@algosuite/vo-mcp 0.2.0-beta.39 → 0.2.0-beta.40

package/dist/agent-auth-probe-cli.mjs

@@ -291,6 +291,7 @@ var VO_HEADLESS_PNPM_TOOL = "Bash(pnpm *)";
 var VO_HEADLESS_PNPM_FROM_DIR_TOOL = "Bash(pnpm --dir *)";
 var VO_RESEARCH_TOOLS = ["WebFetch", "WebSearch"];
 var VO_WORKFLOW_TOOLS = ["Workflow"];
+var VO_CONSENSUS_TOOLS = ["mcp__vo-mcp__vo_consensus_judgment", "mcp__vo-mcp__vo_verify_answer"];
 var SAFE_PERMISSION_MODES = /* @__PURE__ */ new Set(["acceptEdits", "plan", "default", "dontAsk", "delegate"]);
 function normalizeClaudePermissionMode(value) {
   const normalized = String(value ?? "").trim() || DEFAULT_PERMISSION_MODE;
@@ -305,8 +306,10 @@ function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, m
   const research = noWeb ? [] : VO_RESEARCH_TOOLS;
   const noWorkflow = noWeb || String(env?.VO_CODE_RUNNER_NO_WORKFLOW ?? "").trim() === "1";
   const workflow = researchHarness === true && !noWorkflow ? VO_WORKFLOW_TOOLS : [];
+  const noConsensus = String(env?.VO_CODE_RUNNER_NO_CONSENSUS ?? "").trim() === "1";
+  const consensus = noConsensus ? [] : VO_CONSENSUS_TOOLS;
   const baseTools = effectivePermissionMode === DEFAULT_PERMISSION_MODE ? [VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL] : [VO_SESSION_STATE_TOOL];
-  const allowedTools = [...baseTools, ...research, ...workflow].join(",");
+  const allowedTools = [...baseTools, ...consensus, ...research, ...workflow].join(",");
   const args = [
     "-p",
     "--output-format",

package/dist/runner-cli.js

@@ -3494,8 +3494,10 @@ function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, m
   const research = noWeb ? [] : VO_RESEARCH_TOOLS;
   const noWorkflow = noWeb || String(env2?.VO_CODE_RUNNER_NO_WORKFLOW ?? "").trim() === "1";
   const workflow = researchHarness === true && !noWorkflow ? VO_WORKFLOW_TOOLS : [];
+  const noConsensus = String(env2?.VO_CODE_RUNNER_NO_CONSENSUS ?? "").trim() === "1";
+  const consensus = noConsensus ? [] : VO_CONSENSUS_TOOLS;
   const baseTools = effectivePermissionMode === DEFAULT_PERMISSION_MODE ? [VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL] : [VO_SESSION_STATE_TOOL];
-  const allowedTools = [...baseTools, ...research, ...workflow].join(",");
+  const allowedTools = [...baseTools, ...consensus, ...research, ...workflow].join(",");
   const args = [
     "-p",
     "--output-format",
@@ -3521,7 +3523,7 @@ function buildClaudeArgs({ permissionMode = DEFAULT_PERMISSION_MODE, maxTurns, m
   args.push(...context7McpArgs(env2));
   return args;
 }
-var DEFAULT_PERMISSION_MODE, VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL, VO_RESEARCH_TOOLS, VO_WORKFLOW_TOOLS, SAFE_PERMISSION_MODES;
+var DEFAULT_PERMISSION_MODE, VO_SESSION_STATE_TOOL, VO_HEADLESS_PNPM_TOOL, VO_HEADLESS_PNPM_FROM_DIR_TOOL, VO_RESEARCH_TOOLS, VO_WORKFLOW_TOOLS, VO_CONSENSUS_TOOLS, SAFE_PERMISSION_MODES;
 var init_claude_args = __esm({
   "../../scripts/virtual-office/code-runner/claude-args.mjs"() {
     "use strict";
@@ -3532,6 +3534,7 @@ var init_claude_args = __esm({
     VO_HEADLESS_PNPM_FROM_DIR_TOOL = "Bash(pnpm --dir *)";
     VO_RESEARCH_TOOLS = ["WebFetch", "WebSearch"];
     VO_WORKFLOW_TOOLS = ["Workflow"];
+    VO_CONSENSUS_TOOLS = ["mcp__vo-mcp__vo_consensus_judgment", "mcp__vo-mcp__vo_verify_answer"];
     SAFE_PERMISSION_MODES = /* @__PURE__ */ new Set(["acceptEdits", "plan", "default", "dontAsk", "delegate"]);
   }
 });
@@ -6009,7 +6012,39 @@ function resolveOverlapScript({
   }
   return { scriptPath: joinFn(worktreeDir), trusted: false };
 }
-var TRUSTED_OVERLAP_CANDIDATES, CREDENTIAL_ENV_KEYS;
