@overdeck/desktop 0.45.24 → 0.46.0

package/server/{rally-CyWT_lNO.js → rally-B71M9f4o.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { fr as TrackerError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
-import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-C8e_1JRi.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CmOPzmBb.js";
+import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-Dkqmok65.js";
 import { Effect } from "effect";
 //#region ../../lib/tracker/rally.ts
 /**
@@ -504,4 +504,4 @@ var init_rally = __esmMin((() => {
 //#endregion
 export { init_rally as n, RallyTracker as t };
 
-//# sourceMappingURL=rally-CyWT_lNO.js.map
+//# sourceMappingURL=rally-B71M9f4o.js.map

package/server/rally-YDjU513q.js

@@ -0,0 +1,3 @@
+import { n as init_rally, t as RallyTracker } from "./rally-B71M9f4o.js";
+init_rally();
+export { RallyTracker };

package/server/{rally-api-ClOSd-Tt.js → rally-api-D5uXN08-.js}

@@ -1,3 +1,3 @@
-import { n as init_rally_api, t as RallyRestApi } from "./rally-api-C8e_1JRi.js";
+import { n as init_rally_api, t as RallyRestApi } from "./rally-api-Dkqmok65.js";
 init_rally_api();
 export { RallyRestApi };

package/server/{rally-api-C8e_1JRi.js → rally-api-Dkqmok65.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { fr as TrackerError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CmOPzmBb.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/tracker/interface.ts
 /**
@@ -162,4 +162,4 @@ var init_rally_api = __esmMin((() => {
 //#endregion
 export { TrackerAuthError as a, NotImplementedError as i, init_rally_api as n, init_interface as o, IssueNotFoundError as r, RallyRestApi as t };
 
-//# sourceMappingURL=rally-api-C8e_1JRi.js.map
+//# sourceMappingURL=rally-api-Dkqmok65.js.map

package/server/{rally-client-lc-nokqr.js → rally-client-Bfqm6XI4.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-G6latr8C.js";
+import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-DZ8Zn2nQ.js";
 import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, r as IssueNotFound, s as TrackerApiError } from "./typed-errors-2BTMxkZq.js";
 import { Context, Effect, Layer } from "effect";
 //#region services/rally-client.ts
@@ -46,7 +46,7 @@ function makeRallyClientImpl(config) {
 	let tracker = null;
 	async function getTracker() {
 		if (!tracker) {
-			const { RallyTracker } = await import("./rally-zhhtXuDP.js");
+			const { RallyTracker } = await import("./rally-YDjU513q.js");
 			tracker = new RallyTracker({
 				apiKey: config.apiKey,
 				server: config.server,
@@ -106,7 +106,7 @@ var init_rally_client = __esmMin((() => {
 	RallyClientLive = Layer.effect(RallyClient, Effect.gen(function* () {
 		const config = getRallyConfig();
 		if (!config) return yield* Effect.fail(new TrackerNotConfigured({ tracker: "rally" }));
-		const { RallyTracker } = yield* Effect.promise(() => import("./rally-zhhtXuDP.js"));
+		const { RallyTracker } = yield* Effect.promise(() => import("./rally-YDjU513q.js"));
 		const tracker = new RallyTracker({
 			apiKey: config.apiKey,
 			server: config.server,
@@ -158,4 +158,4 @@ var init_rally_client = __esmMin((() => {
 //#endregion
 export { init_rally_client as i, RallyClientLive as n, RallyClientOptionalLive as r, RallyClient as t };
 
-//# sourceMappingURL=rally-client-lc-nokqr.js.map
+//# sourceMappingURL=rally-client-Bfqm6XI4.js.map

package/server/{rally-client-sgtVqzNU.js → rally-client-CxsA6ExK.js}

@@ -1,3 +1,3 @@
-import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-lc-nokqr.js";
+import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-Bfqm6XI4.js";
 init_rally_client();
 export { RallyClient, RallyClientLive, RallyClientOptionalLive };

package/server/{reap-terminal-sessions-7KeHv1R1.js → reap-terminal-sessions-BQ23nriz.js}

