@overdeck/desktop 0.45.24 → 0.47.0

package/server/{system-prerequisites-DUDj1YHf.js → system-prerequisites-ICLSkhhZ.js}

@@ -1,4 +1,4 @@
-import { a as resolveExecutable, o as resolveHarnessBinary, r as init_harness_binary } from "./harness-binary-DPUi-Pv8.js";
+import { a as resolveExecutable, o as resolveHarnessBinary, r as init_harness_binary } from "./harness-binary-BSpiXaLw.js";
 import { homedir } from "node:os";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -247,4 +247,4 @@ async function checkSystemPrerequisites(probe = defaultProbe, resolver = default
 //#endregion
 export { checkSystemPrerequisites, collectSetupDiagnostics };
 
-//# sourceMappingURL=system-prerequisites-DUDj1YHf.js.map
+//# sourceMappingURL=system-prerequisites-ICLSkhhZ.js.map

package/server/{teardown-workspace-DeTTImn-.js → teardown-workspace-DRdi_CPa.js}

@@ -1,10 +1,10 @@
-import { Vr as init_paths, hr as AGENTS_DIR } from "./config-yaml-DySPNmKN.js";
-import { D as killSession, H as sessionExists, M as listSessionNames, w as init_tmux } from "./tmux-R7N7y-Mh.js";
-import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-CBhNdzE4.js";
-import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-_d6XhyND.js";
-import { a as pidsWithCwdUnder } from "./agent-gc-CHcnvonI.js";
-import { i as findWorkspacePath, o as init_archive_planning, r as findAllWorkspacePaths } from "./archive-planning-Du25Jtst.js";
-import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-5M0lupud.js";
+import { Ir as AGENTS_DIR, li as init_paths } from "./config-yaml-CxdwhAIA.js";
+import { D as killSession, H as sessionExists, M as listSessionNames, w as init_tmux } from "./tmux-CfDHob9M.js";
+import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-BPgTrG66.js";
+import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-BUOIlfgD.js";
+import { a as pidsWithCwdUnder } from "./agent-gc-C3h9Or3a.js";
+import { i as findWorkspacePath, r as findAllWorkspacePaths } from "./archive-planning-BwhxeP7C.js";
+import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-Di8wdakq.js";
 import { Effect } from "effect";
 import { existsSync } from "fs";
 import { basename, join } from "path";
@@ -26,7 +26,6 @@ import { promisify } from "util";
 init_paths();
 init_tmux();
 init_types();
-init_archive_planning();
 init_workspace_manager();
 init_devcontainer_renderer();
 const execAsync = promisify(exec);
@@ -84,7 +83,7 @@ async function stopTldrDaemonImpl(workspacePath) {
 	const venvPath = join(workspacePath, ".venv");
 	if (!existsSync(venvPath)) return stepSkipped(step, ["No .venv found"]);
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BYFkts95.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-CvWXBhX1.js");
 		await getTldrDaemonServiceSync(workspacePath, venvPath).stop();
 		return stepOk(step, ["Stopped TLDR daemon"]);
 	} catch {
@@ -103,7 +102,7 @@ function stopDocker(workspacePath, issueLower) {
 async function stopDockerImpl(workspacePath, issueLower) {
 	const step = "teardown:docker";
 	try {
-		const { stopWorkspaceDocker } = await import("./workspace-manager-CWT55qeI.js");
+		const { stopWorkspaceDocker } = await import("./workspace-manager-C1F3XsnS.js");
 		await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 		return stepOk(step, ["Stopped Docker containers"]);
 	} catch {
@@ -407,7 +406,7 @@ function clearShadowState(issueId) {
 async function clearShadowStateImpl(issueId) {
 	const step = "teardown:shadow-state";
 	try {
-		const { removeShadowState } = await import("./shadow-state-DnDyjujH.js");
+		const { removeShadowState } = await import("./shadow-state-CZBp7pwq.js");
 		if (removeShadowState(issueId).success) return stepOk(step, [`Cleared shadow state for ${issueId}`]);
 		return stepSkipped(step, ["No shadow state found"]);
 	} catch {
@@ -457,7 +456,7 @@ function buildPlaceholders(ctx, opts, workspacePath) {
 function removeTunnelConfig(tunnelConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { removeTunnelIngress } = await import("./tunnel-DGdUkGoZ.js");
+			const { removeTunnelIngress } = await import("./tunnel-Bp-dRHZz.js");
 			return stepOk("teardown:tunnel", (await Effect.runPromise(removeTunnelIngress(tunnelConfig, placeholders))).steps || ["Removed tunnel ingress"]);
 		},
 		catch: (err) => err
@@ -469,7 +468,7 @@ function removeTunnelConfig(tunnelConfig, placeholders) {
 function removeHumeEviConfig(humeConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { deleteHumeConfig } = await import("./hume-ccTf4wTX.js");
+			const { deleteHumeConfig } = await import("./hume-VUCNbTgn.js");
 			return stepOk("teardown:hume", (await Effect.runPromise(deleteHumeConfig(humeConfig, placeholders))).steps || ["Removed Hume EVI config"]);
 		},
 		catch: (err) => err
@@ -514,7 +513,7 @@ function pruneSpecialistRegistry(issueId) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:specialist-registry";
-			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-DM6bWjsi.js");
+			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-Bz-wFT7R.js");
 			const removed = pruneSpecialistRegistryEntriesForIssue(issueId);
 			return removed > 0 ? stepOk(step, [`Pruned ${removed} specialist registry entr${removed === 1 ? "y" : "ies"} for ${issueId}`]) : stepSkipped(step, [`No specialist registry entries for ${issueId}`]);
 		},
@@ -525,7 +524,7 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:checkpoint-refs";
-			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-DwbQoqrC.js");
+			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-CkKmB0wZ.js");
 			const agentIds = [
 				`agent-${issueLower}`,
 				`planning-${issueLower}`,
@@ -539,4 +538,4 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 //#endregion
 export { teardownWorkspace as t };
 
