@overdeck/desktop 0.49.1 → 0.50.0

package/server/{deacon-merge-BOGFEV8_.js → parked-residue-8WbU0y1z.js}

@@ -1,28 +1,34 @@
-import { Fi as init_paths, On as resolveProjectFromIssueSync, fn as init_projects, si as AGENTS_DIR } from "./config-yaml-BwOEANMr.js";
-import { a as emitActivityEntrySync, c as init_activity_logger } from "./activity-logger-BAVLrkR7.js";
-import { L as sendKeys, S as init_tmux, V as sessionExistsSync } from "./tmux-BqXzRuaH.js";
-import { G as init_agents, H as getAgentRuntimeStateSync, m as getAgentStateSync, un as listRunningAgentsSync } from "./agent-state-Bb3UUxQm.js";
-import { i as loadCloisterConfig, r as init_config } from "./config-DC75T4Mr.js";
-import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-xnVJVrrO.js";
-import { _ as markMerged, c as init_merge_sync, f as listActiveAutoMerges, m as listProblemAutoMerges, t as cancelPending } from "./merge-sync-Ct0-cxMX.js";
-import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-eiE2nC6C.js";
-import { U as reviewGatesPassedSync, Y as init_review_status_record_sync, Z as readJournalStatusSync, h as loadReviewStatuses, p as init_review_status, w as setReviewStatusSync } from "./review-status-DBnR5t4z.js";
-import { M as withConcurrencyLimit, j as init_concurrency } from "./github-app-4UX8VIr8.js";
-import { o as isAgentIdleForNudge } from "./stuck-remediation-Di5JYkoo.js";
-import { n as sweepAutoCloseOutCache, t as getAutoCloseOutCanonicalState } from "./deacon-canonical-state-DFYymrDw.js";
-import { n as getForgeAdapter } from "./forge-DYX9sKzG.js";
-import { i as observeForgeMergeState } from "./merge-completeness-CP347umA.js";
+import { Ht as init_state_read_home, On as resolveProjectFromIssueSync, Wt as resolveStateReadHomeSync, Y as init_record, fn as init_projects, j as RECORD_DIRNAME, ui as AGENTS_DIR, zi as init_paths } from "./config-yaml-D60AnTIu.js";
+import { l as init_activity_logger, o as emitActivityEntrySync } from "./activity-logger-SlTXYCVf.js";
+import { B as sendKeys, C as init_tmux, W as sessionExistsSync } from "./tmux-wnT_hg-s.js";
+import { W as getAgentRuntimeStateSync, _ as init_agent_state, a as clearAgentOperatorGatesForIssuesSync, g as getAgentStateSync, q as init_agents, yn as listRunningAgentsSync } from "./agent-state-FABw8neJ.js";
+import { i as loadCloisterConfig, r as init_config } from "./config-_qaa1UXH.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-Dbg_pVZg.js";
+import { _ as markMerged, c as init_merge_sync, f as listActiveAutoMerges, m as listProblemAutoMerges, t as cancelPending } from "./merge-sync-YLvOPAry.js";
+import { i as init_merge_set, r as getMergeSetSync } from "./merge-set-CyW-xSn4.js";
+import { U as reviewGatesPassedSync, Y as init_review_status_record_sync, Z as readJournalStatusSync, h as loadReviewStatuses, p as init_review_status, w as setReviewStatusSync } from "./review-status-DpniqzPT.js";
+import { M as withConcurrencyLimit, j as init_concurrency } from "./github-app-BlMSzSTw.js";
+import { r as isAgentIdleForNudge } from "./agent-idle-D-UQ7gDv.js";
+import { n as sweepAutoCloseOutCache, t as getAutoCloseOutCanonicalState } from "./deacon-canonical-state-DkdkQS5p.js";
+import { n as getForgeAdapter } from "./forge-CHADjOFs.js";
+import { i as observeForgeMergeState } from "./merge-completeness-BOtBUwTU.js";
+import { r as init_recovery_trip, t as acknowledgeAllOpenRecoveryTrips } from "./recovery-trip-CpfW6LCJ.js";
+import { join } from "node:path";
 import { Effect } from "effect";
 import { existsSync, readdirSync } from "fs";
-import { join } from "path";
+import { join as join$1 } from "path";
+import { promises as promises$1 } from "node:fs";
 import { exec, execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { promisify as promisify$1 } from "util";
 //#region ../../lib/cloister/deacon-stuck-merging.ts
 init_paths();
+init_state_read_home();
+init_record();
 init_activity_logger();
 init_tmux();
 init_config();
+init_agent_state();
 init_merge_sync();
 init_review_status_record_sync();
 init_concurrency();
@@ -70,7 +76,7 @@ function isStuckMergingState(status, now) {
 }
 async function readSpecStatus(projectPath, issueId) {
 	try {
-		const { findSpecByIssue } = await import("./specs-BqkrRnU9.js");
+		const { findSpecByIssue } = await import("./specs-oRGyfz6C.js");
 		return (await Effect.runPromise(findSpecByIssue(projectPath, issueId)))?.status;
 	} catch {
 		return;
@@ -152,7 +158,7 @@ async function reconcileStuckMergingStates() {
 		reviewGatesPassed: reviewGatesPassedSync,
 		setReviewStatus: setReviewStatusSync,
 		enqueuePostMerge: async (issueId, projectPath, branch) => {
-			const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-KK1RTKRE.js");
+			const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-OQoK8Ckg.js");
 			return enqueuePostMergeLifecycle(issueId, projectPath, branch);
 		},
 		warn: (message) => console.warn(message)
@@ -377,7 +383,7 @@ async function reconcileStaleMergeStatus() {
 		const statuses = loadReviewStatuses();
 		for (const [issueId, status] of Object.entries(statuses)) {
 			const postMergeIncomplete = status.mergeStatus === "merged" && status.mergeStep === "post-merge-cleanup";
