@overdeck/desktop 0.45.24 → 0.46.0

package/server/{hooks-CKZgXlJb.js → hooks-BO3QT1sn.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Vr as init_paths, hr as AGENTS_DIR, ir as FsError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Ir as AGENTS_DIR, Tr as FsError, ci as init_paths } from "./config-yaml-CmOPzmBb.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -294,4 +294,4 @@ var init_hooks = __esmMin((() => {
 //#endregion
 export { pushToHookSync as _, collectMail as a, sendMail as b, generateFixedPointPromptSync as c, initHook as d, initHookSync as f, pushToHook as g, popFromHookSync as h, clearHookSync as i, getHook as l, popFromHook as m, checkHookSync as n, collectMailSync as o, init_hooks as p, clearHook as r, generateFixedPointPrompt as s, checkHook as t, getHookSync as u, reorderHookItems as v, sendMailSync as x, reorderHookItemsSync as y };
 
-//# sourceMappingURL=hooks-CKZgXlJb.js.map
+//# sourceMappingURL=hooks-BO3QT1sn.js.map

package/server/{hooks-DPVX1rwQ.js → hooks-BnJsxlSq.js}

@@ -1,3 +1,3 @@
-import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-CKZgXlJb.js";
+import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-BO3QT1sn.js";
 init_hooks();
 export { checkHook, checkHookSync, clearHook, clearHookSync, collectMail, collectMailSync, generateFixedPointPrompt, generateFixedPointPromptSync, getHook, getHookSync, initHook, initHookSync, popFromHook, popFromHookSync, pushToHook, pushToHookSync, reorderHookItems, reorderHookItemsSync, sendMail, sendMailSync };

package/server/{hume-Cz8igP9E.js → hume-CDYJxqx-.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CIVWZOQr.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-B123aZl-.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/hume.ts
 /**
@@ -189,4 +189,4 @@ var init_hume = __esmMin((() => {
 //#endregion
 export { init_hume as i, createHumeConfig as n, deleteHumeConfig as r, HumeApiError as t };
 
-//# sourceMappingURL=hume-Cz8igP9E.js.map
+//# sourceMappingURL=hume-CDYJxqx-.js.map

package/server/hume-Dq--7rOQ.js

@@ -0,0 +1,3 @@
+import { i as init_hume, r as deleteHumeConfig } from "./hume-CDYJxqx-.js";
+init_hume();
+export { deleteHumeConfig };

package/server/{idle-stack-reaper-CuLF0j2H.js → idle-stack-reaper-BYqERdkE.js}

@@ -1,2 +1,2 @@
-import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-DDIRwxUY.js";
+import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-CnGx_PO_.js";
 export { handleAgentLifecycleEventForIdleStack };

