@overdeck/desktop 0.45.24 → 0.47.0

package/server/github-pr-lookup-DAcVeRLK.js

@@ -0,0 +1,58 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CmNk0zLU.js";
+import { Effect } from "effect";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+//#region ../../lib/github-pr-lookup.ts
+function githubPrLookupSource() {
+	return isGitHubAppConfigured() ? "GitHub App PR lookup" : "gh pr list";
+}
+async function lookupPullRequestForBranch(owner, repo, branchName) {
+	if (isGitHubAppConfigured()) {
+		const pr = (await Effect.runPromise(listPullRequestsForHead(owner, repo, branchName, "all")))[0];
+		if (!pr) return null;
+		return {
+			number: pr.number,
+			state: pr.merged ? "MERGED" : pr.state.toUpperCase(),
+			mergedAt: pr.mergedAt
+		};
+	}
+	const { stdout } = await execFileAsync("gh", [
+		"pr",
+		"list",
+		"--repo",
+		`${owner}/${repo}`,
+		"--head",
+		branchName,
+		"--state",
+		"all",
+		"--json",
+		"number,state,mergedAt",
+		"--limit",
+		"1"
+	], {
+		encoding: "utf-8",
+		timeout: 15e3
+	});
+	const trimmed = stdout.trim();
+	if (!trimmed) return null;
+	const [pr] = JSON.parse(trimmed);
+	if (!pr || !Number.isFinite(pr.number)) return null;
+	return {
+		number: pr.number,
+		state: typeof pr.state === "string" ? pr.state.toUpperCase() : "CLOSED",
+		mergedAt: typeof pr.mergedAt === "string" ? pr.mergedAt : null
+	};
+}
+async function lookupPullRequestNumberForBranch(owner, repo, branchName) {
+	return (await lookupPullRequestForBranch(owner, repo, branchName))?.number ?? null;
+}
+var execFileAsync;
+var init_github_pr_lookup = __esmMin((() => {
+	init_github_app();
+	execFileAsync = promisify(execFile);
+}));
+//#endregion
+export { lookupPullRequestNumberForBranch as i, init_github_pr_lookup as n, lookupPullRequestForBranch as r, githubPrLookupSource as t };
+
+//# sourceMappingURL=github-pr-lookup-DAcVeRLK.js.map

package/server/{harness-binary-DPUi-Pv8.js → harness-binary-BSpiXaLw.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { f as loadConfigSync, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
+import { f as loadConfigSync, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { constants } from "node:fs";
@@ -129,4 +129,4 @@ var init_harness_binary = __esmMin((() => {
 //#endregion
 export { resolveExecutable as a, prepareHarnessLaunch as i, harnessBinaryName as n, resolveHarnessBinary as o, init_harness_binary as r, configuredHarnessBinaryPath as t };
 
-//# sourceMappingURL=harness-binary-DPUi-Pv8.js.map
+//# sourceMappingURL=harness-binary-BSpiXaLw.js.map

package/server/{harness-resolve-3lNZkyT4.js → harness-resolve-BAJu5MX8.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { A as canUseHarnessSync, H as init_providers, M as init_harness_policy, R as getBuiltInDefaultHarness, V as getProviderForModelSync, f as loadConfigSync, j as canUseModelWithAuthSync, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
-import { n as harnessBinaryName, o as resolveHarnessBinary, r as init_harness_binary, t as configuredHarnessBinaryPath } from "./harness-binary-DPUi-Pv8.js";
+import { A as canUseHarnessSync, H as init_providers, M as init_harness_policy, R as getBuiltInDefaultHarness, V as getProviderForModelSync, f as loadConfigSync, j as canUseModelWithAuthSync, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
+import { n as harnessBinaryName, o as resolveHarnessBinary, r as init_harness_binary, t as configuredHarnessBinaryPath } from "./harness-binary-BSpiXaLw.js";
 //#region ../../lib/harness-resolve.ts
 async function getProviderAuthModeForModel(model) {
-	const { getProviderAuthMode } = await import("./agents-wi9NWzs2.js");
+	const { getProviderAuthMode } = await import("./agents-ePFVoZbu.js");
 	return getProviderAuthMode(model);
 }
 function assertHarnessProviderSupported(harness, provider) {
@@ -72,4 +72,4 @@ var init_harness_resolve = __esmMin((() => {
 //#endregion
 export { resolveHarness as n, init_harness_resolve as t };
 
