@coreplane/switchboard 1.260.2 → 1.260.4

package/dist/cli.js

@@ -1874,7 +1874,7 @@ function bashBudgetWithinRun(wantedMs, remainingMs) {
   if (cap < BASH_TIMEOUT_MIN_MS) {
     return {
       kind: "exhausted",
-      note: `run budget exhausted \u2014 ${secs(remainingMs)}s of wall clock left, inside the ${secs(RUN_DEADLINE_RESERVE_MS)}s write-up reserve, so the command was not run; write up what you have now`
+      note: `the run budget is exhausted \u2014 ${secs(remainingMs)}s of wall clock left, inside the ${secs(RUN_DEADLINE_RESERVE_MS)}s write-up reserve, so the command was not run; write up what you have now`
     };
   }
   if (cap >= wantedMs) return { kind: "unchanged" };
@@ -2094,7 +2094,7 @@ function renderFirstInstruction(rebase) {
   const branch2 = rebase.branch ? `\`${rebase.branch}\`` : "the unit's branch";
   const onto = rebase.onto ? `\`${rebase.onto}\`` : "the merged parent";
   const gates = `${FAST_GATES_POINTER} ${GATE_RECEIPTS}`;
-  return `Rebase ${branch2} onto ${onto} before any other work \u2014 the parent unit has merged and the base has moved; the only writes are your own on that branch. A conflict ends the unit: report it as the handoff and stop. Push the branch as soon as the change exists and the fast gates pass \u2014 the project's full verification is CI's gate, run there after the push with any fix as a further commit; an unpushed tree does not survive the run's end. ${gates} ${REBASE_POINTER} At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS}`;
+  return `Rebase ${branch2} onto ${onto} before any other work \u2014 the parent unit has merged and the base has moved; the only writes are your own on that branch. Push the branch as soon as the change exists and the fast gates pass \u2014 the project's full verification is CI's gate and runs there after the push, with any fix as a further commit; an unpushed tree does not survive the run's end. ${gates} ${REBASE_POINTER} At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS}`;
 }
 function renderSpecRow(row2, dropText) {
   const head = `#### ${row2.spec} item ${row2.item}`;
@@ -2313,7 +2313,7 @@ EVERY PR includes one that already exists when you push \u2014 opened by a perso
 - **For agents** (\`agentNotes\`, optional, \u22642000, collapsed): what a reviewing agent needs that a person does not \u2014 the rebase you did, generated files to skip, the command that reproduces the bug.`;
     NEVER_MERGE = `NEVER merge a pull request and NEVER approve one \u2014 no merge or approve command, no merge/approve API call, no pushing to the default branch. Your deliverable is the pushed branch plus the submitted description; Switchboard's own GitHub writes are the PR open/edit, never an approval or a merge \u2014 a human decides what merges.`;
     CONTRACT_HEADINGS_LIST = Object.values(CONTRACT_SECTION_HEADINGS).map((h) => `\`${h}\``).join(", ");
-    UNIT_CONTRACT = `UNIT CONTRACT: when your first user turn carries a \`${CONTRACT_HEADING}\` block \u2014 its sub-headings, in this order: ${CONTRACT_HEADINGS_LIST} \u2014 it is the contract for one plan unit, rendered by Switchboard from the plan itself, and it outranks any free-text task beside it. Do its first instruction first: the rebase of the unit's branch onto the merged parent (a conflict ends the unit \u2014 report it and stop; never resolve it by force). Then implement the unit's section as written: every test scenario it lists is added as a test, every spec row it names is updated so its proof binding resolves, the agent rules are followed, and no guard it names is weakened. The review is handed the same block and checks the diff against it: a test scenario the unit listed and the diff did not add is a finding at minor severity \u2014 the same severity as a spec contradiction. Never edit the plan record itself; where the unit is wrong or a criterion could not be proven, say so in the handoff and in your final message.`;
+    UNIT_CONTRACT = `UNIT CONTRACT: when your first user turn carries a \`${CONTRACT_HEADING}\` block \u2014 its sub-headings, in this order: ${CONTRACT_HEADINGS_LIST} \u2014 it is the contract for one plan unit, rendered by Switchboard from the plan itself, and it outranks any free-text task beside it. Do its first instruction first: the rebase of the unit's branch onto the merged parent. Then implement the unit's section as written: every test scenario it lists is added as a test, every spec row it names is updated so its proof binding resolves, the agent rules are followed, and no guard it names is weakened. The review is handed the same block and checks the diff against it: a test scenario the unit listed and the diff did not add is a finding at minor severity \u2014 the same severity as a spec contradiction. Never edit the plan record itself; where the unit is wrong or a criterion could not be proven, say so in the handoff and in your final message.`;
     UNIT_HANDOFF = `UNIT HANDOFF: when your first user turn carries a \`${CONTRACT_HEADING}\` block, call the submit_handoff tool once, after submit_pr_description and before your final message, with the typed handoff \u2014 deviations: where you departed from the unit as written (from, to, why); followUps: what you found and did not do, and where it belongs (what, where); unproven: which of the unit's test scenarios or criteria you could not prove, and why (criterion, why); landed (optional): what of the unit was already on the base when you began, and the pull request or commit that carries it (what, where) \u2014 when the whole unit is already there, push nothing of your own and open no pull request; the handoff's landed rows end the unit done. Switchboard records it on the run and posts it to the unit's board issue, where a person decides each row's disposition; you never edit the plan's ledger yourself. An empty handoff is submitted as three empty lists, never skipped \u2014 a missing handoff reads as an unfinished run, not as nothing to say. Without a \`${CONTRACT_HEADING}\` block, do not call it.`;
     IMAGE_TOOLCHAIN = `Node 24 with npm and pnpm; python3, make and g++ (native modules build); ffmpeg (frames out of a video \u2014 \`ffmpeg -i in.mp4 -vf fps=1 f_%03d.png\` \u2014 and video out of frames or a recording); and a headless Chromium through Playwright \u2014 \`playwright screenshot <url> out.png\`, \`playwright pdf <url> out.pdf\`, or \`require('playwright')\` for a scripted page and \`recordVideo\``;
     SANDBOX_TOOLCHAIN = `The sandbox image carries ${IMAGE_TOOLCHAIN}; and Docker (the engine starts on the first \`docker\` call).`;
@@ -2330,7 +2330,7 @@ Keep notes with the \`notes\` tool: one short document, replaced whole each time
     CHECKS_BY_COST = `CHECKS BY COST \u2014 push before the expensive ones. Every check you might run has a cost class: seconds (a formatter or a linter on the files you touched, one test file, a docs, link or spec check, the typecheck of one package) or minutes (the whole test suite, a build, a dependency install, an end-to-end or full verification). Know a command's class before you run it \u2014 from the project's own scripts and CI configuration, from how long it took last time, or by the class above when you have nothing better. Prove each change with the cheapest check that can prove it, matched to the change's scope and scoped to the changed set \u2014 the tests nearest your change, the touched project's typecheck, the changed files' formatting, never the whole tree: a documentation change gets the documentation checks, one module gets its own tests, a shared type gets the typecheck. Every CI pipeline runs the tests, the types, the formatting and the full verification on your push, so you never run them again: you validate and fix your own change before pushing, at the changed-set scope. Passing the full test suite and the full typecheck is NOT part of your criteria: CI is that gate and the only place they run \u2014 on a shared machine they cost minutes that every other run pays for. As soon as the change exists and those checks pass, commit and push \u2014 the pushed branch is the deliverable, and an unpushed tree does not survive the run's end. Beyond the changed set, use judgement about what this change needs rather than a checklist, fixing forward with further commits and pushes. Never start an operation whose expected duration does not fit the time you have left minus what a commit, a push and the description need: push what there is and say plainly what is unverified instead. At the wind-down note, commit and push what compiles, say what does not, then answer. ${TIMEOUT_ON_LONG_COMMANDS} The description's validation names exactly what ran; what did not run is CI's to gate, and you say so.`;
     TOUCHED_TESTS_COMMAND = "`npx vitest run` on the test files you touched, by name,";
     FAST_GATES_BEFORE_PUSH = `THE FAST GATES, before every push \u2014 each scoped to the changed set, never the whole project: ${TOUCHED_TESTS_COMMAND} once (never \`--changed\`, never a directory: on a moving base that is most of the suite), \`tsc --noEmit -p\` the touched tsconfig under \`NODE_OPTIONS=--max-old-space-size=6144\`, \`npx prettier --check\` on the changed files, \`npm run hygiene:check\` and \`npm run specs:check\` \u2014 then your judgement on what else this change needs, not a longer checklist. The full verification is CI's gate \u2014 \`npm run verify\` runs there on your push, never here: push a head early and let CI judge it, fixing forward with further commits and pushes.`;
-    REBASE_BEFORE_PUSH = "REBASE BEFORE EVERY PUSH \u2014 always, not configurable. Immediately before each push: fetch your base branch, rebase your branch onto it, resolve any conflict with the context you already have (the repository's AGENTS.md says how a generated file is regenerated \u2014 regenerate it, never hand-merge it), re-run THE FAST GATES on the rebased tree, and only then push. Every head that reaches review is then current with its base when it lands, and no unit ends merge-ready behind a sibling that merged first.";
+    REBASE_BEFORE_PUSH = "REBASE BEFORE EVERY PUSH \u2014 always, not configurable. Immediately before each push: fetch your base branch, rebase your branch onto it, and resolve any conflict with the context you already have in one bounded model round \u2014 the thread's context and the repository's AGENTS.md (which says how a generated file is regenerated: regenerate it, never hand-merge it). If you cannot resolve it inside that bound, end the round; otherwise re-run THE FAST GATES on the rebased tree, and only then push. Every head that reaches review is then current with its base when it lands, and no unit ends merge-ready behind a sibling that merged first.";
     CODING_SYSTEM = `You are Switchboard's coding agent, operating from a Slack request.
 
 You work inside a dedicated workspace directory with bash, read_file, and write_file tools. ${SANDBOX_TOOLCHAIN}
@@ -3007,7 +3007,7 @@ function renewalDecision(input) {
   };
 }
 function renderRenewal(decision, grant2, options = {}) {
-  const recourse = options.idle ? "reply in this thread to continue" : "re-issue the request to try again";
+  const recourse = options.idle ? "the next reply in this thread continues the unit" : "the next reply in this thread continues the original task";
   const senders = options.senders?.length ? `, with ${options.senders.length} message${options.senders.length === 1 ? "" : "s"} from ${options.senders.join(", ")}` : "";
   if (decision.renew)
     return `budget renewed, ${decision.segment - 1} of ${grant2.renewals}, continues ${decision.from !== void 0 ? decision.from.slice(0, 7) : "the branch's head"}${senders}`;
@@ -3162,6 +3162,9 @@ var init_redact = __esm({
 function severityAtOrAbove(severity, level) {
   return isAddressSeverity(severity) && severityRank(severity) <= severityRank(level);
 }
+function findingsAtOrAbove(findings, level) {
+  return findings.filter((f) => severityAtOrAbove(f.severity, level));
+}
 function resolveAddressSeverity(layers) {
   if (layers.run !== void 0) return { level: layers.run, source: "run" };
   if (layers.user !== void 0) return { level: layers.user, source: "user" };
@@ -3274,7 +3277,7 @@ function findingCounts(findings) {
 }
 function whereCell(f, target) {
   const location = f.line !== void 0 ? `${f.file}:${f.line}` : f.file;
-  const label = `\`${cell(location)}\``;
+  const label = `\`${escapeMarkdownTableCell(location)}\``;
   if (!target || !isRepoPath(f.file)) return label;
   const path = encodeURI(f.file).replace(/#/g, "%23").replace(/\?/g, "%3F");
   const url = `https://github.com/${target.repo}/blob/${target.head}/${path}${f.line !== void 0 ? `#L${f.line}` : ""}`;
@@ -3290,6 +3293,7 @@ function verdictMarker(verdict, target) {
         id: f.id,
         severity: f.severity,
         file: f.file,
+        title: f.title,
         ...f.line !== void 0 ? { line: f.line } : {},
         ...f.humanGated ? { humanGated: true } : {}
       }))
@@ -3311,7 +3315,9 @@ function buildReviewPostBody(answer, verdict, target) {
       [
         "| Severity | Finding | Where |",
         "| --- | --- | --- |",
-        ...findings.map((f) => `| ${f.severity} | **${cell(f.id)}** ${cell(f.title)} | ${whereCell(f, target)} |`)
+        ...findings.map(
+          (f) => `| ${f.severity} | **${escapeMarkdownTableCell(f.id)}** ${escapeMarkdownTableCell(f.title)} | ${whereCell(f, target)} |`
+        )
       ].join("\n")
     );
   }
@@ -3412,7 +3418,7 @@ function redactVerdict(v, redact = redactSecrets) {
 function redactDispositions(dispositions, redact = redactSecrets) {
   return dispositions.map((d) => ({ findingId: d.findingId, disposition: d.disposition, note: redact(d.note) }));
 }
-var FINDING_SEVERITIES, ADDRESS_SEVERITIES, DEFAULT_ADDRESS_SEVERITY, isAddressSeverity, severityRank, LGTM_TOKEN, CHANGES_TOKEN, NO_VERDICT_LINE, cell, isRepoPath, VERDICT_KINDS, DISPOSITION_KINDS, isRecordLike, REVIEW_POST_HEAD;
+var FINDING_SEVERITIES, ADDRESS_SEVERITIES, DEFAULT_ADDRESS_SEVERITY, isAddressSeverity, severityRank, LGTM_TOKEN, CHANGES_TOKEN, NO_VERDICT_LINE, escapeMarkdownTableCell, unescapeMarkdownTableCell, isRepoPath, VERDICT_KINDS, DISPOSITION_KINDS, isRecordLike, REVIEW_POST_HEAD;
 var init_reviewVerdict = __esm({
   "../../src/core/reviewVerdict.ts"() {
     "use strict";
@@ -3427,7 +3433,8 @@ var init_reviewVerdict = __esm({
     LGTM_TOKEN = "LGTM:";
     CHANGES_TOKEN = "Changes requested:";
     NO_VERDICT_LINE = "No verdict submitted \u2014 not approving.";
-    cell = (text) => oneLine2(text).replace(/\|/g, "\\|");
+    escapeMarkdownTableCell = (text) => oneLine2(text).replace(/\\/g, "\\\\").replace(/\|/g, "\\|");
+    unescapeMarkdownTableCell = (text) => text.replace(/\\([\\|])/g, "$1");
     isRepoPath = (file) => /^[^\s`]+$/.test(file) && !/^[a-z][a-z0-9+.-]*:\/\//i.test(file);
     VERDICT_KINDS = ["approve", "request_changes"];
     DISPOSITION_KINDS = ["fixed", "declined"];
@@ -3448,9 +3455,9 @@ function interruptionCauseOfWords(words) {
 }
 function shipInterruptedNote(prUrl3, cause, idle = false) {
   const stands = prUrl3 ? `Its work stands on GitHub: ${prUrl3}.` : "Whatever it pushed stands on its pipeline branch; no PR was opened yet.";
-  const reissue = idle ? "To continue, reply in this thread to continue." : prUrl3 ? `To continue the review loop, re-issue \`agent:ship\` in this thread with only the PR URL (${prUrl3}).` : "To continue, re-issue `agent:ship` in this thread with the task \u2014 round 0 runs again on the same branch.";
+  const continuation = idle ? "The next reply in this thread continues the unit." : prUrl3 ? `The pipeline kept its task, branch and pull request; the next reply in this thread continues the review loop at ${prUrl3}.` : "The pipeline kept its task and branch; the next reply in this thread starts round 0 again on that branch.";
   const opening = cause === "container_replaced" ? "\u26A0\uFE0F The resident container running this pipeline's child was replaced (a deploy's image swap) and the child could not resume, so the pipeline stopped." : cause === "sandbox_fault" ? "\u26A0\uFE0F The sandbox running this pipeline's child failed and the child could not resume, so the pipeline stopped." : cause === "bot_restart" ? "\u26A0\uFE0F The bot restarted while this ship pipeline was running, so the pipeline stopped." : "\u26A0\uFE0F This ship pipeline's child was interrupted and could not resume, so the pipeline stopped.";
