@overdeck/desktop 0.46.0 → 0.47.1

package/server/{rally-B71M9f4o.js → rally-Cxe7lKYX.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CmOPzmBb.js";
-import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-Dkqmok65.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CxdwhAIA.js";
+import { a as TrackerAuthError, n as init_rally_api, o as init_interface, r as IssueNotFoundError, t as RallyRestApi } from "./rally-api-CzkKenoi.js";
 import { Effect } from "effect";
 //#region ../../lib/tracker/rally.ts
 /**
@@ -504,4 +504,4 @@ var init_rally = __esmMin((() => {
 //#endregion
 export { init_rally as n, RallyTracker as t };
 
-//# sourceMappingURL=rally-B71M9f4o.js.map
+//# sourceMappingURL=rally-Cxe7lKYX.js.map

package/server/{rally-api-D5uXN08-.js → rally-api-Cp50exEi.js}

@@ -1,3 +1,3 @@
-import { n as init_rally_api, t as RallyRestApi } from "./rally-api-Dkqmok65.js";
+import { n as init_rally_api, t as RallyRestApi } from "./rally-api-CzkKenoi.js";
 init_rally_api();
 export { RallyRestApi };

package/server/{rally-api-Dkqmok65.js → rally-api-CzkKenoi.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CmOPzmBb.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CxdwhAIA.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/tracker/interface.ts
 /**
@@ -162,4 +162,4 @@ var init_rally_api = __esmMin((() => {
 //#endregion
 export { TrackerAuthError as a, NotImplementedError as i, init_rally_api as n, init_interface as o, IssueNotFoundError as r, RallyRestApi as t };
 
-//# sourceMappingURL=rally-api-Dkqmok65.js.map
+//# sourceMappingURL=rally-api-CzkKenoi.js.map

package/server/{rally-client-CxsA6ExK.js → rally-client-Bu3Cekkw.js}

@@ -1,3 +1,3 @@
-import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-Bfqm6XI4.js";
+import { i as init_rally_client, n as RallyClientLive, r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-CyBBEDHu.js";
 init_rally_client();
 export { RallyClient, RallyClientLive, RallyClientOptionalLive };

package/server/{rally-client-Bfqm6XI4.js → rally-client-CyBBEDHu.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-DZ8Zn2nQ.js";
-import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, r as IssueNotFound, s as TrackerApiError } from "./typed-errors-2BTMxkZq.js";
+import { a as init_tracker_config, r as getRallyConfig } from "./tracker-config-CHbrjg6m.js";
+import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, r as IssueNotFound, s as TrackerApiError } from "./typed-errors-Bn_2WRU7.js";
 import { Context, Effect, Layer } from "effect";
 //#region services/rally-client.ts
 /**
@@ -46,7 +46,7 @@ function makeRallyClientImpl(config) {
 	let tracker = null;
 	async function getTracker() {
 		if (!tracker) {
-			const { RallyTracker } = await import("./rally-YDjU513q.js");
+			const { RallyTracker } = await import("./rally-x6ztTQo4.js");
 			tracker = new RallyTracker({
 				apiKey: config.apiKey,
 				server: config.server,
@@ -106,7 +106,7 @@ var init_rally_client = __esmMin((() => {
 	RallyClientLive = Layer.effect(RallyClient, Effect.gen(function* () {
 		const config = getRallyConfig();
 		if (!config) return yield* Effect.fail(new TrackerNotConfigured({ tracker: "rally" }));
-		const { RallyTracker } = yield* Effect.promise(() => import("./rally-YDjU513q.js"));
+		const { RallyTracker } = yield* Effect.promise(() => import("./rally-x6ztTQo4.js"));
 		const tracker = new RallyTracker({
 			apiKey: config.apiKey,
 			server: config.server,
@@ -158,4 +158,4 @@ var init_rally_client = __esmMin((() => {
 //#endregion
 export { init_rally_client as i, RallyClientLive as n, RallyClientOptionalLive as r, RallyClient as t };
 
-//# sourceMappingURL=rally-client-Bfqm6XI4.js.map
+//# sourceMappingURL=rally-client-CyBBEDHu.js.map

package/server/rally-x6ztTQo4.js

@@ -0,0 +1,3 @@
+import { n as init_rally, t as RallyTracker } from "./rally-Cxe7lKYX.js";
+init_rally();
+export { RallyTracker };

package/server/{reap-terminal-sessions-CvmwaqKv.js → reap-terminal-sessions-CtAhr6L0.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { n as init_review_status_source, r as isRoleTerminal, t as classifyAdvancingSessionLifecycle } from "./review-status-source-CpvJnvnQ.js";
+import { n as init_review_status_source, r as isRoleTerminal, t as classifyAdvancingSessionLifecycle } from "./review-status-source-DWnFE0b6.js";
 //#region ../../lib/cloister/reap-terminal-sessions.ts
 /**
 * Of the alive sessions, the ones belonging to `issueId`'s advancing `role`.
@@ -128,4 +128,4 @@ var init_reap_terminal_sessions = __esmMin((() => {
 //#endregion
 export { selectMergedAdvancingSessions as a, sessionsToReapForRole as c, selectAwaitingTestWorkSessions as i, isAwaitingTestReapable as n, selectMergedWorkSessions as o, isWorkReapable as r, selectNonMergedTerminalAdvancingSessions as s, init_reap_terminal_sessions as t };
 
