@cat-factory/app 0.165.0 → 0.167.0

package/app/components/settings/RiskPolicyPanel.vue

@@ -7,9 +7,40 @@
 import { computed, reactive, ref, watch } from 'vue'
 import type { MergeClassRules, RiskPolicy, RequirementConcernLevel } from '~/types/merge'
 import type { StepGating } from '@cat-factory/contracts'
+import {
+  RISK_POLICY_AXES,
+  RISK_POLICY_CEILING_FIELD,
+  type RiskPolicyAxis,
+} from '~/utils/riskPolicy'
 
 const { t } = useI18n()
 
+// Both axis groups below iterate the SHARED presentation order rather than hard-coding one,
+// so this editor can't drift from the order the picker's preview and the inspector's summary
+// line use (it used to read complexity-first while they read risk-first).
+const CEILING_LABEL_KEYS: Record<RiskPolicyAxis, string> = {
+  risk: 'settings.riskPolicy.field.maxRisk',
+  impact: 'settings.riskPolicy.field.maxImpact',
+  complexity: 'settings.riskPolicy.field.maxComplexity',
+}
+
+// The fork-decision group is the same three axes read as FLOORS (how big an estimate has to
+// be before the coder stops to propose implementations), so it shares the order but not the
+// fields.
+const FORK_FLOOR_FIELD: Record<
+  RiskPolicyAxis,
+  'forkMinRisk' | 'forkMinImpact' | 'forkMinComplexity'
+> = {
+  risk: 'forkMinRisk',
+  impact: 'forkMinImpact',
+  complexity: 'forkMinComplexity',
+}
+const FORK_FLOOR_LABEL_KEYS: Record<RiskPolicyAxis, string> = {
+  risk: 'settings.riskPolicy.forkDecision.minRisk',
+  impact: 'settings.riskPolicy.forkDecision.minImpact',
+  complexity: 'settings.riskPolicy.forkDecision.minComplexity',
+}
+
 // Per-concern-level label. An exhaustive Record keyed off the union (a missing member fails
 // the typecheck); each value is a LITERAL catalog key so the typed-message-keys check sees
 // it. Leaf keys mirror the enum value verbatim.
@@ -276,36 +307,12 @@ async function create() {
       </div>
 
       <div class="grid grid-cols-2 gap-3 sm:grid-cols-4">
-        <label class="block">
-          <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-            {{ t('settings.riskPolicy.field.maxComplexity') }}
-          </span>
-          <UInput
-            v-model.number="drafts[p.id]!.maxComplexity"
-            type="number"
-            :min="0"
-            :max="100"
-            size="sm"
-          />
-        </label>
-        <label class="block">
+        <label v-for="axis in RISK_POLICY_AXES" :key="axis" class="block">
           <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-            {{ t('settings.riskPolicy.field.maxRisk') }}
+            {{ t(CEILING_LABEL_KEYS[axis]) }}
           </span>
           <UInput
-            v-model.number="drafts[p.id]!.maxRisk"
-            type="number"
-            :min="0"
-            :max="100"
-            size="sm"
-          />
-        </label>
-        <label class="block">
-          <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-            {{ t('settings.riskPolicy.field.maxImpact') }}
-          </span>
-          <UInput
-            v-model.number="drafts[p.id]!.maxImpact"
+            v-model.number="drafts[p.id]![RISK_POLICY_CEILING_FIELD[axis]]"
             type="number"
             :min="0"
             :max="100"
@@ -369,36 +376,12 @@ async function create() {
           :description="t('settings.riskPolicy.forkDecision.hint')"
         />
         <div v-if="drafts[p.id]!.forkEnabled" class="mt-3 grid grid-cols-2 gap-3 sm:grid-cols-4">
-          <label class="block">
-            <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-              {{ t('settings.riskPolicy.forkDecision.minComplexity') }}
-            </span>
-            <UInput
-              v-model.number="drafts[p.id]!.forkMinComplexity"
-              type="number"
-              size="sm"
-              :min="0"
-              :max="100"
-            />
-          </label>
-          <label class="block">
-            <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-              {{ t('settings.riskPolicy.forkDecision.minRisk') }}
-            </span>
-            <UInput
-              v-model.number="drafts[p.id]!.forkMinRisk"
-              type="number"
-              size="sm"
-              :min="0"
-              :max="100"
-            />
-          </label>
-          <label class="block">
+          <label v-for="axis in RISK_POLICY_AXES" :key="axis" class="block">
             <span class="mb-1 block text-[10px] uppercase tracking-wide text-slate-500">
-              {{ t('settings.riskPolicy.forkDecision.minImpact') }}
+              {{ t(FORK_FLOOR_LABEL_KEYS[axis]) }}
             </span>
             <UInput
-              v-model.number="drafts[p.id]!.forkMinImpact"
+              v-model.number="drafts[p.id]![FORK_FLOOR_FIELD[axis]]"
               type="number"
               size="sm"
               :min="0"

