syntaur 0.11.0 → 0.13.0

package/dist/dashboard/server.js

@@ -5258,7 +5258,7 @@ __export(parser_exports, {
 });
 import { randomBytes } from "crypto";
 import { readFile as readFile12 } from "fs/promises";
-import { resolve as resolve15 } from "path";
+import { resolve as resolve16 } from "path";
 function generateShortId() {
   return randomBytes(2).toString("hex");
 }
@@ -5496,10 +5496,10 @@ function serializeLogEntry(entry) {
   return lines.join("\n");
 }
 function checklistPath(todosDir2, workspace) {
-  return resolve15(todosDir2, `${workspace}.md`);
+  return resolve16(todosDir2, `${workspace}.md`);
 }
 function logPath(todosDir2, workspace) {
-  return resolve15(todosDir2, `${workspace}-log.md`);
+  return resolve16(todosDir2, `${workspace}-log.md`);
 }
 function archivePath(todosDir2, workspace, interval, now = /* @__PURE__ */ new Date()) {
   const year = now.getFullYear();
@@ -5523,7 +5523,7 @@ function archivePath(todosDir2, workspace, interval, now = /* @__PURE__ */ new D
     default:
       suffix = `${year}-${month}-${day}`;
   }
-  return resolve15(todosDir2, "archive", `${workspace}-${suffix}.md`);
+  return resolve16(todosDir2, "archive", `${workspace}-${suffix}.md`);
 }
 async function readChecklist(todosDir2, workspace) {
   const path = checklistPath(todosDir2, workspace);
@@ -5638,7 +5638,7 @@ var create_assignment_exports = {};
 __export(create_assignment_exports, {
   createAssignmentCommand: () => createAssignmentCommand
 });
-import { resolve as resolve16 } from "path";
+import { resolve as resolve17 } from "path";
 async function createAssignmentCommand(title, options) {
   if (!title.trim()) {
     throw new Error("Assignment title cannot be empty.");
@@ -5713,14 +5713,14 @@ async function createAssignmentCommand(title, options) {
   if (options.oneOff) {
     const standaloneRoot = assignmentsDir();
     folderName = id;
-    assignmentDir = resolve16(standaloneRoot, folderName);
+    assignmentDir = resolve17(standaloneRoot, folderName);
     projectSlug = null;
     await ensureDir(standaloneRoot);
   } else {
     const baseDir = options.dir ? expandHome(options.dir) : config.defaultProjectDir;
     projectSlug = options.project;
-    const projectDir = resolve16(baseDir, projectSlug);
-    const projectMdPath = resolve16(projectDir, "project.md");
+    const projectDir = resolve17(baseDir, projectSlug);
+    const projectMdPath = resolve17(projectDir, "project.md");
     if (!await fileExists(projectDir) || !await fileExists(projectMdPath)) {
       throw new Error(
         `Project "${projectSlug}" not found at ${projectDir}.
@@ -5728,9 +5728,9 @@ Run 'syntaur create-project' first or use --one-off.`
       );
     }
     if (dependsOn.length > 0) {
-      const depDirBase = resolve16(projectDir, "assignments");
+      const depDirBase = resolve17(projectDir, "assignments");
       for (const dep of dependsOn) {
-        const depDir = resolve16(depDirBase, dep);
+        const depDir = resolve17(depDirBase, dep);
         if (!await fileExists(depDir)) {
           console.warn(
             `Warning: dependency "${dep}" does not exist in project "${projectSlug}" yet.`
@@ -5739,7 +5739,7 @@ Run 'syntaur create-project' first or use --one-off.`
       }
     }
     folderName = assignmentSlug;
-    assignmentDir = resolve16(projectDir, "assignments", folderName);
+    assignmentDir = resolve17(projectDir, "assignments", folderName);
   }
   if (await fileExists(assignmentDir)) {
     throw new Error(
@@ -5751,7 +5751,7 @@ Use --slug to specify a different slug.`
   const companionAssignmentRef = projectSlug === null ? id : assignmentSlug;
   const files = [
     [
-      resolve16(assignmentDir, "assignment.md"),
+      resolve17(assignmentDir, "assignment.md"),
       renderAssignment({
         id,
         slug: assignmentSlug,
@@ -5767,35 +5767,35 @@ Use --slug to specify a different slug.`
       })
     ],
     [
-      resolve16(assignmentDir, "scratchpad.md"),
+      resolve17(assignmentDir, "scratchpad.md"),
       renderScratchpad({
         assignmentSlug: companionAssignmentRef,
         timestamp
       })
     ],
     [
-      resolve16(assignmentDir, "handoff.md"),
+      resolve17(assignmentDir, "handoff.md"),
       renderHandoff({
         assignmentSlug: companionAssignmentRef,
         timestamp
       })
     ],
     [
-      resolve16(assignmentDir, "decision-record.md"),
+      resolve17(assignmentDir, "decision-record.md"),
       renderDecisionRecord({
         assignmentSlug: companionAssignmentRef,
         timestamp
       })
     ],
     [
-      resolve16(assignmentDir, "progress.md"),
+      resolve17(assignmentDir, "progress.md"),
       renderProgress({
         assignment: companionAssignmentRef,
         timestamp
       })
     ],
     [
-      resolve16(assignmentDir, "comments.md"),
