@overdeck/desktop 0.49.1 → 0.49.2

package/server/{tmux-BqXzRuaH.js → tmux-DWEc4Ld9.js}

@@ -1,11 +1,11 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fi as init_paths, Pi as getOverdeckHome, oi as init_errors, p as loadConfigSync, ri as TmuxError, t as init_config_yaml, ti as MessageDeliveryFailed } from "./config-yaml-BwOEANMr.js";
+import { Ai as getCanonicalOverdeckHome, Li as getOverdeckHome, Ri as init_paths, ai as TmuxError, ci as init_errors, p as loadConfigSync, ri as MessageDeliveryFailed, t as init_config_yaml } from "./config-yaml-D9nfpEx1.js";
 import { Effect } from "effect";
 import { appendFileSync, chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "fs";
-import { join } from "path";
-import { tmpdir } from "os";
+import { join, resolve } from "path";
+import { homedir, tmpdir } from "os";
 import { mkdir, readFile, unlink, writeFile } from "fs/promises";
-import { randomUUID } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { execFile, execFileSync, execSync } from "child_process";
 import { promisify } from "util";
 //#region ../../lib/child-env.ts
@@ -338,6 +338,13 @@ function deliveryVerifyLine(content) {
 	const lines = content.split("\n");
 	return ([...lines].reverse().find((line) => line.trim().length >= 3) ?? lines[lines.length - 1])?.trim() ?? "";
 }
+/**
+* The cursor-anchored active-composer region of a pane: the rows between the
+* composer's top border (if any) and the cursor row, ANSI-stripped. Returns
+* null when the composer cannot be anchored (blank pane or unreadable cursor).
+* Exported so delivery-verification callers can match against the composer
+* only — never the transcript scrollback above it.
+*/
 function activeComposerRegion(viewport) {
 	const lines = viewport.text.replace(PANE_ANSI_PATTERN, "").split("\n").map((line) => line.replace(/\s+$/g, ""));
 	if (lines.every((line) => line.trim() === "")) return null;
@@ -384,8 +391,23 @@ function getTmuxDir() {
 function getManagedTmuxConfigPath() {
 	return join(getTmuxDir(), "overdeck.tmux.conf");
 }
+/**
+* PAN-3673: a process whose OVERDECK_HOME is not the default home is a separate
+* Overdeck instance (an isolated verification dashboard, a scratch home). If it
+* drives the shared 'overdeck' socket, its PAN-1798 sanitizer pins race the real
+* stack's pins in the server global env, and whichever pinned last at the instant
+* of `new-session` wins — real sessions then capture the wrong OVERDECK_HOME
+* (PAN-3668 incident, 2026-08-13: the review orchestrator's app-server wrote its
+* socket under a /tmp home and the readiness check never saw it). Derive a
+* deterministic per-home socket instead so a non-default stack can never touch
+* the shared server. An explicit OVERDECK_TMUX_SOCKET_NAME still wins (per-test
+* isolation, PAN-1808).
+*/
 function getManagedTmuxSocketName() {
-	return process.env.OVERDECK_TMUX_SOCKET_NAME ?? "overdeck";
+	if (process.env.OVERDECK_TMUX_SOCKET_NAME) return process.env.OVERDECK_TMUX_SOCKET_NAME;
+	const home = resolve(getOverdeckHome());
+	if (home === resolve(join(homedir(), ".overdeck"))) return DEFAULT_MANAGED_TMUX_SOCKET;
+	return `${DEFAULT_MANAGED_TMUX_SOCKET}-${createHash("sha1").update(home).digest("hex").slice(0, 8)}`;
 }
 function ensureLogDir() {
 	const logDir = join(getOverdeckHome(), "logs");
@@ -512,17 +534,27 @@ function warnIfServerCmdlineIsDirtySync() {
 * HOME and drop into the onboarding/login screen.
 *
 * Detecting this and only warning (the old behaviour) left the poison in place.
-* Since `ensureOverdeckTmuxServer*` runs before every `new-session`, overwrite the
-* critical vars in the server's global environment with the clean child env so new
-* sessions are always spawned with the correct HOME/OVERDECK_HOME — even on a
-* dirtily-founded server — and strip known test pollution. Non-destructive: existing
-* sessions keep their captured env; only future sessions change.
+* Since `ensureOverdeckTmuxServer*` runs before every `new-session`, always pin
+* canonical HOME/OVERDECK_HOME on the shared socket. Isolated sockets instead get
+* the caller's resolved values. Non-destructive: existing sessions keep their
+* captured env; only future sessions change.
 */
+/** @internal Exported only for focused sanitizer tests. */
 function sanitizeManagedServerGlobalEnvSync(cleanEnv) {
 	const sock = getManagedTmuxSocketName();
+	const canonicalOverdeckHome = getCanonicalOverdeckHome();
