@overdeck/desktop 0.50.0 → 0.50.3

package/server/worktree-ops-Cnk1voFY.js

@@ -0,0 +1,369 @@
+import { n as __esmMin } from "./rolldown-runtime-DNCzzKnI.js";
+import { n as init_workspace_config, r as replacePlaceholdersSync } from "./workspace-config-CoAaYx_w.js";
+import { basename, isAbsolute, normalize } from "node:path";
+import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
+import { dirname as dirname$1, extname as extname$1, join as join$1, relative as relative$1, resolve as resolve$1 } from "path";
+import { homedir } from "os";
+import { exec } from "child_process";
+import { promisify } from "util";
+//#region ../../lib/context-layers/native-instructions.ts
+/** Protect native instruction paths while allowing ordinary workspace assets. */
+function isHarnessNativeTarget(target) {
+	const slash = target.replace(/\\/g, "/");
+	const path = normalize(slash).replace(/\\/g, "/").replace(/^\.\//, "").toLowerCase();
+	if (isAbsolute(slash) || path === ".." || path.startsWith("../")) return true;
+	if (new Set([
+		"claude.md",
+		"claude.local.md",
+		"agents.md",
+		"agents.override.md",
+		"gemini.md",
+		"conventions.md",
+		".cursorrules",
+		".windsurfrules",
+		".clinerules",
+		"copilot-instructions.md"
+	]).has(basename(path))) return true;
+	return /(?:^|\/)(?:\.claude\/rules|\.cursor\/rules|\.windsurf\/rules|\.clinerules|\.github\/instructions)(?:\/|$)/.test(path);
+}
+var init_native_instructions = __esmMin((() => {}));
+//#endregion
+//#region ../../lib/workspace-manager/types.ts
+var PRE_WORKTREE_METADATA_DIRS;
+var init_types = __esmMin((() => {
+	PRE_WORKTREE_METADATA_DIRS = new Set([".pan"]);
+}));
+//#endregion
+//#region ../../lib/workspace-manager/worktree-ops.ts
+/**
+* Validate feature name (alphanumeric and hyphens only)
+*/
+function validateFeatureName(name) {
+	return /^[a-zA-Z0-9-]+$/.test(name);
+}
+/**
+* Make a `cp -a`-copied Python venv self-contained by pointing its scripts at
+* the destination venv's OWN interpreter.
+*
+* Python venvs are not relocatable: every bin/* console script carries an
+* absolute `#!<source venv>/bin/python3` shebang, and the activate scripts set
+* `VIRTUAL_ENV=<source venv>`. Copying a venv to a new path leaves those
+* pointing at the old location — a repo rename (e.g. panopticon-cli → overdeck)
+* then breaks every copied script with "bad interpreter: No such file". The
+* TLDR MCP server silently fails to spawn and the read-enforcer hook silently
+* no-ops, so every agent pays full token cost on Reads with nothing erroring.
+*
+* Rewrites each bin/* shebang and the activate `VIRTUAL_ENV` to the destination
+* venv's own path. Best-effort and non-fatal: unreadable/binary files skipped.
+*/
+function relocateVenvScripts(sourceVenv, destVenv) {
+	const sourceBin = join$1(sourceVenv, "bin");
+	const destBin = join$1(destVenv, "bin");
+	const destPy = join$1(destBin, "python3");
+	if (!existsSync(destBin) || !existsSync(destPy)) return;
+	for (const entry of readdirSync(destBin)) {
+		const script = join$1(destBin, entry);
+		try {
+			if (!statSync(script).isFile()) continue;
+			const content = readFileSync(script, "utf8");
+			const firstLine = content.split("\n", 1)[0] ?? "";
+			if (firstLine.startsWith("#!") && firstLine.includes(sourceBin)) {
+				const restFrom = content.indexOf("\n");
+				writeFileSync(script, `#!${destPy}${restFrom === -1 ? "\n" : content.slice(restFrom)}`);
+			}
+		} catch {}
+	}
+	for (const name of [
+		"activate",
+		"activate.csh",
+		"activate.fish"
+	]) {
+		const act = join$1(destBin, name);
+		if (!existsSync(act)) continue;
+		try {
+			const content = readFileSync(act, "utf8");
+			if (content.includes(sourceVenv)) writeFileSync(act, content.split(sourceVenv).join(destVenv));
+		} catch {}
+	}
+}
+/**
+* Keep a generated hooks directory that lives inside the worktree out of