package/server/{idle-stack-reaper-DDIRwxUY.js → idle-stack-reaper-CnGx_PO_.js}

@@ -1,5 +1,5 @@
-import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { M as listSessionNames, w as init_tmux } from "./tmux-B1Wbxz5o.js";
 import { Effect } from "effect";
 import { exec } from "child_process";
 import { promisify } from "util";
@@ -36,8 +36,21 @@ const execAsync = promisify(exec);
 */
 /** Idle duration before a workspace's UI stack is reaped. */
 const GRACE_MS = 600 * 1e3;
+/**
+* Idle duration before a workspace's FULL stack is reaped (all services except
+* the dev attach target). The 10-minute UI tier only matches the overdeck
+* project's own server/frontend naming, so other projects' stacks (postgres,
+* redis, api/JVM, vite) lived forever — 35 myn-feature containers were resident
+* for agents stopped 17h+, and that idle RSS feeds the memory-governor pressure
+* that forces scheduler yields (MIN-858/MIN-891 yielded under it, 2026-07-25).
+*/
+const FULL_STACK_GRACE_MS = 7200 * 1e3;
 /** `overdeck-feature-<issue>-server-1` / `-frontend-1`. */
 const UI_CONTAINER_RE = /^overdeck-feature-([a-z0-9]+-\d+)-(server|frontend)-1$/i;
+/** Compose project names end in `feature-<issue>` by construction (stack-health). */
+const FEATURE_PROJECT_RE = /(?:^|[-_])feature-([a-z0-9]+-\d+)$/i;
+/** Never stop the `dev` container — it is the operator's VS Code attach target. */
+const DEV_CONTAINER_RE = /-dev-1$/i;
 /**
 * issueLower -> epoch ms first observed idle. Module-level so the grace clock
 * survives across patrol cycles within the deacon process. Tolerates transient
@@ -63,13 +76,34 @@ function defaultDeps() {
 			const { stdout } = await execAsync(`docker ps --format '{{.Names}}'`, { timeout: 15e3 });
 			return stdout.split("\n").map((s) => s.trim()).filter(Boolean);
 		},
+		listComposeContainers: async () => {
+			const { stdout } = await execAsync(`docker ps --format '{{.Names}}\t{{json .Labels}}'`, { timeout: 15e3 });
+			const out = [];
+			for (const line of stdout.split("\n")) {
+				const tab = line.indexOf("	");
+				if (tab <= 0) continue;
+				const name = line.slice(0, tab).trim();
+				if (!name) continue;
+				try {
+					const labels = JSON.parse(line.slice(tab + 1));
+					out.push({
+						name,
+						composeProject: labels["com.docker.compose.project"]
+					});
+				} catch {
+					out.push({ name });
+				}
+			}
+			return out;
+		},
 		listSessions: () => Effect.runPromise(listSessionNames()),
 		stopContainers: async (names) => {
 			if (names.length === 0) return;
 			await execAsync(`docker stop ${names.map((n) => `"${n}"`).join(" ")}`, { timeout: 6e4 });
 		},
 		now: () => Date.now(),
-		graceMs: GRACE_MS
+		graceMs: GRACE_MS,
+		fullStackGraceMs: FULL_STACK_GRACE_MS
 	};
 }
 async function reconcileIdleWorkspaceStacks(deps = {}) {
@@ -94,8 +128,10 @@ async function reconcileIdleWorkspaceStacks(deps = {}) {
 		arr.push(name);
 		byIssue.set(issueLower, arr);
 	}
-	for (const issue of [...firstIdleAt.keys()]) if (!byIssue.has(issue)) firstIdleAt.delete(issue);
-	if (byIssue.size === 0) return actions;
+	for (const issue of [...firstIdleAt.keys()]) {
+		if (issue.startsWith("full:")) continue;
+		if (!byIssue.has(issue)) firstIdleAt.delete(issue);
+	}
 	const sessionBlob = (await d.listSessions().catch(() => [])).join("\n").toLowerCase();
 	const nowMs = d.now();
 	for (const [issueLower, names] of byIssue) {
@@ -127,9 +163,66 @@ async function reconcileIdleWorkspaceStacks(deps = {}) {
 			console.warn(`[deacon] idle-stack reaper: failed to stop ${issueLower} UI containers: ${err?.message ?? err}`);
 		}
 	}
+	let composeContainers = [];
+	try {
+		composeContainers = await d.listComposeContainers();
+	} catch {
+		composeContainers = [];
+	}
+	const byProject = /* @__PURE__ */ new Map();
+	for (const c of composeContainers) {
+		if (!c.composeProject) continue;
+		const m = c.composeProject.match(FEATURE_PROJECT_RE);
+		if (!m) continue;
+		const entry = byProject.get(c.composeProject) ?? {
+			issueLower: m[1].toLowerCase(),
+			names: []
+		};
+		entry.names.push(c.name);
+		byProject.set(c.composeProject, entry);
+	}
+	for (const key of [...firstIdleAt.keys()]) {
+		if (!key.startsWith("full:")) continue;
+		if (!byProject.has(key.slice(5))) firstIdleAt.delete(key);
+	}
+	for (const [project, { issueLower, names }] of byProject) {
+		const clockKey = `full:${project}`;
+		if (sessionBlob.includes(issueLower)) {
+			firstIdleAt.delete(clockKey);
+			continue;
+		}
+		const since = firstIdleAt.get(clockKey);
+		if (since === void 0) {
+			firstIdleAt.set(clockKey, nowMs);
+			continue;
+		}
+		if (nowMs - since < d.fullStackGraceMs) continue;
+		const targets = names.filter((n) => !DEV_CONTAINER_RE.test(n));
+		if (targets.length === 0) {
+			firstIdleAt.delete(clockKey);
+			continue;
+		}
+		try {
+			await d.stopContainers(targets);
+			firstIdleAt.delete(clockKey);
+			const issueId = issueLower.toUpperCase();
+			const idleMin = Math.round((nowMs - since) / 6e4);
+			const action = `Reaped idle workspace stack for ${issueId} — stopped ${targets.length}/${names.length} container(s) in ${project} after ${idleMin}m idle (no agent, no tmux)`;
+			actions.push(action);
+			console.log(`[deacon] ${action}`);
+			emitActivityEntrySync({
+				source: "cloister",
+				level: "info",
+				issueId,
+				message: `[deacon] reaped idle workspace stack for ${issueId} — ${targets.length} container(s) stopped, dev attach target preserved`
+			});
+		} catch (err) {
+			console.warn(`[deacon] idle-stack reaper: failed to stop ${project} containers: ${err?.message ?? err}`);
+		}
+	}
 	return actions;
 }
 //#endregion
 export { reconcileIdleWorkspaceStacks as n, handleAgentLifecycleEventForIdleStack as t };
 
