@overdeck/desktop 0.65.0 → 0.66.0

package/server/server.js

@@ -2,7 +2,7 @@ import { a as __toCommonJS, o as __toESM, t as __commonJSMin } from "./rolldown-
 import { $n as getHarnessBehavior, $t as resolveModel, An as init_src, Ar as PIPELINE_MEMBERSHIP_LOADING_CODE, B as getDefaultTtsDaemonConfig, Bn as isAgentRole, Bt as init_openai_compatible_proxy, Cr as SystemHealthSnapshot, Dn as PARENT_MODEL_REF, Dr as resolveEffectivePullRequest, En as COMPLIANCE_MODES, Et as UnknownModelError, F as yaml, Fn as parsePullRequestRef, Gn as ACP_BEHAVIOR, Gr as OVERDECK_HOME, Gt as DEFAULT_ROLES, Hn as bucketQuotaPoints, Ht as init_registry, I as init_merge, In as repoFromRemoteUrl, Ir as indexPanesByAgentKey, Jn as KIMI_CODE_BEHAVIOR, Kn as CLAUDE_CODE_BEHAVIOR, Kt as DEFAULT_WORKHORSES, L as mergeConfigs, Ln as COMPANION_TERMINAL_CLOSE_BODY_KEYS, Lr as paneAgentKey, M as init_errors, Mr as GITHUB_QUOTA_BUCKETS, Mt as init_providers, N as require_dist$1, Nn as laneActivityOf, Nr as GITHUB_QUOTA_CALLERS, O as ProcessSpawnError, Or as AgentRuntimeSnapshot, Ot as getBuiltInDefaultHarness, P as init_js_yaml, Pn as isConfiguredPullRequestRepo, Pr as GITHUB_QUOTA_POOLS, Qn as PRIME_AGENT_BEHAVIOR, Qr as SYNC_SOURCES, Rn as COMPANION_TERMINAL_OPEN_BODY_KEYS, Rr as AGENTS_DIR, Sr as DomainEvent, St as init_model_floors, Tr as MemoryObservation, Un as bucketQuotaRemaining, Vn as COMPOSER_COMMAND_MANIFEST, Vt as defaultBackgroundAiFeatures, Wn as compareIssueIds, Wr as LOGS_DIR, X as mergeTtsDaemonConfigs, Xn as OHMYPI_BEHAVIOR, Xt as derefWorkhorse, Yn as MUSE_BEHAVIOR, Yt as computeModelOrigin, Z as DEFAULT_CONFIG$1, Zn as OPENCODE_BEHAVIOR, Zt as init_roles, _r as EFFORT_LEVELS, _t as canUseHarness, a as getGlobalConfigPath, ai as getDocsTelemetryPath, an as MODEL_CAPABILITIES, br as isEffortLevel, bt as CODEX_CLI_INSTALL_COMMAND, ci as init_paths, cn as init_model_capabilities, di as packageRoot, dn as resolveModelId, dt as TieredExecutionConfigError, ei as activeDeploymentRepoRoot, ft as init_tier_table, g as updateConversationsConfig, gt as validateTieredExecutionConfig, hr as WS_METHODS, i as getConversationsConfig, ii as getDocsIndexPath, in as init_effort_support, jn as EnvironmentDescriptor, jt as getProviderForModel, kr as AgentSnapshot, kt as getKimiAnthropicBaseUrl, li as isDeploymentGenerationRoot, ln as modelSupportsImages, m as loadConfigSync, mr as PanRpcGroup, n as clearConfigCache, ni as getDocsBudgetStatePath, nr as ContextLayerSaveRequest, nt as DEFAULT_JEV_TIMEOUT_MS, o as getOpenInEditorCommand, p as loadConfigNoMigration, pr as PanRpcError, pt as resolveTieredExecutionBlock, qn as CODEX_BEHAVIOR, qt as RETIRED_SUB_ROLES, r as getConversationSearchConfig, ri as getDocsDisableStatePath, rn as effortConfigErrors, rr as ContextPreviewRequest, rt as init_jev, si as getOverdeckHome, sn as hasModelCapability, t as init_config_yaml, tr as isAgentSessionName, tt as DEFAULT_JEV_API_KEY_REF, u as init_load, ui as isDevMode, un as modelSupportsSamplingParams, vn as MODEL_DEPRECATIONS, x as FsError, xr as EDITORS, yt as init_harness_policy, z as getDefaultDocsConfig, zt as getDashScopeUpstreamBaseUrl } from "./config-yaml-IYiKufOR.js";
 import { t as require_toml } from "./toml-CeLDATih.js";
 import { A as init_boot_gates, D as getOverdeckDatabasePath, E as OVERDECK_MIGRATION_PATH, M as resolveBootGates, O as init_paths$1, d as dropPipelineStateMirrorTables, f as getOverdeckDatabase, i as DbLive, j as isPeerDashboardProcess, k as formatBootGateState, l as TmuxLive, p as init_infra, u as dropDeadIssuesForeignKeys } from "./infra-BIeUUG_A.js";
-import { d as getDashboardIdentity, f as isNonPrimaryCheckoutRoot, l as startUatTrainReconciler, m as shouldRefuseHostDashboardPort, p as readHostDashboardApiPort, u as stopUatTrainReconciler } from "./uat-train-qJFsN-X4.js";
+import { d as getDashboardIdentity, f as isNonPrimaryCheckoutRoot, l as startUatTrainReconciler, m as shouldRefuseHostDashboardPort, p as readHostDashboardApiPort, u as stopUatTrainReconciler } from "./uat-train-BI6lNv6X.js";
 import { _ as jsonResponse, a as validateOrigin$1, c as isLoopbackOrigin$1, d as parseAccessTokenScopes, f as refreshAccessTokens, h as startAccessTokenRefresh, l as createAccessToken, m as scopeSatisfies, n as getTrustedOrigins, o as validateOriginHeaders, p as revokeAccessToken, r as invalidateTrustedOriginsCache, s as addSavedTrustedOrigin, t as getHeaderFromMap, u as listAccessTokens, v as jsonStringResponse } from "./origin-validation-FA-4ExJV.js";
 import { c as loadConfigSync$1, n as getDashboardApiUrl, o as init_config } from "./config-ChcpWpGd.js";
 import { a as emitActivityTts, o as emitDashboardLifecycle, r as emitActivityEntry, s as init_activity_logger, t as appendDomainEventAsync } from "./activity-logger-64dEonKB.js";
@@ -26,18 +26,18 @@ import { $ as updateConversationTitle, A as listFavoritedIds, B as resolveEffect
 import { O as saveAgentStateSync, m as init_agent_state, p as getIssuePause } from "./agent-state-e9n26qYW.js";
 import { a as sessionFilePath, i as encodeClaudeProjectDir, n as claudeProjectsRoot, t as claudeProjectDir } from "./claude-code-D1t9sdHM.js";
 import { a as codexHomeDir, l as findRolloutPath, o as codexSessionsRoot, t as codexAgentHome } from "./codex-CVdzfsKh.js";
-import { i as recordCodexRolloutSession } from "./codex-BE1w7ARL.js";
-import { a as prepareHarnessLaunch, c as resolveHarnessBinary } from "./harness-binary-DtPw6bEJ.js";
+import { i as recordCodexRolloutSession } from "./codex-BrY7aOvP.js";
+import { a as prepareHarnessLaunch, c as resolveHarnessBinary } from "./harness-binary-BaN9N-sG.js";
 import { o as resolveMuseSessionPath } from "./muse-DxPGs9oz.js";
 import { n as shellQuote, r as shellQuoteArg, t as init_shell_quote } from "./shell-quote-DhKDnhqg.js";
-import { n as generateLauncherScript } from "./launcher-generator-BofB3FX_.js";
+import { n as generateLauncherScript } from "./launcher-generator-COHAIhyH.js";
 import { i as requireModelOverride, n as MODEL_ID_PATTERN } from "./kimi-claude-routing-C53_lRiN.js";
 import { a as init_ledger, i as getGitHubQuotaDir, n as appendLedgerEntry, r as computeOwnUsageLow, s as readLedgerWindow, t as aggregateLedger } from "./ledger-DBTb1duE.js";
 import { A as setProjectSwarmPolicy, B as init_projects_config_write, C as resolveProjectFromIssue, E as resolveProjectPath, F as canonicalPathAsync, I as findContainingProject, L as init_path_containment, M as updateProjectsConfigAsync, N as validateGauntletConfig, O as setProjectAutoMergeDefault, P as validateVersionSyncConfig, R as init_projects_cache_events, S as resolveInfraRepo, T as resolveProjectKeyForCwdAsync, V as updateProjectsConfigText, _ as listProjectsSync, a as findProjectByPath, b as registerProject, c as getIssuePrefix, d as getProjectSync, g as listProjectsAsync, h as invalidateProjectsConfigCache, i as extractTeamPrefix, k as setProjectMergeTrain, n as PROJECTS_CONFIG_FILE, o as findProjectByTeam, p as init_projects, r as ProjectRenameError, w as resolveProjectFromIssueSync, x as renameProject, y as loadProjectsConfigSync, z as subscribeProjectsConfigInvalidation } from "./projects-CvLJPQjr.js";
 import { n as resolveEffort } from "./resolve-effort-CJ9JcWwm.js";
-import { o as resolveLatestSessionId } from "./activity-CVRFYPg-.js";
-import { n as AgentsResolverLive } from "./agents-DNkpVGda.js";
-import { a as EventStoreServiceLive, c as ReadModelServiceLive, d as toAgentStatus, f as toRole, i as EventStoreService, l as activityEntriesFromStoredEvents, n as IssueLifecycleLive, o as startProjectCiRefillAfterProjectionReady, s as ReadModelService, t as IssueLifecycle, u as toAgentResolution } from "./issue-lifecycle-BlE7L0r7.js";
+import { o as resolveLatestSessionId } from "./activity-h2Q-pMa7.js";
+import { n as AgentsResolverLive } from "./agents-dwMmsEQT.js";
+import { a as EventStoreServiceLive, c as ReadModelServiceLive, d as toAgentStatus, f as toRole, i as EventStoreService, l as activityEntriesFromStoredEvents, n as IssueLifecycleLive, o as startProjectCiRefillAfterProjectionReady, s as ReadModelService, t as IssueLifecycle, u as toAgentResolution } from "./issue-lifecycle-CmbQlAqW.js";
 import { n as ensureSessionContextBriefingFile, r as recordBriefingSessionStart, t as appendFreshBriefingUpdate } from "./briefing-freshness-DGGAxLgu.js";
 import { a as init_pause_gate, c as reconcileGitHubPauseWithSample, m as withGitHubCaller, o as onGitHubRefusal, p as init_caller_context, r as activeGitHubPause, s as readActivePause } from "./pause-gate-D_9Vdcz5.js";
 import { n as runGh, t as init_run_gh } from "./run-gh-pNdoe2og.js";
@@ -54,11 +54,11 @@ import { i as getRepoTargetBranch, l as resolveDefaultBranchForRepo, o as init_p
 import { r as setPipelineHandler, t as init_pipeline_notifier } from "./pipeline-notifier-DbQqFmJ6.js";
 import { n as init_pipeline_journal, o as readPipelineJournal, t as appendPipelineEntry } from "./pipeline-journal-BXAwr-6f.js";
 import { i as init_operator_decision, s as readOpenOperatorDecision } from "./operator-decision-BijGjqPE.js";
-import { C as toChecksState, T as toReviewState, a as forgeForProject, s as init_derived_issue_state, x as readRepoPullRequests } from "./derived-issue-state-QLhfZgf5.js";
-import { f as init_backend_inventory, l as getBackendPanes, p as isBackendInventoryDegraded, u as getBackendPanesForIssue } from "./backend-inventory-CjCALqY9.js";
-import { n as AgentStateServiceLive } from "./agent-state-service-CZjmcB3_.js";
+import { C as toChecksState, T as toReviewState, a as forgeForProject, s as init_derived_issue_state, x as readRepoPullRequests } from "./derived-issue-state-Dz7ti1og.js";
+import { f as init_backend_inventory, l as getBackendPanes, p as isBackendInventoryDegraded, u as getBackendPanesForIssue } from "./backend-inventory-DsbeKiYY.js";
+import { n as AgentStateServiceLive } from "./agent-state-service-CJB8_8Bp.js";
 import { S as observeTerminal, b as controlTerminal, o as init_herdr, r as findHerdrAgent, s as listHerdrAgents, x as init_herdr_stream } from "./herdr-JDVS0aDm.js";
-import { d as resolveLaunchBackend, l as launchAgentPane, n as closeAgentPane, r as closeAgentPaneDetailed, s as init_launch, t as agentPaneExists } from "./launch-DSEY_mt2.js";
+import { d as resolveLaunchBackend, l as launchAgentPane, n as closeAgentPane, r as closeAgentPaneDetailed, s as init_launch, t as agentPaneExists } from "./launch-DF_WD2-a.js";
