@delete101020/aidlc 4.0.38 → 4.0.41

package/dist/bundle.js

@@ -19700,6 +19700,7 @@ var require_FollowUpHookSchema = __commonJS({
         return typeof p === "string" && path17.posix.basename(p.replace(/\\/g, "/")) === exports2.FOLLOW_UPS_FILE;
       });
     }
+    var STEP_KEYS_NOT_HOOKS = ["on_reject"];
     function collectFollowUpHookIssues(raw) {
       const issues = [];
       const pipelines = raw?.pipelines;
@@ -19720,7 +19721,7 @@ var require_FollowUpHookSchema = __commonJS({
           const label = typeof step.name === "string" ? step.name : typeof step.agent === "string" ? step.agent : String(si);
           const at = `pipelines.${pid}.steps.${label}`;
           for (const key of Object.keys(step)) {
-            if (!key.startsWith("on_")) {
+            if (!key.startsWith("on_") || STEP_KEYS_NOT_HOOKS.includes(key)) {
               continue;
             }
             if (!isHookKey(key)) {
@@ -19763,14 +19764,18 @@ var require_WorkspaceSchema = __commonJS({
   "../core/dist/schema/WorkspaceSchema.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.WorkspaceValidationError = exports2.WorkspaceSchema = void 0;
-    exports2.normalizeStep = normalizeStep4;
+    exports2.WorkspaceValidationError = exports2.WorkspaceSchema = exports2.AMBIGUOUS_STEP_INDEX = exports2.DEFAULT_MAX_BATCHES = exports2.DEFAULT_MAX_SEND_BACKS = void 0;
+    exports2.normalizeStep = normalizeStep5;
     exports2.stepSkillAlternatives = stepSkillAlternatives;
     exports2.resolveStepSkills = resolveStepSkills;
     exports2.producesEntries = producesEntries;
+    exports2.requiresEntries = requiresEntries;
     exports2.stepAgentId = stepAgentId3;
     exports2.stepDagId = stepDagId;
+    exports2.findStepIndex = findStepIndex2;
+    exports2.sendBackIssues = sendBackIssues;
     exports2.collectWorkspaceRefIssues = collectWorkspaceRefIssues3;
+    exports2.unsafeRunnerArg = unsafeRunnerArg;
     exports2.validateWorkspace = validateWorkspace6;
     var zod_1 = require_zod();
     var FollowUpHookSchema_1 = require_FollowUpHookSchema();
@@ -19916,8 +19921,14 @@ var require_WorkspaceSchema = __commonJS({
        * agent's `models` as one more choice on the card; a pick there wins.
        */
       model: zod_1.z.string().min(1).optional(),
-      /** Artifact paths required from upstream. Gate-checked before work AND on Mark step done. */
-      requires: zod_1.z.array(zod_1.z.string().min(1)).default([]),
+      /**
+       * Artifact paths required from upstream. Gate-checked before work AND on
+       * Mark step done — except entries marked `{ path, optional: true }`, for
+       * an upstream file that is legitimately absent on some runs (an upstream
+       * `produces` entry that is itself optional). Those are listed with the
+       * step but never block it.
+       */
+      requires: zod_1.z.array(ProducesEntrySchema).default([]),
       /**
        * Agent ids of upstream steps this step depends on. When non-empty the
        * step stays `pending` until every listed step transitions to `approved`,
@@ -19940,6 +19951,46 @@ var require_WorkspaceSchema = __commonJS({
        * (infinite loop, network stall). Defaults to 120_000 when omitted.
        */
       auto_review_timeout_ms: zod_1.z.number().int().positive().optional(),
+      /**
+       * Where an `auto_review` reject sends the work. Without it the step is
+       * rejected in place and the run stops — right for a check on the step's
+       * own output, wrong for verify/review, where running the check again on
+       * the same code gives the same answer and it is `implement` that has to
+       * change. The target reopens with the reason as its feedback, the steps
+       * after it reset, and the autopilot loop carries on from there.
+       *
+       * The target is a step name (or agent id) before this one, without
+       * `human_review` — work a human gate approved goes back through a human.
+       * A validator can name the same target in its verdict (`sendBackTo`), or
+       * name this step / `null` to stop here instead. Bounded by the
+       * pipeline's `max_send_backs`.
+       */
+      on_reject: zod_1.z.object({ send_back_to: zod_1.z.string().min(1) }).optional(),
+      /**
+       * Minutes the step's agent may run under `aidlc run exec` / Run to
+       * completion before it is stopped (the whole process tree: SIGTERM, then
+       * SIGKILL). A timed-out step fails the run — it is not sent back and does
+       * not count toward `max_send_backs` — and stays `awaiting_work`. Unset
+       * means no limit.
+       */
+      timeout_minutes: zod_1.z.number().positive().optional(),
+      /**
+       * Run the step as a series of agent sessions ("batches") instead of one.
+       * Each session does a slice of the work and ends its first `produces`
+       * file with `Status: continue` or `Status: done`; on `continue` the exec
+       * loop starts a fresh session on the same revision. A missing or
+       * unreadable `Status:` line fails the step. `timeout_minutes` applies to
+       * each batch.
+       */
+      batches: zod_1.z.boolean().optional(),
+      /**
+       * Batches one `aidlc run exec` may run on this step before it stops for a
+       * person ({@link DEFAULT_MAX_BATCHES} when unset). Running exec again
+       * allows as many more.
+       */
+      max_batches: zod_1.z.number().int().positive().optional(),
+      /** Stop the loop after every `continue` batch, for a person to look before the next. */
+      pause_between_batches: zod_1.z.boolean().optional(),
       /** When true, the runner pauses for human approval before advancing. */
       human_review: zod_1.z.boolean().default(false),
       /**
@@ -20001,12 +20052,42 @@ var require_WorkspaceSchema = __commonJS({
       recipe: zod_1.z.string().min(1).optional(),
       steps: zod_1.z.array(PipelineStepSchema).min(1),
       on_failure: zod_1.z.enum(["stop", "continue"]).default("stop"),
-      budget: PipelineBudgetSchema.optional()
+      budget: PipelineBudgetSchema.optional(),
+      /**
+       * How many times the autopilot loop may send work back (`on_reject`)
+       * before it stops for a human. Counted from the last time a human acted on
+       * the run — approve, reject, rerun, request update — so a run that was
+       * steered by hand does not start out at the ceiling. Defaults to
+       * {@link DEFAULT_MAX_SEND_BACKS}; 0 stops at the first reject.
+       */
+      max_send_backs: zod_1.z.number().int().min(0).optional(),
+      /**
+       * The run is meant to go unattended. `aidlc run exec` / Run to completion
+       * then refuses to start unless it is safe to leave alone — on a branch
+       * other than main, a clean working tree, the approval-gate hook registered
+       * for Claude steps — and the hook blocks on its own errors instead of
+       * allowing. See `runs/autopilotPreflight.ts`.
+       */
+      autopilot: zod_1.z.boolean().optional()
+    }).superRefine((p, ctx) => {
+      for (const issue of sendBackIssues(p.steps)) {
+        ctx.addIssue({ code: "custom", path: ["steps", issue.stepIdx, "on_reject", "send_back_to"], message: issue.message });
+      }
     });
+    exports2.DEFAULT_MAX_SEND_BACKS = 3;
+    exports2.DEFAULT_MAX_BATCHES = 10;
     var RecipeGateSchema = zod_1.z.object({
       human_review: zod_1.z.boolean().optional(),
       auto_review: zod_1.z.boolean().optional(),
-      auto_review_runner: zod_1.z.string().min(1).optional()
+      auto_review_runner: zod_1.z.string().min(1).optional(),
+      /** Where this step's auto-review reject sends the work — see the step's `on_reject`. */
+      on_reject: zod_1.z.object({ send_back_to: zod_1.z.string().min(1) }).optional(),
+      /** Run-time limit for this step — see the step's `timeout_minutes`. */
+      timeout_minutes: zod_1.z.number().positive().optional(),
+      /** Batched sessions for this step — see the step's `batches`. */
+      batches: zod_1.z.boolean().optional(),
+      max_batches: zod_1.z.number().int().positive().optional(),
+      pause_between_batches: zod_1.z.boolean().optional()
     });
     var RecipeSchema = zod_1.z.object({
       id: zod_1.z.string().min(1),
@@ -20031,9 +20112,13 @@ var require_WorkspaceSchema = __commonJS({
        * plan) and none after, a risky one wants them everywhere. Only the fields
        * present override; the rest inherit.
        */
-      gates: zod_1.z.record(zod_1.z.string(), RecipeGateSchema).optional()
+      gates: zod_1.z.record(zod_1.z.string(), RecipeGateSchema).optional(),
+      /** Sets the assembled pipeline's `autopilot` — see the pipeline's. */
+      autopilot: zod_1.z.boolean().optional(),
+      /** Sets the assembled pipeline's `max_send_backs`, over the source pipeline's. */
+      max_send_backs: zod_1.z.number().int().min(0).optional()
     });
-    function normalizeStep4(step) {
+    function normalizeStep5(step) {
       if (typeof step === "string") {
         return {
           agent: step,
@@ -20043,26 +20128,15 @@ var require_WorkspaceSchema = __commonJS({
           produces_optional: [],
           produces_contains: [],
           requires: [],
+          requires_optional: [],
           depends_on: [],
           auto_review: false,
           human_review: false
         };
       }
       const obj = step;
-      const requires = Array.isArray(obj.requires) ? obj.requires : [];
-      const produces = [];
-      const produces_optional = [];
-      for (const entry of Array.isArray(obj.produces) ? obj.produces : []) {
-        if (typeof entry === "string") {
-          produces.push(entry);
-        } else if (entry && typeof entry === "object" && typeof entry.path === "string") {
-          const e = entry;
-          produces.push(e.path);
-          if (e.optional === true) {
-            produces_optional.push(e.path);
-          }
-        }
-      }
+      const [requires, requires_optional] = splitArtifactEntries(obj.requires);
+      const [produces, produces_optional] = splitArtifactEntries(obj.produces);
       const produces_contains = Array.isArray(obj.produces_contains) ? obj.produces_contains : [];
       const depends_on = Array.isArray(obj.depends_on) ? obj.depends_on : [];
       const skills = Array.isArray(obj.skills) ? obj.skills.map(String).filter((s) => s.length > 0) : typeof obj.skill === "string" && obj.skill.length > 0 ? [obj.skill] : void 0;
@@ -20085,10 +20159,19 @@ var require_WorkspaceSchema = __commonJS({
         produces_optional,
         produces_contains,
         requires,
+        requires_optional,
         depends_on,
         auto_review: obj.auto_review === true,
         auto_review_runner: typeof obj.auto_review_runner === "string" ? obj.auto_review_runner : void 0,
         auto_review_timeout_ms: typeof obj.auto_review_timeout_ms === "number" && obj.auto_review_timeout_ms > 0 ? obj.auto_review_timeout_ms : void 0,
+        ...isOnReject(obj.on_reject) ? { on_reject: { send_back_to: obj.on_reject.send_back_to } } : {},
+        ...typeof obj.timeout_minutes === "number" && obj.timeout_minutes > 0 ? { timeout_minutes: obj.timeout_minutes } : {},
+        ...obj.batches === true ? {
+          batches: {
+            max: typeof obj.max_batches === "number" && obj.max_batches >= 1 ? Math.floor(obj.max_batches) : exports2.DEFAULT_MAX_BATCHES,
+            pause: obj.pause_between_batches === true
+          }
+        } : {},
         human_review: obj.human_review === true,
         ...git && { git }
       };
@@ -20110,6 +20193,25 @@ var require_WorkspaceSchema = __commonJS({
       const optional = new Set(norm.produces_optional);
       return norm.produces.map((p) => optional.has(p) ? { path: p, optional: true } : p);
     }
+    function requiresEntries(norm) {
+      return producesEntries({ produces: norm.requires, produces_optional: norm.requires_optional });
+    }
+    function splitArtifactEntries(raw) {
+      const all = [];
+      const optional = [];
+      for (const entry of Array.isArray(raw) ? raw : []) {
+        if (typeof entry === "string") {
+          all.push(entry);
+        } else if (entry && typeof entry === "object" && typeof entry.path === "string") {
+          const e = entry;
+          all.push(e.path);
+          if (e.optional === true) {
+            optional.push(e.path);
+          }
+        }
+      }
+      return [all, optional];
+    }
     function stepAgentId3(step) {
       if (typeof step === "string") {
         return step;
@@ -20120,9 +20222,57 @@ var require_WorkspaceSchema = __commonJS({
       return "";
     }
     function stepDagId(step) {
-      const norm = normalizeStep4(step);
+      const norm = normalizeStep5(step);
       return norm.name ?? norm.agent;
     }
+    exports2.AMBIGUOUS_STEP_INDEX = -2;
+    function findStepIndex2(steps, ref) {
+      const asInt = parseInt(ref, 10);
+      if (!isNaN(asInt) && String(asInt) === ref) {
+        return asInt >= 0 && asInt < steps.length ? asInt : -1;
+      }
+      const byName = steps.findIndex((s) => s.name === ref);
+      if (byName >= 0) {
+        return byName;
+      }
+      const byAgent = steps.map((s, i) => s.agent === ref ? i : -1).filter((i) => i >= 0);
+      if (byAgent.length > 1) {
+        return exports2.AMBIGUOUS_STEP_INDEX;
+      }
+      return byAgent.length === 1 ? byAgent[0] : -1;
+    }
+    function isOnReject(v) {
+      return !!v && typeof v === "object" && typeof v.send_back_to === "string" && v.send_back_to.length > 0;
+    }
+    function sendBackIssues(steps) {
+      const norms = steps.map((s) => normalizeStep5(s));
+      const issues = [];
+      norms.forEach((n, i) => {
+        const target = n.on_reject?.send_back_to;
+        if (!target) {
+          return;
+        }
+        const id = n.name ?? n.agent;
+        const add = (message) => {
+          issues.push({ stepIdx: i, message: `Step "${id}": ${message}` });
+        };
+        if (!n.auto_review) {
+          add("`on_reject` routes an auto-review reject, and this step has `auto_review` off.");
+          return;
+        }
+        const t = findStepIndex2(norms, target);
+        if (t === exports2.AMBIGUOUS_STEP_INDEX) {
+          add(`\`on_reject.send_back_to\` "${target}" is an agent with more than one step; name the step.`);
+        } else if (t < 0) {
+          add(`\`on_reject.send_back_to\` "${target}" is not a step of this pipeline.`);
+        } else if (t >= i) {
+          add(`\`on_reject.send_back_to\` "${target}" must be a step before this one.`);
+        } else if (norms[t].human_review) {
+          add(`\`on_reject.send_back_to\` "${target}" has \`human_review: true\`. Work a human approved goes back through a human \u2014 turn that gate off or drop \`on_reject\`.`);
+        }
+      });
+      return issues;
+    }
     function collectWorkspaceRefIssues3(config) {
       const issues = [];
       const agentIds = new Set(config.agents.map((a) => a.id));
@@ -20140,7 +20290,7 @@ var require_WorkspaceSchema = __commonJS({
       }
       for (const pipeline of config.pipelines) {
         for (const step of pipeline.steps) {
-          const norm = normalizeStep4(step);
+          const norm = normalizeStep5(step);
           const id = norm.name ?? norm.agent;
           if (!agentIds.has(norm.agent)) {
             issues.push({
@@ -20266,8 +20416,60 @@ var require_WorkspaceSchema = __commonJS({
       /** Claude tier alias (or any `model:` value) → concrete model id, lowercased keys. */
       model_aliases: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).default({}),
       /** Model id → rate. The key `*` applies to every model of this provider. */
-      rates: zod_1.z.record(zod_1.z.string(), ProviderRateSchema).default({})
+      rates: zod_1.z.record(zod_1.z.string(), ProviderRateSchema).default({}),
+      /**
+       * Extra command-line arguments for this runner's CLI, added to every step it
+       * runs — chiefly what a headless agent may do without asking:
+       *
+       * ```yaml
+       * providers:
+       *   default:
+       *     args: [--permission-mode, acceptEdits, --allowedTools, "Bash(npm test:*)"]
+       * ```
+       *
+       * Committed with the workspace, so the whole team runs with the same
+       * permissions instead of each clone's own `.claude/settings.json`. Flags
+       * that switch permission checks off altogether are refused — see
+       * {@link unsafeRunnerArg}.