-//# sourceMappingURL=harness-resolve-3lNZkyT4.js.map
+//# sourceMappingURL=harness-resolve-BAJu5MX8.js.map

package/server/{health-events-BDOHby5Q.js → health-events-2Z6Wa9SM.js}

@@ -1,2 +1,2 @@
-import { n as getLatestHealthEvent, r as writeHealthEvent, t as getHealthHistory } from "./health-events-BBcTYQKU.js";
+import { n as getLatestHealthEvent, r as writeHealthEvent, t as getHealthHistory } from "./health-events-BwX32k8d.js";
 export { getHealthHistory, getLatestHealthEvent, writeHealthEvent };

package/server/{health-events-BBcTYQKU.js → health-events-BwX32k8d.js}

@@ -1,4 +1,4 @@
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BEqFxlJc.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BDQDRopn.js";
 //#region ../../lib/overdeck/health-events.ts
 init_infra();
 function parseMetadata(row) {
@@ -66,4 +66,4 @@ function getHealthHistory(agentId, startTime, endTime) {
 //#endregion
 export { getLatestHealthEvent as n, writeHealthEvent as r, getHealthHistory as t };
 
-//# sourceMappingURL=health-events-BBcTYQKU.js.map
+//# sourceMappingURL=health-events-BwX32k8d.js.map

package/server/{hooks-DPVX1rwQ.js → hooks-D1g1jKLI.js}

@@ -1,3 +1,3 @@
-import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-CKZgXlJb.js";
+import { _ as pushToHookSync, a as collectMail, b as sendMail, c as generateFixedPointPromptSync, d as initHook, f as initHookSync, g as pushToHook, h as popFromHookSync, i as clearHookSync, l as getHook, m as popFromHook, n as checkHookSync, o as collectMailSync, p as init_hooks, r as clearHook, s as generateFixedPointPrompt, t as checkHook, u as getHookSync, v as reorderHookItems, x as sendMailSync, y as reorderHookItemsSync } from "./hooks-DbtbimEf.js";
 init_hooks();
 export { checkHook, checkHookSync, clearHook, clearHookSync, collectMail, collectMailSync, generateFixedPointPrompt, generateFixedPointPromptSync, getHook, getHookSync, initHook, initHookSync, popFromHook, popFromHookSync, pushToHook, pushToHookSync, reorderHookItems, reorderHookItemsSync, sendMail, sendMailSync };

package/server/{hooks-CKZgXlJb.js → hooks-DbtbimEf.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Vr as init_paths, hr as AGENTS_DIR, ir as FsError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Ir as AGENTS_DIR, Tr as FsError, li as init_paths } from "./config-yaml-CxdwhAIA.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -294,4 +294,4 @@ var init_hooks = __esmMin((() => {
 //#endregion
 export { pushToHookSync as _, collectMail as a, sendMail as b, generateFixedPointPromptSync as c, initHook as d, initHookSync as f, pushToHook as g, popFromHookSync as h, clearHookSync as i, getHook as l, popFromHook as m, checkHookSync as n, collectMailSync as o, init_hooks as p, clearHook as r, generateFixedPointPrompt as s, checkHook as t, getHookSync as u, reorderHookItems as v, sendMailSync as x, reorderHookItemsSync as y };
 
-//# sourceMappingURL=hooks-CKZgXlJb.js.map
+//# sourceMappingURL=hooks-DbtbimEf.js.map

package/server/{hume-Cz8igP9E.js → hume-DXNiu6nQ.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CIVWZOQr.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-BdZM4PvZ.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/hume.ts
 /**
@@ -189,4 +189,4 @@ var init_hume = __esmMin((() => {
 //#endregion
 export { init_hume as i, createHumeConfig as n, deleteHumeConfig as r, HumeApiError as t };
 
-//# sourceMappingURL=hume-Cz8igP9E.js.map
+//# sourceMappingURL=hume-DXNiu6nQ.js.map

package/server/hume-VUCNbTgn.js

@@ -0,0 +1,3 @@
+import { i as init_hume, r as deleteHumeConfig } from "./hume-DXNiu6nQ.js";
+init_hume();
+export { deleteHumeConfig };

package/server/{idle-stack-reaper-CuLF0j2H.js → idle-stack-reaper-CRA1e0jr.js}

@@ -1,2 +1,2 @@
-import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-DDIRwxUY.js";
+import { t as handleAgentLifecycleEventForIdleStack } from "./idle-stack-reaper-Cy-dQzW4.js";
 export { handleAgentLifecycleEventForIdleStack };