+	const sharedSocket = sock === DEFAULT_MANAGED_TMUX_SOCKET;
+	const callerOverdeckHome = getOverdeckHome();
+	const pinnedEnv = sharedSocket ? {
+		HOME: homedir(),
+		OVERDECK_HOME: canonicalOverdeckHome
+	} : {
+		HOME: cleanEnv.HOME ?? homedir(),
+		OVERDECK_HOME: callerOverdeckHome
+	};
+	if (sharedSocket && resolve(callerOverdeckHome) !== resolve(canonicalOverdeckHome)) console.warn(`[tmux] WARNING (PAN-3671): refusing to pin non-canonical OVERDECK_HOME '${callerOverdeckHome}' on shared socket '${sock}'. Set OVERDECK_TMUX_SOCKET_NAME to isolate this Overdeck instance.`);
 	for (const key of ["HOME", "OVERDECK_HOME"]) {
-		const value = cleanEnv[key];
-		if (!value) continue;
+		const value = pinnedEnv[key];
 		try {
 			execFileSync("tmux", [
 				"-L",
@@ -575,7 +607,8 @@ function ensureOverdeckTmuxServerSync(cleanEnv) {
 		getManagedTmuxConfigPath(),
 		"start-server"
 	];
-	if (!(() => {
+	const useManagedUnit = getManagedTmuxSocketName() === DEFAULT_MANAGED_TMUX_SOCKET;
+	if (!(!useManagedUnit ? false : (() => {
 		try {
 			execFileSync("systemd-run", [
 				"--user",
@@ -596,7 +629,7 @@ function ensureOverdeckTmuxServerSync(cleanEnv) {
 		} catch {
 			return false;
 		}
-	})()) {
+	})())) {
 		let daemonized = false;
 		try {
 			execFileSync("setsid", ["tmux", ...args], {
@@ -609,7 +642,7 @@ function ensureOverdeckTmuxServerSync(cleanEnv) {
 			stdio: "ignore",
 			env: cleanEnv
 		});
-		console.warn(`[tmux] WARNING (PAN-1798): could not start '${MANAGED_TMUX_SERVER_UNIT}' via systemd-run. Shared tmux server is running without systemd scope isolation; killing the founding process tree may still destroy the server.`);
+		if (useManagedUnit) console.warn(`[tmux] WARNING (PAN-1798): could not start '${MANAGED_TMUX_SERVER_UNIT}' via systemd-run. Shared tmux server is running without systemd scope isolation; killing the founding process tree may still destroy the server.`);
 	}
 	const deadline = Date.now() + SERVER_ALIVE_TIMEOUT_MS;
 	while (Date.now() < deadline) {
@@ -761,7 +794,12 @@ function buildNewSessionArgs(name, cwd, initialCommand, options) {
 		"-y",
 		String(height)
 	];
-	if (options?.env) for (const [key, value] of Object.entries(options.env)) args.push("-e", `${key}=${value}`);
+	const env = {
+		HOME: process.env.HOME ?? homedir(),
+		OVERDECK_HOME: getOverdeckHome(),
+		...options?.env
+	};
+	for (const [key, value] of Object.entries(env)) args.push("-e", `${key}=${value}`);
 	if (initialCommand) args.push(initialCommand);
 	return args;
 }
@@ -803,6 +841,9 @@ function listSessionsSync() {
 		return [];
 	}
 }
+function listSessionNamesSync() {
+	return listSessionsSync().map((session) => session.name);
+}
 /**
 * tmux target-session syntax: a bare name is matched as a *prefix* against
 * existing session names. That means `has-session -t agent-pan-977` returns
@@ -949,6 +990,36 @@ async function capturePaneText(sessionName, lines = 50, options) {
 		return "";
 	}
 }
+/**
+* Capture the visible pane plus its cursor row as a PaneViewport for
+* cursor-anchored composer detection (pane-composer.ts). Returns null when
+* the pane or cursor position is unreadable.
+*/
+async function capturePaneViewport(sessionName) {
+	try {
+		const target = exactPaneTarget(sessionName);
+		const [pane, cursor] = await Promise.all([tmuxExecAsync([
+			"capture-pane",
+			"-t",
+			target,
+			"-p"
+		], { encoding: "utf-8" }), tmuxExecAsync([
+			"display-message",
+			"-p",
+			"-t",
+			target,
+			"#{cursor_y}"
+		], { encoding: "utf-8" })]);
+		const cursorY = Number.parseInt(String(cursor.stdout).trim(), 10);
+		if (!Number.isInteger(cursorY)) return null;
+		return {
+			text: String(pane.stdout),
+			cursorY
+		};
+	} catch {
+		return null;
+	}
+}
 function listPaneValuesSync(target, format) {
 	try {
 		return tmuxExecSync([
@@ -1073,7 +1144,7 @@ async function sendEscapeKeyAsync(sessionName, times = 1) {
 		if (i < times - 1) await new Promise((resolve) => setTimeout(resolve, 250));
 	}
 }
-var execFileAsync, VALID_SESSION_NAME_RE, DEFAULT_TMUX_WINDOW_COLS, DEFAULT_TMUX_WINDOW_ROWS, MANAGED_TMUX_SERVER_UNIT, SERVER_ALIVE_POLL_MS, SERVER_ALIVE_TIMEOUT_MS, MANAGED_TMUX_CONFIG_CONTENT, tmuxContextPrepared, warnedManagedServerTmuxSpawnScope, warnedManagedServerDirtyCmdline, TERMINAL_API_ERROR_PATTERNS, toTmuxError, ensureManagedTmuxContextOnce, listSessions, listSessionNames, listAllPaneRecords, getWindowDimensions, sessionExists, createSession, killSession, setOption, resizeWindow, sendRawKeystroke, sendKeys, capturePane, listPaneValues, isPaneDead, getAgentSessions;