package/app/utils/riskPolicy.spec.ts

@@ -0,0 +1,53 @@
+import { describe, expect, it } from 'vitest'
+import type { RiskPolicy } from '~/types/merge'
+import { RISK_POLICY_AXES, RISK_POLICY_CEILING_FIELD, riskPolicyCeilings } from '~/utils/riskPolicy'
+
+const policy = (over: Partial<RiskPolicy> = {}): RiskPolicy =>
+  ({
+    id: 'mp_balanced',
+    name: 'Balanced',
+    maxComplexity: 0.6,
+    maxRisk: 0.4,
+    maxImpact: 0.5,
+    ciMaxAttempts: 10,
+    maxRequirementIterations: 6,
+    maxRequirementConcernAllowed: 'none',
+    maxTesterQualityIterations: 3,
+    releaseWatchWindowMinutes: 30,
+    releaseMaxAttempts: 1,
+    humanReviewGraceMinutes: 10,
+    judgeMinScore: 0.7,
+    judgeMaxBounces: 2,
+    autoMergeEnabled: true,
+    classRules: {},
+    isDefault: true,
+    version: 1,
+    createdAt: 0,
+    updatedAt: 0,
+    ...over,
+  }) as RiskPolicy
+
+describe('riskPolicyCeilings', () => {
+  it('groups the three axes in presentation order', () => {
+    expect(riskPolicyCeilings(policy()).map((c) => c.axis)).toEqual([
+      'risk',
+      'impact',
+      'complexity',
+    ])
+  })
+
+  it('carries each axis ceiling as the stored 0..1 ratio', () => {
+    expect(riskPolicyCeilings(policy())).toEqual([
+      { axis: 'risk', max: 0.4 },
+      { axis: 'impact', max: 0.5 },
+      { axis: 'complexity', max: 0.6 },
+    ])
+  })
+
+  it('follows the shared axis order, which the settings editor iterates too', () => {
+    // The point of the exported order: the picker preview, the inspector summary and the
+    // settings editor all read it, so none of them can drift into its own sequence.
+    expect(riskPolicyCeilings(policy()).map((c) => c.axis)).toEqual([...RISK_POLICY_AXES])
+    expect(Object.keys(RISK_POLICY_CEILING_FIELD).sort()).toEqual([...RISK_POLICY_AXES].sort())
+  })
+})

package/app/utils/riskPolicy.ts

@@ -1,21 +1,42 @@
 import type { RiskPolicy } from '~/types/merge'
 
 /**
- * A compact one-line summary of a merge preset's auto-merge ceilings + CI-fix budget,
- * suitable for a dropdown option label so the user sees each preset's actual thresholds
- * (not just its name) while choosing one. Percentages are the stored 0..1 ratios
- * rendered as whole percents.
+ * The three axes a `merger` agent scores a pull request on. Presentation order is
+ * risk → impact → complexity: what the PR could break first, then how far it reaches, then
+ * how hard it was to write.
+ *
+ * This array IS the order — every surface that shows the three axes iterates it rather than
+ * hard-coding a sequence, so the picker's preview, the inspector's summary line and the
+ * settings editor cannot drift into three different orders (which is exactly what they had).
  */
-export function riskPolicySummary(p: RiskPolicy): string {
-  // Auto-merge disabled: the thresholds don't apply, every PR goes to human review.
-  if (!p.autoMergeEnabled) return `manual review only · ${p.ciMaxAttempts} CI fixes`
-  const pct = (n: number) => `${Math.round(n * 100)}%`
-  return `cx ≤${pct(p.maxComplexity)} · risk ≤${pct(p.maxRisk)} · impact ≤${pct(
-    p.maxImpact,
-  )} · ${p.ciMaxAttempts} CI fixes`
+export const RISK_POLICY_AXES = ['risk', 'impact', 'complexity'] as const
+
+export type RiskPolicyAxis = (typeof RISK_POLICY_AXES)[number]
+
+/**
+ * Which `RiskPolicy` field carries each axis's auto-merge ceiling. Exhaustive over the axis
+ * union, so adding an axis fails the typecheck here rather than silently rendering two.
+ */
+export const RISK_POLICY_CEILING_FIELD: Record<
+  RiskPolicyAxis,
+  'maxRisk' | 'maxImpact' | 'maxComplexity'
+> = {
+  risk: 'maxRisk',
+  impact: 'maxImpact',
+  complexity: 'maxComplexity',
 }
 