+      resolve17(assignmentDir, "comments.md"),
       renderComments({
         assignment: companionAssignmentRef,
         timestamp
@@ -5860,7 +5860,7 @@ init_api();
 init_assignment_resolver();
 import express from "express";
 import { createServer } from "http";
-import { resolve as resolve19 } from "path";
+import { resolve as resolve20 } from "path";
 import { writeFile as writeFile5, unlink as unlink4 } from "fs/promises";
 import { WebSocketServer, WebSocket } from "ws";
 
@@ -6075,8 +6075,8 @@ function rowToSession(row) {
   };
 }
 async function appendSession(_projectDir, session) {
-  const db2 = getSessionDb();
-  db2.prepare(`
+  const db3 = getSessionDb();
+  db3.prepare(`
     INSERT INTO sessions (session_id, project_slug, assignment_slug, agent, started, status, path, description, transcript_path)
     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
     ON CONFLICT(session_id) DO UPDATE SET
@@ -6101,36 +6101,36 @@ async function appendSession(_projectDir, session) {
   );
 }
 async function updateSessionStatus(_projectDir, sessionId, status) {
-  const db2 = getSessionDb();
+  const db3 = getSessionDb();
   const isTerminal = status === "completed" || status === "stopped";
-  const result = isTerminal ? db2.prepare(
+  const result = isTerminal ? db3.prepare(
     "UPDATE sessions SET status = ?, ended = datetime('now'), updated_at = datetime('now') WHERE session_id = ?"
-  ).run(status, sessionId) : db2.prepare(
+  ).run(status, sessionId) : db3.prepare(
     "UPDATE sessions SET status = ?, updated_at = datetime('now') WHERE session_id = ?"
   ).run(status, sessionId);
   return result.changes > 0;
 }
 async function listAllSessions(_projectsDir) {
-  const db2 = getSessionDb();
-  const rows = db2.prepare("SELECT * FROM sessions ORDER BY started DESC").all();
+  const db3 = getSessionDb();
+  const rows = db3.prepare("SELECT * FROM sessions ORDER BY started DESC").all();
   return rows.map(rowToSession);
 }
 async function listProjectSessions(_projectsDir, projectSlug, assignmentSlug) {
-  const db2 = getSessionDb();
+  const db3 = getSessionDb();
   if (assignmentSlug) {
-    const rows2 = db2.prepare(
+    const rows2 = db3.prepare(
       "SELECT * FROM sessions WHERE project_slug = ? AND assignment_slug = ? ORDER BY started DESC"
     ).all(projectSlug, assignmentSlug);
     return rows2.map(rowToSession);
   }
-  const rows = db2.prepare("SELECT * FROM sessions WHERE project_slug = ? ORDER BY started DESC").all(projectSlug);
+  const rows = db3.prepare("SELECT * FROM sessions WHERE project_slug = ? ORDER BY started DESC").all(projectSlug);
   return rows.map(rowToSession);
 }
 async function deleteSessions(sessionIds) {
   if (sessionIds.length === 0) return 0;
-  const db2 = getSessionDb();
+  const db3 = getSessionDb();
   const placeholders = sessionIds.map(() => "?").join(", ");
-  const result = db2.prepare(`DELETE FROM sessions WHERE session_id IN (${placeholders})`).run(...sessionIds);
+  const result = db3.prepare(`DELETE FROM sessions WHERE session_id IN (${placeholders})`).run(...sessionIds);
   return result.changes;
 }
 var DONE_ASSIGNMENT_STATUSES = /* @__PURE__ */ new Set(["completed", "failed", "review"]);
@@ -6146,8 +6146,8 @@ async function readAssignmentStatus(projectDir, assignmentSlug) {
   );
 }
 async function reconcileActiveSessions(projectsDir, assignmentsDir2) {
-  const db2 = getSessionDb();
-  const activeSessions = db2.prepare("SELECT * FROM sessions WHERE status = 'active' AND assignment_slug IS NOT NULL").all();
+  const db3 = getSessionDb();
+  const activeSessions = db3.prepare("SELECT * FROM sessions WHERE status = 'active' AND assignment_slug IS NOT NULL").all();
   if (activeSessions.length === 0) return 0;
   const assignmentStatuses = /* @__PURE__ */ new Map();
   const seen = /* @__PURE__ */ new Set();
@@ -6184,10 +6184,10 @@ async function reconcileActiveSessions(projectsDir, assignmentsDir2) {
   return totalUpdated;
 }
 async function listSessionsByAssignment(projectSlug, assignmentSlug) {
-  const db2 = getSessionDb();
-  const rows = projectSlug === null ? db2.prepare(
+  const db3 = getSessionDb();
+  const rows = projectSlug === null ? db3.prepare(
     "SELECT * FROM sessions WHERE assignment_slug = ? AND project_slug IS NULL ORDER BY started DESC"
-  ).all(assignmentSlug) : db2.prepare(
+  ).all(assignmentSlug) : db3.prepare(
     "SELECT * FROM sessions WHERE project_slug = ? AND assignment_slug = ? ORDER BY started DESC"
   ).all(projectSlug, assignmentSlug);
   return rows.map(rowToSession);
@@ -6195,9 +6195,9 @@ async function listSessionsByAssignment(projectSlug, assignmentSlug) {
 
 // src/dashboard/watcher.ts
 import { watch } from "chokidar";
-import { relative, sep } from "path";
+import { basename as basename2, dirname as dirname3, relative, sep } from "path";
 function createWatcher(options) {