+var execFileAsync, VALID_SESSION_NAME_RE, DEFAULT_TMUX_WINDOW_COLS, DEFAULT_TMUX_WINDOW_ROWS, MANAGED_TMUX_SERVER_UNIT, SERVER_ALIVE_POLL_MS, SERVER_ALIVE_TIMEOUT_MS, MANAGED_TMUX_CONFIG_CONTENT, tmuxContextPrepared, DEFAULT_MANAGED_TMUX_SOCKET, warnedManagedServerTmuxSpawnScope, warnedManagedServerDirtyCmdline, TERMINAL_API_ERROR_PATTERNS, toTmuxError, ensureManagedTmuxContextOnce, listSessions, listSessionNames, listAllPaneRecords, getWindowDimensions, sessionExists, createSession, killSession, setOption, resizeWindow, sendRawKeystroke, sendKeys, capturePane, listPaneValues, isPaneDead, getAgentSessions;
 var init_tmux = __esmMin((() => {
 	init_paths();
 	init_config_yaml();
@@ -1106,6 +1177,7 @@ var init_tmux = __esmMin((() => {
 		""
 	].join("\n");
 	tmuxContextPrepared = false;
+	DEFAULT_MANAGED_TMUX_SOCKET = "overdeck";
 	warnedManagedServerTmuxSpawnScope = false;
 	warnedManagedServerDirtyCmdline = false;
 	TERMINAL_API_ERROR_PATTERNS = [
@@ -1446,6 +1518,6 @@ var init_tmux = __esmMin((() => {
 	getAgentSessions = () => listSessions().pipe(Effect.map((sessions) => sessions.filter((s) => s.name.startsWith("agent-"))));
 }));
 //#endregion
-export { paneTreeHasHarnessProcess as $, listSessionNames as A, sessionExists as B, isHarnessProcessAlive as C, listAllPaneRecords as D, killSessionSync as E, resizeWindow as F, activeComposerPayloadPresence as G, setOption as H, sendEscapeKeyAsync as I, buildChoiceKeystrokes as J, deliveryVerifyLine as K, sendKeys as L, listSessionsSync as M, parseTmuxPaneRecords as N, listPaneValues as O, querySessionSync as P, parsePaneChoiceMenu as Q, sendKeysAsync as R, init_tmux as S, killSession as T, tmuxExecAsync as U, sessionExistsSync as V, validateSessionName as W, paneChoiceMenuSignature as X, init_pane_choice_menu as Y, paneHasBlockingChoiceMenu as Z, getManagedTmuxSocketName as _, capturePaneText as a, buildChildEnvSync as at, getTmuxConfigMode as b, detectTerminalApiErrorSync as c, ensureOverdeckTmuxServerSync as d, colorFgBgForTheme as et, exactPaneTarget as f, getManagedTmuxConfigPath as g, getAgentSessions as h, capturePaneSync as i, BLANKED_PROVIDER_ENV as it, listSessions as j, listPaneValuesSync as k, ensureManagedTmuxContextOnce as l, findManagedServerPidSync as m, buildTmuxCommandString as n, init_ui_theme as nt, createSession as o, buildChildEnvWithoutTmuxSync as ot, exactSession as p, init_pane_composer as q, capturePane as r, setUiTheme as rt, createSessionSync as s, init_child_env as st, buildTmuxArgs as t, getUiThemeSync as tt, ensureOverdeckTmuxServerAsync as u, getTmuxBaseArgs as v, isPaneDead as w, getWindowDimensions as x, getTmuxCommand as y, sendRawKeystroke as z };
+export { init_pane_choice_menu as $, listPaneValuesSync as A, sendKeys as B, init_tmux as C, killSessionSync as D, killSession as E, parseTmuxPaneRecords as F, setOption as G, sendRawKeystroke as H, querySessionSync as I, activeComposerPayloadPresence as J, tmuxExecAsync as K, resizeWindow as L, listSessionNamesSync as M, listSessions as N, listAllPaneRecords as O, listSessionsSync as P, buildChoiceKeystrokes as Q, sanitizeManagedServerGlobalEnvSync as R, getWindowDimensions as S, isPaneDead as T, sessionExists as U, sendKeysAsync as V, sessionExistsSync as W, deliveryVerifyLine as X, activeComposerRegion as Y, init_pane_composer as Z, getManagedTmuxConfigPath as _, capturePaneText as a, getUiThemeSync as at, getTmuxCommand as b, createSessionSync as c, BLANKED_PROVIDER_ENV as ct, ensureOverdeckTmuxServerAsync as d, init_child_env as dt, paneChoiceMenuSignature as et, ensureOverdeckTmuxServerSync as f, getAgentSessions as g, findManagedServerPidSync as h, capturePaneSync as i, colorFgBgForTheme as it, listSessionNames as j, listPaneValues as k, detectTerminalApiErrorSync as l, buildChildEnvSync as lt, exactSession as m, buildTmuxCommandString as n, parsePaneChoiceMenu as nt, capturePaneViewport as o, init_ui_theme as ot, exactPaneTarget as p, validateSessionName as q, capturePane as r, paneTreeHasHarnessProcess as rt, createSession as s, setUiTheme as st, buildTmuxArgs as t, paneHasBlockingChoiceMenu as tt, ensureManagedTmuxContextOnce as u, buildChildEnvWithoutTmuxSync as ut, getManagedTmuxSocketName as v, isHarnessProcessAlive as w, getTmuxConfigMode as x, getTmuxBaseArgs as y, sendEscapeKeyAsync as z };
 