package/server/{idle-stack-reaper-DDIRwxUY.js → idle-stack-reaper-Cy-dQzW4.js}

@@ -1,5 +1,5 @@
-import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { M as listSessionNames, w as init_tmux } from "./tmux-CfDHob9M.js";
 import { Effect } from "effect";
 import { exec } from "child_process";
 import { promisify } from "util";
@@ -36,8 +36,21 @@ const execAsync = promisify(exec);
 */
 /** Idle duration before a workspace's UI stack is reaped. */
 const GRACE_MS = 600 * 1e3;
+/**
+* Idle duration before a workspace's FULL stack is reaped (all services except
+* the dev attach target). The 10-minute UI tier only matches the overdeck
+* project's own server/frontend naming, so other projects' stacks (postgres,
+* redis, api/JVM, vite) lived forever — 35 myn-feature containers were resident
+* for agents stopped 17h+, and that idle RSS feeds the memory-governor pressure
+* that forces scheduler yields (MIN-858/MIN-891 yielded under it, 2026-07-25).
+*/
+const FULL_STACK_GRACE_MS = 7200 * 1e3;
 /** `overdeck-feature-<issue>-server-1` / `-frontend-1`. */
 const UI_CONTAINER_RE = /^overdeck-feature-([a-z0-9]+-\d+)-(server|frontend)-1$/i;
+/** Compose project names end in `feature-<issue>` by construction (stack-health). */
+const FEATURE_PROJECT_RE = /(?:^|[-_])feature-([a-z0-9]+-\d+)$/i;
+/** Never stop the `dev` container — it is the operator's VS Code attach target. */
+const DEV_CONTAINER_RE = /-dev-1$/i;
 /**
 * issueLower -> epoch ms first observed idle. Module-level so the grace clock
 * survives across patrol cycles within the deacon process. Tolerates transient
@@ -63,13 +76,34 @@ function defaultDeps() {
 			const { stdout } = await execAsync(`docker ps --format '{{.Names}}'`, { timeout: 15e3 });
 			return stdout.split("\n").map((s) => s.trim()).filter(Boolean);
 		},
+		listComposeContainers: async () => {
+			const { stdout } = await execAsync(`docker ps --format '{{.Names}}\t{{json .Labels}}'`, { timeout: 15e3 });
+			const out = [];
+			for (const line of stdout.split("\n")) {
+				const tab = line.indexOf("	");
+				if (tab <= 0) continue;
+				const name = line.slice(0, tab).trim();
+				if (!name) continue;
+				try {
+					const labels = JSON.parse(line.slice(tab + 1));
+					out.push({
+						name,
+						composeProject: labels["com.docker.compose.project"]
+					});
+				} catch {
+					out.push({ name });
+				}
+			}
+			return out;
+		},
 		listSessions: () => Effect.runPromise(listSessionNames()),
 		stopContainers: async (names) => {
 			if (names.length === 0) return;
 			await execAsync(`docker stop ${names.map((n) => `"${n}"`).join(" ")}`, { timeout: 6e4 });
 		},
 		now: () => Date.now(),
-		graceMs: GRACE_MS
+		graceMs: GRACE_MS,
+		fullStackGraceMs: FULL_STACK_GRACE_MS
 	};
 }
 async function reconcileIdleWorkspaceStacks(deps = {}) {
@@ -94,8 +128,10 @@ async function reconcileIdleWorkspaceStacks(deps = {}) {
 		arr.push(name);
 		byIssue.set(issueLower, arr);
 	}
-	for (const issue of [...firstIdleAt.keys()]) if (!byIssue.has(issue)) firstIdleAt.delete(issue);
-	if (byIssue.size === 0) return actions;
+	for (const issue of [...firstIdleAt.keys()]) {
+		if (issue.startsWith("full:")) continue;
+		if (!byIssue.has(issue)) firstIdleAt.delete(issue);
+	}
 	const sessionBlob = (await d.listSessions().catch(() => [])).join("\n").toLowerCase();
 	const nowMs = d.now();
 	for (const [issueLower, names] of byIssue) {
@@ -127,9 +163,66 @@ async function reconcileIdleWorkspaceStacks(deps = {}) {
 			console.warn(`[deacon] idle-stack reaper: failed to stop ${issueLower} UI containers: ${err?.message ?? err}`);
 		}
 	}
+	let composeContainers = [];
+	try {
+		composeContainers = await d.listComposeContainers();
+	} catch {
+		composeContainers = [];
+	}
+	const byProject = /* @__PURE__ */ new Map();
+	for (const c of composeContainers) {
+		if (!c.composeProject) continue;
+		const m = c.composeProject.match(FEATURE_PROJECT_RE);
+		if (!m) continue;
+		const entry = byProject.get(c.composeProject) ?? {
+			issueLower: m[1].toLowerCase(),
+			names: []
+		};
+		entry.names.push(c.name);
+		byProject.set(c.composeProject, entry);
+	}
+	for (const key of [...firstIdleAt.keys()]) {
+		if (!key.startsWith("full:")) continue;
+		if (!byProject.has(key.slice(5))) firstIdleAt.delete(key);
+	}
+	for (const [project, { issueLower, names }] of byProject) {
+		const clockKey = `full:${project}`;
+		if (sessionBlob.includes(issueLower)) {
+			firstIdleAt.delete(clockKey);
+			continue;
+		}
+		const since = firstIdleAt.get(clockKey);
+		if (since === void 0) {
+			firstIdleAt.set(clockKey, nowMs);
+			continue;
+		}
+		if (nowMs - since < d.fullStackGraceMs) continue;
+		const targets = names.filter((n) => !DEV_CONTAINER_RE.test(n));
+		if (targets.length === 0) {
+			firstIdleAt.delete(clockKey);
+			continue;
+		}
+		try {
+			await d.stopContainers(targets);
+			firstIdleAt.delete(clockKey);
+			const issueId = issueLower.toUpperCase();
+			const idleMin = Math.round((nowMs - since) / 6e4);
+			const action = `Reaped idle workspace stack for ${issueId} — stopped ${targets.length}/${names.length} container(s) in ${project} after ${idleMin}m idle (no agent, no tmux)`;
+			actions.push(action);
+			console.log(`[deacon] ${action}`);
+			emitActivityEntrySync({
+				source: "cloister",
+				level: "info",
+				issueId,
+				message: `[deacon] reaped idle workspace stack for ${issueId} — ${targets.length} container(s) stopped, dev attach target preserved`
+			});
+		} catch (err) {
+			console.warn(`[deacon] idle-stack reaper: failed to stop ${project} containers: ${err?.message ?? err}`);
+		}
+	}
 	return actions;
 }
 //#endregion
 export { reconcileIdleWorkspaceStacks as n, handleAgentLifecycleEventForIdleStack as t };
 
