@overdeck/desktop 0.45.24 → 0.47.0

package/server/node_modules/undici/lib/web/cookies/util.js

@@ -114,16 +114,80 @@ function validateCookiePath (path) {
 }
 
 /**
- * I have no idea why these values aren't allowed to be honest,
- * but Deno tests these. - Khafra
+ * <let-dig> ::= <letter> | <digit>
+ *
+ * <letter> ::= any one of the 52 alphabetic characters A through Z in
+ * upper case and a through z in lower case
+ *
+ * <digit> ::= any one of the ten digits 0 through 9r
+ *
+ * @see https://www.rfc-editor.org/rfc/rfc1034#section-3.5
+ * @param {number} code
+ */
+function isLetterOrDigit (code) {
+  return (
+    (code >= 0x30 && code <= 0x39) || // 0-9
+    (code >= 0x41 && code <= 0x5A) || // A-Z
+    (code >= 0x61 && code <= 0x7A) // a-z
+  )
+}
+
+/**
+ * Validates a cookie domain against the "preferred name syntax".
+ *
+ * <domain>      ::= <subdomain> | " "
+ * <subdomain>   ::= <label> | <subdomain> "." <label>
+ * <label>       ::= <let-dig> [ [ <ldh-str> ] <let-dig> ]
+ * <ldh-str>     ::= <let-dig-hyp> | <let-dig-hyp> <ldh-str>
+ * <let-dig-hyp> ::= <let-dig> | "-"
+ *
+ * @see https://www.rfc-editor.org/rfc/rfc1034#section-3.5
+ * @see https://www.rfc-editor.org/rfc/rfc1123#section-2.1
+ * @see https://www.rfc-editor.org/rfc/rfc1035#section-2.3.4
  * @param {string} domain
  */
 function validateCookieDomain (domain) {
-  if (
-    domain.startsWith('-') ||
-    domain.endsWith('.') ||
-    domain.endsWith('-')
-  ) {
+  // <domain> ::= <subdomain> | " "
+  if (domain === ' ') {
+    return
+  }
+
+  if (domain.length > 255) {
+    throw new Error('Invalid cookie domain')
+  }
+
+  let labelLength = 0
+
+  for (let i = 0; i < domain.length; ++i) {
+    const code = domain.charCodeAt(i)
+
+    if (code === 0x2E) {
+      if (labelLength === 0) {
+        throw new Error('Invalid cookie domain')
+      }
+
+      if (domain.charCodeAt(i - 1) === 0x2D) { // "-"
+        throw new Error('Invalid cookie domain')
+      }
+
+      labelLength = 0
+      continue
+    }
+
+    if (labelLength === 0 && !isLetterOrDigit(code)) {
+      throw new Error('Invalid cookie domain')
+    }
+
+    if (!isLetterOrDigit(code) && code !== 0x2D) { // "-"
+      throw new Error('Invalid cookie domain')
+    }
+
+    if (++labelLength > 63) {
+      throw new Error('Invalid cookie domain')
+    }
+  }
+
+  if (labelLength === 0 || domain.charCodeAt(domain.length - 1) === 0x2D) { // "-"
     throw new Error('Invalid cookie domain')
   }
 }
@@ -266,7 +330,13 @@ function stringify (cookie) {
 
     const [key, ...value] = part.split('=')
 
-    out.push(`${key.trim()}=${value.join('=')}`)
+    const trimmedKey = key.trim()
+    const joinedValue = value.join('=')
+
+    validateCookieName(trimmedKey)
+    validateCookieValue(joinedValue)
+
+    out.push(`${trimmedKey}=${joinedValue}`)
   }
 
   return out.join('; ')

package/server/node_modules/undici/package.json

@@ -1,6 +1,6 @@
 {
   "name": "undici",
-  "version": "8.8.0",
+  "version": "8.9.0",
   "description": "An HTTP/1.1 client, written from scratch for Node.js",
   "homepage": "https://undici.nodejs.org",
   "bugs": {

package/server/{orphan-proposed-reconciler-BvKkWMJQ.js → orphan-proposed-reconciler-B6vJHxtX.js}