-  const { projectsDir, assignmentsDir: assignmentsDir2, serversDir: serversDir2, playbooksDir: playbooksDir2, todosDir: todosDir2, onMessage, debounceMs = 300 } = options;
+  const { projectsDir, assignmentsDir: assignmentsDir2, serversDir: serversDir2, playbooksDir: playbooksDir2, todosDir: todosDir2, dbPath, onMessage, debounceMs = 300 } = options;
   const pendingEvents = /* @__PURE__ */ new Map();
   const projectsWatcher = watch(projectsDir, {
     ignoreInitial: true,
@@ -6365,6 +6365,38 @@ function createWatcher(options) {
     todosWatcher.on("add", handleTodoChange2);
     todosWatcher.on("unlink", handleTodoChange2);
   }
+  let leasesDbWatcher = null;
+  if (dbPath) {
+    let handleDbChange2 = function(filePath) {
+      if (!basename2(filePath).startsWith(dbBase)) return;
+      const debounceKey = "__leases-db__";
+      const existing = pendingEvents.get(debounceKey);
+      if (existing) clearTimeout(existing);
+      pendingEvents.set(
+        debounceKey,
+        setTimeout(() => {
+          pendingEvents.delete(debounceKey);
+          const message = {
+            type: "leases-updated",
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          };
+          onMessage(message);
+        }, debounceMs)
+      );
+    };
+    var handleDbChange = handleDbChange2;
+    const dbDir = dirname3(dbPath);
+    const dbBase = basename2(dbPath);
+    leasesDbWatcher = watch(dbDir, {
+      ignoreInitial: true,
+      persistent: true,
+      depth: 0,
+      ignored: /(^|[\/\\])\../
+    });
+    leasesDbWatcher.on("change", handleDbChange2);
+    leasesDbWatcher.on("add", handleDbChange2);
+    leasesDbWatcher.on("unlink", handleDbChange2);
+  }
   return {
     close: async () => {
       pendingEvents.forEach((timeout) => {
@@ -6376,6 +6408,7 @@ function createWatcher(options) {
       if (serversWatcher) await serversWatcher.close();
       if (playbooksWatcher) await playbooksWatcher.close();
       if (todosWatcher) await todosWatcher.close();
+      if (leasesDbWatcher) await leasesDbWatcher.close();
     }
   };
 }
@@ -6393,7 +6426,7 @@ init_timestamp();
 init_fs();
 init_parser();
 import { Router } from "express";
-import { resolve as resolve12, basename as basename2 } from "path";
+import { resolve as resolve12, basename as basename3 } from "path";
 import { rm, readFile as readFile10, open as fsOpen } from "fs/promises";
 
 // src/dashboard/acceptance-criteria.ts
@@ -6678,7 +6711,7 @@ function createWriteRouter(projectsDir, assignmentsDir2) {
       res.status(404).json({ error: `Project "${slug}" not found` });
       return;
     }
-    const document = await getEditableDocument(projectsDir, "memory", basename2(projectDir), itemSlug);
+    const document = await getEditableDocument(projectsDir, "memory", basename3(projectDir), itemSlug);
     if (!document) {
       res.status(404).json({ error: "Memory not found" });
       return;
@@ -6697,7 +6730,7 @@ function createWriteRouter(projectsDir, assignmentsDir2) {
       res.status(404).json({ error: `Project "${slug}" not found` });
       return;
     }
-    const document = await getEditableDocument(projectsDir, "resource", basename2(projectDir), itemSlug);
+    const document = await getEditableDocument(projectsDir, "resource", basename3(projectDir), itemSlug);
     if (!document) {
       res.status(404).json({ error: "Resource not found" });
       return;
@@ -6782,7 +6815,7 @@ ${body.startsWith("\n") ? body.slice(1) : body}${body.endsWith("\n") ? "" : "\n"
         let content = renderItemStub(kind, {
           slug: requestedSlug,
           name,
-          projectSlug: basename2(projectDir),
+          projectSlug: basename3(projectDir),
           timestamp
         });
         const customBody = typeof body.body === "string" ? body.body : "";
@@ -6799,13 +6832,13 @@ ${body.startsWith("\n") ? body.slice(1) : body}${body.endsWith("\n") ? "" : "\n"
         } catch (err) {
           if (err.code === "EEXIST") {
             res.status(409).json({
-              error: `${kind === "memory" ? "Memory" : "Resource"} with slug "${requestedSlug}" already exists in project "${basename2(projectDir)}".`
+              error: `${kind === "memory" ? "Memory" : "Resource"} with slug "${requestedSlug}" already exists in project "${basename3(projectDir)}".`
             });
             return;
           }
           throw err;
         }
-        res.status(201).json({ slug: requestedSlug, projectSlug: basename2(projectDir), content });
+        res.status(201).json({ slug: requestedSlug, projectSlug: basename3(projectDir), content });
       } catch (error) {
         console.error(`Error creating ${kind}:`, error);
         res.status(500).json({ error: `Failed to create ${kind}: ${error.message}` });
@@ -6840,7 +6873,7 @@ ${body.startsWith("\n") ? body.slice(1) : body}${body.endsWith("\n") ? "" : "\n"