@@ -1,4 +1,4 @@
-import { r as isRoleTerminal } from "./review-status-source-CxuEjLGg.js";
-import { i as selectAwaitingTestWorkSessions, o as selectMergedWorkSessions, s as selectNonMergedTerminalAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-BtHPo6Xc.js";
+import { r as isRoleTerminal } from "./review-status-source-CpvJnvnQ.js";
+import { i as selectAwaitingTestWorkSessions, o as selectMergedWorkSessions, s as selectNonMergedTerminalAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-CvmwaqKv.js";
 init_reap_terminal_sessions();
 export { isRoleTerminal, selectAwaitingTestWorkSessions, selectMergedWorkSessions, selectNonMergedTerminalAdvancingSessions };

package/server/{reap-terminal-sessions-BtHPo6Xc.js → reap-terminal-sessions-CvmwaqKv.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { n as init_review_status_source, r as isRoleTerminal, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CxuEjLGg.js";
+import { n as init_review_status_source, r as isRoleTerminal, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CpvJnvnQ.js";
 //#region ../../lib/cloister/reap-terminal-sessions.ts
 /**
 * Of the alive sessions, the ones belonging to `issueId`'s advancing `role`.
@@ -128,4 +128,4 @@ var init_reap_terminal_sessions = __esmMin((() => {
 //#endregion
 export { selectMergedAdvancingSessions as a, sessionsToReapForRole as c, selectAwaitingTestWorkSessions as i, isAwaitingTestReapable as n, selectMergedWorkSessions as o, isWorkReapable as r, selectNonMergedTerminalAdvancingSessions as s, init_reap_terminal_sessions as t };
 
-//# sourceMappingURL=reap-terminal-sessions-BtHPo6Xc.js.map
+//# sourceMappingURL=reap-terminal-sessions-CvmwaqKv.js.map

package/server/{rebuild-stack-lwtsW0GO.js → rebuild-stack-0EEYReVZ.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Tn as init_projects, yn as getProjectSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { d as init_docker_stats, f as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot, o as hasIssueToken, r as composeProjectNameForWorkspace, s as init_stack_health } from "./stack-health-DxSdG9cW.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-CDJk4pIp.js";
-import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-Df2uXPsQ.js";
-import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-DNi-ono3.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync, zn as getProjectSync } from "./config-yaml-CmOPzmBb.js";
+import { d as init_docker_stats, f as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot, o as hasIssueToken, r as composeProjectNameForWorkspace, s as init_stack_health } from "./stack-health-DqSqx0zv.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-B6KJkmHZ.js";
+import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-bNX6jKkb.js";
+import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-B057YA81.js";
 import { dirname, join } from "node:path";
 import { Effect } from "effect";
 import { existsSync, rmSync } from "node:fs";
@@ -100,10 +100,19 @@ var init_rebuild_stack = __esmMin((() => {
 			error: `Workspace not found: ${workspacePath}`
 		});
 		return Effect.gen(function* () {
-			if (yield* Effect.promise(() => isIssueClosed(issueId))) return {
+			const closed = yield* Effect.promise(() => isIssueClosed(issueId));
+			const reviewStatus = closed ? null : yield* Effect.promise(async () => {
+				const { resolveCanonicalReviewStatus } = await import("./review-status-source-ylw5QZUR.js");
+				return resolveCanonicalReviewStatus(issueId);
+			});
+			if (closed || reviewStatus?.status?.mergeStatus === "merged") return {
 				success: false,
 				error: "Issue is terminal (closed/merged) — skipping stack rebuild"
 			};
+			if (!reviewStatus?.available) return {
+				success: false,
+				error: "Issue terminal status is unavailable — skipping stack rebuild"
+			};
 			const composeProjectName = composeProjectNameForWorkspace(workspacePath, normalizedIssueId);
 			const existingComposeFile = findDevcontainerComposeFile(workspacePath);
 			if (existingComposeFile) {
@@ -175,4 +184,4 @@ var init_rebuild_stack = __esmMin((() => {
 //#endregion
 export { rebuildWorkspaceStack as n, removeStaleIssueContainers as r, init_rebuild_stack as t };
 
-//# sourceMappingURL=rebuild-stack-lwtsW0GO.js.map
+//# sourceMappingURL=rebuild-stack-0EEYReVZ.js.map

package/server/{rebuild-stack-CFvcBHsS.js → rebuild-stack-qeRqHZxH.js}

@@ -1,4 +1,4 @@
-import "./stack-health-DxSdG9cW.js";
-import { n as rebuildWorkspaceStack, t as init_rebuild_stack } from "./rebuild-stack-lwtsW0GO.js";
+import "./stack-health-DqSqx0zv.js";
+import { n as rebuildWorkspaceStack, t as init_rebuild_stack } from "./rebuild-stack-0EEYReVZ.js";
 init_rebuild_stack();
 export { rebuildWorkspaceStack };