-//# sourceMappingURL=teardown-workspace-DeTTImn-.js.map
+//# sourceMappingURL=teardown-workspace-DRdi_CPa.js.map

package/server/{test-agent-queue-MbxX5vqq.js → test-agent-queue-A_-p-i0I.js}

@@ -1,8 +1,8 @@
-import { Tn as init_projects, zn as resolveProjectFromIssueSync } from "./config-yaml-DySPNmKN.js";
-import { b as setReviewStatusSync, l as init_review_status } from "./review-status-kZj_KyCk.js";
-import { b as init_agents, ut as spawnRun } from "./queries-CjNIf-Ub.js";
-import { n as shouldSkipDispatchAsMerged, t as init_merge_verification } from "./merge-verification-BkaOqPsw.js";
-import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-bWYBtqBg.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { C as setReviewStatusSync, p as init_review_status } from "./review-status-CGvlA4o_.js";
+import { b as init_agents, dt as spawnRun } from "./queries-C-MUZaIy.js";
+import { n as init_merge_verification, r as shouldSkipDispatchAsMerged } from "./merge-verification-NvaAd8CZ.js";
+import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-C4i9aqEP.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/cloister/test-agent-queue.ts
 /**
@@ -98,7 +98,8 @@ const dispatchTestAgentAndNotify = (issueId, workspace, branch, notifyAgent) =>
 	const spawnResult = yield* Effect.tryPromise({
 		try: () => spawnRun(issueId, "test", {
 			workspace,
-			prompt
+			prompt,
+			startedBy: "test-agent-queue"
 		}),
 		catch: (cause) => {
 			return new TestDispatchError({
@@ -163,4 +164,4 @@ const dispatchTestAgentAndNotify = (issueId, workspace, branch, notifyAgent) =>
 //#endregion
 export { buildTestRolePrompt, dispatchTestAgentAndNotify };
 
-//# sourceMappingURL=test-agent-queue-MbxX5vqq.js.map
+//# sourceMappingURL=test-agent-queue-A_-p-i0I.js.map

package/server/{test-verdict-gscuksPv.js → test-verdict-BHgTAwIG.js}

@@ -1,3 +1,3 @@
-import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-bWYBtqBg.js";
+import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-C4i9aqEP.js";
 init_test_verdict();
 export { readTestVerdictArtifact };

package/server/{test-verdict-bWYBtqBg.js → test-verdict-C4i9aqEP.js}

@@ -102,4 +102,4 @@ var init_test_verdict = __esmMin((() => {}));
 //#endregion
 export { testVerdictArtifactPath as a, readTestVerdictArtifact as i, decideUnsignaledTestAction as n, init_test_verdict as r, clearTestVerdictArtifact as t };
 
-//# sourceMappingURL=test-verdict-bWYBtqBg.js.map
+//# sourceMappingURL=test-verdict-C4i9aqEP.js.map

package/server/{tldr-daemon-BYFkts95.js → tldr-daemon-CvWXBhX1.js}

@@ -1,3 +1,3 @@
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-C-69c3OI.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-wvsU6bKv.js";
 init_tldr_daemon();
 export { getTldrDaemonServiceSync };

package/server/{tldr-daemon-C-69c3OI.js → tldr-daemon-wvsU6bKv.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { mr as init_errors } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors } from "./config-yaml-CxdwhAIA.js";
 import "effect";
 import { existsSync, readFileSync, statSync } from "fs";
 import { join } from "path";
@@ -221,4 +221,4 @@ var init_tldr_daemon = __esmMin((() => {
 //#endregion
 export { getTldrDaemonServiceSync as n, init_tldr_daemon as r, TldrDaemonService as t };
 