+* `git status`. With husky, `core.hooksPath` is `.husky/_` — a tracked-repo
+* path husky self-ignores by writing a `*` .gitignore into it on install.
+* `installPreRebaseHook` creates that directory itself in a fresh worktree,
+* long before `prepare: husky` ever runs, so without this the generated guard
+* lands as `?? .husky/_/pre-rebase` and every new workspace is born dirty —
+* which 409s the planning→work auto-handoff (PAN-3266).
+*
+* Directories under `.git/` need nothing: git never reports them.
+*/
+function ensureGeneratedHooksDirIsIgnored(targetPath, hooksDir) {
+	const relativeDir = relative$1(targetPath, hooksDir).replace(/\\/g, "/");
+	if (!relativeDir || relativeDir.startsWith("..") || relativeDir === ".git" || relativeDir.startsWith(".git/")) return;
+	const ignorePath = join$1(hooksDir, ".gitignore");
+	if (existsSync(ignorePath)) return;
+	try {
+		writeFileSync(ignorePath, "*\n", "utf-8");
+	} catch {}
+}
+/** Install the agent-only rebase guard in Git's configured hooks directory. */
+async function installPreRebaseHook(targetPath) {
+	const { stdout } = await execAsync("git rev-parse --git-path hooks", {
+		cwd: targetPath,
+		encoding: "utf-8"
+	});
+	const hooksDir = resolve$1(targetPath, stdout.trim());
+	const hookPath = join$1(hooksDir, "pre-rebase");
+	mkdirSync(hooksDir, { recursive: true });
+	ensureGeneratedHooksDirIsIgnored(targetPath, hooksDir);
+	const originalHookPath = `${hookPath}${PRE_REBASE_ORIGINAL_SUFFIX}`;
+	const existingHook = existsSync(hookPath) ? readFileSync(hookPath, "utf-8") : "";
+	if (!existingHook.includes(PRE_REBASE_HOOK_MARKER)) {
+		if (existingHook) {
+			rmSync(originalHookPath, { force: true });
+			renameSync(hookPath, originalHookPath);
+		}
+		writeFileSync(hookPath, [
+			PRE_REBASE_HOOK_PREFIX,
+			`if [ -x "\${0}${PRE_REBASE_ORIGINAL_SUFFIX}" ]; then`,
+			`  exec "\${0}${PRE_REBASE_ORIGINAL_SUFFIX}" "$@"`,
+			"fi",
+			"exit 0",
+			""
+		].join("\n"), {
+			encoding: "utf-8",
+			mode: 493
+		});
+	}
+	chmodSync(hookPath, 493);
+	return hookPath;
+}
+/**
+* Create a git worktree
+* @param repoPath Path to the source git repository
+* @param targetPath Where to create the worktree
+* @param branchName Name of the feature branch to create/checkout
+* @param defaultBranch Base branch to create new branches from (default: 'main')
+*/
+async function createWorktree(repoPath, targetPath, branchName, defaultBranch = "main") {
+	try {
+		await execAsync("git fetch origin", { cwd: repoPath });
+		await execAsync("git worktree prune", { cwd: repoPath });
+		const { stdout: localBranches } = await execAsync("git branch --list", { cwd: repoPath });
+		const { stdout: remoteBranches } = await execAsync("git branch -r --list", { cwd: repoPath });
+		const localList = localBranches.split("\n").map((b) => b.replace(/^[*+\s]+/, "").trim()).filter(Boolean);
+		const remoteList = remoteBranches.split("\n").map((b) => b.trim()).filter(Boolean);
+		if (localList.includes(branchName) || remoteList.includes(`origin/${branchName}`)) await execAsync(`git worktree add "${targetPath}" "${branchName}"`, { cwd: repoPath });
+		else await execAsync(`git worktree add -b "${branchName}" "${targetPath}" "${defaultBranch}"`, { cwd: repoPath });
+		await installPreRebaseHook(targetPath);
+		await execAsync("git restore .", { cwd: targetPath }).catch(() => {});
+		return {
+			success: true,
+			message: `Created worktree at ${targetPath}`
+		};
+	} catch (error) {
+		return {
+			success: false,
+			message: `Failed to create worktree: ${error}`
+		};
+	}
+}
+/**
+* Remove a git worktree
+*/
+async function removeWorktree(repoPath, targetPath, branchName) {
+	try {
+		await execAsync(`git worktree remove "${targetPath}" --force`, { cwd: repoPath }).catch(() => {});
