@overdeck/desktop 0.45.24 → 0.47.0

package/server/{merge-train-CHopycP0.js → merge-train-Dmrcus12.js}

@@ -1,5 +1,7 @@
-import { l as isMergeTrainEnabled, o as init_merge_sync } from "./merge-sync-VPV28g0g.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync, zn as getProjectSync } from "./config-yaml-CxdwhAIA.js";
+import { c as init_merge_sync, d as isMergeTrainEnabledForProject } from "./merge-sync-kr4vqyjM.js";
 //#region ../../lib/cloister/merge-train-reconciler.ts
+init_projects();
 init_merge_sync();
 /**
 * Reconcile every ready sibling after `mergedIssueId` landed on main. Processes
@@ -46,11 +48,12 @@ async function reconcileStaleSiblings(mergedIssueId, deps) {
 //#endregion
 //#region ../../lib/cloister/merge-train.ts
 /**
-* Merge-train entry point (PAN-1691).
+* Merge-train entry point (PAN-1691, PAN-1696).
 *
 * Called from the post-merge path after a feature lands on main. Gated by the
-* default-off `flywheel.merge_train_enabled` flag — when off this is a no-op, so
-* nothing git-mutating runs until an operator deliberately enables it.
+* default-off `merge_train.enabled` flag (or per-project override in projects.yaml)
+* — when off this is a no-op, so nothing git-mutating runs until an operator
+* deliberately enables it.
 *
 * The real git/spawn deps are lazy-loaded only when the flag is on, so importing
 * this module (and unit-testing the gating) stays light and never pulls in the
@@ -58,13 +61,20 @@ async function reconcileStaleSiblings(mergedIssueId, deps) {
 */
 /**
 * Run the merge-train reconciler for the issue that just merged. No-op (returns
-* `[]`) when the merge-train flag is off — the safe default.
+* `[]`) when the merge-train flag is off — the safe default. Respects per-project
+* overrides in projects.yaml.
 */
 async function runMergeTrainReconcile(mergedIssueId, opts = {}) {
-	if (!(opts.enabled ?? isMergeTrainEnabled)()) return [];
-	return reconcileStaleSiblings(mergedIssueId, opts.deps ?? (await import("./merge-train-deps-D1cOZzy2.js")).buildRealReconcileDeps());
+	if (!(opts.enabled ?? (() => {
+		const resolved = resolveProjectFromIssueSync(mergedIssueId);
+		if (!resolved) return false;
+		const config = getProjectSync(resolved.projectKey);
+		if (!config) return false;
+		return isMergeTrainEnabledForProject(config);
+	}))()) return [];
+	return reconcileStaleSiblings(mergedIssueId, opts.deps ?? (await import("./merge-train-deps-D_uGX91G.js")).buildRealReconcileDeps());
 }
 //#endregion
 export { runMergeTrainReconcile };
 
-//# sourceMappingURL=merge-train-CHopycP0.js.map
+//# sourceMappingURL=merge-train-Dmrcus12.js.map