-  return `${opening} ${stands} ${reissue}`;
+  return `${opening} ${stands} ${continuation}`;
 }
 function planIdOf(planPath) {
   const base = planPath.split("/").pop() ?? "";
@@ -4728,7 +4735,7 @@ function analyzeRunFriction(events, opts = {}) {
       findings.push({
         category: "infra_failure",
         severity: "high",
-        summary: `no result for tool call (run ended mid-tool): ${event.summary}`,
+        summary: `no result for tool call (the run ended mid-tool): ${event.summary}`,
         tool: event.tool,
         eventIndex: index,
         ...durationMs !== void 0 ? { durationMs } : {},
@@ -5299,7 +5306,7 @@ function redactHandoff(h, redact = redactSecrets) {
 function line(s) {
   return s.replace(/\s*\n\s*/g, " ");
 }
-function cell2(s) {
+function cell(s) {
   return line(s.replace(/\\/g, "\\\\").replace(/\|/g, "\\|"));
 }
 function entryLines(h) {
@@ -5331,7 +5338,7 @@ function prLink(pr) {
 function renderHandoffLedgerRows(h, ctx) {
   const link = prLink(ctx.pr);
   const source2 = `${ctx.unitId} handoff${link ? ` (${link})` : ""}`;
-  return entryLines(h).map((e) => `| ${cell2(e.row)} | ${cell2(source2)} | open |`).join("\n");
+  return entryLines(h).map((e) => `| ${cell(e.row)} | ${cell(source2)} | open |`).join("\n");
 }
 function renderHandoffComment(h, ctx) {
   if (isEmptyHandoff(h)) return void 0;
@@ -5514,6 +5521,18 @@ function isCoordinatorUnit(v) {
   if (r.startedAt !== void 0 && !isFinite(r.startedAt)) return false;
   return true;
 }
+async function sendUnitNudge(workflow, key) {
+  const instance = key.instanceId;
+  if (!workflow) return { kind: "no-binding", instance };
+  const type = unitNudgeEventType(key);
+  try {
+    const handle2 = await workflow.get(instance);
+    await handle2.sendEvent({ type, payload: {} });
+    return { kind: "sent", instance, type };
+  } catch (err2) {
+    return { kind: "failed", instance, type, reason: err2 instanceof Error ? err2.message : String(err2) };
+  }
+}
 async function sendChecksSettled(workflow, instance, headSha, settledAt) {
   if (!workflow) return { kind: "no-binding", instance };
   const type = checksSettledEventType(headSha);
@@ -5550,12 +5569,13 @@ async function sendChildSignal(workflow, signal2) {
     return { kind: "failed", instance, type, reason: err2 instanceof Error ? err2.message : String(err2) };
   }
 }
-var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isThread, isRoundGate, isUnitIdle, isSegment, isUnitWakeAnswer;
+var COORDINATOR_IDENTITY, COORDINATOR_STEP_ACTION, PLAN_MERGE_ACTION, COORDINATOR_STEP_PATH_PREFIX, INSTANCE_ID_PATTERN, STEP_NAME_PATTERN, IDEMPOTENCY_KEY_PATTERN, UNIT_PATTERN, UNIT_KEY_PATTERN, CHILD_INTERRUPTED_EVENT_PREFIX, CHILD_RESUMED_EVENT_PREFIX, THREAD_EVENT_MAX_BYTES, serializedBytes, isThreadEventStagedFile, isThreadEventAttachment, isThreadEventMode, UNIT_NUDGE_EVENT_PREFIX, CHECKS_SETTLED_EVENT_PREFIX, PULL_MERGED_EVENT_PREFIX, IDLE_WHY_MAX, REPO_SLUG, MAX_TEXT, MAX_REPORT, MAX_ROUNDS, isText, isOptionalText, isFinite, isCount, isObject, isPr, isResume, isThread, isRoundGate, isHumanGatePending, isUnitIdle, isSegment, isUnitWakeAnswer;
 var init_contract2 = __esm({
   "../../src/core/coordinator/contract.ts"() {
     "use strict";
     init_budgets();
     init_verbosity();
+    init_reviewVerdict();
     init_coordinator();
     init_handoff();
     COORDINATOR_IDENTITY = "coordinator";
@@ -5591,13 +5611,14 @@ var init_contract2 = __esm({
     isResume = (v) => isObject(v) && isFinite(v.pr) && (v.headSha === void 0 || isText(v.headSha)) && (v.url === void 0 || isText(v.url, 2048));
     isThread = (v) => isObject(v) && isText(v.threadKey) && isOptionalText(v.sourceUrl);
     isRoundGate = (v) => isObject(v) && isAddressSeverity(v.level) && Array.isArray(v.findings) && v.findings.every((f) => typeof f === "string");
-    isUnitIdle = (v) => isObject(v) && isText(v.why, IDLE_WHY_MAX) && isFinite(v.at) && isCount(v.renewalsLeft) && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && isCount(v.wakes);
+    isHumanGatePending = (v) => isObject(v) && isObject(v.pr) && typeof v.pr.number === "number" && Number.isInteger(v.pr.number) && v.pr.number > 0 && isText(v.pr.url) && typeof v.round === "number" && Number.isInteger(v.round) && v.round >= 1 && Array.isArray(v.findings) && v.findings.every((finding) => isFindingShape(finding)) && (v.verdict === "approve" || v.verdict === "request_changes") && (v.reviewRunId === void 0 || isText(v.reviewRunId)) && (v.headSha === void 0 || isText(v.headSha)) && (v.askedAt === void 0 || isFinite(v.askedAt));
+    isUnitIdle = (v) => isObject(v) && isText(v.why, IDLE_WHY_MAX) && isFinite(v.at) && isCount(v.renewalsLeft) && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && (v.humanGate === void 0 || isHumanGatePending(v.humanGate)) && isCount(v.wakes);
     isSegment = (v) => isObject(v) && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 2 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && typeof v.at === "number";
     isUnitWakeAnswer = (v) => {
       if (!isObject(v)) return false;
       if (v.kind === "answered") return typeof v.reply === "string";
       if (v.kind === "stopped" || v.kind === "expired") return true;
-      return v.kind === "segment" && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 1 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && Array.isArray(v.texts) && v.texts.every((text) => typeof text === "string") && Array.isArray(v.senders) && v.senders.every((sender) => isText(sender)) && (v.leaseMs === void 0 || isFinite(v.leaseMs) && v.leaseMs > 0);
+      return v.kind === "segment" && typeof v.index === "number" && Number.isInteger(v.index) && v.index >= 1 && (v.from === void 0 || isText(v.from)) && (v.runId === void 0 || isText(v.runId)) && (v.spendUsd === null || isFinite(v.spendUsd)) && (v.handoff === void 0 || isHandoffShape(v.handoff)) && Array.isArray(v.texts) && v.texts.every((text) => typeof text === "string") && Array.isArray(v.senders) && v.senders.every((sender) => isText(sender)) && (v.leaseMs === void 0 || isFinite(v.leaseMs) && v.leaseMs > 0) && (v.humanGate === void 0 || isHumanGatePending(v.humanGate));
     };
   }
 });
@@ -11659,13 +11680,13 @@ function fleetBusyRunEndedLine(run2, thread, err2) {
   });
 }
 function fleetBusyExhaustedMessage(waitedMs) {
-  return `sandbox fleet busy \u2014 no free per-thread sandbox after waiting ${Math.round(waitedMs / 1e3)}s (the fleet's max_instances is reached); try again in a few minutes`;
+  return `this is a bug: the sandbox fleet had no free per-thread sandbox after waiting ${Math.round(waitedMs / 1e3)}s (the fleet's max_instances is reached), and no automatic queue remained`;
 }
 function isWaitReason(reason2) {
   return reason2 === FLEET_BUSY_REASON || reason2 === SANDBOX_STARTING_REASON || reason2 === RUNTIME_BUSY_REASON;
 }
 function startWaitExhaustedMessage(waitedMs) {
-  return `sandbox not ready \u2014 the thread's container did not finish starting within ${Math.round(waitedMs / 1e3)}s; try again in a few minutes`;
+  return `this is a bug: the thread's sandbox did not finish starting within ${Math.round(waitedMs / 1e3)}s, and no automatic start wait remained`;
 }
 function runtimeBusyExhaustedMessage(waitedMs) {
   return `sandbox busy \u2014 the thread's container did not accept a connection within ${Math.round(waitedMs / 1e3)}s (the platform refused every connect of the wait; a command saturating its cores is one cause, an idle container has met it too); retry`;
@@ -15727,9 +15748,7 @@ var init_resident = __esm({
        *  the factory binds the thread to it (loudly) instead of asking. Undefined
        *  from a Worker predating that field → the dispatcher asks as before. */
       constructor(resource, defaultRef) {
-        super(
-          `the ${resource} resident needs a branch for this thread: no ref is bound yet. Name the branch to work on (e.g. "on main") and try again.`
-        );
+        super(`Which branch should the ${resource} resident use for this thread (for example, "main")?`);
         this.resource = resource;
         this.defaultRef = defaultRef;
         this.name = "ResidentNeedsRefError";
@@ -16259,7 +16278,7 @@ var init_resident = __esm({
         const callTimeoutMs = opts.callTimeoutMs ?? BASH_TIMEOUT_MS;
         const stillGone = (data) => classifyError(
           new ExecInfraError(
-            `resident ${route2}: worktree still unavailable after a re-attach (${String(data.error ?? "")}) \u2014 the resident may be mid-restore; try again shortly.`,
+            `this is a bug: resident ${route2} still had no worktree after its automatic re-attach (${String(data.error ?? "")}); no further restore wait was scheduled`,
             "refused"
           ),
           { kind: "infra", code: "attach" }
@@ -17465,20 +17484,83 @@ async function fetchPullRequestTitleBody(pr) {
   if (!data || typeof data.title !== "string") return void 0;
   return { title: data.title, body: typeof data.body === "string" ? data.body : "" };
 }
-async function fetchPullRequestReviews(pr) {
-  const token2 = await resolveGithubToken().catch(() => null);
-  let res;
+function nextGithubPage(link) {
+  for (const entry of link?.split(",") ?? []) {
+    const target = /<([^>]+)>/.exec(entry)?.[1];
+    const relations = /(?:^|;)\s*rel="([^"]+)"/.exec(entry)?.[1]?.split(/\s+/) ?? [];
+    if (target !== void 0 && relations.includes("next")) return target;
+  }
+  return void 0;
+}
+function isGithubListPage(url, base) {
+  let candidate;
+  let requested;
   try {
-    res = await fetch(`https://api.github.com/repos/${pr.repo}/pulls/${pr.number}/reviews?per_page=100`, {
-      headers: apiHeaders(token2),
-      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
-    });
+    candidate = new URL(url);
+    requested = new URL(base);
   } catch {
-    return void 0;
+    return false;
   }
-  if (!res.ok) return void 0;
-  const rows = await res.json().catch(() => null);
-  if (!Array.isArray(rows)) return void 0;
+  if (candidate.origin !== requested.origin || candidate.username !== "" || candidate.password !== "" || candidate.hash !== "")
+    return false;
+  if (candidate.pathname === requested.pathname) return true;
+  const requestedParts = requested.pathname.split("/").filter(Boolean);
+  const candidateParts = candidate.pathname.split("/").filter(Boolean);
+  const resourcePath = requestedParts.slice(3);
+  return requestedParts.length >= 4 && requestedParts[0] === "repos" && candidateParts.length === resourcePath.length + 2 && candidateParts[0] === "repositories" && /^\d+$/.test(candidateParts[1] ?? "") && candidateParts.slice(2).every((part, index) => part === resourcePath[index]);
+}
+async function fetchGithubListPages(base, token2) {
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set();
+  let url = `${base}?per_page=100`;
+  while (url !== void 0) {
+    if (!isGithubListPage(url, base) || seen.has(url)) return void 0;
+    seen.add(url);
+    let res;
+    try {
+      res = await fetch(url, {
+        headers: apiHeaders(token2),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+      });
+    } catch {
+      return void 0;
+    }
+    if (!res.ok) return void 0;
+    const page2 = await res.json().catch(() => null);
+    if (!Array.isArray(page2)) return void 0;
+    rows.push(...page2);
+    url = nextGithubPage(res.headers.get("link"));
+  }
+  return rows;
+}
+async function fetchPullRequestComments(pr) {
+  const token2 = await resolveGithubToken().catch(() => null);
+  const base = `https://api.github.com/repos/${pr.repo}/issues/${pr.number}/comments`;
+  const rows = await fetchGithubListPages(base, token2);
+  if (rows === void 0) return void 0;
+  return rows.flatMap((raw) => {
+    const row2 = raw;
+    if (typeof row2.id !== "number" || typeof row2.user?.login !== "string" || typeof row2.user.type !== "string" || typeof row2.created_at !== "string" || typeof row2.body !== "string")
+      return [];
+    return [
+      {
+        id: row2.id,
+        author: {
+          login: row2.user.login,
+          ...typeof row2.user.id === "number" ? { id: row2.user.id } : {},
+          type: row2.user.type
+        },
+        createdAt: row2.created_at,
+        body: row2.body
+      }
+    ];
+  });
+}
+async function fetchPullRequestReviews(pr) {
+  const token2 = await resolveGithubToken().catch(() => null);
+  const base = `https://api.github.com/repos/${pr.repo}/pulls/${pr.number}/reviews`;
+  const rows = await fetchGithubListPages(base, token2);
+  if (rows === void 0) return void 0;
   return rows.flatMap((r) => {
     const row2 = r;
     if (typeof row2.state !== "string") return [];
@@ -17492,6 +17574,7 @@ async function fetchPullRequestReviews(pr) {
         } : {},
         state: row2.state,
         ...typeof row2.commit_id === "string" ? { commitId: row2.commit_id } : {},
+        ...typeof row2.submitted_at === "string" ? { submittedAt: row2.submitted_at } : {},
         body: typeof row2.body === "string" ? row2.body : ""
       }
     ];
@@ -19957,11 +20040,11 @@ function resolveRange(daysParam, now = new Date(systemClock())) {
 function buildBillerTieOuts(billers, invoices, cells, range) {
   return billers.map(({ name, invoice }) => {
     const attributed2 = /* @__PURE__ */ new Map();
-    for (const cell4 of cells) {
-      if (cell4.day < range.from || cell4.day > range.to) continue;
-      for (const [ref, m] of Object.entries(cell4.usage.byModel)) {
+    for (const cell3 of cells) {
+      if (cell3.day < range.from || cell3.day > range.to) continue;
+      for (const [ref, m] of Object.entries(cell3.usage.byModel)) {
         if (billerOfRef(ref) !== name) continue;
-        const day2 = attributed2.get(cell4.day) ?? { usd: 0, fee: 0, hasFee: false, unpricedTokens: 0 };
+        const day2 = attributed2.get(cell3.day) ?? { usd: 0, fee: 0, hasFee: false, unpricedTokens: 0 };
         if (typeof m.usd === "number") {
           day2.usd += m.usd;
           if (m.feeUsd !== void 0) {
@@ -19971,7 +20054,7 @@ function buildBillerTieOuts(billers, invoices, cells, range) {
         } else {
           day2.unpricedTokens += m.inputTokens + m.outputTokens + m.cacheReadTokens + m.cacheWriteTokens;
         }
-        attributed2.set(cell4.day, day2);
+        attributed2.set(cell3.day, day2);
       }
     }
     const invoiced = /* @__PURE__ */ new Map();
@@ -21444,7 +21527,7 @@ var init_metricsService = __esm({
     init_budgets();
     init_metrics();
     init_clock();
-    METRICS_OFF_MESSAGE = "Run metrics aren't configured \u2014 set metrics.dataset in config (beside the costs block's Cloudflare account and analytics token) to enable this view.";
+    METRICS_OFF_MESSAGE = "Metrics by run aren't configured \u2014 metrics.dataset in config (beside the costs block's Cloudflare account and analytics token) enables this view.";
     NullMetricsService = class {
       report() {
         return Promise.reject(new Error(METRICS_OFF_MESSAGE));
@@ -22960,7 +23043,7 @@ var init_artifacts = __esm({
         if (!read.ok)
           throw new CommandError(
             "unavailable",
-            `the rules were applied to ${bucket} but reading them back failed \u2014 ${read.problem}; run \`artifacts lifecycle\` again to confirm`
+            `this is a bug: the rules were applied to ${bucket}, but their read-back failed (${read.problem}) and no automatic confirmation was completed`
           );
         const match = rulesMatch(read.value, rules);
         if (!match.ok)
@@ -23480,7 +23563,7 @@ var init_config4 = __esm({
         destructive: destructiveBeyondMe,
         risk: configRisk
       },
-      describe: "Drop every runtime override of a channel (gated), of yourself (your GitHub binding stays \u2014 it is an identity admin's write), or of a thread (gated like the channel); `config clear user --user <id>` removes one person's GitHub binding (identity admins). Static config.yaml values show through again.",
+      describe: "Drops every runtime override of a channel (gated), of yourself (your GitHub binding stays \u2014 it is an identity admin's write), or of a thread (gated like the channel); `config clear user --user <id>` removes one person's GitHub binding (identity admins). Static config.yaml values show through again.",