@@ -1,37 +1,193 @@
-import { On as listProjects, Tn as init_projects, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { a as init_activity_logger, n as emitActivityEntrySync } from "./activity-logger-DDlOIAML.js";
-import { M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
-import { c as getReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { b as init_agents, qn as getAgentState } from "./queries-CjNIf-Ub.js";
-import { i as resolveGitHubIssueSync, n as init_tracker_utils } from "./tracker-utils-DHv5pSDT.js";
-import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-s0-oKybJ.js";
-import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-yPd___5E.js";
-import { d as readPlanSync, i as findPlanSync, o as init_io } from "./io-C9kF1wtJ.js";
-import { i as loadCloisterConfig, r as init_config } from "./config-CKxYiCmX.js";
-import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-C3QrAUd0.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-CDJk4pIp.js";
+import { a as __toCommonJS } from "./rolldown-runtime-DNCzzKnI.js";
+import { Gn as init_projects, Jn as listProjects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
+import { M as listSessionNames, w as init_tmux } from "./tmux-CfDHob9M.js";
+import { d as getReviewStatusSync, p as init_review_status } from "./review-status-CGvlA4o_.js";
+import { b as init_agents, tr as getAgentState } from "./queries-C-MUZaIy.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-CJ6BHjcD.js";
+import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-C6ZduvuY.js";
+import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DzK385vD.js";
+import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-B4Xdb4cY.js";
+import { S as init_specs, d as readPlanSync, i as findPlanSync, o as init_io, x as findSpecByIssue } from "./io-B00PBNku.js";
+import { a as readAutoSpawnOnFinalizeFlagAsync } from "./auto-spawn-consent-CQ9Bi9q6.js";
+import { c as init_control_settings, f as isFlywheelAutoPickupBacklog } from "./control-settings-CiqGxXnc.js";
+import { i as loadCloisterConfig, r as init_config } from "./config-Bi3u1VK7.js";
+import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CmNk0zLU.js";
+import { h as init_pickup, r as LEGACY_PARKED_LABELS } from "./pickup-DWhqzliO.js";
+import { r as activeOrderBookIssues } from "./flywheel-BHx8XuMr.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-BehTG1be.js";
+import { t as recordDeadEndNeedsYou } from "./dead-end-trip-D8A3msX9.js";
+import "./spawn-planning-session-pcF-YeFE.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync } from "fs";
 import { join } from "path";
 import { readFile, readdir } from "fs/promises";
 import { exec } from "child_process";
 import { promisify } from "util";
-//#region ../../lib/cloister/orphan-proposed-reconciler.ts
-init_agents();
+//#region ../../lib/cloister/autonomous-work-dispatch.ts
 init_activity_logger();
+init_tmux();
+init_tracker_utils();
 init_internal_token();
-init_projects();
+init_lifecycle();
 init_review_status();
-init_tmux();
 init_io();
-init_lifecycle();
+init_agents();
 init_github_app();
-init_tracker_utils();
+init_pickup();
+init_control_settings();
+init_specs();
+init_projects();
+const RELEASE_CONTEXT_CACHE_MS = 5e3;
+let autoPickupCache = null;
+const activeBookCache = /* @__PURE__ */ new Map();
+function getSharedIssues() {
+	const { getSharedIssueService } = (init_issue_service_singleton(), __toCommonJS(issue_service_singleton_exports));
+	return getSharedIssueService().getIssues();
+}
+async function defaultFindPlannedState(projectRoot, issueId) {
+	const entry = await Effect.runPromise(findSpecByIssue(projectRoot, issueId).pipe(Effect.catch(() => Effect.succeed(null))));
+	if (!entry) return null;
+	return {
+		status: entry.status,
+		itemCount: Array.isArray(entry.document.plan?.items) ? entry.document.plan.items.length : 0
+	};
