recordAgentFailure, gr as saveAgentState, hn as roleAgentDefinitionPath, hr as resetAgentFailureCount, i as listRunningAgents, it as getSessionId, jn as getProviderTmuxFlags, jr as normalizeAgentId, kn as getProviderEnvForModel, kr as clearReadySignal, lr as markAgentRunningState, mn as injectPiConversationMemory, mt as stopAgentSync, nr as getAgentStateFilePath, nt as getLatestSessionId, o as warnOnBareNumericIssueIds, on as describeOhmypiSpawnFailure, or as isAgentTroubled, ot as saveSessionId, pr as recordAgentFailureSync, pt as stopAgent, qn as clearAgentPaused, r as listAgentStates, rr as getAgentStateSync, rt as getLatestSessionIdSync, sr as isRole, t as dropLegacyAgentStatesMissingRoleAsync, tr as getAgentState, tt as getActivity, ur as markAgentStoppedState, ut as spawnAgent, vr as setAgentPaused, w as replayStandingAgent, x as compactAtTierRunBoundary, xr as wipeAgentStateDirs, yr as setAgentPausedSync, z as autoRecoverAgents, zn as decideSupervisorForWorkAgent } from "./queries-DHJm7bTd.js";
+init_agents();
+export { GOVERNOR_SLOT_PAUSE_REASON_PREFIX, OHMYPI_AGENT_READY_TIMEOUT_SECONDS, SESSION_EXITED_BEFORE_KICKOFF, __testInternals, appendActivity, assertWorkspaceStackHealthyForSpawn, autoRecoverAgents, buildAgentLaunchConfig, buildCavemanExports, buildCompactRecoverySeed, buildDefaultResumeContinueMessage, buildResumeContinueMessage, buildSpawnEnvForModel, clearAgentPaused, clearAgentPausedSync, clearAgentTroubled, clearAgentTroubledSync, clearReadySignal, clearYieldForResumeSync, compactAtTierRunBoundary, contextWindowForModel, decideChannelsForWorkAgent, decideSupervisorForWorkAgent, deliverAgentMessage, deliverAgentPermissionDecision, deliverInitialPromptWithRetry, deliverResumeMessageWithTranscriptConfirmation, describeOhmypiSpawnFailure, detectCrashedAgents, determineModel, dismissDevChannelsDialog, dropLegacyAgentStatesMissingRoleAsync, getActivity, getAgentDir, getAgentRuntimeBaseCommand, getAgentRuntimeState, getAgentRuntimeStateSync, getAgentState, getAgentStateFilePath, getAgentStateSync, getLatestSessionId, getLatestSessionIdSync, getProviderAuthMode, getProviderEnvForModel, getProviderExportsForModel, getProviderTmuxFlags, getRoleRuntimeBaseCommand, getSessionId, injectPiConversationMemory, isAgentPaused, isAgentTroubled, isQualifiedAgentId, isRole, listAgentStates, listRunningAgents, listRunningAgentsSync, markAgentRunningState, markAgentStoppedState, markAgentTroubled, messageAgent, normalizeAgentId, recordAgentFailure, recordAgentFailureSync, recoverAgent, replayCrashedStandingAgent, replayStandingAgent, resetAgentFailureCount, resolveAgentTargetSync, restartAgent, resumeAgent, retrieveSpawnTimeMemoryContext, roleAgentDefinitionPath, saveAgentRuntimeState, saveAgentState, saveAgentStateSync, saveSessionId, setAgentDeliveryMethod, setAgentPaused, setAgentPausedSync, setAgentYieldedSync, shouldReplayCompactAtTierRunBoundary, spawnAgent, spawnRun, stopAgent, stopAgentSync, transitionIssueToInProgress, transitionIssueToInReview, waitForAgentIdle, waitForPromptReady, waitForReadySignal, warnOnBareNumericIssueIds, wipeAgentStateDirs, writeAgentStateJsonSync, writeChannelsBridgeMcpConfig };