+       */
+      args: zod_1.z.array(zod_1.z.string()).default([])
+    }).superRefine((p, ctx) => {
+      const bad = unsafeRunnerArg(p.args);
+      if (bad) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["args"],
+          message: `\`${bad}\` switches the agent's permission checks off, and \`args\` is committed for everyone who runs this workspace \u2014 unattended runs included. Allow the tools it needs instead (\`--allowedTools\` for Claude), or run it in a sandbox of your own with \`runner: custom\`.`
+        });
+      }
     });
+    function unsafeRunnerArg(args) {
+      const flags = /* @__PURE__ */ new Set([
+        "--dangerously-skip-permissions",
+        "--allow-dangerously-skip-permissions",
+        "--dangerously-bypass-approvals-and-sandbox",
+        "--yolo",
+        "--allow-all",
+        "--allow-all-paths"
+      ]);
+      const values = {
+        "--permission-mode": "bypassPermissions",
+        "--sandbox": "danger-full-access",
+        "-s": "danger-full-access"
+      };
+      for (let i = 0; i < args.length; i++) {
+        const [flag, inline] = args[i].split(/=(.*)/s, 2);
+        if (flags.has(flag)) {
+          return args[i];
+        }
+        const unsafe = values[flag];
+        const value = inline ?? args[i + 1];
+        if (unsafe && value === unsafe) {
+          return `${flag} ${unsafe}`;
+        }
+      }
+      return null;
+    }
     exports2.WorkspaceSchema = zod_1.z.object({
       /** Schema version — bump on breaking changes. Currently always "1.0". */
       version: zod_1.z.string().min(1),
@@ -20378,7 +20580,7 @@ var require_PipelineAssembler = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.PipelineAssembleError = void 0;
-    exports2.assemblePipeline = assemblePipeline4;
+    exports2.assemblePipeline = assemblePipeline5;
     exports2.recipePipelineId = recipePipelineId4;
     exports2.pipelineRecipeLabel = pipelineRecipeLabel;
     var WorkspaceSchema_1 = require_WorkspaceSchema();
@@ -20389,7 +20591,7 @@ var require_PipelineAssembler = __commonJS({
       }
     };
     exports2.PipelineAssembleError = PipelineAssembleError4;
-    function assemblePipeline4(config, opts) {
+    function assemblePipeline5(config, opts) {
       const recipe = config.recipes.find((r) => r.id === opts.recipeId);
       if (!recipe) {
         const available = config.recipes.map((r) => r.id).join(", ") || "(none defined)";
@@ -20446,7 +20648,7 @@ var require_PipelineAssembler = __commonJS({
           name: norm.name ?? id,
           enabled: norm.enabled,
           produces: (0, WorkspaceSchema_1.producesEntries)(norm),
-          requires: norm.requires,
+          requires: (0, WorkspaceSchema_1.requiresEntries)(norm),
           depends_on,
           auto_review,
           human_review: gate.human_review ?? norm.human_review
@@ -20466,14 +20668,40 @@ var require_PipelineAssembler = __commonJS({
         if (auto_review_runner) {
           step.auto_review_runner = auto_review_runner;
         }
+        const on_reject = gate.on_reject ?? norm.on_reject;
+        if (on_reject) {
+          step.on_reject = { send_back_to: on_reject.send_back_to };
+        }
+        const timeout_minutes = gate.timeout_minutes ?? norm.timeout_minutes;
+        if (timeout_minutes !== void 0) {
+          step.timeout_minutes = timeout_minutes;
+        }
+        const batched = gate.batches ?? norm.batches !== void 0;
+        if (batched) {
+          step.batches = true;
+          const max = gate.max_batches ?? norm.batches?.max;
+          if (max !== void 0) {
+            step.max_batches = max;
+          }
+          if (gate.pause_between_batches ?? norm.batches?.pause) {
+            step.pause_between_batches = true;
+          }
+        }
         return step;
       });
+      const sendBackProblems = (0, WorkspaceSchema_1.sendBackIssues)(steps);
+      if (sendBackProblems.length > 0) {
+        throw new PipelineAssembleError4(`Recipe "${recipe.id}" assembled a pipeline whose \`on_reject\` cannot work:
+` + sendBackProblems.map((i) => `  - ${i.message}`).join("\n"));
+      }
       const assembled = {
         id: opts.pipelineId ?? recipe.id,
         derived_from: source.id,
         recipe: recipe.id,
         steps,
-        on_failure: source.on_failure
+        on_failure: source.on_failure,
+        ...(recipe.max_send_backs ?? source.max_send_backs) !== void 0 ? { max_send_backs: recipe.max_send_backs ?? source.max_send_backs } : {},
+        ...(recipe.autopilot ?? source.autopilot) !== void 0 ? { autopilot: recipe.autopilot ?? source.autopilot } : {}
       };
       const refIssues = (0, WorkspaceSchema_1.collectWorkspaceRefIssues)({
         ...config,
@@ -20795,7 +21023,7 @@ ${raw.slice(0, 200)}`);
           name: norm.name ?? a.phase,
           enabled: norm.enabled,
           produces: (0, WorkspaceSchema_1.producesEntries)(norm),
-          requires: norm.requires,
+          requires: (0, WorkspaceSchema_1.requiresEntries)(norm),
           depends_on: anchor ? [anchor] : usesDag && steps.length > 0 ? [(0, WorkspaceSchema_1.stepDagId)(steps[steps.length - 1])] : [],
           auto_review: norm.auto_review,
           human_review: norm.human_review
@@ -21318,6 +21546,9 @@ var require_PipelineRunner = __commonJS({
         steps
       };
     }
+    function requiredPaths(norm) {
+      return norm.requires.filter((p) => !norm.requires_optional.includes(p));
+    }
     function canStartStep(args) {
       const { state, pipeline, workspaceRoot } = args;
       const idx = args.stepIdx ?? state.currentStepIdx;
@@ -21327,7 +21558,7 @@ var require_PipelineRunner = __commonJS({
       }
       const norm = (0, WorkspaceSchema_1.normalizeStep)(stepConfig);
       const missing = [];
-      for (const rel of norm.requires.map((p) => (0, RunState_1.resolvePath)(p, state.context))) {
+      for (const rel of requiredPaths(norm).map((p) => (0, RunState_1.resolvePath)(p, state.context))) {
         const abs = path17.isAbsolute(rel) ? rel : path17.join(workspaceRoot, rel);
         if (!fs14.existsSync(abs)) {
           missing.push(rel);
@@ -21354,7 +21585,7 @@ var require_PipelineRunner = __commonJS({
         throw new PipelineRunError3(`Pipeline mismatch \u2014 step "${(0, RunState_1.stepIdentity)(step)}" is at index ${idx}, which pipeline "${pipeline.id}" does not have.`);
       }
       const norm = (0, WorkspaceSchema_1.normalizeStep)(stepConfig);
-      const resolvedRequires = norm.requires.map((p) => (0, RunState_1.resolvePath)(p, state.context));
+      const resolvedRequires = requiredPaths(norm).map((p) => (0, RunState_1.resolvePath)(p, state.context));
       const missingRequires = [];
       for (const rel of resolvedRequires) {
         const abs = path17.isAbsolute(rel) ? rel : path17.join(workspaceRoot, rel);
@@ -21476,6 +21707,7 @@ var require_PipelineRunner = __commonJS({
       const step = state.steps[idx];
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const next = clone(state);
+      delete next.sendBacks;
       if (step.status === "approved") {
         for (const i of followersOf(pipeline, idx)) {
           const follower = next.steps[i];
@@ -21533,13 +21765,34 @@ var require_PipelineRunner = __commonJS({
         runner: verdict.runner
       });
       if (verdict.decision === "reject") {
+        const route = autoRejectRoute(next, pipeline, idx, norm, verdict);
+        if ("targetIdx" in route) {
+          const count = next.sendBacks ?? 0;
+          const max = pipeline.max_send_backs ?? WorkspaceSchema_1.DEFAULT_MAX_SEND_BACKS;
+          if (count < max) {
+            sendBack(next, {
+              idx,
+              targetIdx: route.targetIdx,
+              reason: verdict.reason,
+              at: verdict.at,
+              pipeline,
+              source: route.source
+            });
+            next.sendBacks = count + 1;
+            return next;
+          }
+          route.note = `Sent back ${count} time${count === 1 ? "" : "s"} already (max_send_backs: ${max}) \u2014 stopping for a human instead of going round again.`;
+        }
+        const reason = "note" in route && route.note ? `${verdict.reason}
+
+${route.note}` : verdict.reason;
         nextStep.status = "rejected";
-        nextStep.rejectReason = verdict.reason;
+        nextStep.rejectReason = reason;
         nextStep.history = pushHistory(nextStep.history, {
           kind: "reject",
           at: verdict.at,
           revision: nextStep.revision,
-          reason: verdict.reason,
+          reason,
           sentBackToIdx: idx,
           ...nextStep.skill ? { skill: nextStep.skill } : {},
           ...nextStep.chosenModel ? { model: nextStep.chosenModel } : {}
@@ -21555,6 +21808,35 @@ var require_PipelineRunner = __commonJS({
       }
       return advance(next, idx, pipeline);
     }
+    function autoRejectRoute(state, pipeline, idx, norm, verdict) {
+      const label = (i) => `"${(0, RunState_1.stepIdentity)(state.steps[i])}" (step ${i + 1})`;
+      const configured = norm.on_reject?.send_back_to;
+      const cfgIdx = configured ? (0, WorkspaceSchema_1.findStepIndex)(pipeline.steps.map(WorkspaceSchema_1.normalizeStep), configured) : -1;
+      if (configured && !(cfgIdx >= 0 && cfgIdx < idx)) {
+        return { note: `\`on_reject.send_back_to\` "${configured}" is not a step before this one \u2014 fix the pipeline.` };
+      }
+      if (verdict.sendBackTo === void 0) {
+        return cfgIdx >= 0 ? { targetIdx: cfgIdx, source: "config" } : {};
+      }
+      if (verdict.sendBackTo === null) {
+        return {};
+      }
+      const asked = String(verdict.sendBackTo);
+      const v = (0, WorkspaceSchema_1.findStepIndex)(state.steps, asked);
+      if (v === idx) {
+        return {};
+      }
+      if (v < 0 || v > idx) {
+        return { note: `The validator asked to send this back to "${asked}", which is not a step before this one.` };
+      }
+      if (v !== cfgIdx) {
+        const allowed = cfgIdx >= 0 ? `only ${label(cfgIdx)} is` : "no step is (see `on_reject.send_back_to`)";
+        return {
+          note: `The validator suggests sending this back to ${label(v)}; ${allowed} sent back automatically. Send it back by hand if you agree.`
+        };
+      }
+      return { targetIdx: v, source: "verdict" };
+    }
     function retryAutoReview(args) {
       const { pipeline } = args;
       const state = alignedOrThrow(args.state, pipeline);
@@ -21577,6 +21859,7 @@ var require_PipelineRunner = __commonJS({
         throw new PipelineRunError3(`Step "${step.agent}" no longer has auto_review enabled in pipeline "${pipeline.id}".`);
       }
       const next = clone(state);
+      delete next.sendBacks;
       next.steps[idx] = {
         ...step,
         status: "awaiting_auto_review",
@@ -21597,7 +21880,9 @@ var require_PipelineRunner = __commonJS({
       if (step.status !== "awaiting_review") {
         throw new PipelineRunError3(`Cannot approve step "${step.agent}": status is "${step.status}", expected "awaiting_review"`);
       }
-      return advance(clone(state), idx, pipeline);
+      const next = clone(state);
+      delete next.sendBacks;
+      return advance(next, idx, pipeline);
     }
     function rejectStep3(args) {
       const { state, reason, targetIdx, pipeline } = args;
@@ -21606,75 +21891,19 @@ var require_PipelineRunner = __commonJS({
       if (!step) {
         throw new PipelineRunError3(`No step at index ${idx}`);
       }
-      if (step.status !== "awaiting_review") {
-        throw new PipelineRunError3(`Cannot reject step "${step.agent}": status is "${step.status}", expected "awaiting_review"`);
-      }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const isCascade = typeof targetIdx === "number" && targetIdx >= 0 && targetIdx < idx;
+      if (step.status !== "awaiting_review" && !(isCascade && step.status === "rejected")) {
+        throw new PipelineRunError3(`Cannot reject step "${step.agent}": status is "${step.status}", expected "awaiting_review"`);
+      }
       if (isCascade) {
         const next2 = clone(state);
-        const blame = `Rejected at step ${idx + 1} (${step.agent})${reason ? `: ${reason}` : ""}`;
-        const rejectedHistory = pushHistory(next2.steps[idx].history, {
-          kind: "reject",
-          at: now,
-          revision: next2.steps[idx].revision,
-          reason,
-          sentBackToIdx: targetIdx,
-          ...next2.steps[idx].skill ? { skill: next2.steps[idx].skill } : {},
-          ...next2.steps[idx].chosenModel ? { model: next2.steps[idx].chosenModel } : {}
-        });
-        const usesDag = pipeline ? pipeline.steps.map(WorkspaceSchema_1.normalizeStep).some((s) => s.depends_on.length > 0) : false;
-        const targetIdxN = targetIdx;
-        const resetIndices = usesDag && pipeline ? collectDagResetSet(pipeline, state, targetIdxN, idx) : sequentialRange(targetIdxN, idx);
-        for (const i of resetIndices) {
-          const s = next2.steps[i];
-          if (i === targetIdxN) {
-            const newRev = s.revision + 1;
-            next2.steps[i] = {
-              ...s,
-              status: "awaiting_work",
-              revision: newRev,
-              feedback: blame,
-              rejectReason: void 0,
-              autoReviewVerdict: void 0,
-              artifactsProduced: [],
-              finishedAt: void 0,
-              startedAt: now,
-              history: pushHistory(s.history, {
-                kind: "rerun",
-                at: now,
-                revision: newRev,
-                feedback: blame
-              })
-            };
-          } else if (i === idx) {
-            next2.steps[i] = {
-              ...s,
-              status: "pending",
-              rejectReason: void 0,
-              autoReviewVerdict: void 0,
-              artifactsProduced: [],
-              startedAt: void 0,
-              finishedAt: void 0,
-              history: rejectedHistory
-            };
-          } else {
-            next2.steps[i] = {
-              ...s,
-              status: "pending",
-              rejectReason: void 0,
-              autoReviewVerdict: void 0,
-              artifactsProduced: [],
-              startedAt: void 0,
-              finishedAt: void 0
-            };
-          }
-        }
-        next2.currentStepIdx = targetIdx;
-        next2.status = "running";
+        sendBack(next2, { idx, targetIdx, reason, at: now, pipeline });
+        delete next2.sendBacks;
         return next2;
       }
       const next = clone(state);
+      delete next.sendBacks;
       next.steps[idx] = {
         ...step,
         status: "rejected",
@@ -21707,6 +21936,7 @@ var require_PipelineRunner = __commonJS({
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const next = clone(state);
+      delete next.sendBacks;
       const newRev = step.revision + 1;
       const carriedFeedback = feedback ?? step.feedback;
       next.steps[idx] = {
@@ -21769,6 +21999,7 @@ var require_PipelineRunner = __commonJS({
       }
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const next = clone(state);
+      delete next.sendBacks;
       const normalized = pipeline.steps.map(WorkspaceSchema_1.normalizeStep);
       const usesDag = normalized.some((s) => s.depends_on.length > 0);
       const upper = state.status === "completed" ? pipeline.steps.length - 1 : state.currentStepIdx;
@@ -21912,6 +22143,7 @@ var require_PipelineRunner = __commonJS({
       const step = state.steps[idx];
       const now = (/* @__PURE__ */ new Date()).toISOString();
       const next = clone(state);
+      delete next.sendBacks;
       const newRev = step.revision + 1;
       const carriedFeedback = feedback ?? step.feedback;
       next.steps[idx] = {
@@ -22058,6 +22290,70 @@ var require_PipelineRunner = __commonJS({