package/server/{merge-train-deps-D1cOZzy2.js → merge-train-deps-D_uGX91G.js}

@@ -1,6 +1,6 @@
-import { Tn as init_projects, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { b as init_agents, ut as spawnRun } from "./queries-CjNIf-Ub.js";
-import { c as init_review_status_sync, r as getAllReviewStatusesFromDb } from "./review-status-sync-BTOpxtTC.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { b as init_agents, dt as spawnRun } from "./queries-C-MUZaIy.js";
+import { c as init_review_status_sync, r as getAllReviewStatusesFromDb } from "./review-status-sync-0GxOqeqF.js";
 import { join } from "path";
 import { exec } from "child_process";
 import { promisify } from "util";
@@ -47,23 +47,29 @@ function buildRealReconcileDeps() {
 			}
 		},
 		reDispatchVerification: async (issueId) => {
-			await spawnRun(issueId, "review", { prompt: "Your branch was automatically rebased onto the latest main after another feature merged. Re-review on the new HEAD and confirm the issue is still correct and ready to merge." });
+			await spawnRun(issueId, "review", {
+				prompt: "Your branch was automatically rebased onto the latest main after another feature merged. Re-review on the new HEAD and confirm the issue is still correct and ready to merge.",
+				startedBy: "merge-train:verification"
+			});
 		},
 		dispatchConflictResolver: async (issueId, mergedIssueId) => {
-			await spawnRun(issueId, "work", { prompt: [
-				`Your feature branch could not be cleanly rebased onto the latest main because ${mergedIssueId} just merged and conflicts with your changes.`,
-				"",
-				`Resolve the rebase conflict WITHOUT degrading either feature:`,
-				`1. Read what ${mergedIssueId} changed (git log/diff on origin/main) AND what your issue (${issueId}) intended.`,
-				`2. Rebase your branch onto origin/main and resolve each conflict so BOTH features' intent is preserved.`,
-				`3. Build, run tests, commit, and push, then re-request review.`,
-				"",
-				`Do not blindly accept one side of a conflict — understand both changesets first.`
-			].join("\n") });
+			await spawnRun(issueId, "work", {
+				prompt: [
+					`Your feature branch could not be cleanly rebased onto the latest main because ${mergedIssueId} just merged and conflicts with your changes.`,
+					"",
+					`Resolve the rebase conflict WITHOUT degrading either feature:`,
+					`1. Read what ${mergedIssueId} changed (git log/diff on origin/main) AND what your issue (${issueId}) intended.`,
+					`2. Rebase your branch onto origin/main and resolve each conflict so BOTH features' intent is preserved.`,
+					`3. Build, run tests, commit, and push, then re-request review.`,
+					"",
+					`Do not blindly accept one side of a conflict — understand both changesets first.`
+				].join("\n"),
+				startedBy: "merge-train:conflict-resolver"
+			});
 		}
 	};
 }
 //#endregion
 export { buildRealReconcileDeps };
 
-//# sourceMappingURL=merge-train-deps-D1cOZzy2.js.map
+//# sourceMappingURL=merge-train-deps-D_uGX91G.js.map

