@overdeck/desktop 0.46.0 → 0.47.1

package/server/supervisor/{paths-K3noE4N_.js → paths-BBOnCYlO.js}

@@ -124,6 +124,14 @@ function sessionFilePath(cwd, sessionId) {
 	const encodedCwd = encodeClaudeProjectDir(cwd);
 	return join(homedir(), ".claude", "projects", encodedCwd, `${sessionId}.jsonl`);
 }
+/**
+* Single existence check every Claude resume probe must use. Mirrors the
+* JSONL resolver's `jsonl-missing` detection so stale session IDs are never
+* treated as resumable (PAN-3194).
+*/
+function claudeSessionTranscriptExists(cwd, sessionId) {
+	return existsSync(sessionFilePath(cwd, sessionId));
+}
 /** Extract the session UUID from a full JSONL file path. */
 function sessionIdFromFile(sessionFile) {
 	if (!sessionFile) return void 0;
@@ -221,6 +229,6 @@ var init_paths = __esmMin((() => {
 	];
 }));
 //#endregion
-export { getLegacyHome as $, PRD_PUBLISHED_DIR as A, SYNC_TARGET as B, HEARTBEATS_DIR as C, OVERDECK_HOME as D, LOGS_DIR as E, PROJECT_PRDS_SUBDIR as F, encodeClaudeProjectDir as G, TRAEFIK_CERTS_DIR as H, SETTINGS_FILE as I, getDocsDisableStatePath as J, getDocsBudgetStatePath as K, SKILLS_DIR as L, PROJECT_PRDS_ACTIVE_SUBDIR as M, PROJECT_PRDS_COMPLETED_SUBDIR as N, PRDS_DIR as O, PROJECT_PRDS_PLANNED_SUBDIR as P, getHandoffsDir as Q, SYNC_SOURCES as R, HANDOFFS_DIR as S, LEGACY_RUNTIME_DIRS as T, TRAEFIK_DIR as U, TEMPLATES_DIR as V, TRAEFIK_DYNAMIC_DIR as W, getDocsPaths as X, getDocsIndexPath as Y, getDocsTelemetryPath as Z, DOCS_BUDGET_STATE_FILE as _, BIN_DIR as a, piExtensionCandidates as at, DOCS_INDEX_FILE as b, CACHE_RULES_DIR as c, resolvePiExtensionPath as ct, CLAUDE_DIR as d, getOverdeckHome as et, CLAUDE_MD_TEMPLATES as f, COSTS_DIR as g, CONFIG_FILE as h, BACKUPS_DIR as i, packageRoot as it, PROJECT_DOCS_SUBDIR as j, PRD_DRAFTS_DIR as k, CACHE_SKILLS_DIR as l, sessionFilePath as lt, CONFIG_DIR as m, AGENT_SKILLS_DIR as n, isDevMode as nt, CACHE_AGENTS_DIR as o, resolveOhmypiExtensionPath as ot, COMMANDS_DIR as p, getDocsDir as q, ARCHIVES_DIR as r, ohmypiExtensionCandidates as rt, CACHE_MANIFEST as s, resolvePackageRootForDir as st, AGENTS_DIR as t, init_paths as tt, CERTS_DIR as u, sessionIdFromFile as ut, DOCS_DIR as v, INIT_DIRS as w, DOCS_TELEMETRY_FILE as x, DOCS_DISABLE_STATE_FILE as y, SYNC_SOURCES_ROOT as z };
+export { getHandoffsDir as $, PRD_PUBLISHED_DIR as A, SYNC_TARGET as B, HEARTBEATS_DIR as C, OVERDECK_HOME as D, LOGS_DIR as E, PROJECT_PRDS_SUBDIR as F, claudeSessionTranscriptExists as G, TRAEFIK_CERTS_DIR as H, SETTINGS_FILE as I, getDocsDir as J, encodeClaudeProjectDir as K, SKILLS_DIR as L, PROJECT_PRDS_ACTIVE_SUBDIR as M, PROJECT_PRDS_COMPLETED_SUBDIR as N, PRDS_DIR as O, PROJECT_PRDS_PLANNED_SUBDIR as P, getDocsTelemetryPath as Q, SYNC_SOURCES as R, HANDOFFS_DIR as S, LEGACY_RUNTIME_DIRS as T, TRAEFIK_DIR as U, TEMPLATES_DIR as V, TRAEFIK_DYNAMIC_DIR as W, getDocsIndexPath as X, getDocsDisableStatePath as Y, getDocsPaths as Z, DOCS_BUDGET_STATE_FILE as _, BIN_DIR as a, packageRoot as at, DOCS_INDEX_FILE as b, CACHE_RULES_DIR as c, resolvePackageRootForDir as ct, CLAUDE_DIR as d, sessionIdFromFile as dt, getLegacyHome as et, CLAUDE_MD_TEMPLATES as f, COSTS_DIR as g, CONFIG_FILE as h, BACKUPS_DIR as i, ohmypiExtensionCandidates as it, PROJECT_DOCS_SUBDIR as j, PRD_DRAFTS_DIR as k, CACHE_SKILLS_DIR as l, resolvePiExtensionPath as lt, CONFIG_DIR as m, AGENT_SKILLS_DIR as n, init_paths as nt, CACHE_AGENTS_DIR as o, piExtensionCandidates as ot, COMMANDS_DIR as p, getDocsBudgetStatePath as q, ARCHIVES_DIR as r, isDevMode as rt, CACHE_MANIFEST as s, resolveOhmypiExtensionPath as st, AGENTS_DIR as t, getOverdeckHome as tt, CERTS_DIR as u, sessionFilePath as ut, DOCS_DIR as v, INIT_DIRS as w, DOCS_TELEMETRY_FILE as x, DOCS_DISABLE_STATE_FILE as y, SYNC_SOURCES_ROOT as z };
 
