@coreplane/switchboard 1.260.2 → 1.260.3

package/dist/cli.js

@@ -2094,7 +2094,7 @@ function renderFirstInstruction(rebase) {
   const branch2 = rebase.branch ? `\`${rebase.branch}\`` : "the unit's branch";
   const onto = rebase.onto ? `\`${rebase.onto}\`` : "the merged parent";
   const gates = `${FAST_GATES_POINTER} ${GATE_RECEIPTS}`;
-  return `Rebase ${branch2} onto ${onto} before any other work \u2014 the parent unit has merged and the base has moved; the only writes are your own on that branch. A conflict ends the unit: report it as the handoff and stop. Push the branch as soon as the change exists and the fast gates pass \u2014 the project's full verification is CI's gate, run there after the push with any fix as a further commit; an unpushed tree does not survive the run's end. ${gates} ${REBASE_POINTER} At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS}`;
+  return `Rebase ${branch2} onto ${onto} before any other work \u2014 the parent unit has merged and the base has moved; the only writes are your own on that branch. Push the branch as soon as the change exists and the fast gates pass \u2014 the project's full verification is CI's gate, run there after the push with any fix as a further commit; an unpushed tree does not survive the run's end. ${gates} ${REBASE_POINTER} At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS}`;
 }
 function renderSpecRow(row2, dropText) {
   const head = `#### ${row2.spec} item ${row2.item}`;
@@ -2313,7 +2313,7 @@ EVERY PR includes one that already exists when you push \u2014 opened by a perso
 - **For agents** (\`agentNotes\`, optional, \u22642000, collapsed): what a reviewing agent needs that a person does not \u2014 the rebase you did, generated files to skip, the command that reproduces the bug.`;
     NEVER_MERGE = `NEVER merge a pull request and NEVER approve one \u2014 no merge or approve command, no merge/approve API call, no pushing to the default branch. Your deliverable is the pushed branch plus the submitted description; Switchboard's own GitHub writes are the PR open/edit, never an approval or a merge \u2014 a human decides what merges.`;
     CONTRACT_HEADINGS_LIST = Object.values(CONTRACT_SECTION_HEADINGS).map((h) => `\`${h}\``).join(", ");
-    UNIT_CONTRACT = `UNIT CONTRACT: when your first user turn carries a \`${CONTRACT_HEADING}\` block \u2014 its sub-headings, in this order: ${CONTRACT_HEADINGS_LIST} \u2014 it is the contract for one plan unit, rendered by Switchboard from the plan itself, and it outranks any free-text task beside it. Do its first instruction first: the rebase of the unit's branch onto the merged parent (a conflict ends the unit \u2014 report it and stop; never resolve it by force). Then implement the unit's section as written: every test scenario it lists is added as a test, every spec row it names is updated so its proof binding resolves, the agent rules are followed, and no guard it names is weakened. The review is handed the same block and checks the diff against it: a test scenario the unit listed and the diff did not add is a finding at minor severity \u2014 the same severity as a spec contradiction. Never edit the plan record itself; where the unit is wrong or a criterion could not be proven, say so in the handoff and in your final message.`;
+    UNIT_CONTRACT = `UNIT CONTRACT: when your first user turn carries a \`${CONTRACT_HEADING}\` block \u2014 its sub-headings, in this order: ${CONTRACT_HEADINGS_LIST} \u2014 it is the contract for one plan unit, rendered by Switchboard from the plan itself, and it outranks any free-text task beside it. Do its first instruction first: the rebase of the unit's branch onto the merged parent. Then implement the unit's section as written: every test scenario it lists is added as a test, every spec row it names is updated so its proof binding resolves, the agent rules are followed, and no guard it names is weakened. The review is handed the same block and checks the diff against it: a test scenario the unit listed and the diff did not add is a finding at minor severity \u2014 the same severity as a spec contradiction. Never edit the plan record itself; where the unit is wrong or a criterion could not be proven, say so in the handoff and in your final message.`;
     UNIT_HANDOFF = `UNIT HANDOFF: when your first user turn carries a \`${CONTRACT_HEADING}\` block, call the submit_handoff tool once, after submit_pr_description and before your final message, with the typed handoff \u2014 deviations: where you departed from the unit as written (from, to, why); followUps: what you found and did not do, and where it belongs (what, where); unproven: which of the unit's test scenarios or criteria you could not prove, and why (criterion, why); landed (optional): what of the unit was already on the base when you began, and the pull request or commit that carries it (what, where) \u2014 when the whole unit is already there, push nothing of your own and open no pull request; the handoff's landed rows end the unit done. Switchboard records it on the run and posts it to the unit's board issue, where a person decides each row's disposition; you never edit the plan's ledger yourself. An empty handoff is submitted as three empty lists, never skipped \u2014 a missing handoff reads as an unfinished run, not as nothing to say. Without a \`${CONTRACT_HEADING}\` block, do not call it.`;
     IMAGE_TOOLCHAIN = `Node 24 with npm and pnpm; python3, make and g++ (native modules build); ffmpeg (frames out of a video \u2014 \`ffmpeg -i in.mp4 -vf fps=1 f_%03d.png\` \u2014 and video out of frames or a recording); and a headless Chromium through Playwright \u2014 \`playwright screenshot <url> out.png\`, \`playwright pdf <url> out.pdf\`, or \`require('playwright')\` for a scripted page and \`recordVideo\``;
     SANDBOX_TOOLCHAIN = `The sandbox image carries ${IMAGE_TOOLCHAIN}; and Docker (the engine starts on the first \`docker\` call).`;
@@ -2330,7 +2330,7 @@ Keep notes with the \`notes\` tool: one short document, replaced whole each time
     CHECKS_BY_COST = `CHECKS BY COST \u2014 push before the expensive ones. Every check you might run has a cost class: seconds (a formatter or a linter on the files you touched, one test file, a docs, link or spec check, the typecheck of one package) or minutes (the whole test suite, a build, a dependency install, an end-to-end or full verification). Know a command's class before you run it \u2014 from the project's own scripts and CI configuration, from how long it took last time, or by the class above when you have nothing better. Prove each change with the cheapest check that can prove it, matched to the change's scope and scoped to the changed set \u2014 the tests nearest your change, the touched project's typecheck, the changed files' formatting, never the whole tree: a documentation change gets the documentation checks, one module gets its own tests, a shared type gets the typecheck. Every CI pipeline runs the tests, the types, the formatting and the full verification on your push, so you never run them again: you validate and fix your own change before pushing, at the changed-set scope. Passing the full test suite and the full typecheck is NOT part of your criteria: CI is that gate and the only place they run \u2014 on a shared machine they cost minutes that every other run pays for. As soon as the change exists and those checks pass, commit and push \u2014 the pushed branch is the deliverable, and an unpushed tree does not survive the run's end. Beyond the changed set, use judgement about what this change needs rather than a checklist, fixing forward with further commits and pushes. Never start an operation whose expected duration does not fit the time you have left minus what a commit, a push and the description need: push what there is and say plainly what is unverified instead. At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS} The description's validation names exactly what ran; what did not run is CI's to gate, and you say so.`;
     TOUCHED_TESTS_COMMAND = "`npx vitest run` on the test files you touched, by name,";
     FAST_GATES_BEFORE_PUSH = `THE FAST GATES, before every push \u2014 each scoped to the changed set, never the whole project: ${TOUCHED_TESTS_COMMAND} once (never \`--changed\`, never a directory: on a moving base that is most of the suite), \`tsc --noEmit -p\` the touched tsconfig under \`NODE_OPTIONS=--max-old-space-size=6144\`, \`npx prettier --check\` on the changed files, \`npm run hygiene:check\` and \`npm run specs:check\` \u2014 then your judgement on what else this change needs, not a longer checklist. The full verification is CI's gate \u2014 \`npm run verify\` runs there on your push, never here: push a head early and let CI judge it, fixing forward with further commits and pushes.`;
-    REBASE_BEFORE_PUSH = "REBASE BEFORE EVERY PUSH \u2014 always, not configurable. Immediately before each push: fetch your base branch, rebase your branch onto it, resolve any conflict with the context you already have (the repository's AGENTS.md says how a generated file is regenerated \u2014 regenerate it, never hand-merge it), re-run THE FAST GATES on the rebased tree, and only then push. Every head that reaches review is then current with its base when it lands, and no unit ends merge-ready behind a sibling that merged first.";
+    REBASE_BEFORE_PUSH = "REBASE BEFORE EVERY PUSH \u2014 always, not configurable. Immediately before each push: fetch your base branch, rebase your branch onto it, and resolve any conflict with the context you already have in one bounded model round \u2014 the thread's context and the repository's AGENTS.md (which says how a generated file is regenerated: regenerate it, never hand-merge it). If you cannot resolve it inside that bound, end the round; otherwise re-run THE FAST GATES on the rebased tree, and only then push. Every head that reaches review is then current with its base when it lands, and no unit ends merge-ready behind a sibling that merged first.";
     CODING_SYSTEM = `You are Switchboard's coding agent, operating from a Slack request.
