@coreplane/switchboard 1.256.0 → 1.258.0

package/dist/assets/deploy/cloudflare-resident/worker.ts

@@ -350,6 +350,7 @@ import {
   liveDrain,
   parseDrainRequest,
   reportImageCurrent,
+  staleHolds,
   type DrainRecord,
 } from "./drain";
 import {
@@ -1604,9 +1605,15 @@ export class ResidentRegistryDO extends DurableObject<Env> {
    *  the new image (issue 1931): hold the drain for each — the fleet must not
    *  reopen onto them until they report. No live drain, nothing to hold. */
   async holdDrainFor(resources: string[]): Promise<void> {
-    const record = liveDrain(await this.ctx.storage.get(DRAIN_KEY), systemClock());
+    const now = systemClock();
+    const record = liveDrain(await this.ctx.storage.get(DRAIN_KEY), now);
     if (record === null || resources.length === 0) return;
-    await this.ctx.storage.put(DRAIN_KEY, holdDrain(record, resources));
+    const held = holdDrain(record, resources, now);
+    await this.ctx.storage.put(DRAIN_KEY, held);
+    // The hold's liveness alarm (issue 2044): the cycle bound is the earlier
+    // end, so the alarm fires there — reopening the fleet with the stale
+    // containers named — instead of at `until`, the last resort.
+    if (held.holdsUntil !== undefined) await this.ctx.storage.setAlarm(Date.parse(held.holdsUntil));
   }
 
   /** One resident's word that its running container is on the deploy's image:
@@ -1635,11 +1642,25 @@ export class ResidentRegistryDO extends DurableObject<Env> {
     const stored = await this.ctx.storage.get(DRAIN_KEY);
     if (stored === undefined) return;
     if (liveDrain(stored, now) === null) {
+      // The hold's liveness (issue 2044): a reopen past the cycle bound names
+      // the containers whose post-deploy cycle never landed — a warning, never
+      // a silence; each restarts on its own next quiet attach or refresh.
+      const stale = staleHolds(stored, now);
+      if (stale !== null)
+        console.log(
+          `[drain] fleet reopened with ${stale.join(", ")} still on the pre-deploy image — the post-deploy cycle did not land within its bound; a stale container restarts on its next quiet attach or refresh`,
+        );
       await this.ctx.storage.delete(DRAIN_KEY);
       await this.pushDrainPost("below");
     } else {
-      // Replaced with a later end under an already-armed alarm: re-arm at it.
-      await this.ctx.storage.setAlarm(Date.parse((stored as DrainRecord).until));
+      // Replaced with a later end under an already-armed alarm: re-arm at the
+      // record's own earlier end — the hold's cycle bound when one stands.
+      const record = stored as DrainRecord;
+      const ends = [
+        Date.parse(record.until),
+        ...(record.holdsUntil !== undefined ? [Date.parse(record.holdsUntil)] : []),
+      ];
+      await this.ctx.storage.setAlarm(Math.min(...ends.filter(Number.isFinite)));
     }
   }
 
@@ -3261,6 +3282,14 @@ export class ResidentDO extends Sandbox<Env> {
       await this.writeDiskMarkers({ ready: sha, depsKey: lockfileHash, builtSha: sha });
       this.deleteSchedules(PROVISIONING_CALLBACK);
       await this.setResidentState("warm");
+      // A fresh provision runs on the image the deployed Worker pins, so it IS
+      // the cycle a held drain waits for (issue 2044): report it — a rebuild
+      // mid-drain reopens the fleet instead of leaving the hold standing on a
+      // report `reconcileImage` would never send for a container it never saw
+      // as stale. The marker is cleared with the report; a failure keeps both
+      // for the next reconcile, and the hold's cycle bound is the backstop.
+      await this.ctx.storage.put(IMAGE_REPORT_PENDING_KEY, { resource });
+      await this.reportPendingImageCurrent("provision");
       // The first refresh instance is the cron's: the row now reads `warm`
       // with no instance recorded, so the next firing creates it (item 9).
     } catch (err) {
@@ -7597,6 +7626,19 @@ export class ResidentDO extends Sandbox<Env> {
   }
 