package/server/{agents-EbI0zCJl.js → agents-C5rWYhb6.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
-import { _ as integer, a as EventBus, b as and, c as Records, d as getOverdeckDatabaseSync, f as init_infra, h as text, l as Tmux, m as sqliteTable, p as init_sqlite_core, r as Db, v as init_drizzle_orm, x as eq } from "./infra-BEqFxlJc.js";
-import { n as init_issues, t as IssueId } from "./issues-BMmP_77e.js";
+import { ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
+import { _ as integer, a as EventBus, b as and, c as Records, d as getOverdeckDatabaseSync, f as init_infra, h as text, l as Tmux, m as sqliteTable, p as init_sqlite_core, r as Db, v as init_drizzle_orm, x as eq } from "./infra-BjuxvjdS.js";
+import { n as init_issues, t as IssueId } from "./issues-CgnQ1OGQ.js";
 import { join } from "node:path";
 import { Context, Effect, Layer, Schema } from "effect";
 import { readFileSync, readdirSync, rmSync, statSync } from "node:fs";
@@ -972,4 +972,4 @@ var init_agents = __esmMin((() => {
 //#endregion
 export { countAgentsByStatusRole as a, listAllAgentsSync as c, isTerminalIssueStage as d, countAgentsByStatus as i, removeAgentSync as l, AgentsResolverLive as n, init_agents as o, backfillAgentsSync as r, listAgentIdsByPrefixSync as s, AgentsResolver as t, getIssueStageSync as u };
 
-//# sourceMappingURL=agents-EbI0zCJl.js.map
+//# sourceMappingURL=agents-C5rWYhb6.js.map

package/server/archive-planning-0FJ6Xd3b.js

@@ -0,0 +1,2 @@
+import { i as findWorkspacePath } from "./archive-planning-C0lAbNB_.js";
+export { findWorkspacePath };

package/server/{archive-planning-Du25Jtst.js → archive-planning-C0lAbNB_.js}

@@ -1,8 +1,7 @@
-import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Dr as PROJECT_PRDS_COMPLETED_SUBDIR, Er as PROJECT_PRDS_ACTIVE_SUBDIR, Or as PROJECT_PRDS_PLANNED_SUBDIR, Tr as PROJECT_DOCS_SUBDIR, Vr as init_paths, gr as ARCHIVES_DIR, kr as PROJECT_PRDS_SUBDIR } from "./config-yaml-DySPNmKN.js";
+import { Jr as PROJECT_PRDS_COMPLETED_SUBDIR, Kr as PROJECT_DOCS_SUBDIR, Lr as ARCHIVES_DIR, Xr as PROJECT_PRDS_SUBDIR, Yr as PROJECT_PRDS_PLANNED_SUBDIR, ci as init_paths, qr as PROJECT_PRDS_ACTIVE_SUBDIR } from "./config-yaml-CmOPzmBb.js";
 import { a as PAN_DIRNAME, c as PAN_SESSIONS_FILENAME, i as PAN_CONTINUE_FILENAME, n as PAN_CONTEXT_FILENAME, s as PAN_FEEDBACK_DIRNAME, u as PAN_SPEC_FILENAME } from "./types-hraoaQIp.js";
-import { a as getDraftPath, o as getIssueDraftPath, t as init_pan_dir } from "./pan-dir-B0c3w0Ya.js";
-import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-5M0lupud.js";
+import { a as getDraftPath, o as getIssueDraftPath, t as init_pan_dir } from "./pan-dir-ubraCiUg.js";
+import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-q67TYYg5.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync } from "fs";
 import { dirname, join } from "path";
@@ -23,6 +22,13 @@ import { promisify } from "util";
 * every variant. All writers MUST use canonicalPrdSubdir so new artifacts only
 * land in the canonical lowercase subdirectory format.
 */
+init_paths();
+init_pan_dir();
+const STATUS_DIRS = {
+	active: PROJECT_PRDS_ACTIVE_SUBDIR,
+	planned: PROJECT_PRDS_PLANNED_SUBDIR,
+	completed: PROJECT_PRDS_COMPLETED_SUBDIR
+};
 function statusRoot(projectPath, status) {
 	return join(projectPath, PROJECT_DOCS_SUBDIR, PROJECT_PRDS_SUBDIR, STATUS_DIRS[status]);
 }
@@ -90,16 +96,6 @@ function findPrdAnywhereSync(projectPath, issueId) {
 	}
 	return findDraftPrdSync(projectPath, issueId);
 }
-var STATUS_DIRS;
-var init_prd_locations = __esmMin((() => {
-	init_paths();
-	init_pan_dir();
-	STATUS_DIRS = {
-		active: PROJECT_PRDS_ACTIVE_SUBDIR,
-		planned: PROJECT_PRDS_PLANNED_SUBDIR,
-		completed: PROJECT_PRDS_COMPLETED_SUBDIR
-	};
-}));
 //#endregion
 //#region ../../lib/lifecycle/archive-planning.ts
 /**
@@ -113,6 +109,10 @@ var init_prd_locations = __esmMin((() => {
 *   2. Archive workspace .pan/ artifacts to ~/.overdeck/archives/<issue>/
 *   3. Rotate previous archives to prevent overwrite
 */
+init_paths();
+init_pan_dir();
+init_types();
+const execAsync = promisify(exec);
 /**
 * Find ALL workspace paths matching an issue across canonical and legacy
 * naming conventions. Returns every candidate that exists on disk, so callers
@@ -279,15 +279,7 @@ function archivePlanning(ctx, opts = {}) {
 		return results;
 	});
 }
-var execAsync;
-var init_archive_planning = __esmMin((() => {
-	init_paths();
-	init_pan_dir();
-	init_prd_locations();
-	init_types();
-	execAsync = promisify(exec);
-}));
 //#endregion
-export { inferBranchFromWorkspace as a, findPrdAnywhereSync as c, findWorkspacePath as i, init_prd_locations as l, archiveWorkspaceArtifacts as n, init_archive_planning as o, findAllWorkspacePaths as r, movePrd as s, archivePlanning as t };
+export { inferBranchFromWorkspace as a, findWorkspacePath as i, archiveWorkspaceArtifacts as n, movePrd as o, findAllWorkspacePaths as r, findPrdAnywhereSync as s, archivePlanning as t };
 