-			if (status.mergeStatus === "merged" && !postMergeIncomplete) continue;
+			if (status.retiredAt || status.mergeStatus === "merged" && !postMergeIncomplete) continue;
 			if (isStuckMergingState(status, Date.now())) continue;
 			if (!postMergeIncomplete && staleMergeReconciled.has(issueId)) continue;
 			const project = resolveProjectFromIssueSync(issueId);
@@ -392,7 +398,7 @@ async function reconcileStaleMergeStatus() {
 			].includes(status.mergeStatus ?? "") || ["merging", "failed"].includes(mergeSet?.status ?? "");
 			let specStatus;
 			try {
-				const { findSpecByIssue } = await import("./specs-BqkrRnU9.js");
+				const { findSpecByIssue } = await import("./specs-oRGyfz6C.js");
 				const spec = await Effect.runPromise(findSpecByIssue(project.projectPath, issueId));
 				specStatus = spec?.status;
 				if (spec && (spec.status === "completed" || spec.status === "cancelled")) {
@@ -402,7 +408,7 @@ async function reconcileStaleMergeStatus() {
 			} catch {}
 			const branch = `feature/${issueId.toLowerCase()}`;
 			if (postMergeIncomplete) {
-				const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-KK1RTKRE.js");
+				const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-OQoK8Ckg.js");
 				const action = enqueuePostMergeLifecycle(issueId, project.projectPath, branch);
 				if (action) actions.push(action);
 				continue;
@@ -414,7 +420,7 @@ async function reconcileStaleMergeStatus() {
 			} catch {}
 			if (!isMerged) isMerged = (await observeGitHubBranchMerge(issueId, branch, project.projectPath)).merged;
 			if (shouldObserveForge && mergeRelevant) try {
-				const observation = await (await import("./merge-completeness-7ajHAIR-.js")).observeForgeMergeState(issueId);
+				const observation = await (await import("./merge-completeness-CoLJxfUY.js")).observeForgeMergeState(issueId);
 				const blocker = observation.repos.find((repo) => repo.state === "unverifiable");
 				if (blocker) {
 					console.warn(`[deacon] ${issueId}: forge merge state is unverifiable — ${blocker.reason}`);
@@ -441,7 +447,7 @@ async function reconcileStaleMergeStatus() {
 				const msg = `Reconciled stale mergeStatus for ${issueId} — branch ${branch} is merged to main`;
 				actions.push(msg);
 				console.log(`[deacon] ${msg}`);
-				const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-KK1RTKRE.js");
+				const { enqueuePostMergeLifecycle } = await import("./post-merge-lifecycle-worker-OQoK8Ckg.js");
 				const action = enqueuePostMergeLifecycle(issueId, project.projectPath, branch);
 				if (action) actions.push(action);
 			}
@@ -464,11 +470,11 @@ const falseMergedReset = /* @__PURE__ */ new Set();
 async function reconcileFalseMerged() {
 	const actions = [];
 	try {
-		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-C33lDk9Z.js");
+		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-BWziYCf3.js");
 		if (!isGitHubAppConfigured()) return actions;
 		const statuses = loadReviewStatuses();
 		for (const [issueId, status] of Object.entries(statuses)) {
-			if (status.mergeStatus !== "merged") continue;
+			if (status.retiredAt || status.mergeStatus !== "merged") continue;
 			if (!status.prUrl) continue;
 			if (falseMergedReset.has(issueId)) continue;
 			const prRef = status.prUrl.match(/github\.com\/([^/]+)\/([^/]+)\/pull\/(\d+)/);
@@ -509,12 +515,12 @@ const CLOSED_PR_RECONCILE_COOLDOWN_MS = 600 * 1e3;
 async function reconcileClosedPrReadyForMerge() {
 	const actions = [];
 	try {
-		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-C33lDk9Z.js");
+		const { getPullRequestState, isGitHubAppConfigured } = await import("./github-app-BWziYCf3.js");
 		if (!isGitHubAppConfigured()) return actions;
 		const statuses = loadReviewStatuses();
 		const now = Date.now();
 		for (const [issueId, status] of Object.entries(statuses)) {
-			if (!status.readyForMerge) continue;
+			if (status.retiredAt || !status.readyForMerge) continue;
 			if (!status.prUrl) continue;
 			const cooledUntil = closedPrReadyReconcileCooldowns.get(issueId);
 			if (cooledUntil && now < cooledUntil) continue;
@@ -538,7 +544,7 @@ async function reconcileClosedPrReadyForMerge() {
 				} else {
 					setReviewStatusSync(issueId, {
 						readyForMerge: false,
-						mergeStatus: "failed",
+						retiredAt: new Date(now).toISOString(),
 						mergeNotes: `PR #${prNumber} was closed without merging — reopen the PR or reset review state to re-queue this issue`
 					});
 					const msg = `Reset readyForMerge for ${issueId} — PR #${prNumber} is ${prState.state} (not OPEN)`;
@@ -578,23 +584,34 @@ const STALE_MERGE_BLOCKER_COOLDOWN_MS = 120 * 1e3;
 * cooldown bounds the git-probe cost; resolveConflictGate also caches its
 * mergeability probe.
 */
-async function reconcileStaleMergeBlockers() {
+async function reconcileStaleMergeBlockers(gatherEligibility = async (ids) => (await import("./merge-eligibility-C4rTS97F.js")).gatherMergeEligibility(ids), workspaceExists = existsSync, resolveWorkspace = (issueId) => {
+	const resolved = resolveProjectFromIssueSync(issueId);
+	return resolved ? join$1(resolved.projectPath, "workspaces", `feature-${issueId.toLowerCase()}`) : null;
+}) {
 	const actions = [];
 	try {