   private async runOpTraced(op: "test" | "build", refArg: string | null, t0: number): Promise<OpRunOk | ThreadErr> {
+    // The fleet drain (item 69; issue 2044): a typed op is a new piece of work
+    // like a new run's attach, and during the incident one waited silently at
+    // the drain — so it is answered with the drain's own record at once, a
+    // deterministic refusal the command surfaces as its reason, never a wait.
+    const drain = await this.fleetDrain();
+    if (drain !== null) {
+      return {
+        error: `op-refused: the resident fleet is drained for ${drain.reason} (asked by ${drain.by}, ends by ${drain.until}) — re-run the command when the fleet reopens`,
+        status: 503,
+        reason: "draining",
+        cause: "system",
+      };
+    }
     try {
       await this.ensureHydrated();
     } catch (err) {
@@ -8070,6 +8112,7 @@ export class ResidentDO extends Sandbox<Env> {
       AUTO_REBUILDS_KEY,
       INFRA_STREAK_KEY,
       MEMORY_KEY,
+      IMAGE_REPORT_PENDING_KEY,
     ]);
     const facts = map.get(FACTS_KEY) as RepoFacts | undefined;
     const snap = map.get(SNAPSHOT_KEY) as SnapshotRecord | undefined;
@@ -8147,6 +8190,11 @@ export class ResidentDO extends Sandbox<Env> {
       inFlight: this.inFlightCount() + registeredRuns,
       // The runs alone (no refresh cycle): what the deploy preflight refuses on.
       runsInFlight: this.runsInFlightCount() + registeredRuns,
+      // Issue 2044: whether this container's new-image report is still owed —
+      // `pending` names a resident a held drain waits on, so `repo list` and
+      // the deploy's readers never print a bare "warm" for a repository whose
+      // running container the last deploy could not verify.
+      imageReport: map.get(IMAGE_REPORT_PENDING_KEY) !== undefined ? "pending" : "current",
       // Item 22: who holds what, as the rows say — the mirror mutex and the
       // cycle/hydration leases, each judged against this incarnation.
       incarnation: this.incarnation,

package/dist/assets/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "switchboard",
-  "version": "1.256.0",
+  "version": "1.258.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "switchboard",
-      "version": "1.256.0",
+      "version": "1.258.0",
       "license": "Apache-2.0",
       "workspaces": [
         "web",
@@ -20445,7 +20445,7 @@
     },
     "packages/switchboard": {
       "name": "@coreplane/switchboard",
-      "version": "1.256.0",
+      "version": "1.258.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/pi-ai": "0.85.1",

package/dist/assets/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchboard",
-  "version": "1.256.0",
+  "version": "1.258.0",
   "private": true,
   "description": "Mention it in Slack and an agent reviews the PR, ships the fix, or answers the question — on the model you choose, with its tools running where you decide.",
   "license": "Apache-2.0",
@@ -39,9 +39,9 @@
     "cli": "tsx src/cli.ts",
     "verify": "npm run verify:root && npm run verify --workspaces --if-present && npm run check:site",
     "verify:root": "npm run check:consistency && npm run typecheck && npm run lint && npm run format:check && npm test && npm run check:dist",
-    "check:consistency": "npm run check:lockfile && npm run check:sandbox-pair && npm run skills:check && npm run check:deps-drift && npm run licenses:check && npm run docs:check && npm run pr-title:check && npm run specs:check && npm run decisions:check && npm run hygiene:check && npm run check:project-facts && npm run check:registry-drift && npm run agents:check && npm run clock:check && npm run screenshots:check",
+    "check:consistency": "npm run check:lockfile && npm run check:sandbox-pair && npm run skills:check && npm run check:deps-drift && npm run licenses:check && npm run docs:check && npm run pr-title:check && npm run specs:check && npm run decisions:check && npm run hygiene:check && npm run vocabulary:check && npm run check:project-facts && npm run check:registry-drift && npm run agents:check && npm run clock:check && npm run screenshots:check",
     "ci:gate": "node scripts/ci-gate.mjs",
-    "fix": "npm run docs:gen && npm run pr-title:gen && npm run agents:gen && npm run clock:gen && npm run hygiene:gen && npm run deploy:gen && npm run skills:sync && npm run lint:fix && npm run format",
+    "fix": "npm run docs:gen && npm run pr-title:gen && npm run agents:gen && npm run clock:gen && npm run hygiene:gen && npm run vocabulary:gen && npm run deploy:gen && npm run skills:sync && npm run lint:fix && npm run format",
     "deploy:gen": "npm run --silent cli -- deploy init",
     "deploy:check": "npm run --silent cli -- deploy init --check",
     "check:lockfile": "node scripts/check-lockfile.mjs",
@@ -73,6 +73,8 @@
     "decisions:check": "tsx scripts/decisions-check.ts",
     "hygiene:check": "node scripts/public-hygiene.mjs",
     "hygiene:gen": "node scripts/public-hygiene.mjs --write",
+    "vocabulary:check": "node scripts/vocabulary-check.mjs",
+    "vocabulary:gen": "node scripts/vocabulary-check.mjs --write",
     "docs:changed": "node scripts/docs-changed.mjs",
     "deploy:targets": "node scripts/deploy-targets.mjs",
     "docs:dev": "npm run dev -w docs --",