-//# sourceMappingURL=reap-terminal-sessions-CvmwaqKv.js.map
+//# sourceMappingURL=reap-terminal-sessions-CtAhr6L0.js.map

package/server/{reap-terminal-sessions-BQ23nriz.js → reap-terminal-sessions-DvFqQUnq.js}

@@ -1,4 +1,4 @@
-import { r as isRoleTerminal } from "./review-status-source-CpvJnvnQ.js";
-import { i as selectAwaitingTestWorkSessions, o as selectMergedWorkSessions, s as selectNonMergedTerminalAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-CvmwaqKv.js";
+import { r as isRoleTerminal } from "./review-status-source-DWnFE0b6.js";
+import { i as selectAwaitingTestWorkSessions, o as selectMergedWorkSessions, s as selectNonMergedTerminalAdvancingSessions, t as init_reap_terminal_sessions } from "./reap-terminal-sessions-CtAhr6L0.js";
 init_reap_terminal_sessions();
 export { isRoleTerminal, selectAwaitingTestWorkSessions, selectMergedWorkSessions, selectNonMergedTerminalAdvancingSessions };

package/server/{rebuild-stack-qeRqHZxH.js → rebuild-stack-BKYpIPDL.js}

@@ -1,4 +1,4 @@
-import "./stack-health-DqSqx0zv.js";
-import { n as rebuildWorkspaceStack, t as init_rebuild_stack } from "./rebuild-stack-0EEYReVZ.js";
+import "./stack-health-Bf2WdG4E.js";
+import { n as rebuildWorkspaceStack, t as init_rebuild_stack } from "./rebuild-stack-hCQtprWC.js";
 init_rebuild_stack();
 export { rebuildWorkspaceStack };

package/server/{rebuild-stack-0EEYReVZ.js → rebuild-stack-hCQtprWC.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_projects, ar as resolveProjectFromIssueSync, zn as getProjectSync } from "./config-yaml-CmOPzmBb.js";
-import { d as init_docker_stats, f as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot, o as hasIssueToken, r as composeProjectNameForWorkspace, s as init_stack_health } from "./stack-health-DqSqx0zv.js";
-import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-B6KJkmHZ.js";
-import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-bNX6jKkb.js";
-import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-B057YA81.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync, zn as getProjectSync } from "./config-yaml-CxdwhAIA.js";
+import { d as init_docker_stats, f as recordDockerContainerLifecycleSnapshot, n as collectDockerContainerLifecycleSnapshot, o as hasIssueToken, r as composeProjectNameForWorkspace, s as init_stack_health } from "./stack-health-Bf2WdG4E.js";
+import { n as init_issue_closed, r as isIssueClosed } from "./issue-closed-CNNGbhWm.js";
+import { n as reconcileTraefikNetworks, t as init_traefik_connect } from "./traefik-connect-GHomyBaD.js";
+import { n as ensureDevcontainerSync, r as init_ensure_devcontainer } from "./ensure-devcontainer-DTxChVuA.js";
 import { dirname, join } from "node:path";
 import { Effect } from "effect";
 import { existsSync, rmSync } from "node:fs";
@@ -102,7 +102,7 @@ var init_rebuild_stack = __esmMin((() => {
 		return Effect.gen(function* () {
 			const closed = yield* Effect.promise(() => isIssueClosed(issueId));
 			const reviewStatus = closed ? null : yield* Effect.promise(async () => {
-				const { resolveCanonicalReviewStatus } = await import("./review-status-source-ylw5QZUR.js");
+				const { resolveCanonicalReviewStatus } = await import("./review-status-source-B70ekARK.js");
 				return resolveCanonicalReviewStatus(issueId);
 			});
 			if (closed || reviewStatus?.status?.mergeStatus === "merged") return {
@@ -184,4 +184,4 @@ var init_rebuild_stack = __esmMin((() => {
 //#endregion
 export { rebuildWorkspaceStack as n, removeStaleIssueContainers as r, init_rebuild_stack as t };
 
-//# sourceMappingURL=rebuild-stack-0EEYReVZ.js.map
+//# sourceMappingURL=rebuild-stack-hCQtprWC.js.map