-//# sourceMappingURL=archive-planning-Du25Jtst.js.map
+//# sourceMappingURL=archive-planning-C0lAbNB_.js.map

package/server/{artifact-index-jobs-CbEDfCDu.js → artifact-index-jobs-ug6ZxIP5.js}

@@ -1,4 +1,4 @@
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
+import { ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
 import { n as openDatabase, t as init_driver } from "./driver-CKVGi51s.js";
 import { dirname, join } from "node:path";
 import { mkdirSync } from "node:fs";
@@ -208,4 +208,4 @@ function unshareArtifactBySlugJob(slug) {
 //#endregion
 export { getArtifactBySlugJob, listArtifactsForWorkspaceOrIssueJob, unshareArtifactBySlugJob };
 
-//# sourceMappingURL=artifact-index-jobs-CbEDfCDu.js.map
+//# sourceMappingURL=artifact-index-jobs-ug6ZxIP5.js.map

package/server/{assemble-J2ZZ2C15.js → assemble-DnffNpOo.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths, jr as SYNC_SOURCES } from "./config-yaml-DySPNmKN.js";
+import { Qr as SYNC_SOURCES, ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { join } from "path";
 //#region ../../lib/context-layers/layers.ts
@@ -336,4 +336,4 @@ var init_assemble = __esmMin((() => {
 //#endregion
 export { projectContextDir as A, ensureProjectLayer as C, legacyProjectContextFile as D, init_layers as E, workspaceContextDir as F, workspaceContextFile as I, readLayerContent as M, resolveProjectContextFile as N, legacyWorkspaceContextFile as O, resolveWorkspaceContextFile as P, codexGlobalContextFile as S, globalContextFile as T, KNOWN_HARNESS_MARKERS as _, REGION_BEGIN as a, validateTemplate as b, init_render as c, userContentOutsideRegion as d, init_rules as f, HARNESS_MARKERS as g, renderBundledRules as h, workspaceContextWithoutProjectLayer as i, projectContextFile as j, piGlobalContextFile as k, renderGlobalLayer as l, readBundledRules as m, PROJECT_LAYER_START as n, REGION_END as o, parseRule as p, init_assemble as r, hasManagedRegion as s, PROJECT_LAYER_END as t, renderProjectLayer as u, init_harness as v, globalContextDir as w, PROJECT_STARTER as x, renderForHarness as y };
 
-//# sourceMappingURL=assemble-J2ZZ2C15.js.map
+//# sourceMappingURL=assemble-DnffNpOo.js.map

package/server/{backlog-auto-trigger-2R2jog7n.js → backlog-auto-trigger-Dh-i9PQf.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-Nw29vaFb.js";
-import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-CzkcK6P5.js";
+import { r as isNoResumeValueEnabled, t as init_no_resume_mode } from "./no-resume-mode-C5ULAXwO.js";
+import { a as spawnSequencerAgent, i as init_sequencer_agent } from "./sequencer-agent-B2WeCtGi.js";
 //#region ../../lib/backlog/backlog-auto-trigger.ts
 /**
 * PAN-2396: --no-resume is the operator's full-quiescence escape hatch —
@@ -37,4 +37,4 @@ __esmMin((() => {
 }))();
 export { triggerDebouncedIncrementalPass };
 
