@overdeck/desktop 0.46.0 → 0.47.0

package/server/{orphan-proposed-reconciler-Dg6U4ADZ.js → orphan-proposed-reconciler-B6vJHxtX.js}

@@ -1,37 +1,193 @@
-import { Gn as init_projects, Jn as listProjects, ar as resolveProjectFromIssueSync } from "./config-yaml-CmOPzmBb.js";
+import { a as __toCommonJS } from "./rolldown-runtime-DNCzzKnI.js";
+import { Gn as init_projects, Jn as listProjects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
 import { o as init_activity_logger, r as emitActivityEntrySync } from "./activity-logger-CyteR4JO.js";
-import { M as listSessionNames, w as init_tmux } from "./tmux-B1Wbxz5o.js";
-import { f as init_review_status, u as getReviewStatusSync } from "./review-status-yljtTd-q.js";
-import { b as init_agents, tr as getAgentState } from "./queries-DHJm7bTd.js";
-import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-L0FKtjq2.js";
-import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DvMTQSOS.js";
-import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-CTdOWYMi.js";
-import { d as readPlanSync, i as findPlanSync, o as init_io } from "./io-VHvc0Ssp.js";
-import { i as loadCloisterConfig, r as init_config } from "./config-B2IMcBxx.js";
-import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CQ1Lo6LA.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-B6KJkmHZ.js";
+import { M as listSessionNames, w as init_tmux } from "./tmux-CfDHob9M.js";
+import { d as getReviewStatusSync, p as init_review_status } from "./review-status-CGvlA4o_.js";
+import { b as init_agents, tr as getAgentState } from "./queries-C-MUZaIy.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-CJ6BHjcD.js";
+import { n as init_issue_service_singleton, r as issue_service_singleton_exports } from "./issue-service-singleton-C6ZduvuY.js";
+import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-DzK385vD.js";
+import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-B4Xdb4cY.js";
+import { S as init_specs, d as readPlanSync, i as findPlanSync, o as init_io, x as findSpecByIssue } from "./io-B00PBNku.js";
+import { a as readAutoSpawnOnFinalizeFlagAsync } from "./auto-spawn-consent-CQ9Bi9q6.js";
+import { c as init_control_settings, f as isFlywheelAutoPickupBacklog } from "./control-settings-CiqGxXnc.js";
+import { i as loadCloisterConfig, r as init_config } from "./config-Bi3u1VK7.js";
+import { f as init_github_app, p as isGitHubAppConfigured, v as listPullRequestsForHead } from "./github-app-CmNk0zLU.js";
+import { h as init_pickup, r as LEGACY_PARKED_LABELS } from "./pickup-DWhqzliO.js";
+import { r as activeOrderBookIssues } from "./flywheel-BHx8XuMr.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-BehTG1be.js";
+import { t as recordDeadEndNeedsYou } from "./dead-end-trip-D8A3msX9.js";
+import "./spawn-planning-session-pcF-YeFE.js";
 import { Effect } from "effect";
 import { existsSync, readdirSync } from "fs";
 import { join } from "path";
 import { readFile, readdir } from "fs/promises";
 import { exec } from "child_process";
 import { promisify } from "util";
-//#region ../../lib/cloister/orphan-proposed-reconciler.ts
-init_agents();
+//#region ../../lib/cloister/autonomous-work-dispatch.ts
 init_activity_logger();
+init_tmux();
+init_tracker_utils();
 init_internal_token();
-init_projects();
+init_lifecycle();
 init_review_status();
-init_tmux();
 init_io();
-init_lifecycle();
+init_agents();
 init_github_app();
-init_tracker_utils();
+init_pickup();
+init_control_settings();
+init_specs();
+init_projects();
+const RELEASE_CONTEXT_CACHE_MS = 5e3;
+let autoPickupCache = null;
+const activeBookCache = /* @__PURE__ */ new Map();
+function getSharedIssues() {
+	const { getSharedIssueService } = (init_issue_service_singleton(), __toCommonJS(issue_service_singleton_exports));