-/** The preset name followed by its thresholds, for a single-line dropdown option. */
-export function riskPolicyOptionLabel(p: RiskPolicy): string {
-  return `${p.name} — ${riskPolicySummary(p)}`
+/** One axis of a policy, with the ceiling a score must stay at or below to auto-merge. */
+export interface RiskPolicyCeiling {
+  axis: RiskPolicyAxis
+  /** The stored 0..1 ratio. Render it through the `percent` number format, never raw. */
+  max: number
+}
+
+/**
+ * A policy's auto-merge ceilings, one entry per axis in presentation order, so every
+ * surface that explains a policy groups the three axes the same way.
+ */
+export function riskPolicyCeilings(p: RiskPolicy): RiskPolicyCeiling[] {
+  return RISK_POLICY_AXES.map((axis) => ({ axis, max: p[RISK_POLICY_CEILING_FIELD[axis]] }))
 }

package/i18n/locales/de.json

@@ -1318,8 +1318,8 @@
       "unassigned": "Nicht zugewiesen",
       "workspaceDefault": "Workspace-Standard",
       "workspaceDefaultParen": "(Workspace-Standard)",
-      "defaultPresetThresholds": "Standard ({name}): {thresholds}",
-      "defaultPreset": "Standard ({name})",
+      "defaultRiskPolicy": "Standard ({name})",
+      "defaultModelPreset": "Standard ({name})",
       "noDefault": "Kein Standard",
       "inheritWorkspace": "Vom Workspace erben",
       "on": "An",
@@ -1335,7 +1335,8 @@
       "pipelineEmpty": "Kein Standard. Wähle eine Pipeline, wenn du diese Aufgabe ausführst.",
       "pipelineHint": "Die Pipeline, die der Run-Button standardmäßig startet: die Abfolge der Agent-Schritte (zum Beispiel Spec, Code, Test, Merge), die für diese Aufgabe ausgeführt werden.",
       "mergePolicy": "Risikorichtlinie",
-      "riskPolicyDetail": "{name}: automatisch mergen, wenn Komplexität ≤ {complexity}, Risiko ≤ {risk}, Wirkung ≤ {impact}; bis zu {attempts} CI-Fix-Versuche.",
+      "riskPolicyDetail": "{name}: mergt ohne menschliche Prüfung, wenn Risiko ≤ {risk}, Wirkung ≤ {impact} und Komplexität ≤ {complexity}; bis zu {attempts} CI-Fix-Versuche.",
+      "riskPolicyManual": "{name}: mergt nie von selbst, jeder Pull Request wartet also auf eine menschliche Prüfung; bis zu {attempts} CI-Fix-Versuche.",
       "riskPolicyEmpty": "Keine Risikorichtlinie konfiguriert. Der Merger löst für jeden PR eine Prüfbenachrichtigung aus.",
       "mergePolicyHint": "Entscheidet, wann ein fertiger Pull Request automatisch mergt, statt auf eine menschliche Prüfung zu warten, und wie viele CI-Fix-Versuche ein Lauf erhält.",
       "modelPreset": "Modell-Preset",
@@ -2304,7 +2305,7 @@
       "chooseAtRunTime": "Zur Laufzeit auswählen",
       "mergePolicy": "Risikorichtlinie",
       "workspaceDefault": "Workspace-Standard",
-      "defaultPreset": "Standard ({name}) — {thresholds}",
+      "defaultPreset": "Standard ({name})",
       "defaultModelPreset": "Standard ({name})",
       "modelPreset": "Modell-Preset",
       "bestPractices": "Best Practices",
@@ -3550,6 +3551,7 @@
     "title": "Anforderungsprüfung",
     "iteration": "Iteration {current} / {max}",
     "intro": "Ein KI-Prüfer hat die gesammelten Anforderungen dieses {level} untersucht — die Beschreibung sowie alle verknüpften PRDs und Tracker-Issues — und die folgenden Befunde erhoben. {answer} Sie die relevanten und {dismiss} Sie die irrelevanten, arbeiten Sie sie dann ein; der Prüfer prüft erneut, bis die Anforderungen klar sind.",
+    "scopeNote": "Diese Phase umfasst ausschließlich Produkt- und Geschäftsanforderungen: was die Software leisten muss und welche Regeln dafür gelten. Technische Entscheidungen wie Technologieauswahl, Architektur und Datenstrukturen treffen später die Schritte Architekt und Rechercheur, die dabei Zugriff auf die Codebasis haben.",
     "levelFallback": "Element",
     "answerVerb": "Beantworten",
     "dismissVerb": "verwerfen",
@@ -5136,6 +5138,25 @@
       "toast": {
         "reseedFailed": "Risikorichtlinie konnte nicht erneut geseedet werden"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "Gilt, weil diese Aufgabe keine eigene Richtlinie wählt.",
+      "noneHint": "Keine Risikorichtlinie konfiguriert. Jeder Pull Request wartet auf eine menschliche Prüfung."
+    },
+    "preview": {
+      "defaultBadge": "Standard",
+      "autoMergeHeading": "Schwellen für automatisches Mergen",
+      "axis": {
+        "risk": "Risiko",
+        "impact": "Wirkung",
+        "complexity": "Komplexität"
+      },
+      "ceiling": "höchstens {value}",
+      "autoMergeExplainer": "Sobald die CI grün ist, bewertet der Merger-Agent den Pull Request auf diesen drei Achsen. Bleibt jede Bewertung auf oder unter ihrer Obergrenze, mergt der Pull Request von selbst und überspringt die menschliche Prüfung; alles darüber geht an eine Person.",
+      "manualHeading": "Nur manuelle Prüfung",
+      "manualExplainer": "Diese Richtlinie mergt nie von selbst, jeder Pull Request wartet also unabhängig von den Bewertungen auf eine menschliche Prüfung.",
+      "ciHeading": "CI-Fixes",
+      "ciAttempts": "Der Lauf darf {count} Mal versuchen, eine rote CI grün zu bekommen, bevor er aufgibt. | Der Lauf darf {count} Mal versuchen, eine rote CI grün zu bekommen, bevor er aufgibt."
     }
   },
   "modelPreset": {