-//# sourceMappingURL=paths-K3noE4N_.js.map
+//# sourceMappingURL=paths-BBOnCYlO.js.map

package/server/supervisor/pty-supervisor.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { et as getOverdeckHome, tt as init_paths } from "./paths-K3noE4N_.js";
-import { n as init_pty_token, r as readPtyToken, t as PTY_TOKEN_HEADER } from "./pty-token-B7lp0ElT.js";
-import { a as inputSettleMs, i as init_injection_budget, o as purgeSettleMs, r as echoConfirmTimeoutMs, t as INPUT_PURGE_MAX_CHARS } from "./injection-budget-B5SbvDx2.js";
+import { nt as init_paths, tt as getOverdeckHome } from "./paths-BBOnCYlO.js";
+import { n as init_pty_token, r as readPtyToken, t as PTY_TOKEN_HEADER } from "./pty-token-CWRffcCa.js";
+import { a as inputSettleMs, i as init_injection_budget, o as purgeSettleMs, r as echoConfirmTimeoutMs, t as INPUT_PURGE_MAX_CHARS } from "./injection-budget-B3UyEONL.js";
 import { existsSync } from "node:fs";
-import { join } from "node:path";
 import { appendFile, chmod, mkdir, unlink } from "node:fs/promises";
+import { join } from "node:path";
 import { timingSafeEqual } from "node:crypto";
 import { pathToFileURL } from "node:url";
 import { createServer } from "node:http";

package/server/supervisor/{pty-token-B7lp0ElT.js → pty-token-CWRffcCa.js}

@@ -1,8 +1,8 @@
 import { t as __esmMin } from "./chunk-ruWRV7i3.js";
-import { et as getOverdeckHome, tt as init_paths } from "./paths-K3noE4N_.js";
+import { nt as init_paths, tt as getOverdeckHome } from "./paths-BBOnCYlO.js";
 import "node:fs";
-import { join } from "node:path";
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
 import { randomBytes } from "node:crypto";
 //#region src/lib/pty-token.ts
 function ptyTokenDir(agentId) {
@@ -40,4 +40,4 @@ var init_pty_token = __esmMin((() => {
 //#endregion
 export { writePtyToken as i, init_pty_token as n, readPtyToken as r, PTY_TOKEN_HEADER as t };
 
-//# sourceMappingURL=pty-token-B7lp0ElT.js.map
+//# sourceMappingURL=pty-token-CWRffcCa.js.map

package/server/{supervisor-DL788vos.js → supervisor-B7BHGcNA.js}

@@ -1,6 +1,6 @@
-import { $r as TRAEFIK_DIR, Fr as init_errors, Gr as OVERDECK_HOME, Hr as CONFIG_FILE, Wr as LOGS_DIR, ci as init_paths } from "./config-yaml-CmOPzmBb.js";
+import { $r as TRAEFIK_DIR, Fr as init_errors, Gr as OVERDECK_HOME, Hr as CONFIG_FILE, Wr as LOGS_DIR, li as init_paths } from "./config-yaml-CxdwhAIA.js";
 import { t as require_toml } from "./toml-CeLDATih.js";
-import { t as init_dev_supervisor } from "./dev-supervisor-CC46Ig8q.js";
+import { t as init_dev_supervisor } from "./dev-supervisor-C4F0vbno.js";
 import { join } from "node:path";
 import "effect";
 import { existsSync, readFileSync } from "fs";
@@ -72,4 +72,4 @@ function getSupervisorUrlSync() {
 //#endregion
 export { getSupervisorUrlSync as n, getSupervisorPortSync as t };
 
-//# sourceMappingURL=supervisor-DL788vos.js.map
+//# sourceMappingURL=supervisor-B7BHGcNA.js.map

package/server/supervisor-CyR_mW5B.js

@@ -0,0 +1,2 @@
+import { n as getSupervisorUrlSync } from "./supervisor-B7BHGcNA.js";
+export { getSupervisorUrlSync };

package/server/{swarm-readiness-BV14DF5N.js → swarm-readiness-MNE5O8hn.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { S as init_specs } from "./io-VHvc0Ssp.js";
-import { c as hasFileOverlap, l as init_dag, o as getDispatchableItems, r as compileGlob, s as groupItemsByWave } from "./dag-ombYYt4s.js";
+import { S as init_specs } from "./io-C0NV7y6C.js";
+import { c as hasFileOverlap, l as init_dag, o as getDispatchableItems, r as compileGlob, s as groupItemsByWave } from "./dag-5QlmH0oC.js";
 import "effect";
 //#region ../../lib/xbrief/swarm-readiness.ts
 function computeIssueFootprint(doc) {
@@ -112,4 +112,4 @@ var init_swarm_readiness = __esmMin((() => {
 //#endregion
 export { computeIssueFootprint as n, init_swarm_readiness as r, analyzeSwarmReadiness as t };
 
-//# sourceMappingURL=swarm-readiness-BV14DF5N.js.map
+//# sourceMappingURL=swarm-readiness-MNE5O8hn.js.map

package/server/{system-prerequisites-pdWG6ZQs.js → system-prerequisites-Cin9ZgDx.js}

@@ -1,4 +1,4 @@
-import { a as resolveExecutable, o as resolveHarnessBinary, r as init_harness_binary } from "./harness-binary-DqkftwTb.js";
+import { a as resolveExecutable, o as resolveHarnessBinary, r as init_harness_binary } from "./harness-binary-CnBHpd57.js";
 import { homedir } from "node:os";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -247,4 +247,4 @@ async function checkSystemPrerequisites(probe = defaultProbe, resolver = default
 //#endregion
 export { checkSystemPrerequisites, collectSetupDiagnostics };
 