+}
+function isPlannedState(state) {
+	return state !== null && (state.status === "proposed" || state.status === "active") && state.itemCount > 0;
+}
+async function cachedAutoPickup(deps, now) {
+	if (deps.isAutoPickupBacklog) return deps.isAutoPickupBacklog();
+	if (autoPickupCache && autoPickupCache.expiresAt > now) return autoPickupCache.value;
+	const value = isFlywheelAutoPickupBacklog();
+	autoPickupCache = {
+		value,
+		expiresAt: now + RELEASE_CONTEXT_CACHE_MS
+	};
+	return value;
+}
+async function cachedActiveBookIssues(projectRoot, deps, now) {
+	if (deps.activeBookIssues) return deps.activeBookIssues(projectRoot);
+	const cached = activeBookCache.get(projectRoot);
+	if (cached && cached.expiresAt > now) return cached.value;
+	const value = await activeOrderBookIssues(projectRoot);
+	activeBookCache.set(projectRoot, {
+		value,
+		expiresAt: now + RELEASE_CONTEXT_CACHE_MS
+	});
+	return value;
+}
+function emptyInput(labels, planned = false) {
+	return {
+		labels,
+		planned,
+		autoPickupBacklog: false,
+		activeBookMember: false,
+		autoSpawnOnFinalizeConsent: false
+	};
+}
+async function gatherAutonomousWorkDispatchInput(issueId, deps = {}) {
+	const normalizedIssueId = issueId.trim().toUpperCase();
+	let labels = null;
+	try {
+		const issue = (deps.getIssues ?? getSharedIssues)().find((candidate) => typeof candidate["identifier"] === "string" && candidate["identifier"].toUpperCase() === normalizedIssueId);
+		if (issue) labels = (Array.isArray(issue["labels"]) ? issue["labels"] : []).map((label) => typeof label === "string" ? label : label?.name ?? "").filter((label) => Boolean(label));
+	} catch {}
+	const labelDecision = decideAutonomousWorkDispatch({ ...emptyInput(labels, true) });
+	if (!labelDecision.allow && labelDecision.code !== "not-released") return emptyInput(labels);
+	let project = null;
+	let planned = deps.knownPlanned === true;
+	if (!planned) try {
+		project = (deps.resolveProject ?? resolveProjectFromIssueSync)(normalizedIssueId);
+		planned = Boolean(project && isPlannedState(await (deps.findPlannedState ?? defaultFindPlannedState)(project.projectPath, normalizedIssueId)));
+	} catch {
+		planned = false;
+	}
+	if (!planned) return emptyInput(labels);
+	if (new Set(labels?.map((label) => label.toLowerCase())).has("released")) return emptyInput(labels, true);
+	if (!project) try {
+		project = (deps.resolveProject ?? resolveProjectFromIssueSync)(normalizedIssueId);
+	} catch {
+		project = null;
+	}
+	const now = (deps.now ?? Date.now)();
+	const [autoPickupBacklog, activeIssues, autoSpawnOnFinalizeConsent] = await Promise.all([
+		cachedAutoPickup(deps, now).catch(() => false),
+		project ? cachedActiveBookIssues(project.projectPath, deps, now).catch(() => /* @__PURE__ */ new Set()) : /* @__PURE__ */ new Set(),
+		Promise.resolve((deps.readAutoSpawnConsent ?? readAutoSpawnOnFinalizeFlagAsync)(normalizedIssueId)).catch(() => false)
+	]);
+	return {
+		labels,
+		planned: true,
+		autoPickupBacklog,
+		activeBookMember: activeIssues.has(normalizedIssueId),
+		autoSpawnOnFinalizeConsent
+	};
+}
+function decideAutonomousWorkDispatch(input) {
+	if (input.labels === null) return {
+		allow: false,
+		code: "labels-unavailable",
+		reason: "Autonomous work dispatch was refused because tracker labels are unavailable, so ready, released, parked, vetoed, objection, and epic state cannot be verified. Restore label access or run pan start manually."
+	};
+	const labels = new Set(input.labels.map((label) => label.toLowerCase()));
+	const hasLabel = (label) => labels.has(label);
+	if (hasLabel("parked") || LEGACY_PARKED_LABELS.some(hasLabel)) return {
+		allow: false,
+		code: "parked",
+		reason: "Autonomous work dispatch was refused because the issue is parked. Remove the parked label before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("vetoed")) return {
+		allow: false,