         next.status = "completed";
       }
     }
+    function sendBack(next, args) {
+      const { idx, targetIdx, reason, at: now, pipeline, source } = args;
+      const before = clone(next);
+      const step = next.steps[idx];
+      const blame = `Rejected at step ${idx + 1} (${step.agent})${reason ? `: ${reason}` : ""}`;
+      const rejectedHistory = pushHistory(step.history, {
+        kind: "reject",
+        at: now,
+        revision: step.revision,
+        reason,
+        sentBackToIdx: targetIdx,
+        ...source ? { source } : {},
+        ...step.skill ? { skill: step.skill } : {},
+        ...step.chosenModel ? { model: step.chosenModel } : {}
+      });
+      const usesDag = pipeline ? pipeline.steps.map(WorkspaceSchema_1.normalizeStep).some((s) => s.depends_on.length > 0) : false;
+      const resetIndices = usesDag && pipeline ? collectDagResetSet(pipeline, before, targetIdx, idx) : sequentialRange(targetIdx, idx);
+      for (const i of resetIndices) {
+        const s = next.steps[i];
+        if (i === targetIdx) {
+          const newRev = s.revision + 1;
+          next.steps[i] = {
+            ...s,
+            status: "awaiting_work",
+            revision: newRev,
+            feedback: blame,
+            rejectReason: void 0,
+            autoReviewVerdict: void 0,
+            artifactsProduced: [],
+            finishedAt: void 0,
+            startedAt: now,
+            history: pushHistory(s.history, {
+              kind: "rerun",
+              at: now,
+              revision: newRev,
+              feedback: blame
+            })
+          };
+        } else if (i === idx) {
+          next.steps[i] = {
+            ...s,
+            status: "pending",
+            rejectReason: void 0,
+            autoReviewVerdict: void 0,
+            artifactsProduced: [],
+            startedAt: void 0,
+            finishedAt: void 0,
+            history: rejectedHistory
+          };
+        } else {
+          next.steps[i] = {
+            ...s,
+            status: "pending",
+            rejectReason: void 0,
+            autoReviewVerdict: void 0,
+            artifactsProduced: [],
+            startedAt: void 0,
+            finishedAt: void 0
+          };
+        }
+      }
+      next.currentStepIdx = targetIdx;
+      next.status = "running";
+    }
     function clone(value) {
       return JSON.parse(JSON.stringify(value));
     }
@@ -25470,7 +25766,7 @@ var require_PlanGenerator = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.generatePlan = generatePlan;
     exports2.renderPlanMarkdown = renderPlanMarkdown;
-    function normalizeStep4(step) {
+    function normalizeStep5(step) {
       if (typeof step === "string") {
         return { name: step };
       }
@@ -25586,7 +25882,7 @@ var require_PlanGenerator = __commonJS({
     }
     function generatePlan(epicId, context, pipeline, workspace) {
       const complexity = inferScopeComplexity(context.scope);
-      const steps = (pipeline.steps || []).map(normalizeStep4);
+      const steps = (pipeline.steps || []).map(normalizeStep5);
       const agentCountPerPhase = allocateAgentCount(complexity, steps.length);
       const phaseAllocations = steps.map((step) => {
         const agentId = step.agent || "unknown";
@@ -26708,6 +27004,11 @@ var require_EpicStepEdit = __commonJS({
     }
     function commitEpicStepEdit2(args) {
       const { workspaceRoot, doc, plan } = args;
+      const sendBack = (0, WorkspaceSchema_1.sendBackIssues)(plan.pipeline.steps);
+      if (sendBack.length > 0) {
+        throw new EpicStepEditError2(`This edit would leave \`on_reject\` pointing at a step it cannot send work to:
+` + sendBack.map((i) => `  - ${i.message}`).join("\n"));
+      }
       args.writeWorkspace(plan.pipeline);
       try {
         RunStateStore_1.RunStateStore.save(workspaceRoot, plan.runState);
@@ -26754,6 +27055,7 @@ var require_EpicStepEdit = __commonJS({
         delete next.auto_review;
         delete next.auto_review_runner;
         delete next.auto_review_timeout_ms;
+        delete next.on_reject;
       }
       const nextRaw = [...raw];
       nextRaw[idx] = next;
@@ -28662,6 +28964,69 @@ var require_resolveCommand = __commonJS({
   }
 });
 
+// ../core/dist/runner/processTree.js
+var require_processTree = __commonJS({
+  "../core/dist/runner/processTree.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.STOP_GRACE_MS = void 0;
+    exports2.processGroupSpawnOptions = processGroupSpawnOptions;
+    exports2.stopOnAbort = stopOnAbort;
+    exports2.stopProcessTree = stopProcessTree;
+    var child_process_1 = require("child_process");
+    exports2.STOP_GRACE_MS = 1e4;
+    function processGroupSpawnOptions() {
+      return process.platform === "win32" ? {} : { detached: true };
+    }
+    function stopOnAbort(proc, signal, graceMs = exports2.STOP_GRACE_MS) {
+      if (!signal) {
+        return () => {
+        };
+      }
+      let timer;
+      const onAbort = () => {
+        stopProcessTree(proc, "SIGTERM");
+        timer = setTimeout(() => stopProcessTree(proc, "SIGKILL"), graceMs);
+        timer.unref?.();
+      };
+      if (signal.aborted) {
+        onAbort();
+      } else {
+        signal.addEventListener("abort", onAbort, { once: true });
+      }
+      return () => {
+        signal.removeEventListener("abort", onAbort);
+        if (timer) {
+          clearTimeout(timer);
+          stopProcessTree(proc, "SIGKILL");
+        }
+      };
+    }
+    function stopProcessTree(proc, sig) {
+      const pid = proc.pid;
+      if (!pid) {
+        return;
+      }
+      if (process.platform === "win32") {
+        try {
+          (0, child_process_1.spawn)("taskkill", ["/pid", String(pid), "/T", "/F"], { stdio: "ignore", windowsHide: true }).on("error", () => {
+          });
+        } catch {
+        }
+        return;
+      }
+      try {
+        process.kill(-pid, sig);
+      } catch {
+        try {
+          proc.kill(sig);
+        } catch {
+        }
+      }
+    }
+  }
+});
+
 // ../core/dist/runner/DefaultRunner.js
 var require_DefaultRunner = __commonJS({
   "../core/dist/runner/DefaultRunner.js"(exports2) {
@@ -28674,6 +29039,7 @@ var require_DefaultRunner = __commonJS({
     var mcp_1 = require_mcp();
     var ndjson_1 = require_ndjson();
     var resolveCommand_1 = require_resolveCommand();
+    var processTree_1 = require_processTree();
     var DefaultRunner3 = class {
       opts;
       /**
@@ -28712,6 +29078,10 @@ var require_DefaultRunner = __commonJS({
           ctx.skill,
           ...model ? ["--model", model] : [],
           ...this.opts.extraArgs ?? [],
+          ...ctx.extraArgs ?? [],
+          // `--allowedTools` and friends take any number of values, and would take
+          // the prompt as one more; `--` ends the options.
+          "--",
           userMessage
         ];
         const cmd = (0, resolveCommand_1.resolveCommand)(bin);
@@ -28721,8 +29091,10 @@ var require_DefaultRunner = __commonJS({
           // inside a Claude Code session — a fresh `claude` rejects it as invalid.
           // ctx.env (workspace-configured) is layered last so explicit keys win.
           env: (0, claudeEnv_1.buildClaudeSpawnEnv)(ctx.env),
-          stdio: ["ignore", "pipe", "pipe"]
+          stdio: ["ignore", "pipe", "pipe"],
+          ...(0, processTree_1.processGroupSpawnOptions)()
         });
+        const detach = (0, processTree_1.stopOnAbort)(proc, ctx.signal);
         let finalText = "";
         let costUsd;
         const handleEvent = (evt) => {
@@ -28748,11 +29120,13 @@ var require_DefaultRunner = __commonJS({
         });
         return new Promise((resolve5) => {
           proc.on("error", (err) => {
+            detach();
             ctx.onError(`Failed to spawn ${bin}: ${err.message}
 `);
             resolve5({ success: false, output: finalText, costUsd });
           });
           proc.on("close", (code) => {
+            detach();
             sink.flush();
             resolve5({ success: code === 0, output: finalText, costUsd });
           });
@@ -28823,6 +29197,7 @@ var require_CodexRunner = __commonJS({
     var ndjson_1 = require_ndjson();
     var models_1 = require_models();
     var resolveCommand_1 = require_resolveCommand();
+    var processTree_1 = require_processTree();
     var CodexRunner2 = class {
       opts;
       /**
@@ -28859,14 +29234,17 @@ var require_CodexRunner = __commonJS({
           this.opts.sandbox ?? "workspace-write",
           ...model ? ["--model", model] : [],
           ...this.opts.extraArgs ?? [],
+          ...ctx.extraArgs ?? [],
           buildPrompt(ctx)
         ];
         const cmd = (0, resolveCommand_1.resolveCommand)(bin);
         const proc = (0, child_process_1.spawn)(cmd.command, [...cmd.args, ...args], {
           cwd: ctx.workspaceRoot,
           env: { ...process.env, ...ctx.env },
-          stdio: ["ignore", "pipe", "pipe"]
+          stdio: ["ignore", "pipe", "pipe"],
+          ...(0, processTree_1.processGroupSpawnOptions)()
         });
+        const detach = (0, processTree_1.stopOnAbort)(proc, ctx.signal);
         let streamed = "";
         let lastMessage = "";
         let sawDelta = false;
@@ -28918,11 +29296,13 @@ var require_CodexRunner = __commonJS({
         proc.stderr.on("data", (d) => ctx.onError(d.toString("utf8")));
         return new Promise((resolve5) => {
           proc.on("error", (err) => {
+            detach();
             ctx.onError(`Failed to spawn ${bin}: ${err.message}
 `);
             resolve5({ success: false, output: "", usage });
           });
           proc.on("close", (code) => {
+            detach();
             sink.flush();
             resolve5({
               success: code === 0,
@@ -28995,6 +29375,7 @@ var require_CopilotRunner = __commonJS({
     var ndjson_1 = require_ndjson();
     var models_1 = require_models();
     var resolveCommand_1 = require_resolveCommand();
+    var processTree_1 = require_processTree();
     var GRAPH_SERVERS2 = ["ast-graph", "codegraph"];
     var CopilotRunner2 = class {
       opts;
@@ -29032,14 +29413,17 @@ var require_CopilotRunner = __commonJS({
           ...this.opts.keepBuiltinMcps ? [] : ["--disable-builtin-mcps"],
           ...graph ? ["--additional-mcp-config", copilotMcpConfig(graph)] : [],
           ...model ? ["--model", model] : [],
-          ...this.opts.extraArgs ?? []
+          ...this.opts.extraArgs ?? [],
+          ...ctx.extraArgs ?? []
         ];
         const cmd = (0, resolveCommand_1.resolveCommand)(bin);
         const proc = (0, child_process_1.spawn)(cmd.command, [...cmd.args, ...args], {
           cwd: ctx.workspaceRoot,
           env: { ...process.env, ...ctx.env },
-          stdio: ["pipe", "pipe", "pipe"]
+          stdio: ["pipe", "pipe", "pipe"],
+          ...(0, processTree_1.processGroupSpawnOptions)()
         });
+        const detach = (0, processTree_1.stopOnAbort)(proc, ctx.signal);
         let streamed = "";
         let lastMessage = "";
         const deltaSeen = /* @__PURE__ */ new Set();
@@ -29101,11 +29485,13 @@ var require_CopilotRunner = __commonJS({
         proc.stdin.end((0, CodexRunner_1.buildPrompt)(ctx));
         return new Promise((resolve5) => {
           proc.on("error", (err) => {
+            detach();
             ctx.onError(`Failed to spawn ${bin}: ${err.message}
 `);
             resolve5({ success: false, output: "" });
           });
           proc.on("close", (code) => {
+            detach();
             sink.flush();
             resolve5({
               success: code === 0,
@@ -30355,7 +30741,10 @@ var require_promptComposer = __commonJS({
       const inlineInstructions = !!instructions && !harness.projectInstructions;
       const language = artifactLanguage?.trim() || null;
       const depth = (0, strictMode_1.strictModeSection)(input.strictMode === false ? false : true);
-      if (!inlinePersona && !inlineInstructions && !language && !depth) {
+      const history = input.runHistory ? `## Prior revisions
+
+Earlier rejections and feedback for this step: \`${input.runHistory.file}\` \u2192 \`steps[${input.runHistory.stepIdx}].history\`. Do not bring back what they rejected.` : null;
+      if (!inlinePersona && !inlineInstructions && !language && !depth && !history) {
         return {
           text: skills,
           included: { persona: false, instructions: false, language: false, depth: false }
@@ -30380,6 +30769,9 @@ var require_promptComposer = __commonJS({
       if (depth) {
         parts.push(depth);
       }
+      if (history) {
+        parts.push(history);
+      }
       const skillText = inlinePersona ? stripPersonaDirectives(skills) : skills;
       parts.push(["## Phase Behavior", "", skillText.trim()].join("\n"));
       return {
@@ -30731,6 +31123,235 @@ var require_commandBodyFreshness = __commonJS({
   }
 });
 
+// ../core/dist/runs/autopilotPreflight.js
+var require_autopilotPreflight = __commonJS({
+  "../core/dist/runs/autopilotPreflight.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    } : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.AUTOPILOT_ENV = exports2.APPROVAL_GATE_SCRIPT = void 0;
+    exports2.findApprovalGate = findApprovalGate2;
+    exports2.autopilotPreflight = autopilotPreflight;
+    exports2.hasEmptyCiChecks = hasEmptyCiChecks2;
+    exports2.emptyCiChecksMessage = emptyCiChecksMessage2;
+    var child_process_1 = require("child_process");
+    var fs14 = __importStar(require("fs"));
+    var os3 = __importStar(require("os"));
+    var path17 = __importStar(require("path"));
+    var claudeHome_1 = require_claudeHome();
+    var EpicScaffold_1 = require_EpicScaffold();
+    var WorkspaceSchema_1 = require_WorkspaceSchema();
+    exports2.APPROVAL_GATE_SCRIPT = "aidlc-approval-gate";
+    exports2.AUTOPILOT_ENV = "AIDLC_AUTOPILOT";
+    var PROTECTED_BRANCHES = ["main", "master"];
+    function findApprovalGate2(root, opts = {}) {
+      const files = [
+        path17.join(root, ".claude", "settings.json"),
+        path17.join(root, ".claude", "settings.local.json"),
+        path17.join(opts.userConfigDir ?? (0, claudeHome_1.claudeConfigDir)(), "settings.json")
+      ];
+      let brokenReason = null;
+      for (const file of files) {
+        let settings = null;
+        try {
+          settings = JSON.parse(fs14.readFileSync(file, "utf8"));
+        } catch {
+          continue;
+        }
+        const groups = settings?.hooks?.PreToolUse;
+        if (!Array.isArray(groups)) {
+          continue;
+        }
+        for (const g of groups) {
+          if (!Array.isArray(g?.hooks) || !matcherCoversBash(g.matcher)) {
+            continue;
+          }
+          for (const h of g.hooks) {
+            if (typeof h?.command !== "string" || !h.command.includes(exports2.APPROVAL_GATE_SCRIPT)) {
+              continue;
+            }
+            const script = hookScriptPath(h.command, root);
+            if (!script) {
+              continue;
+            }
+            if (!fs14.existsSync(script)) {
+              brokenReason = `${rel(root, file)} runs ${script}, which does not exist.`;
+              continue;
+            }
+            if (runsScriptDirectly(h.command) && process.platform !== "win32" && !isExecutable(script)) {
+              brokenReason = `${rel(root, script)} is registered in ${rel(root, file)} but is not executable (chmod +x it).`;
+              continue;
+            }
+            return { found: true, settingsFile: file, script };
+          }
+        }
+      }
+      return {
+        found: false,
+        reason: brokenReason ?? 'no PreToolUse hook running .claude/hooks/aidlc-approval-gate.py on Bash in .claude/settings.json, .claude/settings.local.json or your user settings \u2014 see ONBOARDING.md, "Turn on the approval gate".'