       render: (output) => {
         const scope = output.scope;
         return scope === "user" ? "Cleared the user's GitHub binding." : `Cleared ${who(scope)} overrides.`;
@@ -23724,7 +23807,7 @@ function renderCostsBy(output, surface = "text") {
   const columns = surface === "chat" ? [] : [
     `${String(o.dimension).padEnd(40)} ${count.padStart(6)} ${"LLM".padStart(10)}${cloud ? "cloud".padStart(10) : ""} ${"total".padStart(10)} share`
   ];
-  const where = coverage2.historyOn === false ? "run history is off \u2014 no runs to attribute" : `runs from ${String(coverage2.from)}${coverage2.clamped === true ? ` (earlier days are past the history's ${String(coverage2.retentionDays)}-day window)` : ""}${typeof o.pending === "number" && o.pending > 0 ? ` \xB7 ${o.pending} run(s) still being priced` : ""}`;
+  const where = coverage2.historyOn === false ? "history is off \u2014 no runs to attribute" : `runs from ${String(coverage2.from)}${coverage2.clamped === true ? ` (earlier days are past the history's ${String(coverage2.retentionDays)}-day window)` : ""}${typeof o.pending === "number" && o.pending > 0 ? ` \xB7 ${o.pending} run(s) still being priced` : ""}`;
   const tieOut = typeof rec2.comparedDays === "number" && rec2.comparedDays > 0 ? `LLM attributed ${money(rec2.attributedLlmUsd)} of ${money(rec2.workspaceLlmUsd)} on the workspace over ${rec2.comparedDays} day(s)` + (typeof rec2.unattributedLlmUsd === "number" && rec2.unattributedLlmUsd < 0 ? ` \xB7 ${money(-rec2.unattributedLlmUsd)} more attributed than the workspace figure` : ` \xB7 ${money(rec2.unattributedLlmUsd)} unattributed`) : "no day in range has a workspace LLM figure to compare against";
   const cloudLine = cloud ? ` \xB7 cloud allocated ${money(rec2.cloudAllocatedUsd)}${typeof rec2.cloudUnallocatedUsd === "number" && rec2.cloudUnallocatedUsd > 0 ? ` \xB7 ${money(rec2.cloudUnallocatedUsd)} on days with no runs` : ""}` : "";
   return [
@@ -23767,7 +23850,7 @@ var init_costs2 = __esm({
           if (message4 === COSTS_OFF_MESSAGE) throw new CommandError("unavailable", message4);
           throw new CommandError(
             "busy",
-            `costs snapshot not taken: ${message4} \u2014 the previous snapshot still serves; try again`
+            `costs snapshot not taken: ${message4} \u2014 the previous snapshot still serves, and the scheduled loop will take the next snapshot`
           );
         }
       }
@@ -24203,7 +24286,7 @@ ${formatDeployResults(result.results, result.notAttempted)}`
         if (drift.length > 0)
           throw new CommandError(
             "conflict",
-            `Worker configs are not the render of their templates \u2014 ${drift.map((f) => `${f.path} (${f.status})`).join(", ")}; run \`npm run deploy:gen\` and commit the result`
+            `this is a bug: Worker configs are not the render of their templates \u2014 ${drift.map((f) => `${f.path} (${f.status})`).join(", ")} \u2014 and deploy did not repair or commit the generated files automatically`
           );
         const output = { profile: { origin: loaded.origin, path: loaded.path }, files };
         return output;
@@ -24618,7 +24701,7 @@ function patternSignature(f) {
       return "slow_model_turn:model_turn";
     case "infra_failure": {
       if (summary.startsWith("sandbox dead")) return "infra_failure:sandbox_dead";
-      const mid = /^no result for tool call \(run ended mid-tool\):\s*/.exec(summary);
+      const mid = /^no result for tool call \(the run ended mid-tool\):\s*/.exec(summary);
       if (mid) return `infra_failure:mid-tool ${commandSignature(summary.slice(mid[0].length))}`;
       const during = /^exec infrastructure failed during\s*/.exec(summary);
       return `infra_failure:${commandSignature(during ? summary.slice(during[0].length) : summary)}`;
@@ -25180,7 +25263,7 @@ async function recentRecords(ledger, query) {
 function inProgressHint(diagnosis, finished) {
   if (!finished) return void 0;
   const midTool = diagnosis.findings.some(
-    (f) => f.category === "infra_failure" && f.summary.includes("run ended mid-tool")
+    (f) => f.category === "infra_failure" && f.summary.includes("the run ended mid-tool")
   );
   return midTool ? "(hint: the stream ends on a tool call with no result \u2014 if this capture was taken mid-run, pass --in-progress)" : void 0;
 }
@@ -25201,7 +25284,7 @@ var init_friction = __esm({
     defineCommand9 = commandDefiner();
     positiveInt2 = z12.coerce.number().int().positive();
     repoSlug = z12.string().refine((s) => /^[\w.-]+\/[\w.-]+$/.test(s), "expected an owner/name slug");
-    NO_LEDGER_MESSAGE = "Run history is not configured in this deployment (`runHistory`), so there are no recent runs to analyze.";
+    NO_LEDGER_MESSAGE = "History is not configured in this deployment (`runHistory`), so there are no recent runs to analyze.";
     NO_REPO_MESSAGE = "Set `selfImprovement.repo` (an `owner/name`) in config.yaml to tell `friction propose` where to file issues.";
     asJson2 = (r) => r;
     render = (output) => formatSelfImprovementReport(output);
@@ -25253,7 +25336,7 @@ var init_friction = __esm({
         openWorld: true,
         risk: (input) => dryRunRequested(input) ? PLAN_ONLY_RISK : "files issues on the tracker"
       },
-      describe: "Run the self-improvement step: cluster recent friction, dedupe against open issues, file the top proposals as labeled issues.",
+      describe: "Clusters recent friction, deduplicates against open issues, and files the top proposals as labeled issues.",
       render,
       handler: async ({ options, caller, deps }) => {
         const ledger = await ledgerOf(deps);
@@ -25842,15 +25925,15 @@ function planCallback(ticket, identity2, now) {
 function refusalMessage(r) {
   switch (r.kind) {
     case "not_authorizing":
-      return "This sign-in did not start from a connect link, or the link was opened again since. Open the connect link and try again.";
+      return "This is a bug: this sign-in did not start from a live connect link, and no fresh connect link was opened automatically.";
     case "oauth_failed":
       return `Sign-in with the server did not complete: ${r.reason}.`;
     case "not_found":
-      return "This connect link is not known. Ask for a new one with `mcp connect <name>`.";
+      return "This is a bug: this connect link is not known, and no fresh connect link was opened automatically.";
     case "expired":
-      return "This connect link has expired (links last 10 minutes). Ask for a new one with `mcp connect <name>`.";
+      return "This is a bug: this connect link expired after 10 minutes, and no fresh connect link was opened automatically.";
     case "used":
-      return "This connect link was already used. If the credential needs replacing, ask for a new one with `mcp connect <name>`.";
+      return "This connect link was already used; no credential was changed by this visit.";
     case "cancelled":
       return "This connect link was cancelled.";
     case "wrong_identity":
@@ -25903,7 +25986,7 @@ async function readCapped2(res, max, signal2) {
   let total = 0;
   try {
     for (; ; ) {
-      if (signal2?.aborted) throw new McpError("timeout", "run aborted");
+      if (signal2?.aborted) throw new McpError("timeout", "the run was aborted");
       const { value, done } = await reader.read();
       if (done) break;
       if (value) {
@@ -26399,7 +26482,7 @@ function needsRefresh(cred, now) {
 async function refreshCredential(fetchImpl, cred, now) {
   if (!cred.refreshToken)
     throw new OAuthError(
-      "the access token expired and the server issued no refresh token \u2014 run `mcp connect` to sign in again"
+      "this is a bug: the access token expired, the server issued no refresh token, and no fresh sign-in was opened automatically"
     );
   const tokens = await tokenRequest(fetchImpl, cred.tokenEndpoint, {
     grant_type: "refresh_token",
@@ -27616,7 +27699,7 @@ var init_service = __esm({
         } catch (err2) {
           return { name: r.name, unavailable: `secret store: ${err2 instanceof Error ? err2.message : String(err2)}` };
         }
-        if (!sealed) return { name: r.name, unavailable: "no credential stored \u2014 run `mcp connect`" };
+        if (!sealed) return { name: r.name, unavailable: "no credential is stored, so this server is unavailable" };
         try {
           const stored = parseStoredCredential(await openCredential(this.opts.key, sealed));
           if (stored.kind === "bearer") return { spec: { ...base, auth: { type: "bearer", token: stored.token } } };
@@ -27841,7 +27924,7 @@ var init_mcp = __esm({
       // Org-only by definition: it changes what every run in the org can reach,
       // so it is destructive at its every input (record 0057's audit rule).
       annotations: { destructive: true, risk: () => "adds or moves a server every run in the scope can use" },
-      describe: "Re-issue a person's MCP server in the org tier (admins): the same name, URL and auth, added by you; a bearer/oauth server gets a fresh org connect link for you to complete \u2014 the person's credential is never copied.",
+      describe: "Promote a person's MCP server into the org tier (admins): the same name, URL and auth, added by you; a bearer/oauth server gets a fresh org connect link for you to complete \u2014 the person's credential is never copied.",
       render: renderAdd,
       settle: (output, { deps }) => settleConnect(deps, output),
       handler: async ({ args, options, caller, deps }) => {
@@ -29679,7 +29762,7 @@ async function fencedTarget(args) {
   if (args.refusePending && checks.total === 0)
     throw new CommandError(
       "conflict",
-      `no check reported at the head of ${name} \u2014 nothing was done; retry once CI registers (a repository with no CI stays a person's click on GitHub)`
+      `no check reported at the head of ${name} \u2014 nothing was done; this is a bug when the repository has CI because no automatic wait or event re-fire was scheduled (a repository with no CI stays a person's click on GitHub)`
     );
   if (checks.failed.length > 0)
     throw new CommandError(
@@ -29872,7 +29955,7 @@ var init_metrics2 = __esm({
           const message4 = err2 instanceof Error ? err2.message : String(err2);
           if (message4 === METRICS_OFF_MESSAGE) throw new CommandError("unavailable", message4);
           const kind = err2 instanceof Error ? err2.name : "Error";
-          throw new CommandError("unavailable", `run metrics unavailable: ${kind}: ${message4}`);
+          throw new CommandError("unavailable", `metrics by run unavailable: ${kind}: ${message4}`);
         }
       }
     });
@@ -29907,7 +29990,7 @@ function runLine(row2, now, surface) {
 }
 function prLine(row2, surface) {
   const name = `${row2.pr.repo}#${row2.pr.number}`;
-  const owner = row2.owner.unitKey ?? (row2.owner.runId ? `run ${shortId(row2.owner.runId)}` : "a person");
+  const owner = row2.owner.unitKey ?? (row2.owner.runId ? `the run ${shortId(row2.owner.runId)}` : "a person");
   const health = healthWords(row2.health) || "-";
   if (surface === "chat") return `\u2022 ${name} \u2014 ${health} \xB7 ${owner}`;
   return `${name.padEnd(32)}  ${health.padEnd(24)}  ${owner}`.trimEnd();
@@ -30399,7 +30482,7 @@ function defineOp(op) {
     // agent, or the exec grant a token was minted with (policy.ts).
     resource: () => ({ type: "agent", name: "coding" }),
     effect: "write",
-    describe: `Run the repo's onboarded ${op} command with zero model turns (needs coding-agent access; the ref must be a plausible branch).`,
+    describe: `Executes the repo's onboarded ${op} command with zero model turns (needs coding-agent access; the ref must be a plausible branch).`,
     render: renderOp,
     handler: async ({ args, caller, deps, span }) => {
       if (!await deps.repo.canUseRepo(caller.id, args.slug))
@@ -30445,7 +30528,7 @@ ${line4}` : ""}`);
         case "error":
           throw new CommandError(
             "unavailable",
-            result.transient === true ? `${result.message} \u2014 the resident was unavailable for a moment; re-run the command` : result.message
+            result.transient === true ? `${result.message} \u2014 the resident was unavailable for a moment; Switchboard ended the command as unavailable` : result.message
           );
       }
     }
@@ -30633,7 +30716,7 @@ ${line4}`
             `\u2022 ${n(w.backupObjects)} snapshot backup object(s) in R2${ids}`,
             `\u2022 ${n(w.r2Objects)} object(s) under the resident's R2 prefix`,
             `\u2022 ${n(w.threadBindings)} thread binding(s) and the container (currently \`${String(w.container ?? "?")}\`)`,
-            `Nothing was changed. Run \`repo offboard ${slug}\` to execute.`
+            `Nothing was changed. Without \`--dry-run\`, \`repo offboard ${slug}\` performs this removal.`
           ].join("\n");
         }
         const errors = Array.isArray(o.errors) ? o.errors : [];
@@ -30673,7 +30756,7 @@ ${line4}`
             snap ? `\u2022 discard the snapshot from ${String(snap.createdAt ?? "?")} (${n(discards.backupObjects)} backup object(s); ids ${String(snap.mirrorBackupId ?? "?")}, ${String(snap.checkoutBackupId ?? "?")})` : "\u2022 discard no snapshot (none recorded)",
             `\u2022 reprovision from scratch on \`${String(reprov.defaultRef ?? "?")}\` (budget ${n(reprov.provisioningTimeoutMs)}ms)`,
             `\u2022 keep the registry record and ${n(keeps.threadBindings)} thread binding(s)`,
-            `Nothing was changed. Run \`repo rebuild ${slug}\` to execute.`
+            `Nothing was changed. Without \`--dry-run\`, \`repo rebuild ${slug}\` performs this rebuild.`
           ].join("\n");
         }
         return `\u{1F504} Rebuilding \`${slug}\`: discarded ${n(o.backupObjectsDeleted)} backup object(s); reprovisioning from scratch on \`${String(reprov.defaultRef ?? "?")}\` (state \`onboarding\` \u2014 I'll report here when it is warm or has failed; \`repo list\` shows the live state meanwhile).`;
@@ -31619,7 +31702,7 @@ function newestFinished(a, b) {
 }
 function hostedSealAnswer(units, runnerStopped) {
   const lines = units.map((u) => {
-    const how = u.ending ? u.ending.kind : u.threadKey !== void 0 ? "no ending was recorded \u2014 re-issue `agent:ship` in its thread to continue" : "not started";
+    const how = u.ending ? u.ending.kind : u.threadKey !== void 0 ? "no ending was recorded \u2014 the next reply in its thread continues the unit" : "not started";
     return `${u.unit} \u2014 ${how}${u.pr ? ` \u2014 ${u.pr.url}` : ""}`;
   });
   return [
@@ -32260,10 +32343,10 @@ async function abridgerOf(deps) {
 async function assertVisible(deps, id, caller) {
   const runs = await deps.review.runs();
   const res = await runs.getRun(id);
-  if (!res.ok) throw new CommandError("not_found", "run not found");
+  if (!res.ok) throw new CommandError("not_found", "no run found");
   const actor = caller.actor;
   if (!authorize(actor, "runs:read", runResource(res.value)).allow)
-    throw new CommandError("not_found", "run not found", "policy");
+    throw new CommandError("not_found", "no run found", "policy");
 }
 function refused2(err2) {
   if (err2 instanceof AbridgeRefusal) throw new CommandError(err2.code, err2.message);
@@ -32283,13 +32366,13 @@ var init_review = __esm({
     init_runsService();
     defineCommand19 = commandDefiner();
     runId = z22.string().regex(RUN_ID_PATTERN);
-    ABRIDGE_OFF_MESSAGE = "The abridged reading diff is off in this deployment: it needs the `meat` binary on the bot host, the Anthropic provider's credential, `review.readingDiff.provider` not `off`, and run history to store it.";
+    ABRIDGE_OFF_MESSAGE = "The abridged reading diff is off in this deployment: it needs the `meat` binary on the bot host, the Anthropic provider's credential, `review.readingDiff.provider` not `off`, plus history to store it.";
     reviewAbridge = defineCommand19({
       id: "review.abridge",
       // Hidden unless the abridging can happen here (the binary, the credential,
       // the switch) AND there is a record to append to.