-//# sourceMappingURL=tmux-BqXzRuaH.js.map
+//# sourceMappingURL=tmux-DWEc4Ld9.js.map

package/server/{token-CO3INKbh.js → token-Bez-qCB2.js}

@@ -1,5 +1,5 @@
 import { t as __commonJSMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { r as require_token_error, t as require_token_util } from "./token-util-DyJJyX_B.js";
+import { r as require_token_error, t as require_token_util } from "./token-util-Crcay9j_.js";
 //#region ../../../node_modules/.bun/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token.js
 var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var __defProp = Object.defineProperty;
@@ -54,4 +54,4 @@ var require_token = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 export default require_token();
 export {};
 
-//# sourceMappingURL=token-CO3INKbh.js.map
+//# sourceMappingURL=token-Bez-qCB2.js.map

package/server/{token-util-DyJJyX_B.js → token-util-Crcay9j_.js}

@@ -432,4 +432,4 @@ var require_token_util = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 export { require_auth_errors as n, require_token_error as r, require_token_util as t };
 
-//# sourceMappingURL=token-util-DyJJyX_B.js.map
+//# sourceMappingURL=token-util-Crcay9j_.js.map

package/server/token-util-DfUS3Lpp.js

@@ -0,0 +1,3 @@
+import { t as require_token_util } from "./token-util-Crcay9j_.js";
+export default require_token_util();
+export {};

package/server/{tracker-config-DVzhaUxO.js → tracker-config-CJzPhSHv.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { bn as loadProjectsConfigSync, fn as init_projects, p as loadConfigSync, rn as getIssuePrefix, t as init_config_yaml } from "./config-yaml-BwOEANMr.js";
+import { bn as loadProjectsConfigSync, fn as init_projects, p as loadConfigSync, rn as getIssuePrefix, t as init_config_yaml } from "./config-yaml-D9nfpEx1.js";
 import { existsSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
@@ -142,4 +142,4 @@ var init_tracker_config = __esmMin((() => {
 //#endregion
 export { init_tracker_config as a, initTrackerConfigCache as i, getLinearApiKey as n, validateRallyConfig as o, getRallyConfig as r, getGitHubConfig as t };
 
-//# sourceMappingURL=tracker-config-DVzhaUxO.js.map
+//# sourceMappingURL=tracker-config-CJzPhSHv.js.map

package/server/{tracker-utils-xnVJVrrO.js → tracker-utils-DJAOAuMN.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Gn as init_issue_id, Un as extractNumberSync, Wn as extractPrefixSync, bn as loadProjectsConfigSync, fn as init_projects, oi as init_errors, qn as parseIssueIdSync, rn as getIssuePrefix } from "./config-yaml-BwOEANMr.js";
+import { Gn as extractNumberSync, Kn as extractPrefixSync, Yn as parseIssueIdSync, bn as loadProjectsConfigSync, ci as init_errors, fn as init_projects, qn as init_issue_id, rn as getIssuePrefix } from "./config-yaml-D9nfpEx1.js";
 import "effect";
 import { existsSync, readFileSync } from "fs";
 import { join } from "path";
@@ -120,4 +120,4 @@ var init_tracker_utils = __esmMin((() => {
 //#endregion
 export { resolveGitHubIssueSync as n, resolveTrackerTypeSync as r, init_tracker_utils as t };
 
-//# sourceMappingURL=tracker-utils-xnVJVrrO.js.map
+//# sourceMappingURL=tracker-utils-DJAOAuMN.js.map

package/server/{traefik-connect-A5k54mCv.js → traefik-connect-D3H5I6b9.js}

@@ -69,4 +69,4 @@ var init_traefik_connect = __esmMin((() => {
 //#endregion
 export { reconcileTraefikNetworks as n, init_traefik_connect as t };
 
-//# sourceMappingURL=traefik-connect-A5k54mCv.js.map
+//# sourceMappingURL=traefik-connect-D3H5I6b9.js.map

package/server/{tunnel-DauSR-rs.js → tunnel-BSdKnW0U.js}

@@ -1,3 +1,3 @@
-import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-CwOnS-PB.js";
+import { n as init_tunnel, r as removeTunnelIngress } from "./tunnel-Cr3ctqxp.js";
 init_tunnel();
 export { removeTunnelIngress };

package/server/{tunnel-CwOnS-PB.js → tunnel-Cr3ctqxp.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { ii as TrackerError, oi as init_errors } from "./config-yaml-BwOEANMr.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-D0CavVtz.js";
+import { ci as init_errors, oi as TrackerError } from "./config-yaml-D9nfpEx1.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-DRYDO7Zr.js";
 import { Effect } from "effect";
 import { readFileSync } from "fs";
 import { resolve } from "path";
@@ -217,4 +217,4 @@ var init_tunnel = __esmMin((() => {
 //#endregion
 export { init_tunnel as n, removeTunnelIngress as r, addTunnelIngress as t };
 
-//# sourceMappingURL=tunnel-CwOnS-PB.js.map
+//# sourceMappingURL=tunnel-Cr3ctqxp.js.map

package/server/{typed-errors-B-gfU2RB.js → typed-errors-CZ3GFBvo.js}

@@ -1,2 +1,2 @@
-import { a as RateLimited, c as TrackerNotConfigured, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-DzC4zXbI.js";
+import { a as RateLimited, c as TrackerNotConfigured, i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, o as TasksNotInitialized, r as IssueNotFound, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-DXqf3RnP.js";
 export { AgentAlreadyRunning, AgentStartError, IssueNotFound, PlanEmpty, RateLimited, TasksNotInitialized, TrackerApiError, TrackerNotConfigured, WorkspaceCreateError, WorkspaceNotFound };

package/server/{typed-errors-DzC4zXbI.js → typed-errors-DXqf3RnP.js}

@@ -29,4 +29,4 @@ var AgentStartError = class extends Data.TaggedError("AgentStartError") {};
 //#endregion
 export { RateLimited as a, TrackerNotConfigured as c, PlanEmpty as i, WorkspaceCreateError as l, AgentStartError as n, TasksNotInitialized as o, IssueNotFound as r, TrackerApiError as s, AgentAlreadyRunning as t, WorkspaceNotFound as u };
 
-//# sourceMappingURL=typed-errors-DzC4zXbI.js.map
+//# sourceMappingURL=typed-errors-DXqf3RnP.js.map

package/server/{types-DjpLVpsj.js → types-fzBp9cYi.js}

@@ -59,4 +59,4 @@ var init_types = __esmMin((() => {}));
 //#endregion
 export { stepSkipped as a, stepOk as i, init_types as n, stepFailed as r, getLinearApiKey as t };
 
-//# sourceMappingURL=types-DjpLVpsj.js.map
+//# sourceMappingURL=types-fzBp9cYi.js.map

package/server/{types-DbxY2QB6.js → types-pLpbsNto.js}

@@ -37,4 +37,4 @@ var init_types = __esmMin((() => {
 //#endregion
 export { PAN_DIRNAME as a, PAN_SESSIONS_FILENAME as c, PENDING_PROMOTION_FILENAME as d, WORKSPACE_RUNTIME_DIRNAME as f, isPanSpecStatus as h, PAN_CONTINUE_FILENAME as i, PAN_SPECS_DIRNAME as l, init_types as m, PAN_CONTEXT_FILENAME as n, PAN_DRAFTS_DIRNAME as o, asPanSpecDocument as p, PAN_CONTINUES_DIRNAME as r, PAN_FEEDBACK_DIRNAME as s, LEGACY_WORKSPACE_RUNTIME_DIRNAME as t, PAN_SPEC_FILENAME as u };
 