+function parseDirectOverlapPrs(output) {
+  const text = String(output || "");
+  const start = text.search(/^##\s+.*Direct File Overlaps/mu);
+  if (start < 0) return [];
+  const rest = text.slice(start);
+  const next = rest.slice(2).search(/^##\s+/mu);
+  const section = next < 0 ? rest : rest.slice(0, next + 2);
+  return [...new Set([...section.matchAll(/^###\s+PR\s+#(\d+)/gmu)].map((m) => Number(m[1])))];
+}
+function overlapPublishPolicy(overlap) {
+  const output = String(overlap?.output || "");
+  const blockedBy = parseDirectOverlapPrs(output);
+  const gateReason = blockedBy.length > 0 ? `direct file overlap with ${blockedBy.map((n) => `#${n}`).join(", ")}` : `gate refused without a direct-overlap section: ${(output.split("\n").find((l) => /aborting|unavailable|conflict|error/iu.test(l)) || output.split("\n")[0] || "no output").trim().slice(0, 160)}`;
+  const refs = blockedBy.length > 0 ? blockedBy.map((n) => `#${n}`).join(", ") : "unresolved";
+  const bodyPrefix = [
+    `> \u26A0\uFE0F **${OVERLAP_BLOCKED_MARKER}: ${refs}** \u2014 ${gateReason}. The runner published this as a DRAFT to preserve the finished work instead of failing the task. Do NOT mark ready or merge before the overlap is resolved (the draft flag is the only merge guard); then refresh this branch on current main and mark it ready. Auto-merge was NOT armed.`,
+    "",
+    "<details><summary>local overlap gate output</summary>",
+    "",
+    "```",
+    output.slice(0, 6e3),
+    "```",
+    "</details>",
+    ""
+  ].join("\n");
+  return { draft: true, overlapDraft: true, blockedBy, gateReason, bodyPrefix };
+}
+function applyOverlapPublishPolicy({ overlap, draft, body }) {
+  if (overlap?.ok) return { draft, body, overlapDraft: false, overlapBlockedBy: [], gateReason: "" };
+  const policy = overlapPublishPolicy(overlap);
+  return { draft: true, body: `${policy.bodyPrefix}${body ?? ""}`, overlapDraft: true, overlapBlockedBy: policy.blockedBy, gateReason: policy.gateReason };
+}
+var TRUSTED_OVERLAP_CANDIDATES, CREDENTIAL_ENV_KEYS, OVERLAP_BLOCKED_MARKER;
 var init_pr_overlap_gate = __esm({
   "../../scripts/virtual-office/code-runner/pr-overlap-gate.mjs"() {
     "use strict";
@@ -6027,6 +6062,7 @@ var init_pr_overlap_gate = __esm({
       "OPENAI_API_KEY",
       "CURSOR_API_KEY"
     ]);
+    OVERLAP_BLOCKED_MARKER = "VO-PUBLISH-OVERLAP-BLOCKED";
   }
 });
 
@@ -6042,6 +6078,9 @@ function editExistingPrMetadata(worktreeDir, prNumber, { title, body, env: env2,
 function markExistingPrReady(worktreeDir, prNumber, { env: env2, runFn } = {}) {
   return runFn("gh", ["pr", "ready", String(prNumber)], worktreeDir, { env: env2 });
 }
+function demoteExistingPrToDraft(worktreeDir, prNumber, { env: env2, runFn } = {}) {
+  return runFn("gh", ["pr", "ready", "--undo", String(prNumber)], worktreeDir, { env: env2 });
+}
 function publicationTitlePrompt(task = {}) {
   const prompt = String(task.prompt || "");
   if (!task.resumed_from) return prompt;
@@ -6050,11 +6089,13 @@ function publicationTitlePrompt(task = {}) {
   return original.split(/\n\n(?:Operator follow-up instructions|Treat these as task-scoped)/u)[0].trim() || prompt;
 }
 async function syncExistingPrAsync(worktreeDir, existing, options = {}) {
-  const { title, body, draft = false, env: env2, runFn } = options;
+  const { title, body, draft = false, demoteToDraft = false, env: env2, runFn } = options;
   await editExistingPrMetadata(worktreeDir, existing.number, { title, body, env: env2, runFn });