-//# sourceMappingURL=system-prerequisites-pdWG6ZQs.js.map
+//# sourceMappingURL=system-prerequisites-Cin9ZgDx.js.map

package/server/{teardown-workspace-l2F4_zim.js → teardown-workspace-CvBpvc85.js}

@@ -1,10 +1,10 @@
-import { Ir as AGENTS_DIR, ci as init_paths } from "./config-yaml-CmOPzmBb.js";
-import { D as killSession, H as sessionExists, M as listSessionNames, w as init_tmux } from "./tmux-B1Wbxz5o.js";
-import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-CwO-Hek7.js";
-import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-68CSCRnu.js";
-import { a as pidsWithCwdUnder } from "./agent-gc-CBULruzm.js";
-import { i as findWorkspacePath, r as findAllWorkspacePaths } from "./archive-planning-C0lAbNB_.js";
-import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-q67TYYg5.js";
+import { Ir as AGENTS_DIR, li as init_paths } from "./config-yaml-CxdwhAIA.js";
+import { D as killSession, H as sessionExists, M as listSessionNames, w as init_tmux } from "./tmux-CfDHob9M.js";
+import { n as getContainersReferencingWorkspacePath, r as init_workspace_manager } from "./workspace-manager-CXfrw4rR.js";
+import { r as init_devcontainer_renderer, t as DEVCONTAINER_DIRNAME } from "./devcontainer-renderer-66sqMQIi.js";
+import { a as pidsWithCwdUnder } from "./agent-gc-BMcgTDl7.js";
+import { i as findWorkspacePath, r as findAllWorkspacePaths } from "./archive-planning-Binfb99i.js";
+import { a as stepSkipped, i as stepOk, n as init_types, r as stepFailed } from "./types-Dh6RI5Vj.js";
 import { Effect } from "effect";
 import { existsSync } from "fs";
 import { basename, join } from "path";
@@ -83,7 +83,7 @@ async function stopTldrDaemonImpl(workspacePath) {
 	const venvPath = join(workspacePath, ".venv");
 	if (!existsSync(venvPath)) return stepSkipped(step, ["No .venv found"]);
 	try {
-		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-BKOYB616.js");
+		const { getTldrDaemonServiceSync } = await import("./tldr-daemon-Ca0eovh3.js");
 		await getTldrDaemonServiceSync(workspacePath, venvPath).stop();
 		return stepOk(step, ["Stopped TLDR daemon"]);
 	} catch {
@@ -102,7 +102,7 @@ function stopDocker(workspacePath, issueLower) {
 async function stopDockerImpl(workspacePath, issueLower) {
 	const step = "teardown:docker";
 	try {
-		const { stopWorkspaceDocker } = await import("./workspace-manager-CDTKjjdU.js");
+		const { stopWorkspaceDocker } = await import("./workspace-manager-B38rFWA1.js");
 		await Effect.runPromise(stopWorkspaceDocker(workspacePath, issueLower));
 		return stepOk(step, ["Stopped Docker containers"]);
 	} catch {
@@ -406,7 +406,7 @@ function clearShadowState(issueId) {
 async function clearShadowStateImpl(issueId) {
 	const step = "teardown:shadow-state";
 	try {
-		const { removeShadowState } = await import("./shadow-state-FV6PHfEW.js");
+		const { removeShadowState } = await import("./shadow-state-C0Af4clN.js");
 		if (removeShadowState(issueId).success) return stepOk(step, [`Cleared shadow state for ${issueId}`]);
 		return stepSkipped(step, ["No shadow state found"]);
 	} catch {
@@ -456,7 +456,7 @@ function buildPlaceholders(ctx, opts, workspacePath) {
 function removeTunnelConfig(tunnelConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { removeTunnelIngress } = await import("./tunnel-CjSnHdTc.js");
+			const { removeTunnelIngress } = await import("./tunnel-Dz7y434T.js");
 			return stepOk("teardown:tunnel", (await Effect.runPromise(removeTunnelIngress(tunnelConfig, placeholders))).steps || ["Removed tunnel ingress"]);
 		},
 		catch: (err) => err
@@ -468,7 +468,7 @@ function removeTunnelConfig(tunnelConfig, placeholders) {
 function removeHumeEviConfig(humeConfig, placeholders) {
 	return Effect.tryPromise({
 		try: async () => {
-			const { deleteHumeConfig } = await import("./hume-Dq--7rOQ.js");
+			const { deleteHumeConfig } = await import("./hume-DtWN8oV5.js");
 			return stepOk("teardown:hume", (await Effect.runPromise(deleteHumeConfig(humeConfig, placeholders))).steps || ["Removed Hume EVI config"]);
 		},
 		catch: (err) => err
@@ -513,7 +513,7 @@ function pruneSpecialistRegistry(issueId) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:specialist-registry";
-			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-Tdezg_6N.js");
+			const { pruneSpecialistRegistryEntriesForIssue } = await import("./specialists-CH6ah6D-.js");
 			const removed = pruneSpecialistRegistryEntriesForIssue(issueId);
 			return removed > 0 ? stepOk(step, [`Pruned ${removed} specialist registry entr${removed === 1 ? "y" : "ies"} for ${issueId}`]) : stepSkipped(step, [`No specialist registry entries for ${issueId}`]);
 		},
@@ -524,7 +524,7 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 	return Effect.tryPromise({
 		try: async () => {
 			const step = "teardown:checkpoint-refs";
-			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-Dxh0FYsv.js");
+			const { pruneCheckpointRefsForAgents } = await import("./checkpoint-manager-Cu-R5Uzg.js");
 			const agentIds = [
 				`agent-${issueLower}`,
 				`planning-${issueLower}`,
@@ -538,4 +538,4 @@ function pruneCheckpointRefs(projectPath, issueLower) {
 //#endregion
 export { teardownWorkspace as t };
 