 import { i as isAlive, o as isConfirmedDead, r as init_liveness } from "./liveness-tAwIFT67.js";
 import { a as init_tracker_config, i as initTrackerConfigCache, n as getLinearApiKey, r as getRallyConfig, t as getGitHubConfig } from "./tracker-config-CSqqOWAc.js";
 import { i as PlanEmpty, l as WorkspaceCreateError, n as AgentStartError, s as TrackerApiError, t as AgentAlreadyRunning, u as WorkspaceNotFound } from "./typed-errors-C_Gz6KlC.js";
@@ -66,13 +66,13 @@ import { r as LinearClientOptionalLive, t as LinearClient } from "./linear-clien
 import { r as GitHubClientOptionalLive, t as GitHubClient } from "./github-client-Cal2eOrK.js";
 import { r as RallyClientOptionalLive, t as RallyClient } from "./rally-client-CPk3PfRQ.js";
 import { i as resolveTrackerType, r as resolveGitHubIssue, t as init_tracker_utils } from "./tracker-utils-vzr-2-12.js";
-import { a as startSharedIssueService, i as issue_service_singleton_exports, n as init_issue_service_singleton, t as getSharedIssueService } from "./issue-service-singleton-QPDr49TB.js";
-import { a as createWorkspace, c as setWorkspaceRunCommand, d as updateWorkspaceLayout, f as upsertProjectFromConfig, h as detectPlatform, i as archiveWorkspace, l as touchWorkspaceAccessed, m as writeWorkspaceIdentity, n as installGitHooksInDir, o as relocateWorkspace, p as readWorkspaceIdentity, s as setWorkspaceFavorite, u as unarchiveWorkspace, y as workspaceNeedsSetup } from "./workspace-manager-yEOe-AK7.js";
-import { $ as deliverMandatoryKimiResumeContext, A as handleConversationSwitchModel, B as tmuxSessionExists, Ct as isValidConversationEffort, D as handleConversationDelete, Dt as sessionOwners, E as handleConversationCreate, Et as isSupersededConversation, G as waitForTmuxSession$1, H as waitForPiTuiReady, I as spawnConversationSession, J as isCoreSkill, L as startConversationModelBackfill, Mt as getDefaultCwd, N as resolveAllowedHarness, O as handleConversationResume, Ot as isRespawnPending, P as shouldReportUnresolvedLiveSession, Q as resolveSkillStates, R as startConversationRuntime, T as handleConversationClearForkState, V as waitForConversationRuntimeReady, X as resolvePackSkill, Y as isPackSkillId, Z as resolvePackToggle, _ as SAFE_EFFORT_PATTERN, _t as validateCwdContainment, a as handleConversationCodexApproval, at as ensureConversationAttachmentDir, c as handleConversationDeliveryMethod, ct as hasConversationAttachment, d as handleConversationThinkingLevel, dt as resolveConversationImageAttachment, et as closeCompanionTerminalForOwner, f as isPiControlChannelHarness, ft as runInBatches, g as validateConversationControlAckOrigin, gt as vaultIdFromBrowseName, h as resolveConversationDeliveryMethod, ht as vaultBrowseConversationName, i as handleConversationAbort, it as cleanupUnreferencedConversationAttachments, j as isInsideGitWorkTree, jt as waitForSessionRespawn, k as handleConversationStop, kt as markRespawnPending, l as handleConversationPiAskAnswer, lt as isManagedConversationAttachmentPath, m as postCodexAppServerOp, mt as upsertVaultBrowseRow, n as deliverConversationViaControlChannel, nt as cleanupConversationAttachments, o as handleConversationCompact, ot as extractConversationAttachmentPaths, p as pickDeliverAs, pt as removeVaultBrowseRow, q as resolveRegisteredProject, rt as cleanupOrphanedConversationAttachments, s as handleConversationControlAck, st as getConversationAttachmentsRoot, t as codexConversationPendingInput, tt as getCompanionTerminalLifecycle, u as handleConversationPlanAction, ut as removeConversationAttachment, vt as writeConversationPaneRole, w as generateConversationName, wt as resolveConversationEffort, x as conversationSessionAliveFromState, y as conversationNeedsRunningRepair, z as stopConversationRuntime } from "./conversation-delivery-Dn6b4mUU.js";
-import { i as import_websocket_server, r as import_websocket } from "./policy-context-DlF2pBlT.js";
+import { a as startSharedIssueService, i as issue_service_singleton_exports, n as init_issue_service_singleton, t as getSharedIssueService } from "./issue-service-singleton-DwYi9Oie.js";
+import { a as createWorkspace, c as setWorkspaceRunCommand, d as updateWorkspaceLayout, f as upsertProjectFromConfig, h as detectPlatform, i as archiveWorkspace, l as touchWorkspaceAccessed, m as writeWorkspaceIdentity, n as installGitHooksInDir, o as relocateWorkspace, p as readWorkspaceIdentity, s as setWorkspaceFavorite, u as unarchiveWorkspace, y as workspaceNeedsSetup } from "./workspace-manager-t2ylzCn0.js";
+import { $ as deliverMandatoryKimiResumeContext, A as handleConversationSwitchModel, B as tmuxSessionExists, Ct as isValidConversationEffort, D as handleConversationDelete, Dt as sessionOwners, E as handleConversationCreate, Et as isSupersededConversation, G as waitForTmuxSession$1, H as waitForPiTuiReady, I as spawnConversationSession, J as isCoreSkill, L as startConversationModelBackfill, Mt as getDefaultCwd, N as resolveAllowedHarness, O as handleConversationResume, Ot as isRespawnPending, P as shouldReportUnresolvedLiveSession, Q as resolveSkillStates, R as startConversationRuntime, T as handleConversationClearForkState, V as waitForConversationRuntimeReady, X as resolvePackSkill, Y as isPackSkillId, Z as resolvePackToggle, _ as SAFE_EFFORT_PATTERN, _t as validateCwdContainment, a as handleConversationCodexApproval, at as ensureConversationAttachmentDir, c as handleConversationDeliveryMethod, ct as hasConversationAttachment, d as handleConversationThinkingLevel, dt as resolveConversationImageAttachment, et as closeCompanionTerminalForOwner, f as isPiControlChannelHarness, ft as runInBatches, g as validateConversationControlAckOrigin, gt as vaultIdFromBrowseName, h as resolveConversationDeliveryMethod, ht as vaultBrowseConversationName, i as handleConversationAbort, it as cleanupUnreferencedConversationAttachments, j as isInsideGitWorkTree, jt as waitForSessionRespawn, k as handleConversationStop, kt as markRespawnPending, l as handleConversationPiAskAnswer, lt as isManagedConversationAttachmentPath, m as postCodexAppServerOp, mt as upsertVaultBrowseRow, n as deliverConversationViaControlChannel, nt as cleanupConversationAttachments, o as handleConversationCompact, ot as extractConversationAttachmentPaths, p as pickDeliverAs, pt as removeVaultBrowseRow, q as resolveRegisteredProject, rt as cleanupOrphanedConversationAttachments, s as handleConversationControlAck, st as getConversationAttachmentsRoot, t as codexConversationPendingInput, tt as getCompanionTerminalLifecycle, u as handleConversationPlanAction, ut as removeConversationAttachment, vt as writeConversationPaneRole, w as generateConversationName, wt as resolveConversationEffort, x as conversationSessionAliveFromState, y as conversationNeedsRunningRepair, z as stopConversationRuntime } from "./conversation-delivery-C0Q7Ew-t.js";
+import { i as import_websocket_server, r as import_websocket } from "./policy-context-CebkQTkr.js";
 import { _ as requiredScopeFor, a as dashboardSessionCookieHeader, c as isLoopbackPeer, d as rejectUnsafeDashboardMutationRequest, f as resolveDashboardCredential, g as gatePathname, h as WS_TERMINAL_SCOPE, i as dashboardDeviceTokenFromHeaders, l as rejectUnauthorizedDashboardRequest, m as readRemoteAccessConfig, n as dashboardCsrfToken, o as hasDashboardInternalToken, p as invalidateRemoteAccessConfig, r as dashboardDeviceCookieHeader, s as hasProxyForwardingHeader, t as credentialScopes, u as rejectUnauthorizedDashboardSessionMintRequest, v as httpHandler } from "./dashboard-auth-DmNykD8y.js";
-import { $t as CodexAuthCheckError, E as messageAgent, Gt as probeTranscriptSince, Jt as captureLiveAgentPaneText, K as assessCpuPressure, M as operatorInterventionEvent, Ot as resolveImplicitStaffing, Wt as captureTranscriptUserRecordSnapshot, Xt as listLiveAgentIds, Yt as isListedOrRunning, Zt as listLiveAgentPanes, c as countPendingAskUserQuestionsForAgent, dt as saveCloisterConfigSync, en as checkCodexAuthStatus, f as getAgentWorkspace, ft as shouldAutoStart, g as detectAwaitingInputFromPane, h as detectAwaitingInputForAgent, it as listRunningAgentsSync, k as ensureMainInputTarget, l as getAgentJsonlMtime, m as scanPendingInputs, mt as deliverAgentMessage, nt as listAgentStates, ot as emergencyBrake, qt as subagentsDirFor, rt as listRunningAgents, s as computeAgentEnrichment, st as DEFAULT_CLOISTER_CONFIG, ut as loadCloisterConfigSync, yt as waitForManagedKimiSessionId } from "./agents-CKFhKqJp.js";
-import { i as listLiveConversationSessions$1, n as conversationHarnessAlive, r as conversationSessionAlive, t as closeConversationPane } from "./conversation-liveness-Cq4TNxqa.js";
+import { $t as CodexAuthCheckError, E as messageAgent, Gt as probeTranscriptSince, Jt as captureLiveAgentPaneText, K as assessCpuPressure, M as operatorInterventionEvent, Ot as resolveImplicitStaffing, Wt as captureTranscriptUserRecordSnapshot, Xt as listLiveAgentIds, Yt as isListedOrRunning, Zt as listLiveAgentPanes, c as countPendingAskUserQuestionsForAgent, dt as saveCloisterConfigSync, en as checkCodexAuthStatus, f as getAgentWorkspace, ft as shouldAutoStart, g as detectAwaitingInputFromPane, h as detectAwaitingInputForAgent, it as listRunningAgentsSync, k as ensureMainInputTarget, l as getAgentJsonlMtime, m as scanPendingInputs, mt as deliverAgentMessage, nt as listAgentStates, ot as emergencyBrake, qt as subagentsDirFor, rt as listRunningAgents, s as computeAgentEnrichment, st as DEFAULT_CLOISTER_CONFIG, tn as getNativeCodexAuthPath, ut as loadCloisterConfigSync, yt as waitForManagedKimiSessionId } from "./agents-DebP6rx9.js";
+import { i as listLiveConversationSessions$1, n as conversationHarnessAlive, r as conversationSessionAlive, t as closeConversationPane } from "./conversation-liveness-g3nFofTZ.js";
 import { i as clearQueryExpansionCache, n as injectPromptTimeMemory, r as resolveKnowledgeBundleRoot } from "./injection-DYeP27Hj.js";
 import { a as runMemoryFtsStatement, i as closeMemoryFtsDatabases, o as runMemoryFtsTransaction, t as buildMatchQuery } from "./search-KiZEDKkO.js";
 import { t as spawnModuleWorker } from "./module-worker-FeMSTv6L.js";
@@ -84,82 +84,84 @@ import { a as refreshRuntimeCensus, i as panePidsForSession, n as getRuntimeCens
 import { a as scan, c as CostThresholdError, d as parseRelativeTime, i as reclassifyUnknownCostEvents, n as reconcile, p as embed, r as recordCostEventsThroughOverdeck } from "./reconciler-1FAEr8GF.js";