package/server/merge-verification-NvaAd8CZ.js

@@ -0,0 +1,220 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-CJ6BHjcD.js";
+import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-CBgHfwM0.js";
+import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CmNk0zLU.js";
+import { i as init_merge_completeness, r as hasPositiveMergedEvidence, t as assessMergeCompleteness } from "./merge-completeness-B46KqhtY.js";
+import { Effect } from "effect";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
+//#region ../../lib/cloister/merge-verification.ts
+function handlePostRebaseVerificationDeferral(issueId, outcome, _previous, deps) {
+	if (outcome.outcome !== "deferred") return null;
+	const message = `Post-rebase verification deferred: ${outcome.reason} — merge retries after the deploy.`;
+	deps.appendShipLog(issueId, message, "verifying");
+	deps.setReviewStatus(issueId, {
+		mergeStatus: "queued",
+		mergeStep: "queued",
+		mergeNotes: message
+	});
+	deps.completePendingOperation(issueId, message);
+	return {
+		success: false,
+		statusCode: 409,
+		error: message,
+		deferred: true,
+		mergeStatus: "queued"
+	};
+}
+function shellQuote(value) {
+	return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+async function mergeIsAncestorOfTarget(evidence) {
+	const key = `${evidence.repoPath}|${evidence.mergeSha}|${evidence.targetBranch}`;
+	if (provenAncestry.has(key)) return true;
+	const running = inFlightAncestry.get(key);
+	if (running) return running;
+	const check = (async () => {
+		try {
+			await execAsync(`git merge-base --is-ancestor ${shellQuote(evidence.mergeSha)} ${shellQuote(`origin/${evidence.targetBranch}`)}`, { cwd: evidence.repoPath });
+		} catch {
+			return false;
+		}
+		if (provenAncestry.size >= PROVEN_ANCESTRY_LIMIT) provenAncestry.clear();
+		provenAncestry.add(key);
+		return true;
+	})();
+	inFlightAncestry.set(key, check);
+	try {
+		return await check;
+	} finally {
+		inFlightAncestry.delete(key);
+	}
+}
+async function requireCompletePolyrepoMerge(issueId, mergedResult) {
+	try {
+		const mergeSet = getMergeSetSync(issueId);
+		if (!mergeSet || mergeSet.repos.length <= 1) return mergedResult;
+		const completeness = await assessMergeCompleteness(issueId);
+		if (!completeness.complete) return {
+			merged: false,
+			reason: `sibling repo(s) unmerged: ${completeness.summary}`
+		};
+		return mergedResult;
+	} catch (error) {
+		return {
+			merged: false,
+			reason: `sibling repo merge state is unverifiable: ${error instanceof Error ? error.message : String(error)}`
+		};
+	}
+}
+async function verifyMergedBeforeLifecycle(issueId, projectPath, sourceBranch, options) {
+	const branchName = sourceBranch?.trim() || `feature/${issueId.toLowerCase()}`;
+	const quotedBranch = shellQuote(branchName);
+	const verifiedRepos = options?.verifiedMergedRepos ?? [];
+	if (verifiedRepos.length > 0) {
+		const unproven = [];
+		for (const evidence of verifiedRepos) {
+			if (!/^[0-9a-f]{7,40}$/i.test(evidence.mergeSha)) {
+				unproven.push(`${evidence.repoKey} (no merge sha recorded)`);
+				continue;
+			}
+			if (!await mergeIsAncestorOfTarget(evidence)) unproven.push(`${evidence.repoKey}@${evidence.mergeSha.slice(0, 9)} not on origin/${evidence.targetBranch}`);
+		}
+		if (unproven.length === 0) return {
+			merged: true,
+			reason: `batch promotion verified in ${verifiedRepos.length} repo(s): ${verifiedRepos.map((r) => r.repoKey).join(", ")}`
+		};
+		return {
+			merged: false,
+			reason: `batch promotion unverified: ${unproven.join("; ")}`
+		};
+	}
+	const ghResolved = resolveGitHubIssueSync(issueId);
+	if (!ghResolved.isGitHub) try {
+		const completeness = await assessMergeCompleteness(issueId);
+		const mergedRepos = completeness.repos.filter((repo) => repo.state === "merged");
+		if (completeness.complete && hasPositiveMergedEvidence(completeness.repos)) return {
+			merged: true,
+			reason: `Forge confirms merge complete for ${mergedRepos.map((repo) => repo.repoKey).join(", ")}`
+		};
+		return {
+			merged: false,
+			reason: completeness.summary
+		};
+	} catch (error) {
+		return {
+			merged: false,
+			reason: `Non-GitHub merge state is unverifiable: ${error instanceof Error ? error.message : String(error)}`