+	return getSharedIssueService().getIssues();
+}
+async function defaultFindPlannedState(projectRoot, issueId) {
+	const entry = await Effect.runPromise(findSpecByIssue(projectRoot, issueId).pipe(Effect.catch(() => Effect.succeed(null))));
+	if (!entry) return null;
+	return {
+		status: entry.status,
+		itemCount: Array.isArray(entry.document.plan?.items) ? entry.document.plan.items.length : 0
+	};
+}
+function isPlannedState(state) {
+	return state !== null && (state.status === "proposed" || state.status === "active") && state.itemCount > 0;
+}
+async function cachedAutoPickup(deps, now) {
+	if (deps.isAutoPickupBacklog) return deps.isAutoPickupBacklog();
+	if (autoPickupCache && autoPickupCache.expiresAt > now) return autoPickupCache.value;
+	const value = isFlywheelAutoPickupBacklog();
+	autoPickupCache = {
+		value,
+		expiresAt: now + RELEASE_CONTEXT_CACHE_MS
+	};
+	return value;
+}
+async function cachedActiveBookIssues(projectRoot, deps, now) {
+	if (deps.activeBookIssues) return deps.activeBookIssues(projectRoot);
+	const cached = activeBookCache.get(projectRoot);
+	if (cached && cached.expiresAt > now) return cached.value;
+	const value = await activeOrderBookIssues(projectRoot);
+	activeBookCache.set(projectRoot, {
+		value,
+		expiresAt: now + RELEASE_CONTEXT_CACHE_MS
+	});
+	return value;
+}
+function emptyInput(labels, planned = false) {
+	return {
+		labels,
+		planned,
+		autoPickupBacklog: false,
+		activeBookMember: false,
+		autoSpawnOnFinalizeConsent: false
+	};
+}
+async function gatherAutonomousWorkDispatchInput(issueId, deps = {}) {
+	const normalizedIssueId = issueId.trim().toUpperCase();
+	let labels = null;
+	try {
+		const issue = (deps.getIssues ?? getSharedIssues)().find((candidate) => typeof candidate["identifier"] === "string" && candidate["identifier"].toUpperCase() === normalizedIssueId);
+		if (issue) labels = (Array.isArray(issue["labels"]) ? issue["labels"] : []).map((label) => typeof label === "string" ? label : label?.name ?? "").filter((label) => Boolean(label));
+	} catch {}
+	const labelDecision = decideAutonomousWorkDispatch({ ...emptyInput(labels, true) });
+	if (!labelDecision.allow && labelDecision.code !== "not-released") return emptyInput(labels);
+	let project = null;
+	let planned = deps.knownPlanned === true;
+	if (!planned) try {
+		project = (deps.resolveProject ?? resolveProjectFromIssueSync)(normalizedIssueId);
+		planned = Boolean(project && isPlannedState(await (deps.findPlannedState ?? defaultFindPlannedState)(project.projectPath, normalizedIssueId)));
+	} catch {
+		planned = false;
+	}
+	if (!planned) return emptyInput(labels);
+	if (new Set(labels?.map((label) => label.toLowerCase())).has("released")) return emptyInput(labels, true);
+	if (!project) try {
+		project = (deps.resolveProject ?? resolveProjectFromIssueSync)(normalizedIssueId);
+	} catch {
+		project = null;
+	}
+	const now = (deps.now ?? Date.now)();
+	const [autoPickupBacklog, activeIssues, autoSpawnOnFinalizeConsent] = await Promise.all([
+		cachedAutoPickup(deps, now).catch(() => false),
+		project ? cachedActiveBookIssues(project.projectPath, deps, now).catch(() => /* @__PURE__ */ new Set()) : /* @__PURE__ */ new Set(),
+		Promise.resolve((deps.readAutoSpawnConsent ?? readAutoSpawnOnFinalizeFlagAsync)(normalizedIssueId)).catch(() => false)
+	]);
+	return {
+		labels,
+		planned: true,
+		autoPickupBacklog,
+		activeBookMember: activeIssues.has(normalizedIssueId),
+		autoSpawnOnFinalizeConsent
+	};
+}
+function decideAutonomousWorkDispatch(input) {
+	if (input.labels === null) return {
+		allow: false,
+		code: "labels-unavailable",