       enabledWhen: (caps) => caps.runHistory && caps.readingDiffAbridge,
-      args: [{ name: "id", schema: runId, describe: "run id of a finished PR review" }],
+      args: [{ name: "id", schema: runId, describe: "id of a finished PR review run" }],
       options: z22.object({
         model: z22.string().min(1).optional().describe("meat's model (default review.readingDiff.meatModel; without either the abridge fails naming the key)"),
         force: flag.optional().describe("recompute even when an abridged diff is already stored, or retry a failed one"),
@@ -32329,7 +32412,7 @@ import { z as z23 } from "zod";
 function unwrap2(res, what = "run") {
   if (res.ok) return res.value;
   if (res.error === "hosted") throw new CommandError("conflict", HOSTED_STOP_REFUSAL);
-  throw new CommandError(res.error, res.error === "not_found" ? `${what} not found` : "run already finished");
+  throw new CommandError(res.error, res.error === "not_found" ? `no ${what} found` : "the run already finished");
 }
 async function getVisibleRun(runs, id, caller, action, deps, commandId, opts = {}) {
   const view = unwrap2(await runs.getRun(id, opts));
@@ -32337,7 +32420,7 @@ async function getVisibleRun(runs, id, caller, action, deps, commandId, opts = {
   const decision = authorize(actor, action, runResource(view));
   if (!decision.allow) {
     (deps.denied ?? logDenied)({ commandId, actorId: actor.id, action, reason: decision.reason });
-    throw new CommandError("not_found", "run not found");
+    throw new CommandError("not_found", "no run found");
   }
   return view;
 }
@@ -32468,7 +32551,7 @@ var init_runs = __esm({
     defineCommand20 = commandDefiner();
     runId2 = z23.string().regex(RUN_ID_PATTERN);
     positiveInt3 = z23.coerce.number().int().positive();
-    idArg = { name: "id", schema: runId2, describe: "run id" };
+    idArg = { name: "id", schema: runId2, describe: "id of the run" };
     HOSTED_STOP_REFUSAL = "this run is a pipeline; its units run in their own threads, so a soft stop ends nothing; `--mode hard` is the escape: it seals the run failed and releases the thread";
     NO_RUNS_NAME_PR = "no runs name this pull request";
     SESSION_SEARCH_DEFAULT_HITS = 10;
@@ -33036,8 +33119,8 @@ function capabilityLine(c) {
     `execution ${c.execution}`,
     `github ${onOff(c.github)}`,
     `memory ${onOff(c.memory)}`,
-    `run history ${onOff(c.runHistory)}`,
-    `run ledger ${onOff(c.runLedger)}`,
+    `history ${onOff(c.runHistory)}`,
+    `ledger ${onOff(c.runLedger)}`,
     `mcp ${onOff(c.mcp)}`,
     `costs ${onOff(c.costs)}`,
     `schedules ${onOff(c.schedules)}`,
@@ -34988,7 +35071,7 @@ function activityLine(e) {
     case "answer":
       return "answer ready";
     case "run_meta":
-      return "run context recorded";
+      return "context for the run recorded";
     // published straight to the registry too — never arrives here
     case "lease":
       return "lease started";
@@ -35278,13 +35361,13 @@ var init_reply = __esm({
       live_agent_allowlist: (p) => `\u{1F6AB} You're not on the allowlist for the \`${p.agent}\` agent, whose run is in flight in this thread. Ask ${p.adminsHint} for access.`,
       elsewhere_agent_allowlist: (p) => `\u{1F6AB} You're not on the allowlist for the \`${p.agent}\` agent, whose run is in flight in this thread. Ask ${p.adminsHint} for access.`,
       repo_not_visible: (p) => `\u{1F4E6} \`${p.slug}\` is not a repository this installation can see \u2014 GitHub answered 404 \u2014 so I did not start ${aRun(p.agent)} for it. The repository is outside the Switchboard GitHub App installation (\`github_repos\` lists the reachable ones), or the name is wrong.`,
-      repo_unverified: (p) => p.via === "github" ? `\u26A0\uFE0F I couldn't verify \`${p.slug}\` against GitHub \u2014 it didn't answer \u2014 so I did not start ${aRun(p.agent)} rather than guess which repository you meant. Try again in a minute.` : `\u26A0\uFE0F I couldn't verify that \`${p.slug}\` is an onboarded repo \u2014 the resident registry didn't answer \u2014 so I did not start a *${p.agent}* run rather than guess which repo you meant. Try again in a minute, or name the repository by URL (https://github.com/${p.slug}) to run in a cold per-thread sandbox.`,
+      repo_unverified: (p) => p.via === "github" ? `\u26A0\uFE0F This is a bug: I couldn't verify \`${p.slug}\` against GitHub because it did not answer, so I did not start ${aRun(p.agent)} and no automatic retry was scheduled.` : `\u26A0\uFE0F This is a bug: I couldn't verify that \`${p.slug}\` is an onboarded repo because the resident registry did not answer, so I did not start a *${p.agent}* run and no automatic fallback was started.`,
       repo_not_onboarded: (p) => `\u{1F4E6} \`${p.slug}\` is not onboarded as a resident, so I did not start a *${p.agent}* run for it. ${p.onboardHint} for a warm, deps-ready environment, or name the repository by URL (https://github.com/${p.slug}) to run in a cold per-thread sandbox.`,
       repo_access: (p) => `\u{1F6AB} You're not on the allowlist for the \`${p.repo}\` repo environment. Ask ${p.adminsHint} for access.`,
-      which_branch: (p) => `\u{1F33F} Which branch of \`${p.repo}\` should this thread work on? No branch is bound yet \u2014 reply naming one (e.g. "on main" or "on branch fix/login") and I'll pick it up from there.`,
+      which_branch: (p) => `\u{1F33F} Which branch of \`${p.repo}\` should this thread work on? No branch is bound yet; a branch token such as \`branch:main\` will bind it.`,
       ship_thread_live: () => "\u{1F6AB} A pipeline is already running in this thread \u2014 one pipeline per thread. Follow the one in flight here, or start this one in a thread of its own.",
       pipeline_thread_owned: (p) => `\u{1F6A6} This thread belongs to the live *${p.agent}* pipeline runner \u2014 nothing runs beside it here. ` + (p.units.length > 0 ? `Reply in the unit's own thread instead: ${p.units.map((u) => `${u.unit}${u.threadKey !== void 0 ? ` (\`${u.threadKey}\`)` : ""}`).join(", ")}.` : "Reply in the unit's own thread instead."),
-      ship_budget: (p) => `\u{1F6AB} Ship cannot start under a ${p.maxMinutes}-minute budget: the loop it allows (${p.maxRounds} review rounds) needs ${p.need} minutes \u2014 ${p.provision} to provision, the coding child's ${p.coding}, and the reserve for the rounds after it at their floors. Widen the budget or the boundary that clipped it, or run \`agent:coding\` for a single pass without the review loop.`
+      ship_budget: (p) => `\u{1F6AB} Ship cannot start under a ${p.maxMinutes}-minute budget: the loop it allows (${p.maxRounds} review rounds) needs ${p.need} minutes \u2014 ${p.provision} to provision, the coding child's ${p.coding}, and the reserve for the rounds after it at their floors. Switchboard left the budget and boundary unchanged and did not start either the review loop or a single coding pass.`
     };
     LONG_COMMAND_REPLY_CHARS = 3e3;
   }
@@ -35307,6 +35390,10 @@ function slugOf(token2) {
   if (!OWNER_RE.test(owner) || !NAME_RE.test(name) || /^\.+$/.test(name)) return void 0;
   return `${owner}/${name}`.toLowerCase();
 }
+function headBranchRef(text) {
+  const match = /^\s*(?:(?:<@[^>\s]+>|[a-z]+:\S+)\s+)*(?:in\s+\S+\s+)?on\s+(?:the\s+)?branch\s+(\S+?)\s*:/i.exec(text);
+  return match ? validRef(stripPunct(match[1])) : void 0;
+}
 function extractSignals(rawText) {
   const text = unwrapSlack(rawText);
   const out = {};
@@ -35315,8 +35402,9 @@ function extractSignals(rawText) {
     const slug = slugOf(`${stripPunct(prUrl3[1])}/${stripPunct(prUrl3[2])}`);
     if (slug) out.pr = { repo: slug, number: Number(prUrl3[3]) };
   }
-  const kw = /(?:^|\s)on\s+(?:the\s+)?branch\s+(\S+)/i.exec(text) ?? /(?:^|\s)branch[:=](\S+)/i.exec(text);
-  if (kw) out.ref = validRef(stripPunct(kw[1]));
+  out.ref = headBranchRef(text);
+  const branchToken = /(?:^|\s)branch:(\S+)/i.exec(text);
+  if (!out.ref && branchToken) out.ref = validRef(stripPunct(branchToken[1]));
   const treeUrl = /https?:\/\/(?:www\.)?github\.com\/([^/\s]+)\/([^/\s#?]+)\/tree\/([^\s?#]+)/i.exec(text);
   if (treeUrl) {
     const slug = slugOf(`${stripPunct(treeUrl[1])}/${stripPunct(treeUrl[2])}`);
@@ -35360,9 +35448,7 @@ function extractSignals(rawText) {
         out.addressed = { name: t.toLowerCase() };
     }
     if (prev === "on") {
-      if (!out.ref && WELL_KNOWN_REFS.has(t)) out.ref = t;
-      else if (!out.onSlug && slugOf(t) && validRef(t)) out.onSlug = t;
-      else if (!out.ref && t.includes("/") && !slugOf(t)) out.ref = validRef(t);
+      if (!out.onSlug && slugOf(t) && validRef(t)) out.onSlug = t;
       continue;
     }
     const prShort = /^([^/#\s]+)\/([^/#\s]+)#(\d+)$/.exec(t);
@@ -35465,13 +35551,9 @@ async function resolveRepoContext(msg, history = [], probe, residentSlugs, recor
   if (!repo && s.repo && await vet(s.repo)) repo = s.repo;
   let ref = s.ref;
   let refFromPr = false;
-  if (s.onSlug) {
-    if (repo && !ref) {
-      if (slugOf(s.onSlug) !== repo) ref = s.onSlug;
-    } else if (!repo) {
-      const cand = slugOf(s.onSlug);
-      if (cand && await vet(cand)) repo = cand;
-    }
+  if (s.onSlug && !repo) {
+    const cand = slugOf(s.onSlug);
+    if (cand && await vet(cand)) repo = cand;
   }
   if (repo) {
     rejected = void 0;
@@ -35688,7 +35770,7 @@ function prFacts(title, body) {
   if (last >= 55296 && last <= 56319) end--;
   return { title, body: body.slice(0, end), truncated: true };
 }
-var PR_BODY_CAP, OWNER_RE, NAME_RE, WELL_KNOWN_REFS, DETERMINERS, CODE_SPAN, threadSignalsCache, COMPARE_FILES_CAP;
+var PR_BODY_CAP, OWNER_RE, NAME_RE, DETERMINERS, CODE_SPAN, threadSignalsCache, COMPARE_FILES_CAP;
 var init_repoContext = __esm({
   "../../src/core/repoContext.ts"() {
     "use strict";
@@ -35699,7 +35781,6 @@ var init_repoContext = __esm({
     PR_BODY_CAP = 65536;
     OWNER_RE = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/;
     NAME_RE = /^[A-Za-z0-9._-]{1,100}$/;
-    WELL_KNOWN_REFS = /* @__PURE__ */ new Set(["main", "master", "develop", "trunk"]);
     DETERMINERS = /* @__PURE__ */ new Set(["the", "a", "an", "our", "my", "this"]);
     CODE_SPAN = /```[\s\S]*?```|`[^`\n]*`/g;
     threadSignalsCache = /* @__PURE__ */ new WeakMap();
@@ -35981,7 +36062,7 @@ function checkPrHeadPreflight(input) {
   return {
     ok: false,
     where,
-    reply: `\u{1F500} Review of ${where} not started: GitHub did not give me a usable head commit for the PR (the lookup failed, or answered without a well-formed SHA), so I cannot pin a review to it. Re-send the request in a moment; if it keeps failing, look at the PR on GitHub and at the bot's GitHub App credentials.`
+    reply: `\u{1F500} Review of ${where} not started: GitHub did not give me a usable head commit for the PR (the lookup failed, or answered without a well-formed SHA), so I cannot pin a review to it. This is a bug: no automatic head lookup retry was scheduled, and nothing was posted to GitHub.`
   };
 }
 async function guardAttachedHead(input) {
@@ -35996,7 +36077,7 @@ async function guardAttachedHead(input) {
     console.log(`[review] ${input.logKey} not started: ${namedSource} unreadable, PR head ${expected} (${where})`);
     return {
       outcome: "refused",
-      reply: `\u{1F500} Review of ${where} not started: ${namedSource} could not be read, so the workspace cannot be verified against PR head ${expected}. This infrastructure failure is not a finding and nothing was posted to GitHub; re-send the request after the workspace backend recovers.`
+      reply: `\u{1F500} Review of ${where} not started: ${namedSource} could not be read, so the workspace cannot be verified against PR head ${expected}. This is a bug: the infrastructure failure was not retried automatically. It is not a finding, and nothing was posted to GitHub.`
     };
   }
   if (sameCommit(expected, attached)) return { outcome: "verified" };
@@ -36010,7 +36091,7 @@ async function guardAttachedHead(input) {
   console.log(`[review] ${input.logKey} not started: ${namedSource} ${attached}, PR head ${expected} (${where})`);
   return {
     outcome: "refused",
-    reply: `\u{1F500} Review of ${where} not started: the ${namedSource} is at ${attached}, but the PR head is ${expected} \u2014 the branch moved while the workspace was being prepared (a push or force-push). This infrastructure mismatch is not a finding and nothing was posted to GitHub; re-send the request to review the new head.`
+    reply: `\u{1F500} Review of ${where} not started: the ${namedSource} is at ${attached}, but the PR head is ${expected} \u2014 the branch moved while the workspace was being prepared (a push or force-push). This is a bug: the workspace was not reprovisioned automatically at the new head. It is not a finding, and nothing was posted to GitHub.`
   };
 }
 function makeSystemComposer(input) {
@@ -36332,56 +36413,34 @@ function boundaryOf(scope) {
       return "the parent run's remaining budget";
   }
 }
-function wayForward(scope, axis, needs, adminsHint) {
+function boundaryOutcome(scope) {
   switch (scope) {
     case "channel":
-      return `run it in a channel that allows \`${needs}\`, or ask ${adminsHint} to raise this channel's boundary`;
+      return "Switchboard left this channel's boundary unchanged";
     case "user":
-      return `raise your own boundary with \`config set me --boundary.${axis} ${needs}\`, or drop your overrides with \`config clear me\``;
+      return "Switchboard left your boundary and overrides unchanged";
     case "defaults":
-      return `ask ${adminsHint} to raise \`defaults.boundary\` in the configuration`;
+      return "Switchboard left the installation's default boundary unchanged";
     case "directive":
-      return "send the message again without the budget directive";
+      return "Switchboard applied this message's budget directive";
     case "parent":
-      return `spawn it from a run with at least ${needs} left`;
+      return "Switchboard left the parent run's remaining budget unchanged";
   }
 }
-function minutesWayForward(scope, needs, adminsHint) {
-  switch (scope) {
-    case "directive":
-      return `send the message again with \`budget:${needs}\` or more`;
-    case "user":
-      return `raise your own boundary with \`config set me --boundary.maxMinutes ${needs}\`, or drop your overrides with \`config clear me\``;
-    case "channel":
-      return `run it in a channel whose boundary allows ${needs} minutes, or ask ${adminsHint} to raise this channel's boundary`;
-    case "defaults":
-      return `ask ${adminsHint} to raise \`defaults.boundary\` in the configuration`;
-    case "parent":
-      return `spawn it from a run with at least ${needs} minutes left`;
-  }
-}
-function profileRefusalReply(agentName, refusal, adminsHint) {
-  const capitalize = (s) => s.charAt(0).toUpperCase() + s.slice(1);
+function profileRefusalReply(agentName, refusal, _adminsHint) {
   if (refusal.axis === "identity") {
-    const how2 = wayForward(refusal.scope, "maxIdentity", refusal.needs, adminsHint);
-    return `\u{1F6AB} \`${agentName}\` needs a \`${refusal.needs}\` credential; ${boundaryOf(refusal.scope)} caps runs at \`${refusal.cap}\`. ${capitalize(how2)}.`;
+    const outcome = boundaryOutcome(refusal.scope);
+    return `\u{1F6AB} \`${agentName}\` needs a \`${refusal.needs}\` credential; ${boundaryOf(refusal.scope)} caps runs at \`${refusal.cap}\`. ${outcome} and did not start the run.`;
   }
   if (refusal.axis === "minutes") {
-    const how2 = minutesWayForward(refusal.scope, refusal.needs, adminsHint);
-    return `\u{1F6AB} \`${agentName}\` needs at least ${refusal.needs} minutes \u2014 a turn, then its write-up and post-step \u2014 and ${boundaryOf(refusal.scope)} gives it ${refusal.have}. ${capitalize(how2)}.`;
+    const outcome = boundaryOutcome(refusal.scope);
+    return `\u{1F6AB} \`${agentName}\` needs at least ${refusal.needs} minutes \u2014 a turn, then its write-up and post-step \u2014 and ${boundaryOf(refusal.scope)} gives it ${refusal.have}. ${outcome} and did not start the run.`;
   }
   const scopes = refusal.scopes.map(boundaryOf);
   const who2 = scopes.length > 1 ? `${scopes.join(" and ")} allow` : `${scopes[0] ?? "the boundary"} allows`;
   const allowed2 = refusal.allowed.map((m) => `\`${m}\``).join(", ");
-  const how = refusal.scopes.map(
-    (scope) => wayForward(
-      scope,
-      "machines",
-      scope === "user" ? `<classes including ${refusal.needs}>` : refusal.needs,
-      adminsHint
-    )
-  ).join("; ");
-  return `\u{1F6AB} \`${agentName}\` runs on a \`${refusal.needs}\` machine; ${who2} only ${allowed2}. ${capitalize(how)}.`;
+  const outcomes = refusal.scopes.map(boundaryOutcome).join("; ");