-//# sourceMappingURL=backlog-auto-trigger-2R2jog7n.js.map
+//# sourceMappingURL=backlog-auto-trigger-Dh-i9PQf.js.map

package/server/{behavior-B3exJ42O.js → behavior-CfIg6pKp.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { t as init_src } from "./src-DtcUOZCq.js";
+import { t as init_src } from "./src-CRmCHlma.js";
 //#region ../../lib/runtimes/behavior.ts
 var init_behavior = __esmMin((() => {
 	init_src();
@@ -7,4 +7,4 @@ var init_behavior = __esmMin((() => {
 //#endregion
 export { init_behavior as t };
 
-//# sourceMappingURL=behavior-B3exJ42O.js.map
+//# sourceMappingURL=behavior-CfIg6pKp.js.map

package/server/bridge-pool-patrol-CUFmjVDN.js

@@ -0,0 +1,136 @@
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { promises } from "fs";
+import { exec } from "child_process";
+import { promisify } from "util";
+//#region ../../lib/docker-bridge-pool.ts
+init_activity_logger();
+/** Lists every bridge network on the host, one name per line. */
+const LIST_BRIDGE_NETWORKS_COMMAND = `docker network ls --filter driver=bridge --format '{{.Name}}'`;
+const DOCKER_DAEMON_JSON_PATH = "/etc/docker/daemon.json";
+/** `overdeck-feature-pan-2997_devnet`, `myn-feature-min-852_default`, … */
+const FEATURE_NETWORK_RE = /^(.+?)-feature-[a-z0-9]+-\d+_(?:devnet|default)$/i;
+function parseBridgeNetworkNames(stdout) {
+	return stdout.split("\n").map((line) => line.trim()).filter(Boolean);
+}
+/**
+* Groups networks by the project prefix of their compose project name so the
+* message names which project is consuming the pool. Anything that is not a
+* workspace stack network (`bridge`, `overdeck`, a project's main stack) lands
+* in `other`.
+*/
+function groupBridgeNetworkNames(names) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const name of names) {
+		const match = name.match(FEATURE_NETWORK_RE);
+		const label = match ? `${match[1]}-feature-*` : "other";
+		counts.set(label, (counts.get(label) ?? 0) + 1);
+	}
+	return [...counts.entries()].map(([label, count]) => ({
+		label,
+		count
+	})).sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+}
+/**
+* Capacity declared by `default-address-pools`: each pool yields
+* `2^(size - baseMaskBits)` subnets. Returns null when the config is absent or
+* malformed so the caller falls back to the measured default limit rather than
+* trusting a number it could not derive.
+*/
+function bridgePoolLimitFromPools(pools) {
+	if (!Array.isArray(pools) || pools.length === 0) return null;
+	let capacity = 0;
+	for (const pool of pools) {
+		const entry = pool;
+		if (typeof entry?.base !== "string" || typeof entry?.size !== "number") return null;
+		const baseMask = Number(entry.base.split("/")[1]);
+		if (!Number.isInteger(baseMask) || baseMask < 0 || baseMask > 32) return null;
+		if (!Number.isInteger(entry.size) || entry.size < baseMask || entry.size > 32) return null;
+		capacity += 2 ** (entry.size - baseMask);
+	}
+	return capacity > 0 ? capacity : null;
+}
+/**
+* Reads `default-address-pools` from daemon.json. Returns null when the file is
+* missing, unreadable, or declares no pools — which is itself the signal that
+* the host is on Docker's narrow built-in pools.
+*/
+async function readDockerDaemonPools() {
+	try {
+		const text = await promises.readFile(DOCKER_DAEMON_JSON_PATH, "utf-8");
+		const pools = JSON.parse(text)["default-address-pools"];
+		return Array.isArray(pools) ? pools : null;
+	} catch {
+		return null;
+	}
+}
+function assessBridgePoolPressure(names, limit = 31) {
+	const total = names.length;
+	const effectiveLimit = Math.max(1, limit);
+	return {
+		total,
+		limit: effectiveLimit,
+		headroom: Math.max(0, effectiveLimit - total),
+		underPressure: total >= effectiveLimit - 5,
+		exhausted: total >= effectiveLimit,
+		groups: groupBridgeNetworkNames(names)
+	};
+}
+/** `myn-feature-* 13, overdeck-feature-* 6, other 5` — empty when nothing to show. */
+function formatBridgePoolBreakdown(groups) {
+	return groups.map((group) => `${group.label} ${group.count}`).join(", ");
+}
+//#endregion
+//#region ../../lib/cloister/bridge-pool-patrol.ts
+const execAsync = promisify(exec);
+/** Last reported level. Module-level so it survives across patrol cycles. */
+let lastLevel = "ok";
+function defaultDeps() {
+	return {
+		listBridgeNetworkNames: async () => {
+			const { stdout } = await execAsync(LIST_BRIDGE_NETWORKS_COMMAND, { timeout: 15e3 });
+			return parseBridgeNetworkNames(stdout);
+		},
+		readPools: readDockerDaemonPools,
+		emit: (level, message) => {
+			emitActivityEntrySync({
+				source: "cloister",
+				level,
+				message
+			});
+		}
+	};
+}
+async function patrolDockerBridgePool(deps = {}) {
+	const d = {
+		...defaultDeps(),
+		...deps
+	};
+	let names;
+	try {
+		names = await d.listBridgeNetworkNames();
+	} catch {
+		return [];
+	}
+	const pools = await d.readPools().catch(() => null);
+	const pressure = assessBridgePoolPressure(names, bridgePoolLimitFromPools(pools) ?? 31);
+	const level = pressure.exhausted ? "exhausted" : pressure.underPressure ? "warn" : "ok";
+	if (level === lastLevel) return [];
+	const previous = lastLevel;
+	lastLevel = level;
+	const breakdown = formatBridgePoolBreakdown(pressure.groups);
+	const detail = breakdown ? ` (${breakdown})` : "";
+	if (level === "ok") {
+		const action = `Docker bridge network pool recovered — ${pressure.total} of ~${pressure.limit} slots used, ${pressure.headroom} free${detail}`;
+		d.emit("info", `[deacon] ${action}`);
+		console.log(`[deacon] ${action}`);
+		return [action];
+	}
+	const action = level === "exhausted" ? `Docker bridge network pool EXHAUSTED — ${pressure.total} of ~${pressure.limit} slots used; workspace stacks cannot be rebuilt and queued agent feedback will not be delivered${detail}` : `Docker bridge network pool under pressure — ${pressure.total} of ~${pressure.limit} slots used, only ${pressure.headroom} left${detail}`;
+	d.emit(level === "exhausted" ? "error" : "warn", `[deacon] ${action}`);
+	console.warn(`[deacon] ${action} (was ${previous})`);
+	return [action];
+}
+//#endregion
+export { patrolDockerBridgePool };
+
+//# sourceMappingURL=bridge-pool-patrol-CUFmjVDN.js.map