package/i18n/locales/en.json

@@ -290,7 +290,7 @@
       "chooseAtRunTime": "Choose at run time",
       "mergePolicy": "Risk policy",
       "workspaceDefault": "Workspace default",
-      "defaultPreset": "Default ({name}) — {thresholds}",
+      "defaultPreset": "Default ({name})",
       "defaultModelPreset": "Default ({name})",
       "modelPreset": "Model preset",
       "bestPractices": "Best practices",
@@ -1063,8 +1063,8 @@
       "unassigned": "Unassigned",
       "workspaceDefault": "Workspace default",
       "workspaceDefaultParen": "(workspace default)",
-      "defaultPresetThresholds": "Default ({name}): {thresholds}",
-      "defaultPreset": "Default ({name})",
+      "defaultRiskPolicy": "Default ({name})",
+      "defaultModelPreset": "Default ({name})",
       "noDefault": "No default",
       "inheritWorkspace": "Inherit workspace",
       "on": "On",
@@ -1080,7 +1080,8 @@
       "pipelineEmpty": "No default. Pick a pipeline when you run this task.",
       "pipelineHint": "The pipeline the Run button starts by default: the sequence of agent steps (for example spec, code, test, merge) executed for this task.",
       "mergePolicy": "Risk policy",
-      "riskPolicyDetail": "{name}: auto-merge when complexity ≤ {complexity}, risk ≤ {risk}, impact ≤ {impact}; up to {attempts} CI-fix attempts.",
+      "riskPolicyDetail": "{name}: merges without human review when risk ≤ {risk}, impact ≤ {impact} and complexity ≤ {complexity}; up to {attempts} CI-fix attempts.",
+      "riskPolicyManual": "{name}: never merges on its own, so every pull request waits for a human review; up to {attempts} CI-fix attempts.",
       "riskPolicyEmpty": "No risk policy configured. The merger raises a review notification for every PR.",
       "mergePolicyHint": "Decides when a finished pull request merges automatically instead of waiting for a human review, and how many CI-fix attempts a run gets.",
       "modelPreset": "Model preset",
@@ -3968,6 +3969,25 @@
       "toast": {
         "reseedFailed": "Could not reseed risk policy"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "Applied because this task picks no policy of its own.",
+      "noneHint": "No risk policy configured. Every pull request waits for a human review."
+    },
+    "preview": {
+      "defaultBadge": "Default",
+      "autoMergeHeading": "Automatic merge thresholds",
+      "axis": {
+        "risk": "Risk",
+        "impact": "Impact",
+        "complexity": "Complexity"
+      },
+      "ceiling": "at or below {value}",
+      "autoMergeExplainer": "Once CI is green the merger agent scores the pull request on these three axes. Every score at or below its ceiling means the pull request merges on its own and skips human review; anything above sends it to a person instead.",
+      "manualHeading": "Manual review only",
+      "manualExplainer": "This policy never merges on its own, so every pull request waits for a human review whatever it scores.",
+      "ciHeading": "CI fixes",
+      "ciAttempts": "The run may try {count} time to turn a red CI green before it gives up. | The run may try {count} times to turn a red CI green before it gives up."
     }
   },
   "modelPreset": {
@@ -4103,6 +4123,7 @@
     "title": "Requirements review",
     "iteration": "Iteration {current} / {max}",
     "intro": "An AI reviewer inspected this {level}'s collected requirements — its description plus any linked PRDs and tracker issues — and raised the findings below. {answer} the relevant ones and {dismiss} the irrelevant, then incorporate them; the reviewer re-reviews until the requirements are clear.",
+    "scopeNote": "This stage covers product and business requirements only: what the software must do and the rules that govern it. Technical decisions such as technology choice, architecture and data shapes are settled later by the Architect and Researcher steps, which run with the codebase in hand.",
     "levelFallback": "item",
     "answerVerb": "Answer",
     "dismissVerb": "dismiss",