 import { c as readEventsSince, l as tailEvents, o as readEvents, r as deduplicateEvents, t as recordBackgroundAiCost } from "./cost-Bd4NL5Rf.js";
 import { c as isCloisterSpawnsPaused, d as isFlywheelAutoPickupBacklog, f as isFlywheelRequireUatBeforeMerge, h as setDeaconGloballyPaused, l as isConversationsAutoArchiveOnMerge, m as setCloisterSpawnsPaused, p as isMergeTrainEnabled, s as getSetting, u as isDeaconGloballyPaused, x as setSetting, y as setLastCleanShutdownAt } from "./control-settings-RLL3FPGD.js";
-import { A as recordExternalTranscript, B as validateAgentRuntimeEventAuth, C as cachedTranscriptTurnComplete, D as listExternalRegistrations, E as hasRecordedTranscript, F as AUTOMATIC_SPAWN_GUARDRAIL_ACKNOWLEDGEMENT, G as sharedTranscriptParser, I as evaluateSpawnGuardrails, K as runDashboardDbJob, L as invalidateAgentsCache, M as checkRegularFileUnder, N as checkTranscriptPath, O as readExternalRegistration, P as readRegularFile, R as isInternalAgentRequest, S as RESERVED_EXTERNAL_SOURCES, T as externalLiveness, V as panCliInvocation, W as parseStateFromSnapshot, _ as listTranscriptSubagents, b as EXTERNAL_SOURCE_RE, c as saveAgentStateAndEmitEventProgram, d as resolvePolicy, f as ComposerCommandParseError, g as listAgentSubagents, i as readJsonBody$26, j as registerExternalAgent, k as readPidStartTime, l as composerCommandResultHttpStatus, m as composerCommandConfirmationFromBody, o as agentsRouteLayer, p as ComposerCommandConfirmationError, s as saveAgentStateAndEmitEvent, t as specialistsRouteLayer, u as handleComposerCommandMessage, v as EXTERNAL_AGENT_PREFIX, w as externalAgentId, x as ExternalPathError, y as EXTERNAL_FIELD_ID_RE, z as resolveRequestedStartedBy } from "./specialists-DPjE2JBt.js";
-import { _ as processPendingFeedbackDeliveries, b as getWorkspacePathForIssue, d as listGitOperations, f as syncWalFromAllProjects, g as syncCache, h as rebuildCache, m as getCostsForIssue, p as migrateAllSessions, t as workspacesRouteLayer, u as resumeQueuedMerges, v as getCachedRunningAgents, y as resolveIssueHeadlineCost } from "./workspaces-DVWUbrua.js";
-import { a as listCodexSubagents, n as startSubagentListPolling, o as resolveCodexSubagentTranscript, r as subagentTranscriptPath } from "./subagents-DNw4YyMa.js";
+import { A as recordExternalTranscript, B as validateAgentRuntimeEventAuth, C as cachedTranscriptTurnComplete, D as listExternalRegistrations, E as hasRecordedTranscript, F as AUTOMATIC_SPAWN_GUARDRAIL_ACKNOWLEDGEMENT, G as sharedTranscriptParser, I as evaluateSpawnGuardrails, K as runDashboardDbJob, L as invalidateAgentsCache, M as checkRegularFileUnder, N as checkTranscriptPath, O as readExternalRegistration, P as readRegularFile, R as isInternalAgentRequest, S as RESERVED_EXTERNAL_SOURCES, T as externalLiveness, V as panCliInvocation, W as parseStateFromSnapshot, _ as listTranscriptSubagents, b as EXTERNAL_SOURCE_RE, c as saveAgentStateAndEmitEventProgram, d as resolvePolicy, f as ComposerCommandParseError, g as listAgentSubagents, i as readJsonBody$26, j as registerExternalAgent, k as readPidStartTime, l as composerCommandResultHttpStatus, m as composerCommandConfirmationFromBody, o as agentsRouteLayer, p as ComposerCommandConfirmationError, s as saveAgentStateAndEmitEvent, t as specialistsRouteLayer, u as handleComposerCommandMessage, v as EXTERNAL_AGENT_PREFIX, w as externalAgentId, x as ExternalPathError, y as EXTERNAL_FIELD_ID_RE, z as resolveRequestedStartedBy } from "./specialists-BsiHHXL7.js";
+import { _ as processPendingFeedbackDeliveries, b as getWorkspacePathForIssue, d as listGitOperations, f as syncWalFromAllProjects, g as syncCache, h as rebuildCache, m as getCostsForIssue, p as migrateAllSessions, t as workspacesRouteLayer, u as resumeQueuedMerges, v as getCachedRunningAgents, y as resolveIssueHeadlineCost } from "./workspaces-C7sOgLNZ.js";
+import { a as listCodexSubagents, n as startSubagentListPolling, o as resolveCodexSubagentTranscript, r as subagentTranscriptPath } from "./subagents-P7wfucdb.js";
 import { t as readActiveDashboardBundle } from "./active-dashboard-bundle-uChaT_M9.js";
 import { n as getOpenAIAuthStatus, t as getCodexAuthPath } from "./openai-auth-BypG5FGt.js";
 import { i as getClaudePermissionFlagsString, l as getProviderEnvForModel } from "./claude-permissions-BT90X1o5.js";
 import { t as getClaudeAuthStatus } from "./claude-auth-DawrVBwQ.js";
-import { A as configDisabledRuleNames, F as workspaceContextWithoutProjectLayer, N as renderForHarness, P as validateTemplate, f as injectPiConversationMemory, l as getProviderAuthMode } from "./runtime-command-D0JVmWKZ.js";
+import { A as configDisabledRuleNames, F as workspaceContextWithoutProjectLayer, N as renderForHarness, P as validateTemplate, f as injectPiConversationMemory, l as getProviderAuthMode } from "./runtime-command-0C3oTZGN.js";
 import { a as piGlobalContextFile, c as resolveWorkspaceContextFile, i as globalContextFile$1, l as workspaceContextFile, n as codexGlobalContextFile, r as ensureProjectLayer, s as resolveProjectContextFile, t as claudeGlobalContextFile } from "./layers-DKHBGSsn.js";
 import { D as isAdvisoryCheckName, E as verifyAppCanMerge, a as getAppRateLimit, f as isGitHubAppConfigured, u as getMergeBackendStatus } from "./github-app-B2_6crSm.js";
 import { r as lookupPullRequestNumberForBranch, t as githubPrLookupSource } from "./github-pr-lookup-Dcm7imyp.js";
 import { a as fetchIssuePullRequestDiff, c as getCachedIssuePrTabResponse, i as fetchIssuePullRequestDetails, l as getIssuePrTabCacheGeneration, n as fetchIssueCheckRuns, r as fetchIssuePullRequest, s as bumpIssuePrTabCacheGeneration, u as setCachedIssuePrTabResponse } from "./pull-requests-CRXySAoR.js";
 import { a as getPrFacts } from "./pr-facts-C9jNdDiz.js";
 import { i as resolveVerificationTestsMode, n as isCiTestCheckName, t as TEST_GATE_NAME } from "./verification-tests-mode-CCTmNT_N.js";
-import { m as planningHandoffStartedBy } from "./auto-spawn-consent-DRgQbl8k.js";
-import { t as readCpuPsi } from "./cpu-psi-BN99YdGz.js";
+import { m as planningHandoffStartedBy } from "./auto-spawn-consent-BxXl-3y7.js";
+import { t as readCpuPsi } from "./cpu-psi-DvzVl1bx.js";
 import { t as appendContinueSessionEntryForIssue } from "./lifecycle-io-D4t1Xhjj.js";
 import { n as resolveConversationGitInfo } from "./git-info-CMizfKid.js";
-import { r as loadIssueStatesForProject, t as getDerivedIssueState } from "./derived-issue-state-CCHbqKjW.js";
-import { _ as classifyAgentHealth, g as startSmeeProcess, h as isSmeeConfigured, l as getSystemHealthEvidenceSnapshot, o as getAcceptedSystemHealthSnapshot, s as getDeployStaleness } from "./system-health-service-7C9fafx7.js";
-import { c as formatUptime, l as getContainerHistory, o as buildResourceStacks, s as loadStackIssueStates, u as getCurrentDockerStats } from "./memory-governor-BQg4GOEF.js";
-import { a as init_worktree_ops, p as validateFeatureName, s as isPreWorktreeMetadataOnlyDir } from "./worktree-ops-DzDaxzI6.js";
+import { r as loadIssueStatesForProject, t as getDerivedIssueState } from "./derived-issue-state-CmvMPi-R.js";
+import { _ as classifyAgentHealth, g as startSmeeProcess, h as isSmeeConfigured, l as getSystemHealthEvidenceSnapshot, o as getAcceptedSystemHealthSnapshot, s as getDeployStaleness } from "./system-health-service-CjdWgKic.js";
+import { c as formatUptime, l as getContainerHistory, o as buildResourceStacks, s as loadStackIssueStates, u as getCurrentDockerStats } from "./memory-governor-C3T769G6.js";
+import { a as init_worktree_ops, p as validateFeatureName, s as isPreWorktreeMetadataOnlyDir } from "./worktree-ops-D_IXGBtP.js";
 import { n as init_workspace_config, t as getDefaultWorkspaceConfig } from "./workspace-config-C47auFin.js";
 import { o as promoteWorkspacePrdDraft, r as checkPrdGate } from "./pan-dir-Dhqz-1n-.js";
 import { t as createInFlightGuard } from "./in-flight-guard-CxK3Tq0I.js";
 import { n as getGuardedReviewRequester } from "./request-review-pipeline-BsiltUUm.js";
-import { _ as getAgentHealth, a as cleanupClosedIssueAgentDirectories, c as setAgentStoppedNotifier, d as getWorkspaceGitState, f as pullWorkspaceFastForward, g as generateHealthSummary, i as analyzeSwarmReadiness, n as readCloisterStateFile, o as DEACON_LITE_INTERVAL_MS, t as getCloisterService, u as recordHandoffDeferred, v as getAgentsNeedingAttention } from "./service-DKHnfIwb.js";
+import { _ as getAgentHealth, a as cleanupClosedIssueAgentDirectories, c as setAgentStoppedNotifier, d as getWorkspaceGitState, f as pullWorkspaceFastForward, g as generateHealthSummary, i as analyzeSwarmReadiness, n as readCloisterStateFile, o as DEACON_LITE_INTERVAL_MS, t as getCloisterService, u as recordHandoffDeferred, v as getAgentsNeedingAttention } from "./service-Bn8Zn0WW.js";
 import { t as getIssueWorkspacePath } from "./issue-projects-CWtGfhcl.js";
 import { i as init_git_utils, r as formatAnchorShort, s as snapshotWorkspaceHeads } from "./git-utils-BxC6cp8c.js";
 import { n as isIssueClosed, r as isTrackerIssueClosed, t as clearIssueClosedCache } from "./issue-closed-EPXrH2QX.js";
-import { i as isBranchMerged } from "./closed-issue-reaper-DnaFCYJk.js";
+import { i as isBranchMerged } from "./closed-issue-reaper-tjnA5V8Z.js";
 import { a as writeVerificationArtifact, r as readVerificationArtifact } from "./verification-artifact-Cj3hHxpA.js";
-import { C as computeWaves, S as computeStats, T as selectNeedsPlanning, _ as VETOED_LABEL, a as liveOrderIssueLookup, b as computeEpicGroups, c as orderIssueStoreStatus, g as RELEASED_LABEL, h as READY_LABEL, i as listBooks, l as writeOrderBookState, m as PARKED_LABEL, n as computeBookProgress, o as membership, p as OBJECTION_LABEL, r as getBookAsync, s as normalizeOrderIssueId, t as backlogCandidates, u as BLOCKS_MAIN_LABEL, v as classifyIssue, w as normalizeGate, x as computeLanes, y as computeCohort } from "./resolver-CAP4HecA.js";
-import { a as spawnPlanningSession, r as resolveAutoSpawnOnFinalize } from "./spawn-planning-session-38jno6va.js";
+import { C as computeWaves, S as computeStats, T as selectNeedsPlanning, _ as VETOED_LABEL, a as liveOrderIssueLookup, b as computeEpicGroups, c as orderIssueStoreStatus, g as RELEASED_LABEL, h as READY_LABEL, i as listBooks, l as writeOrderBookState, m as PARKED_LABEL, n as computeBookProgress, o as membership, p as OBJECTION_LABEL, r as getBookAsync, s as normalizeOrderIssueId, t as backlogCandidates, u as BLOCKS_MAIN_LABEL, v as classifyIssue, w as normalizeGate, x as computeLanes, y as computeCohort } from "./resolver-TNBoD1Lh.js";