+		await execAsync(`git branch -D "${branchName}"`, { cwd: repoPath }).catch(() => {});
+		return {
+			success: true,
+			message: `Removed worktree at ${targetPath}`
+		};
+	} catch (error) {
+		return {
+			success: false,
+			message: `Failed to remove worktree: ${error}`
+		};
+	}
+}
+/**
+* Assign a port from a range
+*/
+function assignPort(portFile, featureFolder, range) {
+	if (!existsSync(portFile)) {
+		mkdirSync(dirname$1(portFile), { recursive: true });
+		writeFileSync(portFile, "");
+	}
+	const content = readFileSync(portFile, "utf-8");
+	const lines = content.split("\n").filter(Boolean);
+	for (const line of lines) {
+		const [folder, port] = line.split(":");
+		if (folder === featureFolder) return parseInt(port, 10);
+	}
+	const usedPorts = new Set(lines.map((l) => parseInt(l.split(":")[1], 10)));
+	for (let port = range[0]; port <= range[1]; port++) if (!usedPorts.has(port)) {
+		writeFileSync(portFile, content + (content.endsWith("\n") ? "" : "\n") + `${featureFolder}:${port}\n`);
+		return port;
+	}
+	throw new Error(`No available ports in range ${range[0]}-${range[1]}`);
+}
+/**
+* Release a port assignment
+*/
+function releasePort(portFile, featureFolder) {
+	try {
+		if (!existsSync(portFile)) return true;
+		writeFileSync(portFile, readFileSync(portFile, "utf-8").split("\n").filter((line) => !line.startsWith(`${featureFolder}:`)).join("\n"));
+		return true;
+	} catch {
+		return false;
+	}
+}
+function isPreWorktreeMetadataOnlyDir(path) {
+	return readdirSync(path, { withFileTypes: true }).every((entry) => PRE_WORKTREE_METADATA_DIRS.has(entry.name) && entry.isDirectory());
+}
+function stagePreWorktreeMetadataSync(workspacePath) {
+	if (!existsSync(workspacePath)) return null;
+	if (!isPreWorktreeMetadataOnlyDir(workspacePath)) return null;
+	const stagedPath = `${workspacePath}.pre-worktree-${process.pid}-${Date.now()}`;
+	renameSync(workspacePath, stagedPath);
+	return stagedPath;
+}
+function mergeDirectoryWithoutOverwriteSync(source, target) {
+	if (!existsSync(source)) return;
+	mkdirSync(target, { recursive: true });
+	for (const entry of readdirSync(source, { withFileTypes: true })) {
+		const sourcePath = join$1(source, entry.name);
+		const targetPath = join$1(target, entry.name);
+		if (entry.isDirectory()) mergeDirectoryWithoutOverwriteSync(sourcePath, targetPath);
+		else if (entry.isFile() && !existsSync(targetPath)) copyFileSync(sourcePath, targetPath);
+	}
+}
+function restorePreWorktreeMetadataSync(stagedPath, workspacePath) {
+	if (!stagedPath || !existsSync(stagedPath)) return;
+	mergeDirectoryWithoutOverwriteSync(stagedPath, workspacePath);
+	rmSync(stagedPath, {
+		recursive: true,
+		force: true
+	});
+}
+function copyProjectTemplateDirs(sourceDir, targetDir, dirs, placeholders) {
+	const steps = [];
+	for (const dir of dirs) {
+		const sourcePath = join$1(sourceDir, dir);
+		const targetPath = join$1(targetDir, dir);
+		if (!existsSync(sourcePath) || isHarnessNativeTarget(dir)) continue;
+		function copyDir(src, dest) {
+			let count = 0;
+			mkdirSync(dest, { recursive: true });
+			const entries = readdirSync(src, { withFileTypes: true });
+			for (const entry of entries) {
+				const srcEntry = join$1(src, entry.name);
+				const destEntry = join$1(dest, entry.name);
+				if (isHarnessNativeTarget(relative$1(targetDir, destEntry))) continue;
+				if (entry.isDirectory()) count += copyDir(srcEntry, destEntry);
+				else if (entry.isFile()) {
+					const ext = extname$1(entry.name).toLowerCase();
+					if (placeholders && TEXT_EXTENSIONS.has(ext)) writeFileSync(destEntry, replacePlaceholdersSync(readFileSync(srcEntry, "utf-8"), placeholders));
+					else copyFileSync(srcEntry, destEntry);
+					count++;
+				}
+			}
+			return count;
+		}
+		const count = copyDir(sourcePath, targetPath);