-//# sourceMappingURL=idle-stack-reaper-DDIRwxUY.js.map
+//# sourceMappingURL=idle-stack-reaper-Cy-dQzW4.js.map

package/server/in-flight-guard-D-sSkADM.js

@@ -0,0 +1,45 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+//#region ../../lib/cloister/in-flight-guard.ts
+function createPromiseCoalescer() {
+	const inFlight = /* @__PURE__ */ new Map();
+	return {
+		run(key, task) {
+			const existing = inFlight.get(key);
+			if (existing) return existing;
+			const p = task();
+			inFlight.set(key, p);
+			p.catch(() => {}).finally(() => inFlight.delete(key));
+			return p;
+		},
+		isInFlight(key) {
+			return inFlight.has(key);
+		}
+	};
+}
+function createInFlightGuard() {
+	const inFlight = /* @__PURE__ */ new Set();
+	return {
+		run(key, task, onError) {
+			if (inFlight.has(key)) return false;
+			inFlight.add(key);
+			(async () => {
+				try {
+					await task();
+				} catch (err) {
+					onError?.(err);
+				} finally {
+					inFlight.delete(key);
+				}
+			})();
+			return true;
+		},
+		isInFlight(key) {
+			return inFlight.has(key);
+		}
+	};
+}
+var init_in_flight_guard = __esmMin((() => {}));
+//#endregion
+export { createPromiseCoalescer as n, init_in_flight_guard as r, createInFlightGuard as t };
+
+//# sourceMappingURL=in-flight-guard-D-sSkADM.js.map