 ${nextBody}${nextBody.endsWith("\n") ? "" : "\n"}`;
         merged = setTopLevelField(merged, "updated", nowTimestamp());
         await writeFileForce(filePath, merged);
-        const detail = await getItemDetail(kind, basename2(projectDir), itemSlug);
+        const detail = await getItemDetail(kind, basename3(projectDir), itemSlug);
         res.json({ [kind]: detail, content: merged });
       } catch (error) {
         console.error(`Error updating ${kind}:`, error);
@@ -8355,6 +8388,243 @@ function createAgentSessionsRouter(projectsDir, broadcast, assignmentsDir2) {
   return router;
 }
 
+// src/dashboard/api-leases.ts
+import { Router as Router4 } from "express";
+
+// src/db/leases-db.ts
+init_paths();
+import Database2 from "better-sqlite3";
+import { randomUUID as randomUUID2 } from "crypto";
+import { resolve as resolve14 } from "path";
+var db2 = null;
+var LEASE_SCHEMA_VERSION = "1";
+var SCHEMA_SQL2 = `
+CREATE TABLE IF NOT EXISTS meta (
+  key   TEXT PRIMARY KEY,
+  value TEXT
+);
+
+CREATE TABLE IF NOT EXISTS inventories (
+  slug          TEXT PRIMARY KEY,
+  kind          TEXT NOT NULL,
+  display_name  TEXT,
+  default_ttl_s INTEGER NOT NULL CHECK (default_ttl_s > 0),
+  created_at    TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS inventory_members (
+  inventory_slug TEXT NOT NULL,
+  member_id      TEXT NOT NULL,
+  status         TEXT NOT NULL DEFAULT 'idle'
+                   CHECK (status IN ('idle','leased','retired')),
+  generation     INTEGER NOT NULL DEFAULT 0,
+  metadata_json  TEXT,
+  last_used_at   TEXT,
+  retired_at     TEXT,
+  PRIMARY KEY (inventory_slug, member_id),
+  FOREIGN KEY (inventory_slug) REFERENCES inventories(slug)
+);
+
+CREATE INDEX IF NOT EXISTS idx_members_idle
+  ON inventory_members (inventory_slug, status, last_used_at);
+
+CREATE TABLE IF NOT EXISTS leases (
+  lease_id        TEXT PRIMARY KEY,
+  inventory_slug  TEXT NOT NULL,
+  member_id       TEXT NOT NULL,
+  member_gen      INTEGER NOT NULL,
+  state           TEXT NOT NULL
+                    CHECK (state IN ('active','released','expired','revoked')),
+  granted_at      TEXT NOT NULL,
+  expires_at      TEXT NOT NULL,
+  released_at     TEXT,
+  requested_for   TEXT,
+  FOREIGN KEY (inventory_slug, member_id)
+    REFERENCES inventory_members(inventory_slug, member_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_leases_gc
+  ON leases (state, expires_at);
+
+CREATE TABLE IF NOT EXISTS lease_events (
+  id           INTEGER PRIMARY KEY AUTOINCREMENT,
+  lease_id     TEXT NOT NULL,
+  event        TEXT NOT NULL,
+  at           TEXT NOT NULL,
+  detail_json  TEXT,
+  FOREIGN KEY (lease_id) REFERENCES leases(lease_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_events_lease
+  ON lease_events (lease_id, at);
+`;
+var NotFoundError = class extends Error {
+  constructor(id) {
+    super(`lease ${id} not found`);
+    this.id = id;
+    this.name = "NotFoundError";
+  }
+};
+var LeaseContentionError = class extends Error {
+  constructor(inventorySlug) {
+    super(`contention timeout on '${inventorySlug}'; retry`);
+    this.inventorySlug = inventorySlug;
+    this.name = "LeaseContentionError";
+  }
+};
+function nowIso() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+function isBusyError(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  return e.code === "SQLITE_BUSY" || e.code === "SQLITE_BUSY_SNAPSHOT";
+}
+function initLeasesDb(dbPath) {
+  if (db2) return db2;
+  const finalPath = dbPath ?? resolve14(syntaurRoot(), "syntaur.db");
+  db2 = new Database2(finalPath);
+  db2.pragma("journal_mode = WAL");
+  db2.pragma("busy_timeout = 5000");
+  db2.pragma("foreign_keys = ON");
+  const database = db2;
+  const runMigrations = database.transaction(() => {
+    database.exec(SCHEMA_SQL2);
+    database.prepare("INSERT OR IGNORE INTO meta (key, value) VALUES (?, ?)").run("lease_schema_version", LEASE_SCHEMA_VERSION);
+  });
+  runMigrations.exclusive();
+  return db2;
+}
+function getLeasesDb() {
+  if (!db2) {
+    throw new Error("Leases database not initialized. Call initLeasesDb() first.");
+  }
+  return db2;
+}
+function closeLeasesDb() {
+  if (db2) {
+    db2.close();
+    db2 = null;
+  }
+}
+function listInventories() {
+  const database = getLeasesDb();
+  return database.prepare(
+    `SELECT slug, kind, display_name, default_ttl_s, created_at
+       FROM inventories ORDER BY slug`
+  ).all();
+}
+function getInventoryDetail(slug) {
+  const database = getLeasesDb();
+  const inv = database.prepare(
+    `SELECT slug, kind, display_name, default_ttl_s, created_at
+       FROM inventories WHERE slug = ?`
+  ).get(slug);
+  if (!inv) return null;
+  const members = database.prepare(
+    `SELECT inventory_slug, member_id, status, generation, metadata_json, last_used_at, retired_at
+       FROM inventory_members WHERE inventory_slug = ?