package/server/{reconstruct-cache-BbYFsqLa.js → reconstruct-cache-CF2avArx.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_projects, Lt as readIssueRecord, Pt as init_record, Vt as resolveProjectForIssue, Yn as listProjectsSync } from "./config-yaml-CmOPzmBb.js";
-import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-C5rWYhb6.js";
-import { b as init_agents$1, i as listRunningAgents } from "./queries-DHJm7bTd.js";
-import { a as gatherProjectLensSignals, o as gatherProjectLensSignalsForProjects, s as init_pipeline_membership_gather } from "./pipeline-membership-gather-CET40frr.js";
-import { n as init_pipeline_membership, r as resolvePipelineMembership } from "./pipeline-membership-CrAPLYtf.js";
+import { Gn as init_projects, Lt as readIssueRecord, Pt as init_record, Vt as resolveProjectForIssue, Yn as listProjectsSync } from "./config-yaml-CxdwhAIA.js";
+import { c as listAllAgentsSync, o as init_agents, r as backfillAgentsSync } from "./agents-CtACUuVG.js";
+import { b as init_agents$1, i as listRunningAgents } from "./queries-DCX27GRr.js";
+import { a as gatherProjectLensSignals, o as gatherProjectLensSignalsForProjects, s as init_pipeline_membership_gather } from "./pipeline-membership-gather-BIcJ-N0W.js";
+import { n as init_pipeline_membership, r as resolvePipelineMembership } from "./pipeline-membership-B2yUcBz7.js";
 import { Effect } from "effect";
 //#region ../../lib/reconstruct/enumerate-in-flight.ts
 async function enumerateInFlightIssuesFromSources(projects, gather = gatherProjectLensSignals) {
@@ -139,7 +139,7 @@ async function loadInFlightIssueIds(projects) {
 	return enumerateInFlightIssuesFromSources(projects);
 }
 async function fetchPrState(issueId) {
-	const { fetchIssuePullRequest } = await import("./pull-requests-Cv7LxzUN.js");
+	const { fetchIssuePullRequest } = await import("./pull-requests-DNcJUVWA.js");
 	const result = await fetchIssuePullRequest(issueId);
 	if (!result.pr) return {
 		hasPr: false,
@@ -158,7 +158,7 @@ async function fetchPrState(issueId) {
 */
 async function reconstructCache(_db, opts) {
 	const verbose = opts?.verbose ?? false;
-	const { processed: agentsRebuilt } = backfillAgentsSync({
+	const { processed: agentsRebuilt, markedStoppedIds = [] } = backfillAgentsSync({
 		verbose,
 		listLiveSessions: opts?.listLiveSessions
 	});
@@ -249,6 +249,7 @@ async function reconstructCache(_db, opts) {
 	return {
 		issuesEnumerated: inFlight.size,
 		agentsRebuilt,
+		markedStoppedIds,
 		phaseCounts,
 		agentRuntimeById,
 		agentsById,
@@ -270,4 +271,4 @@ __esmMin((() => {
 }))();
 export { reconstructCache, reconstructCacheAuto };
 
-//# sourceMappingURL=reconstruct-cache-BbYFsqLa.js.map
+//# sourceMappingURL=reconstruct-cache-CF2avArx.js.map

package/server/{record-CtroO946.js → record-BTwWhtBb.js}

@@ -1,3 +1,3 @@
-import { $t as writeRecordResumePointSync, At as getIssueRecordPath, Bt as readRecordContinueViewSync, Ct as buildOwnUri, Dt as ensureIssueRecord, Et as clearRecordFeedbackSync, Ft as markRecordPipelineClosedOutSync, Gt as writeCloseOutDodGateSync, Ht as writeAgentHarnessModel, It as queueIssueRecordCommit, Jt as writeRecordDecisions, Kt as writeIssueRecordForWorkspaceSync, Lt as readIssueRecord, Mt as getIssueWorkspacePath, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Qt as writeRecordResumePoint, Rt as readIssueRecordForWorkspaceSync, St as appendSessionEntrySync, Tt as clearIssueOwner, Ut as writeAgentHarnessModelSync, Vt as resolveProjectForIssue, Wt as writeCloseOutDodGate, Xt as writeRecordHazards, Yt as writeRecordDecisionsSync, Zt as writeRecordHazardsSync, _t as RECORD_DIRNAME, an as writeStatusOverridesSync, bt as appendFeedbackEntrySync, en as writeRecordScopeDriftSync, in as writeStatusOverrideSync, jt as getIssueRecordPathForWorkspace, kt as getIssueRecordBasePath, nn as writeRecordTieredExecutionOverrideSync, qt as writeIssueRecordSync, rn as writeStatusOverride, tn as writeRecordTieredExecutionOverride, vt as RECORD_SCHEMA_VERSION, wt as claimIssueOwner, xt as appendSessionEntry, yt as appendFeedbackEntry, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
+import { $t as writeRecordResumePointSync, At as getIssueRecordPath, Bt as readRecordContinueViewSync, Ct as buildOwnUri, Dt as ensureIssueRecord, Et as clearRecordFeedbackSync, Ft as markRecordPipelineClosedOutSync, Gt as writeCloseOutDodGateSync, Ht as writeAgentHarnessModel, It as queueIssueRecordCommit, Jt as writeRecordDecisions, Kt as writeIssueRecordForWorkspaceSync, Lt as readIssueRecord, Mt as getIssueWorkspacePath, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Qt as writeRecordResumePoint, Rt as readIssueRecordForWorkspaceSync, St as appendSessionEntrySync, Tt as clearIssueOwner, Ut as writeAgentHarnessModelSync, Vt as resolveProjectForIssue, Wt as writeCloseOutDodGate, Xt as writeRecordHazards, Yt as writeRecordDecisionsSync, Zt as writeRecordHazardsSync, _t as RECORD_DIRNAME, an as writeStatusOverridesSync, bt as appendFeedbackEntrySync, en as writeRecordScopeDriftSync, in as writeStatusOverrideSync, jt as getIssueRecordPathForWorkspace, kt as getIssueRecordBasePath, nn as writeRecordTieredExecutionOverrideSync, qt as writeIssueRecordSync, rn as writeStatusOverride, tn as writeRecordTieredExecutionOverride, vt as RECORD_SCHEMA_VERSION, wt as claimIssueOwner, xt as appendSessionEntry, yt as appendFeedbackEntry, zt as readIssueRecordSync } from "./config-yaml-CxdwhAIA.js";
 init_record();
 export { RECORD_DIRNAME, RECORD_SCHEMA_VERSION, appendFeedbackEntry, appendFeedbackEntrySync, appendSessionEntry, appendSessionEntrySync, buildOwnUri, claimIssueOwner, clearIssueOwner, clearRecordFeedbackSync, ensureIssueRecord, ensureIssueRecordSync, getIssueRecordBasePath, getIssueRecordPath, getIssueRecordPathForWorkspace, getIssueWorkspacePath, getProjectConfigFromWorkspacePath, markRecordPipelineClosedOutSync, queueIssueRecordCommit, readIssueRecord, readIssueRecordForWorkspaceSync, readIssueRecordSync, readRecordContinueViewSync, resolveProjectForIssue, writeAgentHarnessModel, writeAgentHarnessModelSync, writeCloseOutDodGate, writeCloseOutDodGateSync, writeIssueRecordForWorkspaceSync, writeIssueRecordSync, writeRecordDecisions, writeRecordDecisionsSync, writeRecordHazards, writeRecordHazardsSync, writeRecordResumePoint, writeRecordResumePointSync, writeRecordScopeDriftSync, writeRecordTieredExecutionOverride, writeRecordTieredExecutionOverrideSync, writeStatusOverride, writeStatusOverrideSync, writeStatusOverridesSync };