-//# sourceMappingURL=teardown-workspace-l2F4_zim.js.map
+//# sourceMappingURL=teardown-workspace-CvBpvc85.js.map

package/server/{test-agent-queue-qakFIIGz.js → test-agent-queue-DmSIqays.js}

@@ -1,8 +1,8 @@
-import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CmOPzmBb.js";
-import { S as setReviewStatusSync, f as init_review_status } from "./review-status-yljtTd-q.js";
-import { b as init_agents, dt as spawnRun } from "./queries-DHJm7bTd.js";
-import { n as init_merge_verification, r as shouldSkipDispatchAsMerged } from "./merge-verification-x3JO8Dtz.js";
-import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-BJYDggMm.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { C as setReviewStatusSync, p as init_review_status } from "./review-status-CwhA9wmd.js";
+import { b as init_agents, dt as spawnRun } from "./queries-DCX27GRr.js";
+import { n as init_merge_verification, r as shouldSkipDispatchAsMerged } from "./merge-verification-c9Y9mllw.js";
+import { r as init_test_verdict, t as clearTestVerdictArtifact } from "./test-verdict-Cy2jJGTe.js";
 import { Data, Effect } from "effect";
 //#region ../../lib/cloister/test-agent-queue.ts
 /**
@@ -98,7 +98,8 @@ const dispatchTestAgentAndNotify = (issueId, workspace, branch, notifyAgent) =>
 	const spawnResult = yield* Effect.tryPromise({
 		try: () => spawnRun(issueId, "test", {
 			workspace,
-			prompt
+			prompt,
+			startedBy: "test-agent-queue"
 		}),
 		catch: (cause) => {
 			return new TestDispatchError({
@@ -163,4 +164,4 @@ const dispatchTestAgentAndNotify = (issueId, workspace, branch, notifyAgent) =>
 //#endregion
 export { buildTestRolePrompt, dispatchTestAgentAndNotify };
 
-//# sourceMappingURL=test-agent-queue-qakFIIGz.js.map
+//# sourceMappingURL=test-agent-queue-DmSIqays.js.map

package/server/{test-verdict-Gw-btEfb.js → test-verdict-BieVDAV1.js}

@@ -1,3 +1,3 @@
-import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-BJYDggMm.js";
+import { i as readTestVerdictArtifact, r as init_test_verdict } from "./test-verdict-Cy2jJGTe.js";
 init_test_verdict();
 export { readTestVerdictArtifact };

package/server/{test-verdict-BJYDggMm.js → test-verdict-Cy2jJGTe.js}

@@ -102,4 +102,4 @@ var init_test_verdict = __esmMin((() => {}));
 //#endregion
 export { testVerdictArtifactPath as a, readTestVerdictArtifact as i, decideUnsignaledTestAction as n, init_test_verdict as r, clearTestVerdictArtifact as t };
 
-//# sourceMappingURL=test-verdict-BJYDggMm.js.map
+//# sourceMappingURL=test-verdict-Cy2jJGTe.js.map

package/server/{tldr-daemon-BKOYB616.js → tldr-daemon-Ca0eovh3.js}

@@ -1,3 +1,3 @@
-import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-CBaWkV9k.js";
+import { n as getTldrDaemonServiceSync, r as init_tldr_daemon } from "./tldr-daemon-IOssGwg7.js";
 init_tldr_daemon();
 export { getTldrDaemonServiceSync };

package/server/{tldr-daemon-CBaWkV9k.js → tldr-daemon-IOssGwg7.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors } from "./config-yaml-CmOPzmBb.js";
+import { Fr as init_errors } from "./config-yaml-CxdwhAIA.js";
 import "effect";
 import { existsSync, readFileSync, statSync } from "fs";
 import { join } from "path";
@@ -221,4 +221,4 @@ var init_tldr_daemon = __esmMin((() => {
 //#endregion
 export { getTldrDaemonServiceSync as n, init_tldr_daemon as r, TldrDaemonService as t };
 
-//# sourceMappingURL=tldr-daemon-CBaWkV9k.js.map
+//# sourceMappingURL=tldr-daemon-IOssGwg7.js.map