+		code: "vetoed",
+		reason: "Autonomous work dispatch was refused because the issue is vetoed. Remove the veto before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("objection")) return {
+		allow: false,
+		code: "objection",
+		reason: "Autonomous work dispatch was refused because the issue has an open objection. Resolve the objection before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("epic")) return {
+		allow: false,
+		code: "epic",
+		reason: "Autonomous work dispatch was refused because the issue is an epic container. Start one of its child issues instead."
+	};
+	if (!hasLabel("ready")) return {
+		allow: false,
+		code: "not-ready",
+		reason: "Autonomous work dispatch was refused because the issue is not ready. Add the ready label before allowing autonomous work, or run pan start manually."
+	};
+	if (!input.planned) return {
+		allow: false,
+		code: "not-planned",
+		reason: "Autonomous work dispatch was refused because no active implementation plan with work items is available. Complete planning or run pan start manually."
+	};
+	const releaseSource = hasLabel("released") ? "released-label" : input.autoPickupBacklog ? "auto-pickup" : input.activeBookMember ? "active-order-book" : input.autoSpawnOnFinalizeConsent ? "planning-consent" : null;
+	if (!releaseSource) return {
+		allow: false,
+		code: "not-released",
+		reason: "Autonomous work dispatch was refused because the issue is not released and no release override applies. Add the released label, enable auto-pickup, include the issue in the active order book, or launch planning with auto-start; alternatively, run pan start manually."
+	};
+	return {
+		allow: true,
+		releaseSource
+	};
+}
+//#endregion
+//#region ../../lib/cloister/orphan-proposed-reconciler.ts
+/**
+* Reconciles proposed specs only after the shared autonomous-work pickup gate
+* passes; explicit planning auto-start consent is a release source, not a bypass
+* for readiness, tracker-label availability, or blocker labels.
+*/
+init_projects();
 init_config();
 init_issue_closed();
 const DEFAULT_ATTEMPT_INTERVAL_MS = 300 * 1e3;
+const MAX_PICKUP_REFUSAL_REASONS = 512;
 const execAsync = promisify(exec);
 const attemptCooldowns = /* @__PURE__ */ new Map();
+const pickupRefusalReasons = /* @__PURE__ */ new Map();
 const terminalClosedIssueIds = /* @__PURE__ */ new Set();
 let scanInFlight = false;
 function hasReviewPipelinePresence(status) {
@@ -90,8 +246,17 @@ async function defaultHasOpenPrForBranch(projectPath, issueId) {
 	const branch = `feature/${issueId.toLowerCase()}`;
 	try {
 		const resolved = resolveGitHubIssueSync(issueId);
-		if (isGitHubAppConfigured() && resolved.isGitHub) return (await Effect.runPromise(listPullRequestsForHead(resolved.owner, resolved.repo, branch, "open"))).length > 0;
-		const result = await execAsync(`gh pr list --head ${branch} --state open --json number --limit 1`, { cwd: projectPath });
+		if (!resolved.isGitHub) {
+			logReconcilerDiagnostic("open-pr-check-skipped", {
+				projectPath,
+				issueId,
+				branch,
+				reason: "non-github-tracker"
+			});
+			return false;
+		}
+		if (isGitHubAppConfigured()) return (await Effect.runPromise(listPullRequestsForHead(resolved.owner, resolved.repo, branch, "open"))).length > 0;
+		const result = await execAsync(`gh pr list --repo ${resolved.owner}/${resolved.repo} --head ${branch} --state open --json number --limit 1`, { cwd: projectPath });
 		const stdout = typeof result === "string" ? result : result.stdout;
 		const prs = JSON.parse(stdout ?? "[]");
 		return Array.isArray(prs) && prs.length > 0;
@@ -166,7 +331,7 @@ function classifySpawnSkip(status, body) {
 	if (status === 422 && /already closed|closed issue|cannot start an agent for a closed issue/i.test(error)) return "closed-issue";
 	return "spawn-failed";
 }
-async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = internalDashboardOrigin()) {