package/server/{reconstruct-cache-C3Ui7ojV.js → reconstruct-cache-BbYFsqLa.js}

@@ -1,8 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Ft as resolveProjectForIssue, Ot as init_record, Tn as init_projects, jt as readIssueRecord, kn as listProjectsSync } from "./config-yaml-DySPNmKN.js";
-import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-EbI0zCJl.js";
-import { b as init_agents$1, i as listRunningAgents } from "./queries-CjNIf-Ub.js";
-import { a as gatherProjectLensSignalsForProjects, i as gatherProjectLensSignals, n as init_pipeline_membership, o as init_pipeline_membership_gather, r as resolvePipelineMembership } from "./pipeline-membership-mY3GprlK.js";
+import { Gn as init_projects, Lt as readIssueRecord, Pt as init_record, Vt as resolveProjectForIssue, Yn as listProjectsSync } from "./config-yaml-CmOPzmBb.js";
+import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-C5rWYhb6.js";
+import { b as init_agents$1, i as listRunningAgents } from "./queries-DHJm7bTd.js";
+import { a as gatherProjectLensSignals, o as gatherProjectLensSignalsForProjects, s as init_pipeline_membership_gather } from "./pipeline-membership-gather-CET40frr.js";
+import { n as init_pipeline_membership, r as resolvePipelineMembership } from "./pipeline-membership-CrAPLYtf.js";
 import { Effect } from "effect";
 //#region ../../lib/reconstruct/enumerate-in-flight.ts
 async function enumerateInFlightIssuesFromSources(projects, gather = gatherProjectLensSignals) {
@@ -138,7 +139,7 @@ async function loadInFlightIssueIds(projects) {
 	return enumerateInFlightIssuesFromSources(projects);
 }
 async function fetchPrState(issueId) {
-	const { fetchIssuePullRequest } = await import("./pull-requests-7N8WKseP.js");
+	const { fetchIssuePullRequest } = await import("./pull-requests-Cv7LxzUN.js");
 	const result = await fetchIssuePullRequest(issueId);
 	if (!result.pr) return {
 		hasPr: false,
@@ -269,4 +270,4 @@ __esmMin((() => {
 }))();
 export { reconstructCache, reconstructCacheAuto };
 
-//# sourceMappingURL=reconstruct-cache-C3Ui7ojV.js.map
+//# sourceMappingURL=reconstruct-cache-BbYFsqLa.js.map

package/server/record-CtroO946.js

@@ -0,0 +1,3 @@
+import { $t as writeRecordResumePointSync, At as getIssueRecordPath, Bt as readRecordContinueViewSync, Ct as buildOwnUri, Dt as ensureIssueRecord, Et as clearRecordFeedbackSync, Ft as markRecordPipelineClosedOutSync, Gt as writeCloseOutDodGateSync, Ht as writeAgentHarnessModel, It as queueIssueRecordCommit, Jt as writeRecordDecisions, Kt as writeIssueRecordForWorkspaceSync, Lt as readIssueRecord, Mt as getIssueWorkspacePath, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Qt as writeRecordResumePoint, Rt as readIssueRecordForWorkspaceSync, St as appendSessionEntrySync, Tt as clearIssueOwner, Ut as writeAgentHarnessModelSync, Vt as resolveProjectForIssue, Wt as writeCloseOutDodGate, Xt as writeRecordHazards, Yt as writeRecordDecisionsSync, Zt as writeRecordHazardsSync, _t as RECORD_DIRNAME, an as writeStatusOverridesSync, bt as appendFeedbackEntrySync, en as writeRecordScopeDriftSync, in as writeStatusOverrideSync, jt as getIssueRecordPathForWorkspace, kt as getIssueRecordBasePath, nn as writeRecordTieredExecutionOverrideSync, qt as writeIssueRecordSync, rn as writeStatusOverride, tn as writeRecordTieredExecutionOverride, vt as RECORD_SCHEMA_VERSION, wt as claimIssueOwner, xt as appendSessionEntry, yt as appendFeedbackEntry, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
+init_record();
+export { RECORD_DIRNAME, RECORD_SCHEMA_VERSION, appendFeedbackEntry, appendFeedbackEntrySync, appendSessionEntry, appendSessionEntrySync, buildOwnUri, claimIssueOwner, clearIssueOwner, clearRecordFeedbackSync, ensureIssueRecord, ensureIssueRecordSync, getIssueRecordBasePath, getIssueRecordPath, getIssueRecordPathForWorkspace, getIssueWorkspacePath, getProjectConfigFromWorkspacePath, markRecordPipelineClosedOutSync, queueIssueRecordCommit, readIssueRecord, readIssueRecordForWorkspaceSync, readIssueRecordSync, readRecordContinueViewSync, resolveProjectForIssue, writeAgentHarnessModel, writeAgentHarnessModelSync, writeCloseOutDodGate, writeCloseOutDodGateSync, writeIssueRecordForWorkspaceSync, writeIssueRecordSync, writeRecordDecisions, writeRecordDecisionsSync, writeRecordHazards, writeRecordHazardsSync, writeRecordResumePoint, writeRecordResumePointSync, writeRecordScopeDriftSync, writeRecordTieredExecutionOverride, writeRecordTieredExecutionOverrideSync, writeStatusOverride, writeStatusOverrideSync, writeStatusOverridesSync };