 
 You work inside a dedicated workspace directory with bash, read_file, and write_file tools. ${SANDBOX_TOOLCHAIN}
@@ -3162,6 +3162,9 @@ var init_redact = __esm({
 function severityAtOrAbove(severity, level) {
   return isAddressSeverity(severity) && severityRank(severity) <= severityRank(level);
 }
+function findingsAtOrAbove(findings, level) {
+  return findings.filter((f) => severityAtOrAbove(f.severity, level));
+}
 function resolveAddressSeverity(layers) {
   if (layers.run !== void 0) return { level: layers.run, source: "run" };
   if (layers.user !== void 0) return { level: layers.user, source: "user" };
@@ -3274,7 +3277,7 @@ function findingCounts(findings) {
 }
 function whereCell(f, target) {
   const location = f.line !== void 0 ? `${f.file}:${f.line}` : f.file;
-  const label = `\`${cell(location)}\``;
+  const label = `\`${escapeMarkdownTableCell(location)}\``;
   if (!target || !isRepoPath(f.file)) return label;
   const path = encodeURI(f.file).replace(/#/g, "%23").replace(/\?/g, "%3F");
   const url = `https://github.com/${target.repo}/blob/${target.head}/${path}${f.line !== void 0 ? `#L${f.line}` : ""}`;
@@ -3290,6 +3293,7 @@ function verdictMarker(verdict, target) {
         id: f.id,
         severity: f.severity,
         file: f.file,
+        title: f.title,
         ...f.line !== void 0 ? { line: f.line } : {},
         ...f.humanGated ? { humanGated: true } : {}
       }))
@@ -3311,7 +3315,9 @@ function buildReviewPostBody(answer, verdict, target) {
       [
         "| Severity | Finding | Where |",
         "| --- | --- | --- |",
-        ...findings.map((f) => `| ${f.severity} | **${cell(f.id)}** ${cell(f.title)} | ${whereCell(f, target)} |`)
+        ...findings.map(
+          (f) => `| ${f.severity} | **${escapeMarkdownTableCell(f.id)}** ${escapeMarkdownTableCell(f.title)} | ${whereCell(f, target)} |`
+        )
       ].join("\n")
     );
   }
@@ -3412,7 +3418,7 @@ function redactVerdict(v, redact = redactSecrets) {
 function redactDispositions(dispositions, redact = redactSecrets) {
   return dispositions.map((d) => ({ findingId: d.findingId, disposition: d.disposition, note: redact(d.note) }));
 }
-var FINDING_SEVERITIES, ADDRESS_SEVERITIES, DEFAULT_ADDRESS_SEVERITY, isAddressSeverity, severityRank, LGTM_TOKEN, CHANGES_TOKEN, NO_VERDICT_LINE, cell, isRepoPath, VERDICT_KINDS, DISPOSITION_KINDS, isRecordLike, REVIEW_POST_HEAD;
+var FINDING_SEVERITIES, ADDRESS_SEVERITIES, DEFAULT_ADDRESS_SEVERITY, isAddressSeverity, severityRank, LGTM_TOKEN, CHANGES_TOKEN, NO_VERDICT_LINE, escapeMarkdownTableCell, unescapeMarkdownTableCell, isRepoPath, VERDICT_KINDS, DISPOSITION_KINDS, isRecordLike, REVIEW_POST_HEAD;
 var init_reviewVerdict = __esm({
   "../../src/core/reviewVerdict.ts"() {
     "use strict";
@@ -3427,7 +3433,8 @@ var init_reviewVerdict = __esm({
     LGTM_TOKEN = "LGTM:";
     CHANGES_TOKEN = "Changes requested:";
     NO_VERDICT_LINE = "No verdict submitted \u2014 not approving.";
-    cell = (text) => oneLine2(text).replace(/\|/g, "\\|");
+    escapeMarkdownTableCell = (text) => oneLine2(text).replace(/\\/g, "\\\\").replace(/\|/g, "\\|");
+    unescapeMarkdownTableCell = (text) => text.replace(/\\([\\|])/g, "$1");
     isRepoPath = (file) => /^[^\s`]+$/.test(file) && !/^[a-z][a-z0-9+.-]*:\/\//i.test(file);
     VERDICT_KINDS = ["approve", "request_changes"];
     DISPOSITION_KINDS = ["fixed", "declined"];
@@ -5299,7 +5306,7 @@ function redactHandoff(h, redact = redactSecrets) {
 function line(s) {
   return s.replace(/\s*\n\s*/g, " ");
 }
-function cell2(s) {
+function cell(s) {
   return line(s.replace(/\\/g, "\\\\").replace(/\|/g, "\\|"));
 }
 function entryLines(h) {
@@ -5331,7 +5338,7 @@ function prLink(pr) {
 function renderHandoffLedgerRows(h, ctx) {
   const link = prLink(ctx.pr);
   const source2 = `${ctx.unitId} handoff${link ? ` (${link})` : ""}`;
-  return entryLines(h).map((e) => `| ${cell2(e.row)} | ${cell2(source2)} | open |`).join("\n");
+  return entryLines(h).map((e) => `| ${cell(e.row)} | ${cell(source2)} | open |`).join("\n");
 }
 function renderHandoffComment(h, ctx) {
   if (isEmptyHandoff(h)) return void 0;
@@ -5514,6 +5521,18 @@ function isCoordinatorUnit(v) {
   if (r.startedAt !== void 0 && !isFinite(r.startedAt)) return false;
   return true;
 }
+async function sendUnitNudge(workflow, key) {
+  const instance = key.instanceId;
+  if (!workflow) return { kind: "no-binding", instance };
+  const type = unitNudgeEventType(key);
+  try {
+    const handle2 = await workflow.get(instance);
+    await handle2.sendEvent({ type, payload: {} });
+    return { kind: "sent", instance, type };
+  } catch (err2) {
+    return { kind: "failed", instance, type, reason: err2 instanceof Error ? err2.message : String(err2) };
+  }
+}
 async function sendChecksSettled(workflow, instance, headSha, settledAt) {
   if (!workflow) return { kind: "no-binding", instance };
   const type = checksSettledEventType(headSha);
@@ -5550,12 +5569,13 @@ async function sendChildSignal(workflow, signal2) {
     return { kind: "failed", instance, type, reason: err2 instanceof Error ? err2.message : String(err2) };
   }
 }
-var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isThread, isRoundGate, isUnitIdle, isSegment, isUnitWakeAnswer;
+var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isThread, isRoundGate, isHumanGatePending, isUnitIdle, isSegment, isUnitWakeAnswer;
 var init_contract2 = __esm({
   "../../src/core/coordinator/contract.ts"() {
     "use strict";
     init_budgets();
     init_verbosity();
+    init_reviewVerdict();
     init_coordinator();
     init_handoff();
     COORDINATOR_IDENTITY = "coordinator";
@@ -5591,13 +5611,14 @@ var init_contract2 = __esm({
     isResume = (v) => isObject(v) && isFinite(v.pr) && (v.headSha === void 0 || isText(v.headSha)) && (v.url === void 0 || isText(v.url, 2048));
     isThread = (v) => isObject(v) && isText(v.threadKey) && isOptionalText(v.sourceUrl);
     isRoundGate = (v) => isObject(v) && isAddressSeverity(v.level) && Array.isArray(v.findings) && v.findings.every((f) => typeof f === "string");
-    isUnitIdle = (v) => isObject(v) && isText(v.why, IDLE_WHY_MAX) && isFinite(v.at) && isCount(v.renewalsLeft) && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && isCount(v.wakes);
+    isHumanGatePending = (v) => isObject(v) && isObject(v.pr) && typeof v.pr.number === "number" && Number.isInteger(v.pr.number) && v.pr.number > 0 && isText(v.pr.url) && typeof v.round === "number" && Number.isInteger(v.round) && v.round >= 1 && Array.isArray(v.findings) && v.findings.every((finding) => isFindingShape(finding)) && (v.verdict === "approve" || v.verdict === "request_changes") && (v.reviewRunId === void 0 || isText(v.reviewRunId)) && (v.headSha === void 0 || isText(v.headSha)) && (v.askedAt === void 0 || isFinite(v.askedAt));
+    isUnitIdle = (v) => isObject(v) && isText(v.why, IDLE_WHY_MAX) && isFinite(v.at) && isCount(v.renewalsLeft) && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && (v.humanGate === void 0 || isHumanGatePending(v.humanGate)) && isCount(v.wakes);
     isSegment = (v) => isObject(v) && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 2 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && typeof v.at === "number";
     isUnitWakeAnswer = (v) => {
       if (!isObject(v)) return false;
       if (v.kind === "answered") return typeof v.reply === "string";
       if (v.kind === "stopped" || v.kind === "expired") return true;
-      return v.kind === "segment" && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 1 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && Array.isArray(v.texts) && v.texts.every((text) => typeof text === "string") && Array.isArray(v.senders) && v.senders.every((sender) => isText(sender)) && (v.leaseMs === void 0 || isFinite(v.leaseMs) && v.leaseMs > 0);