package/server/{record-update-Z0QCxmMp.js → record-update-DaOKS7Wb.js}

@@ -1,134 +1,11 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { At as getIssueRecordPath, Cn as resolveStateReadHomeSync, Gn as init_projects, It as queueIssueRecordCommit, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Sn as init_state_read_home, Vt as resolveProjectForIssue, Yn as listProjectsSync, ci as init_paths, cn as flushAutoCommits, ln as init_auto_commit, qt as writeIssueRecordSync, si as getOverdeckHome, xn as STATE_BRANCH, zt as readIssueRecordSync } from "./config-yaml-CmOPzmBb.js";
-import { dirname, join, relative } from "node:path";
+import { At as getIssueRecordPath, Cn as resolveStateReadHomeSync, It as queueIssueRecordCommit, Nt as getProjectConfigFromWorkspacePath, Ot as ensureIssueRecordSync, Pt as init_record, Sn as init_state_read_home, Vt as resolveProjectForIssue, cn as flushAutoCommits, ln as init_auto_commit, qt as writeIssueRecordSync, xn as STATE_BRANCH, zt as readIssueRecordSync } from "./config-yaml-CxdwhAIA.js";
+import { a as withRecordFsLock, n as init_fs_lock } from "./fs-lock-Bre3sGoz.js";
+import { relative } from "node:path";
 import { Effect } from "effect";
 import { hostname } from "node:os";
-import { mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-//#region ../../lib/pan-dir/fs-lock.ts
-/** Cross-process per-issue record locking (PAN-2648 CD-2). */
-function safeSegment(value) {
-	return value.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-");
-}
-function recordLockPath(project, issueId) {
-	const configuredKey = listProjectsSync().find(({ config }) => config.path === project.path)?.key;
-	const projectKey = safeSegment(configuredKey ?? project.name ?? project.path) || "unknown-project";
-	return join(getOverdeckHome(), "locks", "records", projectKey, `${issueId.toUpperCase()}.lock`);
-}
-function isPidDead(pid) {
-	if (!pid || pid <= 0 || pid === process.pid) return false;
-	try {
-		process.kill(pid, 0);
-		return false;
-	} catch (error) {
-		return error.code === "ESRCH";
-	}
-}
-async function sweepRecordTmpFiles(recordPath) {
-	try {
-		const dir = dirname(recordPath);
-		const base = recordPath.slice(dir.length + 1);
-		const entries = await readdir(dir);
-		await Promise.all(entries.filter((entry) => entry.startsWith(`${base}.`) && entry.endsWith(".tmp")).map((entry) => rm(join(dir, entry), { force: true })));
-	} catch {}
-}
-async function readOwner(lockPath) {
-	try {
-		const owner = JSON.parse(await readFile(join(lockPath, "owner.json"), "utf8"));
-		return {
-			description: `${owner.writerId ?? "unknown writer"} pid=${owner.pid ?? "unknown"} acquiredAt=${owner.acquiredAt ?? "unknown"}`,
-			pid: owner.pid
-		};
-	} catch {
-		return { description: "unknown writer" };
-	}
-}
-async function acquireRecordLock(lockPath, options) {
-	await mkdir(dirname(lockPath), {
-		recursive: true,
-		mode: 448
-	});
-	const delays = options.retryDelaysMs ?? RECORD_LOCK_RETRY_DELAYS_MS;
-	let lastOwner = "unknown writer";
-	for (let attempt = 0; attempt <= delays.length; attempt += 1) {
-		try {
-			await mkdir(lockPath, { mode: 448 });
-			const owner = {
-				writerId: options.writerId,
-				pid: process.pid,
-				acquiredAt: (/* @__PURE__ */ new Date()).toISOString()
-			};
-			try {
-				await writeFile(join(lockPath, "owner.json"), JSON.stringify(owner, null, 2), "utf8");
-			} catch (error) {
-				try {
-					await rm(lockPath, {
-						recursive: true,
-						force: true
-					});
-				} catch {}
-				throw error;
-			}
-			await sweepRecordTmpFiles(options.recordPath);
-			return owner;
-		} catch (error) {
-			if (error.code !== "EEXIST") throw error;
-			const owner = await readOwner(lockPath);
-			lastOwner = owner.description;
-			if (isPidDead(owner.pid)) {
-				await rm(lockPath, {
-					recursive: true,
-					force: true
-				});
-				continue;
-			}
-		}
-		const delay = delays[attempt];
-		if (delay === void 0) break;
-		await new Promise((resolve) => setTimeout(resolve, delay));
-	}
-	throw new RecordLockError(lockPath, lastOwner);
-}
-async function releaseRecordLock(lockPath) {
-	await rm(lockPath, {
-		recursive: true,
-		force: true
-	});
-}
-async function withRecordFsLock(project, issueId, options, operation) {
-	const lockPath = recordLockPath(project, issueId);
-	await acquireRecordLock(lockPath, options);
-	try {
-		return await operation();
-	} finally {
-		await releaseRecordLock(lockPath);
-	}
-}
-var RECORD_LOCK_RETRY_DELAYS_MS, RecordLockError;
-var init_fs_lock = __esmMin((() => {
-	init_paths();
-	init_projects();
-	RECORD_LOCK_RETRY_DELAYS_MS = [
-		5,
-		10,
-		20,
-		40,
-		80,
-		160,
-		320,
-		360
-	];
-	RecordLockError = class extends Error {
-		constructor(lockPath, owner) {
-			super(`The per-issue record lock at ${lockPath} is held by ${owner}. Retry the command after that writer finishes.`);
-			this.lockPath = lockPath;
-			this.owner = owner;
-			this.name = "RecordLockError";
-		}
-	};
-}));
-//#endregion
 //#region ../../lib/pan-dir/record-update.ts
 /** The single locked read-modify-write door for per-issue records. */
 function recordDurabilityBudgetMs() {
@@ -395,6 +272,6 @@ var init_record_update = __esmMin((() => {
 	};
 }));
 //#endregion
-export { updateIssueRecordForWorkspace as a, updateIssueRecord as i, clearRecordPipelineClosedOutSync as n, init_fs_lock as o, init_record_update as r, isPidDead as s, RecordDurabilityTimeoutError as t };
+export { updateIssueRecordForWorkspace as a, updateIssueRecord as i, clearRecordPipelineClosedOutSync as n, init_record_update as r, RecordDurabilityTimeoutError as t };
 