package/dist/assets/project.json

@@ -32,7 +32,7 @@
   "commands": {
     "$comment": "What each root npm script does and when to run it — the source of the Commands table in AGENTS.md (npm run agents:gen). A script without an entry fails agents:check, so a new script cannot ship undocumented.",
     "verify": {
-      "does": "The whole gate: every root check, every workspace's verify, the site check — exactly what CI runs.",
+      "does": "The whole gate: every check, every workspace — exactly what CI runs.",
       "when": "Local sessions, before requesting review. ~4 min. A pipeline agent leaves it to CI."
     },
     "verify:root": {
@@ -40,11 +40,11 @@
       "when": "When only the bot changed."
     },
     "check:consistency": {
-      "does": "The sub-second checks that generated and declared things equal the code (lockfile, sandbox pairs, skills, licenses, docs tables, specs, project facts, this table).",
+      "does": "The sub-second checks that generated and declared things equal the code, this table included.",
       "when": "After touching a generated or declared artifact; one CI leg."
     },
     "test": {
-      "does": "The whole vitest suite (bot, web, the plain-Node Worker tests) from one entry, after `deploy:gen`.",
+      "does": "The whole vitest suite from one entry, after `deploy:gen`.",
       "when": "Local sessions, before pushing; a pipeline agent runs the changed set — the full suite is CI's."
     },
     "typecheck": {
@@ -160,21 +160,29 @@
       "when": "After renaming a test or editing a spec; `-- --fix` makes truncated titles explicit."
     },
     "specs:coverage": {
-      "does": "Maps a change's paths to the specs whose `Code`/`Tests` headers cover them, then lists changed source paths no spec covers.",
+      "does": "Maps a change's paths to the specs whose headers cover them, then lists paths no spec covers.",
       "when": "`-- --changed origin/main...HEAD [--test-guard]` before review; `-- --require` fails on an uncovered path; `-- --json` for machines."
     },
     "decisions:check": {
-      "does": "Every record under `docs/decisions/` and `docs/plans/` has a valid `status`, a superseded one names its successor, an accepted body only gains an appended `## Amended`.",
-      "when": "Part of `check:consistency`; a failing record is superseded or amended by appending, never edited."
+      "does": "Every record under `docs/decisions/` and `docs/plans/` has a valid `status`, a superseded one names its successor, an accepted body only gains `## Amended`.",
+      "when": "Part of `check:consistency`; a failing record is superseded or amended, never edited."
     },
     "hygiene:check": {
       "does": "The public tree's imprint (company, people, trackers, plan ids, ids, dates) equals the recorded list, which only shrinks.",
-      "when": "Part of `check:consistency`. New hit: rewrite the line or allow it in `scripts/public-hygiene.allow`."
+      "when": "Part of `check:consistency`. New hit: rewrite the line or allow it by name."
     },
     "hygiene:gen": {
       "does": "Records the tree's remaining imprint after a scrub; refuses growth unless `-- --force`.",
       "when": "Part of `fix`; new imprint fails it like `hygiene:check`."
     },
+    "vocabulary:check": {
+      "does": "No internal word prints on a user surface; the baseline only shrinks.",
+      "when": "Part of `check:consistency`; a hit is rewritten in the user's nouns."
+    },
+    "vocabulary:gen": {
+      "does": "Records the remaining internal words; refuses growth unless `-- --force`.",
+      "when": "Part of `fix`."
+    },
     "agents:gen": {
       "does": "Writes the Commands table in AGENTS.md from `package.json` and this file.",
       "when": "After adding or changing a script; part of `fix`."
@@ -220,8 +228,8 @@
       "when": "After a `web/` change."
     },
     "screenshots:gen": {
-      "does": "Renders the dashboard screenshots whose inputs changed, both themes, recording each surface's input hashes in `docs/public/screenshots/manifest/` (`--force`: all).",
-      "when": "After a `web/` or fixture change, once `screenshots:check` names it; needs `npx playwright-core install chromium`, so not in `fix`."
+      "does": "Renders the dashboard screenshots whose inputs changed, both themes, recording input hashes in the manifest (`--force`: all).",
+      "when": "After a `web/` or fixture change; needs `npx playwright-core install chromium`, so not in `fix`."
     },
     "screenshots:check": {
       "does": "Each surface's inputs still hash to what its screenshots were rendered from — no browser.",

package/dist/assets/source.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.256.0",
-  "commit": "fd814ee9ad2421f38178b15103d49ff4d9c5eb7c",
-  "builtAt": "2026-09-20T04:37:22.536Z"
+  "version": "1.258.0",
+  "commit": "05d8b84a387c7b7c15ed8dd2dc30f08a5982a981",
+  "builtAt": "2026-09-20T17:05:48.184Z"
 }