+      return v.kind === "segment" && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 1 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && Array.isArray(v.texts) && v.texts.every((text) => typeof text === "string") && Array.isArray(v.senders) && v.senders.every((sender) => isText(sender)) && (v.leaseMs === void 0 || isFinite(v.leaseMs) && v.leaseMs > 0) && (v.humanGate === void 0 || isHumanGatePending(v.humanGate));
     };
   }
 });
@@ -17465,20 +17486,83 @@ async function fetchPullRequestTitleBody(pr) {
   if (!data || typeof data.title !== "string") return void 0;
   return { title: data.title, body: typeof data.body === "string" ? data.body : "" };
 }
-async function fetchPullRequestReviews(pr) {
-  const token2 = await resolveGithubToken().catch(() => null);
-  let res;
+function nextGithubPage(link) {
+  for (const entry of link?.split(",") ?? []) {
+    const target = /<([^>]+)>/.exec(entry)?.[1];
+    const relations = /(?:^|;)\s*rel="([^"]+)"/.exec(entry)?.[1]?.split(/\s+/) ?? [];
+    if (target !== void 0 && relations.includes("next")) return target;
+  }
+  return void 0;
+}
+function isGithubListPage(url, base) {
+  let candidate;
+  let requested;
   try {
-    res = await fetch(`https://api.github.com/repos/${pr.repo}/pulls/${pr.number}/reviews?per_page=100`, {
-      headers: apiHeaders(token2),
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-    });
+    candidate = new URL(url);
+    requested = new URL(base);
   } catch {
-    return void 0;
+    return false;
   }
-  if (!res.ok) return void 0;
-  const rows = await res.json().catch(() => null);
-  if (!Array.isArray(rows)) return void 0;
+  if (candidate.origin !== requested.origin || candidate.username !== "" || candidate.password !== "" || candidate.hash !== "")
+    return false;
+  if (candidate.pathname === requested.pathname) return true;
+  const requestedParts = requested.pathname.split("/").filter(Boolean);
+  const candidateParts = candidate.pathname.split("/").filter(Boolean);
+  const resourcePath = requestedParts.slice(3);
+  return requestedParts.length >= 4 && requestedParts[0] === "repos" && candidateParts.length === resourcePath.length + 2 && candidateParts[0] === "repositories" && /^\d+$/.test(candidateParts[1] ?? "") && candidateParts.slice(2).every((part, index) => part === resourcePath[index]);
+}
+async function fetchGithubListPages(base, token2) {
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set();
+  let url = `${base}?per_page=100`;
+  while (url !== void 0) {
+    if (!isGithubListPage(url, base) || seen.has(url)) return void 0;
+    seen.add(url);
+    let res;
+    try {
+      res = await fetch(url, {
+        headers: apiHeaders(token2),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+      });
+    } catch {
+      return void 0;
+    }
+    if (!res.ok) return void 0;
+    const page2 = await res.json().catch(() => null);
+    if (!Array.isArray(page2)) return void 0;
+    rows.push(...page2);
+    url = nextGithubPage(res.headers.get("link"));
+  }
+  return rows;
+}
+async function fetchPullRequestComments(pr) {
+  const token2 = await resolveGithubToken().catch(() => null);
+  const base = `https://api.github.com/repos/${pr.repo}/issues/${pr.number}/comments`;
+  const rows = await fetchGithubListPages(base, token2);
+  if (rows === void 0) return void 0;
+  return rows.flatMap((raw) => {
+    const row2 = raw;
+    if (typeof row2.id !== "number" || typeof row2.user?.login !== "string" || typeof row2.user.type !== "string" || typeof row2.created_at !== "string" || typeof row2.body !== "string")
+      return [];
+    return [
+      {
+        id: row2.id,
+        author: {
+          login: row2.user.login,
+          ...typeof row2.user.id === "number" ? { id: row2.user.id } : {},
+          type: row2.user.type
+        },
+        createdAt: row2.created_at,
+        body: row2.body
+      }
+    ];
+  });
+}
+async function fetchPullRequestReviews(pr) {
+  const token2 = await resolveGithubToken().catch(() => null);
+  const base = `https://api.github.com/repos/${pr.repo}/pulls/${pr.number}/reviews`;
+  const rows = await fetchGithubListPages(base, token2);
+  if (rows === void 0) return void 0;
   return rows.flatMap((r) => {
     const row2 = r;
     if (typeof row2.state !== "string") return [];
@@ -17492,6 +17576,7 @@ async function fetchPullRequestReviews(pr) {
         } : {},
         state: row2.state,
         ...typeof row2.commit_id === "string" ? { commitId: row2.commit_id } : {},
+        ...typeof row2.submitted_at === "string" ? { submittedAt: row2.submitted_at } : {},
         body: typeof row2.body === "string" ? row2.body : ""
       }
     ];
@@ -19957,11 +20042,11 @@ function resolveRange(daysParam, now = new Date(systemClock())) {
 function buildBillerTieOuts(billers, invoices, cells, range) {
   return billers.map(({ name, invoice }) => {
     const attributed2 = /* @__PURE__ */ new Map();
-    for (const cell4 of cells) {
-      if (cell4.day < range.from || cell4.day > range.to) continue;
-      for (const [ref, m] of Object.entries(cell4.usage.byModel)) {
+    for (const cell3 of cells) {
+      if (cell3.day < range.from || cell3.day > range.to) continue;
+      for (const [ref, m] of Object.entries(cell3.usage.byModel)) {
         if (billerOfRef(ref) !== name) continue;
-        const day2 = attributed2.get(cell4.day) ?? { usd: 0, fee: 0, hasFee: false, unpricedTokens: 0 };
+        const day2 = attributed2.get(cell3.day) ?? { usd: 0, fee: 0, hasFee: false, unpricedTokens: 0 };
         if (typeof m.usd === "number") {
           day2.usd += m.usd;
           if (m.feeUsd !== void 0) {
@@ -19971,7 +20056,7 @@ function buildBillerTieOuts(billers, invoices, cells, range) {
         } else {
           day2.unpricedTokens += m.inputTokens + m.outputTokens + m.cacheReadTokens + m.cacheWriteTokens;
         }
-        attributed2.set(cell4.day, day2);
+        attributed2.set(cell3.day, day2);
       }
     }
     const invoiced = /* @__PURE__ */ new Map();
@@ -35281,7 +35366,7 @@ var init_reply = __esm({
       repo_unverified: (p) => p.via === "github" ? `\u26A0\uFE0F I couldn't verify \`${p.slug}\` against GitHub \u2014 it didn't answer \u2014 so I did not start ${aRun(p.agent)} rather than guess which repository you meant. Try again in a minute.` : `\u26A0\uFE0F I couldn't verify that \`${p.slug}\` is an onboarded repo \u2014 the resident registry didn't answer \u2014 so I did not start a *${p.agent}* run rather than guess which repo you meant. Try again in a minute, or name the repository by URL (https://github.com/${p.slug}) to run in a cold per-thread sandbox.`,
       repo_not_onboarded: (p) => `\u{1F4E6} \`${p.slug}\` is not onboarded as a resident, so I did not start a *${p.agent}* run for it. ${p.onboardHint} for a warm, deps-ready environment, or name the repository by URL (https://github.com/${p.slug}) to run in a cold per-thread sandbox.`,
       repo_access: (p) => `\u{1F6AB} You're not on the allowlist for the \`${p.repo}\` repo environment. Ask ${p.adminsHint} for access.`,
-      which_branch: (p) => `\u{1F33F} Which branch of \`${p.repo}\` should this thread work on? No branch is bound yet \u2014 reply naming one (e.g. "on main" or "on branch fix/login") and I'll pick it up from there.`,
+      which_branch: (p) => `\u{1F33F} Which branch of \`${p.repo}\` should this thread work on? No branch is bound yet; a branch token such as \`branch:main\` will bind it.`,
       ship_thread_live: () => "\u{1F6AB} A pipeline is already running in this thread \u2014 one pipeline per thread. Follow the one in flight here, or start this one in a thread of its own.",
       pipeline_thread_owned: (p) => `\u{1F6A6} This thread belongs to the live *${p.agent}* pipeline runner \u2014 nothing runs beside it here. ` + (p.units.length > 0 ? `Reply in the unit's own thread instead: ${p.units.map((u) => `${u.unit}${u.threadKey !== void 0 ? ` (\`${u.threadKey}\`)` : ""}`).join(", ")}.` : "Reply in the unit's own thread instead."),