+		reason: "Autonomous work dispatch was refused because tracker labels are unavailable, so ready, released, parked, vetoed, objection, and epic state cannot be verified. Restore label access or run pan start manually."
+	};
+	const labels = new Set(input.labels.map((label) => label.toLowerCase()));
+	const hasLabel = (label) => labels.has(label);
+	if (hasLabel("parked") || LEGACY_PARKED_LABELS.some(hasLabel)) return {
+		allow: false,
+		code: "parked",
+		reason: "Autonomous work dispatch was refused because the issue is parked. Remove the parked label before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("vetoed")) return {
+		allow: false,
+		code: "vetoed",
+		reason: "Autonomous work dispatch was refused because the issue is vetoed. Remove the veto before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("objection")) return {
+		allow: false,
+		code: "objection",
+		reason: "Autonomous work dispatch was refused because the issue has an open objection. Resolve the objection before allowing autonomous work, or run pan start manually."
+	};
+	if (hasLabel("epic")) return {
+		allow: false,
+		code: "epic",
+		reason: "Autonomous work dispatch was refused because the issue is an epic container. Start one of its child issues instead."
+	};
+	if (!hasLabel("ready")) return {
+		allow: false,
+		code: "not-ready",
+		reason: "Autonomous work dispatch was refused because the issue is not ready. Add the ready label before allowing autonomous work, or run pan start manually."
+	};
+	if (!input.planned) return {
+		allow: false,
+		code: "not-planned",
+		reason: "Autonomous work dispatch was refused because no active implementation plan with work items is available. Complete planning or run pan start manually."
+	};
+	const releaseSource = hasLabel("released") ? "released-label" : input.autoPickupBacklog ? "auto-pickup" : input.activeBookMember ? "active-order-book" : input.autoSpawnOnFinalizeConsent ? "planning-consent" : null;
+	if (!releaseSource) return {
+		allow: false,
+		code: "not-released",
+		reason: "Autonomous work dispatch was refused because the issue is not released and no release override applies. Add the released label, enable auto-pickup, include the issue in the active order book, or launch planning with auto-start; alternatively, run pan start manually."
+	};
+	return {
+		allow: true,
+		releaseSource
+	};
+}
+//#endregion
+//#region ../../lib/cloister/orphan-proposed-reconciler.ts
+/**
+* Reconciles proposed specs only after the shared autonomous-work pickup gate
+* passes; explicit planning auto-start consent is a release source, not a bypass
+* for readiness, tracker-label availability, or blocker labels.
+*/
+init_projects();
 init_config();
 init_issue_closed();
 const DEFAULT_ATTEMPT_INTERVAL_MS = 300 * 1e3;
+const MAX_PICKUP_REFUSAL_REASONS = 512;
 const execAsync = promisify(exec);
 const attemptCooldowns = /* @__PURE__ */ new Map();
+const pickupRefusalReasons = /* @__PURE__ */ new Map();
 const terminalClosedIssueIds = /* @__PURE__ */ new Set();
 let scanInFlight = false;
 function hasReviewPipelinePresence(status) {
@@ -175,7 +331,7 @@ function classifySpawnSkip(status, body) {
 	if (status === 422 && /already closed|closed issue|cannot start an agent for a closed issue/i.test(error)) return "closed-issue";
 	return "spawn-failed";
 }
-async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = internalDashboardOrigin()) {
+async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = internalDashboardOrigin(), autoSpawnConsentRequired = false) {
 	const internalToken = getInternalTokenSync();
 	const response = await fetch(new URL("/api/agents", dashboardOrigin), {
 		method: "POST",
@@ -186,13 +342,16 @@ async function spawnWorkAgentThroughAgentsEndpoint(issueId, dashboardOrigin = in