+		steps.push(`Copied ${count} files from project template: ${dir}`);
+	}
+	return steps;
+}
+/**
+* Pre-register a directory as trusted in Claude Code's ~/.claude.json so that
+* neither the per-project "Quick safety check" trust prompt nor the global
+* "WARNING: Claude Code running in Bypass Permissions mode" warning blocks
+* spawn.
+*
+* Two acceptances are written:
+*
+* 1. **Per-project** `projects[dir].hasTrustDialogAccepted = true` — suppresses
+*    the "Is this a project you created or one you trust?" prompt for this cwd.
+*
+* 2. **Global** `bypassPermissionsModeAccepted = true` — suppresses the
+*    "Bypass Permissions mode" disclaimer that Claude shows on first launch
+*    under `--dangerously-skip-permissions`. The default selection on that
+*    prompt is "No, exit", so an undismissed dialog tears the session down
+*    the moment any code (dev-channels dismisser, readiness poll) sends Enter.
+*    Spawning under Overdeck implies the user already opted into bypass
+*    via `claude.permissionMode` / `--yolo`, so this is a pre-acknowledgement
+*    of a choice already made, not a silent escalation.
+*
+* The field name (`bypassPermissionsModeAccepted`) comes straight from the
+* Claude Code binary — strings(claude.exe) confirms it as the persistence
+* key checked by both the bypass-mode dialog and the headless --bg gate.
+*/
+function preTrustDirectorySync(dirPath) {
+	const claudeJsonPath = join$1(homedir(), ".claude.json");
+	if (!existsSync(claudeJsonPath)) return;
+	const data = JSON.parse(readFileSync(claudeJsonPath, "utf8"));
+	let dirty = false;
+	if (data.bypassPermissionsModeAccepted !== true) {
+		data.bypassPermissionsModeAccepted = true;
+		dirty = true;
+	}
+	if (!data.projects) data.projects = {};
+	if (data.projects[dirPath]) {
+		if (!data.projects[dirPath].hasTrustDialogAccepted) {
+			data.projects[dirPath].hasTrustDialogAccepted = true;
+			dirty = true;
+		}
+	} else {
+		data.projects[dirPath] = {
+			allowedTools: [],
+			mcpContextUris: [],
+			mcpServers: {},
+			enabledMcpjsonServers: [],
+			disabledMcpjsonServers: [],
+			hasTrustDialogAccepted: true,
+			projectOnboardingSeenCount: 0,
+			hasClaudeMdExternalIncludesApproved: false,
+			hasClaudeMdExternalIncludesWarningShown: false
+		};
+		dirty = true;
+	}
+	if (dirty) writeFileSync(claudeJsonPath, JSON.stringify(data, null, 2), "utf8");
+}
+var execAsync, PRE_REBASE_HOOK_MARKER, PRE_REBASE_ORIGINAL_SUFFIX, PRE_REBASE_HOOK_PREFIX, TEXT_EXTENSIONS;
+var init_worktree_ops = __esmMin((() => {
+	init_native_instructions();
+	init_workspace_config();
+	init_types();
+	execAsync = promisify(exec);
+	PRE_REBASE_HOOK_MARKER = "# OVERDECK MANAGED PRE-REBASE GUARD";
+	PRE_REBASE_ORIGINAL_SUFFIX = ".overdeck-original";
+	PRE_REBASE_HOOK_PREFIX = [
+		"#!/bin/sh",
+		PRE_REBASE_HOOK_MARKER,
+		"if [ \"$OVERDECK_PAN_GIT_OP\" != \"1\" ] && [ -n \"$OVERDECK_AGENT_ID\" ]; then",
+		"  echo \"Overdeck agents must not run git rebase directly.\" >&2",
+		"  echo \"Use pan sync-main <ISSUE-ID> to sync main or pan done <ISSUE-ID> to submit.\" >&2",
+		"  exit 1",
+		"fi",
+		""
+	].join("\n");
+	TEXT_EXTENSIONS = new Set([
+		".md",
+		".sh",
+		".yml",
+		".yaml",
+		".json",
+		".ts",
+		".js",
+		".env",
+		".txt",
+		".toml",
+		".template"
+	]);
+}));
+//#endregion
+export { isHarnessNativeTarget as _, init_worktree_ops as a, mergeDirectoryWithoutOverwriteSync as c, relocateVenvScripts as d, removeWorktree as f, init_native_instructions as g, validateFeatureName as h, createWorktree as i, preTrustDirectorySync as l, stagePreWorktreeMetadataSync as m, assignPort as n, installPreRebaseHook as o, restorePreWorktreeMetadataSync as p, copyProjectTemplateDirs as r, isPreWorktreeMetadataOnlyDir as s, TEXT_EXTENSIONS as t, releasePort as u };
+
+//# sourceMappingURL=worktree-ops-Cnk1voFY.js.map