-//# sourceMappingURL=idle-stack-reaper-DDIRwxUY.js.map
+//# sourceMappingURL=idle-stack-reaper-CnGx_PO_.js.map

package/server/in-flight-guard-Bq3epG58.js

@@ -0,0 +1,45 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+//#region ../../lib/cloister/in-flight-guard.ts
+function createPromiseCoalescer() {
+	const inFlight = /* @__PURE__ */ new Map();
+	return {
+		run(key, task) {
+			const existing = inFlight.get(key);
+			if (existing) return existing;
+			const p = task();
+			inFlight.set(key, p);
+			p.catch(() => {}).finally(() => inFlight.delete(key));
+			return p;
+		},
+		isInFlight(key) {
+			return inFlight.has(key);
+		}
+	};
+}
+function createInFlightGuard() {
+	const inFlight = /* @__PURE__ */ new Set();
+	return {
+		run(key, task, onError) {
+			if (inFlight.has(key)) return false;
+			inFlight.add(key);
+			(async () => {
+				try {
+					await task();
+				} catch (err) {
+					onError?.(err);
+				} finally {
+					inFlight.delete(key);
+				}
+			})();
+			return true;
+		},
+		isInFlight(key) {
+			return inFlight.has(key);
+		}
+	};
+}
+var init_in_flight_guard = __esmMin((() => {}));
+//#endregion
+export { createPromiseCoalescer as n, init_in_flight_guard as r, createInFlightGuard as t };
+
+//# sourceMappingURL=in-flight-guard-Bq3epG58.js.map