 		},
 		body: JSON.stringify({
 			issueId,
-			role: "work"
+			role: "work",
+			startedBy: "orphan-proposed-reconciler",
+			autoSpawnConsentRequired
 		})
 	});
 	const body = await response.json().catch(() => ({}));
 	const agentId = typeof body["agentId"] === "string" ? body["agentId"] : `agent-${issueId.toLowerCase()}`;
 	if (response.ok && body["success"] !== false) return {
 		spawned: true,
+		...body["startingContainers"] === true ? { queued: true } : {},
 		agentId
 	};
 	return {
@@ -217,7 +376,8 @@ async function triggerRebuildAndStart(issueId, dashboardOrigin = internalDashboa
 			"content-type": "application/json",
 			origin: dashboardOrigin,
 			...internalToken ? { [INTERNAL_TOKEN_HEADER]: internalToken } : {}
-		}
+		},
+		body: JSON.stringify({ startedBy: "workspace-rebuild-recovery" })
 	});
 	const body = await response.json().catch(() => ({}));
 	if (response.ok && body["success"] !== false) return { triggered: true };
@@ -255,10 +415,30 @@ function emitReconcilerActivity(level, message, details = {}, issueId = "ALL") {
 function logReconcilerDiagnostic(kind, info = {}) {
 	console.debug(`[orphan-proposed-reconciler] ${kind}`, info);
 }
+async function recordPickupRefusal(issueId, now, decision) {
+	const reason = `pickup-gate:${decision.code}`;
+	logReconcilerDiagnostic("spawn-skipped", {
+		issueId,
+		reason
+	});
+	attemptCooldowns.set(issueId, now);
+	if (pickupRefusalReasons.get(issueId) !== decision.reason) {
+		if (!pickupRefusalReasons.has(issueId) && pickupRefusalReasons.size >= MAX_PICKUP_REFUSAL_REASONS) {
+			const oldestIssueId = pickupRefusalReasons.keys().next().value;
+			if (oldestIssueId) pickupRefusalReasons.delete(oldestIssueId);
+		}
+		pickupRefusalReasons.set(issueId, decision.reason);
+		await recordDeadEndNeedsYou(issueId, "orphan-proposed-pickup-gate", "proposed", decision.reason);
+	}
+	return [`Skipped orphan proposed spec ${issueId}: ${reason}`];
+}
+async function defaultEvaluatePickupGate(issueId) {
+	return decideAutonomousWorkDispatch(await gatherAutonomousWorkDispatchInput(issueId, { knownPlanned: true }));
+}
 /**
-* PAN-1908: reactive orphan-proposed handler. When a spec reaches `proposed`
-* and no work agent is running/starting, spawn a work agent for that issue
-* without scanning all project specs.
+* PAN-1908: reactive orphan-proposed handler. When a spec reaches `proposed`,
+* the autonomous-work pickup gate allows it, and no work agent is
+* running/starting, spawn a work agent without scanning all project specs.
 */
 async function handleOrphanProposedSpec(issueId, options = {}) {
 	const upperIssueId = issueId.trim().toUpperCase();
@@ -324,8 +504,20 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 		});
 		return [];
 	}
+	let pickupGate;
+	try {
+		pickupGate = await (options.evaluatePickupGate ?? defaultEvaluatePickupGate)(upperIssueId);
+	} catch (error) {
+		pickupGate = {
+			allow: false,
+			code: "labels-unavailable",
+			reason: `Autonomous work dispatch was refused because pickup evaluation failed: ${error instanceof Error ? error.message : String(error)}`
+		};
+	}
+	if (!pickupGate.allow) return recordPickupRefusal(upperIssueId, now, pickupGate);
+	pickupRefusalReasons.delete(upperIssueId);
 	const agentId = `agent-${issueLower}`;
-	const agentState = await Effect.runPromise(getAgentState(agentId).pipe(Effect.catch(() => Effect.succeed(null))));
+	const agentState = options.getAgentStateForIssue ? await options.getAgentStateForIssue(agentId) : await Effect.runPromise(getAgentState(agentId).pipe(Effect.catch(() => Effect.succeed(null))));
 	if (agentState?.status === "starting" || agentState?.status === "running") {