       ship_budget: (p) => `\u{1F6AB} Ship cannot start under a ${p.maxMinutes}-minute budget: the loop it allows (${p.maxRounds} review rounds) needs ${p.need} minutes \u2014 ${p.provision} to provision, the coding child's ${p.coding}, and the reserve for the rounds after it at their floors. Widen the budget or the boundary that clipped it, or run \`agent:coding\` for a single pass without the review loop.`
@@ -35307,6 +35392,10 @@ function slugOf(token2) {
   if (!OWNER_RE.test(owner) || !NAME_RE.test(name) || /^\.+$/.test(name)) return void 0;
   return `${owner}/${name}`.toLowerCase();
 }
+function headBranchRef(text) {
+  const match = /^\s*(?:(?:<@[^>\s]+>|[a-z]+:\S+)\s+)*(?:in\s+\S+\s+)?on\s+(?:the\s+)?branch\s+(\S+?)\s*:/i.exec(text);
+  return match ? validRef(stripPunct(match[1])) : void 0;
+}
 function extractSignals(rawText) {
   const text = unwrapSlack(rawText);
   const out = {};
@@ -35315,8 +35404,9 @@ function extractSignals(rawText) {
     const slug = slugOf(`${stripPunct(prUrl3[1])}/${stripPunct(prUrl3[2])}`);
     if (slug) out.pr = { repo: slug, number: Number(prUrl3[3]) };
   }
-  const kw = /(?:^|\s)on\s+(?:the\s+)?branch\s+(\S+)/i.exec(text) ?? /(?:^|\s)branch[:=](\S+)/i.exec(text);
-  if (kw) out.ref = validRef(stripPunct(kw[1]));
+  out.ref = headBranchRef(text);
+  const branchToken = /(?:^|\s)branch:(\S+)/i.exec(text);
+  if (!out.ref && branchToken) out.ref = validRef(stripPunct(branchToken[1]));
   const treeUrl = /https?:\/\/(?:www\.)?github\.com\/([^/\s]+)\/([^/\s#?]+)\/tree\/([^\s?#]+)/i.exec(text);
   if (treeUrl) {
     const slug = slugOf(`${stripPunct(treeUrl[1])}/${stripPunct(treeUrl[2])}`);
@@ -35360,9 +35450,7 @@ function extractSignals(rawText) {
         out.addressed = { name: t.toLowerCase() };
     }
     if (prev === "on") {
-      if (!out.ref && WELL_KNOWN_REFS.has(t)) out.ref = t;
-      else if (!out.onSlug && slugOf(t) && validRef(t)) out.onSlug = t;
-      else if (!out.ref && t.includes("/") && !slugOf(t)) out.ref = validRef(t);
+      if (!out.onSlug && slugOf(t) && validRef(t)) out.onSlug = t;
       continue;
     }
     const prShort = /^([^/#\s]+)\/([^/#\s]+)#(\d+)$/.exec(t);
@@ -35465,13 +35553,9 @@ async function resolveRepoContext(msg, history = [], probe, residentSlugs, recor
   if (!repo && s.repo && await vet(s.repo)) repo = s.repo;
   let ref = s.ref;
   let refFromPr = false;
-  if (s.onSlug) {
-    if (repo && !ref) {
-      if (slugOf(s.onSlug) !== repo) ref = s.onSlug;
-    } else if (!repo) {
-      const cand = slugOf(s.onSlug);
-      if (cand && await vet(cand)) repo = cand;
-    }
+  if (s.onSlug && !repo) {
+    const cand = slugOf(s.onSlug);
+    if (cand && await vet(cand)) repo = cand;
   }
   if (repo) {
     rejected = void 0;
@@ -35688,7 +35772,7 @@ function prFacts(title, body) {
   if (last >= 55296 && last <= 56319) end--;
   return { title, body: body.slice(0, end), truncated: true };
 }
-var PR_BODY_CAP, OWNER_RE, NAME_RE, WELL_KNOWN_REFS, DETERMINERS, CODE_SPAN, threadSignalsCache, COMPARE_FILES_CAP;
+var PR_BODY_CAP, OWNER_RE, NAME_RE, DETERMINERS, CODE_SPAN, threadSignalsCache, COMPARE_FILES_CAP;
 var init_repoContext = __esm({
   "../../src/core/repoContext.ts"() {
     "use strict";
@@ -35699,7 +35783,6 @@ var init_repoContext = __esm({
     PR_BODY_CAP = 65536;
     OWNER_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
     NAME_RE = /^[A-Za-z0-9._-]{1,100}$/;
-    WELL_KNOWN_REFS = /* @__PURE__ */ new Set(["main", "master", "develop", "trunk"]);
     DETERMINERS = /* @__PURE__ */ new Set(["the", "a", "an", "our", "my", "this"]);
     CODE_SPAN = /```[\s\S]*?```|`[^`\n]*`/g;
     threadSignalsCache = /* @__PURE__ */ new WeakMap();
@@ -40661,8 +40744,8 @@ async function executeOperatorDecision(deps, ctx) {
         await recordOperatorDecision(deps, msg, event, ctx.ending, ctx.trace);
         return answered;
       }
-      const cell4 = decideExecution({ kind: "run_command", confirm: "at_or_above", mintable: false }, surface);
-      const text = cell4.cell === "refuse" && cell4.names === "typed_form" ? renderHandBackLine(bind.line) : mint !== void 0 && mint.kind === "unshowable" ? UNSHOWABLE_LINE : STORE_UNREACHABLE_LINE;
+      const cell3 = decideExecution({ kind: "run_command", confirm: "at_or_above", mintable: false }, surface);
+      const text = cell3.cell === "refuse" && cell3.names === "typed_form" ? renderHandBackLine(bind.line) : mint !== void 0 && mint.kind === "unshowable" ? UNSHOWABLE_LINE : STORE_UNREACHABLE_LINE;
       await io.reply(`${verbose ? `${receipt}
 ` : ""}${text}`);
       await recordOperatorDecision(deps, msg, event, ctx.ending, ctx.trace);
@@ -44108,7 +44191,7 @@ function encodeGithubPathSegments(path) {
 function anchorUrl(ctx, a) {
   return `https://github.com/${ctx.repo}/blob/${ctx.headSha}/${encodeGithubPathSegments(a.path)}#L${a.from}-L${a.to}`;
 }
-function cell3(s) {
+function cell2(s) {
   return s.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\s*\n\s*/g, " ");
 }
 function linkLabel(s) {
@@ -44146,7 +44229,7 @@ function renderPrDescriptionMarkdown(desc, ctx) {
     ...details(FOLD_SUMMARIES.validation(desc.validation.criteria.length), [
       "| Criterion | Proof |",
       "|---|---|",
-      ...desc.validation.criteria.map((c) => `| ${cell3(c.criterion)} | ${cell3(c.proof)} |`)
+      ...desc.validation.criteria.map((c) => `| ${cell2(c.criterion)} | ${cell2(c.proof)} |`)
     ])
   );
   const agentLines = [
@@ -50645,6 +50728,11 @@ async function salvageBudgetPush(executor, opts, span) {
     nothing: `the coding child ended with nothing to preserve: the tree is clean and \`${opts.branch}\` holds no unpushed commits`,
     pushedLead: "the coding child ended with interrupted work",
     failedLead: `the interrupted-work push to \`${opts.branch}\` failed`
+  } : opts.cue === "completion" ? {
+    commit: "wip: preserve unfinished coding work \u2014 work in progress, not reviewed",
+    nothing: `the coding child ended with nothing to preserve: the tree is clean and \`${opts.branch}\` holds no unpushed commits`,
+    pushedLead: "the coding child ended with unfinished work",
+    failedLead: `the unfinished-work push to \`${opts.branch}\` failed`
   } : {
     commit: "wip: committed at the budget wind-down \u2014 work in progress, not reviewed",
     nothing: nothingToSalvageNote(opts.branch),
@@ -50653,7 +50741,7 @@ async function salvageBudgetPush(executor, opts, span) {
   };
   try {
     const dirty = (await run2("git status --porcelain")).trim() !== "";
-    const endingCheckpoint = opts.cue !== "compaction";
+    const endingCheckpoint = opts.cue !== "compaction" && opts.cue !== "completion";
     if (dirty) {
       await run2("git add -A");
       await run2(`git commit -m ${shellQuote(words.commit)}`);
@@ -51618,8 +51706,6 @@ async function runLoop(deps, ctx) {
   const preserveCodingChildWork = async (cue) => {
     if (workSalvageAttempted || !isCodingPrRun || coordinator === void 0) return;
     if (!workspaceObserved) await observeWorkspaceNow();
-    workSalvageAttempted = true;
-    if (cue === "ending") endingSalvageAttempted = true;
     const target = salvageTargetOf({
       pushedBranch: pushes.branch(),
       checkedOut: observedCheckedOut,
@@ -51629,6 +51715,10 @@ async function runLoop(deps, ctx) {
       cue === "budget" ? "run.budget_salvage" : "run.work_salvage",
       (span) => salvageBudgetPush(executor, { branch: target.branch, cue }, span)
     );
+    const cleanCompletion = cue === "completion" && !salvaged.pushed && (/ended with nothing to preserve/i.test(salvaged.summary) || "skipped" in target && (observedUncommitted ?? 0) === 0 && (observedUnpushed ?? 0) === 0);
+    if (cleanCompletion) return;