+async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = internalDashboardOrigin(), autoSpawnConsentRequired = false) {
 	const internalToken = getInternalTokenSync();
 	const response = await fetch(new URL("/api/agents", dashboardOrigin), {
 		method: "POST",
@@ -177,13 +342,16 @@ async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = in
 		},
 		body: JSON.stringify({
 			issueId,
-			role: "work"
+			role: "work",
+			startedBy: "orphan-proposed-reconciler",
+			autoSpawnConsentRequired
 		})
 	});
 	const body = await response.json().catch(() => ({}));
 	const agentId = typeof body["agentId"] === "string" ? body["agentId"] : `agent-${issueId.toLowerCase()}`;
 	if (response.ok && body["success"] !== false) return {
 		spawned: true,
+		...body["startingContainers"] === true ? { queued: true } : {},
 		agentId
 	};
 	return {
@@ -208,7 +376,8 @@ async function triggerRebuildAndStart(issueId, dashboardOrigin = internalDashboa
 			"content-type": "application/json",
 			origin: dashboardOrigin,
 			...internalToken ? { [INTERNAL_TOKEN_HEADER]: internalToken } : {}
-		}
+		},
+		body: JSON.stringify({ startedBy: "workspace-rebuild-recovery" })
 	});
 	const body = await response.json().catch(() => ({}));
 	if (response.ok && body["success"] !== false) return { triggered: true };
@@ -246,10 +415,30 @@ function emitReconcilerActivity(level, message, details = {}, issueId = "ALL") {
 function logReconcilerDiagnostic(kind, info = {}) {
 	console.debug(`[orphan-proposed-reconciler] ${kind}`, info);
 }
+async function recordPickupRefusal(issueId, now, decision) {
+	const reason = `pickup-gate:${decision.code}`;
+	logReconcilerDiagnostic("spawn-skipped", {
+		issueId,
+		reason
+	});
+	attemptCooldowns.set(issueId, now);
+	if (pickupRefusalReasons.get(issueId) !== decision.reason) {
+		if (!pickupRefusalReasons.has(issueId) && pickupRefusalReasons.size >= MAX_PICKUP_REFUSAL_REASONS) {
+			const oldestIssueId = pickupRefusalReasons.keys().next().value;
+			if (oldestIssueId) pickupRefusalReasons.delete(oldestIssueId);
+		}
+		pickupRefusalReasons.set(issueId, decision.reason);
+		await recordDeadEndNeedsYou(issueId, "orphan-proposed-pickup-gate", "proposed", decision.reason);
+	}
+	return [`Skipped orphan proposed spec ${issueId}: ${reason}`];
+}
+async function defaultEvaluatePickupGate(issueId) {
+	return decideAutonomousWorkDispatch(await gatherAutonomousWorkDispatchInput(issueId, { knownPlanned: true }));
+}
 /**
-* PAN-1908: reactive orphan-proposed handler. When a spec reaches `proposed`
-* and no work agent is running/starting, spawn a work agent for that issue
-* without scanning all project specs.
+* PAN-1908: reactive orphan-proposed handler. When a spec reaches `proposed`,
+* the autonomous-work pickup gate allows it, and no work agent is
+* running/starting, spawn a work agent without scanning all project specs.
 */
 async function handleOrphanProposedSpec(issueId, options = {}) {
 	const upperIssueId = issueId.trim().toUpperCase();
@@ -315,8 +504,20 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 		});
 		return [];
 	}
+	let pickupGate;
+	try {
+		pickupGate = await (options.evaluatePickupGate ?? defaultEvaluatePickupGate)(upperIssueId);
+	} catch (error) {
+		pickupGate = {
+			allow: false,
+			code: "labels-unavailable",
+			reason: `Autonomous work dispatch was refused because pickup evaluation failed: ${error instanceof Error ? error.message : String(error)}`
+		};
+	}
+	if (!pickupGate.allow) return recordPickupRefusal(upperIssueId, now, pickupGate);
+	pickupRefusalReasons.delete(upperIssueId);
 	const agentId = `agent-${issueLower}`;
-	const agentState = await Effect.runPromise(getAgentState(agentId).pipe(Effect.catch(() => Effect.succeed(null))));
+	const agentState = options.getAgentStateForIssue ? await options.getAgentStateForIssue(agentId) : await Effect.runPromise(getAgentState(agentId).pipe(Effect.catch(() => Effect.succeed(null))));