package/server/{infra-BEqFxlJc.js → infra-BDQDRopn.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Nt as readIssueRecordSync, Ot as init_record, Ur as packageRoot, Vr as init_paths$1, wt as getIssueRecordPath } from "./config-yaml-DySPNmKN.js";
+import { At as getIssueRecordPath, Pt as init_record, ci as getOverdeckHome, di as packageRoot, li as init_paths$1, zt as readIssueRecordSync } from "./config-yaml-CxdwhAIA.js";
 import { n as openDatabase, t as init_driver$1 } from "./driver-CKVGi51s.js";
-import { n as updateIssueRecord, t as init_record_update } from "./record-update-dE1Aw83j.js";
-import { D as killSession, H as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { i as updateIssueRecord, r as init_record_update } from "./record-update-DaOKS7Wb.js";
+import { D as killSession, H as sessionExists, _ as getAgentSessions, w as init_tmux } from "./tmux-CfDHob9M.js";
 import { dirname, isAbsolute, join } from "node:path";
 import { Context, Effect, Layer, Queue, Stream } from "effect";
 import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -4723,7 +4723,10 @@ function ensureRuntimeIndexesSync(db) {
 	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_transport_retry_count` integer");
 	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_next_attempt_at` integer");
 	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `strike_landing_attempts` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `review_cycle_history` text");
+	runSchemaTopUp(db, "ALTER TABLE `review_status` ADD COLUMN `conflicts_since` text");
 	ensureReleaseSetTablesSync(db);
+	ensureUatGenerationRepoTablesSync(db);
 	runSchemaTopUp(db, "ALTER TABLE `flywheel_substrate_bugs` ADD COLUMN `affected_criteria` text");
 	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `cost_session_id_idx` ON `cost_events` (`session_id`)");
 	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `idx_cost_agent_id` ON `cost_events` (`agent_id`, `ts`)");
@@ -4737,6 +4740,7 @@ function ensureRuntimeIndexesSync(db) {
 	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `review_forked_from_parent` integer");
 	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `yielded_at` integer");
 	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `last_yield_resume_at` integer");
+	runSchemaTopUp(db, "ALTER TABLE `agents` ADD COLUMN `started_by` text");
 }
 /**
 * Idempotent schema top-up for release set tables (PAN-399). Existing overdeck.db
@@ -4778,6 +4782,51 @@ function ensureReleaseSetTablesSync(db) {
 	db.exec("CREATE UNIQUE INDEX IF NOT EXISTS `release_set_components_issue_component_idx` ON `release_set_components` (`issue_id`,`component_key`)");
 	db.exec("CREATE INDEX IF NOT EXISTS `release_set_components_issue_order_idx` ON `release_set_components` (`issue_id`,`release_order`,`component_key`)");
 }
+/**
+* Idempotent schema top-up for per-repo UAT generation tables (PAN-3093).
+* A polyrepo generation spans N member repos, so its per-repo branch, base SHA,
+* worktree, and publish state cannot live in the single-valued `uat_generations`
+* columns. Existing overdeck.db files predate these tables and need them added
+* without a migration reset — same shape as ensureReleaseSetTablesSync above.
+*/
+function ensureUatGenerationRepoTablesSync(db) {
+	db.exec(`
+    CREATE TABLE IF NOT EXISTS \`uat_generation_repos\` (
+      \`uat_name\` text NOT NULL,
+      \`repo_key\` text NOT NULL,
+      \`repo_path\` text NOT NULL,
+      \`branch\` text NOT NULL,
+      \`base_sha\` text NOT NULL,
+      \`target_branch\` text DEFAULT 'main' NOT NULL,
+      \`worktree_path\` text NOT NULL,
+      \`merge_order\` integer DEFAULT 0 NOT NULL,
+      \`promoted_at\` integer,
+      \`merge_sha\` text,
+      PRIMARY KEY(\`uat_name\`, \`repo_key\`),
+      FOREIGN KEY (\`uat_name\`) REFERENCES \`uat_generations\`(\`name\`) ON UPDATE no action ON DELETE no action
+    )
+  `);
+	db.exec("CREATE INDEX IF NOT EXISTS `uat_generation_repos_uat_order_idx` ON `uat_generation_repos` (`uat_name`,`merge_order`)");
+	db.exec(`
+    CREATE TABLE IF NOT EXISTS \`uat_generation_member_repos\` (
+      \`uat_name\` text NOT NULL,
+      \`issue_id\` text NOT NULL,
+      \`repo_key\` text NOT NULL,
+      \`branch\` text NOT NULL,
+      \`head_sha\` text NOT NULL,
+      \`merge_order_in_repo\` integer DEFAULT 0 NOT NULL,
+      PRIMARY KEY(\`uat_name\`, \`issue_id\`, \`repo_key\`),
+      FOREIGN KEY (\`uat_name\`) REFERENCES \`uat_generations\`(\`name\`) ON UPDATE no action ON DELETE no action,
+      FOREIGN KEY (\`issue_id\`) REFERENCES \`issues\`(\`id\`) ON UPDATE no action ON DELETE no action
+    )
+  `);
+	db.exec("CREATE INDEX IF NOT EXISTS `uat_generation_member_repos_uat_idx` ON `uat_generation_member_repos` (`uat_name`,`issue_id`)");
+	runSchemaTopUp(db, "CREATE INDEX IF NOT EXISTS `uat_generations_uncleaned_terminal_idx` ON `uat_generations` (`project_root`,`status`) WHERE `cleaned_at` IS NULL");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_repos` ADD COLUMN `target_branch` text DEFAULT 'main' NOT NULL");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_repos` ADD COLUMN `merge_sha` text");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_resolutions` ADD COLUMN `kind` text");
+	runSchemaTopUp(db, "ALTER TABLE `uat_generation_resolutions` ADD COLUMN `note` text");
+}
 function warnSchemaDriftSync(db) {
 	try {
 		const report = auditOverdeckSchemaSync(db, OVERDECK_SCHEMA_TOP_UP_EXPECTATIONS);
@@ -4941,6 +4990,10 @@ var init_infra = __esmMin((() => {
 				table: "review_status",
 				column: "strike_landing_attempts"
 			},
+			{
+				table: "review_status",
+				column: "conflicts_since"
+			},
 			{
 				table: "agents",
 				column: "yielded_by_scheduler"
@@ -4976,6 +5029,26 @@ var init_infra = __esmMin((() => {
 			{
 				table: "agents",
 				column: "last_yield_resume_at"
+			},
+			{
+				table: "agents",
+				column: "started_by"
+			},
+			{
+				table: "uat_generation_repos",
+				column: "target_branch"
+			},
+			{
+				table: "uat_generation_repos",
+				column: "merge_sha"
+			},
+			{
+				table: "uat_generation_resolutions",
+				column: "kind"
+			},
+			{
+				table: "uat_generation_resolutions",
+				column: "note"
 			}
 		],
 		indexes: [
@@ -4984,7 +5057,10 @@ var init_infra = __esmMin((() => {
 			"idx_cost_issue_upper",
 			"release_sets_project_idx",
 			"release_set_components_issue_component_idx",
-			"release_set_components_issue_order_idx"
+			"release_set_components_issue_order_idx",
+			"uat_generation_repos_uat_order_idx",
+			"uat_generation_member_repos_uat_idx",
+			"uat_generations_uncleaned_terminal_idx"
 		]
 	};
 	overdeckEvents = sqliteTable("events", {
@@ -5103,4 +5179,4 @@ var init_infra = __esmMin((() => {
 //#endregion
 export { init_paths as A, inArray as C, sql as D, like as E, OVERDECK_MIGRATION_PATH as O, gte as S, isNull as T, integer as _, EventBus as a, and as b, Records as c, getOverdeckDatabaseSync as d, init_infra as f, real as g, text as h, DbLive as i, getOverdeckDatabasePath as k, Tmux as l, sqliteTable as m, CostArchiveLive as n, EventBusLive as o, init_sqlite_core as p, Db as r, Forge as s, CostArchive as t, TmuxLive as u, init_drizzle_orm as v, isNotNull as w, eq as x, desc as y };
 