+       ORDER BY member_id`
+  ).all(slug);
+  const active_leases = database.prepare(
+    `SELECT lease_id, inventory_slug, member_id, member_gen, state, granted_at, expires_at, released_at, requested_for
+       FROM leases WHERE inventory_slug = ? AND state = 'active'
+       ORDER BY granted_at`
+  ).all(slug);
+  return { inventory: inv, members, active_leases };
+}
+function forceReleaseLease(lease_id) {
+  const database = getLeasesDb();
+  try {
+    const fn = database.transaction(() => {
+      const now = nowIso();
+      const lookup = database.prepare(
+        `SELECT inventory_slug, member_id, member_gen, state
+           FROM leases WHERE lease_id = ?`
+      ).get(lease_id);
+      if (!lookup) throw new NotFoundError(lease_id);
+      if (lookup.state === "revoked") return { member_freed: false };
+      const memberRes = database.prepare(
+        `UPDATE inventory_members
+              SET status = 'idle', generation = generation + 1
+            WHERE inventory_slug = ? AND member_id = ?
+              AND generation = ?`
+      ).run(lookup.inventory_slug, lookup.member_id, lookup.member_gen);
+      database.prepare(
+        `UPDATE leases
+              SET state = 'revoked', released_at = ?
+            WHERE lease_id = ? AND state != 'revoked'`
+      ).run(now, lease_id);
+      const member_freed = memberRes.changes > 0;
+      database.prepare(
+        `INSERT INTO lease_events (lease_id, event, at, detail_json)
+           VALUES (?, 'force_released', ?, ?)`
+      ).run(lease_id, now, JSON.stringify({ member_freed }));
+      return { member_freed };
+    });
+    return fn.immediate();
+  } catch (err) {
+    if (isBusyError(err)) throw new LeaseContentionError(lease_id);
+    throw err;
+  }
+}
+
+// src/dashboard/api-leases.ts
+function createLeasesRouter(broadcast) {
+  const router = Router4();
+  router.get("/", (_req, res) => {
+    try {
+      initLeasesDb();
+      const inventories = listInventories();
+      const details = inventories.map((inv) => getInventoryDetail(inv.slug)).filter((d) => d !== null);
+      res.json({ inventories: details });
+    } catch (error) {
+      res.status(500).json({
+        error: error instanceof Error ? error.message : "List failed"
+      });
+    }
+  });
+  router.get("/:slug", (req, res) => {
+    try {
+      initLeasesDb();
+      const detail = getInventoryDetail(req.params.slug);
+      if (!detail) {
+        res.status(404).json({ error: "Inventory not found" });
+        return;
+      }
+      res.json(detail);
+    } catch (error) {
+      res.status(500).json({
+        error: error instanceof Error ? error.message : "Read failed"
+      });
+    }
+  });
+  router.post("/:slug/force-release/:lease_id", (req, res) => {
+    try {
+      initLeasesDb();
+      const result = forceReleaseLease(req.params.lease_id);
+      broadcast?.({
+        type: "leases-updated",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      });
+      res.json({ ...result, lease_id: req.params.lease_id });
+    } catch (error) {
+      if (error instanceof NotFoundError) {
+        res.status(404).json({ error: "Lease not found" });
+        return;
+      }
+      if (error instanceof LeaseContentionError) {
+        res.status(503).json({ error: "Contention timeout; retry" });
+        return;
+      }
+      res.status(500).json({
+        error: error instanceof Error ? error.message : "Force release failed"
+      });
+    }
+  });
+  return router;
+}
+
 // src/dashboard/api-playbooks.ts
 init_api();
 init_parser();
@@ -8363,11 +8633,11 @@ init_timestamp();
 init_fs();
 init_playbook();
 init_playbooks();
-import { Router as Router4 } from "express";
-import { resolve as resolve14 } from "path";
+import { Router as Router5 } from "express";
+import { resolve as resolve15 } from "path";
 import { readFile as readFile11, unlink as unlink2 } from "fs/promises";
 function createPlaybooksRouter(playbooksDir2) {
-  const router = Router4();
+  const router = Router5();
   router.get("/", async (_req, res) => {
     try {
       const playbooks = await listPlaybooks(playbooksDir2);
@@ -8434,7 +8704,7 @@ function createPlaybooksRouter(playbooksDir2) {
         res.status(404).json({ error: `Playbook "${req.params.slug}" not found` });
         return;
       }
-      const filePath = resolve14(playbooksDir2, resolved.filename);
+      const filePath = resolve15(playbooksDir2, resolved.filename);
       const content = await readFile11(filePath, "utf-8");
       res.json({
         documentType: "playbook",