+  return `\u{1F6AB} \`${agentName}\` runs on a \`${refusal.needs}\` machine; ${who2} only ${allowed2}. ${outcomes}; it did not start the run.`;
 }
 function escapeRegExp2(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -36875,7 +36934,7 @@ function steerAck(live, now) {
 }
 function refusalReply(live, decision, now) {
   return `\u23F3 A *${live.agent}* run is already in flight in this thread (${elapsed(live, now)} in).${linkSuffix(live)}
-An \`agent:${decision.requestedAgent}\` request cannot start beside it \u2014 one run per thread. Wait for it to finish and re-send, or start a new thread.`;
+An \`agent:${decision.requestedAgent}\` request cannot start beside it \u2014 one run per thread \u2014 so this request was not started.`;
 }
 function followUpPrompt(inputs, opts = {}) {
   const body = inputs.map((i) => attributedText(attributed(i))).map((line4) => inputs.length > 1 ? `- ${line4}` : line4).join("\n");
@@ -37315,13 +37374,13 @@ async function steerRun2(deps, sender, target, text) {
   if (live && live.runId === target.runId) {
     live.inbox.push(followUpOf(msg, text, at, { ledgerSeq, ...sender.from ? { from: sender.from } : {} }));
     console.log(
-      `[steer] ${sender.from ? `run ${sender.from.runId}` : sender.userId} \u2192 ${target.agent} run ${target.runId} in ${target.threadKey} (${live.inbox.size} pending${ledgerSeq !== void 0 ? `, durable seq ${ledgerSeq}` : ""})`
+      `[steer] ${sender.from ? `the run ${sender.from.runId}` : sender.userId} \u2192 the ${target.agent} run ${target.runId} in ${target.threadKey} (${live.inbox.size} pending${ledgerSeq !== void 0 ? `, durable seq ${ledgerSeq}` : ""})`
     );
     return { kind: "steered", where: "here", at, ...ledgerSeq !== void 0 ? { ledgerSeq } : {} };
   }
   if (ledgerSeq !== void 0) {
     console.log(
-      `[steer] ${sender.from ? `run ${sender.from.runId}` : sender.userId} \u2192 ${target.agent} run ${target.runId} live on another generation (durable seq ${ledgerSeq})`
+      `[steer] ${sender.from ? `the run ${sender.from.runId}` : sender.userId} \u2192 the ${target.agent} run ${target.runId} live on another generation (durable seq ${ledgerSeq})`
     );
     return { kind: "steered", where: "elsewhere", at, ledgerSeq };
   }
@@ -37337,7 +37396,7 @@ function createSteerSender(deps) {
   return {
     async send(runId3, words, caller) {
       const run2 = deps.runs.getById(runId3);
-      if (!run2) throw new CommandError("not_found", `run ${runId3} is not known here.`);
+      if (!run2) throw new CommandError("not_found", `the run ${runId3} is not known here.`);
       const owner = authorizeSteerOwner({
         caller: { ids: caller.actor.self ?? [caller.actor.id], grants: effectiveGrants(caller.actor) },
         target: {
@@ -37352,7 +37411,7 @@ function createSteerSender(deps) {
       const ended = run2.finished || run2.threadKey === void 0 || run2.agent === void 0;
       if (ended) {
         const when = run2.finishedAt !== void 0 ? `at ${new Date(run2.finishedAt).toISOString()}` : "before this steer arrived";
-        throw new CommandError("conflict", `run ${runId3} ended ${when}; nothing to steer.`);
+        throw new CommandError("conflict", `the run ${runId3} ended ${when}; nothing to steer.`);
       }
       const out = await steerRun2(
         deps,
@@ -37383,7 +37442,7 @@ function createSteerSender(deps) {
         case "not_live":
           throw new CommandError(
             "conflict",
-            `run ${runId3} ended while the steer was being delivered; nothing to steer.`
+            `the run ${runId3} ended while the steer was being delivered; nothing to steer.`
           );
       }
     }
@@ -38955,11 +39014,11 @@ var init_confirm = __esm({
     init_runOwner();
     init_commandRun();
     init_route();
-    OFFER_EXPIRED_LINE = "this offer expired; its ten minutes passed \u2014 type the line to run it";
-    QUESTION_EXPIRED_LINE = "this question expired; its day passed \u2014 type the line to run it";
+    OFFER_EXPIRED_LINE = "this offer expired after ten minutes; nothing ran, and a later request may receive a fresh confirmation";
+    QUESTION_EXPIRED_LINE = "this question expired after one day; nothing ran, and a later request may receive a fresh question";
     OFFER_FOREIGN_LINE = "only the requester can confirm this";
     OFFER_USED_LINE = "this offer was already used";
-    OFFER_UNREADABLE_LINE = "the confirmation could not be read; type the line to run it";
+    OFFER_UNREADABLE_LINE = "this is a bug: the confirmation could not be read, so nothing ran and no replacement offer was minted";
     OFFER_CANCELLED_LINE = "Cancelled; nothing ran";
     CONFIRMED_REASON = "confirmed after offer";
     REFUSED_REASON = "refused after offer";
@@ -39366,7 +39425,7 @@ function resolveTarget2(deps, ctx) {
     throw new RefusalError(
       refusalOf(
         "model_card_refused",
-        `Model "${resolved.modelRef}" speaks the openai-responses wire, which the "opencode" harness cannot speak yet: run it on pi, or use an openai-chat block.`
+        `Model "${resolved.modelRef}" speaks the openai-responses wire, which the "opencode" harness cannot speak yet; this request needs the pi harness or an openai-chat block.`
       )
     );
   }
@@ -40661,8 +40720,8 @@ async function executeOperatorDecision(deps, ctx) {
         await recordOperatorDecision(deps, msg, event, ctx.ending, ctx.trace);
         return answered;
       }
-      const cell4 = decideExecution({ kind: "run_command", confirm: "at_or_above", mintable: false }, surface);
-      const text = cell4.cell === "refuse" && cell4.names === "typed_form" ? renderHandBackLine(bind.line) : mint !== void 0 && mint.kind === "unshowable" ? UNSHOWABLE_LINE : STORE_UNREACHABLE_LINE;
+      const cell3 = decideExecution({ kind: "run_command", confirm: "at_or_above", mintable: false }, surface);
+      const text = cell3.cell === "refuse" && cell3.names === "typed_form" ? renderHandBackLine(bind.line) : mint !== void 0 && mint.kind === "unshowable" ? UNSHOWABLE_LINE : STORE_UNREACHABLE_LINE;
       await io.reply(`${verbose ? `${receipt}
 ` : ""}${text}`);
       await recordOperatorDecision(deps, msg, event, ctx.ending, ctx.trace);
@@ -43049,7 +43108,7 @@ async function spawnChild(deps, parent, request2) {
   if (AGENTS[request2.preset]?.identity === "write") {
     return refused7(
       "spawn_identity",
-      `\`${request2.preset}\` runs as a \`write\` identity \u2014 it pushes branches and opens pull requests \u2014 and a spawned child never writes: it reads this conversation and reports; the person who asked starts that work by hand with \`agent:${request2.preset}\``
+      `\`${request2.preset}\` runs as a \`write\` identity \u2014 it pushes branches and opens pull requests \u2014 so this run was not started: spawned children read this conversation and report, but never write`
     );
   }
   const childPreset = LOOP_PRESETS.includes(request2.preset) ? request2.preset : "general";
@@ -44108,7 +44167,7 @@ function encodeGithubPathSegments(path) {
 function anchorUrl(ctx, a) {
   return `https://github.com/${ctx.repo}/blob/${ctx.headSha}/${encodeGithubPathSegments(a.path)}#L${a.from}-L${a.to}`;
 }
-function cell3(s) {
+function cell2(s) {
   return s.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\s*\n\s*/g, " ");
 }
 function linkLabel(s) {
@@ -44146,7 +44205,7 @@ function renderPrDescriptionMarkdown(desc, ctx) {
     ...details(FOLD_SUMMARIES.validation(desc.validation.criteria.length), [
       "| Criterion | Proof |",
       "|---|---|",
-      ...desc.validation.criteria.map((c) => `| ${cell3(c.criterion)} | ${cell3(c.proof)} |`)
+      ...desc.validation.criteria.map((c) => `| ${cell2(c.criterion)} | ${cell2(c.proof)} |`)
     ])
   );
   const agentLines = [
@@ -46265,28 +46324,32 @@ function windDownAnswer(ending, maxMinutes, facts2) {
       return unlabelledAnswer(ending.text, ending.writeUpFailed, ending.ended, facts2);
   }
 }
-function established(facts2, advice) {
-  const then = advice ? ` \u2014 ${advice}` : "";
+function established(facts2) {
   const w = facts2?.workspace;
   let tree = "";
-  if (w?.kind === "unmeasured") tree = `The workspace could not be measured, so work may sit unpushed there${then}.`;
+  if (w?.kind === "unmeasured") tree = "The workspace could not be measured, so work may sit unpushed there.";
   else if (w?.kind === "clean")
     tree = `The tree was clean${w.branch ? ` and \`${w.branch}\` held no unpushed commits` : " with no unpushed commits"}${w.head ? ` \u2014 its head \`${shortSha2(w.head)}\` is on the remote` : ""}.`;
   else if (w?.kind === "salvaged")
     tree = `What the tree held was pushed to \`${w.branch}\`${w.head ? ` at \`${shortSha2(w.head)}\`` : ""} by the budget salvage, unreviewed \u2014 a follow-up starts from it.`;
   else if (w?.kind === "left")
-    tree = w.fate === "kept" ? `${counted(w)} sit in the workspace, kept for this thread until it idles out \u2014 a follow-up here reuses them.` : w.fate === "discarded" ? `${counted(w)} were left in the tree and discarded at the run's end${then}.` : `${counted(w)} were left in the tree, which is torn down since a command may still be running in it${then}.`;
+    tree = w.fate === "kept" ? `${counted(w)} sit in the workspace, kept for this thread until it idles out \u2014 a follow-up here reuses them.` : w.fate === "discarded" ? `${counted(w)} were left in the tree and discarded at the run's end.` : `${counted(w)} were left in the tree, which is torn down since a command may still be running in it.`;
   const description = facts2?.description === "submitted" ? "The PR description was submitted." : facts2?.description === "not_submitted" ? "No PR description was submitted." : "";
   return [tree, description].filter((s) => s !== "").join(" ");
 }
-function nothingWritten(facts2, advice) {
-  const known = established(facts2, advice);
-  if (known) return ` ${known}`;
-  if (facts2?.workspace?.kind === "none") return advice ? ` ${advice.charAt(0).toUpperCase()}${advice.slice(1)}.` : "";
-  return ` Partial work may exist in the workspace${advice ? ` \u2014 ${advice}` : ""}.`;
+function gapApplies(facts2) {
+  const w = facts2?.workspace;
+  return w === void 0 || w.kind === "unread" || w.kind === "unmeasured" || w.kind === "none" || w.kind === "left" && w.fate !== "kept";
+}
+function nothingWritten(facts2, gap) {
+  const gapSentence = gap && gapApplies(facts2) ? `${gap.charAt(0).toUpperCase()}${gap.slice(1)}.` : "";
+  const known = established(facts2);
+  if (known) return ` ${[gapSentence, known].filter((s) => s !== "").join(" ")}`;
+  if (facts2?.workspace?.kind === "none") return gapSentence ? ` ${gapSentence}` : "";
+  return ` Partial work may exist in the workspace${gap ? ` \u2014 ${gap}` : ""}.`;
 }
 function beforeFindings(facts2) {
-  const known = established(facts2, void 0);
+  const known = established(facts2);
   return known ? `. ${known} Findings so far:` : " \u2014 findings so far:";
 }
 function elapsedMinutes(ms) {
@@ -46310,10 +46373,10 @@ var init_windDown = __esm({
     MODEL_CALL_IN_FLIGHT = "a model call was in flight";
     timeBudgetNote = (doing) => doing ? `the loop's time is up while ${doing} \u2014 writing up findings so far inside the lease` : "the loop's time is up \u2014 writing up findings so far inside the lease";
     toolCutNote = (doing) => `the loop's end cut the command in flight (${doing}) so the write-up keeps its allowance`;
-    commandPastLoopEndRefusal = (askedSecs, leftSecs) => `budget \u2014 this command asked for a ${askedSecs} s timeout and the loop ends in ${leftSecs} s, so it could never finish: re-issue it with a timeout inside the ${leftSecs} s left if it finishes sooner, or push what you have and write up \u2014 the full verification is CI's.`;
+    commandPastLoopEndRefusal = (askedSecs, leftSecs) => `budget \u2014 this command asked for a ${askedSecs} s timeout and the loop ends in ${leftSecs} s, so it could never finish. A timeout inside the ${leftSecs} s left can still finish; otherwise the current work and write-up stand, and CI owns full verification.`;
     turnGuardNote = (pace) => `turn guard fired: ${pace}, a pace that looks like a loop \u2014 writing up findings so far`;
     softStopNote = () => "soft stop \u2014 no further steps, writing up findings so far";
-    hardStopNote = () => "hard stop \u2014 run aborted, no summary written";
+    hardStopNote = () => "hard stop \u2014 the run was aborted, no summary written";
     windDownFailureNote = (error, closes = "run") => `the model call failed during the wind-down (${error}); the ${closes} closes with its findings so far`;
     finaleWaitNote = (reason2, doing, interruptUnanswered, closes = "run") => `the finale bound ended the wait${doing ? ` while ${doing}` : ""}${interruptUnanswered ? ", the loop-end interrupt unanswered" : ""} (${reason2}); the ${closes} closes with its findings so far`;
     finaleTimedOutNote = (closes = "run") => `finale timed out \u2014 closing the ${closes} without a write-up`;
@@ -46337,14 +46400,14 @@ var init_windDown = __esm({
     wrapUpName = (kind) => kind === "time" ? "time-budget" : kind === "turns" ? "turn-guard" : "soft-stop";
     finaleAbortReason = (boundMs) => `aborted at the finale bound (${elapsedMinutes(boundMs)})`;
     noWriteUp = (failed, onTool) => failed ? onTool ? `; the finale bound ended the wait on a tool call (${failed}), so no write-up came` : `; the model call failed during the wind-down (${failed}), so no write-up came` : "";
-    TIME_ADVICE = "narrow the task and try again";
-    TURN_ADVICE = "look for a retry loop in the run's events before trying again";
+    TIME_ADVICE = "this is a bug: the task outlived its run budget and no automatic continuation was scheduled";
+    TURN_ADVICE = "this is a bug: a retry loop spent the turn guard and no automatic recovery was scheduled";
     shortSha2 = (sha) => sha.slice(0, 7);
     counted = (w) => `${w.uncommitted} uncommitted change(s) and ${w.unpushed} unpushed commit(s)`;
     timeBudgetAnswer = (text, maxMinutes, writeUpFailed, facts2, writeUpFailedOnTool) => text ? `\u26A0\uFE0F _Hit the ${maxMinutes}-minute budget before finishing${beforeFindings(facts2)}_
 
 ${text}` : `Stopped at the ${maxMinutes}-minute budget without finishing${noWriteUp(writeUpFailed, writeUpFailedOnTool)}.${nothingWritten(facts2, TIME_ADVICE)}`;
-    turnGuardAnswer = (text, pace, writeUpFailed, facts2, writeUpFailedOnTool) => text ? `\u26A0\uFE0F _Stopped after ${pace} \u2014 that pace looks like a loop${established(facts2, void 0) ? beforeFindings(facts2) : "; findings so far:"}_
+    turnGuardAnswer = (text, pace, writeUpFailed, facts2, writeUpFailedOnTool) => text ? `\u26A0\uFE0F _Stopped after ${pace} \u2014 that pace looks like a loop${established(facts2) ? beforeFindings(facts2) : "; findings so far:"}_
 
 ${text}` : `Stopped after ${pace} \u2014 that pace looks like a loop \u2014 without finishing${noWriteUp(writeUpFailed, writeUpFailedOnTool)}.${nothingWritten(facts2, TURN_ADVICE)}`;
     unlabelledAnswer = (text, writeUpFailed, ended = "failed", facts2) => {
@@ -50645,6 +50708,11 @@ async function salvageBudgetPush(executor, opts, span) {
     nothing: `the coding child ended with nothing to preserve: the tree is clean and \`${opts.branch}\` holds no unpushed commits`,
     pushedLead: "the coding child ended with interrupted work",
     failedLead: `the interrupted-work push to \`${opts.branch}\` failed`
+  } : opts.cue === "completion" ? {
+    commit: "wip: preserve unfinished coding work \u2014 work in progress, not reviewed",
+    nothing: `the coding child ended with nothing to preserve: the tree is clean and \`${opts.branch}\` holds no unpushed commits`,
+    pushedLead: "the coding child ended with unfinished work",
+    failedLead: `the unfinished-work push to \`${opts.branch}\` failed`
   } : {
     commit: "wip: committed at the budget wind-down \u2014 work in progress, not reviewed",
     nothing: nothingToSalvageNote(opts.branch),
@@ -50653,7 +50721,7 @@ async function salvageBudgetPush(executor, opts, span) {
   };
   try {
     const dirty = (await run2("git status --porcelain")).trim() !== "";
-    const endingCheckpoint = opts.cue !== "compaction";
+    const endingCheckpoint = opts.cue !== "compaction" && opts.cue !== "completion";
     if (dirty) {
       await run2("git add -A");
       await run2(`git commit -m ${shellQuote(words.commit)}`);
@@ -51618,8 +51686,6 @@ async function runLoop(deps, ctx) {
   const preserveCodingChildWork = async (cue) => {
     if (workSalvageAttempted || !isCodingPrRun || coordinator === void 0) return;
     if (!workspaceObserved) await observeWorkspaceNow();
-    workSalvageAttempted = true;
-    if (cue === "ending") endingSalvageAttempted = true;