-//# sourceMappingURL=tldr-daemon-C-69c3OI.js.map
+//# sourceMappingURL=tldr-daemon-wvsU6bKv.js.map

package/server/{tmux-R7N7y-Mh.js → tmux-CfDHob9M.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Br as getOverdeckHome, Vr as init_paths, dr as TmuxError, f as loadConfigSync, mr as init_errors, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Mr as TmuxError, ci as getOverdeckHome, f as loadConfigSync, li as init_paths, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
 import { Effect } from "effect";
 import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -164,6 +164,174 @@ var init_tmux_process_tree = __esmMin((() => {
 	]);
 }));
 //#endregion
+//#region ../../lib/pane-choice-menu.ts
+function cleanLine(line) {
+	return line.replace(ANSI_PATTERN, "").replace(/[\x00-\x1f\x7f]/g, "").replace(/\s+$/g, "");
+}
+/**
+* PAN-3068 shape — key/action pairs separated by "·". Every segment must open
+* with a key name, so real post-answer output never qualifies.
+*/
+function looksLikeHarnessFooterHint(line) {
+	const segments = line.split("·").map((s) => s.trim()).filter(Boolean);
+	if (segments.length === 0) return false;
+	return segments.every((segment) => /^(?:esc(?:ape)?|tab|enter|return|space|backspace|shift\+\S+|ctrl\+\S+|alt\+\S+|\?)\b/i.test(segment) || /^press\s+\S+/i.test(segment));
+}
+/** "1. Yes / 2. Yes, and allow… / 3. No" — owned by the permission-menu path. */
+function looksLikePermissionOptions(options) {
+	if (options.length !== 3) return false;
+	return /^yes$/i.test(options[0].label) && /^yes,?\s*(?:and\s*)?(?:allow|don't ask|always)/i.test(options[1].label) && /^no\b/i.test(options[2].label);
+}
+function parseOptionLine(line) {
+	const match = OPTION_LINE.exec(line);
+	if (!match) return null;
+	const number = Number(match[2]);
+	if (!Number.isInteger(number) || number < 1 || number > MAX_OPTIONS) return null;
+	const rawLabel = match[3].trim();
+	if (rawLabel.length === 0 || rawLabel.length > MAX_LABEL_CHARS) return null;
+	return {
+		cursor: Boolean(match[1]),
+		number,
+		rawLabel
+	};
+}
+/**
+* Parse the last numbered-choice menu in the pane, or null when the pane is
+* not currently blocked on one. See the module header for the conservative
+* acceptance rules.
+*
+* `mode: 'guard'` keeps the menus card rendering excludes — permission prompts
+* and multi-selects. A caller that only wants to know "is this pane blocked on
+* a menu?" must see those too; see `paneHasBlockingChoiceMenu`.
+*/
+function parsePaneChoiceMenu(paneText, opts = {}) {
+	const mode = opts.mode ?? "card";
+	if (!paneText) return null;
+	const lines = paneText.split("\n").map(cleanLine);
+	let end = lines.length - 1;
+	while (end >= 0 && lines[end].trim() === "") end -= 1;
+	if (end < 0) return null;
+	let lastOption = -1;
+	for (let i = end; i >= 0; i -= 1) {
+		if (parseOptionLine(lines[i])) {
+			lastOption = i;
+			break;
+		}
+		if (end - i > MAX_TRAILING_LINES + MAX_OPTIONS) break;
+	}
+	if (lastOption < 0) return null;
+	const optionLines = [];
+	let firstOption = lastOption;
+	for (let i = lastOption; i >= 0; i -= 1) {
+		const parsed = parseOptionLine(lines[i]);
+		if (!parsed) break;
+		optionLines.unshift(parsed);
+		firstOption = i;
+	}
+	if (optionLines.length < 2 || optionLines.length > MAX_OPTIONS) return null;
+	for (let i = 0; i < optionLines.length; i += 1) if (optionLines[i].number !== i + 1) return null;
+	const cursorRows = optionLines.map((opt, index) => opt.cursor ? index : -1).filter((index) => index >= 0);
+	if (cursorRows.length > 1) return null;
+	const trailing = lines.slice(lastOption + 1).filter((line) => line.trim() !== "");
+	if (trailing.length > MAX_TRAILING_LINES) return null;
+	let footerHint = null;
+	for (const line of trailing) {