   const markedReady = !draft && existing.isDraft;
   if (markedReady) await markExistingPrReady(worktreeDir, existing.number, { env: env2, runFn });
-  return { markedReady };
+  const demoted = draft && demoteToDraft && existing.isDraft === false;
+  if (demoted) await demoteExistingPrToDraft(worktreeDir, existing.number, { env: env2, runFn });
+  return { markedReady, demoted };
 }
 var init_existing_pr_publication = __esm({
   "../../scripts/virtual-office/code-runner/existing-pr-publication.mjs"() {
@@ -6939,8 +6980,9 @@ async function openCodeTaskPrAsync(worktreeDir, files, {
     env: githubToken ? installationTokenEnv(githubToken) : process.env,
     excludePrNumber: supersedesPrNumber
   });
-  if (!overlap.ok) throw new Error(`local PR overlap gate blocked publish:
-${overlap.output}`);
+  const policy = applyOverlapPublishPolicy({ overlap, draft, body });
+  ({ draft, body } = policy);
+  const { overlapDraft, overlapBlockedBy } = policy;
   const tokenUsed = await retryTransientAsync(
     () => pushBranchAsync(worktreeDir, branch, githubToken, {
       runCommand,
@@ -6959,6 +7001,7 @@ ${overlap.output}`);
       title: compactTitle(title),
       body,
       draft,
+      demoteToDraft: overlapDraft,
       env: authToken ? installationTokenEnv(authToken) : void 0,
       runFn: runCommand
     }), { onRetry: gitRetryLog("gh pr sync") });
@@ -6986,6 +7029,8 @@ ${overlap.output}`);
       truncated,
       resumed: true,
       markedReady,
+      overlapDraft,
+      overlapBlockedBy,
       ...autoMerge2,
       ...superseded2
     };
@@ -7020,7 +7065,7 @@ ${overlap.output}`);
     runCommand,
     onCleanupWarning
   });
-  return { prUrl, prNumber, branch: prBranch, truncated, ...autoMerge, ...superseded };
+  return { prUrl, prNumber, branch: prBranch, truncated, overlapDraft, overlapBlockedBy, ...autoMerge, ...superseded };
 }
 var sleep;
 var init_publish_async = __esm({
@@ -7124,6 +7169,7 @@ function buildDispatchOnboarding({ repo = "Algosuite-ai/Nexus" } = {}) {
     `You are an AlgoHQ-dispatched coding agent working in a fresh worktree of ${repo}.`,
     "You were dispatched by the operator (greylor, a non-coder founder) to do the TASK at the end of this message.",
     "Before writing ANY code, you MUST read the onboarding docs below \u2014 they are mandatory, not optional. Your worktree auto-loads CLAUDE.md, but the rest are NOT auto-loaded; open and read them.",
+    "Token discipline: the reads below are bounded on purpose (a Claude Code session that read every listed doc end-to-end spent ~$2.40 / ~260K cache-write tokens before its first edit on 2026-08-16). Follow the per-item scoping notes, and beyond this list read only what your task actually touches.",
     "",
     "MANDATORY READS (read these FIRST, in order):",
     reads,
@@ -7180,7 +7226,7 @@ var init_dispatch_onboarding = __esm({
     "use strict";
     init_skill_catalog();
     MANDATORY_READS = [
-      "CLAUDE.md (repo root \u2014 Claude-specific rules; auto-loaded, but READ it)",
+      "CLAUDE.md (repo root \u2014 Claude-specific rules; Claude Code sessions have it AUTO-LOADED \u2014 do NOT Read it again there, that re-spends ~18K tokens; Codex/Cursor/other agents must READ it)",
       'AGENTS.md (repo root \u2014 cross-vendor rules + "Onboarding for a lane"; NOT auto-loaded)',
       "README.md (repo root \u2014 product context)",
       "docs/current/virtual-office-agent-charter.md",
@@ -7189,9 +7235,9 @@ var init_dispatch_onboarding = __esm({
       "docs/current/evidence-grounded-consensus-testing.md",