+		};
+	}
+	const { owner, repo } = ghResolved;
+	try {
+		if (isGitHubAppConfigured()) {
+			const prs = await Effect.runPromise(listPullRequestsForHead(owner, repo, branchName, "all"));
+			const mergedPr = prs.find((pr) => pr.merged === true || pr.mergedAt != null);
+			if (mergedPr) return requireCompletePolyrepoMerge(issueId, {
+				merged: true,
+				reason: `GitHub PR #${mergedPr.number} is merged`
+			});
+			const verifiedMergedRef = options?.verifiedMergedRef?.trim();
+			if (verifiedMergedRef) try {
+				await execAsync(`git merge-base --is-ancestor ${shellQuote(verifiedMergedRef)} origin/main`, { cwd: projectPath });
+				return {
+					merged: true,
+					reason: `${verifiedMergedRef} is an ancestor of origin/main`
+				};
+			} catch {}
+			if (prs.length === 0) {
+				if (options?.allowVerifiedNoPrMerge) return {
+					merged: true,
+					reason: `No PR found for ${branchName}; accepting caller-verified non-PR merge`
+				};
+				return {
+					merged: false,
+					reason: `No PR found for ${branchName}; refusing to infer merge from branch state alone`
+				};
+			}
+			return {
+				merged: false,
+				reason: `GitHub PR for ${branchName} is open and not merged`
+			};
+		}
+		const { stdout } = await execAsync(`gh pr list --repo ${shellQuote(`${owner}/${repo}`)} --state all --head ${quotedBranch} --json number,state,mergedAt --limit 5`, { cwd: projectPath });
+		const prs = JSON.parse(stdout || "[]");
+		const mergedPr = prs.find((pr) => (pr.state === "closed" || pr.state === "MERGED") && pr.mergedAt != null);
+		if (mergedPr) return requireCompletePolyrepoMerge(issueId, {
+			merged: true,
+			reason: `GitHub PR #${mergedPr.number} is merged`
+		});
+		const verifiedMergedRef = options?.verifiedMergedRef?.trim();
+		if (verifiedMergedRef) try {
+			await execAsync(`git merge-base --is-ancestor ${shellQuote(verifiedMergedRef)} origin/main`, { cwd: projectPath });
+			return {
+				merged: true,
+				reason: `${verifiedMergedRef} is an ancestor of origin/main`
+			};
+		} catch {}
+		if (prs.length === 0) {
+			if (options?.allowVerifiedNoPrMerge) return {
+				merged: true,
+				reason: `No PR found for ${branchName}; accepting caller-verified non-PR merge`
+			};
+			return {
+				merged: false,
+				reason: `No PR found for ${branchName}; refusing to infer merge from branch state alone`
+			};
+		}
+		return {
+			merged: false,
+			reason: `GitHub PR for ${branchName} is open and not merged`
+		};
+	} catch (err) {
+		return {
+			merged: false,
+			reason: `Unable to verify merge state for ${branchName} via GitHub PR API: ${err instanceof Error ? err.message.slice(0, 200) : "unknown"}`
+		};
+	}
+}
+/**
+* GitHub-authoritative pre-dispatch guard. Returns `skip: true` only when we can
+* positively confirm the PR is already merged. Any failure to resolve the project
+* or read PR state fails open (`skip: false`) so a transient GitHub hiccup never
+* blocks a legitimate dispatch.
+*/
+async function shouldSkipDispatchAsMerged(issueId, deps = {}) {
+	try {
+		const project = (deps.resolveProject ?? resolveProjectFromIssueSync)(issueId);
+		if (!project) return {
+			skip: false,
+			reason: `Project unresolved for ${issueId}`
+		};
+		const branch = `feature/${issueId.toLowerCase()}`;
+		const result = await (deps.verifyMerged ?? verifyMergedBeforeLifecycle)(issueId, project.projectPath, branch);
+		return {
+			skip: result.merged,
+			reason: result.reason
+		};
+	} catch (err) {
+		return {
+			skip: false,
+			reason: `Merged-PR guard error: ${err instanceof Error ? err.message : String(err)}`
+		};
+	}
+}
+var execAsync, provenAncestry, PROVEN_ANCESTRY_LIMIT, inFlightAncestry;
+var init_merge_verification = __esmMin((() => {
+	init_projects();
+	init_github_app();
+	init_merge_set();
+	init_tracker_utils();
+	init_merge_completeness();
+	execAsync = promisify(exec);
+	provenAncestry = /* @__PURE__ */ new Set();
+	PROVEN_ANCESTRY_LIMIT = 512;
+	inFlightAncestry = /* @__PURE__ */ new Map();
+}));
+//#endregion
+export { verifyMergedBeforeLifecycle as i, init_merge_verification as n, shouldSkipDispatchAsMerged as r, handlePostRebaseVerificationDeferral as t };
+
+//# sourceMappingURL=merge-verification-NvaAd8CZ.js.map