-//# sourceMappingURL=types-DbxY2QB6.js.map
+//# sourceMappingURL=types-pLpbsNto.js.map

package/server/{uat-failure-feedback-BVqsWlrr.js → uat-failure-feedback-IZQ-J8jt.js}

@@ -1,8 +1,8 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { On as resolveProjectFromIssueSync, fn as init_projects } from "./config-yaml-BwOEANMr.js";
-import { Lt as init_messaging, Rt as messageAgent } from "./agent-state-Bb3UUxQm.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-D4ULO4qG.js";
-import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-Ci6N5p4G.js";
+import { On as resolveProjectFromIssueSync, fn as init_projects } from "./config-yaml-D9nfpEx1.js";
+import { Ht as init_messaging, Ut as messageAgent } from "./agent-state-BJhGIJZe.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-C1gCLFmp.js";
+import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-D7GxdUYG.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 //#region ../../lib/cloister/uat-failure-feedback.ts
@@ -133,4 +133,4 @@ __esmMin((() => {
 }))();
 export { clearUatFailureFeedbackAnchor, relayUatFailureFeedbackPromise };
 
-//# sourceMappingURL=uat-failure-feedback-BVqsWlrr.js.map
+//# sourceMappingURL=uat-failure-feedback-IZQ-J8jt.js.map

package/server/{uat-promote-verification-DmG097QS.js → uat-promote-verification-DXApKcc2.js}

@@ -1,7 +1,7 @@
-import { On as resolveProjectFromIssueSync, fn as init_projects } from "./config-yaml-BwOEANMr.js";
-import { a as init_git_utils, c as rehydrateHeadAnchor } from "./git-utils-DV4B9TRl.js";
-import { c as init_merge_sync, j as listUatGenerationsSync } from "./merge-sync-Ct0-cxMX.js";
-import { d as getReviewStatusSync, p as init_review_status, w as setReviewStatusSync } from "./review-status-DBnR5t4z.js";
+import { On as resolveProjectFromIssueSync, fn as init_projects } from "./config-yaml-D9nfpEx1.js";
+import { a as init_git_utils, c as rehydrateHeadAnchor } from "./git-utils-DW8-jIUJ.js";
+import { c as init_merge_sync, j as listUatGenerationsSync } from "./merge-sync-CJpOa0cZ.js";
+import { d as getReviewStatusSync, p as init_review_status, w as setReviewStatusSync } from "./review-status-yOGD2MuK.js";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 //#region ../../lib/cloister/uat-promote-verification.ts
@@ -89,4 +89,4 @@ async function healUatPromotionVerification(issueId, deps = DEFAULT_HEAL_DEPS) {
 //#endregion
 export { buildUatPromotionStamp, healUatPromotionVerification, recordUatPromotionVerdicts };
 
-//# sourceMappingURL=uat-promote-verification-DmG097QS.js.map
+//# sourceMappingURL=uat-promote-verification-DXApKcc2.js.map

package/server/{uat-train-COSy-vEX.js → uat-train-CycEzpbE.js}

@@ -1,2 +1,2 @@
-import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-DVUNW03P.js";
+import { a as postUatGenerationStackPayload, c as runUatTrainReconcileAllProjects, i as postUatGenerationPromotePayload, l as startUatTrainReconciler, n as getUatCandidatePayload, o as resolveUatProjectRoot, r as getUatGenerationsPayload, s as runUatTrainReconcile, t as canStartUatTrainReconciler, u as stopUatTrainReconciler } from "./uat-train-IIZlz7r3.js";
 export { canStartUatTrainReconciler, getUatCandidatePayload, getUatGenerationsPayload, postUatGenerationPromotePayload, postUatGenerationStackPayload, resolveUatProjectRoot, runUatTrainReconcile, runUatTrainReconcileAllProjects, startUatTrainReconciler, stopUatTrainReconciler };

package/server/{validate-Dvv83iBx.js → validate-Ur4xH5bN.js}

@@ -1,5 +1,5 @@
-import { i as getAllReviewStatusesFromDb, l as init_review_status_sync } from "./review-status-sync-B7V_Gg51.js";
-import { G as liveOrderIssueLookup, K as orderIssueStoreStatus, W as listBooks } from "./flywheel-C7yek87O.js";
+import { i as getAllReviewStatusesFromDb, l as init_review_status_sync } from "./review-status-sync-2C9lk85r.js";
+import { G as liveOrderIssueLookup, W as listBooks, q as orderIssueStoreStatus } from "./flywheel-CjW2L7BS.js";
 import { join } from "node:path";
 import { existsSync, readdirSync, statSync } from "node:fs";
 //#region ../../lib/cloister/merge-blockers.ts
@@ -183,4 +183,4 @@ function validateBookForStart(stateRoot, book, options = {}) {
 //#endregion
 export { getMergeBlockersPayload as i, hasOrderIssuePrd as n, validateBookForStart as r, createOrderPrdLookup as t };
 