package/i18n/locales/es.json

@@ -269,7 +269,7 @@
       "chooseAtRunTime": "Elegir al ejecutar",
       "mergePolicy": "Política de riesgo",
       "workspaceDefault": "Predeterminado del espacio",
-      "defaultPreset": "Predeterminado ({name}): {thresholds}",
+      "defaultPreset": "Predeterminada ({name})",
       "defaultModelPreset": "Predeterminado ({name})",
       "modelPreset": "Preset de modelo",
       "bestPractices": "Buenas prácticas",
@@ -1003,8 +1003,8 @@
       "unassigned": "Sin asignar",
       "workspaceDefault": "Predeterminado del espacio de trabajo",
       "workspaceDefaultParen": "(predeterminado del espacio de trabajo)",
-      "defaultPresetThresholds": "Predeterminado ({name}): {thresholds}",
-      "defaultPreset": "Predeterminado ({name})",
+      "defaultRiskPolicy": "Predeterminada ({name})",
+      "defaultModelPreset": "Predeterminado ({name})",
       "noDefault": "Sin predeterminado",
       "inheritWorkspace": "Heredar del espacio de trabajo",
       "on": "Activado",
@@ -1020,7 +1020,8 @@
       "pipelineEmpty": "Sin predeterminado. Elige un pipeline cuando ejecutes esta tarea.",
       "pipelineHint": "El pipeline que el botón Ejecutar inicia por defecto: la secuencia de pasos de agente (por ejemplo especificación, código, pruebas, fusión) que se ejecuta para esta tarea.",
       "mergePolicy": "Política de riesgo",
-      "riskPolicyDetail": "{name}: fusión automática cuando complejidad ≤ {complexity}, riesgo ≤ {risk}, impacto ≤ {impact}; hasta {attempts} intentos de corrección de CI.",
+      "riskPolicyDetail": "{name}: se fusiona sin revisión humana cuando riesgo ≤ {risk}, impacto ≤ {impact} y complejidad ≤ {complexity}; hasta {attempts} intentos de corrección de CI.",
+      "riskPolicyManual": "{name}: nunca se fusiona por su cuenta, así que cada pull request espera una revisión humana; hasta {attempts} intentos de corrección de CI.",
       "riskPolicyEmpty": "No hay política de riesgo configurada. El fusionador genera una notificación de revisión para cada PR.",
       "mergePolicyHint": "Decide cuándo un pull request terminado se fusiona automáticamente en lugar de esperar una revisión humana, y cuántos intentos de arreglo de CI tiene una ejecución.",
       "modelPreset": "Preajuste de modelo",
@@ -3954,6 +3955,7 @@
     "title": "Revisión de requisitos",
     "iteration": "Iteración {current} / {max}",
     "intro": "Un revisor de IA inspeccionó los requisitos recopilados de este {level} — su descripción más cualquier PRD y ticket vinculados — y planteó los hallazgos siguientes. {answer} los relevantes y {dismiss} los irrelevantes, luego incorpóralos; el revisor vuelve a revisar hasta que los requisitos queden claros.",
+    "scopeNote": "Esta etapa cubre solo los requisitos de producto y negocio: qué debe hacer el software y las reglas que lo rigen. Las decisiones técnicas, como la elección de tecnología, la arquitectura y las estructuras de datos, se resuelven después en los pasos de Arquitecto e Investigador, que trabajan con el código a la vista.",
     "levelFallback": "elemento",
     "answerVerb": "Responde",
     "dismissVerb": "descarta",
@@ -5019,6 +5021,25 @@
       "toast": {
         "reseedFailed": "No se pudo regenerar la política de riesgo"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "Se aplica porque esta tarea no elige una política propia.",
+      "noneHint": "No hay ninguna política de riesgo configurada. Cada pull request espera una revisión humana."
+    },
+    "preview": {
+      "defaultBadge": "Predeterminada",
+      "autoMergeHeading": "Umbrales de fusión automática",
+      "axis": {
+        "risk": "Riesgo",
+        "impact": "Impacto",
+        "complexity": "Complejidad"
+      },
+      "ceiling": "igual o inferior a {value}",
+      "autoMergeExplainer": "Cuando CI está en verde, el agente fusionador puntúa el pull request en estos tres ejes. Si todas las puntuaciones quedan en su límite o por debajo, el pull request se fusiona solo y se salta la revisión humana; cualquier valor superior lo envía a una persona.",
+      "manualHeading": "Solo revisión manual",
+      "manualExplainer": "Esta política nunca fusiona por su cuenta, así que cada pull request espera una revisión humana sea cual sea su puntuación.",
+      "ciHeading": "Correcciones de CI",
+      "ciAttempts": "La ejecución puede intentar {count} vez poner CI en verde antes de rendirse. | La ejecución puede intentar {count} veces poner CI en verde antes de rendirse."
     }
   },
   "modelPreset": {