+		if (BARE_PROMPT_LINE.test(line)) return null;
+		if (SEPARATOR_LINE.test(line)) continue;
+		if (looksLikeHarnessFooterHint(line.trim())) {
+			if (footerHint === null) footerHint = line.trim();
+			continue;
+		}
+		return null;
+	}
+	const options = optionLines.map((opt) => {
+		const recommended = RECOMMENDED_SUFFIX.test(opt.rawLabel);
+		return {
+			number: opt.number,
+			label: recommended ? opt.rawLabel.replace(RECOMMENDED_SUFFIX, "") : opt.rawLabel,
+			recommended
+		};
+	});
+	if (mode === "card") {
+		if (looksLikePermissionOptions(options)) return null;
+		if (footerHint && /space\s+to\s+(?:select|toggle)/i.test(footerHint)) return null;
+	}
+	const contextLines = [];
+	let paragraphs = 0;
+	let i = firstOption - 1;
+	while (i >= 0 && lines[i].trim() === "") i -= 1;
+	for (; i >= 0 && contextLines.length < MAX_CONTEXT_LINES; i -= 1) {
+		const line = lines[i];
+		if (SEPARATOR_LINE.test(line) || BARE_PROMPT_LINE.test(line)) break;
+		if (parseOptionLine(line)) break;
+		if (line.trim() === "") {
+			if (paragraphs >= 2) break;
+			let j = i - 1;
+			while (j >= 0 && lines[j].trim() === "") j -= 1;
+			if (j < 0 || SEPARATOR_LINE.test(lines[j]) || BARE_PROMPT_LINE.test(lines[j]) || parseOptionLine(lines[j])) break;
+			i = j + 1;
+			continue;
+		}
+		if (lines[i + 1] === void 0 || lines[i + 1].trim() === "") paragraphs += 1;
+		contextLines.unshift(line.trim());
+	}
+	const hasCursor = cursorRows.length === 1;
+	if (!hasCursor && footerHint === null) return null;
+	const confidence = hasCursor && footerHint !== null ? "high" : "low";
+	return {
+		title: contextLines[0] ?? options[0].label,
+		contextLines,
+		options,
+		selectedIndex: hasCursor ? cursorRows[0] : 0,
+		footerHint,
+		confidence
+	};
+}
+/**
+* True when the pane is blocked on ANY numbered menu, including the permission
+* and multi-select shapes card rendering skips.
+*
+* Callers that would otherwise press Enter with nothing verified in the
+* composer MUST consult this first: a bare Enter confirms the menu's
+* highlighted row, which answers a question nobody asked. The session-resume
+* gate defaults to "Resume from summary", so a stray Enter there discards the
+* operator's full session (PAN-3212).
+*/
+function paneHasBlockingChoiceMenu(paneText) {
+	return parsePaneChoiceMenu(paneText, { mode: "guard" }) !== null;
+}
+/** Stable identity for patrol dedupe — same menu re-parsed must not re-surface. */
+function paneChoiceMenuSignature(menu) {
+	return `${menu.title}::${menu.options.map((o) => `${o.number}:${o.label}`).join("|")}`;
+}
+/**
+* Literal tmux keystrokes answering the menu with `selectedIndex`: arrow the
+* cursor from its current row to the target, then confirm. Claude Code menus
+* move the ❯ cursor with ↑/↓ and confirm with Enter; number keys are not
+* guaranteed across harness versions, so arrows are the universal path.
+*/
+function buildChoiceKeystrokes(menu, selectedIndex) {
+	const clamped = Math.max(0, Math.min(selectedIndex, menu.options.length - 1));
+	const from = menu.selectedIndex;
+	const keys = [];
+	for (let i = from; i < clamped; i += 1) keys.push("Down");
+	for (let i = from; i > clamped; i -= 1) keys.push("Up");
+	keys.push("Enter");
+	return keys;
+}
+var ANSI_PATTERN, OPTION_LINE, SEPARATOR_LINE, BARE_PROMPT_LINE, MAX_TRAILING_LINES, MAX_CONTEXT_LINES, MAX_OPTIONS, MAX_LABEL_CHARS, RECOMMENDED_SUFFIX;
+var init_pane_choice_menu = __esmMin((() => {
+	ANSI_PATTERN = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+	OPTION_LINE = /^\s*(❯|›)?\s*(\d{1,2})[.)]\s+(\S.*)$/;
+	SEPARATOR_LINE = /^\s*[─━═]{6,}\s*$/;
+	BARE_PROMPT_LINE = /^\s*(❯|›)\s*$/;
+	MAX_TRAILING_LINES = 6;
+	MAX_CONTEXT_LINES = 8;
+	MAX_OPTIONS = 9;
+	MAX_LABEL_CHARS = 100;
+	RECOMMENDED_SUFFIX = /\s*\((recommended)\)\s*$/i;
+}));