     const target = salvageTargetOf({
       pushedBranch: pushes.branch(),
       checkedOut: observedCheckedOut,
@@ -51629,6 +51695,10 @@ async function runLoop(deps, ctx) {
       cue === "budget" ? "run.budget_salvage" : "run.work_salvage",
       (span) => salvageBudgetPush(executor, { branch: target.branch, cue }, span)
     );
+    const cleanCompletion = cue === "completion" && !salvaged.pushed && (/ended with nothing to preserve/i.test(salvaged.summary) || "skipped" in target && (observedUncommitted ?? 0) === 0 && (observedUnpushed ?? 0) === 0);
+    if (cleanCompletion) return;
+    workSalvageAttempted = true;
+    if (cue === "ending" || cue === "completion") endingSalvageAttempted = true;
     onEvent({
       type: "run_note",
       kind: cue === "budget" ? "budget_salvage" : "work_salvage",
@@ -52068,6 +52138,7 @@ async function runLoop(deps, ctx) {
     if (endingNeedsPreservation && run2.control.requested === "hard") await endHarness();
     if (isCodingPrRun && !tailSkipped()) await observeWorkspaceNow();
     if (endingNeedsPreservation) await preserveCodingChildWork(budgetEnded ? "budget" : "ending");
+    else if (isCodingPrRun && coordinator !== void 0 && !tailSkipped()) await preserveCodingChildWork("completion");
     let descriptionTurnRan = false;
     if (isCodingPrRun && !tailSkipped() && !endingSalvageAttempted && prDescription === void 0) {
       const turnTarget = await descriptionTurnTarget({
@@ -52103,6 +52174,7 @@ async function runLoop(deps, ctx) {
         if (!run2.control.hardSignal.aborted) await observeWorkspaceNow();
       }
     }
+    if (descriptionTurnRan) await preserveCodingChildWork("completion");
     await endHarness();
     const leftBehind = isCodingPrRun && !tailSkipped() && !workSalvageAttempted ? workLeftBehindOf({ uncommittedChanges: observedUncommitted, unpushedCommits: observedUnpushed }) : void 0;
     const endingFacts = () => {
@@ -52448,14 +52520,6 @@ function shipUnitText(requestText, repo) {
   t = t.replace(new RegExp(`^\\s*in\\s+${escapeRegExp3(repo)}\\s*:?`, "i"), " ");
   return t.replace(/\s+/g, " ").trim();
 }
-function refNamedExplicitly(requestText, ref) {
-  const text = requestText.replace(SLACK_LINK, " $1 ");
-  const strip = (s) => s.replace(/^[("'`<[{*]+/, "").replace(/[)"'`>\]}.,;:!?*]+$/, "");
-  const kw = /(?:^|\s)on\s+(?:the\s+)?branch\s+(\S+)/i.exec(text) ?? /(?:^|\s)branch[:=](\S+)/i.exec(text);
-  if (kw && strip(kw[1]) === ref) return true;
-  const treeUrl = /https?:\/\/(?:www\.)?github\.com\/[^/\s]+\/[^/\s#?]+\/tree\/([^\s?#]+)/i.exec(text);
-  return treeUrl !== void 0 && treeUrl !== null && strip(treeUrl[1]) === ref;
-}
 function noRepoGuess(input) {
   const candidates = input.repoCandidates ?? [];
   if (candidates.length === 0) return void 0;
@@ -52549,18 +52613,9 @@ async function shipPreflight(input) {
           );
         }
         const ownBase = facts2.baseRef ?? repoCtx.baseRef;
-        if (ownBase !== void 0 && input.refExists) {
-          const exists = await input.refExists(repo, ownBase).catch(() => void 0);
-          if (exists === false) {
-            return refuse2(
-              "ship_preflight_base_missing",
-              "base ref missing",
-              "not started (base ref missing)",
-              `\u{1F6AB} ${where}'s base branch \`${ownBase}\` does not exist on \`${repo}\` \u2014 refusing fail-closed. Retarget the pull request at an existing branch first.`
-            );
-          }
-        }
-        const base = resolveBaseRef([ownBase], info?.defaultBranch);
+        const ownBaseExists = ownBase !== void 0 && input.refExists ? await input.refExists(repo, ownBase).catch(() => void 0) : void 0;
+        const baseFallback = ownBase !== void 0 && ownBaseExists === false ? { requested: ownBase } : void 0;
+        const base = resolveBaseRef([ownBaseExists === false ? void 0 : ownBase], info?.defaultBranch);
         const autoMerge = facts2.autoMergeEnabled !== void 0 ? { autoMergeEnabled: facts2.autoMergeEnabled } : {};
         if (task) {
           return {
@@ -52570,6 +52625,7 @@ async function shipPreflight(input) {
               branch: branch2,
               base,
               adopt: { pr: repoCtx.pr, ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {} },
+              ...baseFallback !== void 0 ? { baseFallback } : {},
               ...autoMerge
             }
           };
@@ -52585,6 +52641,7 @@ async function shipPreflight(input) {
               headSha: facts2.headSha ?? repoCtx.headSha,
               ...facts2.htmlUrl !== void 0 ? { url: facts2.htmlUrl } : {}
             },
+            ...baseFallback !== void 0 ? { baseFallback } : {},
             ...autoMerge
           }
         };
@@ -52610,20 +52667,11 @@ async function shipPreflight(input) {
   const ref = repoCtx.ref && !repoCtx.refFromPr && !isUnitBranch(repoCtx.ref) && repoCtx.ref.toLowerCase() !== repo.toLowerCase() ? repoCtx.ref : void 0;
   if (ref !== void 0 && input.refExists) {
     const exists = await input.refExists(repo, ref).catch(() => void 0);
-    if (exists === false) {
-      if (refNamedExplicitly(input.requestText, ref)) {
-        return refuse2(
-          "ship_preflight_base_missing",
-          "base ref missing",
-          "not started (base ref missing)",
-          `\u{1F6AB} The branch \`${ref}\` does not exist on \`${repo}\` \u2014 nothing was started. Name an existing branch, or drop it to run on the default branch.`
-        );
-      }
+    if (exists === false)
       return {
         ok: true,
         entry: { repo, base: info?.defaultBranch, baseFallback: { requested: ref } }
       };
-    }
   }
   return {
     ok: true,
@@ -52840,12 +52888,12 @@ async function handOffToCoordinator(deps, input) {
   if (status3.kind === "unanswered")
     return refused5(
       "plan_runner_state_unknown",
-      `\u26A0\uFE0F The plan runner could not tell whether \`${latest.id}\` still runs: ${status3.reason}. Nothing ran; re-issue the request to try again.`
+      `\u26A0\uFE0F This is a bug: the plan runner could not tell whether \`${latest.id}\` still runs (${status3.reason}), so nothing ran and no automatic state retry was scheduled.`
     );
   if (status3.kind === "status" && RUNNING.has(status3.status))
     return refused5(
       "plan_runner_live",
-      `\u{1F6AB} A runner for ${where} is still running (\`${latest.id}\`, status: ${status3.status}): wait for it to end \u2014 or terminate it in the Workflows dashboard \u2014 before re-issuing.`
+      `\u{1F6AB} A runner for ${where} is still running (\`${latest.id}\`, status: ${status3.status}), so this request started no second runner.`
     );
   if (status3.kind === "status" && !ENDED.has(status3.status))
     return refused5(
@@ -52909,7 +52957,7 @@ async function start(deps, input, instance, units, where, write) {
       );
     return refused5(
       "plan_runner_conflict",
-      `\u{1F6AB} A runner for \`${instance.id}\` was just recorded by another request \u2014 re-issue in a minute if it did not start.`
+      `\u{1F6AB} A runner for \`${instance.id}\` was just recorded by another request, so this request started nothing; the recorded runner owns the pipeline.`
     );
   }
   const rows = await deps.instances.putUnits(units);
@@ -52967,7 +53015,7 @@ async function start(deps, input, instance, units, where, write) {
       log(`[ship] ${input.msg.threadKey}: the plan runner ${instance.id} could not be started \u2014 ${answer.reason}`);
       return refused5(
         "plan_start_failed",
-        `\u26A0\uFE0F The plan runner could not be started: ${answer.reason}. Nothing ran; re-issue the request to try again.`
+        `\u26A0\uFE0F This is a bug: the plan runner could not be started (${answer.reason}), nothing ran, and no automatic start retry was scheduled.`
       );
   }
 }
@@ -53550,7 +53598,7 @@ function settleThread(deps, ctx) {
     console.log(`[dispatch] ${msg.threadKey} ${fromRuns} steer(s) from a parent run never read \u2014 not run fresh`);
   const stopMode = stopCounts ? control?.requested : void 0;
   if (pending2.length > 0 && stopMode) {
-    console.log(`[dispatch] ${msg.threadKey} ${pending2.length} follow-up(s) dropped: run stopped (${stopMode})`);
+    console.log(`[dispatch] ${msg.threadKey} ${pending2.length} follow-up(s) dropped: the run stopped (${stopMode})`);
     return { kind: "dropped", stopMode, pending: pending2 };
   }
   if (pending2.length > 0 && admitted) {
@@ -53601,7 +53649,7 @@ var init_settle = __esm({
     init_requestTrace();
     init_threadAdmission();
     init_admission();
-    FOLLOW_UP_DROPPED_BY_STOP = "\u26D4 The run this was folded into was stopped before it read this follow-up, so it was not run. Re-send it to run it fresh.";
+    FOLLOW_UP_DROPPED_BY_STOP = "\u26D4 This is a bug: the run was stopped before it read this folded follow-up, and the follow-up was not replayed as a fresh request.";
     fromPerson = (p) => p.from === void 0 && p.io !== void 0;
   }
 });
@@ -53624,7 +53672,7 @@ function carriedCoordinatorTag(row2, events) {
 }
 function lostWorkspaceNote(why, restarts) {
   const lost = `resumed after a restart: the run's workspace could not be re-attached (${why})`;
-  return restarts ? `${lost}; the run restarts from its request under the same run id` : `${lost}, and the row's request cannot be read, so the run ends here; re-send it to run it again`;
+  return restarts ? `${lost}; the run restarts from its request under the same run id` : `${lost}; this is a bug: the row's request cannot be read, so the run ends here and no replacement run starts`;
 }
 function carriedRunIdentity(registry, runId3, note) {
   const snap = registry.snapshotById(runId3);
@@ -53669,7 +53717,7 @@ async function abandonLostWorkspace(ctx) {
       shell.close({
         kind: "not_started",
         icon: "\u{1F501}",
-        reason: restored ? "workspace lost across the restart; restarting from the request" : "workspace lost across the restart; re-send to run again",
+        reason: restored ? "workspace lost across the restart; restarting from the request" : "this is a bug: the workspace was lost across the restart, the request could not be read, and no replacement run starts",
         ...closeLines(clock4(), false)
       })
     );
@@ -54063,7 +54111,7 @@ async function answerUnitOwnedThread(deps, ctx) {
     ...msg.userName !== void 0 ? { senderName: msg.userName } : {},
     text: ctx.text,
     ...attachments.length > 0 ? { attachments } : {},
-    mode: "steer",
+    mode: owner.unit.idle !== void 0 ? "wake" : "steer",
     at
   }).catch((err2) => {
     console.warn(
@@ -54347,7 +54395,7 @@ async function dispatch(deps, msg, io, opts = {}) {
         const original = await shipRequestOf(runsService, owner.run.id);
         if (original === void 0) {
           await io.reply(
-            "This ship pipeline ended, but its original task could not be read; what task should this thread re-issue?"
+            "This ship pipeline ended, but its original task could not be read. What was the pipeline's original task?"
           );
           await recordPendingOperator();
           return ended;
@@ -54361,7 +54409,7 @@ async function dispatch(deps, msg, io, opts = {}) {
         ({ sticky, resolved, agentSource } = settled);
         agentSource = "sticky";
       }
-      if (owner.kind === "unit" && directives.agent === void 0) {
+      if (owner.kind === "unit" && (directives.agent === void 0 || owner.unit.idle?.humanGate !== void 0)) {
         if ((await authorizeAgent(deps, { msg, io, refuse: refuse3, agentName: "coding" })).kind === "refused") {
           await recordPendingOperator();
           return ended;
@@ -62636,7 +62684,7 @@ function findOrphanedCards(input) {
 }
 function interruptedCardFrame(cardText) {
   const label = cardText.replace(LIVE_GLYPH_PREFIX, "").replace(SHUTDOWN_NOTICE_SUFFIX, "").replace(ACTIVITY_SUFFIX, "").replaceAll("&lt;", "<").replaceAll("&gt;", ">").replaceAll("&amp;", "&").trim();
-  const detail = "The bot restarted (a deploy) while this run was in flight, so the run was lost and this card stopped updating. Re-send your request to run it again.";
+  const detail = "This is a bug: the bot restarted while this run was in flight, but the run could not be resumed from the ledger. The card stopped updating and no replacement run was started.";
   return { title: `\u274C interrupted \xB7 ${label}`, detail };
 }
 async function catchUpMissedMentions(opts) {
@@ -63793,7 +63841,7 @@ var init_slack = __esm({
     PLATFORM3 = "slack";
     SLACK_MSG_LIMIT = 3500;
     SLACK_SECTION_LIMIT = 3e3;
-    CLICK_FAILED_LINE = "this click could not be handled; type the line to run it";
+    CLICK_FAILED_LINE = "this click could not be handled; nothing ran, and the command line remains visible in the offer";
     LOADING_PHRASES = [
       "is patching you through\u2026",
       "is untangling the cords\u2026",
@@ -65372,7 +65420,7 @@ function serveEvents(subscribe, sink, onLive) {
   );
   if (!subscribed) {
     sink.writeHead(404, { "content-type": "text/plain; charset=utf-8" });
-    sink.write("run not found");
+    sink.write("no run found");
     sink.end();
     return;
   }
@@ -65663,7 +65711,7 @@ function createLiveViewHandler(deps) {
   };
   const liveTokens = () => new Map(index.listActive().map((s) => [s.id, s.token]));
   const notFoundPage = (req, res, viewer) => {
-    deps.page(req, res, 404, viewer, "Run not found", {
+    deps.page(req, res, 404, viewer, "No run found", {
       page: "runNotFound",
       retentionDays: deps.retention ? deps.retention.retentionDays : null
     });
@@ -65861,7 +65909,7 @@ function createLiveViewHandler(deps) {
         }
         const result = access.requestStop(mode);
         if (!result.ok) {
-          if (result.reason === "finished") text(res, 409, "run already finished");
+          if (result.reason === "finished") text(res, 409, "the run already finished");
           else if (result.reason === "hosted") text(res, 409, HOSTED_STOP);
           else text(res, 404, NOT_FOUND2);
           return true;
@@ -65895,13 +65943,13 @@ function createLiveViewHandler(deps) {
           return;
         }
         if (found.value.finished) {
-          text(res, 409, "run already finished");
+          text(res, 409, "the run already finished");
           return;
         }
         const stopped = await service.stopRun(route2.id, mode, { kind: "access", id: actor.id });
         if (!stopped.ok) {
           if (stopped.error === "hosted") text(res, 409, HOSTED_STOP);
-          else if (stopped.error === "conflict") text(res, 409, "run already finished");
+          else if (stopped.error === "conflict") text(res, 409, "the run already finished");
           else text(res, 404, NOT_FOUND2);
           return;
         }
@@ -66036,7 +66084,7 @@ var init_liveView = __esm({
     INDEX_PAGE_SIZE = 25;
     RUNS_GET = { type: "command", id: "runs.get" };
     RUNS_STOP = { type: "command", id: "runs.stop" };
-    NOT_FOUND2 = "run not found";
+    NOT_FOUND2 = "no run found";
     HOSTED_STOP = "this run is a pipeline; its units run in their own threads, so a stop here ends nothing; an operator's hard stop seals it failed and releases the thread";
     TEXT = { "content-type": "text/plain; charset=utf-8" };
     JSON_NO_STORE2 = { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" };
@@ -66954,7 +67002,7 @@ function createWebChatHandler(deps) {
     const threadKey = threadKeyFor(sub, route2.id);
     readTurns(threadKey, ctx.actor).then(async (open2) => {
       if (open2.runs.length === 0 && !ownLane(sub, threadKey)) {
-        deps.page(req, res, 404, ctx.actor, "Run not found", { page: "runNotFound", retentionDays });
+        deps.page(req, res, 404, ctx.actor, "No run found", { page: "runNotFound", retentionDays });
         return;
       }
       const seed = await seedFor(ctx, route2.id, threadKey, open2);
@@ -67236,14 +67284,14 @@ function createMetricsViewHandler(service, page2) {
         json2(res, report2);
         return;
       }
-      page2(req, res, 200, ctx.actor, "Run metrics", { page: "metrics", report: report2 });
+      page2(req, res, 200, ctx.actor, "Metrics by run", { page: "metrics", report: report2 });
     }).catch((err2) => {
       const message4 = err2 instanceof Error ? err2.message : String(err2);
       if (message4 === METRICS_OFF_MESSAGE) {
         plain3(res, 503, METRICS_OFF_MESSAGE);
         return;
       }
-      plain3(res, 503, `run metrics unavailable: ${err2 instanceof Error ? err2.name : "Error"}`);
+      plain3(res, 503, `metrics by run unavailable: ${err2 instanceof Error ? err2.name : "Error"}`);
     });
     return true;
   };