package/server/merged-docker-cleanup-worker-DH_hrGPI.js

@@ -0,0 +1,3 @@
+import { n as init_merged_docker_cleanup_worker, r as reconcileMergedDockerCleanupQueue } from "./merged-docker-cleanup-worker-Y1R06TEl.js";
+init_merged_docker_cleanup_worker();
+export { reconcileMergedDockerCleanupQueue };

package/server/merged-docker-cleanup-worker-Y1R06TEl.js

@@ -0,0 +1,107 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-DIk1JSow.js";
+//#region ../../lib/cloister/merged-docker-cleanup-worker.ts
+function retryDelayMs(attempts) {
+	return Math.min(RETRY_BASE_MS * 2 ** Math.max(0, attempts - 1), RETRY_MAX_MS);
+}
+function nextEligibleEntry() {
+	const now = Date.now();
+	return [...queue.values()].find((entry) => !entry.running && entry.nextAttemptAt <= now) ?? null;
+}
+function recordSuccess(issueId, steps) {
+	const message = `Removed merged-issue Docker stack/network for ${issueId}: ${steps.join("; ")}`;
+	console.log(`[deacon] ${message}`);
+	try {
+		emitActivityEntrySync({
+			source: "cloister",
+			level: "info",
+			issueId,
+			message: `[deacon] ${message}`
+		});
+	} catch (error) {
+		console.warn(`[deacon] Could not record merged Docker cleanup activity for ${issueId}: ${error}`);
+	}
+}
+function recordFailure(entry, reason) {
+	entry.attempts += 1;
+	entry.nextAttemptAt = Date.now() + retryDelayMs(entry.attempts);
+	entry.running = false;
+	console.warn(`[deacon] Merged-issue Docker cleanup failed for ${entry.issueId}; retry ${entry.attempts} after ${new Date(entry.nextAttemptAt).toISOString()}: ${reason}`);
+}
+async function drainQueue() {
+	const { teardownWorkspaceDockerByNamePromise } = await import("./docker-Y3PElJb0.js");
+	for (let entry = nextEligibleEntry(); entry; entry = nextEligibleEntry()) {
+		entry.running = true;
+		const eligibility = resolveCanonicalReviewStatus(entry.issueId);
+		if (eligibility.status?.mergeStatus === "merged") entry.mergeVerified = false;
+		else if (entry.mergeVerified) entry.mergeVerified = false;
+		else if (!eligibility.available) {
+			recordFailure(entry, "canonical merge status unavailable");
+			continue;
+		} else {
+			queue.delete(entry.issueId);
+			console.log(`[deacon] Cancelled merged Docker cleanup for ${entry.issueId} — issue is no longer merged`);
+			continue;
+		}
+		try {
+			const result = await teardownWorkspaceDockerByNamePromise(entry.issueId.toLowerCase());
+			if (result.networkRemoved) {
+				queue.delete(entry.issueId);
+				recordSuccess(entry.issueId, result.steps);
+			} else recordFailure(entry, result.steps.join("; "));
+		} catch (error) {
+			recordFailure(entry, error instanceof Error ? error.message : String(error));
+		}
+	}
+}
+function startWorker() {
+	if (workerPromise || !nextEligibleEntry()) return;
+	workerPromise = drainQueue().catch((error) => {
+		const reason = error instanceof Error ? error.message : String(error);
+		for (const entry of queue.values()) if (!entry.running && entry.nextAttemptAt <= Date.now()) recordFailure(entry, reason);
+	}).finally(() => {
+		workerPromise = null;
+		if (nextEligibleEntry()) startWorker();
+	});
+}
+function reconcileMergedDockerCleanupQueue(eligibleIssueIds) {
+	const eligible = new Set(eligibleIssueIds.map((issueId) => issueId.trim().toUpperCase()).filter(Boolean));
+	for (const [issueId, entry] of queue) if (!entry.running && !eligible.has(issueId)) queue.delete(issueId);
+	return [...eligible].flatMap((issueId) => {
+		const action = enqueueMergedDockerCleanup(issueId);
+		return action ? [action] : [];
+	});
+}
+function enqueueMergedDockerCleanup(issueId, options) {
+	const normalizedIssueId = issueId.trim().toUpperCase();
+	if (!normalizedIssueId) return null;
+	const existing = queue.get(normalizedIssueId);
+	if (!existing) {
+		queue.set(normalizedIssueId, {
+			issueId: normalizedIssueId,
+			attempts: 0,
+			nextAttemptAt: 0,
+			running: false,
+			mergeVerified: options?.mergeVerified === true
+		});
+		startWorker();
+		return `Queued merged-issue Docker cleanup for ${normalizedIssueId}`;
+	}
+	if (options?.mergeVerified) existing.mergeVerified = true;
+	startWorker();
+	return null;
+}
+var RETRY_BASE_MS, RETRY_MAX_MS, queue, workerPromise;
+var init_merged_docker_cleanup_worker = __esmMin((() => {
+	init_activity_logger();
+	init_review_status_source();
+	RETRY_BASE_MS = 6e4;
+	RETRY_MAX_MS = 15 * 6e4;
+	queue = /* @__PURE__ */ new Map();
+	workerPromise = null;
+}));
+//#endregion
+export { init_merged_docker_cleanup_worker as n, reconcileMergedDockerCleanupQueue as r, enqueueMergedDockerCleanup as t };
+
+//# sourceMappingURL=merged-docker-cleanup-worker-Y1R06TEl.js.map