-		const { resolveConflictGate, buildRealConflictGateDeps } = await import("./conflict-gate-DlpWCMd7.js");
+		const { resolveConflictGate, buildRealConflictGateDeps } = await import("./conflict-gate-0dD1kxjN.js");
 		const statuses = loadReviewStatuses();
 		const now = Date.now();
 		const deps = buildRealConflictGateDeps();
-		for (const [issueId, status] of Object.entries(statuses)) {
-			if (status.mergeStatus === "merged") continue;
-			if (!(status.blockerReasons ?? []).some((b) => b.type === "merge_conflict" || b.type === "not_mergeable")) continue;
+		const candidates = Object.entries(statuses).filter(([, status]) => !status.retiredAt && status.mergeStatus !== "merged" && (status.blockerReasons ?? []).some((b) => b.type === "merge_conflict" || b.type === "not_mergeable"));
+		const memberships = await gatherEligibility(candidates.map(([issueId]) => issueId));
+		for (const [issueId] of candidates) {
 			const cooledUntil = staleMergeBlockerCooldowns.get(issueId);
 			if (cooledUntil && now < cooledUntil) continue;
 			staleMergeBlockerCooldowns.set(issueId, now + STALE_MERGE_BLOCKER_COOLDOWN_MS);
-			const resolved = resolveProjectFromIssueSync(issueId);
-			if (!resolved) continue;
-			const workspacePath = join(resolved.projectPath, "workspaces", `feature-${issueId.toLowerCase()}`);
-			if (!existsSync(workspacePath)) continue;
+			const membership = memberships.get(issueId.toUpperCase());
+			if (!membership || membership.bucket !== "in_flight") {
+				if (membership) setReviewStatusSync(issueId, {
+					readyForMerge: false,
+					retiredAt: new Date(now).toISOString()
+				});
+				console.log(`[deacon] skipping ${issueId} — pipeline membership is ${membership?.bucket ?? "unavailable"}, not merge-eligible`);
+				continue;
+			}
+			const workspacePath = resolveWorkspace(issueId);
+			if (!workspacePath) continue;
+			if (!workspaceExists(workspacePath)) continue;
 			try {
 				if ((await resolveConflictGate(issueId, workspacePath, "main", deps)).clearedStaleBlocker) {
 					const msg = `Cleared stale merge blocker for ${issueId} — branch is mergeable again; readyForMerge will recompute`;
@@ -613,31 +630,24 @@ async function reconcileStaleMergeBlockers() {
 /**
 * Reconciler (PAN-2198): periodic twin of the boot-only fixStuckReadyForMerge,
 * for the NO-BLOCKER strand of "stuck after review".
-*
-* readyForMerge is re-derived on every setReviewStatusSync write. When the last
-* write left it false and there is NO merge-blocker, nothing re-derives it until
-* the next write — so a PR whose review+test+verify all passed but whose
-* readyForMerge was left false (e.g. a verdict that landed via a write path that
-* didn't recompute, or a gate that was transiently non-final) converges ONLY on
-* server restart (PAN-1758: "readyForMerge only flips via the startup repair
-* sweep"). This patrol re-derives it on the 60s deacon tick instead.
-*
-* Blocker strands are deliberately excluded — those are owned by
-* reconcileStaleMergeBlockers, and excluding them also avoids fighting the
-* setReviewStatus deriver's hasBlockers override (which would flip readyForMerge
-* straight back to false). Loop-safe: it writes ONLY readyForMerge (no
-* review/test status transition, so no review/test re-dispatch events fire), and
-* is idempotent — once flipped true, the readyForMerge!==false guard excludes the
-* issue, so steady state is zero writes. Flipping readyForMerge=true only makes
-* the issue merge-ELIGIBLE; the merge train / MERGE button remains the trigger.
+* Blocker strands remain owned by reconcileStaleMergeBlockers. Membership
+* prevents restoration without an open PR; successful restoration is idempotent.
 */
-function reconcileStuckReadyForMerge() {
+async function reconcileStuckReadyForMerge(gatherEligibility = async (ids) => (await import("./merge-eligibility-C4rTS97F.js")).gatherMergeEligibility(ids)) {
 	const actions = [];
 	try {
-		for (const [issueId, status] of Object.entries(loadReviewStatuses())) {
-			if (status.readyForMerge !== false) continue;
-			if ((status.blockerReasons?.length ?? 0) > 0) continue;
-			if (!reviewGatesPassedSync(status)) continue;
+		const candidates = Object.entries(loadReviewStatuses()).filter(([, status]) => !status.retiredAt && status.readyForMerge === false && (status.blockerReasons?.length ?? 0) === 0 && reviewGatesPassedSync(status));
+		const memberships = await gatherEligibility(candidates.map(([issueId]) => issueId));
+		for (const [issueId] of candidates) {
+			const membership = memberships.get(issueId.toUpperCase());
+			if (!membership || membership.bucket !== "in_flight") {
+				if (membership) setReviewStatusSync(issueId, {
+					readyForMerge: false,
+					retiredAt: (/* @__PURE__ */ new Date()).toISOString()
+				});
+				console.log(`[deacon] skipping ${issueId} — pipeline membership is ${membership?.bucket ?? "unavailable"}, not merge-eligible`);
+				continue;
+			}
 			setReviewStatusSync(issueId, { readyForMerge: true });
 			const msg = `Restored readyForMerge for ${issueId} — review+test+verify passed, no blocker (was stuck false)`;
 			actions.push(msg);
@@ -659,7 +669,7 @@ async function reconcileMergedButReviewing() {
 			null
 		]);