-//# sourceMappingURL=infra-BEqFxlJc.js.map
+//# sourceMappingURL=infra-BDQDRopn.js.map

package/server/{injection-C8aiVJrF.js → injection-6AGnXxlj.js}

@@ -1,10 +1,10 @@
 import { n as __esmMin, o as __toESM } from "./rolldown-runtime-DNCzzKnI.js";
-import { Tn as init_projects, er as require_dist, fn as findProjectByPathSync, jn as loadProjectsConfigSync, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-D-xWGHdh.js";
-import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-ez2271oH.js";
-import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-BTMvpNFU.js";
-import { n as extractWithProviderPolicy, t as init_providers } from "./providers-qQAwGQDW.js";
-import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-CE46vDkZ.js";
+import { Gn as init_projects, Mn as findProjectByPathSync, Zn as loadProjectsConfigSync, ar as resolveProjectFromIssueSync, xr as require_dist } from "./config-yaml-CxdwhAIA.js";
+import { d as resolveRagRunsFile, f as resolveStatusFile, i as init_paths, r as ensureParentDir } from "./paths-sJBSb7Ul.js";
+import { n as isBackgroundFeatureEnabled, t as init_features } from "./features-D5km80UI.js";
+import { a as isMemoryKnowledgeIndexEnabled, i as init_settings, o as isMemoryPromptTimeInjectionEnabled } from "./settings-VN0qOh4U.js";
+import { n as extractWithProviderPolicy, t as init_providers } from "./providers-BJQSnAAp.js";
+import { n as init_fts_db, r as runMemoryFtsStatement } from "./fts-db-IVc4_M3f.js";
 import { Result, Schema } from "effect";
 import { extname, isAbsolute, join, relative, resolve } from "path";
 import { createHash, randomUUID } from "crypto";
@@ -823,4 +823,4 @@ var init_injection = __esmMin((() => {
 //#endregion
 export { buildMatchQuery as a, init_query_expansion as c, resolveKnowledgeBundleRoot as i, init_injection as n, init_search as o, injectPromptTimeMemory as r, clearQueryExpansionCache as s, PROMPT_TIME_MEMORY_BUDGETS as t };
 