       "docs/vo/ADR-001-verification-oracle-not-orchestrator-2026-05-29.md (AlgoHQ verifies + signs; human approves merges; NO autonomous bot-merge / headless triggers)",
       "docs/vo/vo-adr-002-two-plane-moat.md (fat secret server / thin dumb client)",
-      "docs/vo/vo-roadmap-2026-05-26.md (the live roadmap \u2014 read its Change log tail for current state)",
+      'docs/vo/vo-roadmap-2026-05-26.md (the live roadmap; ~50K tokens \u2014 read its "## 10. Change log" section (the last ~90 lines, via Read offset) for current state, then Grep/Read ONLY the section holding any status row your task must flip; never read it end-to-end)',
       "the nearest scoped CLAUDE.md for any directory you edit",
-      "for AlgoTax work: docs/current/algotax-progressive-return-roadmap.md + docs/current/algotax-coverage-roadmap.md",
+      "for AlgoTax work: docs/current/algotax-progressive-return-roadmap.md + docs/current/algotax-coverage-roadmap.md (together ~100K tokens \u2014 read each file's section index and ONLY the sections your task touches; a full read leaves no budget for the work)",
       "docs/current/pr-live-stewardship-doctrine.md (own EVERY PR to LIVE-VERIFIED; never let the operator discover a red PR or a backed-up deploy)"
     ];
     NON_NEGOTIABLES = [
@@ -7206,7 +7252,7 @@ var init_dispatch_onboarding = __esm({
       "A handoff or roadmap line is a CLAIM, not evidence \u2014 verify shipped state against `git show origin/main:<path>`, never the stale local main tree.",
       `MANDATORY FOR EVERY ALGOHQ PR (cloud-run/vo-*, packages/vo-mcp, packages/consensus-engine, packages/vo-ratchets, packages/vo-arch-defaults, scripts/virtual-office, vo-claude-plugin): record a dated Change-log entry IN THE SAME PR via EITHER appending to the "\xA7 10 Change log" of docs/vo/vo-roadmap-2026-05-26.md OR (PREFERRED) creating docs/vo/roadmap-log/<YYYY-MM-DD>-<short-slug>.md (fragments avoid conflicts when PRs ship concurrently) and flip any status the work shipped. CI enforces this (check-vo-roadmap-discipline.mjs); bypass ONLY via "VO-ROADMAP-ALLOW: <reason>" in the PR body. The roadmap is the single source of truth \u2014 if you didn't update it, you didn't ship. Finish line = MERGED + DEPLOYED + LIVE-VERIFIED.`,
       "Every UI change ships against docs/current/ui-trust-standard.md and adds AlgoHQ QA tester coverage; verify in a real browser, not selector-presence.",
-      "UNATTENDED VERIFICATION: no human can approve shell prompts. Run `pnpm ...` directly from the worktree root. For a standalone nested project with its own pnpm-lock.yaml, use `pnpm --dir <project> install --frozen-lockfile --prefer-offline --ignore-scripts --config.confirmModulesPurge=false`, then `pnpm --dir <project> ...` for its focused tests/type-check. These two pnpm forms are pre-authorized; do not skip local verification or wait for approval.",
+      'UNATTENDED VERIFICATION: no human can approve shell prompts. Run `pnpm ...` directly from the worktree root. For a standalone nested project with its own pnpm-lock.yaml, use `pnpm --dir <project> install --frozen-lockfile --prefer-offline --ignore-scripts --config.confirmModulesPurge=false`, then `pnpm --dir <project> ...` for its focused tests/type-check. These two pnpm forms are pre-authorized; do not skip local verification or wait for approval. Bare `node <script>` is NOT pre-authorized and will be denied \u2014 run repo gates via their aliases (`pnpm run check:<gate>`, see package.json "scripts") or as `pnpm exec node scripts/<path>.mjs`; a denial is not a reason to skip the gate or hand-write its generated output.',