 		for (const [issueId, status] of Object.entries(statuses)) {
-			if (status.mergeStatus !== "merged") continue;
+			if (status.retiredAt || status.mergeStatus !== "merged") continue;
 			const reviewNonTerminal = nonTerminal.has(status.reviewStatus);
 			const testNonTerminal = nonTerminal.has(status.testStatus);
 			if (!reviewNonTerminal && !testNonTerminal) continue;
@@ -724,7 +734,7 @@ async function checkFailedMergeRetry() {
 					if (ciEntry.count === 5) {
 						console.log(`[deacon] CI check failure for ${issueId} — retries exhausted, notifying work agent`);
 						const ciNotes = status.mergeNotes || "CI checks are failing on the PR";
-						const { writeFeedbackFile } = await import("./feedback-writer-DfuVjvH0.js");
+						const { writeFeedbackFile } = await import("./feedback-writer-BzN4qvaP.js");
 						const ciFileResult = await Effect.runPromise(writeFeedbackFile({
 							issueId,
 							specialist: "merge-agent",
@@ -756,7 +766,7 @@ async function checkFailedMergeRetry() {
 				ciRetryMap.set(issueId, ciEntry);
 				console.log(`[deacon] CI check failure for ${issueId} — notifying agent to re-submit (attempt ${ciEntry.count}/5)`);
 				const ciNotes = status.mergeNotes || "CI checks are failing on the PR";
-				const { writeFeedbackFile } = await import("./feedback-writer-DfuVjvH0.js");
+				const { writeFeedbackFile } = await import("./feedback-writer-BzN4qvaP.js");
 				const ciFileResult2 = await Effect.runPromise(writeFeedbackFile({
 					issueId,
 					specialist: "merge-agent",
@@ -784,7 +794,7 @@ async function checkFailedMergeRetry() {
 				const lastNudge = timeoutNudgeCooldowns.get(issueIdForFb);
 				if (!lastNudge || now - lastNudge >= TIMEOUT_NUDGE_COOLDOWN_MS) {
 					const timeoutNotes = status.mergeNotes;
-					const { writeFeedbackFile } = await import("./feedback-writer-DfuVjvH0.js");
+					const { writeFeedbackFile } = await import("./feedback-writer-BzN4qvaP.js");
 					await Effect.runPromise(writeFeedbackFile({
 						issueId: issueIdForFb,
 						specialist: "merge-agent",
@@ -889,7 +899,7 @@ async function autoCloseOut(now = /* @__PURE__ */ new Date()) {
 				} } : {}
 			};
 			try {
-				const { closeOut } = await import("./workflows-Cf4LAnhg.js");
+				const { closeOut } = await import("./workflows-BtHRlFIm.js");
 				const result = await Effect.runPromise(closeOut(ctx));
 				if (!result.success) {
 					const failed = result.steps.find((step) => !step.success && !step.skipped);
@@ -936,8 +946,8 @@ async function checkFirstCompletionAgents() {
 			const agentId = agent.id;
 			if (!agentId || !agentId.startsWith("agent-") || !agent.tmuxActive) continue;
 			if (agentId.startsWith("specialist-")) continue;
-			const completedFile = join(AGENTS_DIR, agent.id, "completed");
-			const processedMarker = join(AGENTS_DIR, agent.id, "completed.processed");
+			const completedFile = join$1(AGENTS_DIR, agent.id, "completed");
+			const processedMarker = join$1(AGENTS_DIR, agent.id, "completed.processed");
 			if (existsSync(completedFile) || existsSync(processedMarker)) continue;
 			if (!isAgentIdleForNudge(agent.id, FIRST_COMPLETION_IDLE_MS)) continue;
 			const runtimeState = getAgentRuntimeStateSync(agent.id);
@@ -958,7 +968,7 @@ async function checkFirstCompletionAgents() {
 			} catch {}
 			const agentStateForGate = getAgentStateSync(agent.id);
 			if (agentStateForGate?.workspace) {
-				const feedbackDir = join(agentStateForGate.workspace, ".pan", "feedback");
+				const feedbackDir = join$1(agentStateForGate.workspace, ".pan", "feedback");
 				if (existsSync(feedbackDir)) try {
 					const feedbackFiles = readdirSync(feedbackDir);
 					if (feedbackFiles.length > 0) {
@@ -981,7 +991,7 @@ async function checkFirstCompletionAgents() {
 				try {
 					const subdirs = readdirSync(agentState.workspace, { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith("."));
 					for (const sub of subdirs) try {
-						const { stdout: subLog } = await execAsync("git log --oneline -3 2>/dev/null", { cwd: join(agentState.workspace, sub.name) });
+						const { stdout: subLog } = await execAsync("git log --oneline -3 2>/dev/null", { cwd: join$1(agentState.workspace, sub.name) });
 						if (subLog.trim().length > 0) {
 							hasCommits = true;
 							break;
@@ -1009,6 +1019,115 @@ async function checkFirstCompletionAgents() {
 	return actions;
 }
 //#endregion
-export { ciRetryMap as a, reconcileMergedButReviewing as c, reconcileStuckReadyForMerge as d, reconcileAutoMergeRows as f, checkReadyForMergeStuck as i, reconcileStaleMergeBlockers as l, checkFailedMergeRetry as n, reconcileClosedPrReadyForMerge as o, reconcileStuckMergingStates as p, checkFirstCompletionAgents as r, reconcileFalseMerged as s, autoCloseOut as t, reconcileStaleMergeStatus as u };
+//#region ../../lib/pan-dir/record-list.ts
+/** Canonical bounded enumeration facet of the issue-record read door. */
+async function readIssueRecordDirectory(recordsDir, records) {
+	const entries = await promises$1.readdir(recordsDir, { withFileTypes: true }).catch(() => []);
+	await Promise.all(entries.filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map(async (entry) => {
+		try {
+			const record = JSON.parse(await promises$1.readFile(join(recordsDir, entry.name), "utf-8"));