package/i18n/locales/fr.json

@@ -269,7 +269,7 @@
       "chooseAtRunTime": "Choisir au lancement",
       "mergePolicy": "Politique de risque",
       "workspaceDefault": "Valeur par défaut de l’espace",
-      "defaultPreset": "Par défaut ({name}) : {thresholds}",
+      "defaultPreset": "Par défaut ({name})",
       "defaultModelPreset": "Par défaut ({name})",
       "modelPreset": "Préréglage de modèle",
       "bestPractices": "Bonnes pratiques",
@@ -1003,8 +1003,8 @@
       "unassigned": "Non assigné",
       "workspaceDefault": "Valeur par défaut de l'espace de travail",
       "workspaceDefaultParen": "(valeur par défaut de l'espace de travail)",
-      "defaultPresetThresholds": "Par défaut ({name}) : {thresholds}",
-      "defaultPreset": "Par défaut ({name})",
+      "defaultRiskPolicy": "Par défaut ({name})",
+      "defaultModelPreset": "Par défaut ({name})",
       "noDefault": "Aucune valeur par défaut",
       "inheritWorkspace": "Hériter de l'espace de travail",
       "on": "Activé",
@@ -1020,7 +1020,8 @@
       "pipelineEmpty": "Aucune valeur par défaut. Choisissez un pipeline lorsque vous exécutez cette tâche.",
       "pipelineHint": "Le pipeline que le bouton Exécuter démarre par défaut : la séquence d'étapes d'agent (par exemple spécification, code, test, fusion) exécutée pour cette tâche.",
       "mergePolicy": "Politique de risque",
-      "riskPolicyDetail": "{name} : fusion automatique lorsque la complexité ≤ {complexity}, le risque ≤ {risk}, l'impact ≤ {impact} ; jusqu'à {attempts} tentatives de correction CI.",
+      "riskPolicyDetail": "{name} : fusionne sans revue humaine lorsque le risque ≤ {risk}, l'impact ≤ {impact} et la complexité ≤ {complexity} ; jusqu'à {attempts} tentatives de correction CI.",
+      "riskPolicyManual": "{name} : ne fusionne jamais de lui-même, chaque pull request attend donc une revue humaine ; jusqu'à {attempts} tentatives de correction CI.",
       "riskPolicyEmpty": "Aucune politique de risque configurée. Le fusionneur déclenche une notification de revue pour chaque PR.",
       "mergePolicyHint": "Décide quand une pull request terminée est fusionnée automatiquement au lieu d'attendre une revue humaine, et combien de tentatives de correction de CI une exécution obtient.",
       "modelPreset": "Preset de modèle",
@@ -3954,6 +3955,7 @@
     "title": "Revue des exigences",
     "iteration": "Itération {current} / {max}",
     "intro": "Un relecteur IA a inspecté les exigences collectées de cet {level} — sa description ainsi que les PRD et tickets liés — et a soulevé les observations ci-dessous. {answer} celles qui sont pertinentes et {dismiss} les autres, puis incorporez-les ; le relecteur relit jusqu'à ce que les exigences soient claires.",
+    "scopeNote": "Cette étape couvre uniquement les exigences produit et métier : ce que le logiciel doit faire et les règles qui le régissent. Les décisions techniques comme le choix des technologies, l'architecture et les structures de données sont tranchées plus tard par les étapes Architecte et Chercheur, qui disposent du code source.",
     "levelFallback": "élément",
     "answerVerb": "Répondez à",
     "dismissVerb": "écartez",
@@ -5019,6 +5021,25 @@
       "toast": {
         "reseedFailed": "Impossible de régénérer la politique de risque"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "Appliquée parce que cette tâche ne choisit aucune politique.",
+      "noneHint": "Aucune politique de risque configurée. Chaque pull request attend une revue humaine."
+    },
+    "preview": {
+      "defaultBadge": "Par défaut",
+      "autoMergeHeading": "Seuils de fusion automatique",
+      "axis": {
+        "risk": "Risque",
+        "impact": "Impact",
+        "complexity": "Complexité"
+      },
+      "ceiling": "inférieur ou égal à {value}",
+      "autoMergeExplainer": "Une fois la CI au vert, l'agent fusionneur note la pull request sur ces trois axes. Si chaque note reste sous son plafond, la pull request fusionne toute seule et saute la revue humaine ; au-dessus, elle part vers une personne.",
+      "manualHeading": "Revue manuelle uniquement",
+      "manualExplainer": "Cette politique ne fusionne jamais d'elle-même : chaque pull request attend une revue humaine, quelles que soient les notes.",
+      "ciHeading": "Corrections CI",
+      "ciAttempts": "L'exécution peut tenter {count} fois de remettre la CI au vert avant d'abandonner. | L'exécution peut tenter {count} fois de remettre la CI au vert avant d'abandonner."
     }
   },
   "modelPreset": {