+import { a as spawnPlanningSession, r as resolveAutoSpawnOnFinalize } from "./spawn-planning-session-DEr2g-vN.js";
 import { n as writeSequenceMd, t as parseSequenceMd } from "./sequence-io-TLazzrgD.js";
 import { D as listUatGenerations, d as listDuePendingAutoMerges, g as markMerged, h as markMergeRetriesExhausted, m as markFailed, p as markBlocked, v as requeueToPending, x as transitionToMerging } from "./merge-sync-B0eZ0QwC.js";
 import "./forge-Dda6MokF.js";
-import { r as getRuntimeForAgent } from "./runtimes-DUvSjnkK.js";
-import "./specialists-Dhqnld3A.js";
+import { r as getRuntimeForAgent } from "./runtimes-CiPufB1e.js";
+import "./specialists-C5WxILVV.js";
 import { a as getReviewerSessionName } from "./specialists-registry-DMdyaBq4.js";
 import { a as loadWorkspaceMetadata } from "./workspace-metadata-Bw3zviR6.js";
-import { c as readTestSkipWaiver, d as planFinalizedHash, f as stableStringify, l as waiverCoversHead, o as buildFinalFailureInstructions, p as stripAllowedFields, s as grantTestSkipWaiver, u as formatPlanFinalizedTrailer } from "./verification-runner-BMtIaVjU.js";
+import { c as readTestSkipWaiver, d as planFinalizedHash, f as stableStringify, l as waiverCoversHead, o as buildFinalFailureInstructions, p as stripAllowedFields, s as grantTestSkipWaiver, u as formatPlanFinalizedTrailer } from "./verification-runner-D0DG7ixm.js";
 import { i as pushPlanArtifacts, n as commitPlanArtifacts, r as planArtifactCommitMessage } from "./merge-rebase-CfIE1tcQ.js";
-import { _ as spawnRemoteAgent, a as getRemoteAgentOutput, f as loadRemoteAgentState, g as sendToRemoteAgent, l as killRemoteAgent, n as checkRemoteSpendCap } from "./remote-agents-9UKtOTeT.js";
-import { S as unavailablePipelineMembership, _ as isDiscoverableAgentSession, b as refreshMembershipSnapshotsForProjects, c as enqueueProjectsResourceRefreshStaggered, d as startProjectResourceConvergence, f as stopProjectResourceRefreshQueue, g as groupResourceAllocatedIssuesByProject, h as getResourceDetailIdentifiers, l as getProjectResourceRefreshQueueState, m as getCachedResourceAllocatedIssues, p as whenProjectResourceRefreshIdle, s as enqueueProjectsResourceRefresh, t as PROJECT_RESOURCE_BOOT_STAGGER_WINDOW_MS, v as sanitizeResourceAllocatedIssues, x as summarizePipelineMembership, y as readPipelineMembershipSnapshotsForProjects } from "./project-resource-refresh-queue-BD7xaiwB.js";
+import { _ as spawnRemoteAgent, a as getRemoteAgentOutput, f as loadRemoteAgentState, g as sendToRemoteAgent, l as killRemoteAgent, n as checkRemoteSpendCap } from "./remote-agents-D6G8Z0T_.js";
+import { _ as isDiscoverableAgentSession, c as enqueueProjectsResourceRefreshStaggered, d as startProjectResourceConvergence, f as stopProjectResourceRefreshQueue, g as groupResourceAllocatedIssuesByProject, h as getResourceDetailIdentifiers, l as getProjectResourceRefreshQueueState, m as getCachedResourceAllocatedIssues, p as whenProjectResourceRefreshIdle, s as enqueueProjectsResourceRefresh, t as PROJECT_RESOURCE_BOOT_STAGGER_WINDOW_MS, v as sanitizeResourceAllocatedIssues } from "./project-resource-refresh-queue-Dx1QPkGs.js";
 import { a as readPrdContent, r as findPrdAnywhere } from "./prd-locations-C_I2h6ui.js";
 import { h as parseIssueIdFromText } from "./pipeline-membership-gather-STT4bndD.js";
-import { n as DOD_ROWS } from "./dod-C6qNQ8O3.js";
-import { a as generateFallbackSummary, c as handoffPreconditionFallbackReason, f as requestHandoffFromAgent, h as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as logHandoffFallback, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, t as HandoffAuthorModelNotConfiguredError, u as prependFallbackFocus } from "./summary-fork-BfuGi-S2.js";
-import { a as isCompacting, n as compactConversationNative, s as shouldInterceptManualCompact } from "./conversation-compaction-Dm4_bCqZ.js";
-import { C as derivePromptTitle, D as readConversationInputTarget, E as resolveDiscoveredSessionFile, S as handleConversationPaneChoiceAnswer, T as summarizeTranscriptTitle, _ as conversationPendingPermission, a as generateAiTitle, b as listPermissionRequests, c as getConversationMessageLocator, d as getConversationsPendingInputFeed, f as handleConversationMove, g as refreshBrowseCache, h as retitleConversation, i as conversationTranscriptMissing, l as getConversationMessagesRead, m as resolveSessionFile, n as configuredTitleModel, o as getCachedMessages, p as patchConversationTitle, r as conversationNeedsTerminal, s as getConversationAbout, t as askUserQuestionSnapshotFromScan, u as getConversationRead, v as handleConversationPermissionAnswer, w as serializeConversationTranscript, x as recordPermissionRequest, y as clearPermissionRequest } from "./conversation-reads-CGepvSWx.js";
-import { a as listConversationPullRequests, c as listPullRequestLinksForConversations, d as upsertBranchPullRequestLink, i as listAllPullRequestLinks, l as setPullRequestLinkSnapshot, n as linkConversationPullRequest, o as listConversationsForPullRequestSync, s as listConversationsLinkedToPullRequest, t as emitConversationPullRequestsChanged, u as unlinkConversationPullRequest } from "./conversation-pull-requests-Bu30dOQv.js";
-import { A as vaultDir, D as withFileLock, E as setOwnedTail, O as VAULT_OFF_MESSAGE, S as listOwned, T as replaceListCache, a as decryptRef, b as tailOf, c as encryptRef, d as parseKeyRing, f as readMachineRecord, h as refName, i as decodeWipParts, j as writeVaultConfig, k as readVaultConfig, l as isTombstone, m as readVaultHeader, n as VaultAuthenticationError, p as readSessionRecord, t as HEADER_REF_NAME, u as newVaultHeader, w as readLocalIndex } from "./format-QXO0qqJo.js";
-import { n as pidsWithCwdUnder } from "./teardown-workspace-BOnPHDQi.js";
-import { n as writeFeedbackFile } from "./feedback-writer-DSEPHMwz.js";
-import { c as isFinalVerificationAttempt, d as readVerificationCycleState, f as shouldEscalateVerificationFailure, l as readCiTestFailureStreak, u as readLatestCiTestResult } from "./verification-escalation-BOuG6ixX.js";
-import { a as getAnalyticsService, c as ensureOperatorHash, d as resolveTelemetryEnabled, f as telemetryEnvironmentForcesOff, i as getAnalyticsClientTypeForProcess, l as getOperatorHashIfEnabled, o as synchronizeAnalyticsServices, s as trackAnalyticsTask, u as getOrCreateInstallId } from "./pipeline-BxDHIXwk.js";
-import { a as readCurrentStatus, l as maybeTriggerStatusRollup, s as readRecentObservations, u as writePendingTurn } from "./rollup-Bm6X7jIb.js";
-import { r as probeBranchConflictPaths } from "./conflict-gate-Domf8Fvr.js";
-import { o as isAutoMergeEligible } from "./auto-merge-eligibility-De2WgmQS.js";
-import { n as evaluateConflictRepairGate, r as evaluateIssueMergeGate } from "./merge-gate-LOtvWv5K.js";
-import { n as surfaceIssueFeedbackNeedsYou, t as resolveIssueFeedbackTarget } from "./feedback-target-DmQ249DE.js";
-import { t as getAgentCommand } from "./settings-5VVqbwVL.js";
-import { n as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-qoNG2iir.js";
-import { A as assertRefName, C as writeMaterialization, D as VaultOfflineError, E as VAULT_FORMAT_MARKER_FILE, M as objectRelativePath, N as ensureEnvironmentIdentity, O as assertDistinctRefNames, S as planMaterialization, T as VAULT_FORMAT_MARKER, _ as isPathUnder$1, a as confirmEviction, b as nativeFileContent, c as readEvictionBatch, f as settle$1, g as runWipGit, h as latestWipEntry, i as clearBatch, j as assertSlotName, k as assertNotSlotName, l as reofferEntry, m as buildWipCommit, n as batchFingerprint, o as declineEntry, p as WipGitError, u as scanEligible, v as compareCwdState, w as KEYWRAP_OBJECT_NAME, x as planCodexMaterialization, y as readCwdState } from "./evict-Dhzce_bB.js";
-import { t as detectProviderEnvConflicts } from "./claude-settings-overlay-DX8SS3mU.js";
-import { a as projectIdFromPath, i as parentSessionIdFromPath, n as dimensionsForModel, o as sessionIdFromPath, r as openEmbeddingsDb } from "./conversations-search-CDvHCyYe.js";
-import { r as getShipLog } from "./ship-log-CRk1pL0V.js";
-import { l as mergeTrainRouteLayer } from "./merge-train-Cee9LY5p.js";
-import { a as resumeFlywheel, c as readFlywheelReportFile, d as FlywheelNotRunning, f as FlywheelOrphanSession, g as resolveFlywheelProjectRoot, h as readFlywheelRun, i as requestFlywheelReport, l as readFlywheelStateFile, m as deriveFlywheelStatus, n as abortFlywheel, o as startFlywheel, p as FlywheelPausedExists, r as pauseFlywheel, s as stopFlywheel, t as computeSubstrateStats, u as FlywheelAlreadyRunning } from "./substrate-stats-DuuksQHp.js";
-import { a as listConfiguredModels, c as detectClaudeInstall, l as listClaudeBinariesOnPath, r as evaluateClaudeCodeRequirements, s as claudeCodeUpgradePlan, u as readClaudeCodeVersion } from "./requirements-COv0qjkH.js";
-import { i as appendLinearMcpAuthHealthyEvent, r as appendLinearMcpAuthCallbackRelayedEvent, s as resolveLinearMcpAuthIntervention } from "./linear-mcp-auth-COqdLkXb.js";
-import { n as getSequencerRunStatus, r as spawnSequencerAgent, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-BGwo_hJY.js";
-import "./supervisor-CWskvoz3.js";
-import { t as buildConfirmedDeadAgentEvents } from "./agent-status-events-HU33uOJc.js";
-import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-BiGSCyKD.js";
+import { a as refreshMembershipSnapshotsForProjects, i as readPipelineMembershipSnapshotsForProjects, o as summarizePipelineMembership, s as unavailablePipelineMembership } from "./pipeline-membership-BbdiZQ2g.js";
+import { n as DOD_ROWS } from "./dod-BJP9kMFG.js";
+import { a as generateFallbackSummary, c as handoffPreconditionFallbackReason, f as requestHandoffFromAgent, h as getTranscriptAdapter, i as copySessionFromCompactBoundary, l as logHandoffFallback, o as generateSummaryForFork, p as reserveSummaryForkSession, r as authorHandoffExternal, s as handoffFailureReason, t as HandoffAuthorModelNotConfiguredError, u as prependFallbackFocus } from "./summary-fork-DQGtPP_x.js";
+import { a as isCompacting, n as compactConversationNative, s as shouldInterceptManualCompact } from "./conversation-compaction-BLDpoKfB.js";