package/server/{multipart-parser-duPAfSBw.js → multipart-parser-R-oC8dQg.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { a as File, i as init_esm_min, n as FormData, t as init_from } from "./from-kNxT0bZC.js";
+import { a as File, i as init_esm_min, n as FormData, t as init_from } from "./from-B3tZbB55.js";
 //#region ../../../node_modules/.bun/node-fetch@3.3.2/node_modules/node-fetch/src/utils/multipart-parser.js
 function _fileName(headerValue) {
 	const m = headerValue.match(/\bfilename=("(.*?)"|([^()<>@,;:\\"/[\]?={}\s\t]+))($|;\s)/i);
@@ -293,4 +293,4 @@ __esmMin((() => {
 }))();
 export { toFormData };
 
-//# sourceMappingURL=multipart-parser-duPAfSBw.js.map
+//# sourceMappingURL=multipart-parser-R-oC8dQg.js.map

package/server/{no-resume-mode-Nw29vaFb.js → no-resume-mode-BgD0JUmM.js}

@@ -89,4 +89,4 @@ var init_no_resume_mode = __esmMin((() => {
 //#endregion
 export { init_boot_gates as a, formatBootGateState as i, isExplicitNoResumeRequest as n, resolveBootGates as o, isNoResumeValueEnabled as r, init_no_resume_mode as t };
 
-//# sourceMappingURL=no-resume-mode-Nw29vaFb.js.map
+//# sourceMappingURL=no-resume-mode-BgD0JUmM.js.map