@@ -8460,7 +8730,7 @@ function createPlaybooksRouter(playbooksDir2) {
         return;
       }
       await ensureDir(playbooksDir2);
-      const filePath = resolve14(playbooksDir2, `${slug}.md`);
+      const filePath = resolve15(playbooksDir2, `${slug}.md`);
       if (await fileExists(filePath)) {
         res.status(409).json({ error: `Playbook "${slug}" already exists` });
         return;
@@ -8484,7 +8754,7 @@ function createPlaybooksRouter(playbooksDir2) {
         res.status(404).json({ error: `Playbook "${req.params.slug}" not found` });
         return;
       }
-      const filePath = resolve14(playbooksDir2, resolved.filename);
+      const filePath = resolve15(playbooksDir2, resolved.filename);
       await writeFileForce(filePath, content);
       await rebuildPlaybookManifest(playbooksDir2);
       res.json({ slug: resolved.slug, path: filePath });
@@ -8503,7 +8773,7 @@ function createPlaybooksRouter(playbooksDir2) {
         res.status(404).json({ error: `Playbook "${req.params.slug}" not found` });
         return;
       }
-      const filePath = resolve14(playbooksDir2, resolved.filename);
+      const filePath = resolve15(playbooksDir2, resolved.filename);
       await unlink2(filePath);
       await removeFromDisabledList(resolved.slug);
       await rebuildPlaybookManifest(playbooksDir2);
@@ -8522,9 +8792,9 @@ init_fs_migration();
 init_parser2();
 init_fs();
 init_paths();
-import { Router as Router5 } from "express";
+import { Router as Router6 } from "express";
 import { readdir as readdir8 } from "fs/promises";
-import { resolve as resolvePath, dirname as dirname3 } from "path";
+import { resolve as resolvePath, dirname as dirname4 } from "path";
 import { rename as rename3, mkdir as mkdir2 } from "fs/promises";
 
 // src/dashboard/todos-locks.ts
@@ -8570,7 +8840,7 @@ function touchItem(item) {
   item.updatedAt = now;
 }
 function createTodosRouter(todosDir2, broadcast, projectsDir) {
-  const router = Router5();
+  const router = Router6();
   function broadcastUpdate() {
     broadcast({ type: "todos-updated", timestamp: (/* @__PURE__ */ new Date()).toISOString() });
   }
@@ -8700,7 +8970,7 @@ function createTodosRouter(todosDir2, broadcast, projectsDir) {
   router.post("/:workspace/archive", async (req, res) => {
     try {
       const { archivePath: archivePath2 } = await Promise.resolve().then(() => (init_parser2(), parser_exports));
-      const { resolve: resolve20 } = await import("path");
+      const { resolve: resolve21 } = await import("path");
       const { readFile: readFile15 } = await import("fs/promises");
       const { writeFileForce: writeFileForce2 } = await Promise.resolve().then(() => (init_fs(), fs_exports));
       const workspace = getWorkspaceParam(req.params.workspace);
@@ -8717,7 +8987,7 @@ function createTodosRouter(todosDir2, broadcast, projectsDir) {
         (e) => e.itemIds.every((id) => completedIds.has(id))
       );
       const archFile = archivePath2(todosDir2, workspace, checklist.archiveInterval);
-      await ensureDir(resolve20(todosDir2, "archive"));
+      await ensureDir(resolve21(todosDir2, "archive"));
       let archContent = "";
       if (await fileExists(archFile)) {
         archContent = await readFile15(archFile, "utf-8");
@@ -9124,7 +9394,7 @@ workspace: ${workspace}
           if (await fileExists(newPlanDir)) {
             return { status: 409, error: "plan dir already exists in target" };
           }
-          await mkdir2(dirname3(newPlanDir), { recursive: true });
+          await mkdir2(dirname4(newPlanDir), { recursive: true });
           await rename3(item.planDir, newPlanDir);
           item.planDir = newPlanDir;
         }
@@ -9200,9 +9470,9 @@ init_parser2();
 init_fs();
 init_paths();
 init_slug();
-import { Router as Router6 } from "express";
+import { Router as Router7 } from "express";
 import { mkdir as mkdir3, readFile as readFile13, rename as rename4 } from "fs/promises";
-import { resolve as resolve17, dirname as dirname4 } from "path";
+import { resolve as resolve18, dirname as dirname5 } from "path";
 var WORKSPACE_REGEX2 = /^[a-z0-9_][a-z0-9-]*$/;
 function touchItem2(item) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -9217,7 +9487,7 @@ function params(req) {
   return req.params;
 }
 async function projectExists(projectsDir, slug) {
-  return fileExists(resolve17(projectsDir, slug, "project.md"));
+  return fileExists(resolve18(projectsDir, slug, "project.md"));
 }
 async function ensureProjectTodosDir(projectsDir, slug) {
   const todosDir2 = projectTodosDir(projectsDir, slug);