package/server/{infra-BEqFxlJc.js → infra-BjuxvjdS.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Nt as readIssueRecordSync, Ot as init_record, Ur as packageRoot, Vr as init_paths$1, wt as getIssueRecordPath } from "./config-yaml-DySPNmKN.js";
+import { At as getIssueRecordPath, Pt as init_record, ci as init_paths$1, si as getOverdeckHome, ui as packageRoot, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
 import { n as openDatabase, t as init_driver$1 } from "./driver-CKVGi51s.js";
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-dE1Aw83j.js";
-import { D as killSession, H as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { i as updateIssueRecord, r as init_record_update } from "./record-update-Z0QCxmMp.js";
+import { D as killSession, H as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-B1Wbxz5o.js";
 import { dirname, isAbsolute, join } from "node:path";
 import { Context, Effect, Layer, Queue, Stream } from "effect";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -4724,6 +4724,7 @@ function ensureRuntimeIndexesSync(db) {
 	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_next_attempt_at` integer");
 	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_landing_attempts` text");
 	ensureReleaseSetTablesSync(db);
+	ensureUatGenerationRepoTablesSync(db);
 	runSchemaTopUp(db, "ALTER TABLE `flywheel_substrate_bugs` ADD COLUMN `affected_criteria` text");
 	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `cost_session_id_idx` ON `cost_events` (`session_id`)");
 	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `idx_cost_agent_id` ON `cost_events` (`agent_id`, `ts`)");
@@ -4778,6 +4779,51 @@ function ensureReleaseSetTablesSync(db) {
 	db.exec("CREATE UNIQUE INDEX IF NOT EXISTS `release_set_components_issue_component_idx` ON `release_set_components` (`issue_id`,`component_key`)");
 	db.exec("CREATE INDEX IF NOT EXISTS `release_set_components_issue_order_idx` ON `release_set_components` (`issue_id`,`release_order`,`component_key`)");
 }
+/**
+* Idempotent schema top-up for per-repo UAT generation tables (PAN-3093).
+* A polyrepo generation spans N member repos, so its per-repo branch, base SHA,
+* worktree, and publish state cannot live in the single-valued `uat_generations`
+* columns. Existing overdeck.db files predate these tables and need them added
+* without a migration reset — same shape as ensureReleaseSetTablesSync above.
+*/
+function ensureUatGenerationRepoTablesSync(db) {
+	db.exec(`
+    CREATE TABLE IF NOT EXISTS \`uat_generation_repos\` (
+      \`uat_name\` text NOT NULL,
+      \`repo_key\` text NOT NULL,
+      \`repo_path\` text NOT NULL,
+      \`branch\` text NOT NULL,
+      \`base_sha\` text NOT NULL,
+      \`target_branch\` text DEFAULT 'main' NOT NULL,
+      \`worktree_path\` text NOT NULL,
+      \`merge_order\` integer DEFAULT 0 NOT NULL,
+      \`promoted_at\` integer,
+      \`merge_sha\` text,
+      PRIMARY KEY(\`uat_name\`, \`repo_key\`),
+      FOREIGN KEY (\`uat_name\`) REFERENCES \`uat_generations\`(\`name\`) ON UPDATE no action ON DELETE no action
+    )
+  `);
+	db.exec("CREATE INDEX IF NOT EXISTS `uat_generation_repos_uat_order_idx` ON `uat_generation_repos` (`uat_name`,`merge_order`)");
+	db.exec(`
+    CREATE TABLE IF NOT EXISTS \`uat_generation_member_repos\` (
+      \`uat_name\` text NOT NULL,
+      \`issue_id\` text NOT NULL,
+      \`repo_key\` text NOT NULL,
+      \`branch\` text NOT NULL,
+      \`head_sha\` text NOT NULL,
+      \`merge_order_in_repo\` integer DEFAULT 0 NOT NULL,
+      PRIMARY KEY(\`uat_name\`, \`issue_id\`, \`repo_key\`),
+      FOREIGN KEY (\`uat_name\`) REFERENCES \`uat_generations\`(\`name\`) ON UPDATE no action ON DELETE no action,
+      FOREIGN KEY (\`issue_id\`) REFERENCES \`issues\`(\`id\`) ON UPDATE no action ON DELETE no action
+    )
+  `);
+	db.exec("CREATE INDEX IF NOT EXISTS `uat_generation_member_repos_uat_idx` ON `uat_generation_member_repos` (`uat_name`,`issue_id`)");
+	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `uat_generations_uncleaned_terminal_idx` ON `uat_generations` (`project_root`,`status`) WHERE `cleaned_at` IS NULL");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_repos` ADD COLUMN `target_branch` text DEFAULT 'main' NOT NULL");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_repos` ADD COLUMN `merge_sha` text");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_resolutions` ADD COLUMN `kind` text");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_resolutions` ADD COLUMN `note` text");
+}
 function warnSchemaDriftSync(db) {
 	try {
 		const report = auditOverdeckSchemaSync(db, OVERDECK_SCHEMA_TOP_UP_EXPECTATIONS);
@@ -4976,6 +5022,22 @@ var init_infra = __esmMin((() => {
 			{
 				table: "agents",
 				column: "last_yield_resume_at"
+			},
+			{
+				table: "uat_generation_repos",
+				column: "target_branch"
+			},
+			{
+				table: "uat_generation_repos",
+				column: "merge_sha"
+			},
+			{
+				table: "uat_generation_resolutions",
+				column: "kind"
+			},
+			{
+				table: "uat_generation_resolutions",
+				column: "note"
 			}
 		],
 		indexes: [
@@ -4984,7 +5046,10 @@ var init_infra = __esmMin((() => {
 			"idx_cost_issue_upper",
 			"release_sets_project_idx",
 			"release_set_components_issue_component_idx",
-			"release_set_components_issue_order_idx"
+			"release_set_components_issue_order_idx",
+			"uat_generation_repos_uat_order_idx",
+			"uat_generation_member_repos_uat_idx",
+			"uat_generations_uncleaned_terminal_idx"
 		]
 	};
 	overdeckEvents = sqliteTable("events", {
@@ -5103,4 +5168,4 @@ var init_infra = __esmMin((() => {
 //#endregion
 export { init_paths as A, inArray as C, sql as D, like as E, OVERDECK_MIGRATION_PATH as O, gte as S, isNull as T, integer as _, EventBus as a, and as b, Records as c, getOverdeckDatabaseSync as d, init_infra as f, real as g, text as h, DbLive as i, getOverdeckDatabasePath as k, Tmux as l, sqliteTable as m, CostArchiveLive as n, EventBusLive as o, init_sqlite_core as p, Db as r, Forge as s, CostArchive as t, TmuxLive as u, init_drizzle_orm as v, isNotNull as w, eq as x, desc as y };
 
-//# sourceMappingURL=infra-BEqFxlJc.js.map
+//# sourceMappingURL=infra-BjuxvjdS.js.map

package/server/{injection-CPUIqNhI.js → injection-DZxlV2al.js}

@@ -1,3 +1,3 @@
-import { n as init_injection, r as injectPromptTimeMemory } from "./injection-C8aiVJrF.js";
+import { n as init_injection, r as injectPromptTimeMemory } from "./injection-UCf8EsjX.js";
 init_injection();
 export { injectPromptTimeMemory };