+    workSalvageAttempted = true;
+    if (cue === "ending" || cue === "completion") endingSalvageAttempted = true;
     onEvent({
       type: "run_note",
       kind: cue === "budget" ? "budget_salvage" : "work_salvage",
@@ -52068,6 +52158,7 @@ async function runLoop(deps, ctx) {
     if (endingNeedsPreservation && run2.control.requested === "hard") await endHarness();
     if (isCodingPrRun && !tailSkipped()) await observeWorkspaceNow();
     if (endingNeedsPreservation) await preserveCodingChildWork(budgetEnded ? "budget" : "ending");
+    else if (isCodingPrRun && coordinator !== void 0 && !tailSkipped()) await preserveCodingChildWork("completion");
     let descriptionTurnRan = false;
     if (isCodingPrRun && !tailSkipped() && !endingSalvageAttempted && prDescription === void 0) {
       const turnTarget = await descriptionTurnTarget({
@@ -52103,6 +52194,7 @@ async function runLoop(deps, ctx) {
         if (!run2.control.hardSignal.aborted) await observeWorkspaceNow();
       }
     }
+    if (descriptionTurnRan) await preserveCodingChildWork("completion");
     await endHarness();
     const leftBehind = isCodingPrRun && !tailSkipped() && !workSalvageAttempted ? workLeftBehindOf({ uncommittedChanges: observedUncommitted, unpushedCommits: observedUnpushed }) : void 0;
     const endingFacts = () => {
@@ -52448,14 +52540,6 @@ function shipUnitText(requestText, repo) {
   t = t.replace(new RegExp(`^\\s*in\\s+${escapeRegExp3(repo)}\\s*:?`, "i"), " ");
   return t.replace(/\s+/g, " ").trim();
 }
-function refNamedExplicitly(requestText, ref) {
-  const text = requestText.replace(SLACK_LINK, " $1 ");
-  const strip = (s) => s.replace(/^[("'`<[{*]+/, "").replace(/[)"'`>\]}.,;:!?*]+$/, "");
-  const kw = /(?:^|\s)on\s+(?:the\s+)?branch\s+(\S+)/i.exec(text) ?? /(?:^|\s)branch[:=](\S+)/i.exec(text);
-  if (kw && strip(kw[1]) === ref) return true;
-  const treeUrl = /https?:\/\/(?:www\.)?github\.com\/[^/\s]+\/[^/\s#?]+\/tree\/([^\s?#]+)/i.exec(text);
-  return treeUrl !== void 0 && treeUrl !== null && strip(treeUrl[1]) === ref;
-}
 function noRepoGuess(input) {
   const candidates = input.repoCandidates ?? [];
   if (candidates.length === 0) return void 0;
@@ -52549,18 +52633,9 @@ async function shipPreflight(input) {
           );
         }
         const ownBase = facts2.baseRef ?? repoCtx.baseRef;
-        if (ownBase !== void 0 && input.refExists) {
-          const exists = await input.refExists(repo, ownBase).catch(() => void 0);
-          if (exists === false) {
-            return refuse2(
-              "ship_preflight_base_missing",
-              "base ref missing",
-              "not started (base ref missing)",
-              `\u{1F6AB} ${where}'s base branch \`${ownBase}\` does not exist on \`${repo}\` \u2014 refusing fail-closed. Retarget the pull request at an existing branch first.`
-            );
-          }
-        }
-        const base = resolveBaseRef([ownBase], info?.defaultBranch);
+        const ownBaseExists = ownBase !== void 0 && input.refExists ? await input.refExists(repo, ownBase).catch(() => void 0) : void 0;
+        const baseFallback = ownBase !== void 0 && ownBaseExists === false ? { requested: ownBase } : void 0;
+        const base = resolveBaseRef([ownBaseExists === false ? void 0 : ownBase], info?.defaultBranch);
         const autoMerge = facts2.autoMergeEnabled !== void 0 ? { autoMergeEnabled: facts2.autoMergeEnabled } : {};
         if (task) {
           return {
@@ -52570,6 +52645,7 @@ async function shipPreflight(input) {
               branch: branch2,
               base,
               adopt: { pr: repoCtx.pr, ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {} },
+              ...baseFallback !== void 0 ? { baseFallback } : {},
               ...autoMerge
             }
           };
@@ -52585,6 +52661,7 @@ async function shipPreflight(input) {
               headSha: facts2.headSha ?? repoCtx.headSha,
               ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {}
             },
+            ...baseFallback !== void 0 ? { baseFallback } : {},
             ...autoMerge
           }
         };
@@ -52610,20 +52687,11 @@ async function shipPreflight(input) {
   const ref = repoCtx.ref && !repoCtx.refFromPr && !isUnitBranch(repoCtx.ref) && repoCtx.ref.toLowerCase() !== repo.toLowerCase() ? repoCtx.ref : void 0;
   if (ref !== void 0 && input.refExists) {
     const exists = await input.refExists(repo, ref).catch(() => void 0);
-    if (exists === false) {
-      if (refNamedExplicitly(input.requestText, ref)) {
-        return refuse2(
-          "ship_preflight_base_missing",
-          "base ref missing",
-          "not started (base ref missing)",
-          `\u{1F6AB} The branch \`${ref}\` does not exist on \`${repo}\` \u2014 nothing was started. Name an existing branch, or drop it to run on the default branch.`
-        );
-      }
+    if (exists === false)
       return {
         ok: true,
         entry: { repo, base: info?.defaultBranch, baseFallback: { requested: ref } }
       };
-    }
   }
   return {
     ok: true,
@@ -54063,7 +54131,7 @@ async function answerUnitOwnedThread(deps, ctx) {
     ...msg.userName !== void 0 ? { senderName: msg.userName } : {},
     text: ctx.text,
     ...attachments.length > 0 ? { attachments } : {},
-    mode: "steer",
+    mode: owner.unit.idle !== void 0 ? "wake" : "steer",
     at
   }).catch((err2) => {
     console.warn(
@@ -54361,7 +54429,7 @@ async function dispatch(deps, msg, io, opts = {}) {
         ({ sticky, resolved, agentSource } = settled);
         agentSource = "sticky";
       }
-      if (owner.kind === "unit" && directives.agent === void 0) {
+      if (owner.kind === "unit" && (directives.agent === void 0 || owner.unit.idle?.humanGate !== void 0)) {
         if ((await authorizeAgent(deps, { msg, io, refuse: refuse3, agentName: "coding" })).kind === "refused") {
           await recordPendingOperator();
           return ended;
@@ -68876,14 +68944,14 @@ var init_resumeLaunch = __esm({
 });
 
 // ../../src/core/runnerOwnership.ts
-async function recoverRunnerOwnedPulls(instanceIds, instances) {
-  const owned = /* @__PURE__ */ new Set();
+async function recoverRunnerOwnedPullOwners(instanceIds, instances) {
+  const owned = /* @__PURE__ */ new Map();
   for (const instanceId of new Set(instanceIds)) {
     const instance = await instances.get(instanceId);
     if (instance === null) continue;
     for (const unit of await instances.listUnits(instanceId)) {
       if (unit.pr !== void 0 && unit.ending === void 0)
-        owned.add(runnerOwnedPullKey(instance.repo, unit.pr.number));
+        owned.set(runnerOwnedPullKey(instance.repo, unit.pr.number), { instanceId, unit: unit.unit });
     }
   }
   return owned;
@@ -68896,24 +68964,35 @@ var init_runnerOwnership = __esm({
     RunnerOwnershipFence = class {
       claimed = /* @__PURE__ */ new Set();
       recovered = /* @__PURE__ */ new Set();
+      claimedOwners = /* @__PURE__ */ new Map();
+      recoveredOwners = /* @__PURE__ */ new Map();
       localRecoveredInstances = /* @__PURE__ */ new Set();
       recoveryComplete;
       constructor(requiresRecovery) {
         this.recoveryComplete = !requiresRecovery;
       }
-      claim(repo, prNumber) {
-        this.claimed.add(runnerOwnedPullKey(repo, prNumber));
+      claim(repo, prNumber, owner) {
+        const key = runnerOwnedPullKey(repo, prNumber);
+        this.claimed.add(key);
+        if (owner !== void 0) this.claimedOwners.set(key, owner);
       }
       release(repo, prNumber) {
         const key = runnerOwnedPullKey(repo, prNumber);
         this.claimed.delete(key);
         this.recovered.delete(key);
+        this.claimedOwners.delete(key);
+        this.recoveredOwners.delete(key);
       }
       owns(repo, prNumber) {
         if (!this.recoveryComplete) throw new Error("runner ownership recovery is still in progress");