package/server/record-update-DH6dLJID.js

@@ -0,0 +1,3 @@
+import { i as updateIssueRecord, r as init_record_update } from "./record-update-Z0QCxmMp.js";
+init_record_update();
+export { updateIssueRecord };

package/server/{record-update-dE1Aw83j.js → record-update-Z0QCxmMp.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { At as queueIssueRecordCommit, Br as getOverdeckHome, Dt as getProjectConfigFromWorkspacePath, Ft as resolveProjectForIssue, Ht as flushAutoCommits, Nt as readIssueRecordSync, Ot as init_record, Rt as writeIssueRecordSync, St as ensureIssueRecordSync, Tn as init_projects, Ut as init_auto_commit, Vr as init_paths, kn as listProjectsSync, nn as init_state_read_home, rn as resolveStateReadHomeSync, tn as STATE_BRANCH, wt as getIssueRecordPath } from "./config-yaml-DySPNmKN.js";
+import { At as getIssueRecordPath, Cn as resolveStateReadHomeSync, Gn as init_projects, It as queueIssueRecordCommit, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Sn as init_state_read_home, Vt as resolveProjectForIssue, Yn as listProjectsSync, ci as init_paths, cn as flushAutoCommits, ln as init_auto_commit, qt as writeIssueRecordSync, si as getOverdeckHome, xn as STATE_BRANCH, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
 import { dirname, join, relative } from "node:path";
 import { Effect } from "effect";
 import { hostname } from "node:os";
@@ -131,21 +131,73 @@ var init_fs_lock = __esmMin((() => {
 //#endregion
 //#region ../../lib/pan-dir/record-update.ts
 /** The single locked read-modify-write door for per-issue records. */
+function recordDurabilityBudgetMs() {
+	const parsed = Number(process.env.OVERDECK_RECORD_DURABILITY_BUDGET_MS);
+	return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_RECORD_DURABILITY_BUDGET_MS;
+}
+async function withRecordDurabilityDeadline(issueId, promise, deadlineMs, budgetMs, onTimeout) {
+	const remaining = deadlineMs - Date.now();
+	if (remaining <= 0) {
+		await onTimeout?.().catch(() => void 0);
+		throw new RecordDurabilityTimeoutError(issueId, budgetMs);
+	}
+	return await new Promise((resolve, reject) => {
+		let settled = false;
+		let timingOut = false;
+		const timer = setTimeout(() => {
+			timingOut = true;
+			(onTimeout?.() ?? Promise.resolve()).catch(() => void 0).finally(() => {
+				settled = true;
+				reject(new RecordDurabilityTimeoutError(issueId, budgetMs));
+			});
+		}, remaining);
+		timer.unref?.();
+		promise.then((value) => {
+			if (settled || timingOut) return;
+			settled = true;
+			clearTimeout(timer);
+			resolve(value);
+		}, (error) => {
+			if (settled || timingOut) return;
+			settled = true;
+			clearTimeout(timer);
+			reject(error);
+		});
+	});
+}
 function updateIssueRecordForWorkspace(workspacePath, issueId, mutator, options = {}) {
 	return updateIssueRecord(resolveProjectForIssue(issueId) ?? getProjectConfigFromWorkspacePath(workspacePath), issueId, mutator, options);
 }
-async function git(gitRoot, args) {
+/**
+* Clear the terminal close-out marker so a reopened issue re-enters the pipeline (sync).
+* Ordinary status writes deliberately preserve closedOut (projectPipeline in records.ts),
+* so reopen needs this explicit inverse of markRecordPipelineClosedOutSync in record.ts
+* (MIN-850, 2026-07-24).
+*/
+function clearRecordPipelineClosedOutSync(project, issueId) {
+	const record = ensureIssueRecordSync(project, issueId);
+	if (!record.pipeline.closedOut && !record.pipeline.closedOutAt) return;
+	record.pipeline.closedOut = void 0;
+	record.pipeline.closedOutAt = void 0;
+	record.pipeline.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+	queueIssueRecordCommit(project, issueId, writeIssueRecordSync(project, issueId, record));
+}
+async function git(gitRoot, args, options = {}) {
 	return (await execFileAsync("git", args, {
 		cwd: gitRoot,
 		encoding: "utf8",
-		timeout: 3e4,
+		timeout: options.timeoutMs ?? 3e4,
 		maxBuffer: 16 * 1024 * 1024,
 		env: {
 			...process.env,
 			HUSKY: "0"
-		}
+		},
+		...options.signal ? { signal: options.signal } : {}
 	})).stdout.trim();
 }
+function throwIfDurabilityAborted(signal) {
+	if (signal?.aborted) throw new Error("Record durability operation aborted at the deadline");
+}
 function gitFailureMessage(error) {
 	if (error && typeof error === "object") {
 		const failure = error;
@@ -156,18 +208,21 @@ function gitFailureMessage(error) {
 function isRemoteRefRaceError(message) {
 	return /non-fast-forward|fetch first|stale info|cannot lock ref.*expected|failed to update ref/i.test(message);
 }