-//# sourceMappingURL=validate-Dvv83iBx.js.map
+//# sourceMappingURL=validate-Ur4xH5bN.js.map

package/server/{validation-BdCjzWLN.js → validation-CHovCoTT.js}

@@ -1,2 +1,2 @@
-import { n as killAllGateProcessGroups, r as runQualityGates } from "./validation-DlHafKzu.js";
+import { n as killAllGateProcessGroups, r as runQualityGates } from "./validation-Dr6V4PXx.js";
 export { killAllGateProcessGroups, runQualityGates };

package/server/{validation-DlHafKzu.js → validation-Dr6V4PXx.js}

@@ -1,6 +1,6 @@
-import { Fi as init_paths, Pi as getOverdeckHome, oi as init_errors } from "./config-yaml-BwOEANMr.js";
-import { h as loadConfigSync, p as init_config } from "./config-tucKBCCc.js";
-import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-D0CavVtz.js";
+import { Li as getOverdeckHome, Ri as init_paths, ci as init_errors } from "./config-yaml-D9nfpEx1.js";
+import { h as loadConfigSync, p as init_config } from "./config-ZGjvuR6J.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-DRYDO7Zr.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 import "fs";
@@ -237,9 +237,12 @@ function clipGateStream(stream, limit) {
 	const tailLength = limit - headLength;
 	return `${signal.slice(0, headLength)}\n…(${signal.length - limit} chars elided)…\n${signal.slice(-tailLength)}`;
 }
-function formatGateOutput(stdout, stderr) {
+function formatGatePreview(stdout, stderr) {
 	return [clipGateStream(stdout, 4e3), clipGateStream(stderr, 2e3)].filter(Boolean).join("\n--- stderr ---\n");
 }
+function formatGateOutput(stdout, stderr) {
+	return [stdout, stderr].filter(Boolean).join("\n--- stderr ---\n");
+}
 function buildQualityGateEnv(gateEnv) {
 	const env = { ...process.env };
 	for (const key of DASHBOARD_RUNTIME_ENV_KEYS) if (!Object.prototype.hasOwnProperty.call(gateEnv ?? {}, key)) delete env[key];
@@ -417,7 +420,7 @@ async function runQualityGatesPromise(gates, projectPath, phase = "pre_push", op
 				}
 				const { stdout, stderr } = await execPromise;
 				passedGate = true;
-				passOutput = formatGateOutput(stdout, stderr);
+				passOutput = formatGatePreview(stdout, stderr);
 			} catch (error) {
 				lastError = error;
 				if (attempt < maxAttempts) {
@@ -524,4 +527,4 @@ const runQualityGates = (gates, projectPath, phase = "pre_push", opts = {}) => E
 //#endregion
 export { killAllGateProcessGroups as n, runQualityGates as r, DEFAULT_GATES as t };
 
-//# sourceMappingURL=validation-DlHafKzu.js.map
+//# sourceMappingURL=validation-Dr6V4PXx.js.map

package/server/{verification-artifact-CaSbxUVg.js → verification-artifact-D3viYe_t.js}

@@ -1,2 +1,2 @@
-import { t as readVerificationArtifact } from "./verification-artifact-0Zku8N-W.js";
+import { t as readVerificationArtifact } from "./verification-artifact-k5Ftpg0c.js";
 export { readVerificationArtifact };

package/server/{verification-artifact-0Zku8N-W.js → verification-artifact-k5Ftpg0c.js}

@@ -53,4 +53,4 @@ function readVerificationArtifact(workspacePath) {
 //#endregion
 export { verificationArtifactPath as n, writeVerificationArtifact as r, readVerificationArtifact as t };
 
-//# sourceMappingURL=verification-artifact-0Zku8N-W.js.map
+//# sourceMappingURL=verification-artifact-k5Ftpg0c.js.map

package/server/{verification-runner-C6wdZda2.js → verification-runner-BuqGwm2t.js}

@@ -1,2 +1,2 @@
-import { n as reconcileInterruptedVerifications, r as runVerificationForIssue } from "./verification-runner-DwP2fUEF.js";
+import { n as reconcileInterruptedVerifications, r as runVerificationForIssue } from "./verification-runner-Dl13mmsI.js";
 export { reconcileInterruptedVerifications, runVerificationForIssue };

package/server/{verification-runner-DwP2fUEF.js → verification-runner-Dl13mmsI.js}