package/server/{tmux-B1Wbxz5o.js → tmux-CfDHob9M.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Mr as TmuxError, ci as init_paths, f as loadConfigSync, si as getOverdeckHome, t as init_config_yaml } from "./config-yaml-CmOPzmBb.js";
+import { Fr as init_errors, Mr as TmuxError, ci as getOverdeckHome, f as loadConfigSync, li as init_paths, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
 import { Effect } from "effect";
 import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -164,6 +164,174 @@ var init_tmux_process_tree = __esmMin((() => {
 	]);
 }));
 //#endregion
+//#region ../../lib/pane-choice-menu.ts
+function cleanLine(line) {
+	return line.replace(ANSI_PATTERN, "").replace(/[\x00-\x1f\x7f]/g, "").replace(/\s+$/g, "");
+}
+/**
+* PAN-3068 shape — key/action pairs separated by "·". Every segment must open
+* with a key name, so real post-answer output never qualifies.
+*/
+function looksLikeHarnessFooterHint(line) {
+	const segments = line.split("·").map((s) => s.trim()).filter(Boolean);
+	if (segments.length === 0) return false;
+	return segments.every((segment) => /^(?:esc(?:ape)?|tab|enter|return|space|backspace|shift\+\S+|ctrl\+\S+|alt\+\S+|\?)\b/i.test(segment) || /^press\s+\S+/i.test(segment));
+}
+/** "1. Yes / 2. Yes, and allow… / 3. No" — owned by the permission-menu path. */
+function looksLikePermissionOptions(options) {
+	if (options.length !== 3) return false;
+	return /^yes$/i.test(options[0].label) && /^yes,?\s*(?:and\s*)?(?:allow|don't ask|always)/i.test(options[1].label) && /^no\b/i.test(options[2].label);
+}
+function parseOptionLine(line) {
+	const match = OPTION_LINE.exec(line);
+	if (!match) return null;
+	const number = Number(match[2]);
+	if (!Number.isInteger(number) || number < 1 || number > MAX_OPTIONS) return null;
+	const rawLabel = match[3].trim();
+	if (rawLabel.length === 0 || rawLabel.length > MAX_LABEL_CHARS) return null;
+	return {
+		cursor: Boolean(match[1]),
+		number,
+		rawLabel
+	};
+}
+/**
+* Parse the last numbered-choice menu in the pane, or null when the pane is
+* not currently blocked on one. See the module header for the conservative
+* acceptance rules.
+*
+* `mode: 'guard'` keeps the menus card rendering excludes — permission prompts
+* and multi-selects. A caller that only wants to know "is this pane blocked on
+* a menu?" must see those too; see `paneHasBlockingChoiceMenu`.
+*/
+function parsePaneChoiceMenu(paneText, opts = {}) {
+	const mode = opts.mode ?? "card";
+	if (!paneText) return null;
+	const lines = paneText.split("\n").map(cleanLine);
+	let end = lines.length - 1;
+	while (end >= 0 && lines[end].trim() === "") end -= 1;
+	if (end < 0) return null;
+	let lastOption = -1;
+	for (let i = end; i >= 0; i -= 1) {
+		if (parseOptionLine(lines[i])) {
+			lastOption = i;
+			break;
+		}
+		if (end - i > MAX_TRAILING_LINES + MAX_OPTIONS) break;
+	}
+	if (lastOption < 0) return null;
+	const optionLines = [];
+	let firstOption = lastOption;
+	for (let i = lastOption; i >= 0; i -= 1) {
+		const parsed = parseOptionLine(lines[i]);
+		if (!parsed) break;
+		optionLines.unshift(parsed);
+		firstOption = i;
+	}
+	if (optionLines.length < 2 || optionLines.length > MAX_OPTIONS) return null;
+	for (let i = 0; i < optionLines.length; i += 1) if (optionLines[i].number !== i + 1) return null;
+	const cursorRows = optionLines.map((opt, index) => opt.cursor ? index : -1).filter((index) => index >= 0);
+	if (cursorRows.length > 1) return null;
+	const trailing = lines.slice(lastOption + 1).filter((line) => line.trim() !== "");
+	if (trailing.length > MAX_TRAILING_LINES) return null;
+	let footerHint = null;
+	for (const line of trailing) {
+		if (BARE_PROMPT_LINE.test(line)) return null;
+		if (SEPARATOR_LINE.test(line)) continue;
+		if (looksLikeHarnessFooterHint(line.trim())) {
+			if (footerHint === null) footerHint = line.trim();
+			continue;
+		}
+		return null;
+	}
+	const options = optionLines.map((opt) => {
+		const recommended = RECOMMENDED_SUFFIX.test(opt.rawLabel);
+		return {
+			number: opt.number,
+			label: recommended ? opt.rawLabel.replace(RECOMMENDED_SUFFIX, "") : opt.rawLabel,
+			recommended
+		};
+	});
+	if (mode === "card") {
+		if (looksLikePermissionOptions(options)) return null;
+		if (footerHint && /space\s+to\s+(?:select|toggle)/i.test(footerHint)) return null;
+	}
+	const contextLines = [];
+	let paragraphs = 0;
+	let i = firstOption - 1;
+	while (i >= 0 && lines[i].trim() === "") i -= 1;
+	for (; i >= 0 && contextLines.length < MAX_CONTEXT_LINES; i -= 1) {
+		const line = lines[i];
+		if (SEPARATOR_LINE.test(line) || BARE_PROMPT_LINE.test(line)) break;
+		if (parseOptionLine(line)) break;
+		if (line.trim() === "") {
+			if (paragraphs >= 2) break;
+			let j = i - 1;
+			while (j >= 0 && lines[j].trim() === "") j -= 1;
+			if (j < 0 || SEPARATOR_LINE.test(lines[j]) || BARE_PROMPT_LINE.test(lines[j]) || parseOptionLine(lines[j])) break;
+			i = j + 1;
+			continue;
+		}
+		if (lines[i + 1] === void 0 || lines[i + 1].trim() === "") paragraphs += 1;
+		contextLines.unshift(line.trim());
+	}
+	const hasCursor = cursorRows.length === 1;
+	if (!hasCursor && footerHint === null) return null;
+	const confidence = hasCursor && footerHint !== null ? "high" : "low";
+	return {
+		title: contextLines[0] ?? options[0].label,
+		contextLines,
+		options,
+		selectedIndex: hasCursor ? cursorRows[0] : 0,
+		footerHint,
+		confidence
+	};
+}
+/**
+* True when the pane is blocked on ANY numbered menu, including the permission
+* and multi-select shapes card rendering skips.
+*
+* Callers that would otherwise press Enter with nothing verified in the
+* composer MUST consult this first: a bare Enter confirms the menu's
+* highlighted row, which answers a question nobody asked. The session-resume