-async function abortRebase(gitRoot) {
+async function abortRebase(gitRoot, options = {}) {
 	try {
-		await git(gitRoot, ["rebase", "--abort"]);
+		await git(gitRoot, ["rebase", "--abort"], {
+			timeoutMs: 5e3,
+			...options
+		});
 	} catch {}
 }
-async function replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath) {
+async function replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath, signal) {
 	const relativeRecordPath = relative(gitRoot, recordPath).replace(/\\/g, "/");
 	const conflicts = (await git(gitRoot, [
 		"diff",
 		"--name-only",
 		"--diff-filter=U"
-	])).split("\n").map((path) => path.trim()).filter(Boolean);
+	], { signal })).split("\n").map((path) => path.trim()).filter(Boolean);
 	if (conflicts.length !== 1 || conflicts[0] !== relativeRecordPath) throw new Error(`state rebase conflicted outside ${relativeRecordPath}: ${conflicts.join(", ") || "unknown conflict"}`);
 	await git(gitRoot, [
 		"restore",
@@ -175,43 +230,49 @@ async function replayConflictedRecord(project, issueId, mutator, gitRoot, record
 		"--worktree",
 		"--",
 		relativeRecordPath
-	]);
+	], { signal });
 	const remoteRecord = readIssueRecordSync(project, issueId);
 	if (!remoteRecord) throw new Error(`Remote ${issueId} state record is unreadable`);
-	writeIssueRecordSync(project, issueId, await mutator(remoteRecord) ?? remoteRecord);
+	const result = await mutator(remoteRecord);
+	throwIfDurabilityAborted(signal);
+	writeIssueRecordSync(project, issueId, result ?? remoteRecord);
 	await git(gitRoot, [
 		"add",
 		"--",
 		relativeRecordPath
-	]);
+	], { signal });
+	throwIfDurabilityAborted(signal);
 	await git(gitRoot, [
 		"-c",
 		"core.editor=true",
 		"rebase",
 		"--continue"
-	]);
+	], { signal });
 }
-async function restoreRetryableRecord(project, issueId, original, recordPath) {
+async function restoreRetryableRecord(project, issueId, original, recordPath, signal) {
 	const stateHome = resolveStateReadHomeSync(project);
 	const gitRoot = stateHome.root;
 	const relativeRecordPath = relative(gitRoot, recordPath).replace(/\\/g, "/");
-	await abortRebase(gitRoot);
+	await abortRebase(gitRoot, { signal });
 	let restored = structuredClone(original);
-	const branch = stateHome.migrated ? STATE_BRANCH : await git(gitRoot, ["branch", "--show-current"]);
+	const branch = stateHome.migrated ? STATE_BRANCH : await git(gitRoot, ["branch", "--show-current"], { signal });
 	try {
 		await git(gitRoot, [
 			"fetch",
 			"origin",
 			branch
-		]);
-		restored = JSON.parse(await git(gitRoot, ["show", `origin/${branch}:${relativeRecordPath}`]));
-	} catch {}
+		], { signal });
+		restored = JSON.parse(await git(gitRoot, ["show", `origin/${branch}:${relativeRecordPath}`], { signal }));
+	} catch (fetchError) {
+		throwIfDurabilityAborted(signal);
+	}
+	throwIfDurabilityAborted(signal);
 	writeIssueRecordSync(project, issueId, restored);
 	await git(gitRoot, [
 		"add",
 		"--",
 		relativeRecordPath
-	]);
+	], { signal });
 	try {
 		await git(gitRoot, [
 			"diff",
@@ -219,32 +280,36 @@ async function restoreRetryableRecord(project, issueId, original, recordPath) {
 			"--quiet",
 			"--",
 			relativeRecordPath
-		]);
+		], { signal });
 		return;
-	} catch {}
+	} catch (diffError) {
+		throwIfDurabilityAborted(signal);
+	}
 	await git(gitRoot, [
 		"commit",
 		"-m",
 		`chore(records): restore ${issueId} after failed state push`,
 		"--",
 		relativeRecordPath
-	]);
+	], { signal });
 }
-async function reconcileStatePush(project, issueId, mutator, recordPath) {
+async function reconcileStatePush(project, issueId, mutator, recordPath, signal) {
 	const gitRoot = resolveStateReadHomeSync(project).root;
 	for (let attempt = 0; attempt < MAX_STATE_PUSH_RECONCILIATIONS; attempt += 1) {
+		throwIfDurabilityAborted(signal);
 		await git(gitRoot, [
 			"fetch",
 			"origin",
 			STATE_BRANCH
-		]);
+		], { signal });
 		try {
-			await git(gitRoot, ["rebase", `origin/${STATE_BRANCH}`]);
+			await git(gitRoot, ["rebase", `origin/${STATE_BRANCH}`], { signal });
 		} catch (error) {
+			throwIfDurabilityAborted(signal);
 			try {
-				await replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath);
+				await replayConflictedRecord(project, issueId, mutator, gitRoot, recordPath, signal);
 			} catch (replayError) {
-				await abortRebase(gitRoot);
+				await abortRebase(gitRoot, { signal });
 				throw new Error(`Failed to reconcile ${issueId} state after push race: ${gitFailureMessage(replayError)}`, { cause: error });
 			}
 		}