@@ -68053,7 +68101,7 @@ async function complete(svc, nonce, identity2, token2, res) {
       res,
       400,
       "Token rejected by the server",
-      `<p class="err">${esc(warning ?? "the server rejected the token")}</p><p>Nothing was stored. Check the token and try again.</p>${server ? entryForm(server, nonce) : ""}`
+      `<p class="err">${esc(warning ?? "the server rejected the token")}</p><p>Nothing was stored. This is a bug: the token was refused and no fresh sign-in was opened automatically.</p>${server ? entryForm(server, nonce) : ""}`
     );
   }
   return connected(res, server, toolCount, warning);
@@ -68201,7 +68249,12 @@ function page(res, status3, title, body, head = "") {
 }
 function failure(res, err2) {
   console.error(`[mcp-connect] ${err2 instanceof Error ? err2.message : String(err2)}`);
-  page(res, 503, "Registry unavailable", "<p>The MCP registry could not be reached. Try again in a moment.</p>");
+  page(
+    res,
+    503,
+    "Registry unavailable",
+    "<p>This is a bug: the MCP registry could not be reached and no automatic retry was scheduled.</p>"
+  );
 }
 function esc(s) {
   return s.replace(
@@ -68330,8 +68383,8 @@ function closureNote(agent, prUrl3, cause) {
   if (agent === "ship")
     return shipInterruptedNote(prUrl3, cause === "resident_replaced" ? "container_replaced" : "bot_restart");
   if (cause !== void 0)
-    return `This run ended \u2014 ${endingCauseWords(cause)} \u2014 and it could not be resumed, so this card stopped updating. Re-send your request to run it again.`;
-  return "The bot restarted while this run was in flight and it could not be resumed, so this card stopped updating. Re-send your request to run it again.";
+    return `This is a bug: this run ended \u2014 ${endingCauseWords(cause)} \u2014 but it could not be resumed from the ledger. This card stopped updating and no replacement run was started.`;
+  return "This is a bug: the bot restarted while this run was in flight, but the run could not be resumed from the ledger. This card stopped updating and no replacement run was started.";
 }
 function prUrlOf(events) {
   let url;
@@ -68876,14 +68929,14 @@ var init_resumeLaunch = __esm({
 });
 
 // ../../src/core/runnerOwnership.ts
-async function recoverRunnerOwnedPulls(instanceIds, instances) {
-  const owned = /* @__PURE__ */ new Set();
+async function recoverRunnerOwnedPullOwners(instanceIds, instances) {
+  const owned = /* @__PURE__ */ new Map();
   for (const instanceId of new Set(instanceIds)) {
     const instance = await instances.get(instanceId);
     if (instance === null) continue;
     for (const unit of await instances.listUnits(instanceId)) {
       if (unit.pr !== void 0 && unit.ending === void 0)
-        owned.add(runnerOwnedPullKey(instance.repo, unit.pr.number));
+        owned.set(runnerOwnedPullKey(instance.repo, unit.pr.number), { instanceId, unit: unit.unit });
     }
   }
   return owned;
@@ -68896,24 +68949,35 @@ var init_runnerOwnership = __esm({
     RunnerOwnershipFence = class {
       claimed = /* @__PURE__ */ new Set();
       recovered = /* @__PURE__ */ new Set();
+      claimedOwners = /* @__PURE__ */ new Map();
+      recoveredOwners = /* @__PURE__ */ new Map();
       localRecoveredInstances = /* @__PURE__ */ new Set();
       recoveryComplete;
       constructor(requiresRecovery) {
         this.recoveryComplete = !requiresRecovery;
       }
-      claim(repo, prNumber) {
-        this.claimed.add(runnerOwnedPullKey(repo, prNumber));
+      claim(repo, prNumber, owner) {
+        const key = runnerOwnedPullKey(repo, prNumber);
+        this.claimed.add(key);
+        if (owner !== void 0) this.claimedOwners.set(key, owner);
       }
       release(repo, prNumber) {
         const key = runnerOwnedPullKey(repo, prNumber);
         this.claimed.delete(key);
         this.recovered.delete(key);
+        this.claimedOwners.delete(key);
+        this.recoveredOwners.delete(key);
       }
       owns(repo, prNumber) {
         if (!this.recoveryComplete) throw new Error("runner ownership recovery is still in progress");
         const key = runnerOwnedPullKey(repo, prNumber);
         return this.claimed.has(key) || this.recovered.has(key);
       }
+      owner(repo, prNumber) {
+        if (!this.recoveryComplete) throw new Error("runner ownership recovery is still in progress");
+        const key = runnerOwnedPullKey(repo, prNumber);
+        return this.claimedOwners.get(key) ?? this.recoveredOwners.get(key);
+      }
       async recover(outcome, instances) {
         for (const run2 of outcome.resumable) {
           if (run2.kind === "rehost" && run2.hosting !== void 0) this.localRecoveredInstances.add(run2.hosting.instanceId);
@@ -68925,9 +68989,13 @@ var init_runnerOwnership = __esm({
         for (const run2 of outcome.liveElsewhere) {
           if (run2.hosting !== void 0) activeRunnerInstances.add(run2.hosting.instanceId);
         }
-        const recovered = await recoverRunnerOwnedPulls(activeRunnerInstances, instances);
+        const recovered = await recoverRunnerOwnedPullOwners(activeRunnerInstances, instances);
         this.recovered.clear();
-        for (const key of recovered) this.recovered.add(key);
+        this.recoveredOwners.clear();
+        for (const [key, owner] of recovered) {
+          this.recovered.add(key);
+          this.recoveredOwners.set(key, owner);
+        }
         this.recoveryComplete = true;
       }
     };
@@ -69400,10 +69468,14 @@ ${cont.texts.join("\n\n")}`);
 }
 function findingsRequest(input) {
   const findings = input.findings.map(formatFinding).join("\n") || "(the review listed no structured findings, address its prose)";
+  const answers = input.answers !== void 0 && input.answers.length > 0 ? `
+
+A person answered the human-gated finding. Treat the finding and this answer together as the fix brief:
+${input.answers.join("\n\n")}` : "";
   return `The review of ${input.where} requested changes. Load the \`address-review-findings\` skill and address every finding below, nits included: record one disposition per finding with submit_dispositions (fixed or declined, with a note), squash to coherent commits, resubmit the pull request description with submit_pr_description, and push the branch. Never merge and never approve.
 
 Findings:
-${findings}
+${findings}${answers}
 
 Review:
 ${input.review}`;
@@ -69422,7 +69494,8 @@ ${task}` : task;
     case "review": {
       let prior;
       if (brief.prior !== void 0) {
-        const findings = [...(await facts(readers, brief.prior.reviewRunId)).findings ?? [], ...brief.checks ?? []];
+        const reviewFindings = brief.prior.findings ?? (brief.prior.reviewRunId !== void 0 ? (await facts(readers, brief.prior.reviewRunId)).findings ?? [] : []);
+        const findings = [...reviewFindings, ...brief.checks ?? []];
         const recorded = brief.prior.codingRunId !== void 0 ? (await facts(readers, brief.prior.codingRunId)).dispositions ?? [] : [];
         const { matched, dropped } = matchDispositions(findings, recorded);
         prior = { findings, dispositions: matched, dropped };
@@ -69440,13 +69513,14 @@ ${task}` : task;
 ${turn}`, contract };
     }
     case "findings": {
-      const review = await facts(readers, brief.reviewRunId);
+      const review = brief.reviewRunId !== void 0 ? brief.findings !== void 0 ? await readers.readRunFacts(brief.reviewRunId) ?? {} : await facts(readers, brief.reviewRunId) : {};
       return {
         preset: "coding",
         prompt: findingsRequest({
           where,
-          findings: [...review.findings ?? [], ...brief.checks ?? []],
-          review: review.finalReply ?? ""
+          findings: [...brief.findings ?? review.findings ?? [], ...brief.checks ?? []],
+          review: review.finalReply ?? "",
+          ...brief.answers !== void 0 ? { answers: brief.answers } : {}
         }),
         ref: unit.branch
       };
@@ -69455,7 +69529,7 @@ ${turn}`, contract };
       return {
         preset: "coding",
         ref: unit.branch,
-        prompt: `The approved pull request ${prUrl(instance.repo, brief.pr)} conflicts with \`${brief.base}\` at reviewed head \`${brief.headSha}\`. Rebase \`${unit.branch}\` onto the latest \`${brief.base}\`, resolve only the conflicts git left using the thread and repository rules, run the changed-set fast gates, and push with lease. Resubmit the pull request description at the pushed head. Never merge and never approve; the pipeline re-reviews the changed patch.`
+        prompt: `The approved pull request ${prUrl(instance.repo, brief.pr)} conflicts with \`${brief.base}\` at reviewed head \`${brief.headSha}\`. Rebase \`${unit.branch}\` onto the latest \`${brief.base}\`, resolve only the conflicts git left using the thread and repository rules, and make the lease-protected push only after the changed-set fast gates pass. Resubmit the pull request description at the pushed head. Never merge and never approve; the pipeline re-reviews the changed patch.`
       };
     default: {
       const unknown = brief;
@@ -69465,7 +69539,7 @@ ${turn}`, contract };
 }
 async function facts(readers, runId3) {
   const read = await readers.readRunFacts(runId3);
-  if (!read) throw new Error(`run ${runId3} is not in the run history`);
+  if (!read) throw new Error(`the run ${runId3} is not in history`);
   return read;
 }
 var SPECS_DIR2, RULES_FILES2, isGenerated, prUrl;
@@ -69920,6 +69994,10 @@ ${foldThreadEvents(folded)}` };
     at
   });
 }
+function reviewAskedAtOf(events) {
+  const posted = [...events ?? []].reverse().find((event) => event.type === "review_posted");
+  return posted?.type === "review_posted" && typeof posted.at === "number" ? posted.at : void 0;
+}
 function finalReplyOf2(events) {
   const last = [...events ?? []].reverse().find((e) => e.type === "answer");
   return last && last.type === "answer" ? last.text : void 0;
@@ -69954,6 +70032,74 @@ async function reviewPostedAt(deps, pr, verdict, head) {
     (r) => r.author?.login === self.login && (r.author.id === void 0 || r.author.id === self.id) && r.commitId !== void 0 && sameCommit(r.commitId.toLowerCase(), head) && r.body.startsWith(token2)
   );
 }
+function legacyPostedFinding(value, body) {
+  if (isFindingShape(value)) return value;
+  if (typeof value !== "object" || value === null) return void 0;
+  const row2 = value;
+  if (row2.title !== void 0 || typeof row2.id !== "string" || typeof row2.severity !== "string") return void 0;
+  const prefix = `| ${row2.severity} | **${escapeMarkdownTableCell(row2.id)}** `;
+  const header4 = "| Severity | Finding | Where |\n| --- | --- | --- |\n";
+  const tableStart = body.indexOf(header4);
+  if (tableStart < 0) return void 0;
+  const table = body.slice(tableStart + header4.length).split("\n\n", 1)[0];
+  const titles = table.split("\n").filter((line4) => line4.startsWith(prefix)).flatMap((line4) => {
+    const tail = line4.slice(prefix.length);
+    const boundary = tail.lastIndexOf(" | ");
+    return boundary > 0 ? [unescapeMarkdownTableCell(tail.slice(0, boundary)).trim()] : [];
+  }).filter(Boolean);
+  if (titles.length !== 1) return void 0;
+  const recovered = { ...row2, title: titles[0] };
+  return isFindingShape(recovered) ? recovered : void 0;
+}
+async function postedHumanGateAnswer(deps, pr, requester, addressSeverity) {
+  if (deps.fetchPrComments === void 0) return void 0;
+  const [reviews, comments, self] = await Promise.all([
+    deps.fetchPrReviews(pr).catch(() => void 0),
+    deps.fetchPrComments(pr).catch(() => void 0),
+    deps.selfIdentity().catch(() => void 0)
+  ]);
+  if (reviews === void 0 || comments === void 0 || self === void 0) return void 0;
+  const own = reviews.filter(
+    (review) => review.author?.login === self.login && (review.author.id === void 0 || review.author.id === self.id) && review.submittedAt !== void 0 && Number.isFinite(Date.parse(review.submittedAt))
+  ).sort((a, b) => Date.parse(a.submittedAt) - Date.parse(b.submittedAt)).at(-1);
+  if (own === void 0) return void 0;
+  const marker = /<!-- switchboard:verdict (\{[^\n]*\}) -->/.exec(own.body);
+  if (marker === null) return void 0;
+  let payload;
+  try {
+    payload = JSON.parse(marker[1]);
+  } catch {
+    return void 0;
+  }
+  if (typeof payload !== "object" || payload === null) return void 0;
+  const row2 = payload;
+  if (row2.verdict !== "approve" && row2.verdict !== "request_changes") return void 0;
+  if (!Array.isArray(row2.findings)) return void 0;
+  const postedFindings = row2.findings.map((finding) => legacyPostedFinding(finding, own.body));
+  if (!postedFindings.every((finding) => finding !== void 0)) return void 0;
+  const findings = row2.verdict === "approve" ? findingsAtOrAbove(postedFindings, addressSeverity) : postedFindings;
+  if (findings.length === 0 || !findings.every((finding) => finding.humanGated === true)) return void 0;
+  const candidates = comments.filter(
+    (comment) => comment.author.type === "User" && comment.body.trim() !== "" && Number.isFinite(Date.parse(comment.createdAt)) && Date.parse(comment.createdAt) >= githubSecondStart(Date.parse(own.submittedAt))
+  ).sort((a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt));
+  let answer;
+  for (const candidate of candidates) {
+    const authorized = await deps.commenterAuthorized(requester, candidate.author).catch(() => false);
+    if (authorized) {
+      answer = candidate;
+      break;
+    }
+  }
+  if (answer === void 0) return void 0;
+  return {
+    round: 1,
+    findings,
+    verdict: row2.verdict,
+    answer: answer.body.trim(),
+    author: answer.author.login,
+    commentId: String(answer.id)
+  };
+}
 async function reviewPostedAtPatiently(deps, pr, verdict, head) {
   const sleep2 = deps.sleep ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
   let answer;
@@ -69986,6 +70132,7 @@ async function readRecord(body, deps) {
   const full = await deps.runs.getRun(body.runId, { include: "messages" });
   const record2 = full.ok ? full.value : view;
   const finalReply = finalReplyOf2(record2.events);
+  const reviewAskedAt = reviewAskedAtOf(record2.events);
   const pr = prOpenedOf(record2.events);
   const instanceRow = await deps.instances.get(id.value);
   if (view.status === "interrupted") {
@@ -70027,6 +70174,7 @@ async function readRecord(body, deps) {
       ...pr !== void 0 ? { pr } : {},
       ...record2.verdict !== void 0 ? { verdict: record2.verdict } : {},
       ...record2.reviewHead !== void 0 ? { reviewHead: record2.reviewHead } : {},
+      ...reviewAskedAt !== void 0 ? { reviewAskedAt } : {},
       ...posted !== void 0 ? { reviewPosted: posted.reviewPosted } : {},
       ...posted?.reviewPostReason !== void 0 ? { reviewPostReason: posted.reviewPostReason } : {},
       ...record2.dispositions !== void 0 ? { dispositions: record2.dispositions } : {},
@@ -70172,11 +70320,20 @@ async function prCheck(body, deps) {
     const open2 = await deps.findOpenPrByHead(instance.repo, branch2);
     if (open2) {
       await remember({ number: open2.number, url: open2.htmlUrl });
-      deps.runnerOwnership?.claim(instance.repo, open2.number);
+      deps.runnerOwnership?.claim(instance.repo, open2.number, {
+        instanceId: instance.id,
+        unit: unit.row?.unit ?? body.unit
+      });
       const entryFacts = entry ? await deps.fetchPrFacts({ repo: instance.repo, number: open2.number }).catch(() => void 0) : void 0;
       const branchHead = entryFacts?.headSha;
       const entryHead = branchHead ?? open2.headSha;
       const approved = entry && entryHead !== void 0 ? await reviewPostedAt(deps, { repo: instance.repo, number: open2.number }, "approve", entryHead) : void 0;
+      const humanGate = entry ? await postedHumanGateAnswer(
+        deps,
+        { repo: instance.repo, number: open2.number },
+        instance.userId,
+        instance.addressSeverity ?? DEFAULT_ADDRESS_SEVERITY
+      ) : void 0;
       const entryChecks = entry && entryHead !== void 0 ? await deps.fetchCommitChecks(instance.repo, entryHead).catch(() => void 0) : void 0;
       const checks = body.checks === true && open2.headSha !== void 0 ? await deps.fetchCommitChecks(instance.repo, open2.headSha).catch(() => void 0) : entryChecks;
       const prRef = { repo: instance.repo, number: open2.number };
@@ -70192,6 +70349,7 @@ async function prCheck(body, deps) {
         ...open2.headSha !== void 0 ? { headSha: open2.headSha } : {},
         ...branchHead !== void 0 ? { branchHead } : {},
         ...approved !== void 0 ? { approved } : {},
+        ...humanGate !== void 0 ? { humanGate } : {},
         // The pull request's own auto-merge fact (agent-ship item 9), so a
         // merge_ready ending can name it at the approved head.