+import { C as derivePromptTitle, D as readConversationInputTarget, E as resolveDiscoveredSessionFile, S as handleConversationPaneChoiceAnswer, T as summarizeTranscriptTitle, _ as conversationPendingPermission, a as generateAiTitle, b as listPermissionRequests, c as getConversationMessageLocator, d as getConversationsPendingInputFeed, f as handleConversationMove, g as refreshBrowseCache, h as retitleConversation, i as conversationTranscriptMissing, l as getConversationMessagesRead, m as resolveSessionFile, n as configuredTitleModel, o as getCachedMessages, p as patchConversationTitle, r as conversationNeedsTerminal, s as getConversationAbout, t as askUserQuestionSnapshotFromScan, u as getConversationRead, v as handleConversationPermissionAnswer, w as serializeConversationTranscript, x as recordPermissionRequest, y as clearPermissionRequest } from "./conversation-reads-0fCsCPQe.js";
+import { a as listConversationPullRequests, c as listPullRequestLinksForConversations, d as upsertBranchPullRequestLink, i as listAllPullRequestLinks, l as setPullRequestLinkSnapshot, n as linkConversationPullRequest, o as listConversationsForPullRequestSync, s as listConversationsLinkedToPullRequest, t as emitConversationPullRequestsChanged, u as unlinkConversationPullRequest } from "./conversation-pull-requests-VQwME1F1.js";
+import { A as vaultDir, D as withFileLock, E as setOwnedTail, O as VAULT_OFF_MESSAGE, S as listOwned, T as replaceListCache, a as decryptRef, b as tailOf, c as encryptRef, d as parseKeyRing, f as readMachineRecord, h as refName, i as decodeWipParts, j as writeVaultConfig, k as readVaultConfig, l as isTombstone, m as readVaultHeader, n as VaultAuthenticationError, p as readSessionRecord, t as HEADER_REF_NAME, u as newVaultHeader, w as readLocalIndex } from "./format-3trt48Iz.js";
+import { n as pidsWithCwdUnder } from "./teardown-workspace-Dvwa4r5M.js";
+import { n as writeFeedbackFile } from "./feedback-writer-g9cmlhQU.js";
+import { c as isFinalVerificationAttempt, d as readVerificationCycleState, f as shouldEscalateVerificationFailure, l as readCiTestFailureStreak, u as readLatestCiTestResult } from "./verification-escalation-8_JfF7-z.js";
+import { a as getAnalyticsService, c as ensureOperatorHash, d as resolveTelemetryEnabled, f as telemetryEnvironmentForcesOff, i as getAnalyticsClientTypeForProcess, l as getOperatorHashIfEnabled, o as synchronizeAnalyticsServices, s as trackAnalyticsTask, u as getOrCreateInstallId } from "./pipeline-CZPx_h0w.js";
+import { a as readCurrentStatus, l as maybeTriggerStatusRollup, s as readRecentObservations, u as writePendingTurn } from "./rollup-8hDNviZE.js";
+import { r as probeBranchConflictPaths } from "./conflict-gate-CPbG8VXI.js";
+import { o as isAutoMergeEligible } from "./auto-merge-eligibility-f1D8TwAj.js";
+import { n as evaluateConflictRepairGate, r as evaluateIssueMergeGate } from "./merge-gate-D5zTeaC0.js";
+import { n as surfaceIssueFeedbackNeedsYou, t as resolveIssueFeedbackTarget } from "./feedback-target-BYLtF8vX.js";
+import { t as getAgentCommand } from "./settings-DNxbkedU.js";
+import { n as isRemoteAvailable, t as createFlyProviderFromConfig } from "./remote-Day75qqe.js";
+import { A as assertRefName, C as writeMaterialization, D as VaultOfflineError, E as VAULT_FORMAT_MARKER_FILE, M as objectRelativePath, N as ensureEnvironmentIdentity, O as assertDistinctRefNames, S as planMaterialization, T as VAULT_FORMAT_MARKER, _ as isPathUnder$1, a as confirmEviction, b as nativeFileContent, c as readEvictionBatch, f as settle$1, g as runWipGit, h as latestWipEntry, i as clearBatch, j as assertSlotName, k as assertNotSlotName, l as reofferEntry, m as buildWipCommit, n as batchFingerprint, o as declineEntry, p as WipGitError, u as scanEligible, v as compareCwdState, w as KEYWRAP_OBJECT_NAME, x as planCodexMaterialization, y as readCwdState } from "./evict-l0JJZ11s.js";
+import { t as detectProviderEnvConflicts } from "./claude-settings-overlay-BKk6aPyn.js";
+import { a as projectIdFromPath, i as parentSessionIdFromPath, n as dimensionsForModel, o as sessionIdFromPath, r as openEmbeddingsDb } from "./conversations-search-CS0COdna.js";
+import { a as parseRepoUrl, i as inferProjectGithubRepo } from "./infer-tracker-CwOO7_gU.js";
+import { r as getShipLog } from "./ship-log-Di-_dljC.js";
+import { l as mergeTrainRouteLayer } from "./merge-train-Dg5cr8mS.js";
+import { a as resumeFlywheel, c as readFlywheelReportFile, d as FlywheelNotRunning, f as FlywheelOrphanSession, g as resolveFlywheelProjectRoot, h as readFlywheelRun, i as requestFlywheelReport, l as readFlywheelStateFile, m as deriveFlywheelStatus, n as abortFlywheel, o as startFlywheel, p as FlywheelPausedExists, r as pauseFlywheel, s as stopFlywheel, t as computeSubstrateStats, u as FlywheelAlreadyRunning } from "./substrate-stats-0PCKLsMv.js";
+import { a as listConfiguredModels, c as detectClaudeInstall, l as listClaudeBinariesOnPath, r as evaluateClaudeCodeRequirements, s as claudeCodeUpgradePlan, u as readClaudeCodeVersion } from "./requirements-GXRVCopE.js";
+import { i as appendLinearMcpAuthHealthyEvent, r as appendLinearMcpAuthCallbackRelayedEvent, s as resolveLinearMcpAuthIntervention } from "./linear-mcp-auth-JIDCfEz0.js";
+import { n as getSequencerRunStatus, r as spawnSequencerAgent, t as SEQUENCER_AGENT_ID } from "./sequencer-agent-C_RaZl3z.js";
+import "./supervisor-De-GYL91.js";
+import { t as buildConfirmedDeadAgentEvents } from "./agent-status-events-DfYAcfpo.js";
+import { i as listTranscriptCheckpoints, r as getTranscriptCheckpoint$1 } from "./checkpoints-C-xh-Mv0.js";
 import { basename, delimiter, dirname, extname, isAbsolute, join, normalize, posix, relative, resolve, sep, win32 } from "node:path";
 import { Cause, Context, Data, Deferred, Duration, Effect, FileSystem, Layer, Option, Path, Queue, Result, Schedule, Schema, Stream } from "effect";
 import { createReadStream, createWriteStream, existsSync, fstatSync, mkdirSync, readFileSync, readdirSync, statSync } from "fs";
@@ -895,7 +897,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const plan = readWorkspacePlanSync(workspacePath);
 			if (!plan || plan.plan.items.length === 0) throw new PlanEmpty({ id: issueId });
-			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-DfEYd_I0.js");
+			const { getAgentState, spawnAgent, normalizeAgentId } = await import("./agents-C9oho7kE.js");
 			const normalizedId = normalizeAgentId(issueId);
 			if (getAgentState(normalizedId)?.status === "running") throw new AgentAlreadyRunning({ id: issueId });
 			return {
@@ -927,7 +929,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 			const { workspacePath, projectPath, issue } = opts;
 			if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
 			const sessionName = opts.sessionName ?? `planning-${issueId.toLowerCase()}`;
-			const { spawnPlanningSession } = await import("./spawn-planning-session-Dp2FsjWk.js");
+			const { spawnPlanningSession } = await import("./spawn-planning-session-D9vDkQVz.js");
 			const result = await spawnPlanningSession({
 				issue: {
 					id: issue.id,
@@ -961,14 +963,14 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	kill: (agentId) => Effect.tryPromise({
 		try: async () => {
-			const { stopAgent } = await import("./agents-DfEYd_I0.js");
+			const { stopAgent } = await import("./agents-C9oho7kE.js");
 			await Effect.runPromise(stopAgent(agentId));
 		},
 		catch: () => void 0
 	}).pipe(Effect.ignore),
 	message: (agentId, msg) => Effect.tryPromise({
 		try: async () => {
-			const { messageAgent } = await import("./agents-DfEYd_I0.js");
+			const { messageAgent } = await import("./agents-C9oho7kE.js");
 			await messageAgent(agentId, msg);
 		},
 		catch: (err) => new AgentStartError({
@@ -979,7 +981,7 @@ const AgentSpawnerLive = Layer.effect(AgentSpawner, Effect.sync(() => ({
 	}),
 	deepWipe: (issueId, opts) => Effect.tryPromise({
 		try: async () => {
-			const { deepWipe } = await import("./workflows-Dp8qhcha.js");
+			const { deepWipe } = await import("./workflows-Dr-Yo76E.js");
 			const { resolveProjectFromIssueSync } = await import("./projects-CjRKDa9o.js");
 			const project = resolveProjectFromIssueSync(issueId);
 			const projectPath = project?.projectPath ?? process.cwd();
@@ -1045,7 +1047,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath, branch } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (!workspaceNeedsSetup(workspacePath)) return workspacePath;
-				const { createWorkspace } = await import("./workspace-manager-Nljndsty.js");
+				const { createWorkspace } = await import("./workspace-manager-D0auAuId.js");
 				const { loadProjectsConfigSync } = await import("./projects-CjRKDa9o.js");
 				const { projects } = loadProjectsConfigSync();
 				const project = resolveProjectFromIssueSync(issueId);
@@ -1080,7 +1082,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
 				if (!existsSync$1(workspacePath)) throw new WorkspaceNotFound({ id: issueId });
-				const { removeWorkspace } = await import("./workspace-manager-Nljndsty.js");
+				const { removeWorkspace } = await import("./workspace-manager-D0auAuId.js");
 				const project = resolveProjectFromIssueSync(issueId);
 				if (!project) throw new WorkspaceCreateError({
 					id: issueId,
@@ -1111,7 +1113,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 			try: async () => {
 				const { workspacePath } = getWorkspacePath(issueId);
 				const issueLower = issueId.toLowerCase();
-				const { stopWorkspaceDocker } = await import("./workspace-manager-Nljndsty.js");
+				const { stopWorkspaceDocker } = await import("./workspace-manager-D0auAuId.js");
 				await stopWorkspaceDocker(workspacePath, issueLower);
 			},
 			catch: () => void 0
@@ -1180,7 +1182,7 @@ const WorkspaceServiceLive = Layer.effect(WorkspaceService, Effect.sync(() => {
 					join(workspacePath, ".devcontainer", "docker-compose.devcontainer.yml")
 				];
 				if (!composePaths.find((p) => existsSync$1(p))) {
-					const { ensureDevcontainer } = await import("./ensure-devcontainer-C_OTsIz6.js");
+					const { ensureDevcontainer } = await import("./ensure-devcontainer-bvZTPcBb.js");
 					const ensure = ensureDevcontainer({
 						workspacePath,
 						issueId
@@ -1605,6 +1607,28 @@ async function readBridgedCodexCredential() {
 		};
 	}
 }
+async function mtimeMsOrNull(path) {
+	try {
+		return (await stat(path)).mtimeMs;
+	} catch {
+		return null;
+	}
+}
+/**
+* Re-bridge ~/.codex/auth.json into CLIProxy's codex-primary.json when the native
+* store was written after the bridged copy (or the copy is missing). A `codex
+* login` run in the operator's own terminal heals only the native store; without
+* this the stale bridged copy keeps the banner red until a dashboard restart.