 		logReconcilerDiagnostic("spawn-skipped", {
 			issueId: upperIssueId,
@@ -340,7 +532,7 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 		});
 		return [];
 	}
-	if (hasIssueScopedSession(await Effect.runPromise(listSessionNames().pipe(Effect.catch(() => Effect.succeed([])))), agentId)) {
+	if (hasIssueScopedSession(options.tmuxSessionNames ?? await Effect.runPromise(listSessionNames().pipe(Effect.catch(() => Effect.succeed([])))), agentId)) {
 		logReconcilerDiagnostic("spawn-skipped", {
 			issueId: upperIssueId,
 			reason: "issue-scoped-session"
@@ -394,15 +586,17 @@ async function handleOrphanProposedSpec(issueId, options = {}) {
 	}
 	attemptCooldowns.set(upperIssueId, now);
 	try {
-		const spawn = await (options.spawnWorkAgent ?? ((id) => spawnWorkAgentThroughAgentsEndpoint(id, options.dashboardOrigin)))(upperIssueId);
+		const autoSpawnConsentRequired = pickupGate.releaseSource === "planning-consent";
+		const spawn = await (options.spawnWorkAgent ?? ((id, required) => spawnWorkAgentThroughAgentsEndpoint(id, options.dashboardOrigin, required)))(upperIssueId, autoSpawnConsentRequired);
 		if (spawn.spawned) {
-			emitReconcilerActivity("success", `Started work agent for ${upperIssueId} — proposed spec had tasks but no running agent`, {
+			emitReconcilerActivity("success", spawn.queued ? `Queued container startup for ${upperIssueId} before work-agent spawn` : `Started work agent for ${upperIssueId} — proposed spec had tasks but no running agent`, {
 				issueId: upperIssueId,
 				agentId: spawn.agentId,
+				queued: spawn.queued === true,
 				projectKey,
 				projectPath
 			}, upperIssueId);
-			return [`Spawned work agent for orphan proposed spec ${upperIssueId}`];
+			return [spawn.queued ? `Queued container startup for orphan proposed spec ${upperIssueId}` : `Spawned work agent for orphan proposed spec ${upperIssueId}`];
 		}
 		const reason = spawn.skippedReason ?? "spawn-failed";
 		if (reason === "closed-issue") {
@@ -453,6 +647,8 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 	try {
 		const actions = [];
 		const candidates = await findOrphanProposedSpecsForReconciler(options);
+		const liveCandidateIds = new Set(candidates.map((candidate) => candidate.issueId));
+		for (const issueId of pickupRefusalReasons.keys()) if (!liveCandidateIds.has(issueId)) pickupRefusalReasons.delete(issueId);
 		for (const candidate of candidates) {
 			let planDoc;
 			try {
@@ -467,6 +663,7 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 			const result = await handleOrphanProposedSpec(candidate.issueId, {
 				spawnWorkAgent: options.spawnWorkAgent,
 				hasOpenPrForBranch: options.hasOpenPrForBranch,
+				evaluatePickupGate: options.evaluatePickupGate,
 				dashboardOrigin: options.dashboardOrigin,
 				config: {
 					enabled: true,
@@ -479,7 +676,9 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 				spec: {
 					path: candidate.specPath,
 					doc: planDoc
-				}
+				},
+				tmuxSessionNames: options.tmuxSessionNames,
+				getAgentStateForIssue: options.getAgentStateForIssue
 			});
 			actions.push(...result);
 		}
@@ -489,6 +688,6 @@ async function reconcileOrphanProposedSpecs(options = {}) {
 	}
 }
 //#endregion
-export { spawnWorkAgentThroughAgentsEndpoint as a, reconcileOrphanProposedSpecs as i, handleOrphanProposedSpec as n, triggerRebuildAndStart as o, hasReviewPipelinePresence as r, findOrphanProposedSpecsForReconciler as t };
+export { spawnWorkAgentThroughAgentsEndpoint as a, gatherAutonomousWorkDispatchInput as c, reconcileOrphanProposedSpecs as i, handleOrphanProposedSpec as n, triggerRebuildAndStart as o, hasReviewPipelinePresence as r, decideAutonomousWorkDispatch as s, findOrphanProposedSpecsForReconciler as t };
 