package/server/node_modules/.package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/desktop-server",
-  "version": "0.45.24",
+  "version": "0.47.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
@@ -23,9 +23,9 @@
       }
     },
     "node_modules/@effect/platform-node/node_modules/@effect/platform-node-shared": {
-      "version": "4.0.0-beta.101",
-      "resolved": "https://registry.npmjs.org/@effect/platform-node-shared/-/platform-node-shared-4.0.0-beta.101.tgz",
-      "integrity": "sha512-g4L7XiyJSNJLJVhlslyg2zBCQsoKQf1y1gd+Yfd+3wD9ymC+m7ymbd/5FGqnT1aXV6E2AwRr4D/R1eyRUikvWQ==",
+      "version": "4.0.0-beta.102",
+      "resolved": "https://registry.npmjs.org/@effect/platform-node-shared/-/platform-node-shared-4.0.0-beta.102.tgz",
+      "integrity": "sha512-gVd793I72MrkX4dXo7eYtRKfNj0RW4eMRfVEKEJI16h2+mBDCzQ+gqMrog2hSTHQnaIbvbYShNQ4TVGuRCYZeQ==",
       "license": "MIT",
       "dependencies": {
         "@types/ws": "^8.18.1",
@@ -35,13 +35,13 @@
         "node": ">=18.0.0"
       },
       "peerDependencies": {
-        "effect": "^4.0.0-beta.101"
+        "effect": "^4.0.0-beta.102"
       }
     },
     "node_modules/@google-cloud/common": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@google-cloud/common/-/common-6.0.1.tgz",
-      "integrity": "sha512-1uvKzbmAWUdchIYRsg0f4rUmezOamWuVBSWAPAhnYoUE5OiPEx6v6JOxFIdr3MsrqV+6fyLV3EI1vMPlHoeRvw==",
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/@google-cloud/common/-/common-6.1.0.tgz",
+      "integrity": "sha512-Ohjxjvusr65+SiEVBrilpyn1ir9CM8ZqWjcf7bA8ph1GCunxI6bbwtcl7iGl67A7Lr4Nz7WpNzITNETwggc7pw==",
       "license": "Apache-2.0",
       "dependencies": {
         "@google-cloud/projectify": "^4.0.0",
@@ -49,7 +49,7 @@
         "arrify": "^2.0.0",
         "duplexify": "^4.1.3",
         "extend": "^3.0.2",
-        "google-auth-library": "^10.0.0-rc.1",
+        "google-auth-library": "^10.6.2",
         "html-entities": "^2.5.2",
         "retry-request": "^8.0.0",
         "teeny-request": "^10.0.0"
@@ -302,9 +302,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "26.1.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.1.tgz",
-      "integrity": "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==",
+      "version": "26.1.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz",
+      "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==",
       "license": "MIT",
       "dependencies": {
         "undici-types": "~8.3.0"
@@ -889,9 +889,9 @@
       }
     },
     "node_modules/gaxios": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.2.0.tgz",
-      "integrity": "sha512-CUVb4wcYe+771XevyH6HtGmXFAGGKkIC3kswAP8Z1JCe0j80JMaTPZH930DWFrvo0atjh18Arc0pEyUCWa5bfg==",
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.3.0.tgz",
+      "integrity": "sha512-RB5vLV+vvQeoFPCX4QMK6/hjVkbIamPp1QSUD0CiZcnj12qbpiL+pLbYtgD+oZkWl0tl9z+o2Utp+MpM3QRhBA==",
       "license": "Apache-2.0",
       "dependencies": {
         "extend": "^3.0.2",
@@ -947,9 +947,9 @@
       }
     },
     "node_modules/google-auth-library": {
-      "version": "10.9.0",
-      "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.9.0.tgz",
-      "integrity": "sha512-xtvUqvINPhTaBm7nXqlYPcrMHJPm1lCNdSovxnKKhTm+4JsvQ+KGVYJViLoH9Yxu8w+T0Qv5HubzYT9BLrppJg==",
+      "version": "10.9.1",
+      "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.9.1.tgz",
+      "integrity": "sha512-i1ydyHrqcIxXkWh/uBmVkzCvIuq5yiK2ATndIe5XxKholrG/MTYP9xGYka4sQhrbIAgGjL2B6NOE7rFaiF3fXw==",
       "license": "Apache-2.0",
       "dependencies": {
         "base64-js": "^1.3.0",
@@ -964,9 +964,9 @@
       }
     },
     "node_modules/google-gax": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/google-gax/-/google-gax-5.0.7.tgz",
-      "integrity": "sha512-EhiqaWWJ+9h7sCcKJTsoo6tMcjokVHhWsbSuWCnZJT4vIBP3y4mAoFLnt9SzgkVZeq24ZsFaArr06nnYYku2yA==",
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/google-gax/-/google-gax-5.0.8.tgz",
+      "integrity": "sha512-M4vpZcXQIC1gqIVGQ7eaU3jXQA6zecStyTXu514TYfThlgSurYJOxHZo9fzU6hAgwPWvuEynAVHWyaIk80VeEA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@grpc/grpc-js": "^1.12.6",
@@ -1502,9 +1502,9 @@
       }
     },
     "node_modules/retry-request": {
-      "version": "8.0.3",
-      "resolved": "https://registry.npmjs.org/retry-request/-/retry-request-8.0.3.tgz",
-      "integrity": "sha512-qqoc4kkGgP9cmQDWELlOpAmfgJOg0Yi7MT82ZjiPWu451ayju4itwomjM4/dBEliify8C1b3tSaeCOldugtwPQ==",
+      "version": "8.0.4",
+      "resolved": "https://registry.npmjs.org/retry-request/-/retry-request-8.0.4.tgz",
+      "integrity": "sha512-pI6/7eabUYkZxamkOq0g0uMxKLLGnjzhefY+vL8bVXag5rto4OU2YBTPytWLuHH7aEKD6fn7kJycQfid0Mwnkw==",
       "license": "MIT",
       "dependencies": {
         "extend": "^3.0.2",
@@ -1742,9 +1742,9 @@
       "license": "MIT"
     },
     "node_modules/teeny-request": {
-      "version": "10.1.3",
-      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.3.tgz",
-      "integrity": "sha512-5yDliI1uWkYPo7W+Zvrxg6YmoWuj5iC5EydewqrRTvc68nyMTZhlPPlLg6cptUGfbQAb+N9XDPDPzF6N081lug==",
+      "version": "10.1.4",
+      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.4.tgz",
+      "integrity": "sha512-R1Cg4Vu0UULeDfHL/kjABLaTW++9yD/B6n2g48y5dJ04hsEaxcfmAqbNDzNsbqAYJyIpZafjklLG9YxRu9uzOg==",
       "license": "Apache-2.0",
       "dependencies": {
         "http-proxy-agent": "^7.0.0",
@@ -1766,9 +1766,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "8.8.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.8.0.tgz",
-      "integrity": "sha512-ubshXMXwF3MQIMF1y/WxZdNBnjEKeSg2wF5mcGUtU55YTw34tnVVpKRlLf7ruDXZ5344KokPVX4RBx1wJm64Bw==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.9.0.tgz",
+      "integrity": "sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==",
       "license": "MIT",
       "engines": {
         "node": ">=22.19.0"