+* gate defaults to "Resume from summary", so a stray Enter there discards the
+* operator's full session (PAN-3212).
+*/
+function paneHasBlockingChoiceMenu(paneText) {
+	return parsePaneChoiceMenu(paneText, { mode: "guard" }) !== null;
+}
+/** Stable identity for patrol dedupe — same menu re-parsed must not re-surface. */
+function paneChoiceMenuSignature(menu) {
+	return `${menu.title}::${menu.options.map((o) => `${o.number}:${o.label}`).join("|")}`;
+}
+/**
+* Literal tmux keystrokes answering the menu with `selectedIndex`: arrow the
+* cursor from its current row to the target, then confirm. Claude Code menus
+* move the ❯ cursor with ↑/↓ and confirm with Enter; number keys are not
+* guaranteed across harness versions, so arrows are the universal path.
+*/
+function buildChoiceKeystrokes(menu, selectedIndex) {
+	const clamped = Math.max(0, Math.min(selectedIndex, menu.options.length - 1));
+	const from = menu.selectedIndex;
+	const keys = [];
+	for (let i = from; i < clamped; i += 1) keys.push("Down");
+	for (let i = from; i > clamped; i -= 1) keys.push("Up");
+	keys.push("Enter");
+	return keys;
+}
+var ANSI_PATTERN, OPTION_LINE, SEPARATOR_LINE, BARE_PROMPT_LINE, MAX_TRAILING_LINES, MAX_CONTEXT_LINES, MAX_OPTIONS, MAX_LABEL_CHARS, RECOMMENDED_SUFFIX;
+var init_pane_choice_menu = __esmMin((() => {
+	ANSI_PATTERN = /\x1b\[[0-9;?]*[ -/]*[@-~]/g;
+	OPTION_LINE = /^\s*(❯|›)?\s*(\d{1,2})[.)]\s+(\S.*)$/;
+	SEPARATOR_LINE = /^\s*[─━═]{6,}\s*$/;
+	BARE_PROMPT_LINE = /^\s*(❯|›)\s*$/;
+	MAX_TRAILING_LINES = 6;
+	MAX_CONTEXT_LINES = 8;
+	MAX_OPTIONS = 9;
+	MAX_LABEL_CHARS = 100;
+	RECOMMENDED_SUFFIX = /\s*\((recommended)\)\s*$/i;
+}));
+//#endregion
 //#region ../../lib/tmux.ts
 function validateSessionName(name) {
 	if (!VALID_SESSION_NAME_RE.test(name)) throw new Error(`Invalid tmux session name: ${name}`);
@@ -881,6 +1049,7 @@ var init_tmux = __esmMin((() => {
 	init_errors();
 	init_ui_theme();
 	init_tmux_process_tree();
+	init_pane_choice_menu();
 	execFileAsync = promisify(execFile);
 	VALID_SESSION_NAME_RE = /^[a-zA-Z0-9._-]+$/;
 	DEFAULT_TMUX_WINDOW_COLS = 200;
@@ -1198,7 +1367,8 @@ var init_tmux = __esmMin((() => {
 					bufferName
 				], { encoding: "utf-8" }).catch(() => {});
 				if (!pasteVerified) {
-					const snapshot = await capturePaneText(sessionName, 30);
+					const snapshot = await capturePaneText(sessionName, 90);
+					if (paneHasBlockingChoiceMenu(snapshot)) throw new MessageDeliveryFailed(`Delivery to ${sessionName} aborted: the pane is blocked on a choice menu, so the paste never reached the composer and Enter would answer that menu`, sessionName, snapshot);
 					console.warn(`[tmux] Paste verification failed for ${sessionName} after ${PASTE_MAX_ATTEMPTS} attempts × ${VERIFY_TIMEOUT_MS}ms. Sending Enter anyway to avoid orphaned input. Snapshot:\n${snapshot.slice(0, 500)}`);
 				}
 				await tmuxExecAsync([
@@ -1250,6 +1420,6 @@ var init_tmux = __esmMin((() => {
 	getAgentSessions = () => listSessions().pipe(Effect.map((sessions) => sessions.filter((s) => s.name.startsWith("agent-"))));
 }));
 //#endregion
-export { buildChildEnvSync as $, listPaneValues as A, sendKeysAsync as B, getWindowDimensions as C, killSession as D, isPaneDead as E, parseTmuxPaneRecords as F, tmuxExecAsync as G, sessionExists as H, querySessionSync as I, colorFgBgForTheme as J, validateSessionName as K, resizeWindow as L, listSessionNames as M, listSessions as N, killSessionSync as O, listSessionsSync as P, BLANKED_PROVIDER_ENV as Q, sendEscapeKeyAsync as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, sessionExistsSync as U, sendRawKeystroke as V, setOption as W, init_ui_theme as X, getUiThemeSync as Y, setUiTheme as Z, getAgentSessions as _, capturePaneSync as a, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, buildChildEnvWithoutTmuxSync as et, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, listPaneValuesSync as j, listAllPaneRecords as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, capturePaneText as o, ensureOverdeckTmuxServerSync as p, paneTreeHasHarnessProcess as q, buildTmuxCommandString as r, createSession as s, MessageDeliveryFailed as t, init_child_env as tt, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeys as z };
+export { colorFgBgForTheme as $, listPaneValues as A, sendKeysAsync as B, getWindowDimensions as C, killSession as D, isPaneDead as E, parseTmuxPaneRecords as F, tmuxExecAsync as G, sessionExists as H, querySessionSync as I, init_pane_choice_menu as J, validateSessionName as K, resizeWindow as L, listSessionNames as M, listSessions as N, killSessionSync as O, listSessionsSync as P, paneTreeHasHarnessProcess as Q, sendEscapeKeyAsync as R, getTmuxConfigMode as S, isHarnessProcessAlive as T, sessionExistsSync as U, sendRawKeystroke as V, setOption as W, paneHasBlockingChoiceMenu as X, paneChoiceMenuSignature as Y, parsePaneChoiceMenu as Z, getAgentSessions as _, capturePaneSync as a, buildChildEnvWithoutTmuxSync as at, getTmuxBaseArgs as b, createSessionSync as c, ensureManagedTmuxContextOnce as d, getUiThemeSync as et, ensureOverdeckTmuxServerAsync as f, findManagedServerPidSync as g, exactSession as h, capturePane as i, buildChildEnvSync as it, listPaneValuesSync as j, listAllPaneRecords as k, deliveryVerifyLine as l, exactPaneTarget as m, buildTmuxArgs as n, setUiTheme as nt, capturePaneText as o, init_child_env as ot, ensureOverdeckTmuxServerSync as p, buildChoiceKeystrokes as q, buildTmuxCommandString as r, BLANKED_PROVIDER_ENV as rt, createSession as s, MessageDeliveryFailed as t, init_ui_theme as tt, detectTerminalApiErrorSync as u, getManagedTmuxConfigPath as v, init_tmux as w, getTmuxCommand as x, getManagedTmuxSocketName as y, sendKeys as z };
 