@@ -9234,7 +9504,7 @@ async function ensureProjectTodosDir(projectsDir, slug) {
     throw err;
   }
   try {
-    await mkdir3(resolve17(todosDir2, "archive"), { recursive: false });
+    await mkdir3(resolve18(todosDir2, "archive"), { recursive: false });
   } catch (err) {
     const code = err.code;
     if (code === "EEXIST") return;
@@ -9250,7 +9520,7 @@ function notFound(res, slug) {
   res.status(404).json({ error: `Project "${slug}" not found` });
 }
 function createProjectTodosRouter(projectsDir, broadcast, workspaceTodosDir) {
-  const router = Router6({ mergeParams: true });
+  const router = Router7({ mergeParams: true });
   function broadcastUpdate(projectSlug) {
     broadcast({ type: "todos-updated", projectSlug, timestamp: (/* @__PURE__ */ new Date()).toISOString() });
   }
@@ -9858,18 +10128,18 @@ workspace: ${slug}
           if (tg.includes("/")) {
             const parts = tg.split("/");
             if (parts.length !== 2) return { error: `Invalid target.assignment "${tg}"` };
-            assignmentDir = resolve17(projectsDir, parts[0], "assignments", parts[1]);
+            assignmentDir = resolve18(projectsDir, parts[0], "assignments", parts[1]);
             assignmentRef = `${parts[0]}/${parts[1]}`;
           } else if (/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(tg)) {
-            assignmentDir = resolve17(assignmentsDirFn(), tg);
+            assignmentDir = resolve18(assignmentsDirFn(), tg);
             assignmentRef = tg;
           } else {
             return { error: `Invalid target.assignment "${tg}"` };
           }
-          const assignmentMdPath2 = resolve17(assignmentDir, "assignment.md");
+          const assignmentMdPath2 = resolve18(assignmentDir, "assignment.md");
           if (!await fileExists(assignmentMdPath2)) return { error: `Target assignment not found: ${assignmentMdPath2}` };
         }
-        const assignmentMdPath = resolve17(assignmentDir, "assignment.md");
+        const assignmentMdPath = resolve18(assignmentDir, "assignment.md");
         let content = await readFile13(assignmentMdPath, "utf-8");
         content = appendTodosToAssignmentBody2(
           content,
@@ -9999,7 +10269,7 @@ workspace: ${slug}
           if (await fileExists(newPlanDir)) {
             return { status: 409, error: "plan dir already exists in target" };
           }
-          await mkdir3(dirname4(newPlanDir), { recursive: true });
+          await mkdir3(dirname5(newPlanDir), { recursive: true });
           await rename4(item.planDir, newPlanDir);
           item.planDir = newPlanDir;
         }
@@ -10062,7 +10332,7 @@ workspace: ${slug}
 
 // src/dashboard/api-backup.ts
 init_config2();
-import { Router as Router7 } from "express";
+import { Router as Router8 } from "express";
 
 // src/utils/github-backup.ts
 init_paths();
@@ -10071,7 +10341,7 @@ init_config2();
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
 import { cp, mkdtemp, rm as rm2, readFile as readFile14, writeFile as writeFile4, unlink as unlink3, stat, open, rename as rename5 } from "fs/promises";
-import { resolve as resolve18, join as join2 } from "path";
+import { resolve as resolve19, join as join2 } from "path";
 import { tmpdir } from "os";
 var exec2 = promisify2(execFile2);
 var VALID_CATEGORIES = ["projects", "playbooks", "todos", "servers", "config"];
@@ -10111,7 +10381,7 @@ async function resolveCategoryPath(category) {
     case "servers":
       return { sourcePath: serversDir(), repoPath: "servers", isFile: false };
     case "config":
-      return { sourcePath: resolve18(syntaurRoot(), "config.md"), repoPath: "config.md", isFile: true };
+      return { sourcePath: resolve19(syntaurRoot(), "config.md"), repoPath: "config.md", isFile: true };
   }
 }
 async function checkGitInstalled() {
@@ -10122,7 +10392,7 @@ async function checkGitInstalled() {
   }
 }
 async function acquireLock() {
-  const lockPath = resolve18(syntaurRoot(), LOCK_FILE_NAME);
+  const lockPath = resolve19(syntaurRoot(), LOCK_FILE_NAME);
   await ensureDir(syntaurRoot());
   try {
     const handle = await open(lockPath, "wx");
@@ -10169,7 +10439,7 @@ async function copyRecursive(src, dest) {
     await ensureDir(dest);
     await cp(src, dest, { recursive: true, force: true });
   } else {
-    await ensureDir(resolve18(dest, ".."));
+    await ensureDir(resolve19(dest, ".."));
     await cp(src, dest, { force: true });
   }
 }
@@ -10217,7 +10487,7 @@ async function backupToGithub(overrides) {
       }
       if (category === "config") {
         const sanitized = await readSanitizedConfig(sourcePath);