package/sync-sources/rules/context-nomenclature.md

@@ -18,9 +18,10 @@ scope word alone determines the destination:
 
 After writing any of them, run `pan sync`. Changes reach **new** sessions only.
 
-The rendered outputs — the managed region of `~/.claude/CLAUDE.md`, project
-`CLAUDE.md`/`AGENTS.md`, and `pi-global.md`/`codex-global.md` — are **harness
-context files**; never edit them directly.
+The rendered outputs — `claude-global.md`, `pi-global.md`, and
+`codex-global.md` under `~/.overdeck/context/` — are **managed-session launch
+artifacts**; never edit them directly. Native harness instruction files are
+user-owned and Overdeck never writes them.
 
 Translate vague or ad-hoc terms ("global context template", "the CLAUDE.md
 template") into one of the four scopes above, and confirm the routing when the

package/sync-sources/rules/rule-authoring.md

@@ -22,9 +22,9 @@ bundled rule in the overdeck repo:
 3. **`scope: universal` costs context in every session on every machine** —
    keep it as short as the rule allows. `scope: dev` folds in only on a
    overdeck source checkout; mechanics and tooling detail belong there.
-4. Run `pan sync`, then verify the rule landed in the rendered harness context
-   files: `~/.claude/CLAUDE.md` (managed region), `~/.overdeck/context/pi-global.md`,
-   and `~/.overdeck/context/codex-global.md`.
+4. Run `pan sync`, then verify the rule landed in the Overdeck-owned launch
+   artifacts: `~/.overdeck/context/claude-global.md`, `pi-global.md`, and
+   `codex-global.md`.
 5. Commit and push — bundled rules ship with the package, so an uncommitted
    rule exists only on this machine.
 6. If the rule introduces new canonical terminology, update

package/sync-sources/skills/knowledge-capture/SKILL.md

@@ -83,10 +83,10 @@ If override exists, **do not prompt** - the user has explicitly disabled this sk
 
 ### Step 0.5: Check User Preferences for Category Exclusions
 
-Check `~/.claude/CLAUDE.md` for excluded categories:
+Check `~/.overdeck/context/global.md` for excluded categories:
 
 ```bash
-grep -A 20 "## AI Suggestion Preferences" ~/.claude/CLAUDE.md 2>/dev/null
+grep -A 20 "## AI Suggestion Preferences" ~/.overdeck/context/global.md 2>/dev/null
 ```
 
 Look for sections like:
@@ -156,7 +156,7 @@ This seems like project-specific knowledge that would help me (and other AI assi
 | **Yes, create skill** | I'll draft a project-specific skill with this knowledge |
 | **Yes, add to CLAUDE.md** | I'll add a note to the project's CLAUDE.md file |
 | **Not now** | Skip this time (I'll ask less frequently) |
-| **Skip this category** | Never prompt about {CATEGORY} issues (updates your ~/.claude/CLAUDE.md) |
+| **Skip this category** | Never prompt about {CATEGORY} issues (updates your ~/.overdeck/context/global.md) |
 | **Too frequent** | Reduce how often I ask (switch to minimal mode) |
 | **Stop asking** | Turn off prompts for this project (silent mode) |
 | **Shut up forever** | Permanently disable for this project (creates override) |
@@ -181,8 +181,8 @@ This seems like project-specific knowledge that would help me (and other AI assi
 2. Continue working
 
 **If "Skip this category":**
-1. Update `~/.claude/CLAUDE.md` to add category to skip list
-2. Acknowledge: "Got it - I won't prompt about {CATEGORY} issues anymore. You can edit ~/.claude/CLAUDE.md to change this."
+1. Update `~/.overdeck/context/global.md` to add category to skip list
+2. Acknowledge: "Got it - I won't prompt about {CATEGORY} issues anymore. You can edit ~/.overdeck/context/global.md to change this."
 
 **If "Too frequent":**
 1. Update config: `mode = "minimal"`, `promptCooldownMinutes = 120`
@@ -228,9 +228,9 @@ cat > .overdeck/knowledge-capture.json << 'EOF'
 EOF
 ```
 
-## User Preferences in ~/.claude/CLAUDE.md
+## User Preferences in ~/.overdeck/context/global.md
 
-Users can exclude specific categories globally by adding to their personal `~/.claude/CLAUDE.md`:
+Users can exclude specific categories globally by adding to their personal `~/.overdeck/context/global.md`:
 
 ```markdown
 ## AI Suggestion Preferences
@@ -273,7 +273,7 @@ welcome: naming, code-organization, testing
 To add a category exclusion:
 ```bash
 # AI will add this section if it doesn't exist
-cat >> ~/.claude/CLAUDE.md << 'EOF'
+cat >> ~/.overdeck/context/global.md << 'EOF'
 
 ## AI Suggestion Preferences
 
@@ -285,13 +285,13 @@ EOF
 To modify:
 ```bash
 # Edit directly
-nano ~/.claude/CLAUDE.md
+nano ~/.overdeck/context/global.md
 ```
 
 To remove all exclusions:
 ```bash
 # Remove the AI Suggestion Preferences section
-sed -i '/## AI Suggestion Preferences/,/^## /d' ~/.claude/CLAUDE.md
+sed -i '/## AI Suggestion Preferences/,/^## /d' ~/.overdeck/context/global.md
 ```
 
 ## User Commands (Escalating Silence)
@@ -409,7 +409,7 @@ Prompt the user early:
 
 | File | Purpose |
 |------|---------|
-| `~/.claude/CLAUDE.md` | User preferences (category exclusions) |
+| `~/.overdeck/context/global.md` | User preferences (category exclusions) |
 | `.overdeck/knowledge-capture.json` | Per-project configuration |
 | `.claude/skills/project-knowledge/SKILL.md` | Captured knowledge as skill |
 | `.claude/skills/knowledge-capture/SKILL.md` | Override to permanently disable |
@@ -434,7 +434,7 @@ rm -rf .claude/skills/knowledge-capture/
 
 To clear all category exclusions:
 ```bash
-# Edit ~/.claude/CLAUDE.md and remove the "AI Suggestion Preferences" section
+# Edit ~/.overdeck/context/global.md and remove the "AI Suggestion Preferences" section
 ```
 
 ## Integration with Other Skills
@@ -443,7 +443,7 @@ To clear all category exclusions:
 - knowledge-capture: "Here's how to work around this confusion"
 - refactor-radar: "Here's how to fix the codebase so this confusion doesn't happen"
 - Prefer refactor-radar for systemic issues, knowledge-capture for workarounds
-- Both skills share the same category exclusion system in ~/.claude/CLAUDE.md
+- Both skills share the same category exclusion system in ~/.overdeck/context/global.md
 
 **With pan-skill-creator:** When invoked, suggest consolidating:
 > "You have 7 captured knowledge items in project-knowledge. Would you like me to organize these into a proper project skill?"

package/sync-sources/skills/pan-new-project/SKILL.md

@@ -205,9 +205,9 @@ grep -q '^workspaces/' <project-path>/.gitignore 2>/dev/null || \
   echo 'workspaces/' >> <project-path>/.gitignore
 ```
 