-//# sourceMappingURL=tmux-B1Wbxz5o.js.map
+//# sourceMappingURL=tmux-CfDHob9M.js.map

package/server/{tmux-DQ6jB76i.js → tmux-Ctk6RV5l.js}

@@ -1,3 +1,3 @@
-import { D as killSession, E as isPaneDead, H as sessionExists, M as listSessionNames, k as listAllPaneRecords, w as init_tmux } from "./tmux-B1Wbxz5o.js";
+import { D as killSession, E as isPaneDead, H as sessionExists, M as listSessionNames, k as listAllPaneRecords, w as init_tmux } from "./tmux-CfDHob9M.js";
 init_tmux();
 export { isPaneDead, killSession, listAllPaneRecords, listSessionNames, sessionExists };

package/server/{token-Cxbk023d.js → token-B10VFNOD.js}

@@ -1,5 +1,5 @@
 import { t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as require_token_error, t as require_token_util } from "./token-util-CLq2MmQt.js";
+import { r as require_token_error, t as require_token_util } from "./token-util-CZ8WPtdk.js";
 //#region ../../../node_modules/.bun/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js
 var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var __defProp = Object.defineProperty;
@@ -54,4 +54,4 @@ var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 export default require_token();
 export {};
 
-//# sourceMappingURL=token-Cxbk023d.js.map
+//# sourceMappingURL=token-B10VFNOD.js.map

package/server/{token-util-CLq2MmQt.js → token-util-CZ8WPtdk.js}

@@ -432,4 +432,4 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 export { require_auth_errors as n, require_token_error as r, require_token_util as t };
 
-//# sourceMappingURL=token-util-CLq2MmQt.js.map
+//# sourceMappingURL=token-util-CZ8WPtdk.js.map

package/server/token-util-CrfQ2FKf.js

@@ -0,0 +1,3 @@
+import { t as require_token_util } from "./token-util-CZ8WPtdk.js";
+export default require_token_util();
+export {};

package/server/{tracker-config-DZ8Zn2nQ.js → tracker-config-CHbrjg6m.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, f as loadConfigSync, t as init_config_yaml } from "./config-yaml-CmOPzmBb.js";
+import { Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, f as loadConfigSync, t as init_config_yaml } from "./config-yaml-CxdwhAIA.js";
 import { existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
@@ -142,4 +142,4 @@ var init_tracker_config = __esmMin((() => {
 //#endregion
 export { init_tracker_config as a, initTrackerConfigCache as i, getLinearApiKey as n, validateRallyConfig as o, getRallyConfig as r, getGitHubConfig as t };
 
-//# sourceMappingURL=tracker-config-DZ8Zn2nQ.js.map
+//# sourceMappingURL=tracker-config-CHbrjg6m.js.map

package/server/{tracker-utils-L0FKtjq2.js → tracker-utils-DZZq_C0R.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, gr as init_issue_id, hr as extractPrefixSync, mr as extractNumberSync, vr as parseIssueIdSync } from "./config-yaml-CmOPzmBb.js";
+import { Fr as init_errors, Gn as init_projects, In as getIssuePrefix, Zn as loadProjectsConfigSync, gr as init_issue_id, hr as extractPrefixSync, mr as extractNumberSync, vr as parseIssueIdSync } from "./config-yaml-CxdwhAIA.js";
 import "effect";
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
@@ -120,4 +120,4 @@ var init_tracker_utils = __esmMin((() => {
 //#endregion
 export { resolveGitHubIssueSync as n, resolveTrackerTypeSync as r, init_tracker_utils as t };
 
-//# sourceMappingURL=tracker-utils-L0FKtjq2.js.map
+//# sourceMappingURL=tracker-utils-DZZq_C0R.js.map

package/server/{traefik-connect-bNX6jKkb.js → traefik-connect-GHomyBaD.js}

@@ -69,4 +69,4 @@ var init_traefik_connect = __esmMin((() => {
 //#endregion
 export { reconcileTraefikNetworks as n, init_traefik_connect as t };
 