package/i18n/locales/he.json

@@ -269,7 +269,7 @@
       "chooseAtRunTime": "בחר בזמן הריצה",
       "mergePolicy": "מדיניות סיכון",
       "workspaceDefault": "ברירת מחדל של סביבת העבודה",
-      "defaultPreset": "ברירת מחדל ({name}) — {thresholds}",
+      "defaultPreset": "ברירת מחדל ({name})",
       "defaultModelPreset": "ברירת מחדל ({name})",
       "modelPreset": "הגדרה קבועה של מודל",
       "bestPractices": "מומלצות עבודה",
@@ -1003,8 +1003,8 @@
       "unassigned": "לא משויך",
       "workspaceDefault": "ברירת מחדל של מרחב העבודה",
       "workspaceDefaultParen": "(ברירת מחדל של מרחב העבודה)",
-      "defaultPresetThresholds": "ברירת מחדל ({name}): {thresholds}",
-      "defaultPreset": "ברירת מחדל ({name})",
+      "defaultRiskPolicy": "ברירת מחדל ({name})",
+      "defaultModelPreset": "ברירת מחדל ({name})",
       "noDefault": "אין ברירת מחדל",
       "inheritWorkspace": "ירש ממרחב העבודה",
       "on": "פעיל",
@@ -1020,7 +1020,8 @@
       "pipelineEmpty": "אין ברירת מחדל. בחר פייפליין כשאתה מריץ משימה זו.",
       "pipelineHint": "הפייפליין שכפתור ההרצה מפעיל כברירת מחדל: רצף שלבי הסוכנים (למשל אפיון, קוד, בדיקות, מיזוג) שמורץ עבור משימה זו.",
       "mergePolicy": "מדיניות סיכון",
-      "riskPolicyDetail": "{name}: מיזוג אוטומטי כאשר מורכבות ≤ {complexity}, סיכון ≤ {risk}, השפעה ≤ {impact}; עד {attempts} ניסיונות תיקון CI.",
+      "riskPolicyDetail": "{name}: ממזג ללא סקירה אנושית כאשר סיכון ≤ {risk}, השפעה ≤ {impact} ומורכבות ≤ {complexity}; עד {attempts} ניסיונות תיקון CI.",
+      "riskPolicyManual": "{name}: לעולם לא ממזג מעצמו, ולכן כל בקשת משיכה ממתינה לסקירה אנושית; עד {attempts} ניסיונות תיקון CI.",
       "riskPolicyEmpty": "לא הוגדרה מדיניות סיכון. הממזג מעלה התראת סקירה עבור כל PR.",
       "mergePolicyHint": "קובע מתי בקשת משיכה שהושלמה ממוזגת אוטומטית במקום להמתין לסקירה אנושית, וכמה ניסיונות תיקון CI מקבלת הרצה.",
       "modelPreset": "תבנית מודל",
@@ -3965,6 +3966,7 @@
     "title": "סקירת דרישות",
     "iteration": "איטרציה {current} / {max}",
     "intro": "סוקר AI בחן את הדרישות שנאספו עבור ה{level} הזה — התיאור שלו בתוספת כל ה-PRD והאישוז המקושרים — והעלה את הממצאים שלהלן. {answer} את הרלוונטיים ו{dismiss} את שאינם רלוונטיים, ולאחר מכן שלב אותם; הסוקר סוקר מחדש עד שהדרישות ברורות.",
+    "scopeNote": "שלב זה עוסק בדרישות מוצר ועסקים בלבד: מה התוכנה צריכה לעשות ואילו כללים חלים עליה. החלטות טכניות כמו בחירת טכנולוגיה, ארכיטקטורה ומבני נתונים נקבעות בהמשך בשלבי הארכיטקט והחוקר, שעובדים מול קוד המקור.",
     "levelFallback": "פריט",
     "answerVerb": "ענה על",
     "dismissVerb": "בטל",
@@ -5030,6 +5032,25 @@
       "toast": {
         "reseedFailed": "לא ניתן לזרוע מחדש את מדיניות הסיכון"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "חלה מפני שהמשימה הזו לא בוחרת מדיניות משלה.",
+      "noneHint": "לא הוגדרה מדיניות סיכון. כל בקשת משיכה ממתינה לסקירה אנושית."
+    },
+    "preview": {
+      "defaultBadge": "ברירת מחדל",
+      "autoMergeHeading": "ספי מיזוג אוטומטי",
+      "axis": {
+        "risk": "סיכון",
+        "impact": "השפעה",
+        "complexity": "מורכבות"
+      },
+      "ceiling": "עד {value}",
+      "autoMergeExplainer": "כאשר ה-CI ירוק, סוכן המיזוג מנקד את בקשת המשיכה בשלושת הצירים האלה. אם כל ניקוד נמצא בתקרה שלו או מתחתיה, בקשת המשיכה ממוזגת מעצמה ומדלגת על סקירה אנושית; ניקוד גבוה יותר שולח אותה לאדם.",
+      "manualHeading": "סקירה ידנית בלבד",
+      "manualExplainer": "מדיניות זו לעולם אינה ממזגת מעצמה, ולכן כל בקשת משיכה ממתינה לסקירה אנושית ללא קשר לניקוד.",
+      "ciHeading": "תיקוני CI",
+      "ciAttempts": "ההרצה רשאית לנסות פעם {count} להחזיר CI אדום למצב ירוק לפני שהיא מוותרת. | ההרצה רשאית לנסות {count} פעמים להחזיר CI אדום למצב ירוק לפני שהיא מוותרת."
     }
   },
   "modelPreset": {