+//#endregion
 //#region ../../lib/tmux.ts
 function validateSessionName(name) {
 	if (!VALID_SESSION_NAME_RE.test(name)) throw new Error(`Invalid tmux session name: ${name}`);
@@ -881,6 +1049,7 @@ var init_tmux = __esmMin((() => {
 	init_errors();
 	init_ui_theme();
 	init_tmux_process_tree();
+	init_pane_choice_menu();
 	execFileAsync = promisify(execFile);
 	VALID_SESSION_NAME_RE = /^[a-zA-Z0-9._-]+$/;
 	DEFAULT_TMUX_WINDOW_COLS = 200;
@@ -1198,7 +1367,8 @@ var init_tmux = __esmMin((() => {
 					bufferName
 				], { encoding: "utf-8" }).catch(() => {});
 				if (!pasteVerified) {
-					const snapshot = await capturePaneText(sessionName, 30);
+					const snapshot = await capturePaneText(sessionName, 90);
+					if (paneHasBlockingChoiceMenu(snapshot)) throw new MessageDeliveryFailed(`Delivery to ${sessionName} aborted: the pane is blocked on a choice menu, so the paste never reached the composer and Enter would answer that menu`, sessionName, snapshot);
 					console.warn(`[tmux] Paste verification failed for ${sessionName} after ${PASTE_MAX_ATTEMPTS} attempts × ${VERIFY_TIMEOUT_MS}ms. Sending Enter anyway to avoid orphaned input. Snapshot:\n${snapshot.slice(0, 500)}`);
 				}
 				await tmuxExecAsync([
@@ -1250,6 +1420,6 @@ var init_tmux = __esmMin((() => {
 	getAgentSessions = () => listSessions().pipe(Effect.map((sessions) => sessions.filter((s) => s.name.startsWith("agent-"))));
 }));
 //#endregion
-export { init_child_env as $, listPaneValues as A, sendKeysAsync as B, getWindowDimensions as C, killSession as D, isPaneDead as E, parseTmuxPaneRecords as F, paneTreeHasHarnessProcess as G, sessionExists as H, querySessionSync as I, init_ui_theme as J, colorFgBgForTheme as K, resizeWindow as L, listSessionNames as M, listSessions as N, killSessionSync as O, listSessionsSync as P, buildChildEnvWithoutTmuxSync as Q, sendEscapeKeyAsync as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, sessionExistsSync as U, sendRawKeystroke as V, setOption as W, BLANKED_PROVIDER_ENV as X, setUiTheme as Y, buildChildEnvSync as Z, getAgentSessions as _, capturePaneSync as a, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, listPaneValuesSync as j, listAllPaneRecords as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, capturePaneText as o, ensureOverdeckTmuxServerSync as p, getUiThemeSync as q, buildTmuxCommandString as r, createSession as s, MessageDeliveryFailed as t, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeys as z };
+export { colorFgBgForTheme as $, listPaneValues as A, sendKeysAsync as B, getWindowDimensions as C, killSession as D, isPaneDead as E, parseTmuxPaneRecords as F, tmuxExecAsync as G, sessionExists as H, querySessionSync as I, init_pane_choice_menu as J, validateSessionName as K, resizeWindow as L, listSessionNames as M, listSessions as N, killSessionSync as O, listSessionsSync as P, paneTreeHasHarnessProcess as Q, sendEscapeKeyAsync as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, sessionExistsSync as U, sendRawKeystroke as V, setOption as W, paneHasBlockingChoiceMenu as X, paneChoiceMenuSignature as Y, parsePaneChoiceMenu as Z, getAgentSessions as _, capturePaneSync as a, buildChildEnvWithoutTmuxSync as at, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, getUiThemeSync as et, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, buildChildEnvSync as it, listPaneValuesSync as j, listAllPaneRecords as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, setUiTheme as nt, capturePaneText as o, init_child_env as ot, ensureOverdeckTmuxServerSync as p, buildChoiceKeystrokes as q, buildTmuxCommandString as r, BLANKED_PROVIDER_ENV as rt, createSession as s, MessageDeliveryFailed as t, init_ui_theme as tt, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeys as z };
 