+			if (record.issueId) records.set(record.issueId.toUpperCase(), record);
+		} catch (error) {
+			console.warn(`[record] Preserving unreadable issue record ${join(recordsDir, entry.name)} during enumeration: ${error instanceof Error ? error.message : String(error)}`);
+		}
+	}));
+}
+async function listIssueRecords(project) {
+	const stateHome = resolveStateReadHomeSync(project);
+	const records = /* @__PURE__ */ new Map();
+	if (stateHome.migrated) {
+		await readIssueRecordDirectory(join(stateHome.root, RECORD_DIRNAME), records);
+		return [...records.values()];
+	}
+	await readIssueRecordDirectory(join(project.path, ".pan", RECORD_DIRNAME), records);
+	const workspacesDir = join(project.path, "workspaces");
+	const workspaces = await promises$1.readdir(workspacesDir, { withFileTypes: true }).catch(() => []);
+	await Promise.all(workspaces.filter((entry) => entry.isDirectory()).map((entry) => readIssueRecordDirectory(join(workspacesDir, entry.name, ".pan", RECORD_DIRNAME), records)));
+	return [...records.values()];
+}
+//#endregion
+//#region ../../lib/cloister/parked-residue.ts
+init_recovery_trip();
+/**
+* Record-level terminality: closedOut is the durable close-out marker, and a
+* mergeStatus of 'merged' with no reopenedAt means the issue merged and was
+* never reopened afterward (reopen drops the stale mergeStatus — see
+* clearRecordPipelineClosedOut in record-update.ts). Shared with the parked
+* resolver's record-first terminality check (PAN-3727) so both surfaces agree
+* by construction on what counts as terminal.
+*/
+function isRecordPipelineTerminal(record) {
+	if (!record.pipeline) return false;
+	return record.pipeline.closedOut === true || record.pipeline.mergeStatus === "merged" && !record.pipeline.reopenedAt;
+}
+function defaultDeps() {
+	return {
+		listRecords: listIssueRecords,
+		ackTrips: acknowledgeAllOpenRecoveryTrips,
+		clearGatesForIssues: clearAgentOperatorGatesForIssuesSync
+	};
+}
+/**
+* Sweep every project's terminal-issue records for parked-population residue
+* left over from before close-out started acknowledging it (PAN-3727): open
+* recovery trips and operator-gate flags (stoppedByUser/paused/troubled) on a
+* terminal issue's stopped agent rows. Runs on the state-plane patrol cadence
+* so the backlog existing before this fix self-heals without a manual sweep,
+* and any future leak path is caught on the next cycle.
+*
+* Three passes, each isolating its own failure mode (review findings,
+* PAN-3727):
+*   1. Gather every terminal record across every project. A project whose
+*      record listing fails is warned and skipped — it must never abort the
+*      sweep for the remaining projects.
+*   2. Clear operator-gate residue for every terminal issue in ONE batched
+*      agent-table scan (not one scan per issue — cost scales with the agent
+*      table once per patrol run, not with the number of terminal issues).
+*   3. Acknowledge open recovery trips per issue (the record-write door is
+*      inherently per-record). A trip-ack failure for one issue is isolated
+*      to that issue and never suppresses the gate clearing already done in
+*      pass 2 — the two cleanup operations are independent residue.
+*/
+async function reconcileTerminalIssueResidue(projects, deps = defaultDeps()) {
+	const actions = [];
+	const terminalIssueIds = [];
+	for (const { config } of projects) {
+		if (!config.path) continue;
+		let records;
+		try {
+			records = await deps.listRecords(config);
+		} catch (error) {
+			actions.push({
+				message: `Failed to list records for ${config.name ?? config.path}: ${error instanceof Error ? error.message : String(error)}`,
+				level: "warn"
+			});
+			continue;
+		}
+		for (const record of records) if (isRecordPipelineTerminal(record)) terminalIssueIds.push(record.issueId.toUpperCase());
+	}
+	if (terminalIssueIds.length === 0) return actions;
+	const gatesByIssue = deps.clearGatesForIssues(new Set(terminalIssueIds));
+	for (const issueId of terminalIssueIds) {
+		const gates = gatesByIssue.get(issueId) ?? [];
+		let trips = 0;
+		try {
+			trips = await deps.ackTrips(issueId);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			actions.push({
+				message: `Failed to acknowledge open trips for ${issueId}: ${message}` + (gates.length > 0 ? `; cleared operator gates on ${gates.length} agent row(s)` : ""),
+				level: "warn"
+			});
+			continue;
+		}
+		if (trips > 0 || gates.length > 0) actions.push({
+			message: `Cleaned parked residue for ${issueId}: acked ${trips} open trip(s), cleared operator gates on ${gates.length} agent row(s)`,
+			level: "action"
+		});
+	}
+	return actions;
+}
+//#endregion
+export { checkFailedMergeRetry as a, ciRetryMap as c, reconcileMergedButReviewing as d, reconcileStaleMergeBlockers as f, reconcileStuckMergingStates as g, reconcileAutoMergeRows as h, autoCloseOut as i, reconcileClosedPrReadyForMerge as l, reconcileStuckReadyForMerge as m, reconcileTerminalIssueResidue as n, checkFirstCompletionAgents as o, reconcileStaleMergeStatus as p, listIssueRecords as r, checkReadyForMergeStuck as s, isRecordPipelineTerminal as t, reconcileFalseMerged as u };
 