-### Step 7: Create CLAUDE.md (if missing)
+### Step 7: Create the Overdeck project context (if missing)
 
-Check if the project has a `CLAUDE.md`. If not, create a minimal one:
+Check `<project-path>/.overdeck/context/project.md`. If absent, create a minimal project layer there. Preserve native `CLAUDE.md` and `AGENTS.md` files.
 
 ```markdown
 # <Project Name>

package/sync-sources/skills/pan-projects/SKILL.md

@@ -158,9 +158,9 @@ GITHUB_LOCAL_PATHS=owner/repo=/home/user/projects/my-app
 pan project add /path/to/project --name myproject
 ```
 
-### 2. Create CLAUDE.md (Recommended)
+### 2. Create project context (Recommended)
 
-Create a `CLAUDE.md` file in your project root with:
+Create `.overdeck/context/project.md` with the following content. Leave native instruction files unchanged:
 - Project overview
 - Key directories
 - Development guidelines
@@ -244,7 +244,7 @@ When you run `pan start ISSUE-1`, Overdeck will:
 
 **Problem:** Agent can't find project context
 **Solution:**
-- Create a CLAUDE.md in project root
+- Create `.overdeck/context/project.md` in the project
 - Ensure project is registered with correct path
 
 ## Best Practices

package/sync-sources/skills/pan-sync/SKILL.md

@@ -37,12 +37,10 @@ run `pan sync` manually. Manual sync is useful when:
 ~/.agents/skills/            (Codex, Pi, Oh My Pi)
 
 ~/.overdeck/workspaces/       (Workspace directories)
-        ↓ pan sync (copies CLAUDE.md)
-~/.opencode/cl-aude-md/        (CLAUDE.md files)
-        ↓
-        feature-pan-73.md
-        feature-pan-101.md
-        ...
+        ↓ pan sync (renders managed context)
+~/.overdeck/context/{claude,pi,codex}-global.md
+        ↓ managed launch (explicit harness transport)
+Agent receives global, project, workspace, role, and briefing context
 ```
 
 **Key points:**
@@ -288,11 +286,11 @@ backup_before_sync = false
 2. Check target is in config: `cat ~/.overdeck/config.toml`
 3. Verify symlinks exist: `ls -la ~/.claude/skills/`
 
-**Problem:** CLAUDE.md files not available in opencode
+**Problem:** Managed launch context is missing
 **Solution:**
-1. Run `pan sync` to copy workspace CLAUDE.md files
-2. Check files exist: `ls -la ~/.opencode/cl-aude-md/`
-3. Create a new workspace: `pan workspace create PAN-XXX`
+1. Run `pan context diff` to inspect the rendered sources; `pan sync` refreshes Overdeck-owned artifacts and never copies native instruction Markdown.
+2. Check the context artifacts: `ls -la ~/.overdeck/context/`
+3. Start a fresh managed session so it receives the current context.
 
 **Problem:** Sync reports conflicts
 **Solution:**

package/sync-sources/skills/refactor-radar/SKILL.md

@@ -91,10 +91,10 @@ fi
 
 ### Step 0.5: Check User Preferences for Category Exclusions
 
-Check `~/.claude/CLAUDE.md` for excluded categories:
+Check `~/.overdeck/context/global.md` for excluded categories:
 
 ```bash
-grep -A 20 "## AI Suggestion Preferences" ~/.claude/CLAUDE.md 2>/dev/null
+grep -A 20 "## AI Suggestion Preferences" ~/.overdeck/context/global.md 2>/dev/null
 ```
 
 Look for sections like:
@@ -165,7 +165,7 @@ I've noticed a systemic issue that's causing confusion:
 | **Yes, create issue** | I'll draft a detailed refactoring proposal as a GitHub/Linear issue |
 | **Yes, but just notes** | I'll add notes to project documentation instead |
 | **Not now** | Skip this time (I'll ask less often) |
-| **Skip this category** | Never suggest {CATEGORY} refactors (updates your ~/.claude/CLAUDE.md) |
+| **Skip this category** | Never suggest {CATEGORY} refactors (updates your ~/.overdeck/context/global.md) |
 | **Not important** | Don't track this issue (I may notice similar issues later) |
 | **Too frequent** | Switch to minimal mode |
 | **Stop asking** | Silent mode - log but don't prompt |
@@ -206,8 +206,8 @@ Create issue with template:
 ```
 