package/dist/assets/src/agents/registry.ts

@@ -74,7 +74,7 @@ export interface AgentDef {
   system: string;
   /** key into TOOLSETS (src/tools/toolsets.ts): the tools the bot relays to
    *  the preset's pi; pi's own workspace tools follow `identity`. */
-  toolset: "full" | "readonly" | "web" | "assistant" | "explore" | "conductor" | "none";
+  toolset: "full" | "readonly" | "web" | "assistant" | "explore" | "conductor" | "orchestrator" | "none";
   /** The runaway guard, not a budget: `runawayTurnCap(maxMinutes)` for every
    *  preset that runs the loop (`loopBudget`). The wall clock below is the
    *  budget; a run that reaches this cap first was pacing like a loop, and its
@@ -279,6 +279,23 @@ export const FAST_GATES_BEFORE_PUSH =
   "CI's gate — `npm run verify` runs there on your push, never here: push a head early and let CI judge it, " +
   "fixing forward with further commits and pushes.";
 
+// Every coding prompt carries this verbatim, right after the fast gates
+// (agent-coding item 13; record 0071 mechanism one, issue 1747): the rebase
+// before every push, always and never configurable. Approved pull requests
+// went stale behind sibling merges and each needed a hand-posted rebase; a
+// rebase against a base the run just fetched, with the change's context still
+// in its window, is the cheapest rebase the system will ever run, so it is
+// unconditional. One constant, one text: the three coding variants carry the
+// same bytes — a ship fix round's child runs these same prompts — and the ship
+// contract's first instruction points here instead of re-stating it
+// (src/core/ship/contract.ts).
+export const REBASE_BEFORE_PUSH =
+  "REBASE BEFORE EVERY PUSH — always, not configurable. Immediately before each push: fetch your base branch, " +
+  "rebase your branch onto it, resolve any conflict with the context you already have (the repository's " +
+  "AGENTS.md says how a generated file is regenerated — regenerate it, never hand-merge it), re-run THE FAST " +
+  "GATES on the rebased tree, and only then push. Every head that reaches review is then current with its " +
+  "base when it lands, and no unit ends merge-ready behind a sibling that merged first.";
+
 const CODING_SYSTEM = `You are Switchboard's coding agent, operating from a Slack request.
 
 You work inside a dedicated workspace directory with bash, read_file, and write_file tools. ${SANDBOX_TOOLCHAIN}
@@ -303,6 +320,8 @@ ${CHECKS_BY_COST}
 
 ${FAST_GATES_BEFORE_PUSH}
 
+${REBASE_BEFORE_PUSH}
+
 ${NEVER_MERGE}
 
 ${UNIT_CONTRACT}
@@ -352,6 +371,8 @@ ${CHECKS_BY_COST}
 
 ${FAST_GATES_BEFORE_PUSH}
 
+${REBASE_BEFORE_PUSH}
+
 ${NEVER_MERGE}
 
 ${UNIT_CONTRACT}
@@ -397,6 +418,8 @@ ${CHECKS_BY_COST}
 
 ${FAST_GATES_BEFORE_PUSH}
 
+${REBASE_BEFORE_PUSH}
+
 ${NEVER_MERGE}
 
 ${UNIT_CONTRACT}
@@ -589,7 +612,7 @@ Your tools work without a workspace: the GitHub tools — \`github_repos\` (the
 
 ${statusCardRule('"Read the issue and its thread", "Post the comment"')} A one-step answer needs no checklist; post one when the request has steps the person would wait on.
 
-You cannot run commands, clone repositories, edit code, or review pull requests, and you cannot search the web — and you cannot hand off, route, forward or start another run: never say you will hand off, route, forward or start anything, because you cannot start another agent's run. Other Switchboard agents can do those things, and a plain message reaches them by itself — but only a new top-level message in the channel reaches the router; a reply in this thread comes back to you. For a code change or a pull request, say what you found and that the change is not yours to make, and that asking for it in plain words in a new top-level message in the channel — not a reply in this thread — like "in acme/api: fix the failing login test" starts the agent that makes the change, opens the PR and loops review; the same for a PR review ("review <PR URL>") and a web-research question ("compare X and Y on the web"). Never hand back a command or an \`agent:…\` line for the person to type: describe the ask in their words. Delete an issue only when the user explicitly asked to delete it (closing is an update).`;
+You cannot run commands, clone repositories, edit code, or review pull requests, and you cannot search the web — and you cannot hand off, route, forward or start another run: never say you will hand off, route, forward or start anything, because you cannot start another agent's run. Other Switchboard agents can do those things, and a plain message reaches them by itself: Switchboard's door reads every message — a reply in this thread included — and starts the right agent from the person's own words. For a code change or a pull request, say what you found and that the change is not yours to make, and that asking for it in plain words — right here in the thread or anywhere in the channel, like "in acme/api: fix the failing login test" — starts the agent that makes the change, opens the PR and loops review; the same for a PR review ("review <PR URL>") and a web-research question ("compare X and Y on the web"). NEVER tell the person to post a new top-level message, re-post, re-ask elsewhere or retype their request — their words have already been said and the door reads thread replies; and never hand back a command or an \`agent:…\` line to type: describe the ask in their words. Delete an issue only when the user explicitly asked to delete it (closing is an update).`;
 