-//# sourceMappingURL=deacon-merge-BOGFEV8_.js.map
+//# sourceMappingURL=parked-residue-8WbU0y1z.js.map

package/server/{paths-CRLnDgcI.js → paths-rETQhTF2.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { Fi as init_paths$1, Pi as getOverdeckHome } from "./config-yaml-BwOEANMr.js";
+import { Ri as getOverdeckHome, zi as init_paths$1 } from "./config-yaml-D60AnTIu.js";
 import { dirname, isAbsolute, join, relative, resolve } from "path";
 import { mkdir } from "fs/promises";
 //#region ../../lib/memory/paths.ts
@@ -62,4 +62,4 @@ var init_paths = __esmMin((() => {
 //#endregion
 export { resolveArchiveDir as a, resolveMemoryRoot as c, resolveRagRunsFile as d, resolveStatusFile as f, init_paths as i, resolveObservationsFile as l, resolveWorkspaceMemoryRoot as m, ensureDir as n, resolveFtsDbPath as o, resolveSummariesDir as p, ensureParentDir as r, resolveMemoryBase as s, assertMemorySafeSegment as t, resolvePendingDir as u };
 
-//# sourceMappingURL=paths-CRLnDgcI.js.map
+//# sourceMappingURL=paths-rETQhTF2.js.map

package/server/{pending-lifecycle-claim-CYgMiDAP.js → pending-lifecycle-claim-yAwDuGS4.js}

@@ -1,4 +1,4 @@
-import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-Ct912fv_.js";
+import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-Jq0BXmn3.js";
 import { basename, dirname, join } from "node:path";
 import { readFile, readdir, rename, unlink } from "node:fs/promises";
 import { randomUUID } from "node:crypto";
@@ -107,4 +107,4 @@ async function settlePendingLifecycleClaim(claim, issueId, succeeded) {
 //#endregion
 export { settlePendingLifecycleClaim as n, claimPendingLifecycleFile as t };
 
-//# sourceMappingURL=pending-lifecycle-claim-CYgMiDAP.js.map
+//# sourceMappingURL=pending-lifecycle-claim-yAwDuGS4.js.map

package/server/{pickup-BjJsSX12.js → pickup-Dle6k9Xt.js}

@@ -187,4 +187,4 @@ var init_pickup = __esmMin((() => {
 //#endregion
 export { normalizeGate as _, PARKED_LABEL as a, VETOED_LABEL as c, computeEpicGroups as d, computeLanes as f, isAutoPickable as g, init_pickup as h, OBJECTION_LABEL as i, classifyIssue as l, computeWaves as m, EPIC_LABEL as n, READY_LABEL as o, computeStats as p, LEGACY_PARKED_LABELS as r, RELEASED_LABEL as s, BLOCKS_MAIN_LABEL as t, computeCohort as u, selectNeedsPlanning as v };
 
-//# sourceMappingURL=pickup-BjJsSX12.js.map
+//# sourceMappingURL=pickup-Dle6k9Xt.js.map

package/server/{pipeline-agent-reader-BLc43dVJ.js → pipeline-agent-reader-CeWhQzXC.js}

@@ -1,6 +1,6 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-KTp9KV9u.js";
-import { a as getWorkspaceForIssue, o as init_resolver } from "./resolver-CuAULbLs.js";
+import { d as getOverdeckDatabaseSync, f as init_infra } from "./infra-CJRi_5Wu.js";
+import { a as getWorkspaceForIssue, o as init_resolver } from "./resolver-C2QKOf09.js";
 import { a as registerFeedbackAgentStateReader, i as registerActiveReviewArtifactContextReader, t as init_agent_state_source } from "./agent-state-source-69g8dqMg.js";
 //#region ../../lib/overdeck/agent-state-sync.ts
 function isoFromMillis(value) {
@@ -125,11 +125,11 @@ function stateToOverdeckParamsForDb(state, updatedAt) {
 	];
 }
 function getOverdeckAgentStateSync(agentId) {
-	const row = getOverdeckDatabaseSync().prepare(`${SELECT_AGENT_SQL} WHERE id = ?`).get(agentId);
+	const row = getOverdeckDatabaseSync(void 0, { readOnly: true }).prepare(`${SELECT_AGENT_SQL} WHERE id = ?`).get(agentId);
 	return row ? overdeckRowToAgentState(row) : null;
 }
 function listOverdeckAgentStatesSync() {
-	return getOverdeckDatabaseSync().prepare(SELECT_AGENT_SQL).all().map(overdeckRowToAgentState);
+	return getOverdeckDatabaseSync(void 0, { readOnly: true }).prepare(SELECT_AGENT_SQL).all().map(overdeckRowToAgentState);
 }
 function saveOverdeckAgentStateSync(state) {
 	const db = getOverdeckDatabaseSync();
@@ -241,4 +241,4 @@ var init_pipeline_agent_reader = __esmMin((() => {
 //#endregion
 export { readVerdictPreservationStatus as a, registerWorkStartVerdictAdapter as c, getOverdeckAgentStateSync as d, init_agent_state_sync as f, stateToOverdeckParamsForDb as h, init_work_start_verdicts as i, resetWorkStartPipelineVerdicts as l, saveOverdeckAgentStateSync as m, readPipelineTelemetryAgentState as n, refreshWorkStartReviewedAnchor as o, listOverdeckAgentStatesSync as p, registerPipelineTelemetryAgentReader as r, registerVerdictPreservationStatusReader as s, init_pipeline_agent_reader as t, AGENT_COLUMNS_FOR_DB as u };
 
-//# sourceMappingURL=pipeline-agent-reader-BLc43dVJ.js.map
+//# sourceMappingURL=pipeline-agent-reader-CeWhQzXC.js.map

package/server/{pipeline-membership-BHZp_ShY.js → pipeline-membership-BV4hdkHm.js}

@@ -57,4 +57,4 @@ var init_pipeline_membership = __esmMin((() => {
 //#endregion
 export { init_pipeline_membership as n, resolvePipelineMembership as r, PLANNED_BACKLOG_SPEC_ONLY_REASON as t };
 
-//# sourceMappingURL=pipeline-membership-BHZp_ShY.js.map
+//# sourceMappingURL=pipeline-membership-BV4hdkHm.js.map

package/server/{pipeline-membership-5qlRz5Qg.js → pipeline-membership-C9ykcjsn.js}