 **"Skip this category":**
-1. Update `~/.claude/CLAUDE.md` to add category to skip list
-2. Acknowledge: "Got it - I won't suggest {CATEGORY} refactors anymore. You can edit ~/.claude/CLAUDE.md to change this."
+1. Update `~/.overdeck/context/global.md` to add category to skip list
+2. Acknowledge: "Got it - I won't suggest {CATEGORY} refactors anymore. You can edit ~/.overdeck/context/global.md to change this."
 
 **"Shut up forever":**
 Create override skill to permanently disable:
@@ -241,9 +241,9 @@ cat > .overdeck/refactor-radar.json << 'EOF'
 EOF
 ```
 
-## User Preferences in ~/.claude/CLAUDE.md
+## User Preferences in ~/.overdeck/context/global.md
 
-Users can exclude specific categories globally by adding to their personal `~/.claude/CLAUDE.md`:
+Users can exclude specific categories globally by adding to their personal `~/.overdeck/context/global.md`:
 
 ```markdown
 ## AI Suggestion Preferences
@@ -297,7 +297,7 @@ welcome: naming, code-organization, testing
 To add a category exclusion:
 ```bash
 # AI will add this section if it doesn't exist, or append to existing
-cat >> ~/.claude/CLAUDE.md << 'EOF'
+cat >> ~/.overdeck/context/global.md << 'EOF'
 
 ## AI Suggestion Preferences
 
@@ -310,13 +310,13 @@ EOF
 To modify:
 ```bash
 # Edit directly
-nano ~/.claude/CLAUDE.md
+nano ~/.overdeck/context/global.md
 ```
 
 To remove all exclusions:
 ```bash
 # Remove the AI Suggestion Preferences section
-sed -i '/## AI Suggestion Preferences/,/^## /d' ~/.claude/CLAUDE.md
+sed -i '/## AI Suggestion Preferences/,/^## /d' ~/.overdeck/context/global.md
 ```
 
 ## User Commands (Escalating Silence)
@@ -449,14 +449,14 @@ Relationships exist in application code but lack DB constraints:
 
 | File | Purpose |
 |------|---------|
-| `~/.claude/CLAUDE.md` | User preferences (category exclusions/welcomes) |
+| `~/.overdeck/context/global.md` | User preferences (category exclusions/welcomes) |
 | `.overdeck/refactor-radar.json` | Per-project configuration |
 | `.claude/skills/refactor-radar/SKILL.md` | Override to permanently disable |
 
 ## Integration
 
 Works with:
-- **knowledge-capture**: If same issue triggers both, prefer refactor-radar (systemic fix > workaround). Both skills share the same category exclusion system in ~/.claude/CLAUDE.md
+- **knowledge-capture**: If same issue triggers both, prefer refactor-radar (systemic fix > workaround). Both skills share the same category exclusion system in ~/.overdeck/context/global.md
 - **pan-skill-creator**: Can convert proposals into project-specific guidance
 - Issue trackers: Creates issues in configured tracker (Linear, GitHub, GitLab)
 

package/server/agents-DixZjXWm.js

@@ -1,3 +0,0 @@
-import { A as saveAgentStateSync, Ar as transitionIssueToInReview, B as resolveAgentTargetSync, Br as getAgentRuntimeBaseCommand, C as markAgentTroubled, Ci as writeChannelsBridgeMcpConfig, E as recordAgentFailureSync, F as writeAgentStateJsonSync, Ft as resumeAgent, Gr as getRoleRuntimeBaseCommand, H as waitForReadySignal, I as isRole, J as compactAtTierRunBoundary, Jr as injectPiConversationMemory, Jt as appendActivity, K as saveAgentRuntimeState, L as clearReadySignal, Lr as OHMYPI_AGENT_READY_TIMEOUT_SECONDS, M as setAgentPausedSync, N as setAgentYieldedSync, Nt as buildCompactRecoverySeed, O as resetAgentFailureCount, Or as retrieveSpawnTimeMemoryContext, P as wipeAgentStateDirs, Q as shouldReplayCompactAtTierRunBoundary, Qt as getSessionId, R as isQualifiedAgentId, Rr as describeOhmypiSpawnFailure, S as markAgentStoppedState, T as recordAgentFailure, Tr as buildAgentLaunchConfig, U as getAgentRuntimeState, Ut as messageAgent, V as waitForAgentIdle, W as getAgentRuntimeStateSync, Wr as getProviderAuthMode, X as replayCrashedStandingAgent, Xt as getLatestSessionId, Y as contextWindowForModel, Yr as roleAgentDefinitionPath, Yt as getActivity, Z as