-//# sourceMappingURL=record-update-Z0QCxmMp.js.map
+//# sourceMappingURL=record-update-DaOKS7Wb.js.map

package/server/{record-update-DH6dLJID.js → record-update-DhI7eySG.js}

@@ -1,3 +1,3 @@
-import { i as updateIssueRecord, r as init_record_update } from "./record-update-Z0QCxmMp.js";
+import { i as updateIssueRecord, r as init_record_update } from "./record-update-DaOKS7Wb.js";
 init_record_update();
 export { updateIssueRecord };

package/server/{recovery-trip-eJe26h-f.js → recovery-trip-D-wM9EfB.js}

@@ -1,4 +1,4 @@
-import { a as updateIssueRecordForWorkspace, r as init_record_update } from "./record-update-Z0QCxmMp.js";
+import { a as updateIssueRecordForWorkspace, r as init_record_update } from "./record-update-DaOKS7Wb.js";
 //#region ../../lib/cloister/recovery-trip.ts
 init_record_update();
 async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligationGeneration, threshold = 25, now = /* @__PURE__ */ new Date()) {
@@ -41,4 +41,4 @@ async function recordRecoveryFailure(workspacePath, issue, recoveryPath, obligat
 //#endregion
 export { recordRecoveryFailure as t };
 
-//# sourceMappingURL=recovery-trip-eJe26h-f.js.map
+//# sourceMappingURL=recovery-trip-D-wM9EfB.js.map

package/server/{release-engine-lPUp-MTd.js → release-engine-_eO3VFth.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_projects, Mn as findProjectByPathSync, zn as getProjectSync } from "./config-yaml-CmOPzmBb.js";
-import { S as setReviewStatusSync, f as init_review_status } from "./review-status-yljtTd-q.js";
-import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-DH7ot3yz.js";
-import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-BwGeyZKX.js";
+import { Gn as init_projects, Mn as findProjectByPathSync, zn as getProjectSync } from "./config-yaml-CxdwhAIA.js";
+import { C as setReviewStatusSync, p as init_review_status } from "./review-status-CwhA9wmd.js";
+import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-Dbnx4chw.js";
+import { i as withComponentStateSync, n as init_release_set, r as upsertReleaseSetSync } from "./release-set-vxgZwwZV.js";
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
 //#region ../../lib/release/release-plan.ts
@@ -303,4 +303,4 @@ __esmMin((() => {
 }))();
 export { runRelease };
 
-//# sourceMappingURL=release-engine-lPUp-MTd.js.map
+//# sourceMappingURL=release-engine-_eO3VFth.js.map

package/server/{release-set-BwGeyZKX.js → release-set-vxgZwwZV.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { br as resolveIssueIdSync, gr as init_issue_id } from "./config-yaml-CmOPzmBb.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BjuxvjdS.js";
+import { br as resolveIssueIdSync, gr as init_issue_id } from "./config-yaml-CxdwhAIA.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-BDQDRopn.js";
 import "effect";
 //#region ../../lib/overdeck/release-sync.ts
 function isoFromMillis(value) {
@@ -122,4 +122,4 @@ var init_release_set = __esmMin((() => {
 //#endregion
 export { withComponentStateSync as i, init_release_set as n, upsertReleaseSetSync as r, getReleaseSetSync as t };
 