package/server/node_modules/@effect/platform-node/node_modules/@effect/platform-node-shared/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@effect/platform-node-shared",
   "type": "module",
-  "version": "4.0.0-beta.101",
+  "version": "4.0.0-beta.102",
   "license": "MIT",
   "description": "Unified interfaces for common platform-specific services",
   "homepage": "https://effect.website",
@@ -46,12 +46,12 @@
     "provenance": true
   },
   "peerDependencies": {
-    "effect": "^4.0.0-beta.101"
+    "effect": "^4.0.0-beta.102"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",
     "tar": "^7.5.19",
-    "effect": "^4.0.0-beta.101"
+    "effect": "^4.0.0-beta.102"
   },
   "dependencies": {
     "@types/ws": "^8.18.1",

package/server/node_modules/@google-cloud/common/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@google-cloud/common",
   "description": "Common components for Cloud APIs Node.js Client Libraries",
-  "version": "6.0.1",
+  "version": "6.1.0",
   "license": "Apache-2.0",
   "author": "Google Inc.",
   "engines": {
@@ -39,7 +39,7 @@
     "arrify": "^2.0.0",
     "duplexify": "^4.1.3",
     "extend": "^3.0.2",
-    "google-auth-library": "^10.0.0-rc.1",
+    "google-auth-library": "^10.6.2",
     "html-entities": "^2.5.2",
     "retry-request": "^8.0.0",
     "teeny-request": "^10.0.0"

package/server/node_modules/@types/node/README.md

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 
 ### Additional Details
- * Last updated: Wed, 08 Jul 2026 06:47:45 GMT
+ * Last updated: Mon, 27 Jul 2026 17:32:10 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 
 # Credits

package/server/node_modules/@types/node/crypto.d.ts

@@ -1185,7 +1185,7 @@ declare module "node:crypto" {
      * and it will be impossible to extract the private key from the returned object.
      * @since v11.6.0
      */
-    function createPublicKey(key: PublicKeyInput | RawPublicKeyInput | JsonWebKeyInput | BinaryLike): KeyObject;
+    function createPublicKey(key: PublicKeyInput | RawPublicKeyInput | JsonWebKeyInput | KeyLike): KeyObject;
     /**
      * Creates and returns a new key object containing a secret key for symmetric
      * encryption or `Hmac`.