@@ -1,16 +1,16 @@
-import { $t as findProjectByPathSync, Fi as init_paths, On as resolveProjectFromIssueSync, Pi as getOverdeckHome, Ri as packageRoot, fn as init_projects } from "./config-yaml-BwOEANMr.js";
-import { G as init_agents, Rt as messageAgent, in as stopAgent, k as setAgentPaused } from "./agent-state-Bb3UUxQm.js";
-import { i as readReviewStatusMap, n as init_review_status_source } from "./review-status-source-Ct912fv_.js";
-import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-Bg44O-9x.js";
-import { s as init_io, t as XBriefMergeConflictError } from "./io-DfvO2xyh.js";
-import { i as init_project_repos, u as resolveWorkspaceRepoRootsSync } from "./project-repos-B4MK48j4.js";
-import { H as init_review_status_reconcile, O as capturePipelineStageForIssue, V as MERGED_VERIFICATION_REASON, _ as markWorkspaceStuck, d as getReviewStatusSync, k as init_pipeline, p as init_review_status, w as setReviewStatusSync } from "./review-status-DBnR5t4z.js";
-import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-D4ULO4qG.js";
-import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-Ci6N5p4G.js";
-import { r as runQualityGates, t as DEFAULT_GATES } from "./validation-DlHafKzu.js";
-import { r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-0Zku8N-W.js";
-import { n as getXBriefACStatusSync } from "./acceptance-criteria-Crw-xSJ3.js";
-import { n as checkIncompletePlanItemsPromise } from "./done-preflight-Bk8aExAL.js";
+import { $t as findProjectByPathSync, Li as getOverdeckHome, On as resolveProjectFromIssueSync, Ri as init_paths, Vi as packageRoot, fn as init_projects } from "./config-yaml-D9nfpEx1.js";
+import { Ut as messageAgent, j as setAgentPaused, pn as stopAgent, q as init_agents } from "./agent-state-BJhGIJZe.js";
+import { i as readReviewStatusMap, n as init_review_status_source } from "./review-status-source-Jq0BXmn3.js";
+import { o as init_lifecycle, s as isXBriefFilename } from "./lifecycle-0NOEzomy.js";
+import { s as init_io, t as XBriefMergeConflictError } from "./io-DKrWd3gX.js";
+import { d as resolveWorkspaceRepoRootsSync, i as init_project_repos } from "./project-repos--QeCg7yQ.js";
+import { H as init_review_status_reconcile, O as capturePipelineStageForIssue, V as MERGED_VERIFICATION_REASON, _ as markWorkspaceStuck, d as getReviewStatusSync, k as init_pipeline, p as init_review_status, w as setReviewStatusSync } from "./review-status-yOGD2MuK.js";
+import { a as writeFeedbackFile, i as init_feedback_writer } from "./feedback-writer-C1gCLFmp.js";
+import { n as resolveIssueFeedbackTarget, r as surfaceIssueFeedbackNeedsYou, t as init_feedback_target } from "./feedback-target-D7GxdUYG.js";
+import { r as runQualityGates, t as DEFAULT_GATES } from "./validation-Dr6V4PXx.js";
+import { n as verificationArtifactPath, r as writeVerificationArtifact, t as readVerificationArtifact } from "./verification-artifact-k5Ftpg0c.js";
+import { n as getXBriefACStatusSync } from "./acceptance-criteria-CHtDkHEL.js";
+import { n as checkIncompletePlanItemsPromise } from "./done-preflight-D4ukUf-S.js";
 import { join } from "node:path";
 import { Effect } from "effect";
 import { basename as basename$1, dirname as dirname$1, join as join$1 } from "path";
@@ -54,6 +54,25 @@ function isProcessAlive(pid) {
 		return false;
 	}
 }
+/**
+* Kill an expired worker and its gate children. The worker is spawned
+* detached, so it leads its own process group — signal the group first so a
+* mid-gate `npm`/`bun` child dies with it, falling back to the bare pid.
+* Best-effort and async; callers never block on the outcome.
+*/
+async function killWorkerProcessGroup(pid) {
+	for (const signal of ["SIGTERM", "SIGKILL"]) {
+		try {
+			process.kill(-pid, signal);
+		} catch {
+			try {
+				process.kill(pid, signal);
+			} catch {}
+		}
+		if (!isProcessAlive(pid)) return;
+		await new Promise((resolve) => setTimeout(resolve, 1e3));
+	}
+}
 function readVerificationWorkerState(issueId) {
 	try {
 		const parsed = JSON.parse(readFileSync(statePath(issueId), "utf8"));
@@ -106,18 +125,26 @@ async function waitForResult(state) {
 			message: `Verification worker ${state.pid} exited before writing a result`
 		};
 		const deadline = verificationWorkerDeadline(readVerificationWorkerState(state.issueId) ?? state);
-		if (deadline !== null && Date.now() >= deadline) return {
-			outcome: "error",
-			message: `Verification worker ${state.pid} exceeded ${MAX_RUN_MS}ms after CPU admission`
-		};
+		if (deadline !== null && Date.now() >= deadline) {
+			killWorkerProcessGroup(state.pid);
+			return {
+				outcome: "error",
+				message: `Verification worker ${state.pid} exceeded ${MAX_RUN_MS}ms after CPU admission`
+			};
+		}
 		await new Promise((resolve) => setTimeout(resolve, POLL_MS));
 	}
 }
 async function runSupervisedVerification(issueId, workspacePath, workspaceInfo, logPrefix, options = {}) {
 	const existing = readVerificationWorkerState(issueId);
 	if (existing && existing.workspacePath === workspacePath && isProcessAlive(existing.pid) && !existsSync(existing.resultPath)) {
-		console.log(`[${logPrefix}] Joining live verification worker ${existing.pid} for ${issueId}`);
-		return waitForResult(existing);
+		const existingDeadline = verificationWorkerDeadline(existing);
+		if (existingDeadline === null || Date.now() < existingDeadline) {
+			console.log(`[${logPrefix}] Joining live verification worker ${existing.pid} for ${issueId}`);
+			return waitForResult(existing);
+		}
+		console.warn(`[${logPrefix}] Verification worker ${existing.pid} for ${issueId} is past its deadline — killing it and starting fresh`);
+		await killWorkerProcessGroup(existing.pid);
 	}
 	const dir = workerDir(issueId);
 	mkdirSync(dir, { recursive: true });
@@ -610,7 +637,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				verificationNotes: `Verification deferred: ${failedGate.error}. Workspace stack rebuild triggered; verification re-runs on the next cycle.`
 			});
 			try {
-				const { rebuildWorkspaceStack } = await import("./rebuild-stack-CCwKHZb6.js");
+				const { rebuildWorkspaceStack } = await import("./rebuild-stack-DrMyA_mA.js");
 				const rebuildResult = await Effect.runPromise(rebuildWorkspaceStack(issueId, { onProgress: (m) => console.log(`[${logPrefix}] ${issueId} stack rebuild: ${m}`) }));