 	if (agentState?.status === "starting" || agentState?.status === "running") {
 		logReconcilerDiagnostic("spawn-skipped", {
 			issueId: upperIssueId,
@@ -331,7 +532,7 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 		});
 		return [];
 	}
-	if (hasIssueScopedSession(await Effect.runPromise(listSessionNames().pipe(Effect.catch(() => Effect.succeed([])))), agentId)) {
+	if (hasIssueScopedSession(options.tmuxSessionNames ?? await Effect.runPromise(listSessionNames().pipe(Effect.catch(() => Effect.succeed([])))), agentId)) {
 		logReconcilerDiagnostic("spawn-skipped", {
 			issueId: upperIssueId,
 			reason: "issue-scoped-session"
@@ -385,15 +586,17 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 	}
 	attemptCooldowns.set(upperIssueId, now);
 	try {
-		const spawn = await (options.spawnWorkAgent ?? ((id) => spawnWorkAgentThroughAgentsEndpoint(id, options.dashboardOrigin)))(upperIssueId);
+		const autoSpawnConsentRequired = pickupGate.releaseSource === "planning-consent";
+		const spawn = await (options.spawnWorkAgent ?? ((id, required) => spawnWorkAgentThroughAgentsEndpoint(id, options.dashboardOrigin, required)))(upperIssueId, autoSpawnConsentRequired);
 		if (spawn.spawned) {
-			emitReconcilerActivity("success", `Started work agent for ${upperIssueId} — proposed spec had tasks but no running agent`, {
+			emitReconcilerActivity("success", spawn.queued ? `Queued container startup for ${upperIssueId} before work-agent spawn` : `Started work agent for ${upperIssueId} — proposed spec had tasks but no running agent`, {
 				issueId: upperIssueId,
 				agentId: spawn.agentId,
+				queued: spawn.queued === true,
 				projectKey,
 				projectPath
 			}, upperIssueId);
-			return [`Spawned work agent for orphan proposed spec ${upperIssueId}`];
+			return [spawn.queued ? `Queued container startup for orphan proposed spec ${upperIssueId}` : `Spawned work agent for orphan proposed spec ${upperIssueId}`];
 		}
 		const reason = spawn.skippedReason ?? "spawn-failed";
 		if (reason === "closed-issue") {
@@ -444,6 +647,8 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 	try {
 		const actions = [];
 		const candidates = await findOrphanProposedSpecsForReconciler(options);
+		const liveCandidateIds = new Set(candidates.map((candidate) => candidate.issueId));
+		for (const issueId of pickupRefusalReasons.keys()) if (!liveCandidateIds.has(issueId)) pickupRefusalReasons.delete(issueId);
 		for (const candidate of candidates) {
 			let planDoc;
 			try {
@@ -458,6 +663,7 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 			const result = await handleOrphanProposedSpec(candidate.issueId, {
 				spawnWorkAgent: options.spawnWorkAgent,
 				hasOpenPrForBranch: options.hasOpenPrForBranch,
+				evaluatePickupGate: options.evaluatePickupGate,
 				dashboardOrigin: options.dashboardOrigin,
 				config: {
 					enabled: true,
@@ -470,7 +676,9 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 				spec: {
 					path: candidate.specPath,
 					doc: planDoc
-				}
+				},
+				tmuxSessionNames: options.tmuxSessionNames,
+				getAgentStateForIssue: options.getAgentStateForIssue
 			});
 			actions.push(...result);
 		}
@@ -480,6 +688,6 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 	}
 }
 //#endregion
-export { spawnWorkAgentThroughAgentsEndpoint as a, reconcileOrphanProposedSpecs as i, handleOrphanProposedSpec as n, triggerRebuildAndStart as o, hasReviewPipelinePresence as r, findOrphanProposedSpecsForReconciler as t };
+export { spawnWorkAgentThroughAgentsEndpoint as a, gatherAutonomousWorkDispatchInput as c, reconcileOrphanProposedSpecs as i, handleOrphanProposedSpec as n, triggerRebuildAndStart as o, hasReviewPipelinePresence as r, decideAutonomousWorkDispatch as s, findOrphanProposedSpecsForReconciler as t };
 