 // The explore agent (docs/reference/specs/agent-explore.md): a long, read-only
 // investigation — "run our CI locally and validate the claims", "how long does
@@ -624,6 +647,32 @@ ${BREVITY_RULE}
 ${FENCED_CONTENT_RULE}
 Report outcomes faithfully: a check you could not run is "could not check", never a guess. Use Slack-friendly formatting (no markdown headers; *bold*, bullets, code blocks — render the claim table as aligned rows inside a code block). Your final message is posted to Slack: lead with the overall verdict in one line, then the claim table, then what a follow-up should do.`;
 
+// The orchestrator (record 0070; docs/reference/specs/orchestration-plane.md
+// item 11): the plane's chat preset — one long-lived thread per person beside
+// the panels, and `agent:orchestrator` from any channel a grant admits. It
+// reads the fleet from the plane's projections (the `plane_show` tool answers
+// the SAME rows the panels paint) and never from its own context: every fleet
+// fact cites the row it read, and a question the tables cannot answer says so
+// instead of recalling. Machine `none`, identity `none`: no workspace, no
+// shell, no credential — the read tool set is its whole reach, and its writes
+// are the registry's fenced commands through the door (record 0070's later
+// units), never a tool here. The prose speaks record 0066's twelve nouns:
+// thread, run, agent, pipeline, unit, round, budget, follow-up, verdict,
+// outcome, card, pull request — no thirteenth noun rides in.
+const ORCHESTRATOR_SYSTEM = `You are Switchboard's orchestrator: the control plane's chat, answering a person about their fleet — every thread, run, agent, pipeline, unit, round, budget, follow-up, verdict, outcome, card and pull request the plane's tables carry.
+
+You have no workspace and no shell. Your tools: \`plane_show\` (the plane's live tables — every live and recently ended run, every unit and every tracked pull request, each with its owner and its health: the same rows the /plane panels paint, seen as the person who asked may see them), \`recall\` and \`notes\` (this thread's log and your notepad), and \`update_status\`.
+
+EVERY FLEET FACT COMES FROM THE TABLES, NEVER FROM MEMORY. Before answering any question about the fleet — what is running, which unit is idle, which pull request is merge-ready and nobody's — read the tables with \`plane_show\` and cite the row you read: name the run id, the unit or the pull request the answer stands on, so the person can check it against the panel beside you. Never answer a standing question from this conversation's earlier turns or your own context: an earlier turn is history, the table is now. A question the tables cannot answer — a why the rows do not carry, a fact outside the fleet — is answered "the tables do not say", plainly, instead of recalling or guessing; say what the rows do show and where the answer would live.
+
+You cannot run commands, edit code, merge or stop anything from here: acting on the fleet goes through Switchboard's own commands, which the person's own words reach through the door under their own grants — say what you found and let their next sentence act.
+
+${statusCardRule('"Read the plane tables", "Check the run\'s standing"')} A one-read answer needs no checklist.
+
+${BREVITY_RULE}
+${FENCED_CONTENT_RULE}
+Lead with the answer, then the cited rows — short lines, the row's own words. Your reply renders in the plane's chat column or the channel the question came from.`;
+
 // The conductor (docs/reference/specs/agent-conductor.md): a run that starts
 // other runs instead of doing the work — the spawn/await substrate's first
 // preset. A child is a `dispatch()` run as the requesting user, in a thread of
@@ -802,6 +851,20 @@ const WORK_PRESETS = {
     ...loopBudget("explore"),
     // No built-in effort: the deployment decides, as for coding.
   },
+  orchestrator: {
+    name: "orchestrator",
+    description:
+      "Answers fleet questions from the plane's live tables — runs, units, pull requests — with the row cited. No workspace or shell.",
+    system: ORCHESTRATOR_SYSTEM,
+    toolset: "orchestrator",
+    // The plane read is a call in the bot process: nothing is provisioned
+    // and no credential is minted (record 0070, criterion 3).
+    machine: "none",
+    identity: "none",
+    tiers: ["fast", "strong"], // reads and cites rows: may run fast
+    maxTokens: 16000,
+    ...loopBudget("orchestrator"),
+  },
 } satisfies Record<string, AgentDef>;
 
 export const AGENTS: Record<string, AgentDef> = {

package/dist/assets/src/core/authz/grants.ts

@@ -13,6 +13,18 @@ import { NO_GRANTS, type Grants, type GrantSet } from "./types.js";
 /** Every grant, on every axis. What admins and the local CLI hold. */
 export const ALL_GRANTS: Grants = Object.freeze({ actions: "all", channels: "all", repos: "all" });
 