-//# sourceMappingURL=orphan-proposed-reconciler-Dg6U4ADZ.js.map
+//# sourceMappingURL=orphan-proposed-reconciler-B6vJHxtX.js.map

package/server/{orphan-proposed-reconciler-CWmOdM9-.js → orphan-proposed-reconciler-DcgTPPFY.js}

@@ -1,2 +1,2 @@
-import { n as handleOrphanProposedSpec } from "./orphan-proposed-reconciler-Dg6U4ADZ.js";
+import { n as handleOrphanProposedSpec } from "./orphan-proposed-reconciler-B6vJHxtX.js";
 export { handleOrphanProposedSpec };

package/server/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@overdeck/desktop-server",
-  "version": "0.46.0",
+  "version": "0.47.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@overdeck/desktop-server",
-      "version": "0.46.0",
+      "version": "0.47.0",
       "dependencies": {
         "@effect/platform-node": "4.0.0-beta.73",
         "@google-cloud/speech": "7.3.1",
@@ -446,9 +446,9 @@
       }
     },
     "node_modules/@types/node": {
-      "version": "26.1.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.1.tgz",
-      "integrity": "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==",
+      "version": "26.1.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz",
+      "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==",
       "license": "MIT",
       "dependencies": {
         "undici-types": "~8.3.0"

package/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overdeck/desktop-server",
-  "version": "0.46.0",
+  "version": "0.47.0",
   "private": true,
   "type": "module",
   "dependencies": {

package/server/{pan-dir-ubraCiUg.js → pan-dir-DMzF5wne.js}

@@ -1,7 +1,7 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Tr as FsError, cn as flushAutoCommits, ln as init_auto_commit, un as queueAutoCommit } from "./config-yaml-CmOPzmBb.js";
-import { p as init_types } from "./types-hraoaQIp.js";
-import { F as getReadableWorkspacePanPaths, I as getWorkspacePanPaths, L as init_continue, M as getProjectPanPaths, N as ensureWorkspacePanDir, P as getLegacyWorkspacePanPaths, S as init_specs, b as ensurePanDirs } from "./io-VHvc0Ssp.js";
+import { Fr as init_errors, Tr as FsError, cn as flushAutoCommits, ln as init_auto_commit, un as queueAutoCommit } from "./config-yaml-CxdwhAIA.js";
+import { p as init_types } from "./types-Cm5ASJbq.js";
+import { F as getReadableWorkspacePanPaths, I as getWorkspacePanPaths, L as init_continue, M as getProjectPanPaths, N as ensureWorkspacePanDir, P as getLegacyWorkspacePanPaths, S as init_specs, b as ensurePanDirs } from "./io-B00PBNku.js";
 import { Effect, FileSystem } from "effect";
 import { join } from "path";
 import { existsSync, readFileSync, rmSync } from "node:fs";
@@ -291,4 +291,4 @@ var init_pan_dir = __esmMin((() => {
 //#endregion
 export { getDraftPath as a, clearFeedback as c, checkPrdGateSync as i, readFeedback as l, readWorkspaceContext as n, getIssueDraftPath as o, writeWorkspaceContext as r, promoteWorkspacePrdDraft as s, init_pan_dir as t, writeFeedback as u };
 
-//# sourceMappingURL=pan-dir-ubraCiUg.js.map
+//# sourceMappingURL=pan-dir-DMzF5wne.js.map

package/server/{paths-cXmOwSbh.js → paths-sJBSb7Ul.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { ci as init_paths$1, si as getOverdeckHome } from "./config-yaml-CmOPzmBb.js";
+import { ci as getOverdeckHome, li as init_paths$1 } from "./config-yaml-CxdwhAIA.js";
 import { dirname, isAbsolute, join, relative, resolve } from "path";
 import { mkdir } from "fs/promises";
 //#region ../../lib/memory/paths.ts
@@ -62,4 +62,4 @@ var init_paths = __esmMin((() => {
 //#endregion
 export { resolveArchiveDir as a, resolveMemoryRoot as c, resolveRagRunsFile as d, resolveStatusFile as f, init_paths as i, resolveObservationsFile as l, ensureDir as n, resolveFtsDbPath as o, resolveSummariesDir as p, ensureParentDir as r, resolveIssueMemoryRoot as s, assertMemorySafeSegment as t, resolvePendingDir as u };
 
-//# sourceMappingURL=paths-cXmOwSbh.js.map
+//# sourceMappingURL=paths-sJBSb7Ul.js.map

package/server/{pending-lifecycle-claim-DEteYdS9.js → pending-lifecycle-claim-DilzGfgk.js}