-//# sourceMappingURL=tmux-R7N7y-Mh.js.map
+//# sourceMappingURL=tmux-CfDHob9M.js.map

package/server/{tmux-B6z7h_vZ.js → tmux-Ctk6RV5l.js}

@@ -1,3 +1,3 @@
-import { D as killSession, E as isPaneDead, H as sessionExists, M as listSessionNames, k as listAllPaneRecords, w as init_tmux } from "./tmux-R7N7y-Mh.js";
+import { D as killSession, E as isPaneDead, H as sessionExists, M as listSessionNames, k as listAllPaneRecords, w as init_tmux } from "./tmux-CfDHob9M.js";
 init_tmux();
 export { isPaneDead, killSession, listAllPaneRecords, listSessionNames, sessionExists };

package/server/{token-BK6t8BIT.js → token-DrxwytsZ.js}

@@ -1,5 +1,5 @@
 import { t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as require_token_error, t as require_token_util } from "./token-util-DxXu-vd1.js";
+import { r as require_token_error, t as require_token_util } from "./token-util-B48BlCba.js";
 //#region ../../../node_modules/.bun/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js
 var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var __defProp = Object.defineProperty;
@@ -54,4 +54,4 @@ var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 export default require_token();
 export {};
 
-//# sourceMappingURL=token-BK6t8BIT.js.map
+//# sourceMappingURL=token-DrxwytsZ.js.map

package/server/{token-util-DxXu-vd1.js → token-util-B48BlCba.js}

@@ -432,4 +432,4 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 export { require_auth_errors as n, require_token_error as r, require_token_util as t };
 
-//# sourceMappingURL=token-util-DxXu-vd1.js.map
+//# sourceMappingURL=token-util-B48BlCba.js.map

package/server/token-util-D411CAq9.js

@@ -0,0 +1,3 @@
+import { t as require_token_util } from "./token-util-B48BlCba.js";
+export default require_token_util();
+export {};

package/server/{tracker-config-G6latr8C.js → tracker-config-BcPMElRB.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Tn as init_projects, f as loadConfigSync, gn as getIssuePrefix, jn as loadProjectsConfigSync, t as init_config_yaml } from "./config-yaml-DySPNmKN.js";
+import { Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, f as loadConfigSync, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
 import { existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
@@ -142,4 +142,4 @@ var init_tracker_config = __esmMin((() => {
 //#endregion
 export { init_tracker_config as a, initTrackerConfigCache as i, getLinearApiKey as n, validateRallyConfig as o, getRallyConfig as r, getGitHubConfig as t };
 
-//# sourceMappingURL=tracker-config-G6latr8C.js.map
+//# sourceMappingURL=tracker-config-BcPMElRB.js.map

package/server/{tracker-utils-DHv5pSDT.js → tracker-utils-CJ6BHjcD.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Jn as extractPrefixSync, Tn as init_projects, Yn as init_issue_id, Zn as parseIssueIdSync, gn as getIssuePrefix, jn as loadProjectsConfigSync, mr as init_errors, qn as extractNumberSync } from "./config-yaml-DySPNmKN.js";
+import { Fr as init_errors, Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, gr as init_issue_id, hr as extractPrefixSync, mr as extractNumberSync, vr as parseIssueIdSync } from "./config-yaml-CxdwhAIA.js";
 import "effect";
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
@@ -118,6 +118,6 @@ var init_tracker_utils = __esmMin((() => {
 	init_errors();
 }));
 //#endregion
-export { resolveTrackerTypeSync as a, resolveGitHubIssueSync as i, init_tracker_utils as n, parseGitHubReposSync as r, extractIssuePrefix as t };
+export { resolveGitHubIssueSync as n, resolveTrackerTypeSync as r, init_tracker_utils as t };
 
-//# sourceMappingURL=tracker-utils-DHv5pSDT.js.map
+//# sourceMappingURL=tracker-utils-CJ6BHjcD.js.map

package/server/{traefik-connect-Df2uXPsQ.js → traefik-connect-DZ6nMYMj.js}

@@ -69,4 +69,4 @@ var init_traefik_connect = __esmMin((() => {
 //#endregion
 export { reconcileTraefikNetworks as n, init_traefik_connect as t };
 
-//# sourceMappingURL=traefik-connect-Df2uXPsQ.js.map
+//# sourceMappingURL=traefik-connect-DZ6nMYMj.js.map

package/server/{tunnel-DGdUkGoZ.js → tunnel-Bp-dRHZz.js}

@@ -1,3 +1,3 @@
-import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-CDVKJpRv.js";
+import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-DUbUPElU.js";
 init_tunnel();
 export { removeTunnelIngress };

package/server/{tunnel-CDVKJpRv.js → tunnel-DUbUPElU.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { fr as TrackerError, mr as init_errors } from "./config-yaml-DySPNmKN.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CIVWZOQr.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CxdwhAIA.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-BdZM4PvZ.js";
 import { Effect } from "effect";
 import { readFileSync } from "fs";
 import { resolve } from "path";
@@ -217,4 +217,4 @@ var init_tunnel = __esmMin((() => {
 //#endregion
 export { init_tunnel as n, removeTunnelIngress as r, addTunnelIngress as t };
 