+      };
+    }
+    function autopilotPreflight(args) {
+      const { root, state, config } = args;
+      const problems = [];
+      const git = (gitArgs) => {
+        try {
+          return (0, child_process_1.execFileSync)("git", gitArgs, {
+            cwd: root,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            maxBuffer: 64 * 1024 * 1024
+          });
+        } catch {
+          return null;
+        }
+      };
+      if (git(["rev-parse", "--is-inside-work-tree"])?.trim() !== "true") {
+        problems.push("This is not a git checkout. Autopilot works on a branch of its own, so it needs git.");
+      } else {
+        const branch = git(["symbolic-ref", "--short", "-q", "HEAD"])?.trim();
+        const remoteDefault = git(["symbolic-ref", "--short", "-q", "refs/remotes/origin/HEAD"])?.trim().replace(/^origin\//, "");
+        const protectedBranches = /* @__PURE__ */ new Set([...PROTECTED_BRANCHES, ...remoteDefault ? [remoteDefault] : []]);
+        if (!branch) {
+          problems.push("HEAD is detached. Check out a branch for this epic (git switch -c <branch>) so the agent's commits land on it.");
+        } else if (protectedBranches.has(branch)) {
+          problems.push(`You are on "${branch}". Autopilot does not commit to it \u2014 switch to a branch for this epic (git switch -c <branch>).`);
+        }
+        const skip = [
+          toPosix(path17.relative(root, path17.join((0, EpicScaffold_1.epicsRoot)(root, config), state.runId))),
+          ".aidlc"
+        ];
+        const dirty = dirtyPaths(git(["status", "--porcelain=v1", "-z", "--untracked-files=all"]) ?? "").filter((p) => !skip.some((s) => p === s || p.startsWith(`${s}/`)));
+        if (dirty.length > 0) {
+          const shown = dirty.slice(0, 5).join(", ") + (dirty.length > 5 ? `, and ${dirty.length - 5} more` : "");
+          problems.push(`The working tree has uncommitted changes (${shown}). Commit or stash them first: the agent would build on them, and its own changes would be mixed in with them.`);
+        }
+      }
+      const claudeSteps = new Set(state.steps.filter((s) => s.status !== "approved").map((s) => config.agents.find((a) => a.id === s.agent)).filter((a) => a?.runner === "default").map((a) => a.id));
+      if (claudeSteps.size > 0) {
+        const gate = findApprovalGate2(root, { userConfigDir: args.userConfigDir });
+        if (!gate.found) {
+          problems.push(`The approval gate is not on: ${gate.reason}`);
+        }
+      }
+      args.pipeline.steps.forEach((s, i) => {
+        if (state.steps[i]?.status === "approved") {
+          return;
+        }
+        const norm = (0, WorkspaceSchema_1.normalizeStep)(s);
+        const runner = norm.auto_review ? norm.auto_review_runner : void 0;
+        if (runner && hasEmptyCiChecks2(root, runner)) {
+          problems.push(emptyCiChecksMessage2(runner, norm.name ?? norm.agent));
+        }
+      });
+      return problems;
+    }
+    var EMPTY_CHECKS = /\bCHECKS\s*=\s*\[\s*\]/;
+    function hasEmptyCiChecks2(root, runner) {
+      let text;
+      try {
+        text = fs14.readFileSync(path17.isAbsolute(runner) ? runner : path17.join(root, runner), "utf8");
+      } catch {
+        return false;
+      }
+      const code = text.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "");
+      return EMPTY_CHECKS.test(code);
+    }
+    function emptyCiChecksMessage2(runner, step) {
+      return `${runner} has no commands in CHECKS, so it passes whatever "${step}" builds. Add your lint, typecheck and test commands to it before leaving a run alone.`;
+    }
+    function dirtyPaths(out2) {
+      const parts = out2.split("\0");
+      const paths = [];
+      for (let i = 0; i < parts.length; i++) {
+        const entry = parts[i];
+        if (entry.length < 4) {
+          continue;
+        }
+        paths.push(entry.slice(3));
+        if (entry[0] === "R" || entry[0] === "C") {
+          i++;
+        }
+      }
+      return paths;
+    }
+    function matcherCoversBash(matcher) {
+      if (!matcher || matcher === "*") {
+        return true;
+      }
+      try {
+        return new RegExp(`^(?:${matcher})$`).test("Bash");
+      } catch {
+        return matcher.split("|").map((m) => m.trim()).includes("Bash");
+      }
+    }
+    function hookScriptPath(command, root) {
+      const expanded = command.replace(/\$\{?CLAUDE_PROJECT_DIR\}?/g, root).replace(/["']/g, "");
+      const token = expanded.split(/\s+/).find((t) => t.includes(exports2.APPROVAL_GATE_SCRIPT));
+      if (!token) {
+        return null;
+      }
+      const p = token.startsWith("~/") ? path17.join(os3.homedir(), token.slice(2)) : token;
+      return path17.resolve(root, p);
+    }
+    function runsScriptDirectly(command) {
+      const first = command.replace(/["']/g, "").trim().split(/\s+/)[0] ?? "";
+      return first.includes(exports2.APPROVAL_GATE_SCRIPT);
+    }
+    function isExecutable(file) {
+      try {
+        fs14.accessSync(file, fs14.constants.X_OK);
+        return true;
+      } catch {
+        return false;
+      }
+    }
+    function rel(root, p) {
+      const r = path17.relative(root, p);
+      return r.startsWith("..") ? p : toPosix(r);
+    }
+    function toPosix(p) {
+      return p.split(path17.sep).join("/");
+    }
+  }
+});
+
 // ../core/dist/runs/GitRunStateStore.js
 var require_GitRunStateStore = __commonJS({
   "../core/dist/runs/GitRunStateStore.js"(exports2) {
@@ -31355,20 +31976,323 @@ Expected a JS/TS module at "${scriptPath}" with a default-exported function retu
           at,
           runner
         };
-      } finally {
-        if (timer) {
-          clearTimeout(timer);
+      } finally {
+        if (timer) {
+          clearTimeout(timer);
+        }
+      }
+      if (!raw || raw.decision !== "pass" && raw.decision !== "reject" || typeof raw.reason !== "string") {
+        return {
+          decision: "reject",
+          reason: `Auto-reviewer returned malformed verdict: ${JSON.stringify(raw)}`,
+          at,
+          runner
+        };
+      }
+      const verdict = { decision: raw.decision, reason: raw.reason, at, runner };
+      const sendBackTo = raw.sendBackTo;
+      if (sendBackTo !== void 0) {
+        verdict.sendBackTo = sendBackTo === null || typeof sendBackTo === "string" || typeof sendBackTo === "number" ? sendBackTo : JSON.stringify(sendBackTo);
+      }
+      return verdict;
+    }
+  }
+});
+
+// ../core/dist/runs/revisionFeedback.js
+var require_revisionFeedback = __commonJS({
+  "../core/dist/runs/revisionFeedback.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.revisionFeedback = revisionFeedback;
+    function revisionFeedback(state, stepIdx) {
+      const step = state.steps[stepIdx];
+      if (!step || step.revision <= 1) {
+        return null;
+      }
+      const history = step.history ?? [];
+      const prev = step.revision - 1;
+      const reject = findLast(history, (h) => h.kind === "reject" && h.revision === prev && h.sentBackToIdx === stepIdx);
+      const reason = reject?.kind === "reject" ? reject.reason?.trim() : void 0;
+      const carried = findLast(history, (h) => h.kind === "rerun" && h.revision === prev);
+      const fbRaw = step.feedback?.trim();
+      const fb = fbRaw && !(carried?.kind === "rerun" && carried.feedback?.trim() === fbRaw) ? fbRaw : void 0;
+      const lines = [];
+      if (reason && !fb?.includes(reason)) {
+        lines.push(`Rejected at step ${stepIdx + 1} (${step.agent}): ${reason}`);
+      }
+      if (fb && !reason?.includes(fb)) {
+        lines.push(fb);
+      }
+      if (lines.length === 0) {
+        return null;
+      }
+      return [`Revision ${step.revision}. Address before anything else:`, ...lines.map((l) => `- ${l}`)].join("\n");
+    }
+    function findLast(entries, pred) {
+      for (let i = entries.length - 1; i >= 0; i--) {
+        if (pred(entries[i])) {
+          return entries[i];
+        }
+      }
+      return void 0;
+    }
+  }
+});
+
+// ../core/dist/runs/runLock.js
+var require_runLock = __commonJS({
+  "../core/dist/runs/runLock.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    } : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.runLockFile = runLockFile;
+    exports2.acquireRunLock = acquireRunLock;
+    var fs14 = __importStar(require("fs"));
+    var path17 = __importStar(require("path"));
+    var RunStateStore_1 = require_RunStateStore();
+    function runLockFile(root, runId) {
+      return RunStateStore_1.RunStateStore.file(root, runId).replace(/\.json$/, ".lock");
+    }
+    function acquireRunLock(root, runId) {
+      const file = runLockFile(root, runId);
+      fs14.mkdirSync(path17.dirname(file), { recursive: true });
+      for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+          fs14.writeFileSync(file, JSON.stringify({ pid: process.pid, at: (/* @__PURE__ */ new Date()).toISOString() }), { flag: "wx" });
+          return {
+            release: () => {
+              if (lockPid(file) === process.pid) {
+                fs14.rmSync(file, { force: true });
+              }
+            }
+          };
+        } catch (err) {
+          if (err.code !== "EEXIST") {
+            throw err;
+          }
+        }
+        const pid = lockPid(file);
+        if (pid !== null && isAlive(pid)) {
+          return { heldBy: pid };
+        }
+        fs14.rmSync(file, { force: true });
+      }
+      return { heldBy: lockPid(file) ?? -1 };
+    }
+    function lockPid(file) {
+      try {
+        const pid = JSON.parse(fs14.readFileSync(file, "utf8")).pid;
+        return typeof pid === "number" && Number.isInteger(pid) && pid > 0 ? pid : null;
+      } catch {
+        return null;
+      }
+    }
+    function isAlive(pid) {
+      try {
+        process.kill(pid, 0);
+        return true;
+      } catch (err) {
+        return err.code === "EPERM";
+      }
+    }
+  }
+});
+
+// ../core/dist/runs/codeFingerprint.js
+var require_codeFingerprint = __commonJS({
+  "../core/dist/runs/codeFingerprint.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    } : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.codeFingerprint = codeFingerprint;
+    var child_process_1 = require("child_process");
+    var fs14 = __importStar(require("fs"));
+    var os3 = __importStar(require("os"));
+    var path17 = __importStar(require("path"));
+    function codeFingerprint(root, exclude) {
+      const git = (args, env) => (0, child_process_1.execFileSync)("git", args, {
+        cwd: root,
+        encoding: "utf8",
+        env: env ? { ...process.env, ...env } : process.env,
+        stdio: ["ignore", "pipe", "ignore"],
+        maxBuffer: 64 * 1024 * 1024
+      }).trim();
+      let realIndex;
+      try {
+        realIndex = path17.resolve(root, git(["rev-parse", "--git-path", "index"]));
+      } catch {
+        return null;
+      }
+      const dir = fs14.mkdtempSync(path17.join(os3.tmpdir(), "aidlc-fp-"));
+      const index = path17.join(dir, "index");
+      try {
+        if (fs14.existsSync(realIndex)) {
+          fs14.copyFileSync(realIndex, index);
+        }
+        const env = { GIT_INDEX_FILE: index };
+        git(["add", "-A", "--", "."], env);
+        const skip = exclude.filter((p) => p && !p.startsWith(".."));
+        if (skip.length > 0) {
+          git(["rm", "-r", "-q", "--cached", "--ignore-unmatch", "--", ...skip], env);
+        }
+        return git(["write-tree"], env);
+      } catch {
+        return null;
+      } finally {
+        fs14.rmSync(dir, { recursive: true, force: true });
+      }
+    }
+  }
+});
+
+// ../core/dist/runs/batchStatus.js
+var require_batchStatus = __commonJS({
+  "../core/dist/runs/batchStatus.js"(exports2) {
+    "use strict";
+    var __createBinding = exports2 && exports2.__createBinding || (Object.create ? function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    } : function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    });
+    var __setModuleDefault = exports2 && exports2.__setModuleDefault || (Object.create ? function(o, v) {
+      Object.defineProperty(o, "default", { enumerable: true, value: v });
+    } : function(o, v) {
+      o["default"] = v;
+    });
+    var __importStar = exports2 && exports2.__importStar || /* @__PURE__ */ function() {
+      var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function(o2) {
+          var ar = [];
+          for (var k in o2) if (Object.prototype.hasOwnProperty.call(o2, k)) ar[ar.length] = k;
+          return ar;
+        };
+        return ownKeys(o);
+      };
+      return function(mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) {
+          for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        }
+        __setModuleDefault(result, mod);
+        return result;
+      };
+    }();
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.readBatchStatus = readBatchStatus;
+    exports2.readBatchStatusFile = readBatchStatusFile;
+    var fs14 = __importStar(require("fs"));
+    var path17 = __importStar(require("path"));
+    var LINE = /^[\s>#*_-]*status[\s*_]*:[\s*_`]*([a-z]+)[*_`]*(.*)$/i;
+    var TAIL = /^\s*(?:$|[—–-]\s|[(.,;])/;
+    function readBatchStatus(text, file = "the report") {
+      let last = null;
+      for (const line of text.split(/\r?\n/)) {
+        const m = LINE.exec(line);
+        if (m) {
+          last = { word: m[1].toLowerCase(), tail: m[2] };
         }
       }
-      if (!raw || raw.decision !== "pass" && raw.decision !== "reject" || typeof raw.reason !== "string") {
-        return {
-          decision: "reject",
-          reason: `Auto-reviewer returned malformed verdict: ${JSON.stringify(raw)}`,
-          at,
-          runner
-        };
+      if (!last) {
+        return { error: `${file} has no \`Status: continue\` or \`Status: done\` line.` };
+      }
+      if ((last.word === "continue" || last.word === "done") && TAIL.test(last.tail)) {
+        return { status: last.word };
+      }
+      return {
+        error: `The last Status line in ${file} reads "${last.word}${last.tail}", not \`Status: continue\` or \`Status: done\`.`
+      };
+    }
+    function readBatchStatusFile(root, rel) {
+      const abs = path17.isAbsolute(rel) ? rel : path17.join(root, rel);
+      let text;
+      try {
+        text = fs14.readFileSync(abs, "utf8");
+      } catch {
+        return { error: `${rel} does not exist, so the batch did not say whether it is done.` };
       }
-      return { decision: raw.decision, reason: raw.reason, at, runner };
+      return readBatchStatus(text, rel);
     }
   }
 });
@@ -31426,9 +32350,16 @@ var require_execEngine = __commonJS({
     var runProgress_1 = require_runProgress();
     var budget_1 = require_budget();
     var producesSnapshot_1 = require_producesSnapshot();
+    var revisionFeedback_1 = require_revisionFeedback();
+    var runLock_1 = require_runLock();
+    var codeFingerprint_1 = require_codeFingerprint();
+    var batchStatus_1 = require_batchStatus();
+    var autopilotPreflight_1 = require_autopilotPreflight();
+    var processTree_1 = require_processTree();
     var pricing_1 = require_pricing();
     var models_1 = require_models();
     var WorkspaceSchema_1 = require_WorkspaceSchema();