package/server/{injection-C8aiVJrF.js → injection-UCf8EsjX.js}

@@ -1,10 +1,10 @@
 import { n as __esmMin, o as __toESM } from "./rolldown-runtime-DNCzzKnI.js";
-import { Tn as init_projects, er as require_dist, fn as findProjectByPathSync, jn as loadProjectsConfigSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-D-xWGHdh.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-ez2271oH.js";
-import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-BTMvpNFU.js";
-import { n as extractWithProviderPolicy, t as init_providers } from "./providers-qQAwGQDW.js";
-import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-CE46vDkZ.js";
+import { Gn as init_projects, Mn as findProjectByPathSync, Zn as loadProjectsConfigSync, ar as resolveProjectFromIssueSync, xr as require_dist } from "./config-yaml-CmOPzmBb.js";
+import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-cXmOwSbh.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features--nFkJY8v.js";
+import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-Bse1Pdcj.js";
+import { n as extractWithProviderPolicy, t as init_providers } from "./providers-evXhiQeg.js";
+import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-BeOomFa-.js";
 import { Result, Schema } from "effect";
 import { extname, isAbsolute, join, relative, resolve } from "path";
 import { createHash, randomUUID } from "crypto";
@@ -823,4 +823,4 @@ var init_injection = __esmMin((() => {
 //#endregion
 export { buildMatchQuery as a, init_query_expansion as c, resolveKnowledgeBundleRoot as i, init_injection as n, init_search as o, injectPromptTimeMemory as r, clearQueryExpansionCache as s, PROMPT_TIME_MEMORY_BUDGETS as t };
 
-//# sourceMappingURL=injection-C8aiVJrF.js.map
+//# sourceMappingURL=injection-UCf8EsjX.js.map