+/** The plane's system actor (record 0064; record 0057 as amended): the run
+ *  ledger object steers write-preset runs itself — the checkpoint steer and the
+ *  held turn's reissue land as `run_inbox` rows with sender `plane` — under
+ *  this one standing grant. Recorded here so the table stays the whole story:
+ *  the write happens on the object, which holds no other authority. */
+export const PLANE_ACTOR_ID = "plane";
+export const PLANE_GRANTS: Grants = Object.freeze({
+  actions: new Set(["steer:write"]),
+  channels: "all",
+  repos: "all",
+});
+
 /** The namespaces a native `grants` key may use (invariant 4). `cli:` is not
  *  configurable (the local CLI always holds everything) and `agent:` actors
  *  derive their grants from their principal, so neither is listed. */

package/dist/assets/src/core/authz/policy.ts

@@ -63,6 +63,12 @@ export const POLICY: readonly Rule[] = [
   // NAMED run (`authorizeSteerOwner`, authorization item 16a) — the requester,
   // a linked id, or `runs:write` — which no command-door row can see.
   { action: "steer:write", resource: "command", when: [grant("steer:write")] },
+  // The plane's checkpoint steer (record 0064): the system actor `plane`
+  // (`PLANE_ACTOR_ID`, a `service` actor holding `PLANE_GRANTS`' one standing
+  // `steer:write`) writes the steer into a write-preset run's inbox on the
+  // ledger object itself, sender `plane`; this row records that authority in
+  // the one table even though the object, not the bot, executes the write.
+  { action: "steer:write", resource: "run", actorKinds: ["service"], when: [grant("steer:write")] },
 
   // ── conversations ────────────────────────────────────────────────────────
   // Who may point the bot at another thread (record 0037). Asked for a
@@ -108,6 +114,11 @@ export const POLICY: readonly Rule[] = [
   // read is never a chat baseline, like the costs reads.
   { action: "providers:read", resource: "command", when: [grant("providers:read")] },
 
+  // ── pull requests ──────────────────────────────────────────────────
+  // `pulls rebase` force-pushes the pipeline's branches and can start a paid
+  // fix round (record 0071): a grant, never a chat baseline.
+  { action: "pulls:write", resource: "command", when: [grant("pulls:write")] },
+
   // ── repos ────────────────────────────────────────────────────────────────
   { action: "repo:read", resource: "command", when: [grant("repo:read")] },
   { action: "repo:write", resource: "repo", when: [grant("repo:write")] },
@@ -150,6 +161,10 @@ export const POLICY: readonly Rule[] = [
   // channel-config right — whoever may set the channel may set a thread in it;
   // never a baseline, so membership alone admits nobody.
   { action: "config:write", resource: "config-scope", resourceKind: "thread", when: [grant("config:write")] },
+  // The ORG scope (`config set org --pulls.…`, record 0071) — and a repository
+  // scope, the org setting's per-repository slice — affects every requester:
+  // the same `config:write` grant, never a baseline.
+  { action: "config:write", resource: "config-scope", resourceKind: "org", when: [grant("config:write")] },
   // A user edits only their own scope.
   { action: "config:write", resource: "config-scope", resourceKind: "user", when: [IS_SELF] },
   // The author binding's one trusted write (record 0062, authorization.md item

package/dist/assets/src/core/budgets.ts

@@ -16,6 +16,10 @@
 // Workflow-driven coordinator and the deploy Workers can bundle it — the
 // dependency runs registry → budgets, never the reverse.
 