+* Two stats per poll; best effort, never fails the status read.
+*/
+async function rebridgeCodexAuthIfNativeNewer() {
+	const [nativeMtimeMs, bridgedMtimeMs] = await Promise.all([mtimeMsOrNull(getNativeCodexAuthPath()), mtimeMsOrNull(join(getCliproxyAuthDir(), "codex-primary.json"))]);
+	if (nativeMtimeMs === null) return;
+	if (bridgedMtimeMs !== null && bridgedMtimeMs >= nativeMtimeMs) return;
+	try {
+		await bridgeCodexAuthToCliproxy();
+	} catch {}
+}
 /** Bridge checkCodexAuthStatus into a route, keeping its message in a 500 body. */
 const checkCodexAuth = (options) => Effect.tryPromise({
 	try: () => checkCodexAuthStatus(options),
@@ -1614,6 +1638,7 @@ const checkCodexAuth = (options) => Effect.tryPromise({
 	})
 });
 const getCodexAuthRoute = HttpRouter.add("GET", "/api/settings/codex-auth", httpHandler(Effect.gen(function* () {
+	yield* Effect.promise(() => rebridgeCodexAuthIfNativeNewer());
 	return jsonResponse(yield* checkCodexAuth({}));
 })));
 async function getExistingLiveReauthSession() {
@@ -15767,7 +15792,7 @@ var require_get_vercel_oidc_token = /* @__PURE__ */ __commonJSMin(((exports, mod
 			err = error;
 		}
 		try {
-			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-DSDGsD95.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-BXOsGOq0.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
+			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await import("./token-util-DSDGsD95.js").then((m) => /* @__PURE__ */ __toESM(m.default)), await import("./token-BVSQ0ZbH.js").then((m) => /* @__PURE__ */ __toESM(m.default))]);
 			if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
 				await refreshToken(options);
 				token = getVercelOidcTokenSync();
@@ -30254,7 +30279,7 @@ var GoogleCloudTranscription = class {
 	}
 	async start(apiKey, model) {
 		try {
-			const { SpeechClient } = await import("./src-DEWY9s_G.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
+			const { SpeechClient } = await import("./src-Bjf3_TJI.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)).then((module) => module.v1p1beta1 ?? module.v1);
 			if (this.closed) return;
 			const stream = new SpeechClient({ apiKey }).streamingRecognize({
 				config: {
@@ -30950,7 +30975,7 @@ async function captureInterestedAgent(state, agentId, pane) {
 		try {
 			const remoteState = await readFile(join(homedir$1(), ".overdeck", "agents", agentId, "remote-state.json"), "utf-8").then((text) => JSON.parse(text)).catch(() => null);
 			if (remoteState?.location === "remote" && remoteState?.vmName) {
-				const { getRemoteAgentOutput } = await import("./remote-agents-CJYoW12q.js");
+				const { getRemoteAgentOutput } = await import("./remote-agents-BlqgB9dc.js");
 				stdout = await getRemoteAgentOutput(agentId, remoteState.vmName, 50);
 			} else stdout = await captureAgentPane(agentId, pane);
 		} catch {
@@ -32271,7 +32296,7 @@ const PanRpcLayer = PanRpcGroup.toLayer(Effect.gen(function* () {
 		},
 		[WS_METHODS.subscribeIssueEvents]: (input) => {
 			console.log(`[ws-rpc] subscribeIssueEvents invoked issueId=${input.issueId}`);
-			import("./issue-service-singleton-DxTRf-RV.js").then(({ getSharedIssueService }) => getSharedIssueService().backfillIssue(input.issueId)).catch(() => {});
+			import("./issue-service-singleton-BbERjqoV.js").then(({ getSharedIssueService }) => getSharedIssueService().backfillIssue(input.issueId)).catch(() => {});
 			return eventStore.streamEvents.pipe(Stream.filter(shouldBroadcastDashboardEvent), Stream.map(storedToDomainEvent), Stream.filter(passesDomainEventSchema), Stream.mapEffect((event) => getCachedAgentIssueLookup(readModel).pipe(Effect.map((lookup) => filterDomainEventForIssue(event, input.issueId, lookup)))), Stream.filter((event) => event !== null));
 		},
 		[WS_METHODS.subscribeTerminal]: (input) => terminalService.streamSession(input.sessionName, input.cols, input.rows),
@@ -32695,7 +32720,7 @@ const defaultExecFile = async (file, args, options) => {
 	return { stdout };
 };
 async function defaultGetLabels(issueId) {
-	const { defaultGetIssueLabels } = await import("./auto-merge-eligibility-DmUQEAws.js");
+	const { defaultGetIssueLabels } = await import("./auto-merge-eligibility-is6bTkrA.js");
 	return defaultGetIssueLabels(issueId);
 }
 /** The workspace PRD: `.pan/drafts/<ISSUE-UPPER>.md`, then `<issue-lower>.md`. */
@@ -34248,7 +34273,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cancelPlanHome = resolveIssueWorkspacePlanHome(ctx.projectPath, id);
 	}
 	cleanupLog.push(...await closeIssuePullRequest(id, mode === "cancel" ? "Canceled via Overdeck" : "Reset to Todo via Overdeck"));
-	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-BT3aegwk.js");
+	const { resetToTodo, cancelIssueWorkflow } = await import("./lifecycle-BHcU1hPs.js");
 	const workflow = mode === "cancel" ? cancelIssueWorkflow : resetToTodo;
 	const result = await Effect.runPromise(workflow(ctx, {
 		deleteWorkspace,
@@ -34264,7 +34289,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 	cleanupLog.push(...result.steps.flatMap((step) => step.details || [step.error].filter(Boolean)));
 	if (mode === "cancel") cleanupLog.push(await transitionCancelledSpec(id, cancelPlanHome));
 	try {
-		const { killAllReviewerSessions } = await import("./review-agent-CTNzg6ag.js");
+		const { killAllReviewerSessions } = await import("./review-agent-D7b3qt2U.js");
 		const { resolveProjectFromIssueSync } = await import("./projects-CjRKDa9o.js");
 		const projectKey = resolveProjectFromIssueSync(id)?.projectKey;
 		if (projectKey) {
@@ -34275,7 +34300,7 @@ async function runDestructiveIssueLifecycle(id, mode, opts = {}) {
 		cleanupLog.push(`Reviewer session cleanup failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
 	}
 	try {
-		const { resetPostMergeState } = await import("./merge-agent-CVjeg02H.js");
+		const { resetPostMergeState } = await import("./merge-agent-C2UtoeTe.js");
 		resetPostMergeState(id);
 		resetPostMergeState(id.toUpperCase());
 		cleanupLog.push("Cleared merge state");
@@ -34295,7 +34320,7 @@ function closeIssueTransition(options) {
 		const { issueId, body, eventStore } = options;
 		const { reason } = body;
 		const projectPath = getProjectPath$3(void 0, extractPrefix(issueId) ?? issueId.split("-")[0]);
-		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-BT3aegwk.js"));
+		const { close: closeWorkflow } = yield* Effect.promise(() => import("./lifecycle-BHcU1hPs.js"));
 		const githubCheck = isGitHubIssue$4(issueId);
 		const issueDataService = getIssueDataService$8();
 		const issueSource = issueDataService.getIssueSource(issueId);
@@ -34566,7 +34591,7 @@ function reopenIssueTransition(options) {
 				if (workspacePath) await reopenWorkspaceState(id.toUpperCase(), workspacePath, { reason: body?.reason });
 			} catch {}
 			try {
-				const { resetPostMergeState } = await import("./merge-agent-CVjeg02H.js");
+				const { resetPostMergeState } = await import("./merge-agent-C2UtoeTe.js");
 				resetPostMergeState(id);
 				resetPostMergeState(id.toUpperCase());
 			} catch {}
@@ -34873,7 +34898,7 @@ async function copySettingsToWorkspace(id) {
 		success: false,
 		error: "Workspace not found"
 	}, { status: 404 });
-	const { copyOverdeckSettingsToWorkspace } = await import("./workspace-manager-Nljndsty.js");
+	const { copyOverdeckSettingsToWorkspace } = await import("./workspace-manager-D0auAuId.js");
 	const result = copyOverdeckSettingsToWorkspace(workspacePath);
 	return jsonResponse({
 		success: result.errors.length === 0 || result.copied.length > 0,
@@ -35364,7 +35389,7 @@ function restartFromPlan(options) {
 		});
 		const resetResult = yield* Effect.promise(async () => {
 			try {
-				const { runGitResetHard } = await import("./dangerous-git-ops-GKdOQbOe.js");
+				const { runGitResetHard } = await import("./dangerous-git-ops-BcSMn_cv.js");
 				async function findPlanningCommit(grep, label) {
 					try {
 						const { stdout } = await execAsync$6(`git log --grep="${grep.replace(/"/g, "\\\"")}" --format=%H -1`, {
@@ -35797,7 +35822,7 @@ function closeOutIssue(id, opts = {}) {
 		}
 		const closeOutResult = yield* Effect.promise(async () => {
 			try {
-				const { closeOut } = await import("./lifecycle-BT3aegwk.js");
+				const { closeOut } = await import("./lifecycle-BHcU1hPs.js");
 				return {
 					ok: true,
 					result: await Effect.runPromise(closeOut(ctx, {
@@ -35886,7 +35911,7 @@ function bulkCloseOut(body) {
 		const invalidIds = issueIds.filter((id) => !isValidIssueId(id));
 		if (invalidIds.length > 0) return jsonResponse({ error: `Invalid issue ID format: ${invalidIds.join(", ")}` }, { status: 400 });
 		const eventStore = yield* EventStoreService;
-		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-BT3aegwk.js"));
+		const { closeOut } = yield* Effect.promise(() => import("./lifecycle-BHcU1hPs.js"));
 		const issueDataService = getIssueDataService$5();
 		const tasks = [];
 		const agentChecks = yield* Effect.all(issueIds.map((id) => Effect.promise(async () => {
@@ -39224,7 +39249,7 @@ async function defaultReadRemoteState(agentId) {
 */
 async function defaultIssueTitles() {
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-DxTRf-RV.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-BbERjqoV.js");
 		const titles = /* @__PURE__ */ new Map();
 		for (const issue of getSharedIssueService().getIssues({ includeCompleted: true })) {
 			if (typeof issue !== "object" || issue === null) continue;
@@ -39239,7 +39264,7 @@ async function defaultIssueTitles() {
 /** Derived pipeline states from the shared issue service's cache; empty on any error. */
 async function defaultDerivedIssueStates() {
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-DxTRf-RV.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-BbERjqoV.js");
 		return new Map(getSharedIssueService().listDerivedStates().map((derived) => [derived.issueId.toUpperCase(), derived]));
 	} catch {
 		return /* @__PURE__ */ new Map();
@@ -42463,7 +42488,7 @@ async function surfaceNeedsYou(issueId, reason, details, deps) {
 			await deps.surfaceNeedsYou(issueId, reason, details);
 			return;
 		}
-		const { surfaceIssueFeedbackNeedsYou } = await import("./feedback-target-C6lpafxM.js");
+		const { surfaceIssueFeedbackNeedsYou } = await import("./feedback-target-B0XBJvkz.js");
 		await surfaceIssueFeedbackNeedsYou(issueId, reason, details);
 	} catch (err) {
 		console.warn(`[ci-failure-feedback] Could not surface needs-you for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
@@ -42506,7 +42531,7 @@ async function recordCiTestGatePassInQueue(opts, deps = {}) {
 		return false;
 	}
 	try {
-		const { liftVerificationStuckPause } = await import("./verification-escalation-C76ZbMod.js");
+		const { liftVerificationStuckPause } = await import("./verification-escalation-DAjaXHwo.js");
 		await liftVerificationStuckPause(issueId, "ci-failure-feedback");
 	} catch (err) {
 		console.warn(`[ci-failure-feedback] Could not lift the verification-stuck pause for ${issueId}: ${err instanceof Error ? err.message : String(err)}`);
@@ -42618,7 +42643,7 @@ function buildFeedbackBody(opts) {
 * needs-you when nothing can be reached).