package/i18n/locales/it.json

@@ -1318,8 +1318,8 @@
       "unassigned": "Non assegnato",
       "workspaceDefault": "Predefinito del workspace",
       "workspaceDefaultParen": "(predefinito del workspace)",
-      "defaultPresetThresholds": "Predefinito ({name}): {thresholds}",
-      "defaultPreset": "Predefinito ({name})",
+      "defaultRiskPolicy": "Predefinito ({name})",
+      "defaultModelPreset": "Predefinito ({name})",
       "noDefault": "Nessun predefinito",
       "inheritWorkspace": "Eredita dal workspace",
       "on": "Attivo",
@@ -1335,7 +1335,8 @@
       "pipelineEmpty": "Nessun predefinito. Scegli una pipeline quando esegui questa attivita'.",
       "pipelineHint": "La pipeline che il pulsante Esegui avvia per impostazione predefinita: la sequenza di passaggi dell'agente (ad esempio spec, code, test, merge) eseguiti per questa attivita'.",
       "mergePolicy": "Criterio di rischio",
-      "riskPolicyDetail": "{name}: unione automatica quando complessita' ≤ {complexity}, rischio ≤ {risk}, impatto ≤ {impact}; fino a {attempts} tentativi di correzione CI.",
+      "riskPolicyDetail": "{name}: unisce senza revisione umana quando rischio ≤ {risk}, impatto ≤ {impact} e complessita ≤ {complexity}; fino a {attempts} tentativi di correzione CI.",
+      "riskPolicyManual": "{name}: non unisce mai da solo, quindi ogni pull request attende una revisione umana; fino a {attempts} tentativi di correzione CI.",
       "riskPolicyEmpty": "Nessun criterio di rischio configurato. Il merger genera una notifica di revisione per ogni PR.",
       "mergePolicyHint": "Decide quando una pull request completata viene unita automaticamente invece di attendere una revisione umana, e quanti tentativi di correzione CI ottiene un'esecuzione.",
       "modelPreset": "Preset del modello",
@@ -2304,7 +2305,7 @@
       "chooseAtRunTime": "Scegli al momento dell'esecuzione",
       "mergePolicy": "Criterio di rischio",
       "workspaceDefault": "Predefinito del workspace",
-      "defaultPreset": "Predefinito ({name}) — {thresholds}",
+      "defaultPreset": "Predefinito ({name})",
       "defaultModelPreset": "Predefinito ({name})",
       "modelPreset": "Preset di modello",
       "bestPractices": "Best practice",
@@ -3550,6 +3551,7 @@
     "title": "Revisione dei requisiti",
     "iteration": "Iterazione {current} / {max}",
     "intro": "Un revisore AI ha esaminato i requisiti raccolti di questo {level} — la sua descrizione piu eventuali PRD e issue del tracker collegati — e ha sollevato i rilievi qui sotto. {answer} quelli pertinenti e {dismiss} quelli irrilevanti, poi incorporali; il revisore rivede di nuovo finche i requisiti non sono chiari.",
+    "scopeNote": "Questa fase copre solo i requisiti di prodotto e di business: che cosa il software deve fare e quali regole lo governano. Le decisioni tecniche come la scelta della tecnologia, l'architettura e le strutture dati vengono prese più avanti negli step Architetto e Ricercatore, che lavorano con il codice a disposizione.",
     "levelFallback": "elemento",
     "answerVerb": "Rispondi a",
     "dismissVerb": "ignora",
@@ -5136,6 +5138,25 @@
       "toast": {
         "reseedFailed": "Impossibile ripristinare il criterio di rischio"
       }
+    },
+    "picker": {
+      "workspaceDefaultCaption": "Si applica perche questa attivita non sceglie un criterio proprio.",
+      "noneHint": "Nessun criterio di rischio configurato. Ogni pull request attende una revisione umana."
+    },
+    "preview": {
+      "defaultBadge": "Predefinito",
+      "autoMergeHeading": "Soglie di unione automatica",
+      "axis": {
+        "risk": "Rischio",
+        "impact": "Impatto",
+        "complexity": "Complessita"
+      },
+      "ceiling": "pari o inferiore a {value}",
+      "autoMergeExplainer": "Quando la CI e verde, l'agente merger valuta la pull request su questi tre assi. Se ogni punteggio resta entro il proprio limite, la pull request si unisce da sola e salta la revisione umana; qualsiasi valore superiore la manda a una persona.",
+      "manualHeading": "Solo revisione manuale",
+      "manualExplainer": "Questo criterio non unisce mai da solo, quindi ogni pull request attende una revisione umana qualunque sia il punteggio.",
+      "ciHeading": "Correzioni CI",
+      "ciAttempts": "L'esecuzione può fare {count} tentativo per rimettere in verde la CI prima di arrendersi. | L'esecuzione può fare {count} tentativi per rimettere in verde la CI prima di arrendersi."
     }
   },
   "modelPreset": {