         const key = runnerOwnedPullKey(repo, prNumber);
         return this.claimed.has(key) || this.recovered.has(key);
       }
+      owner(repo, prNumber) {
+        if (!this.recoveryComplete) throw new Error("runner ownership recovery is still in progress");
+        const key = runnerOwnedPullKey(repo, prNumber);
+        return this.claimedOwners.get(key) ?? this.recoveredOwners.get(key);
+      }
       async recover(outcome, instances) {
         for (const run2 of outcome.resumable) {
           if (run2.kind === "rehost" && run2.hosting !== void 0) this.localRecoveredInstances.add(run2.hosting.instanceId);
@@ -68925,9 +69004,13 @@ var init_runnerOwnership = __esm({
         for (const run2 of outcome.liveElsewhere) {
           if (run2.hosting !== void 0) activeRunnerInstances.add(run2.hosting.instanceId);
         }
-        const recovered = await recoverRunnerOwnedPulls(activeRunnerInstances, instances);
+        const recovered = await recoverRunnerOwnedPullOwners(activeRunnerInstances, instances);
         this.recovered.clear();
-        for (const key of recovered) this.recovered.add(key);
+        this.recoveredOwners.clear();
+        for (const [key, owner] of recovered) {
+          this.recovered.add(key);
+          this.recoveredOwners.set(key, owner);
+        }
         this.recoveryComplete = true;
       }
     };
@@ -69400,10 +69483,14 @@ ${cont.texts.join("\n\n")}`);
 }
 function findingsRequest(input) {
   const findings = input.findings.map(formatFinding).join("\n") || "(the review listed no structured findings, address its prose)";
+  const answers = input.answers !== void 0 && input.answers.length > 0 ? `
+
+A person answered the human-gated finding. Treat the finding and this answer together as the fix brief:
+${input.answers.join("\n\n")}` : "";
   return `The review of ${input.where} requested changes. Load the \`address-review-findings\` skill and address every finding below, nits included: record one disposition per finding with submit_dispositions (fixed or declined, with a note), squash to coherent commits, resubmit the pull request description with submit_pr_description, and push the branch. Never merge and never approve.
 
 Findings:
-${findings}
+${findings}${answers}
 
 Review:
 ${input.review}`;
@@ -69422,7 +69509,8 @@ ${task}` : task;
     case "review": {
       let prior;
       if (brief.prior !== void 0) {
-        const findings = [...(await facts(readers, brief.prior.reviewRunId)).findings ?? [], ...brief.checks ?? []];
+        const reviewFindings = brief.prior.findings ?? (brief.prior.reviewRunId !== void 0 ? (await facts(readers, brief.prior.reviewRunId)).findings ?? [] : []);
+        const findings = [...reviewFindings, ...brief.checks ?? []];
         const recorded = brief.prior.codingRunId !== void 0 ? (await facts(readers, brief.prior.codingRunId)).dispositions ?? [] : [];
         const { matched, dropped } = matchDispositions(findings, recorded);
         prior = { findings, dispositions: matched, dropped };
@@ -69440,13 +69528,14 @@ ${task}` : task;
 ${turn}`, contract };
     }
     case "findings": {
-      const review = await facts(readers, brief.reviewRunId);
+      const review = brief.reviewRunId !== void 0 ? brief.findings !== void 0 ? await readers.readRunFacts(brief.reviewRunId) ?? {} : await facts(readers, brief.reviewRunId) : {};
       return {
         preset: "coding",
         prompt: findingsRequest({
           where,
-          findings: [...review.findings ?? [], ...brief.checks ?? []],
-          review: review.finalReply ?? ""
+          findings: [...brief.findings ?? review.findings ?? [], ...brief.checks ?? []],
+          review: review.finalReply ?? "",
+          ...brief.answers !== void 0 ? { answers: brief.answers } : {}
         }),
         ref: unit.branch
       };
@@ -69920,6 +70009,10 @@ ${foldThreadEvents(folded)}` };
     at
   });
 }
+function reviewAskedAtOf(events) {
+  const posted = [...events ?? []].reverse().find((event) => event.type === "review_posted");
+  return posted?.type === "review_posted" && typeof posted.at === "number" ? posted.at : void 0;
+}
 function finalReplyOf2(events) {
   const last = [...events ?? []].reverse().find((e) => e.type === "answer");
   return last && last.type === "answer" ? last.text : void 0;
@@ -69954,6 +70047,74 @@ async function reviewPostedAt(deps, pr, verdict, head) {
     (r) => r.author?.login === self.login && (r.author.id === void 0 || r.author.id === self.id) && r.commitId !== void 0 && sameCommit(r.commitId.toLowerCase(), head) && r.body.startsWith(token2)
   );
 }
+function legacyPostedFinding(value, body) {
+  if (isFindingShape(value)) return value;
+  if (typeof value !== "object" || value === null) return void 0;
+  const row2 = value;
+  if (row2.title !== void 0 || typeof row2.id !== "string" || typeof row2.severity !== "string") return void 0;
+  const prefix = `| ${row2.severity} | **${escapeMarkdownTableCell(row2.id)}** `;
+  const header4 = "| Severity | Finding | Where |\n| --- | --- | --- |\n";
+  const tableStart = body.indexOf(header4);
+  if (tableStart < 0) return void 0;
+  const table = body.slice(tableStart + header4.length).split("\n\n", 1)[0];
+  const titles = table.split("\n").filter((line4) => line4.startsWith(prefix)).flatMap((line4) => {
+    const tail = line4.slice(prefix.length);
+    const boundary = tail.lastIndexOf(" | ");
+    return boundary > 0 ? [unescapeMarkdownTableCell(tail.slice(0, boundary)).trim()] : [];
+  }).filter(Boolean);
+  if (titles.length !== 1) return void 0;
+  const recovered = { ...row2, title: titles[0] };
+  return isFindingShape(recovered) ? recovered : void 0;
+}
+async function postedHumanGateAnswer(deps, pr, requester, addressSeverity) {
+  if (deps.fetchPrComments === void 0) return void 0;
+  const [reviews, comments, self] = await Promise.all([
+    deps.fetchPrReviews(pr).catch(() => void 0),
+    deps.fetchPrComments(pr).catch(() => void 0),
+    deps.selfIdentity().catch(() => void 0)
+  ]);
+  if (reviews === void 0 || comments === void 0 || self === void 0) return void 0;
+  const own = reviews.filter(
+    (review) => review.author?.login === self.login && (review.author.id === void 0 || review.author.id === self.id) && review.submittedAt !== void 0 && Number.isFinite(Date.parse(review.submittedAt))
+  ).sort((a, b) => Date.parse(a.submittedAt) - Date.parse(b.submittedAt)).at(-1);
+  if (own === void 0) return void 0;
+  const marker = /<!-- switchboard:verdict (\{[^\n]*\}) -->/.exec(own.body);
+  if (marker === null) return void 0;
+  let payload;
+  try {
+    payload = JSON.parse(marker[1]);
+  } catch {
+    return void 0;
+  }
+  if (typeof payload !== "object" || payload === null) return void 0;
+  const row2 = payload;
+  if (row2.verdict !== "approve" && row2.verdict !== "request_changes") return void 0;
+  if (!Array.isArray(row2.findings)) return void 0;
+  const postedFindings = row2.findings.map((finding) => legacyPostedFinding(finding, own.body));
+  if (!postedFindings.every((finding) => finding !== void 0)) return void 0;
+  const findings = row2.verdict === "approve" ? findingsAtOrAbove(postedFindings, addressSeverity) : postedFindings;
+  if (findings.length === 0 || !findings.every((finding) => finding.humanGated === true)) return void 0;
+  const candidates = comments.filter(
+    (comment) => comment.author.type === "User" && comment.body.trim() !== "" && Number.isFinite(Date.parse(comment.createdAt)) && Date.parse(comment.createdAt) >= githubSecondStart(Date.parse(own.submittedAt))
+  ).sort((a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt));
+  let answer;
+  for (const candidate of candidates) {
+    const authorized = await deps.commenterAuthorized(requester, candidate.author).catch(() => false);
+    if (authorized) {