+    var RunState_1 = require_RunState();
     var artifactLanguage_1 = require_artifactLanguage();
     var strictMode_1 = require_strictMode();
     var inheritedContext_1 = require_inheritedContext();
@@ -31444,6 +32375,21 @@ var require_execEngine = __commonJS({
       }
     }
     async function runExecLoop2(root, runId, opts, hooks = {}) {
+      if (opts.dryRun) {
+        return execLoop2(root, runId, opts, hooks);
+      }
+      const lock = (0, runLock_1.acquireRunLock)(root, runId);
+      if ("heldBy" in lock) {
+        hooks.onRunFailed?.(`Run "${runId}" is already being executed (pid ${lock.heldBy}). Stop that one first, or wait for it to finish.`);
+        return { kind: "error" };
+      }
+      try {
+        return await execLoop2(root, runId, opts, hooks);
+      } finally {
+        lock.release();
+      }
+    }
+    async function execLoop2(root, runId, opts, hooks) {
       const untilIdx = opts.untilIdx ?? -1;
       const initialState = RunStateStore_1.RunStateStore.load(root, runId);
       if (!initialState) {
@@ -31456,8 +32402,23 @@ var require_execEngine = __commonJS({
         return { kind: "error" };
       }
       const budget = initialPipeline.budget;
+      const batchesRun = /* @__PURE__ */ new Map();
+      if (initialPipeline.autopilot && !opts.dryRun) {
+        let problems;
+        try {
+          const ws = WorkspaceLoader_1.WorkspaceLoader.load(root);
+          problems = (0, autopilotPreflight_1.autopilotPreflight)({ root, state: initialState, pipeline: initialPipeline, config: ws.config });
+        } catch (err) {
+          problems = [`Could not check the workspace: ${errMsg(err)}`];
+        }
+        if (problems.length > 0) {
+          hooks.onRunFailed?.(`Pipeline "${initialPipeline.id}" is an autopilot pipeline, and it is not safe to leave this run alone yet:
+` + problems.map((p) => `  - ${p}`).join("\n"));
+          return { kind: "error" };
+        }
+      }
       while (true) {
-        if (opts.shouldCancel?.()) {
+        if (opts.shouldCancel?.() || opts.signal?.aborted) {
           hooks.onCancelled?.();
           return { kind: "cancelled" };
         }
@@ -31523,47 +32484,56 @@ var require_execEngine = __commonJS({
           hooks.onRunFailed?.(`Unexpected step status "${step.status}" \u2014 cannot exec.`);
           return { kind: "error" };
         }
-        const success = await execStep(root, state, runId, opts, hooks);
-        if (!success) {
+        const ran = await execStep(root, state, runId, opts, hooks);
+        if (ran === "failed") {
           return { kind: "error" };
         }
-        if (opts.dryRun) {
-          return { kind: "dry_run" };
+        if (ran === "stalled") {
+          return { kind: "stalled" };
+        }
+        if (ran === "stopped") {
+          return { kind: "cancelled" };
         }
-        if (budget) {
+        if (ran === "batch") {
+          const overBudget2 = checkRunBudget(root, runId, state.currentStepIdx, budget, hooks);
+          if (overBudget2) {
+            return overBudget2;
+          }
+          const idx = state.currentStepIdx;
+          const cfg = initialPipeline.steps[idx] ? (0, WorkspaceSchema_1.normalizeStep)(initialPipeline.steps[idx]).batches : void 0;
+          const key = `${idx}:${step.revision}`;
+          const n = (batchesRun.get(key) ?? 0) + 1;
+          batchesRun.set(key, n);
           const after = RunStateStore_1.RunStateStore.load(root, runId);
-          const stepCosts = after ? after.steps.map((s) => s.costUsd) : [];
-          const stepAccounting = after ? after.steps.map((s) => {
-            if (typeof s.costUsd === "number") {
-              return s.costEstimated ? "estimated" : "measured";
-            }
-            return s.startedAt ? "blind" : void 0;
-          }) : [];
-          const lastStepCost = after?.steps[state.currentStepIdx]?.costUsd;
-          const verdict = (0, budget_1.checkBudget)({ stepCosts, stepAccounting, budget, lastStepCost });
-          if (!verdict.ok) {
-            hooks.onBudget?.({
-              spent: verdict.spent,
-              limit: verdict.limit,
-              ok: false,
-              exceeded: verdict.exceeded,
-              onExceed: budget.on_exceed,
+          const batchNo = after ? batchesOf(after.steps[idx]).length : n;
+          if (cfg && n >= cfg.max) {
+            hooks.onStalled?.({
+              stepIdx: idx,
+              agent: step.agent,
+              revision: step.revision,
               runId,
-              measured: verdict.measured,
-              estimated: verdict.estimated,
-              blindSteps: verdict.blindSteps
+              reason: `"${step.agent}" ran ${n} batch${n === 1 ? "" : "es"} (\`max_batches: ${cfg.max}\`) and still says \`Status: continue\`. Read its progress before letting it carry on: running exec again allows ${cfg.max} more.`
             });
-            return budget.on_exceed === "fail" ? { kind: "error" } : { kind: "budget_pause" };
-          }
-          hooks.onBudget?.({
-            spent: verdict.spent,
-            limit: budget.max_usd,
-            ok: true,
-            runId,
-            measured: verdict.measured,
-            estimated: verdict.estimated,
-            blindSteps: verdict.blindSteps
-          });
+            return { kind: "stalled" };
+          }
+          if (cfg?.pause) {
+            hooks.onBatchPause?.({
+              stepIdx: idx,
+              agent: step.agent,
+              batch: batchNo,
+              runId,
+              report: batchReport(initialPipeline, after ?? state, idx) ?? ""
+            });
+            return { kind: "batch_pause" };
+          }
+          continue;
+        }
+        if (opts.dryRun) {
+          return { kind: "dry_run" };
+        }
+        const overBudget = checkRunBudget(root, runId, state.currentStepIdx, budget, hooks);
+        if (overBudget) {
+          return overBudget;
         }
         if (untilIdx >= 0 && state.currentStepIdx >= untilIdx) {
           hooks.onUntilStop?.({ untilIdx });
@@ -31571,10 +32541,49 @@ var require_execEngine = __commonJS({
         }
       }
     }
+    function checkRunBudget(root, runId, stepIdx, budget, hooks) {
+      if (!budget) {
+        return null;
+      }
+      const after = RunStateStore_1.RunStateStore.load(root, runId);
+      const stepCosts = after ? after.steps.map((s) => s.costUsd) : [];
+      const stepAccounting = after ? after.steps.map((s) => {
+        if (typeof s.costUsd === "number") {
+          return s.costEstimated ? "estimated" : "measured";
+        }
+        return s.startedAt ? "blind" : void 0;
+      }) : [];
+      const lastStepCost = after?.steps[stepIdx]?.costUsd;
+      const verdict = (0, budget_1.checkBudget)({ stepCosts, stepAccounting, budget, lastStepCost });
+      if (!verdict.ok) {
+        hooks.onBudget?.({
+          spent: verdict.spent,
+          limit: verdict.limit,
+          ok: false,
+          exceeded: verdict.exceeded,
+          onExceed: budget.on_exceed,
+          runId,
+          measured: verdict.measured,
+          estimated: verdict.estimated,
+          blindSteps: verdict.blindSteps
+        });
+        return budget.on_exceed === "fail" ? { kind: "error" } : { kind: "budget_pause" };
+      }
+      hooks.onBudget?.({
+        spent: verdict.spent,
+        limit: budget.max_usd,
+        ok: true,
+        runId,
+        measured: verdict.measured,
+        estimated: verdict.estimated,
+        blindSteps: verdict.blindSteps
+      });
+      return null;
+    }
     function loadSkills(ws, skillIds) {
       return skillIds.map((id) => ws.skills.load(id)).join("\n\n---\n\n");
     }
-    function buildStepPrompt(ws, agent, skillIds, runner, root, epicId) {
+    function buildStepPrompt(ws, agent, skillIds, runner, root, epicId, stepRec, stepIdx) {
       const harness = (0, types_1.harnessCapabilities)(runner);
       return (0, promptComposer_1.composeAgentPrompt)({
         skills: loadSkills(ws, skillIds),
@@ -31584,7 +32593,8 @@ var require_execEngine = __commonJS({
         artifactLanguage: (0, artifactLanguage_1.resolveArtifactLanguage)(ws.config),
         // Per epic, not per workspace: how deep a phase goes is a property of the
         // work item. An epic that never set it reads as strict.
-        strictMode: (0, strictMode_1.resolveEpicStrictMode)((0, EpicScaffold_1.epicsRoot)(root, ws.config), epicId)
+        strictMode: (0, strictMode_1.resolveEpicStrictMode)((0, EpicScaffold_1.epicsRoot)(root, ws.config), epicId),
+        runHistory: stepRec.revision > 1 ? { file: path17.relative(root, RunStateStore_1.RunStateStore.file(root, epicId)).split(path17.sep).join("/"), stepIdx } : null
       });
     }
     async function execStep(root, state, runId, opts, hooks) {
@@ -31596,17 +32606,17 @@ var require_execEngine = __commonJS({
         ws = WorkspaceLoader_1.WorkspaceLoader.load(root);
       } catch (err) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Failed to load workspace: ${errMsg(err)}` });
-        return false;
+        return "failed";
       }
       const pipeline = ws.config.pipelines.find((p) => p.id === state.pipelineId);
       if (!pipeline) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Pipeline "${state.pipelineId}" not found in workspace.yaml.` });
-        return false;
+        return "failed";
       }
       const agent = ws.config.agents.find((a) => a.id === agentId);
       if (!agent) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Agent "${agentId}" not found in workspace.yaml.` });
-        return false;
+        return "failed";
       }
       const stepCfg = pipeline.steps[stepIdx];
       const norm = stepCfg ? (0, WorkspaceSchema_1.normalizeStep)(stepCfg) : void 0;
@@ -31621,22 +32631,38 @@ var require_execEngine = __commonJS({
         runner = ws.runners.resolve(agent);
       } catch (err) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Failed to resolve runner for agent "${agentId}": ${errMsg(err)}` });
-        return false;
+        return "failed";
       }
       try {
-        prompt2 = buildStepPrompt(ws, agent, skillIds, runner, root, state.runId);
+        prompt2 = buildStepPrompt(ws, agent, skillIds, runner, root, state.runId, stepRec, stepIdx);
       } catch (err) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Failed to load skills for agent "${agentId}": ${errMsg(err)}` });
-        return false;
+        return "failed";
       }
       const skillText = prompt2.text;
       const env = ws.envResolver.resolveLayered(ws.config.environment ?? {}, agent.env ?? {});
+      if (pipeline.autopilot) {
+        env[autopilotPreflight_1.AUTOPILOT_ENV] = "1";
+      }
       const contextStr = Object.entries(state.context).map(([k, v]) => `${k}=${v}`).join(" ");
       const epicRoot = path17.relative(root, (0, EpicScaffold_1.epicsRoot)(root, ws.config)).split(path17.sep).join("/");
       const inherited = state.context.from_epic ? `
 
 About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` : "";
-      const userMessage = opts.message ?? (contextStr ? contextStr + inherited : `Execute step: ${agentId}`);
+      const baseMessage = opts.message ?? (contextStr ? contextStr + inherited : `Execute step: ${agentId}`);
+      const feedback = (0, revisionFeedback_1.revisionFeedback)(state, stepIdx);
+      const report = norm?.batches ? batchReport(pipeline, state, stepIdx) : null;
+      if (norm?.batches && !report) {
+        hooks.onStepFailed?.({
+          stepIdx,
+          agent: agentId,
+          message: `Step "${agentId}" has \`batches: true\` but no \`produces\` file to write its \`Status:\` line in.`
+        });
+        return "failed";
+      }
+      const batchNo = report ? batchesOf(stepRec).length + 1 : 0;
+      const batchNote = report ? batchInstructions(report, batchNo, stepRec.revision) : null;
+      const userMessage = [baseMessage, feedback, batchNote].filter(Boolean).join("\n\n");
       if (opts.dryRun) {
         hooks.onDryRunPreview?.({
           skills: skillIds.join(", "),
@@ -31645,7 +32671,7 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
           env,
           inlined: prompt2.included
         });
-        return true;
+        return "done";
       }
       hooks.onStepStart?.({
         stepIdx,
@@ -31659,20 +32685,69 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
       const aliases = (0, pricing_1.providerAliases)(ws.config.providers, agent.runner);
       const resolvedModel = (0, models_1.resolveProviderModel)(agent.runner, agentModel, aliases);
       const producedBefore = (0, producesSnapshot_1.snapshotProduces)({ state, pipeline, workspaceRoot: root, stepIdx });
-      const result = await runner.run({
-        skill: skillText,
-        env,
-        args: userMessage ? [userMessage] : [],
-        workspaceRoot: root,
-        model: agentModel,
-        modelAliases: aliases,
-        onOutput: (chunk) => hooks.onOutput?.(chunk),
-        onError: (chunk) => hooks.onErrorOutput?.(chunk),
-        claude: null
-      });
-      if (!result.success) {
+      const codeExclude = [
+        path17.relative(root, path17.join((0, EpicScaffold_1.epicsRoot)(root, ws.config), state.runId)),
+        ".aidlc"
+      ];
+      const sentBackHere = isAutoSendBackTarget(state, stepIdx);
+      const codeBefore = sentBackHere || report ? (0, codeFingerprint_1.codeFingerprint)(root, codeExclude) : null;
+      const stop = new AbortController();
+      const minutes = norm?.timeout_minutes;
+      let timedOut = false;
+      const timer = minutes ? setTimeout(() => {
+        timedOut = true;
+        stop.abort();
+      }, minutes * 6e4) : void 0;
+      const onStopNow = () => stop.abort();
+      opts.signal?.addEventListener("abort", onStopNow, { once: true });
+      let result;
+      try {
+        result = await settledOrAbandoned(runner.run({
+          skill: skillText,
+          env,
+          args: userMessage ? [userMessage] : [],
+          workspaceRoot: root,
+          model: agentModel,
+          modelAliases: aliases,
+          extraArgs: ws.config.providers[agent.runner]?.args,
+          signal: stop.signal,
+          onOutput: (chunk) => hooks.onOutput?.(chunk),
+          onError: (chunk) => hooks.onErrorOutput?.(chunk),
+          claude: null
+        }), stop.signal);
+      } finally {
+        if (timer) {
+          clearTimeout(timer);
+        }
+        opts.signal?.removeEventListener("abort", onStopNow);
+      }
+      if (stop.signal.aborted) {
+        recordInterrupted(root, runId, stepIdx, timedOut ? { why: "timeout", minutes } : { why: "stopped" });
+        if (timedOut) {
+          hooks.onStepFailed?.({
+            stepIdx,
+            agent: agentId,
+            message: `Step "${agentId}" ran past its ${minutes}-minute limit (\`timeout_minutes\`) and was stopped. It is still awaiting work on revision ${stepRec.revision}; nothing was sent back. Whatever it half-wrote is still in the working tree.`
+          });
+          return "failed";
+        }
+        hooks.onStepStopped?.({ stepIdx, agent: agentId, revision: stepRec.revision, runId });
+        return "stopped";
+      }
+      if (!result || !result.success) {
         hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Step "${agentId}" failed (non-zero exit).` });
-        return false;
+        return "failed";
+      }
+      const codeUnchanged = codeBefore !== null && (0, codeFingerprint_1.codeFingerprint)(root, codeExclude) === codeBefore;
+      if (sentBackHere && codeUnchanged && batchNo <= 1) {
+        hooks.onStalled?.({
+          stepIdx,
+          agent: agentId,
+          revision: stepRec.revision,
+          runId,
+          reason: `Revision ${stepRec.revision} of "${agentId}" changed no code \u2014 the working tree is what it was before it ran (its report aside). Sent back ${state.sendBacks} time${state.sendBacks === 1 ? "" : "s"}; stopping rather than have the same code reviewed again.`
+        });
+        return "stalled";
       }
       const stale = (0, producesSnapshot_1.unchangedProduces)(producedBefore, root);
       if (stale.length > 0) {
@@ -31681,37 +32756,64 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
           agent: agentId,
           message: `Step "${agentId}" reported success but left its artifacts unchanged: ${stale.join(", ")}. The agent may have failed to write them. Check its output, then rerun the step.`
         });
-        return false;
+        return "failed";
+      }
+      if (report) {
+        const read = (0, batchStatus_1.readBatchStatusFile)(root, report);
+        if ("error" in read) {
+          hooks.onStepFailed?.({
+            stepIdx,
+            agent: agentId,
+            message: `Step "${agentId}" runs in batches and its report cannot say whether it is done: ${read.error} Add the line, then run exec again.`
+          });
+          return "failed";
+        }
+        if (read.status === "continue") {
+          if (codeUnchanged) {
+            hooks.onStalled?.({
+              stepIdx,
+              agent: agentId,
+              revision: stepRec.revision,
+              runId,
+              reason: `Batch ${batchNo} of "${agentId}" asked for another session but changed no code \u2014 the working tree is what it was before it ran (its report aside). Stopping rather than start the same batch again.`
+            });
+            return "stalled";
+          }
+          const fresh = RunStateStore_1.RunStateStore.load(root, runId);
+          const rec = fresh?.steps[stepIdx];
+          if (!fresh || !rec) {
+            hooks.onStepFailed?.({ stepIdx, agent: agentId, message: `Run "${runId}" disappeared.` });
+            return "failed";
+          }
+          recordProvenance(rec, { agent, resolvedModel, agentModel, skillIds, alternatives, modelOpts });
+          const cost = addBatchCost(rec, batchNo, result, batchCost(result, ws, agent.runner, resolvedModel ?? agentModel));
+          rec.history = [...rec.history ?? [], {
+            kind: "batch",
+            at: (/* @__PURE__ */ new Date()).toISOString(),
+            revision: rec.revision,
+            batch: batchNo,
+            ...cost !== void 0 ? { costUsd: cost } : {}
+          }];
+          persist(root, fresh);
+          hooks.onBatchDone?.({
+            stepIdx,
+            agent: agentId,
+            revision: rec.revision,
+            batch: batchNo,
+            costUsd: cost,
+            costEstimated: rec.costEstimated,
+            runId
+          });
+          return "batch";
+        }
       }
       let next;
       let freshState;
       try {
         freshState = RunStateStore_1.RunStateStore.load(root, runId);
         const rec = freshState.steps[stepIdx];
-        rec.runner = agent.runner;
-        rec.model = resolvedModel;
-        if (alternatives) {
-          rec.skill = skillIds[0];
-        }
-        if (modelOpts.models) {
-          rec.chosenModel = agentModel;
-        }
-        rec.usage = result.usage;
-        if (typeof result.costUsd === "number") {
-          rec.costUsd = result.costUsd;
-          rec.costEstimated = void 0;
-        } else {
-          const est = (0, pricing_1.estimateCostUsd)({
-            table: (0, pricing_1.ratesFromConfig)(ws.config.providers),
-            provider: agent.runner,
-            model: resolvedModel ?? agentModel,
-            usage: result.usage
-          });
-          if (est) {
-            rec.costUsd = est.usd;
-            rec.costEstimated = true;
-          }
-        }
+        recordProvenance(rec, { agent, resolvedModel, agentModel, skillIds, alternatives, modelOpts });
+        addBatchCost(rec, batchNo, result, batchCost(result, ws, agent.runner, resolvedModel ?? agentModel));
         next = (0, PipelineRunner_1.markStepDone)({ state: freshState, pipeline, workspaceRoot: root });
       } catch (err) {
         if (err instanceof PipelineRunner_1.PipelineRunError && err.missing?.length) {
@@ -31719,7 +32821,7 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
         } else {
           hooks.onStepFailed?.({ stepIdx, agent: agentId, message: errMsg(err) });
         }
-        return false;
+        return "failed";
       }
       persist(root, next, freshState);
       const doneStep = next.steps[stepIdx];
@@ -31732,7 +32834,111 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
         runner: agent.runner,
         model: resolvedModel
       });
-      return true;
+      return "done";
+    }
+    function batchesOf(rec) {
+      if (!rec) {
+        return [];
+      }
+      return (rec.history ?? []).flatMap((h) => h.kind === "batch" && h.revision === rec.revision ? [h] : []);
+    }
+    function batchReport(pipeline, state, stepIdx) {
+      const cfg = pipeline.steps[stepIdx];
+      if (!cfg) {
+        return null;
+      }
+      const norm = (0, WorkspaceSchema_1.normalizeStep)(cfg);
+      const first = norm.produces.find((p) => !norm.produces_optional.includes(p));
+      return first ? (0, RunState_1.resolvePath)(first, state.context) : null;
+    }
+    function batchInstructions(report, batchNo, revision) {
+      const lines = [
+        `This step runs in batches: this is batch ${batchNo} of revision ${revision}, in a fresh session.`,
+        batchNo === 1 && revision > 1 ? `Make this batch the fixes the feedback above asks for. Keep the progress table ${report} already has from the earlier revision, so you know what is done, and add the fixes to it.` : batchNo === 1 ? "Start with the first batch in the plan." : `${report} records what earlier batches did. Read it first, then do the next batch in the plan.`,
+        `Do that one batch only, then update ${report}: its progress table, and as its last line \`Status: continue\` if any of the step's work is left, or \`Status: done\` when all of it is finished. A batch may be split smaller if it does not fit; never do two in one session.`
+      ];
+      return lines.join(" ");
+    }
+    function recordProvenance(rec, p) {
+      rec.runner = p.agent.runner;
+      rec.model = p.resolvedModel;
+      if (p.alternatives) {
+        rec.skill = p.skillIds[0];
+      }
+      if (p.modelOpts.models) {
+        rec.chosenModel = p.agentModel;
+      }
+    }
+    function batchCost(result, ws, provider, model) {
+      if (typeof result.costUsd === "number") {
+        return { usd: result.costUsd, estimated: false };
+      }
+      const est = (0, pricing_1.estimateCostUsd)({
+        table: (0, pricing_1.ratesFromConfig)(ws.config.providers),
+        provider,
+        model,
+        usage: result.usage
+      });
+      return est ? { usd: est.usd, estimated: true } : void 0;
+    }
+    function addBatchCost(rec, batchNo, result, cost) {
+      const carry = batchNo > 1;
+      rec.usage = carry ? addUsage(rec.usage, result.usage) : result.usage;
+      if (!cost) {
+        return void 0;
+      }
+      if (carry && typeof rec.costUsd === "number") {
+        rec.costUsd += cost.usd;
+        rec.costEstimated = rec.costEstimated || cost.estimated || void 0;
+      } else {
+        rec.costUsd = cost.usd;
+        rec.costEstimated = cost.estimated || void 0;
+      }
+      return cost.usd;
+    }
+    function addUsage(a, b) {
+      if (!a) {
+        return b;
+      }
+      if (!b) {
+        return a;
+      }
+      const sum = (x, y) => x === void 0 && y === void 0 ? void 0 : (x ?? 0) + (y ?? 0);
+      return { inputTokens: sum(a.inputTokens, b.inputTokens), outputTokens: sum(a.outputTokens, b.outputTokens) };
+    }
+    async function settledOrAbandoned(run, signal) {
+      let timer;
+      const abandoned = new Promise((resolve5) => {
+        const giveUp = () => {
+          timer = setTimeout(() => resolve5(null), processTree_1.STOP_GRACE_MS + 5e3);
+        };
+        if (signal.aborted) {
+          giveUp();
+        } else {
+          signal.addEventListener("abort", giveUp, { once: true });
+        }
+      });
+      try {
+        return await Promise.race([run, abandoned]);
+      } finally {
+        if (timer) {
+          clearTimeout(timer);
+        }
+      }
+    }
+    function recordInterrupted(root, runId, stepIdx, what) {
+      const fresh = RunStateStore_1.RunStateStore.load(root, runId);
+      const rec = fresh?.steps[stepIdx];
+      if (!fresh || !rec) {
+        return;
+      }
+      rec.history = [...rec.history ?? [], {
+        kind: "interrupted",
+        at: (/* @__PURE__ */ new Date()).toISOString(),
+        revision: rec.revision,
+        ...what
+      }];
+      RunStateStore_1.RunStateStore.save(root, fresh);
     }
     async function runAutoReviewStep(root, runId, hooks) {
       const state = RunStateStore_1.RunStateStore.load(root, runId);
@@ -31762,18 +32968,43 @@ About these inputs: ${(0, inheritedContext_1.inheritedContextNote)(epicRoot)}` :
         return false;
       }
       persist(root, next, state);
+      const idx = state.currentStepIdx;
+      const sentBack = verdict.decision === "reject" && next.currentStepIdx !== idx && next.steps[idx].status === "pending";
       hooks.onAutoReviewResult?.({
         agent: step.agent,
         decision: verdict.decision,
-        reason: verdict.reason,
-        runId
+        reason: next.steps[idx].rejectReason ?? verdict.reason,
+        runId,
+        ...sentBack ? {
+          sentBackTo: {
+            stepIdx: next.currentStepIdx,
+            agent: next.steps[next.currentStepIdx].agent,
+            revision: next.steps[next.currentStepIdx].revision,
+            count: next.sendBacks ?? 0,
+            max: pipeline.max_send_backs ?? WorkspaceSchema_1.DEFAULT_MAX_SEND_BACKS
+          }
+        } : {}
       });
       return true;
     }
+    function isAutoSendBackTarget(state, stepIdx) {
+      if (!state.sendBacks) {
+        return false;
+      }
+      let latest = null;
+      for (const s of state.steps) {
+        for (const h of s.history ?? []) {
+          if (h.kind === "reject" && h.source && (!latest || h.at >= latest.at)) {
+            latest = { at: h.at, to: h.sentBackToIdx };
+          }
+        }
+      }
+      return latest?.to === stepIdx;
+    }
     async function autoApproveStep(root, state, hooks) {
       const ws = WorkspaceLoader_1.WorkspaceLoader.load(root);
       const pipeline = ws.config.pipelines.find((p) => p.id === state.pipelineId);
-      const next = (0, PipelineRunner_1.approveStep)({ state, pipeline });
+      const next = { ...(0, PipelineRunner_1.approveStep)({ state, pipeline }), sendBacks: state.sendBacks };
       persist(root, next, state);
       hooks.onAutoApproved?.({ agent: state.steps[state.currentStepIdx].agent });
     }
@@ -31948,6 +33179,10 @@ var require_runReport = __commonJS({
             return `  - \u2714 approved (rev ${h.revision}${h.skill ? `, ${h.skill}` : ""}${h.model ? `, ${h.model}` : ""})`;
           case "undo":
             return `  - \u21B6 mark-done undone (rev ${h.revision}, was ${h.from})`;
+          case "interrupted":
+            return h.why === "timeout" ? `  - \u23F1 stopped after ${h.minutes ?? "?"} min (timeout_minutes, rev ${h.revision})` : `  - \u23F9 stopped mid-step (rev ${h.revision})`;
+          case "batch":
+            return `  - \u21BB batch ${h.batch} done, more to come (rev ${h.revision}${typeof h.costUsd === "number" ? `, $${h.costUsd.toFixed(4)}` : ""})`;
           default:
             return "  - (unknown event)";
         }
@@ -32593,6 +33828,8 @@ into working code on a feature branch.
         dependsOn: ["review"]
       }
     ];
+    var VERDICT_VALIDATOR = ".aidlc/validators/verdict.mjs";
+    var CI_VALIDATOR = ".aidlc/validators/ci.mjs";
     var AINATIVE_RECIPES = [
       {
         id: "native-quick",
@@ -32601,7 +33838,7 @@ into working code on a feature branch.
       },
       {
         id: "native-lite",
-        description: "Small change with a precedent already in the codebase \u2014 no spec, no separate verify. The human gates sit up front, on intent and build-plan, where a wrong direction is cheapest to correct; implement and review then run to the end unattended. Trade-off: review is the only quality gate left, and nobody reads it before the branch is finished \u2014 prefer native-fix when the change has no precedent to follow.",
+        description: "Small change with a precedent already in the codebase \u2014 no spec, no separate verify. The human gates sit up front, on intent and build-plan, where a wrong direction is cheapest to correct; implement and review then run to the end unattended. Trade-off: review is the only quality gate left, and nobody reads it before the branch is finished \u2014 a hold verdict stops the run, but prefer native-fix when the change has no precedent to follow.",
         steps: ["intent", "build-plan", "implement", "review"],
         // Spelled out for all four steps, including the two that would inherit
         // `true` anyway: where the humans stand is the point of this recipe, so
@@ -32610,7 +33847,48 @@ into working code on a feature branch.
           intent: { human_review: true },
           "build-plan": { human_review: true },
           implement: { human_review: false },
-          review: { human_review: false }
+          // Nobody reads review.md before the run ends, so something has to: a
+          // `hold` (or no readable verdict) rejects the step instead of letting
+          // the run report `completed`.
+          review: { human_review: false, auto_review: true, auto_review_runner: VERDICT_VALIDATOR }
+        }
+      },
+      {
+        id: "native-autopilot",
+        description: "Left to run on its own once the plan is approved \u2014 no spec. A person approves intent and build-plan, then implement, verify and review run unattended: CI checks implement, and a failed verify or a review hold sends the work back to implement on its own, up to three times. The run stops at review for a person to approve the finished branch. Needs a branch of its own, the approval-gate hook and real CHECKS in .aidlc/validators/ci.mjs.",
+        steps: ["intent", "build-plan", "implement", "verify", "review"],
+        autopilot: true,
+        max_send_backs: 3,
+        gates: {
+          intent: { human_review: true, timeout_minutes: 20 },
+          "build-plan": { human_review: true, timeout_minutes: 20 },
+          // A CI reject reruns implement on its own feedback; it is never sent
+          // anywhere else. Each batch is a fresh session with its own 30 minutes.