       'PR \u2192 LIVE is YOUR job end-to-end \u2014 the operator must NEVER be the one to discover a red PR or a backed-up deploy. Own every PR from branch \u2192 CI \u2192 merge \u2192 functions deploy \u2192 LIVE-VERIFIED. "Done" = the functions you changed are actually SERVING in prod in every region; prove it with `node scripts/ci/prove-pr-live.mjs --pr <N>` \u2014 a merge / green deploy checkmark / homepage 200 is NOT proof. If a function staled, re-deploy ONLY the affected functions (targeted), never a full deploy. If you hit a usage/rate limit, STOP cleanly with the PR obligation OPEN \u2014 the watchdog auto-resumes when it resets; do not abandon it. See docs/current/pr-live-stewardship-doctrine.md.',
       `CONTEXT DEPTH IS NOT A REASON TO STOP. "I'm deep in context / fresh context would be better / I'll checkpoint" is the SAME premature-stop failure as doing 20 minutes of work instead of 6 hours \u2014 there is no quality cliff before compaction and the harness carries work forward. Keep BUILDING until the task is genuinely DONE; delicate or fleet-governing work means be CAREFUL, not stop. The ONLY valid pauses are real blockers: an operator decision is required, a dependency is not merged, or a hard external wait.`
     ];
@@ -7229,24 +7275,30 @@ function matchGovernedStakes(task) {
 function composeMethodologyBlock(task) {
   const shape = classifyTaskShape(task);
   const stakes = matchGovernedStakes(task);
+  const roadmapOverlay = shape !== "roadmap-advance" && isUiRoadmapDispatch(task);
   const lines = [
-    `## Methodology (auto-composed: ${shape}${stakes ? `, governed-stakes: ${stakes}` : ""})`,
+    `## Methodology (auto-composed: ${shape}${roadmapOverlay ? " + roadmap-driven" : ""}${stakes ? `, governed-stakes: ${stakes}` : ""})`,
     ...UNIVERSAL_DIRECTIVES.map((d) => `- ${d}`),
     ...(SHAPE_DIRECTIVES[shape] || []).map((d) => `- ${d}`),
+    ...roadmapOverlay ? SHAPE_DIRECTIVES["roadmap-advance"].map((d) => `- ${d}`) : [],
     ...stakes ? CONSENSUS_DIRECTIVES.map((d) => `- ${d}`) : []
   ];
   return { shape, stakes, block: lines.join("\n") };
 }
+function isUiRoadmapDispatch(task) {
+  return UI_ROADMAP_DISPATCH_MARKER.test(String(task?.prompt || ""));
+}
 function withMethodology(prompt, task) {
   const { shape, stakes, block } = composeMethodologyBlock(task);
   return { shape, stakes, prompt: `${prompt ?? ""}
 
 ${block}` };
 }
-var SHAPE_RULES, GOVERNED_STAKES_PATTERN, RESEARCH_WORKFLOW_DIRECTIVE, CONSENSUS_DIRECTIVES, UNIVERSAL_DIRECTIVES, SHAPE_DIRECTIVES;
+var UI_ROADMAP_DISPATCH_MARKER, SHAPE_RULES, GOVERNED_STAKES_PATTERN, RESEARCH_WORKFLOW_DIRECTIVE, CONSENSUS_DIRECTIVES, UNIVERSAL_DIRECTIVES, SHAPE_DIRECTIVES;
 var init_methodology_composer = __esm({
   "../../scripts/virtual-office/code-runner/methodology-composer.mjs"() {
     "use strict";
+    UI_ROADMAP_DISPATCH_MARKER = /^\s*work on\s+[^\n]{1,200}?\s+roadmap task:/iu;
     SHAPE_RULES = [
       {
         shape: "recovery",
@@ -7270,7 +7322,10 @@ var init_methodology_composer = __esm({
       },
       {
         shape: "design",
-        matches: (_task, prompt) => /\b(design doc|architecture|architect|adr\b|lane brief|write a plan|propose (a|the) (design|plan|approach))\b/iu.test(prompt)
+        // Live-test finding 2026-08-16 (task a47be49f): "Implement PHASE 0 of <design doc>"
+        // classified as design and skipped the delivery directives. An implement/build/
+        // ship verb in the opening clause means the design already exists.