+      answer = candidate;
+      break;
+    }
+  }
+  if (answer === void 0) return void 0;
+  return {
+    round: 1,
+    findings,
+    verdict: row2.verdict,
+    answer: answer.body.trim(),
+    author: answer.author.login,
+    commentId: String(answer.id)
+  };
+}
 async function reviewPostedAtPatiently(deps, pr, verdict, head) {
   const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
   let answer;
@@ -69986,6 +70147,7 @@ async function readRecord(body, deps) {
   const full = await deps.runs.getRun(body.runId, { include: "messages" });
   const record2 = full.ok ? full.value : view;
   const finalReply = finalReplyOf2(record2.events);
+  const reviewAskedAt = reviewAskedAtOf(record2.events);
   const pr = prOpenedOf(record2.events);
   const instanceRow = await deps.instances.get(id.value);
   if (view.status === "interrupted") {
@@ -70027,6 +70189,7 @@ async function readRecord(body, deps) {
       ...pr !== void 0 ? { pr } : {},
       ...record2.verdict !== void 0 ? { verdict: record2.verdict } : {},
       ...record2.reviewHead !== void 0 ? { reviewHead: record2.reviewHead } : {},
+      ...reviewAskedAt !== void 0 ? { reviewAskedAt } : {},
       ...posted !== void 0 ? { reviewPosted: posted.reviewPosted } : {},
       ...posted?.reviewPostReason !== void 0 ? { reviewPostReason: posted.reviewPostReason } : {},
       ...record2.dispositions !== void 0 ? { dispositions: record2.dispositions } : {},
@@ -70172,11 +70335,20 @@ async function prCheck(body, deps) {
     const open2 = await deps.findOpenPrByHead(instance.repo, branch2);
     if (open2) {
       await remember({ number: open2.number, url: open2.htmlUrl });
-      deps.runnerOwnership?.claim(instance.repo, open2.number);
+      deps.runnerOwnership?.claim(instance.repo, open2.number, {
+        instanceId: instance.id,
+        unit: unit.row?.unit ?? body.unit
+      });
       const entryFacts = entry ? await deps.fetchPrFacts({ repo: instance.repo, number: open2.number }).catch(() => void 0) : void 0;
       const branchHead = entryFacts?.headSha;
       const entryHead = branchHead ?? open2.headSha;
       const approved = entry && entryHead !== void 0 ? await reviewPostedAt(deps, { repo: instance.repo, number: open2.number }, "approve", entryHead) : void 0;
+      const humanGate = entry ? await postedHumanGateAnswer(
+        deps,
+        { repo: instance.repo, number: open2.number },
+        instance.userId,
+        instance.addressSeverity ?? DEFAULT_ADDRESS_SEVERITY
+      ) : void 0;
       const entryChecks = entry && entryHead !== void 0 ? await deps.fetchCommitChecks(instance.repo, entryHead).catch(() => void 0) : void 0;
       const checks = body.checks === true && open2.headSha !== void 0 ? await deps.fetchCommitChecks(instance.repo, open2.headSha).catch(() => void 0) : entryChecks;
       const prRef = { repo: instance.repo, number: open2.number };
@@ -70192,6 +70364,7 @@ async function prCheck(body, deps) {
         ...open2.headSha !== void 0 ? { headSha: open2.headSha } : {},
         ...branchHead !== void 0 ? { branchHead } : {},
         ...approved !== void 0 ? { approved } : {},
+        ...humanGate !== void 0 ? { humanGate } : {},
         // The pull request's own auto-merge fact (agent-ship item 9), so a
         // merge_ready ending can name it at the approved head.
         ...open2.autoMergeEnabled !== void 0 ? { autoMergeEnabled: open2.autoMergeEnabled } : {},
@@ -70551,6 +70724,7 @@ function parseIdle(ending, runId3, at) {
     ...typeof runId3 === "string" && RUN_ID_PATTERN.test(runId3) ? { runId: runId3 } : {},
     spendUsd: typeof ending.spendUsd === "number" && Number.isFinite(ending.spendUsd) ? ending.spendUsd : null,
     ...isHandoffShape(ending.handoff) ? { handoff: ending.handoff } : {},
+    ...isHumanGatePending(ending.humanGate) ? { humanGate: ending.humanGate } : {},
     wakes: 0
   };
 }
@@ -70590,20 +70764,37 @@ async function unitWake(body, deps) {
   }
   const events = await deps.instances.listEvents({ instanceId: instance.id, unit: row2.unit }, true);
   const idle = row2.idle;
+  const askedAt = idle.humanGate?.askedAt;
+  const wakeEvents = askedAt !== void 0 ? events.filter(
+    (event) => event.id?.startsWith("github:issue-comment:") ? event.at >= githubSecondStart(askedAt) : event.at > askedAt
+  ) : events;
   const senderOf = (e) => e.senderName ?? e.sender;
-  const senders = [...new Set(events.map(senderOf))];
-  const requesterWoke = events.some((event) => event.sender === instance.userId);
-  const stopperWoke = events.some((event) => event.mode === "interrupt");
+  const senders = [...new Set(wakeEvents.map(senderOf))];
+  const requesterWoke = wakeEvents.some((event) => event.sender === instance.userId);
+  const stopperWoke = wakeEvents.some((event) => event.mode === "interrupt");
   const grantFact = deps.shipGrantFor?.(instance) ?? {
     grant: instance.grant ?? DEFAULT_GRANT,
     source: instance.grantSource ?? "org"
   };
   const renewalsSpent = row2.segments?.length ?? 0;
   let answer;
-  if (events.length === 0) {
+  if (wakeEvents.length === 0) {
     answer = { kind: "answered", reply: "Nothing new was waiting for this unit." };
   } else if (idle.wakes + 1 >= IDLE_WAKES_MAX) {
     answer = { kind: "expired" };
+  } else if (idle.humanGate !== void 0) {
+    answer = {
+      kind: "segment",
+      index: row2.segments?.at(-1)?.index ?? 1,
+      ...idle.from !== void 0 ? { from: idle.from } : {},
+      ...idle.runId !== void 0 ? { runId: idle.runId } : {},
+      spendUsd: idle.spendUsd,
+      ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
+      texts: wakeEvents.map(attributedText),
+      senders,
+      leaseMs: minutesToMs(instance.caps?.maxMinutes ?? resolveShipCaps(void 0).maxMinutes),
+      humanGate: idle.humanGate
+    };
   } else {
     const segmentStart = row2.segments?.at(-1)?.at ?? row2.startedAt ?? idle.at;
     const leaseMs = Math.max(
@@ -70618,7 +70809,7 @@ async function unitWake(body, deps) {
         ...idle.runId !== void 0 ? { runId: idle.runId } : {},
         spendUsd: idle.spendUsd,
         ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
-        texts: events.map(attributedText),
+        texts: wakeEvents.map(attributedText),
         senders,
         leaseMs
       };
@@ -70643,7 +70834,7 @@ async function unitWake(body, deps) {
           ...idle.runId !== void 0 ? { runId: idle.runId } : {},
           spendUsd: idle.spendUsd,
           ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
-          texts: events.map(attributedText),
+          texts: wakeEvents.map(attributedText),
           senders
         };
       } else {
@@ -70654,7 +70845,7 @@ async function unitWake(body, deps) {
       }
     }
   }
-  const countedIdle = events.length > 0 ? { ...idle, wakes: idle.wakes + 1 } : idle;
+  const countedIdle = wakeEvents.length > 0 ? { ...idle, wakes: idle.wakes + 1 } : idle;
   const segments2 = row2.segments ?? [];
   const updated = {
     ...row2,
@@ -70837,12 +71028,14 @@ ${rendered}` : "");
       )
     );
   }
-  if (ending.kind === "held" && updated.pr !== void 0) {
-    await deps.github.commentIssue(instance.repo, updated.pr.number, `**Plan runner \u2014 ${row2.unit} held**
+  const parkedHumanGate = ending.kind === "idle" && idle?.humanGate !== void 0;
+  if ((ending.kind === "held" || parkedHumanGate) && updated.pr !== void 0) {
+    const state = parkedHumanGate ? "waiting for a person" : "held";
+    await deps.github.commentIssue(instance.repo, updated.pr.number, `**Plan runner \u2014 ${row2.unit} ${state}**
 
 ${ending.report}`).catch(
       (err2) => (deps.log ?? console.warn)(
-        `[coordinator] ${instance.id} ${row2.unit}: the held report could not be posted on the pull request: ${describe11(err2)}`