@@ -253,11 +318,12 @@ async function reconcileStatePush(project, issueId, mutator, recordPath) {
 				"push",
 				"origin",
 				STATE_BRANCH
-			]);
+			], { signal });
 			const record = readIssueRecordSync(project, issueId);
 			if (!record) throw new Error(`Reconciled ${issueId} state record is unreadable`);
 			return record;
 		} catch (error) {
+			throwIfDurabilityAborted(signal);
 			const message = gitFailureMessage(error);
 			if (!isRemoteRefRaceError(message)) throw new Error(`Failed to push reconciled ${issueId} state: ${message}`, { cause: error });
 		}
@@ -276,26 +342,43 @@ async function updateIssueRecord(project, issueId, mutator, options = {}) {
 		const next = await mutator(current) ?? current;
 		const path = writeIssueRecordSync(project, normalizedIssueId, next);
 		if (options.autoCommit === false) return readIssueRecordSync(project, normalizedIssueId) ?? next;
+		const budgetMs = recordDurabilityBudgetMs();
+		const deadlineMs = Date.now() + budgetMs;
 		try {
 			const commitRoot = queueIssueRecordCommit(project, normalizedIssueId, path);
-			const flushed = await Effect.runPromise(flushAutoCommits(commitRoot));
+			const flushed = await withRecordDurabilityDeadline(normalizedIssueId, Effect.runPromise(flushAutoCommits(commitRoot)), deadlineMs, budgetMs);
 			if (flushed.pushed === false) {
-				if (resolveStateReadHomeSync(project).migrated && isRemoteRefRaceError(flushed.reason ?? "")) return await reconcileStatePush(project, normalizedIssueId, mutator, path);
+				if (resolveStateReadHomeSync(project).migrated && isRemoteRefRaceError(flushed.reason ?? "")) {
+					const reconcileAbort = new AbortController();
+					const reconcilePromise = reconcileStatePush(project, normalizedIssueId, mutator, path, reconcileAbort.signal);
+					return await withRecordDurabilityDeadline(normalizedIssueId, reconcilePromise, deadlineMs, budgetMs, async () => {
+						reconcileAbort.abort();
+						await reconcilePromise.catch(() => void 0);
+						await abortRebase(resolveStateReadHomeSync(project).root);
+					});
+				}
 				throw new Error(`Failed to push ${normalizedIssueId} state: ${flushed.reason ?? "unknown push failure"}`);
 			}
 			if (!flushed.committed && !["no diff", "no pending"].includes(flushed.reason ?? "")) throw new Error(`Failed to commit ${normalizedIssueId} state: ${flushed.reason ?? "unknown commit failure"}`);
 			return readIssueRecordSync(project, normalizedIssueId) ?? next;
 		} catch (error) {
+			if (error instanceof RecordDurabilityTimeoutError) throw error;
 			try {
-				await restoreRetryableRecord(project, normalizedIssueId, original, path);
+				const restoreAbort = new AbortController();
+				const restorePromise = restoreRetryableRecord(project, normalizedIssueId, original, path, restoreAbort.signal);
+				await withRecordDurabilityDeadline(normalizedIssueId, restorePromise, deadlineMs, budgetMs, async () => {
+					restoreAbort.abort();
+					await restorePromise.catch(() => void 0);
+				});
 			} catch (restoreError) {
+				if (restoreError instanceof RecordDurabilityTimeoutError) throw restoreError;
 				throw new Error(`Failed to persist ${normalizedIssueId} state and restore retryability: ${gitFailureMessage(restoreError)}`, { cause: error });
 			}
 			throw error;
 		}
 	});
 }
-var execFileAsync, MAX_STATE_PUSH_RECONCILIATIONS;
+var execFileAsync, MAX_STATE_PUSH_RECONCILIATIONS, DEFAULT_RECORD_DURABILITY_BUDGET_MS, RecordDurabilityTimeoutError;
 var init_record_update = __esmMin((() => {
 	init_state_read_home();
 	init_auto_commit();
@@ -303,8 +386,15 @@ var init_record_update = __esmMin((() => {
 	init_record();
 	execFileAsync = promisify(execFile);
 	MAX_STATE_PUSH_RECONCILIATIONS = 3;
+	DEFAULT_RECORD_DURABILITY_BUDGET_MS = 3e4;
+	RecordDurabilityTimeoutError = class extends Error {
+		constructor(issueId, budgetMs) {
+			super(`Durability wait for ${issueId} state exceeded ${budgetMs}ms; releasing the record lock. The mutation remains in the local record and the flush continues in the background; callers with a fallback (e.g. the review-verdict fallback and drain) reconcile through it, other writers must retry the write.`);
+			this.name = "RecordDurabilityTimeoutError";
+		}
+	};
 }));
 //#endregion
-export { isPidDead as a, init_fs_lock as i, updateIssueRecord as n, updateIssueRecordForWorkspace as r, init_record_update as t };
+export { updateIssueRecordForWorkspace as a, updateIssueRecord as i, clearRecordPipelineClosedOutSync as n, init_fs_lock as o, init_record_update as r, isPidDead as s, RecordDurabilityTimeoutError as t };
 