package/server/{briefing-freshness-D1wzUIWv.js → briefing-freshness-DHmCSLar.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths } from "./config-yaml-DySPNmKN.js";
+import { ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
 import { dirname, join } from "path";
 import { randomUUID } from "crypto";
 import { mkdir, readFile, rename, stat, writeFile } from "fs/promises";
@@ -128,4 +128,4 @@ var init_briefing_freshness = __esmMin((() => {
 //#endregion
 export { resolveSessionContextBriefingPath as a, recordBriefingSessionStart as i, ensureSessionContextBriefingFile as n, init_briefing_freshness as r, appendFreshBriefingUpdate as t };
 
-//# sourceMappingURL=briefing-freshness-D1wzUIWv.js.map
+//# sourceMappingURL=briefing-freshness-DHmCSLar.js.map

package/server/{build-info-CZk_TITh.js → build-info-BP160gU7.js}

@@ -1,3 +1,3 @@
-import { n as init_build_info, t as getBuildInfo } from "./build-info-Ie_D0_BT.js";
+import { n as init_build_info, t as getBuildInfo } from "./build-info-CuFfxZxp.js";
 init_build_info();
 export { getBuildInfo };

package/server/{build-info-Ie_D0_BT.js → build-info-CuFfxZxp.js}

@@ -2,12 +2,14 @@ import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
 //#region ../../lib/deploy/build-info.ts
 function getBuildInfo() {
 	return {
-		buildCommit: "470dfaba75ec7478787a15f9854f20df5c960c05",
-		builtAt: "2026-07-23T14:20:17.760Z"
+		buildCommit: "5d0b41f1bfcdabdec46ca1212b17f0d4b6edb14a",
+		builtAt: "2026-07-27T02:12:59.776Z",
+		buildDirty: false,
+		buildBranch: null
 	};
 }
 var init_build_info = __esmMin((() => {}));
 //#endregion
 export { init_build_info as n, getBuildInfo as t };
 