+        matches: (_task, prompt) => !/^\s*(implement|build|ship|execute|apply|land)\b/iu.test(prompt) && /\b(design doc|architecture|architect|adr\b|lane brief|write a plan|propose (a|the) (design|plan|approach))\b/iu.test(prompt)
       },
       {
         shape: "chore",
@@ -7284,6 +7339,7 @@ var init_methodology_composer = __esm({
       "If the consensus tools are not available in this session, say exactly that in the PR body instead of silently skipping \u2014 an unverified governed claim must be visible, never implied."
     ];
     UNIVERSAL_DIRECTIVES = [
+      'Before finishing, REHEARSE the repo gates your diff will hit and fix failures locally. HOW: bare `node <script>` is DENIED in this session (only `pnpm \u2026` is pre-authorized) \u2014 run whole-tree gates through their package.json aliases (`pnpm run check:<gate>`, e.g. `pnpm run check:algobooks-model-tiering`, `pnpm run check:hollow-tests`) or as `pnpm exec node scripts/...`; never conclude "cannot run" and hand-write a generated artifact. Diff-scoped gates (base...head, committed refs) cannot see your UNCOMMITTED edits, so satisfy their rule by construction: any roadmap-doc change under docs/current or docs/vo -> run `pnpm run roadmap:progress && pnpm exec node scripts/sync-roadmap-progress.mjs` and keep the regenerated artifacts in your diff (board drift gate); any top-level `.ts` directly under functions-core-tax/src/tax/ (not tests, not tax-year-thresholds.ts, not nested dirs; even a comment-only edit counts) -> in docs/current/algotax-coverage-roadmap.md the file MUST have a row in the callable Status table (most `algobooks-*.ts` files have NONE \u2014 add an honest row first, or the gate fails with "has no row"), then either change that row\'s Status or append a dated Update Log line that NAMES the changed file\'s basename (a dated line that does not name the file still fails); ONLY for a comment-only / no-behavior diff you may instead end your final summary with a line `VO-ALLOW-NO-AUDIT-UPDATE: <reason>` (it lands in the PR body the gate reads) \u2014 never when logic changed \u2014 tax-audit ratchet; a new entry in REQUIRED_GATE_INVOCATIONS -> classify it in scripts/ci/check-main-health-core.mjs (anti-drift test); new test files -> no Date.now()/new Date() fixtures and 4+ real assertions (clock-fixture + hollow-test gates); a .github/workflows edit may be rejected at push (the runner token lacks the workflows scope) -> say so in your final summary instead of retrying. Live tests 2026-08-16: four dispatched PRs bounced on exactly these.',
       "Verification is a stage, not a vibe: before publishing, run the tests/build your change touches and cite their actual output. A claim without execution evidence is not done.",
       "Work to completion or end with an explicit failure reason. Do not stop because time has passed; stop when the evidence says the work is done \u2014 or state exactly what is blocking.",
       "Default to doing the work yourself in this session. Spawn parallel subagents ONLY for pieces that are genuinely independent and independently verifiable \u2014 and verify their results yourself before integrating; never let unreviewed parallel output merge into shared files.",
@@ -7299,7 +7355,7 @@ var init_methodology_composer = __esm({
         RESEARCH_WORKFLOW_DIRECTIVE
       ],
       "roadmap-advance": [
-        "Update the roadmap doc status, regenerate the roadmap board if the doc changed, and add the roadmap-log fragment IN THIS SAME PR \u2014 a roadmap task that does not move the roadmap did not happen.",
+        "Update the roadmap doc status, regenerate the roadmap board if the doc changed (`pnpm run roadmap:progress && pnpm exec node scripts/sync-roadmap-progress.mjs`), and add the dated log entry \u2014 the roadmap doc's own Update Log / Change log section for a product roadmap, or a docs/vo/roadmap-log fragment for the HQ roadmap \u2014 IN THIS SAME PR; a roadmap task that does not move the roadmap did not happen.",
         "A NEW roadmap doc must be OWNED: cite its path from an owning docs/lanes/<slug>.md brief (create the brief in this same PR if the lane has none) \u2014 the roadmap-shape gate blocks any uncited roadmap doc, and four dispatched roadmap PRs hit exactly that wall on 2026-08-14."