package/server/{inspect-agent-BLuJ1AkT.js → inspect-agent-6kylZnrm.js}

@@ -1,14 +1,14 @@
-import { D as resolveTieredExecutionEnabled, G as setupCredentialFileAuthSync, H as init_providers, L as clearCredentialFileAuthSync, T as init_tier_table, V as getProviderForModelSync, f as loadConfigSync, mr as init_errors, t as init_config_yaml, tt as resolveModel, ur as ProcessSpawnError } from "./config-yaml-DySPNmKN.js";
-import { D as killSession, H as sessionExists, s as createSession, w as init_tmux } from "./tmux-R7N7y-Mh.js";
-import { b as setReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { A as spawnTierSupervisor, Ar as saveAgentRuntimeState, Cn as getProviderEnvForModel, D as init_tier_supervisor, E as deliverCommitForReview, O as loadPrdDraft, b as init_agents, cr as saveAgentState, j as supervisorAgentId } from "./queries-CjNIf-Ub.js";
-import { c as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-B6GycDh9.js";
-import { m as readWorkspacePlanSync, o as init_io } from "./io-C9kF1wtJ.js";
-import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-BBWG_SiS.js";
-import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-DNWEVV6z.js";
-import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
-import { i as init_git_utils, s as snapshotWorkspaceHeadsPromise } from "./git-utils-CRw2zLPC.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-CDJk4pIp.js";
+import { D as resolveTieredExecutionEnabled, Fr as init_errors, G as setupCredentialFileAuthSync, H as init_providers, L as clearCredentialFileAuthSync, T as init_tier_table, V as getProviderForModelSync, f as loadConfigSync, jr as ProcessSpawnError, t as init_config_yaml, tt as resolveModel } from "./config-yaml-CmOPzmBb.js";
+import { D as killSession, H as sessionExists, s as createSession, w as init_tmux } from "./tmux-B1Wbxz5o.js";
+import { S as setReviewStatusSync, f as init_review_status } from "./review-status-yljtTd-q.js";
+import { A as spawnTierSupervisor, D as init_tier_supervisor, E as deliverCommitForReview, It as init_delivery, Mt as deliverAgentMessage, O as loadPrdDraft, Rr as saveAgentRuntimeState, b as init_agents, gr as saveAgentState, j as supervisorAgentId, kn as getProviderEnvForModel } from "./queries-DHJm7bTd.js";
+import { l as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-C0nuoBGv.js";
+import { m as readWorkspacePlanSync, o as init_io } from "./io-VHvc0Ssp.js";
+import { d as generateLauncherScriptSync, f as init_launcher_generator } from "./tmux-dedup-DbN6MGzM.js";
+import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-CN0cSCPp.js";
+import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DqkftwTb.js";
+import { a as init_git_utils, o as parseCompositeSnapshot, u as snapshotWorkspaceHeadsPromise } from "./git-utils-ameCgDdy.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-B6KJkmHZ.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
@@ -84,16 +84,6 @@ function saveCheckpoint(projectKey, issueId, itemId, commitSha) {
 function shellQuote(value) {
 	return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
-function parseCompositeSnapshot(snapshot) {
-	const heads = /* @__PURE__ */ new Map();
-	if (!snapshot) return heads;
-	for (const token of snapshot.split(/\s+/)) {
-		const separator = token.lastIndexOf("@");
-		if (separator <= 0 || separator === token.length - 1) continue;
-		heads.set(token.slice(0, separator), token.slice(separator + 1));
-	}
-	return heads;
-}
 async function readHead(root) {
 	try {
 		const { stdout } = await execAsync("git rev-parse HEAD", {
@@ -215,6 +205,7 @@ init_issue_closed();
 init_io();
 init_tier_table();
 init_tier_supervisor();
+init_delivery();
 promisify(exec);
 const __dirname = dirname(fileURLToPath(import.meta.url));
 async function buildInspectPromptPromise(context) {
@@ -290,6 +281,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 		});
 		const { config } = loadConfigSync();
 		const model = resolveModel("work", subRole, config);
+		const effort = config.roles?.work?.effort ?? "high";
 		const providerEnv = await getProviderEnvForModel(model);
 		const provider = getProviderForModelSync(model);
 		if (provider.authType === "credential-file") setupCredentialFileAuthSync(provider, context.workspace);
@@ -316,6 +308,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 			baseCommand: "claude",
 			sessionId,
 			model,
+			extraArgs: `--effort ${effort}`,
 			permissionFlags: getClaudePermissionFlagsSync()
 		}), { mode: 493 });
 		const envForTmux = {
@@ -357,12 +350,20 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 		};
 	}
 }
-async function onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath) {
+async function onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath, notes, deps = {}) {
 	if (status === "passed") {
 		const commitSha = await Effect.runPromise(getCurrentHead(issueId, workspacePath));
 		saveCheckpoint(projectKey, issueId, itemId, commitSha);
 		console.log(`[inspect] Checkpoint saved for ${issueId} item ${itemId} at ${commitSha.substring(0, 8)}`);
 	} else console.log(`[inspect] Item ${itemId} blocked for ${issueId} — no checkpoint saved`);
+	const workAgentId = `agent-${issueId.toLowerCase()}`;
+	const message = status === "passed" ? `Inspection verdict for xBRIEF item ${itemId}: PASSED. The checkpoint is saved — continue to your next item.` : `Inspection verdict for xBRIEF item ${itemId}: BLOCKED. Do not build on this item's changes until the finding is addressed.${notes ? ` Finding: ${notes}` : ""}`;
+	try {
+		const result = await (deps.deliver ?? deliverAgentMessage)(workAgentId, message, "inspect-verdict");
+		if (!result.ok) console.error(`[inspect] FAILED to deliver ${status} verdict for ${issueId} item ${itemId} to ${workAgentId}: ${result.failure ?? "unknown"}`);
+	} catch (err) {
+		console.error(`[inspect] FAILED to deliver ${status} verdict for ${issueId} item ${itemId} to ${workAgentId}: ${err instanceof Error ? err.message : String(err)}`);
+	}
 }
 /**
 * Effect-typed variant of {@link buildInspectPrompt}.
@@ -391,10 +392,10 @@ function spawnInspectAgent(context, opts = {}) {
 /**
 * Effect-typed variant of {@link onInspectComplete}. Never fails.
 */
-function onInspectComplete(projectKey, issueId, itemId, status, workspacePath) {
-	return Effect.promise(() => onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath));
+function onInspectComplete(projectKey, issueId, itemId, status, workspacePath, notes, deps = {}) {
+	return Effect.promise(() => onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath, notes, deps));
 }
 //#endregion
 export { onInspectComplete as n, spawnInspectAgent as r, buildInspectPrompt as t };
 
-//# sourceMappingURL=inspect-agent-BLuJ1AkT.js.map
+//# sourceMappingURL=inspect-agent-6kylZnrm.js.map

package/server/inspect-agent-BVwDrVrz.js

@@ -0,0 +1,2 @@
+import { n as onInspectComplete } from "./inspect-agent-6kylZnrm.js";
+export { onInspectComplete };

package/server/{internal-token-s0-oKybJ.js → internal-token-DvMTQSOS.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths, ir as FsError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Tr as FsError, ci as init_paths, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -101,4 +101,4 @@ var init_internal_token = __esmMin((() => {
 //#endregion
 export { getInternalToken as a, ensureInternalTokenSync as i, _resetInternalTokenCacheForTests as n, getInternalTokenSync as o, ensureInternalToken as r, init_internal_token as s, INTERNAL_TOKEN_HEADER as t };
 