-//# sourceMappingURL=record-update-dE1Aw83j.js.map
+//# sourceMappingURL=record-update-Z0QCxmMp.js.map

package/server/{recovery-trip-BvRWfUXM.js → recovery-trip-eJe26h-f.js}

@@ -1,4 +1,4 @@
-import { r as updateIssueRecordForWorkspace, t as init_record_update } from "./record-update-dE1Aw83j.js";
+import { a as updateIssueRecordForWorkspace, r as init_record_update } from "./record-update-Z0QCxmMp.js";
 //#region ../../lib/cloister/recovery-trip.ts
 init_record_update();
 async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligationGeneration, threshold = 25, now = /* @__PURE__ */ new Date()) {
@@ -41,4 +41,4 @@ async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligat
 //#endregion
 export { recordRecoveryFailure as t };
 
-//# sourceMappingURL=recovery-trip-BvRWfUXM.js.map
+//# sourceMappingURL=recovery-trip-eJe26h-f.js.map

package/server/{release-engine-Cx48W7z8.js → release-engine-lPUp-MTd.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Tn as init_projects, fn as findProjectByPathSync, yn as getProjectSync } from "./config-yaml-DySPNmKN.js";
-import { b as setReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-DJ8-UErs.js";
-import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-CQfuN9-v.js";
+import { Gn as init_projects, Mn as findProjectByPathSync, zn as getProjectSync } from "./config-yaml-CmOPzmBb.js";
+import { S as setReviewStatusSync, f as init_review_status } from "./review-status-yljtTd-q.js";
+import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-DH7ot3yz.js";
+import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-BwGeyZKX.js";
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
 //#region ../../lib/release/release-plan.ts
@@ -303,4 +303,4 @@ __esmMin((() => {
 }))();
 export { runRelease };
 