 				if (!rebuildResult.success) console.warn(`[${logPrefix}] Stack rebuild for ${issueId} failed: ${rebuildResult.error}`);
 			} catch (err) {
@@ -631,9 +658,8 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 		if (failedGate) {
 			const newCycleCount = currentCycles + 1;
 			const failedCheck = failedGate.name;
-			const rawOutput = failedGate.output || failedGate.error || "(no output)";
-			const truncatedOutput = rawOutput.length > 3e3 ? rawOutput.slice(0, 3e3) + "\n...(truncated)" : rawOutput;
-			const summary = `Verification FAILED at ${failedCheck} (${failedGate.durationMs}ms):\n\n${truncatedOutput}`;
+			const fullOutputPath = verificationArtifactPath(workspacePath);
+			const summary = `Verification FAILED at ${failedCheck} (${failedGate.durationMs}ms).\n\nFull gate output: ${fullOutputPath}`;
 			setReviewStatusSync(issueId, {
 				reviewStatus: "pending",
 				verificationStatus: "failed",
@@ -643,7 +669,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 			});
 			const shouldEscalate = shouldEscalateVerificationFailure(currentStatus, failedCheck, newCycleCount);
 			if (shouldEscalate) await escalateVerificationStuck(issueId, failedCheck, newCycleCount, summary, logPrefix);
-			const feedbackBody = shouldEscalate ? `VERIFICATION STUCK for ${issueId} (attempt ${newCycleCount}/3):\n\nFailed check: ${failedCheck}\n\n${summary}\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId} (attempt ${newCycleCount}/3):\n\nFailed check: ${failedCheck}\n\n${summary}\n\n## REQUIRED: Fix the failing check, push, and request a new review\n\n1. Read the error output above carefully\n2. Fix the code causing the failure\n3. Run the failing check locally to verify it passes\n4. Commit every change\n5. Invoke the /rebase-and-submit skill for ${issueId} — this is an atomic task. Because verification already ran once (a PR exists), the skill will push your branch and run \`pan review request ${issueId} -m "Fixed ${failedCheck}"\` for you. NEVER curl \`/api/review/...\` or any dashboard endpoint — \`pan review request\` is the only supported re-entry point.\n\nThe command can run for several minutes. A yielded exec result or background-terminal notice means it is still running, not that it succeeded. Poll the same terminal until it exits, inspect the real exit code, then confirm \`pan show ${issueId}\` or \`pan review pending\` shows the issue re-entered review. Do NOT stop between steps or after pushing; stop only after exit code 0 and the observed pipeline state change.`;
+			const feedbackBody = shouldEscalate ? `VERIFICATION STUCK for ${issueId} (attempt ${newCycleCount}/3):\n\nFailed check: ${failedCheck}\n\n${summary}\n\n${buildFinalFailureInstructions(issueId)}` : `VERIFICATION FAILED for ${issueId} (attempt ${newCycleCount}/3):\n\nFailed check: ${failedCheck}\n\n${summary}\n\n## REQUIRED: Fix the failing check, push, and request a new review\n\n1. Read the complete gate output at \`${fullOutputPath}\` carefully\n2. Fix the code causing the failure\n3. Run the failing check locally to verify it passes\n4. Commit every change\n5. Invoke the /rebase-and-submit skill for ${issueId} — this is an atomic task. Because verification already ran once (a PR exists), the skill will push your branch and run \`pan review request ${issueId} -m "Fixed ${failedCheck}"\` for you. NEVER curl \`/api/review/...\` or any dashboard endpoint — \`pan review request\` is the only supported re-entry point.\n\nThe command can run for several minutes. A yielded exec result or background-terminal notice means it is still running, not that it succeeded. Poll the same terminal until it exits, inspect the real exit code, then confirm \`pan show ${issueId}\` or \`pan review pending\` shows the issue re-entered review. Do NOT stop between steps or after pushing; stop only after exit code 0 and the observed pipeline state change.`;
 			try {
 				const fileResult = await Effect.runPromise(writeFeedbackFile({
 					issueId,
@@ -806,7 +832,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 		if (changesetHasContent === void 0) console.warn(`[${logPrefix}] empty-changeset guard skipped (one or more repo diffs failed)`);
 		let lastVerifiedCommit;
 		try {
-			const { snapshotWorkspaceHeadsPromise } = await import("./git-utils-Y0zG25ez.js");
+			const { snapshotWorkspaceHeadsPromise } = await import("./git-utils-CsKV0Dis.js");
 			lastVerifiedCommit = await snapshotWorkspaceHeadsPromise(issueId, workspacePath);
 		} catch {}
 		const prePassMergedOutcome = skipMergedVerification(issueId, logPrefix);
@@ -823,7 +849,7 @@ async function runVerificationForIssuePromise(issueId, workspacePath, workspaceI
 				const repo = findProjectByPathSync(workspacePath)?.github_repo;
 				if (!repo || !repo.includes("/")) return;
 				const [owner, name] = repo.split("/");
-				const { postOverdeckTestsStatus } = await import("./github-app-C33lDk9Z.js");
+				const { postOverdeckTestsStatus } = await import("./github-app-Oi5hdn1n.js");
 				await postOverdeckTestsStatus(workspacePath, owner, name, "success", "Verification gate passed");
 			} catch (err) {
 				console.warn(`[${logPrefix}] Failed to post overdeck/tests status: ${err.message}`);
@@ -861,4 +887,4 @@ function runVerificationForIssueInProcess(issueId, workspacePath, workspaceInfo,
 //#endregion
 export { workspaceChangesetHasContent as a, runVerificationForIssueInProcess as i, reconcileInterruptedVerifications as n, runVerificationForIssue as r, changesetHasNoContent as t };
 
-//# sourceMappingURL=verification-runner-DwP2fUEF.js.map
+//# sourceMappingURL=verification-runner-Dl13mmsI.js.map

package/server/{vtt-parser-luerJpYT.js → vtt-parser-BSnAB-Og.js}

@@ -107,4 +107,4 @@ function consolidateSpeakerCues(cues) {
 //#endregion
 export { vttToMarkdown };
 
-//# sourceMappingURL=vtt-parser-luerJpYT.js.map
+//# sourceMappingURL=vtt-parser-BSnAB-Og.js.map

package/server/work-agent-prompt-CJJ4tXci.js

@@ -0,0 +1,3 @@
+import { a as init_work_agent_prompt, c as writeStoryFeatureContext, i as getTrackerContext, n as buildWorkAgentPrompt, o as readFeatureContext, r as extractStitchDesigns, s as readPlanningContext, t as buildPolyrepoContext } from "./work-agent-prompt-CioeOuM4.js";
+init_work_agent_prompt();
+export { buildPolyrepoContext, buildWorkAgentPrompt, extractStitchDesigns, getTrackerContext, readFeatureContext, readPlanningContext, writeStoryFeatureContext };