 */
 async function deliverCiTestGateFeedback(issueId, opts, feedbackPath, counted, deps) {
-	const { announceVerificationFailure, deliverVerificationFeedback, escalateVerificationStuck } = await import("./verification-escalation-C76ZbMod.js");
+	const { announceVerificationFailure, deliverVerificationFeedback, escalateVerificationStuck } = await import("./verification-escalation-DAjaXHwo.js");
 	const head8 = opts.headSha.slice(0, 8);
 	const { cycleCount } = counted;
 	const summary = `CI test job failed on PR head ${head8} (attempt ${cycleCount}/3).\n\nFeedback: ${feedbackPath}`;
@@ -43013,7 +43038,7 @@ async function handlePullRequest(payload) {
 		const resolved = resolveProjectFromIssueSync(issueId);
 		const project = resolved ? listProjectsSync().find((entry) => entry.key === resolved.projectKey)?.config : void 0;
 		if (project) {
-			const { enqueueProjectResourceRefresh } = await import("./project-resource-refresh-queue-Dsha4mgg.js");
+			const { enqueueProjectResourceRefresh } = await import("./project-resource-refresh-queue-DmNcMWIW.js");
 			enqueueProjectResourceRefresh(project, `pull_request:${payload.action}`);
 		}
 	} catch (err) {
@@ -43034,14 +43059,14 @@ async function handlePullRequest(payload) {
 		console.warn(`[webhook] Failed to start the review pipeline for ${issueId}: ${err?.message ?? err}`);
 	}
 	if (payload.action === "closed" && pr.merged === true) try {
-		const { postMergeLifecycle } = await import("./merge-agent-CVjeg02H.js");
+		const { postMergeLifecycle } = await import("./merge-agent-C2UtoeTe.js");
 		const { resolveProjectFromIssueSync } = await import("./projects-CjRKDa9o.js");
 		const project = resolveProjectFromIssueSync(issueId);
 		if (project) {
 			const branchName = pr.head.ref;
 			postMergeLifecycle(issueId, project.projectPath, branchName).catch((err) => console.warn(`[webhook] postMergeLifecycle failed for ${issueId} (${branchName}): ${err?.message ?? err}`));
 			if (branchName.toLowerCase().startsWith("strike/")) {
-				const { finishStrike } = await import("./strike-completion-DyPF_uhD.js");
+				const { finishStrike } = await import("./strike-completion-PiFiEtoo.js");
 				finishStrike(issueId, project.projectPath, {
 					source: "webhook",
 					...pr.number != null ? { prRef: prUrlFor(repo, pr.number) } : {}
@@ -51668,7 +51693,7 @@ const postMissionControlUploadRoute = HttpRouter.add("POST", "/api/command-deck/
 	let safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "-");
 	let processedContent = content;
 	if (safeName.endsWith(".vtt")) {
-		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-DSX4wASE.js"));
+		const { vttToMarkdown } = yield* Effect.promise(() => import("./vtt-parser-uNggfu87.js"));
 		processedContent = vttToMarkdown(content);
 		safeName = safeName.replace(/\.vtt$/, ".md");
 	}
@@ -57325,15 +57350,15 @@ const defaultPresetPlanDeps = {
 	readConfigText: readGlobalConfigText,
 	hasCredentials: providerHasCredentials,
 	async resolveHarnessBinary(harness) {
-		const { resolveHarnessBinary } = await import("./harness-binary-CF3OHJwR.js");
+		const { resolveHarnessBinary } = await import("./harness-binary-DFBkr1Wg.js");
 		return resolveHarnessBinary(harness);
 	},
 	async getAuthMode(model) {
-		const { getProviderAuthMode } = await import("./runtime-command-BkQQs0N2.js");
+		const { getProviderAuthMode } = await import("./runtime-command-D91mhWSL.js");
 		return getProviderAuthMode(model);
 	},
 	async resolveCodexContext(harness, model, authMode) {
-		const { resolveCodexPolicyContext } = await import("./policy-context-De_w57FT.js");
+		const { resolveCodexPolicyContext } = await import("./policy-context-CYqNhQra.js");
 		return resolveCodexPolicyContext(harness, model, authMode);
 	}
 };
@@ -58543,7 +58568,7 @@ async function syncOnce(options) {
 	}
 	if (options.afterSettle) await options.afterSettle(report);
 	else if (config.evict) {
-		const { scanEligible } = await import("./evict-CgFggY65.js");
+		const { scanEligible } = await import("./evict-LT5Wbo6F.js");
 		await scanEligible({
 			store,
 			keys,
@@ -59565,131 +59590,6 @@ async function launchVaultContinuedConversation(conv, note) {
 	})());
 }
 //#endregion
-//#region ../../lib/projects/repo-url.ts
-/** Schemes we are willing to hand to `git clone` from a dashboard request. */
-const SUPPORTED_SCHEMES = new Set([
-	"https:",
-	"http:",
-	"ssh:"
-]);
-/** Control characters and NUL, which have no business in a URL we spawn with. */
-const CONTROL_CHARS = /[\u0000-\u001f\u007f]/;
-/**
-* `user@host:path/repo.git` — SCP syntax, not a URL.
-*
-* The host group excludes `:` and `/` so a scheme URL can never reach here, and
-* the path must be non-empty. Any user is accepted, not just `git`: deploy keys
-* routinely use another account.
-*/
-const SCP_SOURCE = /^([^\s@/:]+)@([^\s@/:]+):(.+)$/;
-/** Bare `owner/repo`, the only form we are allowed to invent a URL for. */
-const GITHUB_SHORTHAND = /^([A-Za-z0-9._-]+)\/([A-Za-z0-9._-]+)$/;
-/** Detect provider by host name. */
-function providerForHostname(hostname) {
-	const host = hostname.toLowerCase();
-	if (host === "github.com" || host === "www.github.com") return "github";
-	if (host === "gitlab.com" || host === "www.gitlab.com") return "gitlab";
-	return null;
-}
-/**
-* Strip the decoration that is metadata-only: surrounding slashes and one
-* trailing `.git`. Exactly one, so `repo.git.git` keeps its odd-but-real name.
-*/
-function normalizeRepoPath(rawPath) {
-	return rawPath.replace(/^\/+/, "").replace(/\/+$/, "").replace(/\.git$/, "");
-}
-/**
-* The last path segment, decoded, or null when it cannot safely name a folder.
-*
-* Decoding matters because `%2F` and `%2E%2E` survive the segment split and
-* would otherwise become a path separator or a traversal in a directory name.
-*/
-function folderNameFor(repoPath) {
-	const segments = repoPath.split("/").filter(Boolean);
-	const last = segments[segments.length - 1];
-	if (!last) return null;
-	let decoded;
-	try {
-		decoded = decodeURIComponent(last);
-	} catch {
-		return null;
-	}
-	if (!decoded || decoded === "." || decoded === "..") return null;
-	if (decoded.includes("/") || decoded.includes("\\")) return null;
-	if (CONTROL_CHARS.test(decoded)) return null;
-	return decoded;
-}
-/** A repo path is usable when it names at least one non-empty, non-dot segment. */
-function isUsableRepoPath(repoPath) {
-	const segments = repoPath.split("/").filter(Boolean);
-	if (segments.length === 0) return false;
-	const last = segments[segments.length - 1];
-	return last !== "." && last !== "..";
-}
-/** Parse an explicit scheme URL (`https://…`, `ssh://…`). */
-function parseSchemeSource(source) {
-	let url;
-	try {
-		url = new URL(source);
-	} catch {
-		return null;
-	}
-	if (!SUPPORTED_SCHEMES.has(url.protocol)) return null;
-	if (!url.hostname) return null;
-	const repoPath = normalizeRepoPath(url.pathname);
-	if (!isUsableRepoPath(repoPath)) return null;
-	return {
-		hostname: url.hostname,
-		repoPath
-	};
-}
-/** Parse SCP syntax (`git@github.com:acme/private.git`). */
-function parseScpSource(source) {
-	const match = SCP_SOURCE.exec(source);
-	if (!match) return null;
-	const hostname = match[2];
-	const repoPath = normalizeRepoPath(match[3]);
-	if (!isUsableRepoPath(repoPath)) return null;
-	return {
-		hostname,
-		repoPath
-	};
-}
-/**
-* Parse a repository source into a transport URL plus best-effort metadata.
-*
-* Returns null when the input cannot become a clone source at all, which the
-* caller renders as a `url-invalid` finding against the field.
-*/
-function parseRepoUrl(raw) {
-	const source = raw.trim();
-	if (!source) return null;
-	if (CONTROL_CHARS.test(source)) return null;
-	if (source.startsWith("-")) return null;
-	const shorthand = GITHUB_SHORTHAND.exec(source);
-	if (shorthand) {
-		const owner = shorthand[1];
-		const repo = normalizeRepoPath(shorthand[2]);
-		if (!repo || repo === "." || repo === "..") return null;
-		return {
-			provider: "github",
-			slug: `${owner}/${repo}`,
-			folderName: repo,
-			cloneUrl: `https://github.com/${owner}/${repo}.git`
-		};
-	}
-	const parts = parseSchemeSource(source) ?? parseScpSource(source);
-	if (!parts) return null;
-	const provider = providerForHostname(parts.hostname);
-	if (provider && parts.repoPath.split("/").filter(Boolean).length < 2) return null;
-	return {
-		provider,
-		slug: provider ? parts.repoPath : null,
-		folderName: folderNameFor(parts.repoPath),
-		cloneUrl: source
-	};
-}
-//#endregion
 //#region ../../lib/projects/origin-match.ts
 function findProjectForGitOrigin(gitOrigin, projects) {
 	const parsed = gitOrigin ? parseRepoUrl(gitOrigin) : null;
@@ -61751,7 +61651,7 @@ Continue the PLANNING session. Do NOT implement anything.