-//# sourceMappingURL=release-set-BwGeyZKX.js.map
+//# sourceMappingURL=release-set-vxgZwwZV.js.map

package/server/{remote-BCd02Es1.js → remote-BienmcrZ.js}

@@ -1,5 +1,5 @@
-import "./workspace-metadata-CQv00QwK.js";
-import { C as createFlyProvider, s as init_remote_agents, w as init_fly_provider } from "./remote-agents-C_VxssLU.js";
+import "./workspace-metadata-eHSj_NsP.js";
+import { C as createFlyProvider, s as init_remote_agents, w as init_fly_provider } from "./remote-agents-kxraOCGT.js";
 import { Effect } from "effect";
 //#region ../../lib/remote/index.ts
 init_fly_provider();
@@ -52,4 +52,4 @@ function createFlyProviderFromConfig(remoteConfig, tierOverride) {
 //#endregion
 export { getRemoteProvider as n, isRemoteAvailable as r, createFlyProviderFromConfig as t };
 
-//# sourceMappingURL=remote-BCd02Es1.js.map
+//# sourceMappingURL=remote-BienmcrZ.js.map

package/server/{remote-CVGUhXMV.js → remote-CVPCc7Vy.js}

@@ -1,4 +1,4 @@
-import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-CQv00QwK.js";
-import { C as createFlyProvider, S as FlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-C_VxssLU.js";
-import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-BCd02Es1.js";
+import { a as loadWorkspaceMetadataSync, i as listWorkspaceMetadataSync, n as deleteWorkspaceMetadataSync, o as saveWorkspaceMetadataSync, r as findRemoteWorkspaceMetadataSync, t as WORKSPACES_DIR } from "./workspace-metadata-eHSj_NsP.js";
+import { C as createFlyProvider, S as FlyProvider, d as killRemoteAgent, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, m as loadRemoteAgentState, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, u as isRemoteAgentRunning, v as sendToRemoteAgent, y as spawnRemoteAgent } from "./remote-agents-kxraOCGT.js";
+import { n as getRemoteProvider, r as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-BienmcrZ.js";
 export { FlyProvider, WORKSPACES_DIR, checkRemoteSpendCap, createFlyProvider, createFlyProviderFromConfig, deleteWorkspaceMetadataSync, findRemoteWorkspaceMetadataSync, getRemoteAgentOutput, getRemoteProvider, isRemoteAgentRunning, isRemoteAvailable, killRemoteAgent, listRemoteAgents, listWorkspaceMetadataSync, loadRemoteAgentState, loadWorkspaceMetadataSync, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveWorkspaceMetadataSync, sendToRemoteAgent, spawnRemoteAgent };

package/server/{remote-agents-C1bssi41.js → remote-agents-kwsEZvXu.js}

@@ -1,3 +1,3 @@
-import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as sendToRemoteAgentKeyed, y as spawnRemoteAgent } from "./remote-agents-C_VxssLU.js";
+import { _ as saveRemoteAgentState, a as generatePushDaemonScript, b as writeRemoteFile, c as installEphemeralWatchdog, d as killRemoteAgent, f as listActiveRemoteAgentStates, g as refreshHostHeartbeatForEphemeralVms, h as pollRemoteAgentStatus, i as generateEphemeralWatchdogScript, l as installPushDaemon, m as loadRemoteAgentState, n as checkRemoteDurabilityPreflight, o as getRemoteAgentOutput, p as listRemoteAgents, r as checkRemoteSpendCap, s as init_remote_agents, t as assertFlyRemoteStateSupported, u as isRemoteAgentRunning, v as sendToRemoteAgent, x as sendToRemoteAgentKeyed, y as spawnRemoteAgent } from "./remote-agents-kxraOCGT.js";
 init_remote_agents();
 export { assertFlyRemoteStateSupported, checkRemoteDurabilityPreflight, checkRemoteSpendCap, generateEphemeralWatchdogScript, generatePushDaemonScript, getRemoteAgentOutput, installEphemeralWatchdog, installPushDaemon, isRemoteAgentRunning, killRemoteAgent, listActiveRemoteAgentStates, listRemoteAgents, loadRemoteAgentState, pollRemoteAgentStatus, refreshHostHeartbeatForEphemeralVms, saveRemoteAgentState, sendToRemoteAgent, sendToRemoteAgentKeyed, spawnRemoteAgent, writeRemoteFile };