       ],
       design: [
@@ -12624,6 +12680,10 @@ async function finalizePublishedPr({
     await closeCancelledReplacementPr({ pr, worktreeDir, githubToken, log: log2, runCommand });
     return true;
   }
+  const overlapBlocked = pr.overlapDraft === true;
+  const blockedRefs = Array.isArray(pr.overlapBlockedBy) && pr.overlapBlockedBy.length > 0 ? pr.overlapBlockedBy.map((n) => `#${n}`).join(", ") : "unresolved (see PR body for the gate report)";
+  const overlapNote = overlapBlocked ? ` as DRAFT \u2014 overlap-blocked by ${blockedRefs} (finished work preserved; mark ready after the overlap is resolved)` : "";
+  const fixDispatchGuard = overlapBlocked ? { allowFixDispatch: false } : {};
   let resumeQueued = false;
   if (cfg.watchEnabled) {
     try {
@@ -12642,7 +12702,11 @@ async function finalizePublishedPr({
           max_attempts: cfg.watchRepairChainMax ?? 3,
           per_attempt_budget_usd: cfg.watchRepairBudgetUsd ?? 1
         },
-        ...!task.repair_chain && String(task.prompt || "").includes("[VO-CI-FIX]") ? { allowFixDispatch: false } : {}
+        // A CI-fix task, or a DRAFT published only because the local overlap gate
+        // blocked it, must not spend repair attempts: the overlap resolves when the
+        // blocking PR merges, not by editing this branch.
+        ...!task.repair_chain && String(task.prompt || "").includes("[VO-CI-FIX]") ? { allowFixDispatch: false } : {},
+        ...fixDispatchGuard
       });
     } catch (error) {
       await closeCancelledReplacementPr({
@@ -12674,7 +12738,8 @@ async function finalizePublishedPr({
           attempt: 0,
           max_attempts: cfg.watchRepairChainMax ?? 3,
           per_attempt_budget_usd: cfg.watchRepairBudgetUsd ?? 1
-        }
+        },
+        ...fixDispatchGuard
       });
     }
     log2(`task ${id}: rate-limit continuation ${resumeQueued ? "queued for due-time scheduler" : "queue write failed; watcher fallback armed"}`);
@@ -12687,11 +12752,15 @@ async function finalizePublishedPr({
     log: log2,
     patch: {
       status: "pr_opened",
-      message: `opened ${pr.prUrl}`,
+      message: `opened ${pr.prUrl}${overlapNote}`,
       pr_url: pr.prUrl,
       pr_number: pr.prNumber,
       pr_branch: pr.branch,
-      result: partial ? partialPrContinuationResult(run, 2e3, rateLimitResume ? "rate_limited" : null) : String(run.summary).slice(0, 2e3),
+      result: (() => {
+        const prefix = overlapBlocked ? `[VO-PUBLISH-OVERLAP-BLOCKED: ${blockedRefs}] ` : "";
+        const room = 2e3 - prefix.length;
+        return `${prefix}${partial ? partialPrContinuationResult(run, room, rateLimitResume ? "rate_limited" : null) : String(run.summary).slice(0, room)}`;
+      })(),
       ...runOutcomePatch(run),
       ...terminalLedgerPatch(run)
       // decision_request / consensus_receipt_id parsed from the agent's final text (2026-08-15)