+export const SECOND_MS = 1_000;
+
+export const secondsToMs = (seconds: number): number => seconds * SECOND_MS;
+
 export const MINUTE_MS = 60_000;
 
 /** Minutes → milliseconds, for a duration a request names in minutes (a drain's
@@ -109,6 +113,14 @@ export const DRAIN = {
   marginMinutes: 5,
   maxMinutes: 90,
   defaultMinutes: 60,
+  /** How long a held drain waits for a container's post-deploy cycle before
+   *  reopening the fleet anyway with the stale container named (issue 2044):
+   *  the platform replaces container processes three to ten minutes after a
+   *  deploy (docs/reference/specs/resident-repos.md item 65), so a cycle that
+   *  has not landed within this bound is not coming on its own — the gate
+   *  asked for the cycle, so it owns the outcome and never holds the fleet
+   *  closed to the drain's whole `until` on a report nothing will send. */
+  cycleBoundMinutes: 10,
 } as const;
 
 /** How long an intake receipt row is kept on the run history object
@@ -132,7 +144,15 @@ export function intakeReceiptRetentionMs(catchUpWindowMs: number): number {
 export const INTAKE_RECOVERY_WINDOW_MS = 10 * MINUTE_MS;
 
 /** The presets that run the tool loop, and the one pipeline preset. */
-export const LOOP_PRESETS = ["general", "coding", "review", "research", "explore", "conductor"] as const;
+export const LOOP_PRESETS = [
+  "general",
+  "coding",
+  "review",
+  "research",
+  "explore",
+  "conductor",
+  "orchestrator",
+] as const;
 export type LoopPreset = (typeof LOOP_PRESETS)[number];
 export type Preset = LoopPreset | "ship";
 
@@ -143,7 +163,7 @@ export type Preset = LoopPreset | "ship";
  *  that pushes at minute 29 and then runs the repo's whole gate (seven to ten
  *  minutes on a resident) was cut at 45 one run in twelve, so the ask is
  *  double the 90th percentile (31.5) with the gate inside it. Ship's holds
- *  its own loop at the default rounds with a fix round at that ask, not at
+ *  its own loop at the default rounds with a findings round at that ask, not at
  *  its floor (`fit` proves the floor case; the ask leaves room above it). */
 export const ASKS: Readonly<Record<Preset, number>> = {
   general: 5,
@@ -153,19 +173,24 @@ export const ASKS: Readonly<Record<Preset, number>> = {
   research: 8,
   explore: 120,
   conductor: 120,
+  // The plane's chat preset (record 0070): reads the fleet's tables and
+  // answers; a turn is a projection read plus a write-up, so its ask sits
+  // between general's and research's kind of work, with room for a few reads.
+  orchestrator: 10,
 };
 
-/** The rounds a ship loop is made of. `fix` is a coding child handed the
+/** The rounds a ship loop is made of. `findings` is a coding child handed the
  *  review's findings; `merge` is the runner's wait on the guards. */
-export type RoundKind = "coding" | "review" | "fix" | "merge";
+export type RoundKind = "coding" | "review" | "findings" | "merge";
 
 /** The least lease in which a round does useful work, in minutes. A carve that
  *  falls under the floor is refused rather than dispatched: a two-minute
- *  review or fix costs an attach and a model turn and finishes nothing.
- *  Review's is the ledger's 90th percentile of completed reviews (5.1 min over
- *  181); coding's is the least a fix round can run the repo's gate in — the
- *  gate alone takes seven to ten minutes on a resident, and a fix that cannot
- *  run it finishes nothing its contract asks; the merge wait's is a guess
+ *  review or findings round costs an attach and a model turn and finishes
+ *  nothing. Review's is the ledger's 90th percentile of completed reviews (5.1
+ *  min over 181); coding's is the least a findings round can run the repo's
+ *  gate in — the gate alone takes seven to ten minutes on a resident, and a
+ *  round that cannot run it finishes nothing its contract asks; the merge
+ *  wait's is a guess
  *  until the ledger says. */
 export const PRESET_FLOORS: Readonly<Record<LoopPreset, number>> = {
   general: 2,
@@ -174,10 +199,11 @@ export const PRESET_FLOORS: Readonly<Record<LoopPreset, number>> = {
   research: 3,
   explore: 15,
   conductor: 15,
+  orchestrator: 2,
 };
 export const FLOORS: Readonly<Record<RoundKind, number>> = {
   coding: PRESET_FLOORS.coding,
-  fix: PRESET_FLOORS.coding,
+  findings: PRESET_FLOORS.coding,
   review: PRESET_FLOORS.review,
   merge: 10,
 };
@@ -186,6 +212,12 @@ export const FLOORS: Readonly<Record<RoundKind, number>> = {
  *  when the remainder allows it. */
 export const MERGE_WAIT_ASK_MINUTES = 60;
 