+          implement: {
+            human_review: false,
+            auto_review: true,
+            auto_review_runner: CI_VALIDATOR,
+            batches: true,
+            timeout_minutes: 30
+          },
+          verify: {
+            human_review: false,
+            auto_review: true,
+            auto_review_runner: VERDICT_VALIDATOR,
+            on_reject: { send_back_to: "implement" },
+            timeout_minutes: 20
+          },
+          // A person still approves the end of the run (a `ship` stops here), but
+          // only once: a `hold` goes back to implement without waiting for them.
+          // Once the validators have earned trust, `human_review: false` makes a
+          // `ship` complete the run.
+          review: {
+            human_review: true,
+            auto_review: true,
+            auto_review_runner: VERDICT_VALIDATOR,
+            on_reject: { send_back_to: "implement" },
+            timeout_minutes: 20
+          }
         }
       },
       {
@@ -32823,7 +34101,9 @@ into working code on a feature branch.
             description: r.description,
             from: workflow.pipelineId,
             steps: r.steps,
-            ...r.gates ? { gates: r.gates } : {}
+            ...r.gates ? { gates: r.gates } : {},
+            ...r.autopilot !== void 0 ? { autopilot: r.autopilot } : {},
+            ...r.max_send_backs !== void 0 ? { max_send_backs: r.max_send_backs } : {}
           })),
           sidebar: {
             views: [
@@ -33054,12 +34334,15 @@ export default async function ci(_ctx) {
 }
 `;
     function writeBuiltinAutoReviewValidators(extensionPath, root, workflow) {
+      const runners = [
+        ...workflow.phases.filter((p) => p.autoReview).map((p) => p.autoReviewRunner),
+        ...(workflow.recipes ?? []).flatMap((r) => Object.values(r.gates ?? {}).map((g) => g.auto_review_runner))
+      ];
       const seen = /* @__PURE__ */ new Set();
-      for (const phase of workflow.phases) {
-        if (!phase.autoReview || !phase.autoReviewRunner) {
+      for (const rel of runners) {
+        if (!rel) {
           continue;
         }
-        const rel = phase.autoReviewRunner;
         if (path17.isAbsolute(rel) || rel.startsWith("..")) {
           continue;
         }
@@ -34116,13 +35399,14 @@ var require_dist = __commonJS({
   "../core/dist/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.SignalParseError = exports2.isSignal = exports2.parseSignal = exports2.SignalSchema = exports2.EpicStepEditError = exports2.resolveStepRef = exports2.describeGateEffect = exports2.commitEpicStepEdit = exports2.planSetEpicStepGates = exports2.planRemoveEpicStep = exports2.planAddEpicStep = exports2.EpicWorkflowSwitchError = exports2.canSwitchEpicWorkflow = exports2.epicWorkflowLock = exports2.applyEpicWorkflowSwitch = exports2.stageEpicWorkflowSwitch = exports2.planEpicWorkflowSwitch = exports2.EpicDescriptionError = exports2.setEpicDescription = exports2.lockedEpicDirError = exports2.EpicScaffoldError = exports2.epicsRoot = exports2.mapStepStatusToEpic = exports2.mirrorRunStateToEpic = exports2.scaffoldEpic = exports2.resolveArtifactCommitConfig = exports2.commitApprovedArtifacts = exports2.PipelineAdaptError = exports2.applyAdaptation = exports2.parseAdaptationVerdict = exports2.buildAdaptationPrompt = exports2.buildPhaseCatalog = exports2.slugEpicId = exports2.parseClassificationVerdict = exports2.buildClassificationPrompt = exports2.heuristicClassify = exports2.PipelineAssembleError = exports2.pipelineRecipeLabel = exports2.recipePipelineId = exports2.assemblePipeline = exports2.collectWorkspaceRefIssues = exports2.resolveStepSkills = exports2.stepSkillAlternatives = exports2.stepDagId = exports2.stepAgentId = exports2.producesEntries = exports2.normalizeStep = exports2.WorkspaceValidationError = exports2.validateWorkspace = exports2.WorkspaceSchema = void 0;
-    exports2.recipesDrawingFrom = exports2.WORKSPACE_DIR = exports2.WORKSPACE_FILENAME = exports2.WorkspaceParseError = exports2.WorkspaceNotFoundError = exports2.WorkspaceLoader = exports2.renderPlanMarkdown = exports2.generatePlan = exports2.collectContext = exports2.followUpHookFailures = exports2.pendingFollowUpDone = exports2.applyFollowUpHookRun = exports2.trackFollowUpChildren = exports2.writeFollowUpHookLedger = exports2.readFollowUpHookLedger = exports2.followUpHookLedgerPath = exports2.runFollowUpHook = exports2.fillFollowUpHookCommand = exports2.resolveFollowUpHooks = exports2.epicPipelineId = exports2.FOLLOW_UP_HOOK_TIMEOUT_MS = exports2.FOLLOW_UP_HOOKS_LEDGER = exports2.stepProducesFollowUps = exports2.collectFollowUpHookIssues = exports2.FOLLOW_UP_HOOK_PLACEHOLDERS = exports2.FOLLOW_UP_HOOK_KEYS = exports2.FOLLOW_UP_INTENT = exports2.FOLLOW_UPS_FILE = exports2.MANUAL_FOLLOW_UP_KEY_PREFIX = exports2.followUpDefaults = exports2.nextManualFollowUpKey = exports2.withFollowUpProvenance = exports2.openManifestFollowUp = exports2.combinedParentId = exports2.followUpChildId = exports2.followUpsOf = exports2.readEpicFollowUps = exports2.parseFollowUps = exports2.FollowUpsParseError = exports2.FollowUpManifestSchema = exports2.FollowUpItemSchema = exports2.SIGNAL_FILE = exports2.FOLLOW_UP_ARTIFACT = exports2.readEpicSignal = exports2.existingEpicIds = exports2.followUpIdFor = exports2.followUpEpicId = exports2.renderIntentMarkdown = exports2.openFollowUpEpic = exports2.openIncidentEpic = void 0;
-    exports2.RECENT_EPICS_KEY = exports2.EPIC_LIST_FLAT_KEY = exports2.EPIC_SORT_KEY = exports2.ACTIVE_EPIC_KEY = exports2.writeUserEpicIdPrefix = exports2.userConfigPath = exports2.updateUserConfig = exports2.readUserConfig = exports2.readGitUserName = exports2.ensureUserConfigIgnored = exports2.USER_CONFIG_RELPATH = exports2.USER_CONFIG_IGNORE_LINE = exports2.suggestEpicId = exports2.resolveEpicIdPrefixChain = exports2.resolveEpicIdPrefix = exports2.epicIdDateStamp = exports2.deriveEpicIdPrefix = exports2.EPIC_ID_PREFIX_PATTERN = exports2.EPIC_ID_PREFIX_KEY = exports2.resolveArtifactLanguage = exports2.commandBodyPredatesArtifactLanguage = exports2.artifactLanguageSection = exports2.ARTIFACT_LANGUAGE_HEADING = exports2.stripPersonaDirectives = exports2.composeAgentPrompt = exports2.PROJECT_INSTRUCTION_FILES = exports2.findProjectInstructions = exports2.stripPersonaMetadata = exports2.PersonaLoader = exports2.SkillNotFoundError = exports2.SkillLoader = exports2.EnvVarMissingError = exports2.EnvResolver = exports2.epicPipelineReport = exports2.planEpicPipelineExtraction = exports2.epicOwningPipeline = exports2.unstageEpicPipeline = exports2.stageEpicPipeline = exports2.writeEpicPipelines = exports2.splitEpicPipelines = exports2.mergeEpicPipelines = exports2.epicPipelinePath = exports2.EPIC_PIPELINE_FILENAME = exports2.unusedAfterStepRemoval = exports2.skillReferences = exports2.agentReferences = exports2.renameSkillRefs = exports2.renameAgentRefs = exports2.dropRecipesForPipeline = exports2.dropRecipeStep = void 0;
-    exports2.hasClaudeLogin = exports2.isInsideClaudeCodeSession = exports2.createJsonSink = exports2.createLineSink = exports2.isCodexMcpConfigured = exports2.codexConfigPath = exports2.readProjectMcpServer = exports2.mcpRegistrarFor = exports2.codexMcpRegistrar = exports2.claudeMcpRegistrar = exports2.copilotMcpConfig = exports2.copilotGraphServer = exports2.CopilotRunner = exports2.CodexRunner = exports2.claudeModelArg = exports2.DefaultRunner = exports2.RunnerRegistry = exports2.targetPath = exports2.scopePaths = exports2.discoverAssets = exports2.commandBodyIsStale = exports2.readEpicTags = exports2.normalizeTags = exports2.normalizeTag = exports2.epicMatchesTags = exports2.applyTagEdit = exports2.MAX_TAG_LENGTH = exports2.EPIC_TAGS_KEY = exports2.inheritedContextNote = exports2.INHERITED_CONTEXT_MARKER = exports2.strictModeSection = exports2.resolveEpicStrictMode = exports2.epicStrictMode = exports2.commandBodyPredatesStrictMode = exports2.STRICT_MODE_KEY = exports2.STRICT_MODE_HEADING = exports2.setEpicWatched = exports2.setEpicListFlat = exports2.setEpicSort = exports2.setActiveEpic = exports2.recordEpicOpened = exports2.readEpicListFlat = exports2.readEpicSort = exports2.readEpicFocus = exports2.pushRecent = exports2.epicSortFrom = exports2.epicIdFromBranch = exports2.epicFocusFrom = exports2.WATCHED_EPICS_KEY = exports2.RECENT_EPICS_LIMIT = void 0;
-    exports2.stepIdentity = exports2.resolvePath = exports2.AutoReviewerError = exports2.runAutoReview = exports2.renderRunReport = exports2.verifyRun = exports2.runExecLoop = exports2.estimateCostUsd = exports2.providerAliases = exports2.ratesFromConfig = exports2.mergeRates = exports2.BUILTIN_RATES = exports2.unchangedProduces = exports2.snapshotProduces = exports2.checkBudget = exports2.weighStepProgress = exports2.isActiveStatus = exports2.isStepOptional = exports2.isRunComplete = exports2.deriveRunProgress = exports2.PipelineRunError = exports2.retryAutoReview = exports2.submitAutoReviewVerdict = exports2.dirtyUpstreamOf = exports2.rerunApprovedStep = exports2.canRerunApprovedStep = exports2.chooseStepModel = exports2.chooseStepSkill = exports2.requestStepUpdate = exports2.rerunStep = exports2.rejectStep = exports2.approveStep = exports2.undoStepDone = exports2.canUndoStepDone = exports2.markStepDone = exports2.canStartStep = exports2.startRun = exports2.activateBackendFromWorkspace = exports2.activateRunStateBackend = exports2.resolveRunStateBackend = exports2.GitRunStateStore = exports2.RUN_ID_PATTERN = exports2.FileRunStateStore = exports2.RunStateStore = exports2.harnessCapabilities = exports2.NO_HARNESS_CAPABILITIES = exports2.RunnerValidationError = exports2.validateRunnerExport = exports2.CustomRunnerLoader = exports2.buildClaudeSpawnEnv = void 0;
-    exports2.resolveComposition = exports2.shortcutCommandId = exports2.getCanonicalPhase = exports2.isCanonicalPhase = exports2.BACKBONE_COMMAND_ID = exports2.CANONICAL_PHASE_IDS = exports2.CANONICAL_PHASES = exports2.renderTemplate = exports2.DEFAULT_GLOBAL_WORKFLOW_IDS = exports2.detectGlobalBuiltinSource = exports2.uninstallWorkflowGlobalsByIds = exports2.isWorkflowGloballyInstalled = exports2.installWorkflowGlobalsByIds = exports2.installGlobalDefaults = exports2.stepModelOptions = exports2.pickAgentModel = exports2.resolveProviderModel = exports2.isClaudeTierAlias = exports2.CLAUDE_TIER_ALIASES = exports2.FAST_MODEL = exports2.CODING_MODEL = exports2.PLANNING_MODEL = exports2.isBuiltinPreset = exports2.BUILTIN_PRESET_IDS = exports2.writeBuiltinAutoReviewValidators = exports2.resolvePrimaryStack = exports2.getSdlcArtifactTemplates = exports2.getBuiltinArtifactTemplates = exports2.phaseArtifactFileName = exports2.sdlcClaudeCommand = exports2.builtinClaudeCommand = exports2.loadAllBuiltinPresets = exports2.loadBuiltinPreset = exports2.planRecipeMigration = exports2.getBuiltinRecipeSummaries = exports2.getAllBuiltinPipelineSummaries = exports2.getSdlcBuiltinPipelineSummary = exports2.getBuiltinPipelineSummary = exports2.getBuiltinWorkflowByPipelineId = exports2.getBuiltinWorkflow = exports2.workflowSlug = exports2.builtinTemplatesRoot = exports2.pipelineCommandId = exports2.PHASES = exports2.BUILTIN_WORKFLOWS = exports2.withBackfilledStepNames = exports2.describeDrift = exports2.reconcileRunSteps = exports2.RUN_STATE_SCHEMA_VERSION = exports2.migrateRunState = void 0;
-    exports2.AIDLC_CORE_VERSION = exports2.AIDLC_CLI_GUIDE_TEXT = exports2.AIDLC_KNOWLEDGE = exports2.clearResolveCommandCache = exports2.resolveCommand = exports2.remapClaudePath = exports2.claudeConfigEnv = exports2.claudeJsonPath = exports2.isDefaultClaudeConfigDir = exports2.claudeConfigDir = exports2.resolveClaudeConfigDir = exports2.defaultClaudeConfigDir = exports2.getClaudeConfigDirOverride = exports2.setClaudeConfigDir = exports2.resolveDeclaredPath = exports2.expandHome = exports2.ProfileLoadError = exports2.UnknownStandardError = exports2.builtinProfiles = exports2.loadActiveProfile = exports2.loadProfile = exports2.listProfileManifests = exports2.resolveStandard = exports2.workspaceStandard = exports2.isBuiltinProfileId = exports2.ProfileSchema = exports2.TRACE_RULES = exports2.PROFILES_DIR = exports2.DEFAULT_PROFILE_ID = exports2.BUILTIN_PROFILE_IDS = exports2.setEpicMemoryHook = exports2.isEpicMemoryHookEnabled = exports2.installAnnotationTools = exports2.relativeEpicRoot = exports2.provisionDeclaredWorkflows = exports2.provisionWorkflowFiles = exports2.writeWorkflowArtifactTemplates = exports2.writeWorkflowCommands = exports2.provisionShortcutDocs = exports2.writeTwoLayerCommands = exports2.shortcutCommandDoc = exports2.backboneCommandDoc = exports2.unprovisionedPhases = exports2.nextEligiblePhase = void 0;