-//# sourceMappingURL=release-engine-Cx48W7z8.js.map
+//# sourceMappingURL=release-engine-lPUp-MTd.js.map

package/server/{release-set-CQfuN9-v.js → release-set-BwGeyZKX.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { $n as resolveIssueIdSync, Yn as init_issue_id } from "./config-yaml-DySPNmKN.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
+import { br as resolveIssueIdSync, gr as init_issue_id } from "./config-yaml-CmOPzmBb.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BjuxvjdS.js";
 import "effect";
 //#region ../../lib/overdeck/release-sync.ts
 function isoFromMillis(value) {
@@ -122,4 +122,4 @@ var init_release_set = __esmMin((() => {
 //#endregion
 export { withComponentStateSync as i, init_release_set as n, upsertReleaseSetSync as r, getReleaseSetSync as t };
 
-//# sourceMappingURL=release-set-CQfuN9-v.js.map
+//# sourceMappingURL=release-set-BwGeyZKX.js.map

package/server/{remote-C_2hasl7.js → remote-BCd02Es1.js}

@@ -1,5 +1,5 @@
-import "./workspace-metadata-_WygnyoX.js";
-import { C as init_fly_provider, S as createFlyProvider, s as init_remote_agents } from "./remote-agents-By1ige5O.js";
+import "./workspace-metadata-CQv00QwK.js";
+import { C as createFlyProvider, s as init_remote_agents, w as init_fly_provider } from "./remote-agents-C_VxssLU.js";
 import { Effect } from "effect";
 //#region ../../lib/remote/index.ts
 init_fly_provider();
@@ -52,4 +52,4 @@ function createFlyProviderFromConfig(remoteConfig, tierOverride) {
 //#endregion
 export { getRemoteProvider as n, isRemoteAvailable as r, createFlyProviderFromConfig as t };
 
-//# sourceMappingURL=remote-C_2hasl7.js.map
+//# sourceMappingURL=remote-BCd02Es1.js.map

package/server/{remote-ChgimyYa.js → remote-CVGUhXMV.js}

@@ -1,4 +1,4 @@
-import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-_WygnyoX.js";
-import { S as createFlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as FlyProvider, y as spawnRemoteAgent } from "./remote-agents-By1ige5O.js";
-import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-C_2hasl7.js";
+import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-CQv00QwK.js";
+import { C as createFlyProvider, S as FlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-C_VxssLU.js";
+import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-BCd02Es1.js";
 export { FlyProvider, WORKSPACES_DIR, checkRemoteSpendCap, createFlyProvider, createFlyProviderFromConfig, deleteWorkspaceMetadataSync, findRemoteWorkspaceMetadataSync, getRemoteAgentOutput, getRemoteProvider, isRemoteAgentRunning, isRemoteAvailable, killRemoteAgent, listRemoteAgents, listWorkspaceMetadataSync, loadRemoteAgentState, loadWorkspaceMetadataSync, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveWorkspaceMetadataSync, sendToRemoteAgent, spawnRemoteAgent };

package/server/{remote-agents-CA3Ihlxj.js → remote-agents-C1bssi41.js}

@@ -1,3 +1,3 @@
-import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-By1ige5O.js";
+import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as sendToRemoteAgentKeyed, y as spawnRemoteAgent } from "./remote-agents-C_VxssLU.js";
 init_remote_agents();
-export { assertFlyRemoteStateSupported, checkRemoteDurabilityPreflight, checkRemoteSpendCap, generateEphemeralWatchdogScript, generatePushDaemonScript, getRemoteAgentOutput, installEphemeralWatchdog, installPushDaemon, isRemoteAgentRunning, killRemoteAgent, listActiveRemoteAgentStates, listRemoteAgents, loadRemoteAgentState, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveRemoteAgentState, sendToRemoteAgent, spawnRemoteAgent, writeRemoteFile };
+export { assertFlyRemoteStateSupported, checkRemoteDurabilityPreflight, checkRemoteSpendCap, generateEphemeralWatchdogScript, generatePushDaemonScript, getRemoteAgentOutput, installEphemeralWatchdog, installPushDaemon, isRemoteAgentRunning, killRemoteAgent, listActiveRemoteAgentStates, listRemoteAgents, loadRemoteAgentState, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveRemoteAgentState, sendToRemoteAgent, sendToRemoteAgentKeyed, spawnRemoteAgent, writeRemoteFile };