-//# sourceMappingURL=internal-token-s0-oKybJ.js.map
+//# sourceMappingURL=internal-token-DvMTQSOS.js.map

package/server/{internal-token-BrcU6qfe.js → internal-token-M9omeXM1.js}

@@ -1,3 +1,3 @@
-import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-s0-oKybJ.js";
+import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DvMTQSOS.js";
 init_internal_token();
 export { INTERNAL_TOKEN_HEADER, _resetInternalTokenCacheForTests, ensureInternalToken, ensureInternalTokenSync, getInternalToken, getInternalTokenSync };

package/server/{io-C9kF1wtJ.js → io-VHvc0Ssp.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Bt as deriveProjectRoot, Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ht as flushAutoCommits, Nt as readIssueRecordSync, Ot as init_record, Tn as init_projects, Ut as init_auto_commit, Wt as queueAutoCommit, fn as findProjectByPathSync, ir as FsError, jt as readIssueRecord, mr as init_errors, nn as init_state_read_home, rn as resolveStateReadHomeSync } from "./config-yaml-DySPNmKN.js";
+import { Cn as resolveStateReadHomeSync, Fr as init_errors, Gn as init_projects, Lt as readIssueRecord, Mn as findProjectByPathSync, Nt as getProjectConfigFromWorkspacePath, Pt as init_record, Sn as init_state_read_home, Tr as FsError, Vt as resolveProjectForIssue, cn as flushAutoCommits, ln as init_auto_commit, on as deriveProjectRoot, un as queueAutoCommit, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
 import { a as PAN_DIRNAME, c as PAN_SESSIONS_FILENAME, d as WORKSPACE_RUNTIME_DIRNAME, f as asPanSpecDocument, i as PAN_CONTINUE_FILENAME, l as PAN_SPECS_DIRNAME, m as isPanSpecStatus, n as PAN_CONTEXT_FILENAME, o as PAN_DRAFTS_DIRNAME, p as init_types$1, r as PAN_CONTINUES_DIRNAME, s as PAN_FEEDBACK_DIRNAME, t as LEGACY_WORKSPACE_RUNTIME_DIRNAME, u as PAN_SPEC_FILENAME } from "./types-hraoaQIp.js";
-import { a as generateXBriefFilename, c as parseXBriefFilename, l as resolveXBriefDir, n as LEGACY_VBRIEF_LIFECYCLE_DIRS, o as init_lifecycle, u as slugify } from "./lifecycle-yPd___5E.js";
+import { a as generateXBriefFilename, c as parseXBriefFilename, l as resolveXBriefDir, n as LEGACY_VBRIEF_LIFECYCLE_DIRS, o as init_lifecycle, u as slugify } from "./lifecycle-CTdOWYMi.js";
 import { Data, Effect, FileSystem } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { basename, join, resolve } from "path";
@@ -61,16 +61,47 @@ var init_continue = __esmMin((() => {
 	init_types$1();
 }));
 //#endregion
+//#region ../../lib/pan-dir/paths.ts
+/**
+* Project state-plane path authority.
+*
+* PAN-3165: the specs/drafts/continues directories had two derivations — this
+* one (state-branch aware) and a hardcoded `<projectRoot>/.pan/specs` inside
+* `xbrief/xbrief-index.ts`, which resolved to the pre-cutover in-repo location
+* and returned null for every spec written since PAN-2541. The resolution lives
+* here, in a leaf module, so both the sync and async spec resolvers can import
+* it without a cycle through `pan-dir/specs.ts`.
+*/
+function getProjectPanPaths(projectRoot) {
+	const stateHome = resolveStateReadHomeSync(findProjectByPathSync(projectRoot) ?? {
+		name: projectRoot,
+		path: projectRoot
+	});
+	const panDir = stateHome.migrated ? stateHome.root : join(stateHome.root, PAN_DIRNAME);
+	return {
+		panDir,
+		specsDir: join(panDir, PAN_SPECS_DIRNAME),
+		draftsDir: join(panDir, PAN_DRAFTS_DIRNAME),
+		continuesDir: join(panDir, PAN_CONTINUES_DIRNAME)
+	};
+}
+var init_paths = __esmMin((() => {
+	init_projects();
+	init_state_read_home();
+	init_types$1();
+}));
+//#endregion
 //#region ../../lib/xbrief/xbrief-index.ts
 /**
 * xBRIEF Index — async, cached issue→xBRIEF lookups for server hot paths.
 *
-* PAN-967 Phase 2 makes `.pan/specs/` the canonical spec store. During the
-* migration window, legacy `vbrief/<lifecycle>/` directories remain as fallback
-* reads when no `.pan/specs` entry exists for an issue.