package/server/{remote-agents-C_VxssLU.js → remote-agents-kxraOCGT.js}

@@ -1,9 +1,9 @@
 import { n as __esmMin, o as __toESM } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Pt as init_record, Vt as resolveProjectForIssue, xr as require_dist } from "./config-yaml-CmOPzmBb.js";
-import { w as init_tmux, y as getManagedTmuxSocketName } from "./tmux-B1Wbxz5o.js";
-import { a as dedupPendingOptionName, c as dedupTerminalOptionName, d as generateLauncherScriptSync, f as init_launcher_generator, l as init_tmux_dedup, n as KeyedSubmitTargetDeadError, o as dedupPoisonOptionName, r as assertValidDedupKey, s as dedupTargetOptionName, t as KeyedMarkerVerificationError } from "./tmux-dedup-DbN6MGzM.js";
-import { a as init_claude_permissions, i as getClaudePermissionFlagsSync, n as buildClaudeUserSettingsSync, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-CN0cSCPp.js";
-import { c as isStateMigrated, o as init_state_home } from "./state-home-BYV7qZTW.js";
+import { Fr as init_errors, Pt as init_record, Vt as resolveProjectForIssue, xr as require_dist } from "./config-yaml-CxdwhAIA.js";
+import { w as init_tmux, y as getManagedTmuxSocketName } from "./tmux-CfDHob9M.js";
+import { C as init_launcher_generator, S as generateLauncherScriptSync, _ as init_tmux_dedup, b as isOperatorStartedBy, d as assertValidDedupKey, g as dedupTerminalOptionName, h as dedupTargetOptionName, i as init_auto_spawn_consent, l as KeyedMarkerVerificationError, m as dedupPoisonOptionName, p as dedupPendingOptionName, s as withAutoSpawnConsentClaim, u as KeyedSubmitTargetDeadError, y as init_provenance } from "./auto-spawn-consent-BooqhC3L.js";
+import { a as init_claude_permissions, i as getClaudePermissionFlagsSync, n as buildClaudeUserSettingsSync, r as getClaudePermissionFlagsStringSync } from "./claude-permissions-DYVLnX9t.js";
+import { c as isStateMigrated, o as init_state_home } from "./state-home-B4EWfIxF.js";
 import { Data, Effect, Stream } from "effect";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -1298,7 +1298,11 @@ async function writeRemoteFile(provider, vmName, remotePath, content) {
 * Spawn a Claude agent on a remote VM
 */
 async function spawnRemoteAgent(options) {
-	const { issueId, workspace, model = "claude-sonnet-4-6", prompt } = options;
+	if (isOperatorStartedBy(options.startedBy) || options.autoSpawnConsentRequired !== true) return spawnRemoteAgentWithoutConsentClaim(options);
+	return withAutoSpawnConsentClaim(options.issueId, (acceptConsent) => spawnRemoteAgentWithoutConsentClaim(options, acceptConsent), { isAccepted: (state) => state.status === "running" });
+}
+async function spawnRemoteAgentWithoutConsentClaim(options, acceptConsent) {
+	const { issueId, workspace, startedBy, model = "claude-sonnet-4-6", prompt } = options;
 	const project = resolveProjectForIssue(issueId);
 	if (project) assertFlyRemoteStateSupported(issueId, await isStateMigrated(project));
 	const tier = options.tier ?? "ephemeral";
@@ -1317,6 +1321,7 @@ async function spawnRemoteAgent(options) {
 		status: "starting",
 		startedAt: (/* @__PURE__ */ new Date()).toISOString(),
 		location: "remote",
+		startedBy,
 		tier
 	};
 	saveRemoteAgentState(state);
@@ -1334,12 +1339,13 @@ async function spawnRemoteAgent(options) {
 			promptFile,
 			baseCommand: "claude",
 			permissionFlags: getClaudePermissionFlagsSync(),
+			extraEnvExports: [`export OVERDECK_AGENT_STARTED_BY=${shellQuote(startedBy)}`],
 			model
 		}));
 		const chmodRes = await runSsh(fly, vmName, `chmod +x ${launcherScript}`);
 		if (chmodRes.exitCode !== 0) throw new Error(`Failed to chmod launcher on ${vmName}: ${chmodRes.stderr}`);
 		claudeCmd = `bash ${launcherScript}`;
-	} else claudeCmd = `claude ${getClaudePermissionFlagsStringSync()} --model ${model}`;
+	} else claudeCmd = `OVERDECK_AGENT_STARTED_BY=${shellQuote(startedBy)} claude ${getClaudePermissionFlagsStringSync()} --model ${model}`;
 	console.log(`[claude-invoke] purpose=remote-agent | model=${model} | source=remote-agents.ts | vm=${vmName} | agent=${agentId} | command="${claudeCmd}"`);
 	await ensureRemoteTmuxContext(fly, vmName);
 	const result = await runSsh(fly, vmName, buildRemoteTmuxCommand([
@@ -1356,6 +1362,7 @@ async function spawnRemoteAgent(options) {
 		saveRemoteAgentState(state);
 		throw new Error(`Failed to start agent: ${result.stderr}`);
 	}
+	await acceptConsent?.();
 	await installPushDaemon(fly, vmName, issueId);
 	if (tier === "ephemeral") await installEphemeralWatchdog(fly, vmName, issueId);
 	state.status = "running";
@@ -1476,6 +1483,8 @@ var init_remote_agents = __esmMin((() => {
 	init_claude_permissions();
 	init_record();
 	init_state_home();
+	init_auto_spawn_consent();
+	init_provenance();
 	init_remote_keyed_delivery();
 	AGENTS_DIR = join(homedir(), ".overdeck", "agents");
 	REMOTE_HOST_HEARTBEAT_PATH = `${REMOTE_PAN_DIR}/host-heartbeat`;
@@ -1486,4 +1495,4 @@ var init_remote_agents = __esmMin((() => {
 //#endregion
 export { createFlyProvider as C, FlyProvider as S, saveRemoteAgentState as _, generatePushDaemonScript as a, writeRemoteFile as b, installEphemeralWatchdog as c, killRemoteAgent as d, listActiveRemoteAgentStates as f, refreshHostHeartbeatForEphemeralVms as g, pollRemoteAgentStatus as h, generateEphemeralWatchdogScript as i, installPushDaemon as l, loadRemoteAgentState as m, checkRemoteDurabilityPreflight as n, getRemoteAgentOutput as o, listRemoteAgents as p, checkRemoteSpendCap as r, init_remote_agents as s, assertFlyRemoteStateSupported as t, isRemoteAgentRunning as u, sendToRemoteAgent as v, init_fly_provider as w, sendToRemoteAgentKeyed as x, spawnRemoteAgent as y };
 