+        `[coordinator] ${instance.id} ${row2.unit}: the human-gated report could not be posted on the pull request: ${describe11(err2)}`
       )
     );
   }
@@ -70877,7 +71070,10 @@ async function rebaseStep(body, deps) {
   if (!row2) return json3(404, { ok: false, error: "unknown_unit", at });
   if (row2.pr?.number !== void 0 && row2.pr.number !== body.prNumber)
     return json3(409, { ok: false, error: "pull_request_moved", at });
-  deps.runnerOwnership?.claim(instance.repo, body.prNumber);
+  deps.runnerOwnership?.claim(instance.repo, body.prNumber, {
+    instanceId: instance.id,
+    unit: row2.unit
+  });
   if (deps.runnerRebase === void 0)
     return json3(200, { ok: true, outcome: "refused", reason: "the runner's rebase resolver is unavailable", at });
   try {
@@ -71324,7 +71520,7 @@ function createAdminCoordinatorHandler(deps) {
     })();
   };
 }
-var COORDINATOR_ADMIN_PREFIX, MAX_SPAWN_PROMPT_CHARS, FINISHED_LOOKBACK_PAGES, MAX_ADMIN_BODY_BYTES, UNIT_ID, PRESETS_OF_KIND, invalid, json3, describe11, isGenerated2, EVERY_RUN, REVIEW_POSTED_CHECKS, REVIEW_POSTED_RECHECK_MS, ROUND_OUTCOMES, ENDING_ICON, STEPS;
+var COORDINATOR_ADMIN_PREFIX, MAX_SPAWN_PROMPT_CHARS, FINISHED_LOOKBACK_PAGES, MAX_ADMIN_BODY_BYTES, UNIT_ID, PRESETS_OF_KIND, invalid, json3, describe11, isGenerated2, EVERY_RUN, REVIEW_POSTED_CHECKS, REVIEW_POSTED_RECHECK_MS, githubSecondStart, ROUND_OUTCOMES, ENDING_ICON, STEPS;
 var init_adminCoordinator = __esm({
   "../../src/channels/adminCoordinator.ts"() {
     "use strict";
@@ -71376,6 +71572,7 @@ var init_adminCoordinator = __esm({
     EVERY_RUN = { kind: "all" };
     REVIEW_POSTED_CHECKS = 3;
     REVIEW_POSTED_RECHECK_MS = 2e3;
+    githubSecondStart = (at) => Math.floor(at / SECOND_MS) * SECOND_MS;
     ROUND_OUTCOMES = [
       "started",
       "pr_opened",
@@ -71479,6 +71676,56 @@ async function handleCheckRunIntake(headers, rawBody, deps) {
     body: { ok: true, settled: true, sent: sends.filter((s) => s.kind === "sent").length, of: instances.length }
   };
 }
+async function handleIssueCommentIntake(headers, rawBody, deps) {
+  if (deps.secret === void 0 || deps.secret === "") return { status: 503, body: { error: "disabled" } };
+  if (headers.signature === void 0 || !await verifyWebhookSignature(deps.secret, rawBody, headers.signature))
+    return { status: 401, body: { error: "unauthorized" } };
+  if (headers.event !== "issue_comment") return { status: 200, body: { ok: true, ignored: "event" } };
+  let payload;
+  try {
+    payload = JSON.parse(rawBody);
+  } catch {
+    return { status: 400, body: { error: "invalid_json" } };
+  }
+  if (typeof payload !== "object" || payload === null) return { status: 400, body: { error: "invalid_body" } };
+  const p = payload;
+  if (p.action !== "created") return { status: 200, body: { ok: true, ignored: "action" } };
+  if (p.issue?.pull_request === void 0) return { status: 200, body: { ok: true, ignored: "issue" } };
+  const repo = p.repository?.full_name;
+  const prNumber = p.issue.number;
+  const comment = p.comment;
+  if (typeof repo !== "string" || repo === "" || typeof prNumber !== "number" || !Number.isInteger(prNumber) || typeof comment?.id !== "number" || typeof comment.body !== "string" || typeof comment.created_at !== "string" || typeof comment.user?.login !== "string" || typeof comment.user.type !== "string")
+    return { status: 400, body: { error: "invalid_body" } };
+  if (comment.user.type !== "User") return { status: 200, body: { ok: true, ignored: "sender" } };
+  let owner;
+  try {
+    owner = deps.ownerOf(repo, prNumber);
+  } catch {
+    return { status: 503, body: { error: "ownership_unavailable" } };
+  }
+  if (owner === void 0) return { status: 200, body: { ok: true, ignored: "unowned" } };
+  const instance = await deps.instances.get(owner.instanceId);
+  if (instance === null) return { status: 200, body: { ok: true, ignored: "ended" } };
+  const authorized = await deps.commenterAuthorized(instance.userId, {
+    login: comment.user.login,
+    ...typeof comment.user.id === "number" ? { id: comment.user.id } : {}
+  }).catch(() => false);
+  if (!authorized) return { status: 200, body: { ok: true, ignored: "sender" } };
+  const row2 = (await deps.instances.listUnits(owner.instanceId)).find((unit) => unit.unit === owner.unit);
+  if (row2 === void 0 || row2.ending !== void 0) return { status: 200, body: { ok: true, ignored: "ended" } };
+  const created = Date.parse(comment.created_at);
+  const appended = await deps.instances.appendEvent(owner, {
+    id: `github:issue-comment:${comment.id}`,
+    sender: `github:${typeof comment.user.id === "number" ? comment.user.id : comment.user.login}`,
+    senderName: comment.user.login,
+    text: comment.body,
+    mode: row2.idle !== void 0 ? "wake" : "steer",
+    at: Number.isFinite(created) ? created : deps.now()
+  });
+  if (!appended.ok) return { status: 503, body: { error: "store_unavailable" } };
+  const sent = await sendUnitNudge(deps.workflow, owner);
+  return { status: 200, body: { ok: true, appended: true, seq: appended.seq, nudge: sent.kind } };
+}
 async function handlePushIntake(headers, rawBody, deps) {
   if (deps.secret === void 0 || deps.secret === "") return { status: 503, body: { error: "disabled" } };
   if (headers.signature === void 0 || !await verifyWebhookSignature(deps.secret, rawBody, headers.signature))
@@ -71528,7 +71775,14 @@ function createGithubWebhookHandler(deps) {
       event: one(req.headers[GITHUB_EVENT_HEADER]),
       signature: one(req.headers[GITHUB_SIGNATURE_HEADER])
     };
-    const result = headers.event === "push" ? await handlePushIntake(headers, body.body, { secret: deps.secret, watch: deps.watch }) : await handleCheckRunIntake(headers, body.body, deps);
+    const result = headers.event === "push" ? await handlePushIntake(headers, body.body, { secret: deps.secret, watch: deps.watch }) : headers.event === "issue_comment" && deps.ownerOf !== void 0 && deps.instances !== void 0 && deps.commenterAuthorized !== void 0 && deps.now !== void 0 ? await handleIssueCommentIntake(headers, body.body, {
+      secret: deps.secret,
+      ownerOf: deps.ownerOf,
+      instances: deps.instances,
+      commenterAuthorized: deps.commenterAuthorized,
+      workflow: deps.workflow,
+      now: deps.now
+    }) : await handleCheckRunIntake(headers, body.body, deps);
     answer(result.status, result.body);
   };
 }
@@ -72598,9 +72852,16 @@ async function runBot() {
         );
       }
     });
+    const commenterAuthorized = async (requester, author) => {
+      const binding = await bindingOf(requester, config);
+      return binding !== void 0 && author.id === binding.id && author.login.toLowerCase() === binding.login.toLowerCase();
+    };
     const githubWebhook = createGithubWebhookHandler({
       secret: processSecrets.get("GITHUB_WEBHOOK_SECRET")?.reveal(),
       watch: mergeWatch,
+      ownerOf: (repo, prNumber) => runnerOwnership.owner(repo, prNumber),
+      instances: coordinatorInstances,
+      commenterAuthorized,
       checksSettled: async (repo, headSha) => {
         const checks = await fetchCommitChecks(repo, headSha);
         return checks !== void 0 && checks.total > 0 && checks.pending.length === 0;
@@ -72662,6 +72923,8 @@ async function runBot() {
       github: deps.githubApi ?? new RestGithubApi(),
       createBranchRef,
       fetchPrReviews: fetchPullRequestReviews,
+      fetchPrComments: fetchPullRequestComments,
+      commenterAuthorized,
       // The merge step (record 0031's merge grant): the pull request as GitHub has it, the checks at its head, the squash.
       fetchPrFacts: fetchPullRequestFacts,
       fetchCommitChecks,
@@ -73288,6 +73551,7 @@ var init_index = __esm({
     init_pullSweepWiring();
     init_githubApi();
     init_githubApp();
+    init_authorBinding();
     init_identityRewrite();
     init_run2();
     init_record();