-//# sourceMappingURL=tunnel-CDVKJpRv.js.map
+//# sourceMappingURL=tunnel-DUbUPElU.js.map

package/server/{typed-errors-BHhE85Ul.js → typed-errors-CKeoDdU3.js}

@@ -1,3 +1,3 @@
-import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-2BTMxkZq.js";
+import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-DyjseiB6.js";
 init_typed_errors();
 export { AgentAlreadyRunning, AgentStartError, IssueNotFound, PlanEmpty, RateLimited, TasksNotInitialized, TrackerApiError, TrackerNotConfigured, WorkspaceCreateError, WorkspaceNotFound };

package/server/{typed-errors-2BTMxkZq.js → typed-errors-DyjseiB6.js}

@@ -23,4 +23,4 @@ var init_typed_errors = __esmMin((() => {
 //#endregion
 export { RateLimited as a, TrackerNotConfigured as c, init_typed_errors as d, PlanEmpty as i, WorkspaceCreateError as l, AgentStartError as n, TasksNotInitialized as o, IssueNotFound as r, TrackerApiError as s, AgentAlreadyRunning as t, WorkspaceNotFound as u };
 
-//# sourceMappingURL=typed-errors-2BTMxkZq.js.map
+//# sourceMappingURL=typed-errors-DyjseiB6.js.map

package/server/{types-hraoaQIp.js → types-Cm5ASJbq.js}

@@ -36,4 +36,4 @@ var init_types = __esmMin((() => {
 //#endregion
 export { PAN_DIRNAME as a, PAN_SESSIONS_FILENAME as c, WORKSPACE_RUNTIME_DIRNAME as d, asPanSpecDocument as f, PAN_CONTINUE_FILENAME as i, PAN_SPECS_DIRNAME as l, isPanSpecStatus as m, PAN_CONTEXT_FILENAME as n, PAN_DRAFTS_DIRNAME as o, init_types as p, PAN_CONTINUES_DIRNAME as r, PAN_FEEDBACK_DIRNAME as s, LEGACY_WORKSPACE_RUNTIME_DIRNAME as t, PAN_SPEC_FILENAME as u };
 
-//# sourceMappingURL=types-hraoaQIp.js.map
+//# sourceMappingURL=types-Cm5ASJbq.js.map

package/server/{types-5M0lupud.js → types-Di8wdakq.js}

@@ -59,4 +59,4 @@ var init_types = __esmMin((() => {}));
 //#endregion
 export { stepSkipped as a, stepOk as i, init_types as n, stepFailed as r, getLinearApiKey as t };
 
-//# sourceMappingURL=types-5M0lupud.js.map
+//# sourceMappingURL=types-Di8wdakq.js.map

package/server/uat-promote-verification-CoJuh7XO.js

@@ -0,0 +1,92 @@
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { C as setReviewStatusSync, d as getReviewStatusSync, p as init_review_status } from "./review-status-CGvlA4o_.js";
+import { A as listUatGenerationsSync, c as init_merge_sync } from "./merge-sync-kr4vqyjM.js";
+import { a as init_git_utils, c as rehydrateHeadAnchor } from "./git-utils-CsvYfJU3.js";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+//#region ../../lib/cloister/uat-promote-verification.ts
+init_git_utils();
+init_merge_sync();
+init_projects();
+init_review_status();
+const execFileAsync = promisify(execFile);
+/** Build the verification verdict recorded when an operator promotes a tested UAT batch. */
+function buildUatPromotionStamp(current, member, evidence) {
+	if (current?.verificationStatus === "passed" || current?.verificationStatus === "skipped") return {};
+	const shortSha = evidence.mergeSha?.slice(0, 9);
+	const promotedAt = shortSha ? ` promoted to main at ${shortSha}` : " promoted to main";
+	return {
+		verificationStatus: "passed",
+		verificationNotes: `uat-promotion: operator UAT of batch ${evidence.generationName}${promotedAt} (PAN-3114)`,
+		...member.headSha ? { lastVerifiedCommit: rehydrateHeadAnchor(member.headSha) } : {}
+	};
+}
+/** Record UAT-promotion verification verdicts through the review-status write door. */
+function recordUatPromotionVerdicts(gen, mergeSha) {
+	const stampedIssueIds = [];
+	for (const member of gen.members) {
+		const current = getReviewStatusSync(member.issueId);
+		const stamp = buildUatPromotionStamp(current, member, {
+			generationName: gen.name,
+			mergeSha
+		});
+		if (Object.keys(stamp).length === 0) continue;
+		setReviewStatusSync(member.issueId, stamp, current ?? void 0);
+		stampedIssueIds.push(member.issueId);
+		console.log(`✓ Recorded UAT-promotion verification verdict for ${member.issueId} (${gen.name} at ${mergeSha.slice(0, 9)})`);
+	}
+	return stampedIssueIds;
+}
+async function findUatPromotionMergeSha(projectRoot, generationName) {
+	try {
+		const { stdout } = await execFileAsync("git", [
+			"log",
+			"--fixed-strings",
+			`--grep=Merge UAT batch ${generationName}`,
+			"--format=%H",
+			"-1",
+			"origin/main"
+		], {
+			cwd: projectRoot,
+			encoding: "utf-8",
+			timeout: 1e4
+		});
+		return stdout.trim() || void 0;
+	} catch {
+		return;
+	}
+}
+const DEFAULT_HEAL_DEPS = {
+	resolveProject: resolveProjectFromIssueSync,
+	listGenerations: listUatGenerationsSync,
+	getReviewStatus: getReviewStatusSync,
+	setReviewStatus: setReviewStatusSync,
+	findMergeSha: findUatPromotionMergeSha
+};
+/** Restore discarded UAT-promotion evidence for a member of a previously promoted batch. */
+async function healUatPromotionVerification(issueId, deps = DEFAULT_HEAL_DEPS) {
+	const project = deps.resolveProject(issueId);
+	if (!project) return null;
+	const generation = deps.listGenerations({
+		projectRoot: project.projectPath,
+		statuses: ["promoted"]
+	}).filter((candidate) => candidate.members.some((member) => member.issueId === issueId)).sort((left, right) => right.updatedAt.localeCompare(left.updatedAt))[0];
+	if (!generation) return null;
+	const member = generation.members.find((candidate) => candidate.issueId === issueId);
+	const current = deps.getReviewStatus(issueId);
+	if (current?.verificationStatus === "passed" || current?.verificationStatus === "skipped") return null;
+	const mergeSha = await deps.findMergeSha(project.projectPath, generation.name).catch(() => void 0);
+	const stamp = buildUatPromotionStamp(current, member, {
+		generationName: generation.name,
+		mergeSha
+	});
+	deps.setReviewStatus(issueId, stamp, current ?? void 0);
+	return {
+		generation: generation.name,
+		...mergeSha ? { mergeSha } : {}
+	};
+}
+//#endregion
+export { buildUatPromotionStamp, healUatPromotionVerification, recordUatPromotionVerdicts };
+
+//# sourceMappingURL=uat-promote-verification-CoJuh7XO.js.map