+/** The sweep's bounds (record 0071, mechanism two): the short lease of the one
+ *  model round a conflicting pull request may buy, and the spend that round is
+ *  capped at per pull request — a round refused at either bound ends the pull
+ *  request's line with the conflict named, never a retry loop. */
+export const PULL_SWEEP = { leaseMinutes: 15, spendCapUsd: 5 } as const;
+
 /** The provider retry ladder (issue 1932): the backoff before each retry of a
  *  transient model-call failure — a gateway 5xx, a stream cut before
  *  `message_stop`, a gateway timeout. Three attempts with growing waits,
@@ -208,7 +240,15 @@ export const SHIP_WAIT = { marginMinutes: 5, chunkMinutes: 5, mergeChunkMinutes:
  *  it, a reservation's window, and the default re-ask cadence — how often a
  *  silent resident something waits on is probed (`plane.reaskMinutes`
  *  overrides it per deployment). */
-export const PLANE = { recentMinutes: 60, reservationMinutes: 2, reaskMinutes: 2 } as const;
+export const PLANE = {
+  recentMinutes: 60,
+  reservationMinutes: 2,
+  reaskMinutes: 2,
+  /** A coding round with no pushed head past this is steered once (record 0064, "The backpressure contract"). */
+  noPushMinutes: 15,
+  /** The line an in-flight call with NO declared bound is judged against for the same steer. */
+  noBoundMinutes: 20,
+} as const;
 
 /** The named amounts a lease holds back, in minutes. Each stands for a step
  *  every run or round pays: `provision` is attach and restore before the
@@ -238,6 +278,7 @@ export const POST_STEP_MINUTES: Readonly<Record<Preset, number>> = {
   research: 0,
   explore: 0,
   conductor: 0,
+  orchestrator: 0,
   ship: 0,
 };
 
@@ -328,6 +369,12 @@ export function provisionalBearerExpiresAt(now: number, leaseMinutes: number): n
   return now + (ALLOWANCES.provision + leaseMinutes + ALLOWANCES.bearerGrace) * MINUTE_MS;
 }
 
+/** The e2b credential-write exec's own timeout: the store-file write is one
+ *  `printf` plus a `git config` reset, so a minute is generous headroom while
+ *  still failing fast when the micro-VM is wedged
+ *  (docs/reference/specs/execution.md item 5). */
+export const SANDBOX_CREDENTIAL_WRITE_TIMEOUT_MS = MINUTE_MS;
+
 /** The per-command bash budget's rows: the default when a call names none, the
  *  ceiling a call may raise it to, and the floor under which a number is a
  *  typo (docs/reference/specs/execution.md item 11). */
@@ -361,19 +408,20 @@ export interface RoundPosition {
 }
 
 /** The rounds of a loop in order: the coding round, then a review and, after
- *  every review but the last, a fix, then the merge wait. */
+ *  every review but the last, a findings round, then the merge wait. */
 export function loopRounds(loop: Loop): RoundKind[] {
   const rounds: RoundKind[] = ["coding"];
   for (let i = 0; i < loop.maxRounds; i++) {
     rounds.push("review");
-    if (i < loop.maxRounds - 1) rounds.push("fix");
+    if (i < loop.maxRounds - 1) rounds.push("findings");
   }
   rounds.push("merge");
   return rounds;
 }
 
 /** Where a round sits in `loopRounds`: the coding round first; review round
- *  `n` (counted from 1) and the fix that follows it at `2n − 1` and `2n`; the
+ *  `n` (counted from 1) and the findings round that follows it at `2n − 1`
+ *  and `2n`; the
  *  merge wait last. The ship coordinator numbers its rounds this way, so the
  *  reserve it carves with is the one the fit assumed. */
 export function loopPosition(loop: Loop, kind: RoundKind, n = 0): number {
@@ -382,7 +430,7 @@ export function loopPosition(loop: Loop, kind: RoundKind, n = 0): number {
       return 0;
     case "review":
       return 2 * n - 1;
-    case "fix":
+    case "findings":
       return 2 * n;
     case "merge":
       return 2 * loop.maxRounds;
@@ -403,7 +451,7 @@ export function carveChildOfParent(
 }
 
 /** The minutes a round holds back for what must follow it in the loop: the
- *  floor plus provisioning of every later review and fix, and the merge
+ *  floor plus provisioning of every later review and findings round, and the merge
  *  wait's floor. A merge holds nothing back; a round with no loop (a
  *  conductor's child) holds nothing back either. */
 export function reserveMinutes(
@@ -419,12 +467,12 @@ export function reserveMinutes(
   return reserve;
 }
 
-/** What a round asks for: the preset's ask for a coding or fix round, the
+/** What a round asks for: the preset's ask for a coding or findings round, the
  *  review's for a review, the merge wait's own for the merge. */
 export function roundAskMinutes(kind: RoundKind): number {
   switch (kind) {
     case "coding":
-    case "fix":
+    case "findings":
       return ASKS.coding;
     case "review":
       return ASKS.review;