@@ -1,4 +1,4 @@
-import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-CpvJnvnQ.js";
+import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-DIk1JSow.js";
 import { basename, dirname, join } from "node:path";
 import { readFile, readdir, rename, unlink } from "node:fs/promises";
 import { randomUUID } from "node:crypto";
@@ -107,4 +107,4 @@ async function settlePendingLifecycleClaim(claim, issueId, succeeded) {
 //#endregion
 export { settlePendingLifecycleClaim as n, claimPendingLifecycleFile as t };
 
-//# sourceMappingURL=pending-lifecycle-claim-DEteYdS9.js.map
+//# sourceMappingURL=pending-lifecycle-claim-DilzGfgk.js.map

package/server/persistent-logger-H_VjuOu7.js

@@ -0,0 +1,57 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { ci as getOverdeckHome, li as init_paths } from "./config-yaml-CxdwhAIA.js";
+import "effect";
+import { appendFileSync, mkdirSync } from "fs";
+import { join } from "path";
+import "fs/promises";
+//#region ../../lib/persistent-logger.ts
+/**
+* Append-only persistent logger for forensic audit trails.
+*
+* Complements the SQLite event store (activity-logger.ts) with flat-file logs
+* that survive event-store resets and are greppable from the shell.
+*
+* Files:
+*   ~/.overdeck/logs/deacon.log        — deacon startup recovery actions
+*   ~/.overdeck/agents/<id>/lifecycle.log — per-agent state transitions
+*/
+function logsDir() {
+	return join(getOverdeckHome(), "logs");
+}
+function agentDir(agentId) {
+	return join(getOverdeckHome(), "agents", agentId);
+}
+function ensureLogsDir() {
+	try {
+		mkdirSync(logsDir(), { recursive: true });
+	} catch {}
+}
+function ensureAgentDir(agentId) {
+	try {
+		mkdirSync(agentDir(agentId), { recursive: true });
+	} catch {}
+}
+function timestamp() {
+	return (/* @__PURE__ */ new Date()).toISOString();
+}
+/** Append a line to ~/.overdeck/logs/deacon.log */
+function logDeaconEventSync(message) {
+	ensureLogsDir();
+	try {
+		appendFileSync(join(logsDir(), "deacon.log"), `[${timestamp()}] ${message}\n`);
+	} catch {}
+}
+/** Append a line to ~/.overdeck/agents/<agentId>/lifecycle.log */
+function logAgentLifecycleSync(agentId, message) {
+	ensureAgentDir(agentId);
+	try {
+		appendFileSync(join(agentDir(agentId), "lifecycle.log"), `[${timestamp()}] ${message}\n`);
+	} catch {}
+}
+var init_persistent_logger = __esmMin((() => {
+	init_paths();
+}));
+//#endregion
+export { logAgentLifecycleSync as n, logDeaconEventSync as r, init_persistent_logger as t };
+
+//# sourceMappingURL=persistent-logger-H_VjuOu7.js.map

package/server/{pickup-D8xtG1J2.js → pickup-DWhqzliO.js}

@@ -166,10 +166,11 @@ function computeEpicGroups(nodes, edges, lk) {
 		}))
 	};
 }
-var READY_LABEL, PARKED_LABEL, VETOED_LABEL, BLOCKS_MAIN_LABEL, RELEASED_LABEL, OBJECTION_LABEL, LEGACY_PARKED_LABELS, EFFORT_UNITS;
+var READY_LABEL, PARKED_LABEL, EPIC_LABEL, VETOED_LABEL, BLOCKS_MAIN_LABEL, RELEASED_LABEL, OBJECTION_LABEL, LEGACY_PARKED_LABELS, EFFORT_UNITS;
 var init_pickup = __esmMin((() => {
 	READY_LABEL = "ready";
 	PARKED_LABEL = "parked";
+	EPIC_LABEL = "epic";
 	VETOED_LABEL = "vetoed";
 	BLOCKS_MAIN_LABEL = "blocks-main";
 	RELEASED_LABEL = "released";
@@ -184,6 +185,6 @@ var init_pickup = __esmMin((() => {
 	};
 }));
 //#endregion
-export { selectNeedsPlanning as _, READY_LABEL as a, classifyIssue as c, computeLanes as d, computeStats as f, normalizeGate as g, isAutoPickable as h, PARKED_LABEL as i, computeCohort as l, init_pickup as m, LEGACY_PARKED_LABELS as n, RELEASED_LABEL as o, computeWaves as p, OBJECTION_LABEL as r, VETOED_LABEL as s, BLOCKS_MAIN_LABEL as t, computeEpicGroups as u };
+export { normalizeGate as _, PARKED_LABEL as a, VETOED_LABEL as c, computeEpicGroups as d, computeLanes as f, isAutoPickable as g, init_pickup as h, OBJECTION_LABEL as i, classifyIssue as l, computeWaves as m, EPIC_LABEL as n, READY_LABEL as o, computeStats as p, LEGACY_PARKED_LABELS as r, RELEASED_LABEL as s, BLOCKS_MAIN_LABEL as t, computeCohort as u, selectNeedsPlanning as v };
 