package/server/uat-train-Dewoatps.js

@@ -0,0 +1,2 @@
+import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-4Q0k06CQ.js";
+export { canStartUatTrainReconciler, getUatCandidatePayload, getUatGenerationsPayload, postUatGenerationPromotePayload, postUatGenerationStackPayload, resolveUatProjectRoot, runUatTrainReconcile, runUatTrainReconcileAllProjects, startUatTrainReconciler, stopUatTrainReconciler };

package/server/{validate-IfDGkaVR.js → validate-B0C8p66t.js}

@@ -1,12 +1,13 @@
-import { c as init_review_status_sync, r as getAllReviewStatusesFromDb } from "./review-status-sync-BTOpxtTC.js";
-import { H as liveOrderIssueLookup, V as listBooks } from "./flywheel-DHrgCphM.js";
+import { c as init_review_status_sync, r as getAllReviewStatusesFromDb } from "./review-status-sync-0GxOqeqF.js";
+import { H as liveOrderIssueLookup, V as listBooks } from "./flywheel-BHx8XuMr.js";
 import { join } from "node:path";
 import { existsSync, readdirSync, statSync } from "node:fs";
 //#region ../../lib/cloister/merge-blockers.ts
 init_review_status_sync();
 /**
-* PRs that passed review but cannot merge for a GitHub-native reason (PAN-1620):
-* merge_conflict / failing_checks / not_mergeable. These sit forever unless rebased.
+* PRs that passed review but cannot merge for a native gate reason (PAN-1620):
+* merge conflicts, failing checks, a not-mergeable state, or a sibling repo stranded
+* with unmerged commits and no merged review artifact.
 *
 * Reads `review_status` directly from SQLite — NO HTTP — so it works inside a
 * network-sandboxed harness (e.g. codex's bwrap sandbox) where a `curl` to the
@@ -17,7 +18,8 @@ init_review_status_sync();
 const MERGE_BLOCKER_TYPES = new Set([
 	"merge_conflict",
 	"failing_checks",
-	"not_mergeable"
+	"not_mergeable",
+	"unmerged_sibling_repo"
 ]);
 function getMergeBlockersPayload() {
 	const statuses = getAllReviewStatusesFromDb();
@@ -174,4 +176,4 @@ function validateBookForStart(stateRoot, book, options = {}) {
 //#endregion
 export { getMergeBlockersPayload as i, hasOrderIssuePrd as n, validateBookForStart as r, createOrderPrdLookup as t };
 
-//# sourceMappingURL=validate-IfDGkaVR.js.map
+//# sourceMappingURL=validate-B0C8p66t.js.map