replayStandingAgent, Zr as waitForPromptReady, Zt as getLatestSessionIdSync, _i as buildResumeContinueMessage, _n as listAgentStates, ar as deliverAgentMessage, bi as dismissDevChannelsDialog, bn as warnOnBareNumericIssueIds, c as clearAgentTroubled, ci as determineModel, cr as deliverResumeMessageWithTranscriptConfirmation, di as getProviderTmuxFlags, f as getAgentDir, fr as setAgentDeliveryMethod, ft as autoRecoverAgents, g as getAgentStateSync, gi as buildDefaultResumeContinueMessage, h as getAgentStateFilePath, hn as dropLegacyAgentStatesMissingRoleAsync, ht as restartAgent, j as setAgentPaused, k as saveAgentState, kr as transitionIssueToInProgress, l as clearAgentTroubledSync, li as getProviderEnvForModel, m as getAgentState, mn as stopAgentSync, mt as recoverAgent, n as SESSION_EXITED_BEFORE_KICKOFF, o as clearAgentPaused, oi as buildCavemanExports, on as spawnAgent, or as deliverAgentPermissionDecision, pn as stopAgent, pt as detectCrashedAgents, q as init_agents, r as __testInternals, s as clearAgentPausedSync, si as buildSpawnEnvForModel, sn as spawnRun, sr as deliverInitialPromptWithRetry, t as GOVERNOR_SLOT_PAUSE_REASON_PREFIX, tn as saveSessionId, u as clearYieldForResumeSync, ui as getProviderExportsForModel, v as isAgentPaused, vi as decideChannelsForWorkAgent, vn as listRunningAgents, wr as assertWorkspaceStackHealthyForSpawn, x as markAgentRunningState, y as isAgentTroubled, yi as decideSupervisorForWorkAgent, yn as listRunningAgentsSync, z as normalizeAgentId } from "./agent-state-FABw8neJ.js";
-init_agents();
-export { GOVERNOR_SLOT_PAUSE_REASON_PREFIX, OHMYPI_AGENT_READY_TIMEOUT_SECONDS, SESSION_EXITED_BEFORE_KICKOFF, __testInternals, appendActivity, assertWorkspaceStackHealthyForSpawn, autoRecoverAgents, buildAgentLaunchConfig, buildCavemanExports, buildCompactRecoverySeed, buildDefaultResumeContinueMessage, buildResumeContinueMessage, buildSpawnEnvForModel, clearAgentPaused, clearAgentPausedSync, clearAgentTroubled, clearAgentTroubledSync, clearReadySignal, clearYieldForResumeSync, compactAtTierRunBoundary, contextWindowForModel, decideChannelsForWorkAgent, decideSupervisorForWorkAgent, deliverAgentMessage, deliverAgentPermissionDecision, deliverInitialPromptWithRetry, deliverResumeMessageWithTranscriptConfirmation, describeOhmypiSpawnFailure, detectCrashedAgents, determineModel, dismissDevChannelsDialog, dropLegacyAgentStatesMissingRoleAsync, getActivity, getAgentDir, getAgentRuntimeBaseCommand, getAgentRuntimeState, getAgentRuntimeStateSync, getAgentState, getAgentStateFilePath, getAgentStateSync, getLatestSessionId, getLatestSessionIdSync, getProviderAuthMode, getProviderEnvForModel, getProviderExportsForModel, getProviderTmuxFlags, getRoleRuntimeBaseCommand, getSessionId, injectPiConversationMemory, isAgentPaused, isAgentTroubled, isQualifiedAgentId, isRole, listAgentStates, listRunningAgents, listRunningAgentsSync, markAgentRunningState, markAgentStoppedState, markAgentTroubled, messageAgent, normalizeAgentId, recordAgentFailure, recordAgentFailureSync, recoverAgent, replayCrashedStandingAgent, replayStandingAgent, resetAgentFailureCount, resolveAgentTargetSync, restartAgent, resumeAgent, retrieveSpawnTimeMemoryContext, roleAgentDefinitionPath, saveAgentRuntimeState, saveAgentState, saveAgentStateSync, saveSessionId, setAgentDeliveryMethod, setAgentPaused, setAgentPausedSync, setAgentYieldedSync, shouldReplayCompactAtTierRunBoundary, spawnAgent, spawnRun, stopAgent, stopAgentSync, transitionIssueToInProgress, transitionIssueToInReview, waitForAgentIdle, waitForPromptReady, waitForReadySignal, warnOnBareNumericIssueIds, wipeAgentStateDirs, writeAgentStateJsonSync, writeChannelsBridgeMcpConfig };

package/server/archive-planning-D3gw32U9.js

@@ -1,2 +0,0 @@
-import { i as findWorkspacePath } from "./archive-planning-BL1ABtW0.js";
-export { findWorkspacePath };