 			const agentCwd = workspacePath;
 			const harnessLaunch = await prepareHarnessLaunch("claude-code", { model: msgPlanningModel });
 			if (existsSync$1(outputFile)) await rename(outputFile, join(planningDir, `output-${Date.now()}.jsonl`));
-			const { getAgentCommand } = await import("./settings-CFLNK2bY.js");
+			const { getAgentCommand } = await import("./settings-DeJQpBJZ.js");
 			const msgAgentCmd = getAgentCommand(msgPlanningModel);
 			const msgPermissionFlags = getClaudePermissionFlagsString();
 			const msgCmdWithArgs = msgAgentCmd.args.length > 0 ? `${msgAgentCmd.command} ${msgAgentCmd.args.join(" ")} ${msgPermissionFlags}` : `${msgAgentCmd.command} ${msgPermissionFlags}`;
@@ -62195,7 +62095,7 @@ const BANNER_STATES = new Set([
 ]);
 const defaultDeps$1 = {
 	readStatus: async () => {
-		const { readSyncInputStatus } = await import("./sync-startup-gate-Cz-taE5H.js");
+		const { readSyncInputStatus } = await import("./sync-startup-gate-BfacT-bh.js");
 		return readSyncInputStatus();
 	},
 	runPanSync: async (args) => {
@@ -62415,7 +62315,7 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 	const version = await getOverdeckVersion();
 	let supervisorUrl = null;
 	try {
-		const { getSupervisorUrl } = await import("./supervisor-daYV0xlI.js");
+		const { getSupervisorUrl } = await import("./supervisor-DRm9uLsZ.js");
 		supervisorUrl = getSupervisorUrl();
 	} catch {}
 	return jsonResponse({
@@ -62427,11 +62327,11 @@ const getVersionRoute = HttpRouter.add("GET", "/api/version", Effect.promise(asy
 const getPrerequisitesRoute = HttpRouter.add("GET", "/api/prerequisites", Effect.gen(function* () {
 	const request = yield* HttpServerRequest.HttpServerRequest;
 	const refresh = new URL(request.url, "http://localhost").searchParams.get("refresh") === "1";
-	const { buildPrerequisitesReport } = yield* Effect.promise(() => import("./prerequisites-report-D4DsEecP.js"));
+	const { buildPrerequisitesReport } = yield* Effect.promise(() => import("./prerequisites-report-BpRfGeIQ.js"));
 	return jsonResponse(yield* Effect.promise(() => buildPrerequisitesReport({ refresh })));
 }));
 const getSetupDiagnosticsRoute = HttpRouter.add("GET", "/api/diagnostics/setup", Effect.promise(async () => {
-	const { collectSetupDiagnostics } = await import("./system-prerequisites-CJzu1FQH.js");
+	const { collectSetupDiagnostics } = await import("./system-prerequisites-G9se0Lms.js");
 	return jsonResponse(await collectSetupDiagnostics(await getOverdeckVersion()));
 }));
 const getSyncStatusRoute = HttpRouter.add("GET", "/api/sync-status", Effect.sync(() => jsonResponse(getSyncStatus())));
@@ -67336,7 +67236,7 @@ async function registerProjectFromPath(opts) {
 	registerProject(key, projectConfig);
 	const seededContextLayer = ensureProjectLayer(fullPath);
 	try {
-		const { preTrustDirectory } = await import("./workspace-manager-Nljndsty.js");
+		const { preTrustDirectory } = await import("./workspace-manager-D0auAuId.js");
 		await preTrustDirectory(fullPath);
 	} catch {}
 	let hooksInstalled = 0;
@@ -67550,7 +67450,7 @@ async function finishProjectSetup(args) {
 	});
 	const seededContextLayer = ensureProjectLayer(canonicalRegistered);
 	try {
-		const { preTrustDirectory } = await import("./workspace-manager-Nljndsty.js");
+		const { preTrustDirectory } = await import("./workspace-manager-D0auAuId.js");
 		await preTrustDirectory(canonicalRegistered);
 	} catch {}
 	let hooksInstalled = 0;
@@ -67566,6 +67466,9 @@ async function finishProjectSetup(args) {
 		} catch {}
 	}
 	await excludeWorkspacesDir(canonicalRegistered, config.workspace?.workspaces_dir || "workspaces");
+	try {
+		await inferProjectGithubRepo(args.key, config);
+	} catch {}
 	const existingMain = getMainWorkspace(args.key);
 	if (existingMain) {
 		const canonicalMain = await canonicalizePath(existingMain.path);
@@ -68348,7 +68251,7 @@ init_io();
 init_specs();
 init_paths();
 async function getIssueDataService() {
-	const { getSharedIssueService } = await import("./issue-service-singleton-DxTRf-RV.js");
+	const { getSharedIssueService } = await import("./issue-service-singleton-BbERjqoV.js");
 	return getSharedIssueService();
 }
 /** Returns true if the path exists (any type). */
@@ -68741,7 +68644,7 @@ const getProjectReleaseStatusRoute = HttpRouter.add("GET", "/api/projects/:proje
 	const projectKey = (yield* HttpRouter.params)["projectKey"] ?? "";
 	return jsonResponse(yield* Effect.tryPromise({
 		try: async () => {
-			const { fetchProjectReleaseStatus } = await import("./project-pipelines-BV_6EeMm.js");
+			const { fetchProjectReleaseStatus } = await import("./project-pipelines-C0eawMQd.js");
 			return fetchProjectReleaseStatus(projectKey);
 		},
 		catch: (err) => new Error(err instanceof Error ? err.message : String(err))
@@ -70973,7 +70876,7 @@ function checkpointWorkerUrl(moduleUrl = import.meta.url) {
 	return new URL("./checkpoint-worker.js", moduleUrl);
 }
 async function runInline(operation, payload) {
-	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-DEk_xKPI.js");
+	const { claimTranscriptRange, commitTranscriptRange, releaseTranscriptRange, getTranscriptCheckpoint, listTranscriptCheckpoints } = await import("./checkpoints-SNuYbtl9.js");
 	switch (operation) {
 		case "claimTranscriptRange": return claimTranscriptRange(payload);
 		case "commitTranscriptRange": return commitTranscriptRange(payload);
@@ -75839,7 +75742,7 @@ function previewBrief(book) {
 	return `${lines.join("\n")}\n`;
 }
 async function defaultStartOrderBook(book, project) {
-	const { startFlywheelRun } = await import("./flywheel-Ib4Qp5x6.js");
+	const { startFlywheelRun } = await import("./flywheel-C-t-XYUt.js");
 	return startFlywheelRun({
 		cwd: resolveProjectPath(project),
 		orders: book.id
@@ -78952,7 +78855,7 @@ function issueIdFromGateBranch(branch) {
 * without branch protection. The merge gate reads the verdict marker comments.
 */
 async function listScheduleCandidates(projectPath, deps = {}) {
-	const { listRepoPullRequests: listPrs, toChecksState } = await import("./derived-issue-state-BtoFumna.js");
+	const { listRepoPullRequests: listPrs, toChecksState } = await import("./derived-issue-state-BaGJkxQq.js");
 	const rows = await (deps.listPullRequests ?? listPrs)(projectPath);
 	const candidates = /* @__PURE__ */ new Set();
 	for (const row of rows) {
@@ -78966,7 +78869,7 @@ async function listScheduleCandidates(projectPath, deps = {}) {
 	return [...candidates];
 }
 async function defaultForgeOf() {
-	const { forgeForProject } = await import("./derived-issue-state-BtoFumna.js");
+	const { forgeForProject } = await import("./derived-issue-state-BaGJkxQq.js");
 	return forgeForProject;
 }
 /** True when two SHAs (full or abbreviated) name the same commit. */
@@ -79001,15 +78904,15 @@ function latestAutoMergeAllowsSchedule(latest, pr) {
 	return latest.status === "blocked";
 }
 async function defaultMergeGate(issueId) {
-	const { evaluateIssueMergeGate } = await import("./merge-gate-Bq6XDCW9.js");
+	const { evaluateIssueMergeGate } = await import("./merge-gate-3O9zdlWW.js");
 	return evaluateIssueMergeGate(issueId);
 }
 async function defaultPolicyRefusal() {
-	const { autoMergePolicyRefusal } = await import("./merge-train-ClvHbVeP.js");
+	const { autoMergePolicyRefusal } = await import("./merge-train-BOKRD6nt.js");
 	return (issueId) => autoMergePolicyRefusal(issueId);
 }
 async function defaultSchedule(issueId, canSchedule) {
-	const [{ postAutoMergeSchedulePayload }, { scheduleAutoMergeWithResult }] = await Promise.all([import("./merge-train-ClvHbVeP.js"), import("./merge-sync-BlUTLyjT.js")]);
+	const [{ postAutoMergeSchedulePayload }, { scheduleAutoMergeWithResult }] = await Promise.all([import("./merge-train-BOKRD6nt.js"), import("./merge-sync-BlUTLyjT.js")]);
 	return postAutoMergeSchedulePayload({ issueId }, { schedule: (input) => scheduleAutoMergeWithResult({
 		...input,
 		canSchedule
@@ -79355,7 +79258,7 @@ const RESTART_MARKER = join$1(homedir(), ".overdeck", "dashboard-restarting.json
 * loads new content-hashed chunk filenames (no ERR_MODULE_NOT_FOUND after rebuild).
 */
 async function defaultLifecycleRunner(pending) {
-	const { postMergeLifecycle } = await import("./merge-agent-CVjeg02H.js");
+	const { postMergeLifecycle } = await import("./merge-agent-C2UtoeTe.js");
 	await postMergeLifecycle(pending.issueId, pending.projectPath, pending.sourceBranch);
 }
 async function runClaimedPendingLifecycle(claim, pending, runner, lifecycleDelayMs, startTime) {
@@ -79823,12 +79726,12 @@ function sameCommit(a, b) {
 	return x.startsWith(y) || y.startsWith(x);
 }
 async function defaultReadTrackerIssue(issueId) {
-	const { readIssueFromTracker } = await import("./derived-issue-state-BtoFumna.js");
+	const { readIssueFromTracker } = await import("./derived-issue-state-BaGJkxQq.js");
 	return readIssueFromTracker(issueId);
 }
 async function defaultCachedTrackerIssue(issueId) {
 	try {
-		const { getSharedIssueService } = await import("./issue-service-singleton-DxTRf-RV.js");
+		const { getSharedIssueService } = await import("./issue-service-singleton-BbERjqoV.js");
 		return getSharedIssueService().getTrackerIssue(issueId);
 	} catch {
 		return null;
@@ -79853,7 +79756,7 @@ function failureReason(result) {
 	return result.error ?? result.message ?? `merge returned status ${result.statusCode ?? "unknown"}`;
 }
 async function defaultMergeIssue(issueId, headSha) {
-	const { triggerMerge } = await import("./merge-ops-C2DJ5UJh.js");
+	const { triggerMerge } = await import("./merge-ops-BP9-OIjU.js");
 	return triggerMerge(issueId, {
 		kind: "normal",
 		expectedHeadSha: headSha
@@ -81586,7 +81489,7 @@ startAgentOutputService();
 console.log("[overdeck] AgentOutputService started");
 if (process.env.OVERDECK_MODE === "desktop") (async () => {
 	try {
-		const { provisionClaudeHooks } = await import("./claude-hooks-provision-DOMp0nce.js");
+		const { provisionClaudeHooks } = await import("./claude-hooks-provision-BGL61BFy.js");
 		const result = await provisionClaudeHooks();
 		if (!result.ok) console.warn(`[overdeck] Claude hook provisioning skipped: ${result.reason}`);
 		else if (result.changed) console.log(`[overdeck] Claude hooks provisioned: ${result.binariesSynced} scripts, registered ${result.registered.length} hook(s)${result.pruned.length ? `, pruned ${result.pruned.length} stale` : ""}`);
@@ -81787,10 +81690,22 @@ const stopGitHubRateLimitedTelemetry = registerGitHubRateLimitedTelemetry();
 ensureOperatorHash();
 let stopResourceRefreshServices = () => void 0;
 whenDashboardListening().then(async () => {
-	const { stopLegacyTldrDaemons } = await import("./legacy-tldr-cleanup-DJX9V9s4.js");
+	const { stopLegacyTldrDaemons } = await import("./legacy-tldr-cleanup-RqGuveuz.js");
 	const pids = await stopLegacyTldrDaemons();
 	if (pids.length) console.log(`[overdeck] Stopped ${pids.length} legacy TLDR daemon(s) (PAN-4429)`);
 }).catch((err) => console.warn("[overdeck] Legacy TLDR daemon stop failed (non-fatal):", err));
+if (!isPeerDashboard) whenDashboardListening().then(async () => {
+	const { inferMissingProjectTrackers } = await import("./infer-tracker-BJR_ATzw.js");
+	const configured = await inferMissingProjectTrackers();
+	if (configured.length === 0) return;
+	await initTrackerConfigCache();
+	const { getProjectPipelineMembership } = await import("./pipeline-membership-LZVPTNzz.js");
+	for (const project of configured) {
+		console.log(`[overdeck] Configured ${project.name}: github_repo ${project.githubRepo} (from its origin remote)`);
+		getProjectPipelineMembership.invalidate(project.path);
+	}
+	await getSharedIssueService().invalidateTracker("github");
+}).catch((err) => console.warn("[overdeck] Tracker auto-detection failed (non-fatal):", err));
 (async () => {
 	const store = await initEventStore();
 	whenDashboardListening().then(async () => {
@@ -81896,7 +81811,7 @@ const handleShutdownSignal = async (signal) => {
 	await stopAllKnowledgeViewers().catch((err) => console.warn("[knowledge-viewer] shutdown failed:", err?.message ?? err));
 	await stopDeaconChild().catch((err) => console.warn("[deacon-supervisor] child shutdown failed:", err?.message ?? err));
 	try {
-		const { killAllGateProcessGroups } = await import("./validation-C1j7--xs.js");
+		const { killAllGateProcessGroups } = await import("./validation-UgpT2GVW.js");
 		const reaped = killAllGateProcessGroups();
 		if (reaped > 0) console.log(`[overdeck] reaped ${reaped} in-flight gate process group(s)`);
 	} catch (err) {