-        await ensureDir(resolve18(destPath, ".."));
+        await ensureDir(resolve19(destPath, ".."));
         await writeFile4(destPath, sanitized, "utf-8");
       } else {
         await copyRecursive(sourcePath, destPath);
@@ -10271,7 +10541,7 @@ async function backupToGithub(overrides) {
 }
 async function safeRestoreCategory(localPath, repoSrcPath, isFile) {
   if (isFile) {
-    await ensureDir(resolve18(localPath, ".."));
+    await ensureDir(resolve19(localPath, ".."));
     await cp(repoSrcPath, localPath, { force: true });
     return;
   }
@@ -10372,7 +10642,7 @@ async function restoreFromGithub(overrides) {
 }
 async function getBackupStatus() {
   const config = await readConfig();
-  const lockPath = resolve18(syntaurRoot(), LOCK_FILE_NAME);
+  const lockPath = resolve19(syntaurRoot(), LOCK_FILE_NAME);
   const locked = await fileExists(lockPath);
   return {
     repo: config.backup?.repo ?? null,
@@ -10385,7 +10655,7 @@ async function getBackupStatus() {
 
 // src/dashboard/api-backup.ts
 function createBackupRouter() {
-  const router = Router7();
+  const router = Router8();
   router.get("/", async (_req, res) => {
     try {
       const status = await getBackupStatus();
@@ -10706,10 +10976,11 @@ function createDashboardServer(options) {
   migrateFromMarkdown(projectsDir).catch((err) => {
     console.error("Session migration from markdown failed:", err);
   });
+  initLeasesDb();
   (async () => {
     try {
       const configResult = await migrateLegacyConfig(
-        resolve19(syntaurRoot(), "config.md")
+        resolve20(syntaurRoot(), "config.md")
       );
       const projectResult = await migrateLegacyProjectFiles(projectsDir);
       const summary = summarizeMigration(projectResult, configResult);
@@ -11039,6 +11310,7 @@ function createDashboardServer(options) {
   });
   app.use(createWriteRouter(projectsDir, assignmentsDir2));
   app.use("/api/servers", createServersRouter(serversDir2, projectsDir, assignmentsDir2));
+  app.use("/api/leases", createLeasesRouter(broadcast));
   app.use("/api/agent-sessions", createAgentSessionsRouter(projectsDir, broadcast, assignmentsDir2));
   app.use("/api/playbooks", createPlaybooksRouter(playbooksDir2));
   app.get("/api/memories", async (_req, res) => {
@@ -11064,14 +11336,14 @@ function createDashboardServer(options) {
   app.use("/api/backup", createBackupRouter());
   if (serveStaticUi && dashboardDistPath) {
     const sendOpts = { dotfiles: "allow" };
-    app.use("/assets", express.static(resolve19(dashboardDistPath, "assets"), sendOpts));
+    app.use("/assets", express.static(resolve20(dashboardDistPath, "assets"), sendOpts));
     app.use(express.static(dashboardDistPath, { ...sendOpts, index: false, fallthrough: true }));
     app.get("{*path}", async (req, res) => {
       if (req.path.startsWith("/api") || req.path === "/ws" || req.path.startsWith("/assets")) {
         res.status(404).json({ error: "Not Found" });
         return;
       }
-      const indexPath = resolve19(dashboardDistPath, "index.html");
+      const indexPath = resolve20(dashboardDistPath, "index.html");
       if (!await fileExists(indexPath)) {
         res.status(503).send(
           'Dashboard not built. Run "npm run build:dashboard" first.'
@@ -11095,6 +11367,7 @@ function createDashboardServer(options) {
         serversDir: serversDir2,
         playbooksDir: playbooksDir2,
         todosDir: todosDir2,
+        dbPath: resolve20(syntaurRoot(), "syntaur.db"),
         onMessage: broadcast
       });
       startAutodiscovery({ serversDir: serversDir2, projectsDir, assignmentsDir: assignmentsDir2, excludePids: /* @__PURE__ */ new Set([process.pid]) });
@@ -11109,7 +11382,7 @@ function createDashboardServer(options) {
           }
         });
         server.listen(port, () => {
-          const portFile = resolve19(syntaurRoot(), "dashboard-port");
+          const portFile = resolve20(syntaurRoot(), "dashboard-port");
           writeFile5(portFile, String(port), "utf-8").catch(() => {
           });
           resolvePromise();
@@ -11122,11 +11395,12 @@ function createDashboardServer(options) {
         await watcherHandle.close();
       }
       closeSessionDb();
+      closeLeasesDb();
       for (const client of clients) {
         client.terminate();
       }
       clients.clear();
-      const portFile = resolve19(syntaurRoot(), "dashboard-port");
+      const portFile = resolve20(syntaurRoot(), "dashboard-port");
       await unlink4(portFile).catch(() => {
       });
       server.closeAllConnections?.();