-//# sourceMappingURL=injection-C8aiVJrF.js.map
+//# sourceMappingURL=injection-6AGnXxlj.js.map

package/server/{injection-CPUIqNhI.js → injection-Bl8d_jHZ.js}

@@ -1,3 +1,3 @@
-import { n as init_injection, r as injectPromptTimeMemory } from "./injection-C8aiVJrF.js";
+import { n as init_injection, r as injectPromptTimeMemory } from "./injection-6AGnXxlj.js";
 init_injection();
 export { injectPromptTimeMemory };

package/server/inspect-agent-CUwVmr2h.js

@@ -0,0 +1,2 @@
+import { n as onInspectComplete } from "./inspect-agent-nXdIptyh.js";
+export { onInspectComplete };

package/server/{inspect-agent-BLuJ1AkT.js → inspect-agent-nXdIptyh.js}

@@ -1,14 +1,14 @@
-import { D as resolveTieredExecutionEnabled, G as setupCredentialFileAuthSync, H as init_providers, L as clearCredentialFileAuthSync, T as init_tier_table, V as getProviderForModelSync, f as loadConfigSync, mr as init_errors, t as init_config_yaml, tt as resolveModel, ur as ProcessSpawnError } from "./config-yaml-DySPNmKN.js";
-import { D as killSession, H as sessionExists, s as createSession, w as init_tmux } from "./tmux-R7N7y-Mh.js";
-import { b as setReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { A as spawnTierSupervisor, Ar as saveAgentRuntimeState, Cn as getProviderEnvForModel, D as init_tier_supervisor, E as deliverCommitForReview, O as loadPrdDraft, b as init_agents, cr as saveAgentState, j as supervisorAgentId } from "./queries-CjNIf-Ub.js";
-import { c as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-B6GycDh9.js";
-import { m as readWorkspacePlanSync, o as init_io } from "./io-C9kF1wtJ.js";
-import { n as init_launcher_generator, t as generateLauncherScriptSync } from "./launcher-generator-BBWG_SiS.js";
-import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-DNWEVV6z.js";
-import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
-import { i as init_git_utils, s as snapshotWorkspaceHeadsPromise } from "./git-utils-CRw2zLPC.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-CDJk4pIp.js";
+import { D as resolveTieredExecutionEnabled, Fr as init_errors, G as setupCredentialFileAuthSync, H as init_providers, L as clearCredentialFileAuthSync, T as init_tier_table, V as getProviderForModelSync, f as loadConfigSync, jr as ProcessSpawnError, t as init_config_yaml, tt as resolveModel } from "./config-yaml-CxdwhAIA.js";
+import { D as killSession, H as sessionExists, s as createSession, w as init_tmux } from "./tmux-CfDHob9M.js";
+import { C as setReviewStatusSync, p as init_review_status } from "./review-status-CGvlA4o_.js";
+import { A as spawnTierSupervisor, Br as saveAgentRuntimeState, D as init_tier_supervisor, E as deliverCommitForReview, It as init_delivery, Mt as deliverAgentMessage, O as loadPrdDraft, b as init_agents, gr as saveAgentState, j as supervisorAgentId, kn as getProviderEnvForModel } from "./queries-C-MUZaIy.js";
+import { l as resolveWorkspaceRepoRootsSync, r as init_project_repos } from "./project-repos-B5pIphKg.js";
+import { m as readWorkspacePlanSync, o as init_io } from "./io-B00PBNku.js";
+import { C as init_launcher_generator, S as generateLauncherScriptSync } from "./auto-spawn-consent-CQ9Bi9q6.js";
+import { a as init_claude_permissions, i as getClaudePermissionFlagsSync } from "./claude-permissions-CpbpvUQ2.js";
+import { i as prepareHarnessLaunch, r as init_harness_binary } from "./harness-binary-BSpiXaLw.js";
+import { a as init_git_utils, o as parseCompositeSnapshot, u as snapshotWorkspaceHeadsPromise } from "./git-utils-CsvYfJU3.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-BehTG1be.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
@@ -84,16 +84,6 @@ function saveCheckpoint(projectKey, issueId, itemId, commitSha) {
 function shellQuote(value) {
 	return `'${value.replace(/'/g, `'"'"'`)}'`;
 }
-function parseCompositeSnapshot(snapshot) {
-	const heads = /* @__PURE__ */ new Map();
-	if (!snapshot) return heads;
-	for (const token of snapshot.split(/\s+/)) {
-		const separator = token.lastIndexOf("@");
-		if (separator <= 0 || separator === token.length - 1) continue;
-		heads.set(token.slice(0, separator), token.slice(separator + 1));
-	}
-	return heads;
-}
 async function readHead(root) {
 	try {
 		const { stdout } = await execAsync("git rev-parse HEAD", {
@@ -215,6 +205,7 @@ init_issue_closed();
 init_io();
 init_tier_table();
 init_tier_supervisor();
+init_delivery();
 promisify(exec);
 const __dirname = dirname(fileURLToPath(import.meta.url));
 async function buildInspectPromptPromise(context) {
@@ -290,6 +281,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 		});
 		const { config } = loadConfigSync();
 		const model = resolveModel("work", subRole, config);
+		const effort = config.roles?.work?.effort ?? "high";
 		const providerEnv = await getProviderEnvForModel(model);
 		const provider = getProviderForModelSync(model);
 		if (provider.authType === "credential-file") setupCredentialFileAuthSync(provider, context.workspace);
@@ -316,6 +308,7 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 			baseCommand: "claude",
 			sessionId,
 			model,
+			extraArgs: `--effort ${effort}`,
 			permissionFlags: getClaudePermissionFlagsSync()
 		}), { mode: 493 });
 		const envForTmux = {
@@ -357,12 +350,20 @@ async function spawnInspectAgentPromise(context, opts = {}) {
 		};
 	}
 }
-async function onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath) {
+async function onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath, notes, deps = {}) {
 	if (status === "passed") {
 		const commitSha = await Effect.runPromise(getCurrentHead(issueId, workspacePath));
 		saveCheckpoint(projectKey, issueId, itemId, commitSha);
 		console.log(`[inspect] Checkpoint saved for ${issueId} item ${itemId} at ${commitSha.substring(0, 8)}`);
 	} else console.log(`[inspect] Item ${itemId} blocked for ${issueId} — no checkpoint saved`);
+	const workAgentId = `agent-${issueId.toLowerCase()}`;
+	const message = status === "passed" ? `Inspection verdict for xBRIEF item ${itemId}: PASSED. The checkpoint is saved — continue to your next item.` : `Inspection verdict for xBRIEF item ${itemId}: BLOCKED. Do not build on this item's changes until the finding is addressed.${notes ? ` Finding: ${notes}` : ""}`;
+	try {
+		const result = await (deps.deliver ?? deliverAgentMessage)(workAgentId, message, "inspect-verdict");
+		if (!result.ok) console.error(`[inspect] FAILED to deliver ${status} verdict for ${issueId} item ${itemId} to ${workAgentId}: ${result.failure ?? "unknown"}`);
+	} catch (err) {
+		console.error(`[inspect] FAILED to deliver ${status} verdict for ${issueId} item ${itemId} to ${workAgentId}: ${err instanceof Error ? err.message : String(err)}`);
+	}
 }
 /**
 * Effect-typed variant of {@link buildInspectPrompt}.
@@ -391,10 +392,10 @@ function spawnInspectAgent(context, opts = {}) {
 /**
 * Effect-typed variant of {@link onInspectComplete}. Never fails.
 */
-function onInspectComplete(projectKey, issueId, itemId, status, workspacePath) {
-	return Effect.promise(() => onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath));
+function onInspectComplete(projectKey, issueId, itemId, status, workspacePath, notes, deps = {}) {
+	return Effect.promise(() => onInspectCompletePromise(projectKey, issueId, itemId, status, workspacePath, notes, deps));
 }
 //#endregion
 export { onInspectComplete as n, spawnInspectAgent as r, buildInspectPrompt as t };
 