@@ -1,3 +1,3 @@
-import { n as init_pipeline_membership, r as resolvePipelineMembership, t as PLANNED_BACKLOG_SPEC_ONLY_REASON } from "./pipeline-membership-BHZp_ShY.js";
+import { n as init_pipeline_membership, r as resolvePipelineMembership, t as PLANNED_BACKLOG_SPEC_ONLY_REASON } from "./pipeline-membership-BV4hdkHm.js";
 init_pipeline_membership();
 export { PLANNED_BACKLOG_SPEC_ONLY_REASON, resolvePipelineMembership };

package/server/{pipeline-membership-gather-CGFY1v-y.js → pipeline-membership-gather-Ba0wJNCR.js}

@@ -1,12 +1,12 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { $ as readIssueRecord, Y as init_record, et as readIssueRecordForWorkspaceSync, fn as init_projects, rn as getIssuePrefix, vn as listProjectsSync } from "./config-yaml-BwOEANMr.js";
-import { h as loadConfigSync, p as init_config } from "./config-tucKBCCc.js";
-import { r as init_factory, t as createTracker } from "./factory-D4V2wd_V.js";
-import { C as init_specs, w as listSpecs } from "./io-DfvO2xyh.js";
-import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-xnVJVrrO.js";
-import { i as init_project_repos, n as getRepoForge, r as inferProjectForgeSync } from "./project-repos-B4MK48j4.js";
-import { A as createSettledTtlPromiseCache, N as withConcurrencyLimitPromise, _ as listOpenIssuesWithLabelsPromise, f as init_github_app, h as listIssuesWithAnyLabelPromise, j as init_concurrency } from "./github-app-4UX8VIr8.js";
-import { a as PARKED_LABEL, c as VETOED_LABEL, h as init_pickup, i as OBJECTION_LABEL, o as READY_LABEL, s as RELEASED_LABEL, t as BLOCKS_MAIN_LABEL } from "./pickup-BjJsSX12.js";
+import { $ as readIssueRecord, Y as init_record, et as readIssueRecordForWorkspaceSync, fn as init_projects, rn as getIssuePrefix, vn as listProjectsSync } from "./config-yaml-D60AnTIu.js";
+import { h as loadConfigSync, p as init_config } from "./config-NxI9Yl2f.js";
+import { r as init_factory, t as createTracker } from "./factory-CWVKwKFE.js";
+import { C as init_specs, w as listSpecs } from "./io-BCtZoXHo.js";
+import { i as init_project_repos, n as getRepoForge, r as inferProjectForgeSync } from "./project-repos-CsfvLtmr.js";
+import { n as resolveGitHubIssueSync, t as init_tracker_utils } from "./tracker-utils-Dbg_pVZg.js";
+import { A as createSettledTtlPromiseCache, N as withConcurrencyLimitPromise, _ as listOpenIssuesWithLabelsPromise, f as init_github_app, h as listIssuesWithAnyLabelPromise, j as init_concurrency } from "./github-app-BlMSzSTw.js";
+import { a as PARKED_LABEL, c as VETOED_LABEL, h as init_pickup, i as OBJECTION_LABEL, o as READY_LABEL, s as RELEASED_LABEL, t as BLOCKS_MAIN_LABEL } from "./pickup-Dle6k9Xt.js";
 import { join, resolve } from "node:path";
 import { Effect } from "effect";
 import { realpath } from "node:fs/promises";
@@ -488,14 +488,15 @@ async function gatherIssueBranchContainment(project, issueId, run = defaultDeps.
 	const result = {
 		unmergedRefs: [],
 		mergedWorkRefs: [],
-		pointerRefs: []
+		pointerRefs: [],
+		mergedWorkHeads: []
 	};
 	for (const { repository, snapshot } of snapshots) {
 		const unmergedSet = new Set(snapshot.unmergedRefs.split("\n").map((ref) => ref.trim()).filter(Boolean));
 		const firstParentShas = new Set(snapshot.firstParentShas.split("\n").map((sha) => sha.trim()).filter(Boolean));
 		const refLines = snapshot.refs.split("\n").map((line) => line.trim()).filter(Boolean);
 		for (const line of refLines) {
-			const { ref } = parseBranchRefLine(line);
+			const { ref, tipSha } = parseBranchRefLine(line);
 			const qualifiedRef = `${repository.path}:${ref}`;
 			switch (classifyBranchRefLine(line, unmergedSet, firstParentShas)) {
 				case "unmerged":
@@ -503,6 +504,10 @@ async function gatherIssueBranchContainment(project, issueId, run = defaultDeps.
 					break;
 				case "merged-work":
 					result.mergedWorkRefs.push(qualifiedRef);
+					if (tipSha) result.mergedWorkHeads.push({
+						ref: qualifiedRef,
+						head: tipSha
+					});
 					break;
 				case "pointer":
 					result.pointerRefs.push(qualifiedRef);
@@ -727,7 +732,7 @@ var init_pipeline_membership_gather = __esmMin((() => {
 		},
 		batchHasTerminalCloseOutRecords: async (project, issueIds) => {
 			const result = /* @__PURE__ */ new Map();
-			const { batchReadIssueRecords } = await import("./record-By-wp6pg.js");
+			const { batchReadIssueRecords } = await import("./record-DYOg97Iv.js");
 			const batchResults = await batchReadIssueRecords(project, issueIds);
 			for (const id of issueIds) {
 				const record = batchResults.get(id);
@@ -750,4 +755,4 @@ var init_pipeline_membership_gather = __esmMin((() => {
 //#endregion
 export { removeIssueParkedLabel as A, applyIssueParkedLabel as C, init_label_ops as D, applyIssueVetoedLabel as E, removeIssueReleasedLabel as M, removeIssueVetoedLabel as N, removeIssueBlocksMainLabel as O, applyIssueObjectionLabel as S, applyIssueReleasedLabel as T, init_gitlab_merge_requests as _, gatherProjectLensSignals as a, reconcilePipelineLabelsPatrol as b, listIssueStatesBatched as c, mapPipelineProjects as d, projectRepositories as f, parseIssueIdFromTextSync as g, init_resource_utils as h, gatherIssueBranchContainment as i, removeIssueReadyLabel as j, removeIssueObjectionLabel as k, listMergedPullRequestHeadsBatched as l, snapshotBranchRefs as m, PipelineMembershipUnavailableError as n, gatherProjectLensSignalsForProjects as o, resolveRepositoryDefaultBranch as p, classifyBranchRefLine as r, init_pipeline_membership_gather as s, PIPELINE_PROJECT_CONCURRENCY as t, listOpenPullRequestsSnapshot as u, listOpenGitLabMergeRequests as v, applyIssueReadyLabel as w, applyIssueBlocksMainLabel as x, init_label_reconciler as y };
 