         ...open2.autoMergeEnabled !== void 0 ? { autoMergeEnabled: open2.autoMergeEnabled } : {},
@@ -70551,6 +70709,7 @@ function parseIdle(ending, runId3, at) {
     ...typeof runId3 === "string" && RUN_ID_PATTERN.test(runId3) ? { runId: runId3 } : {},
     spendUsd: typeof ending.spendUsd === "number" && Number.isFinite(ending.spendUsd) ? ending.spendUsd : null,
     ...isHandoffShape(ending.handoff) ? { handoff: ending.handoff } : {},
+    ...isHumanGatePending(ending.humanGate) ? { humanGate: ending.humanGate } : {},
     wakes: 0
   };
 }
@@ -70590,20 +70749,37 @@ async function unitWake(body, deps) {
   }
   const events = await deps.instances.listEvents({ instanceId: instance.id, unit: row2.unit }, true);
   const idle = row2.idle;
+  const askedAt = idle.humanGate?.askedAt;
+  const wakeEvents = askedAt !== void 0 ? events.filter(
+    (event) => event.id?.startsWith("github:issue-comment:") ? event.at >= githubSecondStart(askedAt) : event.at > askedAt
+  ) : events;
   const senderOf = (e) => e.senderName ?? e.sender;
-  const senders = [...new Set(events.map(senderOf))];
-  const requesterWoke = events.some((event) => event.sender === instance.userId);
-  const stopperWoke = events.some((event) => event.mode === "interrupt");
+  const senders = [...new Set(wakeEvents.map(senderOf))];
+  const requesterWoke = wakeEvents.some((event) => event.sender === instance.userId);
+  const stopperWoke = wakeEvents.some((event) => event.mode === "interrupt");
   const grantFact = deps.shipGrantFor?.(instance) ?? {
     grant: instance.grant ?? DEFAULT_GRANT,
     source: instance.grantSource ?? "org"
   };
   const renewalsSpent = row2.segments?.length ?? 0;
   let answer;
-  if (events.length === 0) {
+  if (wakeEvents.length === 0) {
     answer = { kind: "answered", reply: "Nothing new was waiting for this unit." };
   } else if (idle.wakes + 1 >= IDLE_WAKES_MAX) {
     answer = { kind: "expired" };
+  } else if (idle.humanGate !== void 0) {
+    answer = {
+      kind: "segment",
+      index: row2.segments?.at(-1)?.index ?? 1,
+      ...idle.from !== void 0 ? { from: idle.from } : {},
+      ...idle.runId !== void 0 ? { runId: idle.runId } : {},
+      spendUsd: idle.spendUsd,
+      ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
+      texts: wakeEvents.map(attributedText),
+      senders,
+      leaseMs: minutesToMs(instance.caps?.maxMinutes ?? resolveShipCaps(void 0).maxMinutes),
+      humanGate: idle.humanGate
+    };
   } else {
     const segmentStart = row2.segments?.at(-1)?.at ?? row2.startedAt ?? idle.at;
     const leaseMs = Math.max(
@@ -70618,7 +70794,7 @@ async function unitWake(body, deps) {
         ...idle.runId !== void 0 ? { runId: idle.runId } : {},
         spendUsd: idle.spendUsd,
         ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
-        texts: events.map(attributedText),
+        texts: wakeEvents.map(attributedText),
         senders,
         leaseMs
       };
@@ -70643,18 +70819,18 @@ async function unitWake(body, deps) {
           ...idle.runId !== void 0 ? { runId: idle.runId } : {},
           spendUsd: idle.spendUsd,
           ...idle.handoff !== void 0 ? { handoff: idle.handoff } : {},
-          texts: events.map(attributedText),
+          texts: wakeEvents.map(attributedText),
           senders
         };
       } else {
         answer = {
           kind: "answered",
-          reply: `${renderRenewal(decision, grantFact.grant, { idle: true })} (grant from ${grantFact.source}); run \`runs stop ${instance.id}:${row2.unit}\` to end this idle unit.`
+          reply: `${renderRenewal(decision, grantFact.grant, { idle: true })} (grant from ${grantFact.source}); the idle unit remains open, and \`runs stop ${instance.id}:${row2.unit}\` is its stop command.`
         };
       }
     }
   }
-  const countedIdle = events.length > 0 ? { ...idle, wakes: idle.wakes + 1 } : idle;
+  const countedIdle = wakeEvents.length > 0 ? { ...idle, wakes: idle.wakes + 1 } : idle;
   const segments2 = row2.segments ?? [];
   const updated = {
     ...row2,
@@ -70837,12 +71013,14 @@ ${rendered}` : "");
       )
     );
   }
-  if (ending.kind === "held" && updated.pr !== void 0) {
-    await deps.github.commentIssue(instance.repo, updated.pr.number, `**Plan runner \u2014 ${row2.unit} held**
+  const parkedHumanGate = ending.kind === "idle" && idle?.humanGate !== void 0;
+  if ((ending.kind === "held" || parkedHumanGate) && updated.pr !== void 0) {
+    const state = parkedHumanGate ? "waiting for a person" : "held";
+    await deps.github.commentIssue(instance.repo, updated.pr.number, `**Plan runner \u2014 ${row2.unit} ${state}**
 
 ${ending.report}`).catch(
       (err2) => (deps.log ?? console.warn)(
-        `[coordinator] ${instance.id} ${row2.unit}: the held report could not be posted on the pull request: ${describe11(err2)}`
+        `[coordinator] ${instance.id} ${row2.unit}: the human-gated report could not be posted on the pull request: ${describe11(err2)}`
       )
     );
   }
@@ -70877,7 +71055,10 @@ async function rebaseStep(body, deps) {
   if (!row2) return json3(404, { ok: false, error: "unknown_unit", at });
   if (row2.pr?.number !== void 0 && row2.pr.number !== body.prNumber)
     return json3(409, { ok: false, error: "pull_request_moved", at });
-  deps.runnerOwnership?.claim(instance.repo, body.prNumber);
+  deps.runnerOwnership?.claim(instance.repo, body.prNumber, {
+    instanceId: instance.id,
+    unit: row2.unit
+  });
   if (deps.runnerRebase === void 0)
     return json3(200, { ok: true, outcome: "refused", reason: "the runner's rebase resolver is unavailable", at });
   try {
@@ -71034,7 +71215,7 @@ async function merge(body, deps, subject2) {
   const enqueue = async () => {
     if (deps.enqueuePullRequest === void 0)
       return refused7(
-        `\`${facts2.baseRef ?? "the base"}\` takes changes only through a merge queue and the door cannot enqueue \u2014 enqueue ${where} by hand (\`gh pr merge --auto\`); the approved work stands`
+        `\`${facts2.baseRef ?? "the base"}\` takes changes only through a merge queue and the door cannot enqueue \u2014 this is a bug: automatic merge-queue enqueue is unavailable; the approved work stands`
       );
     let queued;
     try {
@@ -71133,7 +71314,7 @@ async function checksStep(body, deps) {
 function planSummary(units, generated = false) {
   const lines = units.map((u) => {
     const kind = u.ending ? u.ending.kind : u.threadKey ? "unfinished" : "not started";
-    const how = u.ending ? endingWordOf(u.ending.kind) : u.threadKey ? "no ending was recorded \u2014 re-issue `agent:ship` in its thread to continue" : kind;
+    const how = u.ending ? endingWordOf(u.ending.kind) : u.threadKey ? "no ending was recorded \u2014 the next reply in its thread continues the unit" : kind;
     const pr = u.pr ? ` \u2014 ${u.pr.url}` : "";
     return generated ? `${ENDING_ICON[kind] ?? "\u2022"} ${how}${pr}` : `${ENDING_ICON[kind] ?? "\u2022"} ${u.unit} \u2014 ${how}${pr}`;
   });
@@ -71324,7 +71505,7 @@ function createAdminCoordinatorHandler(deps) {
     })();
   };
 }
-var COORDINATOR_ADMIN_PREFIX, MAX_SPAWN_PROMPT_CHARS, FINISHED_LOOKBACK_PAGES, MAX_ADMIN_BODY_BYTES, UNIT_ID, PRESETS_OF_KIND, invalid, json3, describe11, isGenerated2, EVERY_RUN, REVIEW_POSTED_CHECKS, REVIEW_POSTED_RECHECK_MS, ROUND_OUTCOMES, ENDING_ICON, STEPS;
+var COORDINATOR_ADMIN_PREFIX, MAX_SPAWN_PROMPT_CHARS, FINISHED_LOOKBACK_PAGES, MAX_ADMIN_BODY_BYTES, UNIT_ID, PRESETS_OF_KIND, invalid, json3, describe11, isGenerated2, EVERY_RUN, REVIEW_POSTED_CHECKS, REVIEW_POSTED_RECHECK_MS, githubSecondStart, ROUND_OUTCOMES, ENDING_ICON, STEPS;
 var init_adminCoordinator = __esm({
   "../../src/channels/adminCoordinator.ts"() {
     "use strict";
@@ -71376,6 +71557,7 @@ var init_adminCoordinator = __esm({
     EVERY_RUN = { kind: "all" };
     REVIEW_POSTED_CHECKS = 3;
     REVIEW_POSTED_RECHECK_MS = 2e3;
+    githubSecondStart = (at) => Math.floor(at / SECOND_MS) * SECOND_MS;
     ROUND_OUTCOMES = [
       "started",
       "pr_opened",
@@ -71479,6 +71661,56 @@ async function handleCheckRunIntake(headers, rawBody, deps) {
     body: { ok: true, settled: true, sent: sends.filter((s) => s.kind === "sent").length, of: instances.length }
   };
 }
+async function handleIssueCommentIntake(headers, rawBody, deps) {
+  if (deps.secret === void 0 || deps.secret === "") return { status: 503, body: { error: "disabled" } };
+  if (headers.signature === void 0 || !await verifyWebhookSignature(deps.secret, rawBody, headers.signature))
+    return { status: 401, body: { error: "unauthorized" } };
+  if (headers.event !== "issue_comment") return { status: 200, body: { ok: true, ignored: "event" } };
+  let payload;
+  try {
+    payload = JSON.parse(rawBody);
+  } catch {
+    return { status: 400, body: { error: "invalid_json" } };
+  }
+  if (typeof payload !== "object" || payload === null) return { status: 400, body: { error: "invalid_body" } };
+  const p = payload;
+  if (p.action !== "created") return { status: 200, body: { ok: true, ignored: "action" } };
+  if (p.issue?.pull_request === void 0) return { status: 200, body: { ok: true, ignored: "issue" } };
+  const repo = p.repository?.full_name;
+  const prNumber = p.issue.number;
+  const comment = p.comment;
+  if (typeof repo !== "string" || repo === "" || typeof prNumber !== "number" || !Number.isInteger(prNumber) || typeof comment?.id !== "number" || typeof comment.body !== "string" || typeof comment.created_at !== "string" || typeof comment.user?.login !== "string" || typeof comment.user.type !== "string")
+    return { status: 400, body: { error: "invalid_body" } };
+  if (comment.user.type !== "User") return { status: 200, body: { ok: true, ignored: "sender" } };
+  let owner;
+  try {
+    owner = deps.ownerOf(repo, prNumber);
+  } catch {
+    return { status: 503, body: { error: "ownership_unavailable" } };
+  }
+  if (owner === void 0) return { status: 200, body: { ok: true, ignored: "unowned" } };
+  const instance = await deps.instances.get(owner.instanceId);
+  if (instance === null) return { status: 200, body: { ok: true, ignored: "ended" } };
+  const authorized = await deps.commenterAuthorized(instance.userId, {
+    login: comment.user.login,
+    ...typeof comment.user.id === "number" ? { id: comment.user.id } : {}
+  }).catch(() => false);
+  if (!authorized) return { status: 200, body: { ok: true, ignored: "sender" } };
+  const row2 = (await deps.instances.listUnits(owner.instanceId)).find((unit) => unit.unit === owner.unit);
+  if (row2 === void 0 || row2.ending !== void 0) return { status: 200, body: { ok: true, ignored: "ended" } };
+  const created = Date.parse(comment.created_at);
+  const appended = await deps.instances.appendEvent(owner, {
+    id: `github:issue-comment:${comment.id}`,
+    sender: `github:${typeof comment.user.id === "number" ? comment.user.id : comment.user.login}`,
+    senderName: comment.user.login,
+    text: comment.body,
+    mode: row2.idle !== void 0 ? "wake" : "steer",
+    at: Number.isFinite(created) ? created : deps.now()
+  });
+  if (!appended.ok) return { status: 503, body: { error: "store_unavailable" } };
+  const sent = await sendUnitNudge(deps.workflow, owner);
+  return { status: 200, body: { ok: true, appended: true, seq: appended.seq, nudge: sent.kind } };
+}
 async function handlePushIntake(headers, rawBody, deps) {
   if (deps.secret === void 0 || deps.secret === "") return { status: 503, body: { error: "disabled" } };
   if (headers.signature === void 0 || !await verifyWebhookSignature(deps.secret, rawBody, headers.signature))
@@ -71528,7 +71760,14 @@ function createGithubWebhookHandler(deps) {
       event: one(req.headers[GITHUB_EVENT_HEADER]),
       signature: one(req.headers[GITHUB_SIGNATURE_HEADER])
     };
-    const result = headers.event === "push" ? await handlePushIntake(headers, body.body, { secret: deps.secret, watch: deps.watch }) : await handleCheckRunIntake(headers, body.body, deps);
+    const result = headers.event === "push" ? await handlePushIntake(headers, body.body, { secret: deps.secret, watch: deps.watch }) : headers.event === "issue_comment" && deps.ownerOf !== void 0 && deps.instances !== void 0 && deps.commenterAuthorized !== void 0 && deps.now !== void 0 ? await handleIssueCommentIntake(headers, body.body, {
+      secret: deps.secret,
+      ownerOf: deps.ownerOf,
+      instances: deps.instances,
+      commenterAuthorized: deps.commenterAuthorized,
+      workflow: deps.workflow,
+      now: deps.now
+    }) : await handleCheckRunIntake(headers, body.body, deps);
     answer(result.status, result.body);
   };
 }
@@ -71786,14 +72025,17 @@ async function sweepOne(pr, deps, owner) {
     return at("skipped", "deferred \u2014 its pipeline runner owns the rebase");
   const dirty = pr.mergeableState === "dirty";
   if (!dirty && (pr.mergeableState === "unknown" || pr.mergeableState === ""))
-    return at("skipped", "mergeability still computing \u2014 run the sweep again in a minute");
+    return at("skipped", "mergeability still computing \u2014 no rebase was attempted");
   if (!dirty) return at("skipped", "skipped, already current");
   try {
     const rebased = await deps.git.rebase(pr);
     const decision = rebased.kind === "conflict" ? owner === "runner" ? { action: "model-round", file: rebased.file } : decideSweep({ dirty, rebase: rebased, modelRoundSpent: await deps.effects.modelRoundSpent(pr) }) : decideSweep({ dirty, rebase: rebased, patchUnchanged: await deps.git.patchUnchanged(pr, rebased.newHead) });
     switch (decision.action) {
       case "end":
-        return at("conflict", `conflict in ${decision.file}, its fix round is spent \u2014 rebase it by hand`);
+        return at(
+          "conflict",
+          `this is a bug: the conflict in ${decision.file} remained after the sweep's fix round, and no automatic recovery remains`
+        );
       case "model-round": {
         if (owner === "runner")
           return at("conflict", `conflict in ${decision.file}, the pipeline runner's fix round will resolve it`);
@@ -72598,9 +72840,16 @@ async function runBot() {
         );
       }
     });
+    const commenterAuthorized = async (requester, author) => {
+      const binding = await bindingOf(requester, config);
+      return binding !== void 0 && author.id === binding.id && author.login.toLowerCase() === binding.login.toLowerCase();
+    };
     const githubWebhook = createGithubWebhookHandler({
       secret: processSecrets.get("GITHUB_WEBHOOK_SECRET")?.reveal(),
       watch: mergeWatch,
+      ownerOf: (repo, prNumber) => runnerOwnership.owner(repo, prNumber),
+      instances: coordinatorInstances,
+      commenterAuthorized,
       checksSettled: async (repo, headSha) => {
         const checks = await fetchCommitChecks(repo, headSha);
         return checks !== void 0 && checks.total > 0 && checks.pending.length === 0;
@@ -72662,6 +72911,8 @@ async function runBot() {
       github: deps.githubApi ?? new RestGithubApi(),
       createBranchRef,
       fetchPrReviews: fetchPullRequestReviews,
+      fetchPrComments: fetchPullRequestComments,
+      commenterAuthorized,
       // The merge step (record 0031's merge grant): the pull request as GitHub has it, the checks at its head, the squash.
       fetchPrFacts: fetchPullRequestFacts,
       fetchCommitChecks,
@@ -73288,6 +73539,7 @@ var init_index = __esm({
     init_pullSweepWiring();
     init_githubApi();
     init_githubApp();
+    init_authorBinding();
     init_identityRewrite();
     init_run2();
     init_record();
@@ -73581,7 +73833,7 @@ function askExitCode(finished) {
 function missingBotConfig(configPath) {
   return new CommandError(
     "unavailable",
-    `bot config not found at ${configPath} \u2014 set SWITCHBOARD_CONFIG to a config file or run from a checkout with config/config.yaml (deploy, env, friction analyze need none)`
+    `bot config not found at ${configPath} \u2014 the command stopped before work began; the config path comes from SWITCHBOARD_CONFIG or defaults to config/config.yaml (deploy, env, friction analyze need no bot config)`
   );
 }
 async function loadBotConfig(configPath, overridesPath, opts = {}) {