-//# sourceMappingURL=orphan-proposed-reconciler-BvKkWMJQ.js.map
+//# sourceMappingURL=orphan-proposed-reconciler-B6vJHxtX.js.map

package/server/{orphan-proposed-reconciler-CTSGcK8p.js → orphan-proposed-reconciler-DcgTPPFY.js}

@@ -1,2 +1,2 @@
-import { n as handleOrphanProposedSpec } from "./orphan-proposed-reconciler-BvKkWMJQ.js";
+import { n as handleOrphanProposedSpec } from "./orphan-proposed-reconciler-B6vJHxtX.js";
 export { handleOrphanProposedSpec };

package/server/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@overdeck/desktop-server",
-  "version": "0.45.24",
+  "version": "0.47.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@overdeck/desktop-server",
-      "version": "0.45.24",
+      "version": "0.47.0",
       "dependencies": {
         "@effect/platform-node": "4.0.0-beta.73",
         "@google-cloud/speech": "7.3.1",
@@ -37,9 +37,9 @@
       }
     },
     "node_modules/@effect/platform-node/node_modules/@effect/platform-node-shared": {
-      "version": "4.0.0-beta.101",
-      "resolved": "https://registry.npmjs.org/@effect/platform-node-shared/-/platform-node-shared-4.0.0-beta.101.tgz",
-      "integrity": "sha512-g4L7XiyJSNJLJVhlslyg2zBCQsoKQf1y1gd+Yfd+3wD9ymC+m7ymbd/5FGqnT1aXV6E2AwRr4D/R1eyRUikvWQ==",
+      "version": "4.0.0-beta.102",
+      "resolved": "https://registry.npmjs.org/@effect/platform-node-shared/-/platform-node-shared-4.0.0-beta.102.tgz",
+      "integrity": "sha512-gVd793I72MrkX4dXo7eYtRKfNj0RW4eMRfVEKEJI16h2+mBDCzQ+gqMrog2hSTHQnaIbvbYShNQ4TVGuRCYZeQ==",
       "license": "MIT",
       "dependencies": {
         "@types/ws": "^8.18.1",
@@ -49,13 +49,13 @@
         "node": ">=18.0.0"
       },
       "peerDependencies": {
-        "effect": "^4.0.0-beta.101"
+        "effect": "^4.0.0-beta.102"
       }
     },
     "node_modules/@google-cloud/common": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/@google-cloud/common/-/common-6.0.1.tgz",
-      "integrity": "sha512-1uvKzbmAWUdchIYRsg0f4rUmezOamWuVBSWAPAhnYoUE5OiPEx6v6JOxFIdr3MsrqV+6fyLV3EI1vMPlHoeRvw==",
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/@google-cloud/common/-/common-6.1.0.tgz",
+      "integrity": "sha512-Ohjxjvusr65+SiEVBrilpyn1ir9CM8ZqWjcf7bA8ph1GCunxI6bbwtcl7iGl67A7Lr4Nz7WpNzITNETwggc7pw==",
       "license": "Apache-2.0",
       "dependencies": {
         "@google-cloud/projectify": "^4.0.0",
@@ -63,7 +63,7 @@
         "arrify": "^2.0.0",
         "duplexify": "^4.1.3",
         "extend": "^3.0.2",
-        "google-auth-library": "^10.0.0-rc.1",
+        "google-auth-library": "^10.6.2",
         "html-entities": "^2.5.2",
         "retry-request": "^8.0.0",
         "teeny-request": "^10.0.0"
@@ -446,9 +446,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "26.1.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.1.tgz",
-      "integrity": "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==",
+      "version": "26.1.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz",
+      "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==",
       "license": "MIT",
       "dependencies": {
         "undici-types": "~8.3.0"
@@ -1033,9 +1033,9 @@
       }
     },
     "node_modules/gaxios": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.2.0.tgz",
-      "integrity": "sha512-CUVb4wcYe+771XevyH6HtGmXFAGGKkIC3kswAP8Z1JCe0j80JMaTPZH930DWFrvo0atjh18Arc0pEyUCWa5bfg==",
+      "version": "7.3.0",
+      "resolved": "https://registry.npmjs.org/gaxios/-/gaxios-7.3.0.tgz",