-//# sourceMappingURL=pipeline-membership-gather-CGFY1v-y.js.map
+//# sourceMappingURL=pipeline-membership-gather-Ba0wJNCR.js.map

package/server/{pipeline-membership-gather-WhRc1yke.js → pipeline-membership-gather-C9E22B2W.js}

@@ -1,3 +1,3 @@
-import { a as gatherProjectLensSignals, c as listIssueStatesBatched, d as mapPipelineProjects, f as projectRepositories, i as gatherIssueBranchContainment, l as listMergedPullRequestHeadsBatched, m as snapshotBranchRefs, n as PipelineMembershipUnavailableError, o as gatherProjectLensSignalsForProjects, p as resolveRepositoryDefaultBranch, r as classifyBranchRefLine, s as init_pipeline_membership_gather, t as PIPELINE_PROJECT_CONCURRENCY, u as listOpenPullRequestsSnapshot } from "./pipeline-membership-gather-CGFY1v-y.js";
+import { a as gatherProjectLensSignals, c as listIssueStatesBatched, d as mapPipelineProjects, f as projectRepositories, i as gatherIssueBranchContainment, l as listMergedPullRequestHeadsBatched, m as snapshotBranchRefs, n as PipelineMembershipUnavailableError, o as gatherProjectLensSignalsForProjects, p as resolveRepositoryDefaultBranch, r as classifyBranchRefLine, s as init_pipeline_membership_gather, t as PIPELINE_PROJECT_CONCURRENCY, u as listOpenPullRequestsSnapshot } from "./pipeline-membership-gather-Ba0wJNCR.js";
 init_pipeline_membership_gather();
 export { PIPELINE_PROJECT_CONCURRENCY, PipelineMembershipUnavailableError, classifyBranchRefLine, gatherIssueBranchContainment, gatherProjectLensSignals, gatherProjectLensSignalsForProjects, listIssueStatesBatched, listMergedPullRequestHeadsBatched, listOpenPullRequestsSnapshot, mapPipelineProjects, projectRepositories, resolveRepositoryDefaultBranch, snapshotBranchRefs };

package/server/{pipeline-notifier-C4fZ2ito.js → pipeline-notifier-B5DPXvnr.js}

@@ -1,3 +1,3 @@
-import { a as setPipelineHandlerSync, i as setPipelineHandler, n as notifyPipeline, r as notifyPipelineSync, t as init_pipeline_notifier } from "./pipeline-notifier-BmsLWM_2.js";
+import { a as setPipelineHandlerSync, i as setPipelineHandler, n as notifyPipeline, r as notifyPipelineSync, t as init_pipeline_notifier } from "./pipeline-notifier-p190L97e.js";
 init_pipeline_notifier();
 export { notifyPipeline, notifyPipelineSync, setPipelineHandler, setPipelineHandlerSync };

package/server/{pipeline-notifier-BmsLWM_2.js → pipeline-notifier-p190L97e.js}

@@ -1,5 +1,5 @@
 import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
-import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-zY75jrRJ.js";
+import { o as getInternalTokenSync, s as init_internal_token, t as INTERNAL_TOKEN_HEADER } from "./internal-token-BeIWG_kT.js";
 import { Effect } from "effect";
 //#region ../../lib/pipeline-notifier.ts
 /**
@@ -60,4 +60,4 @@ var init_pipeline_notifier = __esmMin((() => {
 //#endregion
 export { setPipelineHandlerSync as a, setPipelineHandler as i, notifyPipeline as n, notifyPipelineSync as r, init_pipeline_notifier as t };
 
-//# sourceMappingURL=pipeline-notifier-BmsLWM_2.js.map
+//# sourceMappingURL=pipeline-notifier-p190L97e.js.map

package/server/{post-merge-lifecycle-worker-KK1RTKRE.js → post-merge-lifecycle-worker-OQoK8Ckg.js}

@@ -1,4 +1,4 @@
-import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-Ct912fv_.js";
+import { n as init_review_status_source, s as resolveCanonicalReviewStatus } from "./review-status-source-Jq0BXmn3.js";
 //#region ../../lib/cloister/post-merge-lifecycle-worker.ts
 init_review_status_source();
 const queue = /* @__PURE__ */ new Map();
@@ -15,7 +15,7 @@ async function drainQueue() {
 			continue;
 		}
 		try {
-			const { postMergeLifecycle } = await import("./merge-agent-BRSz26Oh.js");
+			const { postMergeLifecycle } = await import("./merge-agent-D-4_iQgy.js");
 			await postMergeLifecycle(entry.issueId, entry.projectPath, entry.sourceBranch, { skipDeploy: true });
 			console.log(`[deacon] Completed pending post-merge lifecycle for ${entry.issueId}`);
 		} catch (error) {
@@ -47,4 +47,4 @@ function enqueuePostMergeLifecycle(issueId, projectPath, sourceBranch) {
 //#endregion
 export { enqueuePostMergeLifecycle };
 
-//# sourceMappingURL=post-merge-lifecycle-worker-KK1RTKRE.js.map
+//# sourceMappingURL=post-merge-lifecycle-worker-OQoK8Ckg.js.map