+* The canonical spec store is the `specs/` directory resolved by
+* `getProjectPanPaths()` — `overdeck-state` for a migrated project, legacy
+* `<projectRoot>/.pan/specs` otherwise. Legacy `vbrief/<lifecycle>/`
+* directories remain as fallback reads when no spec entry exists for an issue.
 */
 async function scanPanSpecs(projectRoot) {
-	const specsDir = join(projectRoot, PAN_DIRNAME, PAN_SPECS_DIRNAME);
+	const { specsDir } = getProjectPanPaths(projectRoot);
 	if (!existsSync(specsDir)) return [];
 	let names;
 	try {
@@ -153,6 +184,7 @@ var init_xbrief_index = __esmMin((() => {
 	init_io();
 	init_errors();
 	init_types$1();
+	init_paths();
 	CACHE_TTL_MS = 5e3;
 	projectIndexCache = /* @__PURE__ */ new Map();
 	findXBriefByIssue = (projectRoot, issueId) => Effect.tryPromise({
@@ -195,22 +227,6 @@ var init_xbrief_index = __esmMin((() => {
 }));
 //#endregion
 //#region ../../lib/pan-dir/specs.ts
-function projectPanPaths(projectRoot) {
-	const stateHome = resolveStateReadHomeSync(findProjectByPathSync(projectRoot) ?? {
-		name: projectRoot,
-		path: projectRoot
-	});
-	const panDir = stateHome.migrated ? stateHome.root : join(stateHome.root, PAN_DIRNAME);
-	return {
-		panDir,
-		specsDir: join(panDir, PAN_SPECS_DIRNAME),
-		draftsDir: join(panDir, PAN_DRAFTS_DIRNAME),
-		continuesDir: join(panDir, PAN_CONTINUES_DIRNAME)
-	};
-}
-function getProjectPanPaths(projectRoot) {
-	return projectPanPaths(projectRoot);
-}
 function ensurePanDirs(projectRoot) {
 	return Effect.gen(function* () {
 		const fs = yield* FileSystem.FileSystem;
@@ -428,15 +444,16 @@ function writeSpecDocument(projectRoot, path, doc) {
 		invalidateXBriefIndex(projectRoot);
 	});
 }
+var projectPanPaths;
 var init_specs = __esmMin((() => {
 	init_errors();
-	init_projects();
-	init_state_read_home();
 	init_io();
 	init_lifecycle();
 	init_xbrief_index();
 	init_auto_commit();
+	init_paths();
 	init_types$1();
+	projectPanPaths = getProjectPanPaths;
 }));
 //#endregion
 //#region ../../lib/xbrief/types.ts
@@ -827,6 +844,6 @@ var init_io = __esmMin((() => {
 	});
 }));
 //#endregion
-export { init_xbrief_index as A, init_specs as C, writeSpecDocument as D, writeSpec as E, getReadableWorkspacePanPaths as F, getWorkspacePanPaths as I, init_continue as L, readXBriefDocument as M, ensureWorkspacePanDir as N, writeSpecForIssue as O, getLegacyWorkspacePanPaths as P, getProjectPanPaths as S, readSpec as T, XBRIEF_INSPECTION_POLICIES as _, findWorkspaceDraftPlan as a, ensurePanDirs as b, mergeRecordStatusOverrides as c, readPlanSync as d, readTierOverrides as f, serializeXBriefDocument as g, recordTierPromotion as h, findPlanSync as i, invalidateXBriefIndex as j, findXBriefByIssue as k, normalizeXBriefEnvelope as l, readWorkspacePlanSync as m, applyStatusOverrides as n, init_io as o, readWorkspacePlan as p, findPlan as r, isPlanningComplete as s, XBriefMergeConflictError as t, readPlan as u, init_types as v, listSpecs as w, findSpecByIssue as x, subItemsOf as y };
+export { invalidateXBriefIndex as A, listSpecs as C, writeSpecForIssue as D, writeSpecDocument as E, getReadableWorkspacePanPaths as F, getWorkspacePanPaths as I, init_continue as L, getProjectPanPaths as M, ensureWorkspacePanDir as N, findXBriefByIssue as O, getLegacyWorkspacePanPaths as P, init_specs as S, writeSpec as T, XBRIEF_INSPECTION_POLICIES as _, findWorkspaceDraftPlan as a, ensurePanDirs as b, mergeRecordStatusOverrides as c, readPlanSync as d, readTierOverrides as f, serializeXBriefDocument as g, recordTierPromotion as h, findPlanSync as i, readXBriefDocument as j, init_xbrief_index as k, normalizeXBriefEnvelope as l, readWorkspacePlanSync as m, applyStatusOverrides as n, init_io as o, readWorkspacePlan as p, findPlan as r, isPlanningComplete as s, XBriefMergeConflictError as t, readPlan as u, init_types as v, readSpec as w, findSpecByIssue as x, subItemsOf as y };
 
-//# sourceMappingURL=io-C9kF1wtJ.js.map
+//# sourceMappingURL=io-VHvc0Ssp.js.map