+      "integrity": "sha512-RB5vLV+vvQeoFPCX4QMK6/hjVkbIamPp1QSUD0CiZcnj12qbpiL+pLbYtgD+oZkWl0tl9z+o2Utp+MpM3QRhBA==",
       "license": "Apache-2.0",
       "dependencies": {
         "extend": "^3.0.2",
@@ -1091,9 +1091,9 @@
       }
     },
     "node_modules/google-auth-library": {
-      "version": "10.9.0",
-      "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.9.0.tgz",
-      "integrity": "sha512-xtvUqvINPhTaBm7nXqlYPcrMHJPm1lCNdSovxnKKhTm+4JsvQ+KGVYJViLoH9Yxu8w+T0Qv5HubzYT9BLrppJg==",
+      "version": "10.9.1",
+      "resolved": "https://registry.npmjs.org/google-auth-library/-/google-auth-library-10.9.1.tgz",
+      "integrity": "sha512-i1ydyHrqcIxXkWh/uBmVkzCvIuq5yiK2ATndIe5XxKholrG/MTYP9xGYka4sQhrbIAgGjL2B6NOE7rFaiF3fXw==",
       "license": "Apache-2.0",
       "dependencies": {
         "base64-js": "^1.3.0",
@@ -1108,9 +1108,9 @@
       }
     },
     "node_modules/google-gax": {
-      "version": "5.0.7",
-      "resolved": "https://registry.npmjs.org/google-gax/-/google-gax-5.0.7.tgz",
-      "integrity": "sha512-EhiqaWWJ+9h7sCcKJTsoo6tMcjokVHhWsbSuWCnZJT4vIBP3y4mAoFLnt9SzgkVZeq24ZsFaArr06nnYYku2yA==",
+      "version": "5.0.8",
+      "resolved": "https://registry.npmjs.org/google-gax/-/google-gax-5.0.8.tgz",
+      "integrity": "sha512-M4vpZcXQIC1gqIVGQ7eaU3jXQA6zecStyTXu514TYfThlgSurYJOxHZo9fzU6hAgwPWvuEynAVHWyaIk80VeEA==",
       "license": "Apache-2.0",
       "dependencies": {
         "@grpc/grpc-js": "^1.12.6",
@@ -1646,9 +1646,9 @@
       }
     },
     "node_modules/retry-request": {
-      "version": "8.0.3",
-      "resolved": "https://registry.npmjs.org/retry-request/-/retry-request-8.0.3.tgz",
-      "integrity": "sha512-qqoc4kkGgP9cmQDWELlOpAmfgJOg0Yi7MT82ZjiPWu451ayju4itwomjM4/dBEliify8C1b3tSaeCOldugtwPQ==",
+      "version": "8.0.4",
+      "resolved": "https://registry.npmjs.org/retry-request/-/retry-request-8.0.4.tgz",
+      "integrity": "sha512-pI6/7eabUYkZxamkOq0g0uMxKLLGnjzhefY+vL8bVXag5rto4OU2YBTPytWLuHH7aEKD6fn7kJycQfid0Mwnkw==",
       "license": "MIT",
       "dependencies": {
         "extend": "^3.0.2",
@@ -1938,9 +1938,9 @@
       "license": "MIT"
     },
     "node_modules/teeny-request": {
-      "version": "10.1.3",
-      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.3.tgz",
-      "integrity": "sha512-5yDliI1uWkYPo7W+Zvrxg6YmoWuj5iC5EydewqrRTvc68nyMTZhlPPlLg6cptUGfbQAb+N9XDPDPzF6N081lug==",
+      "version": "10.1.4",
+      "resolved": "https://registry.npmjs.org/teeny-request/-/teeny-request-10.1.4.tgz",
+      "integrity": "sha512-R1Cg4Vu0UULeDfHL/kjABLaTW++9yD/B6n2g48y5dJ04hsEaxcfmAqbNDzNsbqAYJyIpZafjklLG9YxRu9uzOg==",
       "license": "Apache-2.0",
       "dependencies": {
         "http-proxy-agent": "^7.0.0",
@@ -1962,9 +1962,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "8.8.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.8.0.tgz",
-      "integrity": "sha512-ubshXMXwF3MQIMF1y/WxZdNBnjEKeSg2wF5mcGUtU55YTw34tnVVpKRlLf7ruDXZ5344KokPVX4RBx1wJm64Bw==",
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-8.9.0.tgz",
+      "integrity": "sha512-aWZpUj7XoGonMClx4gdDRfgBjqeA+F473aDmROQQbM9n6PRfK/u1q/a0X4wMTgcHfT8H6fpbt98PFuDUwFg2YA==",
       "license": "MIT",
       "engines": {
         "node": ">=22.19.0"

package/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/desktop-server",
-  "version": "0.45.24",
+  "version": "0.47.0",
   "private": true,
   "type": "module",
   "dependencies": {