-//# sourceMappingURL=build-info-Ie_D0_BT.js.map
+//# sourceMappingURL=build-info-CuFfxZxp.js.map

package/server/{checkpoint-manager-BI1Wxoku.js → checkpoint-manager-DEWD82qK.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Kt as STATE_BRANCH_PATHS, Yt as init_state_plane, mr as init_errors, pr as VcsError, sr as InvalidAgentIdError, tr as CheckpointError } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Or as InvalidAgentIdError, Pr as VcsError, Sr as CheckpointError, fn as STATE_BRANCH_PATHS, hn as init_state_plane } from "./config-yaml-CmOPzmBb.js";
 import { Effect, Layer } from "effect";
 import { join } from "path";
 import { tmpdir } from "os";
@@ -663,4 +663,4 @@ var init_checkpoint_manager = __esmMin((() => {
 //#endregion
 export { pruneStaleCheckpointRefs as _, diffAgainstMain as a, diffCheckpoints as c, diffPatchSinceCommit as d, findCommitAtTime as f, pruneCheckpointRefsForAgents as g, listCheckpoints as h, deleteLegacyCheckpointRefs as i, diffFilesAgainstHead as l, init_checkpoint_manager as m, checkpointStateExclusions as n, diffAgainstMainFiles as o, getCheckpointTimestamp as p, deleteCheckpoint as r, diffCheckpointFiles as s, captureCheckpoint as t, diffPatchFilesAgainstHead as u };
 
-//# sourceMappingURL=checkpoint-manager-BI1Wxoku.js.map
+//# sourceMappingURL=checkpoint-manager-DEWD82qK.js.map

package/server/{checkpoint-manager-DwbQoqrC.js → checkpoint-manager-Dxh0FYsv.js}

@@ -1,3 +1,3 @@
-import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-BI1Wxoku.js";
+import { _ as pruneStaleCheckpointRefs, g as pruneCheckpointRefsForAgents, h as listCheckpoints, i as deleteLegacyCheckpointRefs, m as init_checkpoint_manager, p as getCheckpointTimestamp, s as diffCheckpointFiles } from "./checkpoint-manager-DEWD82qK.js";
 init_checkpoint_manager();
 export { deleteLegacyCheckpointRefs, diffCheckpointFiles, getCheckpointTimestamp, listCheckpoints, pruneCheckpointRefsForAgents, pruneStaleCheckpointRefs };

package/server/checkpoint-worker.js

@@ -1,4 +1,4 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CQB1h765.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CZvbtLnr.js";
 import { parentPort } from "node:worker_threads";
 //#region ../../lib/memory/checkpoint-worker.ts
 function runOperation(operation, payload) {

package/server/{checkpoints-CQB1h765.js → checkpoints-CZvbtLnr.js}

@@ -1,4 +1,4 @@
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BjuxvjdS.js";
 import { randomUUID } from "node:crypto";
 //#region ../../lib/overdeck/transcript-checkpoint-sync.ts
 /**
@@ -195,4 +195,4 @@ function getTranscriptCheckpoint(sessionId) {
 //#endregion
 export { releaseTranscriptRange as a, listTranscriptCheckpoints as i, commitTranscriptRange as n, getTranscriptCheckpoint as r, claimTranscriptRange as t };
 
-//# sourceMappingURL=checkpoints-CQB1h765.js.map
+//# sourceMappingURL=checkpoints-CZvbtLnr.js.map

package/server/{checkpoints-BJIs5QIA.js → checkpoints-DMTgXuLG.js}

@@ -1,2 +1,2 @@
-import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CQB1h765.js";
+import { a as releaseTranscriptRange, i as listTranscriptCheckpoints, n as commitTranscriptRange, r as getTranscriptCheckpoint, t as claimTranscriptRange } from "./checkpoints-CZvbtLnr.js";
 export { claimTranscriptRange, commitTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints, releaseTranscriptRange };

package/server/{claude-hooks-provision-8Ngo8TpT.js → claude-hooks-provision-CN-xo-do.js}

@@ -1,3 +1,3 @@
-import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-D8GXF3_s.js";
+import { n as provisionClaudeHooks, t as init_claude_hooks_provision } from "./claude-hooks-provision-fvy4RD2b.js";
 init_claude_hooks_provision();
 export { provisionClaudeHooks };