-//# sourceMappingURL=traefik-connect-bNX6jKkb.js.map
+//# sourceMappingURL=traefik-connect-GHomyBaD.js.map

package/server/{tunnel-BAm1XgjG.js → tunnel-Bdyb-sNq.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CmOPzmBb.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-B123aZl-.js";
+import { Fr as init_errors, Nr as TrackerError } from "./config-yaml-CxdwhAIA.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CJ7RqQiP.js";
 import { Effect } from "effect";
 import { readFileSync } from "fs";
 import { resolve } from "path";
@@ -217,4 +217,4 @@ var init_tunnel = __esmMin((() => {
 //#endregion
 export { init_tunnel as n, removeTunnelIngress as r, addTunnelIngress as t };
 
-//# sourceMappingURL=tunnel-BAm1XgjG.js.map
+//# sourceMappingURL=tunnel-Bdyb-sNq.js.map

package/server/{tunnel-CjSnHdTc.js → tunnel-Dz7y434T.js}

@@ -1,3 +1,3 @@
-import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-BAm1XgjG.js";
+import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-Bdyb-sNq.js";
 init_tunnel();
 export { removeTunnelIngress };

package/server/{typed-errors-BHhE85Ul.js → typed-errors-BR_RmPS_.js}

@@ -1,3 +1,3 @@
-import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-2BTMxkZq.js";
+import { a as RateLimited, c as TrackerNotConfigured, d as init_typed_errors, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-Bn_2WRU7.js";
 init_typed_errors();
 export { AgentAlreadyRunning, AgentStartError, IssueNotFound, PlanEmpty, RateLimited, TasksNotInitialized, TrackerApiError, TrackerNotConfigured, WorkspaceCreateError, WorkspaceNotFound };

package/server/{typed-errors-2BTMxkZq.js → typed-errors-Bn_2WRU7.js}

@@ -23,4 +23,4 @@ var init_typed_errors = __esmMin((() => {
 //#endregion
 export { RateLimited as a, TrackerNotConfigured as c, init_typed_errors as d, PlanEmpty as i, WorkspaceCreateError as l, AgentStartError as n, TasksNotInitialized as o, IssueNotFound as r, TrackerApiError as s, AgentAlreadyRunning as t, WorkspaceNotFound as u };
 
-//# sourceMappingURL=typed-errors-2BTMxkZq.js.map
+//# sourceMappingURL=typed-errors-Bn_2WRU7.js.map

package/server/{types-hraoaQIp.js → types-D2ETIB8T.js}

@@ -36,4 +36,4 @@ var init_types = __esmMin((() => {
 //#endregion
 export { PAN_DIRNAME as a, PAN_SESSIONS_FILENAME as c, WORKSPACE_RUNTIME_DIRNAME as d, asPanSpecDocument as f, PAN_CONTINUE_FILENAME as i, PAN_SPECS_DIRNAME as l, isPanSpecStatus as m, PAN_CONTEXT_FILENAME as n, PAN_DRAFTS_DIRNAME as o, init_types as p, PAN_CONTINUES_DIRNAME as r, PAN_FEEDBACK_DIRNAME as s, LEGACY_WORKSPACE_RUNTIME_DIRNAME as t, PAN_SPEC_FILENAME as u };
 
-//# sourceMappingURL=types-hraoaQIp.js.map
+//# sourceMappingURL=types-D2ETIB8T.js.map

package/server/{types-q67TYYg5.js → types-Dh6RI5Vj.js}

@@ -59,4 +59,4 @@ var init_types = __esmMin((() => {}));
 //#endregion
 export { stepSkipped as a, stepOk as i, init_types as n, stepFailed as r, getLinearApiKey as t };
 
-//# sourceMappingURL=types-q67TYYg5.js.map
+//# sourceMappingURL=types-Dh6RI5Vj.js.map

package/server/{uat-promote-verification-CKB9ZrKC.js → uat-promote-verification-DyvQXvIn.js}

@@ -1,7 +1,7 @@
-import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CmOPzmBb.js";
-import { S as setReviewStatusSync, f as init_review_status, u as getReviewStatusSync } from "./review-status-yljtTd-q.js";
-import { k as listUatGenerationsSync, s as init_merge_sync } from "./merge-sync-CQ-LgZ1_.js";
-import { a as init_git_utils, c as rehydrateHeadAnchor } from "./git-utils-ameCgDdy.js";
+import { Gn as init_projects, ar as resolveProjectFromIssueSync } from "./config-yaml-CxdwhAIA.js";
+import { C as setReviewStatusSync, d as getReviewStatusSync, p as init_review_status } from "./review-status-CwhA9wmd.js";
+import { A as listUatGenerationsSync, c as init_merge_sync } from "./merge-sync-CM978zez.js";
+import { a as init_git_utils, c as rehydrateHeadAnchor } from "./git-utils-DtdoEXJk.js";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 //#region ../../lib/cloister/uat-promote-verification.ts
@@ -89,4 +89,4 @@ async function healUatPromotionVerification(issueId, deps = DEFAULT_HEAL_DEPS) {
 //#endregion
 export { buildUatPromotionStamp, healUatPromotionVerification, recordUatPromotionVerdicts };
 
-//# sourceMappingURL=uat-promote-verification-CKB9ZrKC.js.map
+//# sourceMappingURL=uat-promote-verification-DyvQXvIn.js.map

package/server/{uat-train-Cu-4nvbf.js → uat-train-diX_7shd.js}

@@ -1,2 +1,2 @@
-import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-D5UjcyAa.js";
+import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-Dv0Bxer7.js";
 export { canStartUatTrainReconciler, getUatCandidatePayload, getUatGenerationsPayload, postUatGenerationPromotePayload, postUatGenerationStackPayload, resolveUatProjectRoot, runUatTrainReconcile, runUatTrainReconcileAllProjects, startUatTrainReconciler, stopUatTrainReconciler };