-//# sourceMappingURL=inspect-agent-BLuJ1AkT.js.map
+//# sourceMappingURL=inspect-agent-nXdIptyh.js.map

package/server/{internal-token-s0-oKybJ.js → internal-token-DzK385vD.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths, ir as FsError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Tr as FsError, ci as getOverdeckHome, li as init_paths } from "./config-yaml-CxdwhAIA.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
@@ -101,4 +101,4 @@ var init_internal_token = __esmMin((() => {
 //#endregion
 export { getInternalToken as a, ensureInternalTokenSync as i, _resetInternalTokenCacheForTests as n, getInternalTokenSync as o, ensureInternalToken as r, init_internal_token as s, INTERNAL_TOKEN_HEADER as t };
 
-//# sourceMappingURL=internal-token-s0-oKybJ.js.map
+//# sourceMappingURL=internal-token-DzK385vD.js.map

package/server/{internal-token-BrcU6qfe.js → internal-token-Ias7N8Kg.js}

@@ -1,3 +1,3 @@
-import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-s0-oKybJ.js";
+import { a as getInternalToken, i as ensureInternalTokenSync, n as _resetInternalTokenCacheForTests, o as getInternalTokenSync, r as ensureInternalToken, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DzK385vD.js";
 init_internal_token();
 export { INTERNAL_TOKEN_HEADER, _resetInternalTokenCacheForTests, ensureInternalToken, ensureInternalTokenSync, getInternalToken, getInternalTokenSync };