-//# sourceMappingURL=pickup-D8xtG1J2.js.map
+//# sourceMappingURL=pickup-DWhqzliO.js.map

package/server/{pipeline-membership-BGSvkT2M.js → pipeline-membership-C88VBnhJ.js}

@@ -1,3 +1,3 @@
-import { n as init_pipeline_membership, r as resolvePipelineMembership, t as PLANNED_BACKLOG_SPEC_ONLY_REASON } from "./pipeline-membership-CrAPLYtf.js";
+import { n as init_pipeline_membership, r as resolvePipelineMembership, t as PLANNED_BACKLOG_SPEC_ONLY_REASON } from "./pipeline-membership-D9SBvItj.js";
 init_pipeline_membership();
 export { PLANNED_BACKLOG_SPEC_ONLY_REASON, resolvePipelineMembership };

package/server/{pipeline-membership-CrAPLYtf.js → pipeline-membership-D9SBvItj.js}

@@ -54,4 +54,4 @@ var init_pipeline_membership = __esmMin((() => {
 //#endregion
 export { init_pipeline_membership as n, resolvePipelineMembership as r, PLANNED_BACKLOG_SPEC_ONLY_REASON as t };
 
-//# sourceMappingURL=pipeline-membership-CrAPLYtf.js.map
+//# sourceMappingURL=pipeline-membership-D9SBvItj.js.map

package/server/{pipeline-membership-gather-DTfcgxLl.js → pipeline-membership-gather-4eR-7Tqy.js}

@@ -1,3 +1,3 @@
-import { a as gatherProjectLensSignals, c as listIssueStatesBatched, d as mapPipelineProjects, f as projectRepositories, i as gatherIssueBranchContainment, l as listMergedPullRequestHeadsBatched, m as snapshotBranchRefs, n as PipelineMembershipUnavailableError, o as gatherProjectLensSignalsForProjects, p as resolveRepositoryDefaultBranch, r as classifyBranchRefLine, s as init_pipeline_membership_gather, t as PIPELINE_PROJECT_CONCURRENCY, u as listOpenPullRequestsSnapshot } from "./pipeline-membership-gather-CET40frr.js";
+import { a as gatherProjectLensSignals, c as listIssueStatesBatched, d as mapPipelineProjects, f as projectRepositories, i as gatherIssueBranchContainment, l as listMergedPullRequestHeadsBatched, m as snapshotBranchRefs, n as PipelineMembershipUnavailableError, o as gatherProjectLensSignalsForProjects, p as resolveRepositoryDefaultBranch, r as classifyBranchRefLine, s as init_pipeline_membership_gather, t as PIPELINE_PROJECT_CONCURRENCY, u as listOpenPullRequestsSnapshot } from "./pipeline-membership-gather-CeVGnNJ2.js";
 init_pipeline_membership_gather();
 export { PIPELINE_PROJECT_CONCURRENCY, PipelineMembershipUnavailableError, classifyBranchRefLine, gatherIssueBranchContainment, gatherProjectLensSignals, gatherProjectLensSignalsForProjects, listIssueStatesBatched, listMergedPullRequestHeadsBatched, listOpenPullRequestsSnapshot, mapPipelineProjects, projectRepositories, resolveRepositoryDefaultBranch, snapshotBranchRefs };