-//# sourceMappingURL=remote-agents-C_VxssLU.js.map
+//# sourceMappingURL=remote-agents-kxraOCGT.js.map

package/server/{remote-completion-DAB0P706.js → remote-completion-BtmZ42aP.js}

@@ -1,10 +1,10 @@
-import { An as extractTeamPrefix, Gn as init_projects, Pn as findProjectByTeamSync, ar as resolveProjectFromIssueSync } from "./config-yaml-CmOPzmBb.js";
-import { a as PAN_DIRNAME, i as PAN_CONTINUE_FILENAME } from "./types-hraoaQIp.js";
-import { f as init_config, m as loadConfigSync } from "./config-Dr3pW6w6.js";
-import { t as init_pan_dir } from "./pan-dir-ubraCiUg.js";
-import { r as init_workspace_manager, t as createWorkspace } from "./workspace-manager-CwO-Hek7.js";
-import { _ as saveRemoteAgentState, f as listActiveRemoteAgentStates, m as loadRemoteAgentState, o as getRemoteAgentOutput, s as init_remote_agents, u as isRemoteAgentRunning, v as sendToRemoteAgent } from "./remote-agents-C_VxssLU.js";
-import { t as createFlyProviderFromConfig } from "./remote-BCd02Es1.js";
+import { An as extractTeamPrefix, Gn as init_projects, Pn as findProjectByTeamSync, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { a as PAN_DIRNAME, i as PAN_CONTINUE_FILENAME } from "./types-D2ETIB8T.js";
+import { f as init_config, m as loadConfigSync } from "./config-CX4vk1CV.js";
+import { t as init_pan_dir } from "./pan-dir-DAOb1V2-.js";
+import { r as init_workspace_manager, t as createWorkspace } from "./workspace-manager-CXfrw4rR.js";
+import { _ as saveRemoteAgentState, f as listActiveRemoteAgentStates, m as loadRemoteAgentState, o as getRemoteAgentOutput, s as init_remote_agents, u as isRemoteAgentRunning, v as sendToRemoteAgent } from "./remote-agents-kxraOCGT.js";
+import { t as createFlyProviderFromConfig } from "./remote-BienmcrZ.js";
 import { Effect } from "effect";
 import { existsSync, mkdirSync, statSync, unlinkSync, writeFileSync } from "fs";
 import { basename, join } from "path";
@@ -309,7 +309,7 @@ async function reapCompletedRemoteAgents(opts = {}) {
 			} catch {
 				details.push("No continue.json retrieved from VM (skipped)");
 			}
-			const { getAgentStateSync, saveAgentStateSync } = await import("./agents-BKKkxKgK.js");
+			const { getAgentStateSync, saveAgentStateSync } = await import("./agents-Dnn4XgdB.js");
 			const existing = getAgentStateSync(agentId);
 			if (existing) {
 				existing.workspace = existing.workspace || workspacePath;
@@ -327,8 +327,8 @@ async function reapCompletedRemoteAgents(opts = {}) {
 				startedAt: remoteState.startedAt,
 				lastActivity: (/* @__PURE__ */ new Date()).toISOString()
 			});
-			const { createReviewArtifactsForIssue } = await import("./review-artifacts-DSMRIfuJ.js");
-			const { setReviewStatusSync } = await import("./review-status-BZH8h-6W.js");
+			const { createReviewArtifactsForIssue } = await import("./review-artifacts-BCODM9ww.js");
+			const { setReviewStatusSync } = await import("./review-status-CacDM78F.js");
 			const primaryArtifact = (await Effect.runPromise(createReviewArtifactsForIssue(issueId, workspacePath))).mergeSet?.repos.find((repo) => !!repo.artifactUrl);
 			if (primaryArtifact?.artifactUrl) {
 				setReviewStatusSync(issueId, { prUrl: primaryArtifact.artifactUrl });
@@ -349,7 +349,7 @@ async function reapCompletedRemoteAgents(opts = {}) {
 			try {
 				const fly = createFlyProviderFromConfig(loadConfigSync().remote);
 				if (sessionAlive) {
-					const { killRemoteAgent } = await import("./remote-agents-C1bssi41.js");
+					const { killRemoteAgent } = await import("./remote-agents-kwsEZvXu.js");
 					await killRemoteAgent(agentId, vmName).catch(() => void 0);
 				}
 				await Effect.runPromise(fly.deleteVm(vmName));
@@ -357,7 +357,7 @@ async function reapCompletedRemoteAgents(opts = {}) {
 			} catch (err) {
 				details.push(`Warning: could not destroy machine: ${err.message}`);
 			}
-			const { deleteWorkspaceMetadataSync } = await import("./workspace-metadata-D4M8BM4W.js");
+			const { deleteWorkspaceMetadataSync } = await import("./workspace-metadata-BuMRco5P.js");
 			deleteWorkspaceMetadataSync(issueId);
 			details.push("Removed remote workspace metadata (pipeline is local from here)");
 			saveRemoteAgentState({
@@ -386,4 +386,4 @@ async function reapCompletedRemoteAgents(opts = {}) {
 //#endregion
 export { reapCompletedRemoteAgents, refreshClaudeCredentialsForActiveRemoteAgents };
 
-//# sourceMappingURL=remote-completion-DAB0P706.js.map
+//# sourceMappingURL=remote-completion-BtmZ42aP.js.map

package/server/resume-DXIIfJNk.js

@@ -0,0 +1,3 @@
+import { G as resumeAgent, W as init_resume } from "./queries-DCX27GRr.js";
+init_resume();
+export { resumeAgent };