+    exports2.commitEpicStepEdit = exports2.planSetEpicStepGates = exports2.planRemoveEpicStep = exports2.planAddEpicStep = exports2.EpicWorkflowSwitchError = exports2.canSwitchEpicWorkflow = exports2.epicWorkflowLock = exports2.applyEpicWorkflowSwitch = exports2.stageEpicWorkflowSwitch = exports2.planEpicWorkflowSwitch = exports2.EpicDescriptionError = exports2.setEpicDescription = exports2.lockedEpicDirError = exports2.EpicScaffoldError = exports2.epicsRoot = exports2.mapStepStatusToEpic = exports2.mirrorRunStateToEpic = exports2.scaffoldEpic = exports2.resolveArtifactCommitConfig = exports2.commitApprovedArtifacts = exports2.PipelineAdaptError = exports2.applyAdaptation = exports2.parseAdaptationVerdict = exports2.buildAdaptationPrompt = exports2.buildPhaseCatalog = exports2.slugEpicId = exports2.parseClassificationVerdict = exports2.buildClassificationPrompt = exports2.heuristicClassify = exports2.PipelineAssembleError = exports2.pipelineRecipeLabel = exports2.recipePipelineId = exports2.assemblePipeline = exports2.unsafeRunnerArg = exports2.DEFAULT_MAX_BATCHES = exports2.DEFAULT_MAX_SEND_BACKS = exports2.AMBIGUOUS_STEP_INDEX = exports2.sendBackIssues = exports2.findStepIndex = exports2.collectWorkspaceRefIssues = exports2.resolveStepSkills = exports2.stepSkillAlternatives = exports2.stepDagId = exports2.stepAgentId = exports2.requiresEntries = exports2.producesEntries = exports2.normalizeStep = exports2.WorkspaceValidationError = exports2.validateWorkspace = exports2.WorkspaceSchema = void 0;
+    exports2.generatePlan = exports2.collectContext = exports2.followUpHookFailures = exports2.pendingFollowUpDone = exports2.applyFollowUpHookRun = exports2.trackFollowUpChildren = exports2.writeFollowUpHookLedger = exports2.readFollowUpHookLedger = exports2.followUpHookLedgerPath = exports2.runFollowUpHook = exports2.fillFollowUpHookCommand = exports2.resolveFollowUpHooks = exports2.epicPipelineId = exports2.FOLLOW_UP_HOOK_TIMEOUT_MS = exports2.FOLLOW_UP_HOOKS_LEDGER = exports2.stepProducesFollowUps = exports2.collectFollowUpHookIssues = exports2.FOLLOW_UP_HOOK_PLACEHOLDERS = exports2.FOLLOW_UP_HOOK_KEYS = exports2.FOLLOW_UP_INTENT = exports2.FOLLOW_UPS_FILE = exports2.MANUAL_FOLLOW_UP_KEY_PREFIX = exports2.followUpDefaults = exports2.nextManualFollowUpKey = exports2.withFollowUpProvenance = exports2.openManifestFollowUp = exports2.combinedParentId = exports2.followUpChildId = exports2.followUpsOf = exports2.readEpicFollowUps = exports2.parseFollowUps = exports2.FollowUpsParseError = exports2.FollowUpManifestSchema = exports2.FollowUpItemSchema = exports2.SIGNAL_FILE = exports2.FOLLOW_UP_ARTIFACT = exports2.readEpicSignal = exports2.existingEpicIds = exports2.followUpIdFor = exports2.followUpEpicId = exports2.renderIntentMarkdown = exports2.openFollowUpEpic = exports2.openIncidentEpic = exports2.SignalParseError = exports2.isSignal = exports2.parseSignal = exports2.SignalSchema = exports2.EpicStepEditError = exports2.resolveStepRef = exports2.describeGateEffect = void 0;
+    exports2.readUserConfig = exports2.readGitUserName = exports2.ensureUserConfigIgnored = exports2.USER_CONFIG_RELPATH = exports2.USER_CONFIG_IGNORE_LINE = exports2.suggestEpicId = exports2.resolveEpicIdPrefixChain = exports2.resolveEpicIdPrefix = exports2.epicIdDateStamp = exports2.deriveEpicIdPrefix = exports2.EPIC_ID_PREFIX_PATTERN = exports2.EPIC_ID_PREFIX_KEY = exports2.resolveArtifactLanguage = exports2.commandBodyPredatesArtifactLanguage = exports2.artifactLanguageSection = exports2.ARTIFACT_LANGUAGE_HEADING = exports2.stripPersonaDirectives = exports2.composeAgentPrompt = exports2.PROJECT_INSTRUCTION_FILES = exports2.findProjectInstructions = exports2.stripPersonaMetadata = exports2.PersonaLoader = exports2.SkillNotFoundError = exports2.SkillLoader = exports2.EnvVarMissingError = exports2.EnvResolver = exports2.epicPipelineReport = exports2.planEpicPipelineExtraction = exports2.epicOwningPipeline = exports2.unstageEpicPipeline = exports2.stageEpicPipeline = exports2.writeEpicPipelines = exports2.splitEpicPipelines = exports2.mergeEpicPipelines = exports2.epicPipelinePath = exports2.EPIC_PIPELINE_FILENAME = exports2.unusedAfterStepRemoval = exports2.skillReferences = exports2.agentReferences = exports2.renameSkillRefs = exports2.renameAgentRefs = exports2.dropRecipesForPipeline = exports2.dropRecipeStep = exports2.recipesDrawingFrom = exports2.WORKSPACE_DIR = exports2.WORKSPACE_FILENAME = exports2.WorkspaceParseError = exports2.WorkspaceNotFoundError = exports2.WorkspaceLoader = exports2.renderPlanMarkdown = void 0;
+    exports2.hasEmptyCiChecks = exports2.findApprovalGate = exports2.autopilotPreflight = exports2.STOP_GRACE_MS = exports2.stopProcessTree = exports2.stopOnAbort = exports2.processGroupSpawnOptions = exports2.claudeModelArg = exports2.DefaultRunner = exports2.RunnerRegistry = exports2.targetPath = exports2.scopePaths = exports2.discoverAssets = exports2.commandBodyIsStale = exports2.readEpicTags = exports2.normalizeTags = exports2.normalizeTag = exports2.epicMatchesTags = exports2.applyTagEdit = exports2.MAX_TAG_LENGTH = exports2.EPIC_TAGS_KEY = exports2.inheritedContextNote = exports2.INHERITED_CONTEXT_MARKER = exports2.strictModeSection = exports2.resolveEpicStrictMode = exports2.epicStrictMode = exports2.commandBodyPredatesStrictMode = exports2.STRICT_MODE_KEY = exports2.STRICT_MODE_HEADING = exports2.setEpicWatched = exports2.setEpicListFlat = exports2.setEpicSort = exports2.setActiveEpic = exports2.recordEpicOpened = exports2.readEpicListFlat = exports2.readEpicSort = exports2.readEpicFocus = exports2.pushRecent = exports2.epicSortFrom = exports2.epicIdFromBranch = exports2.epicFocusFrom = exports2.WATCHED_EPICS_KEY = exports2.RECENT_EPICS_LIMIT = exports2.RECENT_EPICS_KEY = exports2.EPIC_LIST_FLAT_KEY = exports2.EPIC_SORT_KEY = exports2.ACTIVE_EPIC_KEY = exports2.writeUserEpicIdPrefix = exports2.userConfigPath = exports2.updateUserConfig = void 0;
+    exports2.isStepOptional = exports2.isRunComplete = exports2.deriveRunProgress = exports2.PipelineRunError = exports2.retryAutoReview = exports2.submitAutoReviewVerdict = exports2.dirtyUpstreamOf = exports2.rerunApprovedStep = exports2.canRerunApprovedStep = exports2.chooseStepModel = exports2.chooseStepSkill = exports2.requestStepUpdate = exports2.rerunStep = exports2.rejectStep = exports2.approveStep = exports2.undoStepDone = exports2.canUndoStepDone = exports2.markStepDone = exports2.canStartStep = exports2.startRun = exports2.activateBackendFromWorkspace = exports2.activateRunStateBackend = exports2.resolveRunStateBackend = exports2.GitRunStateStore = exports2.RUN_ID_PATTERN = exports2.FileRunStateStore = exports2.RunStateStore = exports2.harnessCapabilities = exports2.NO_HARNESS_CAPABILITIES = exports2.RunnerValidationError = exports2.validateRunnerExport = exports2.CustomRunnerLoader = exports2.buildClaudeSpawnEnv = exports2.hasClaudeLogin = exports2.isInsideClaudeCodeSession = exports2.createJsonSink = exports2.createLineSink = exports2.isCodexMcpConfigured = exports2.codexConfigPath = exports2.readProjectMcpServer = exports2.mcpRegistrarFor = exports2.codexMcpRegistrar = exports2.claudeMcpRegistrar = exports2.copilotMcpConfig = exports2.copilotGraphServer = exports2.CopilotRunner = exports2.CodexRunner = exports2.AUTOPILOT_ENV = exports2.APPROVAL_GATE_SCRIPT = exports2.emptyCiChecksMessage = void 0;
+    exports2.isClaudeTierAlias = exports2.CLAUDE_TIER_ALIASES = exports2.FAST_MODEL = exports2.CODING_MODEL = exports2.PLANNING_MODEL = exports2.isBuiltinPreset = exports2.BUILTIN_PRESET_IDS = exports2.writeBuiltinAutoReviewValidators = exports2.resolvePrimaryStack = exports2.getSdlcArtifactTemplates = exports2.getBuiltinArtifactTemplates = exports2.phaseArtifactFileName = exports2.sdlcClaudeCommand = exports2.builtinClaudeCommand = exports2.loadAllBuiltinPresets = exports2.loadBuiltinPreset = exports2.planRecipeMigration = exports2.getBuiltinRecipeSummaries = exports2.getAllBuiltinPipelineSummaries = exports2.getSdlcBuiltinPipelineSummary = exports2.getBuiltinPipelineSummary = exports2.getBuiltinWorkflowByPipelineId = exports2.getBuiltinWorkflow = exports2.workflowSlug = exports2.builtinTemplatesRoot = exports2.pipelineCommandId = exports2.PHASES = exports2.BUILTIN_WORKFLOWS = exports2.withBackfilledStepNames = exports2.describeDrift = exports2.reconcileRunSteps = exports2.RUN_STATE_SCHEMA_VERSION = exports2.migrateRunState = exports2.stepIdentity = exports2.resolvePath = exports2.AutoReviewerError = exports2.runAutoReview = exports2.renderRunReport = exports2.verifyRun = exports2.runExecLoop = exports2.estimateCostUsd = exports2.providerAliases = exports2.ratesFromConfig = exports2.mergeRates = exports2.BUILTIN_RATES = exports2.unchangedProduces = exports2.snapshotProduces = exports2.checkBudget = exports2.weighStepProgress = exports2.isActiveStatus = void 0;
+    exports2.defaultClaudeConfigDir = exports2.getClaudeConfigDirOverride = exports2.setClaudeConfigDir = exports2.resolveDeclaredPath = exports2.expandHome = exports2.ProfileLoadError = exports2.UnknownStandardError = exports2.builtinProfiles = exports2.loadActiveProfile = exports2.loadProfile = exports2.listProfileManifests = exports2.resolveStandard = exports2.workspaceStandard = exports2.isBuiltinProfileId = exports2.ProfileSchema = exports2.TRACE_RULES = exports2.PROFILES_DIR = exports2.DEFAULT_PROFILE_ID = exports2.BUILTIN_PROFILE_IDS = exports2.setEpicMemoryHook = exports2.isEpicMemoryHookEnabled = exports2.installAnnotationTools = exports2.relativeEpicRoot = exports2.provisionDeclaredWorkflows = exports2.provisionWorkflowFiles = exports2.writeWorkflowArtifactTemplates = exports2.writeWorkflowCommands = exports2.provisionShortcutDocs = exports2.writeTwoLayerCommands = exports2.shortcutCommandDoc = exports2.backboneCommandDoc = exports2.unprovisionedPhases = exports2.nextEligiblePhase = exports2.resolveComposition = exports2.shortcutCommandId = exports2.getCanonicalPhase = exports2.isCanonicalPhase = exports2.BACKBONE_COMMAND_ID = exports2.CANONICAL_PHASE_IDS = exports2.CANONICAL_PHASES = exports2.renderTemplate = exports2.DEFAULT_GLOBAL_WORKFLOW_IDS = exports2.detectGlobalBuiltinSource = exports2.uninstallWorkflowGlobalsByIds = exports2.isWorkflowGloballyInstalled = exports2.installWorkflowGlobalsByIds = exports2.installGlobalDefaults = exports2.stepModelOptions = exports2.pickAgentModel = exports2.resolveProviderModel = void 0;
+    exports2.AIDLC_CORE_VERSION = exports2.AIDLC_CLI_GUIDE_TEXT = exports2.AIDLC_KNOWLEDGE = exports2.clearResolveCommandCache = exports2.resolveCommand = exports2.remapClaudePath = exports2.claudeConfigEnv = exports2.claudeJsonPath = exports2.isDefaultClaudeConfigDir = exports2.claudeConfigDir = exports2.resolveClaudeConfigDir = void 0;
     var WorkspaceSchema_1 = require_WorkspaceSchema();
     Object.defineProperty(exports2, "WorkspaceSchema", { enumerable: true, get: function() {
       return WorkspaceSchema_1.WorkspaceSchema;
@@ -34139,6 +35423,9 @@ var require_dist = __commonJS({
     Object.defineProperty(exports2, "producesEntries", { enumerable: true, get: function() {
       return WorkspaceSchema_1.producesEntries;
     } });
+    Object.defineProperty(exports2, "requiresEntries", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.requiresEntries;
+    } });
     Object.defineProperty(exports2, "stepAgentId", { enumerable: true, get: function() {
       return WorkspaceSchema_1.stepAgentId;
     } });
@@ -34154,6 +35441,24 @@ var require_dist = __commonJS({
     Object.defineProperty(exports2, "collectWorkspaceRefIssues", { enumerable: true, get: function() {
       return WorkspaceSchema_1.collectWorkspaceRefIssues;
     } });
+    Object.defineProperty(exports2, "findStepIndex", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.findStepIndex;
+    } });
+    Object.defineProperty(exports2, "sendBackIssues", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.sendBackIssues;
+    } });
+    Object.defineProperty(exports2, "AMBIGUOUS_STEP_INDEX", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.AMBIGUOUS_STEP_INDEX;
+    } });
+    Object.defineProperty(exports2, "DEFAULT_MAX_SEND_BACKS", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.DEFAULT_MAX_SEND_BACKS;
+    } });
+    Object.defineProperty(exports2, "DEFAULT_MAX_BATCHES", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.DEFAULT_MAX_BATCHES;
+    } });
+    Object.defineProperty(exports2, "unsafeRunnerArg", { enumerable: true, get: function() {
+      return WorkspaceSchema_1.unsafeRunnerArg;
+    } });
     var PipelineAssembler_1 = require_PipelineAssembler();
     Object.defineProperty(exports2, "assemblePipeline", { enumerable: true, get: function() {
       return PipelineAssembler_1.assemblePipeline;
@@ -34717,6 +36022,38 @@ var require_dist = __commonJS({
     Object.defineProperty(exports2, "claudeModelArg", { enumerable: true, get: function() {
       return DefaultRunner_1.claudeModelArg;
     } });
+    var processTree_1 = require_processTree();
+    Object.defineProperty(exports2, "processGroupSpawnOptions", { enumerable: true, get: function() {
+      return processTree_1.processGroupSpawnOptions;
+    } });
+    Object.defineProperty(exports2, "stopOnAbort", { enumerable: true, get: function() {
+      return processTree_1.stopOnAbort;
+    } });
+    Object.defineProperty(exports2, "stopProcessTree", { enumerable: true, get: function() {
+      return processTree_1.stopProcessTree;
+    } });
+    Object.defineProperty(exports2, "STOP_GRACE_MS", { enumerable: true, get: function() {
+      return processTree_1.STOP_GRACE_MS;
+    } });
+    var autopilotPreflight_1 = require_autopilotPreflight();
+    Object.defineProperty(exports2, "autopilotPreflight", { enumerable: true, get: function() {
+      return autopilotPreflight_1.autopilotPreflight;
+    } });
+    Object.defineProperty(exports2, "findApprovalGate", { enumerable: true, get: function() {
+      return autopilotPreflight_1.findApprovalGate;
+    } });
+    Object.defineProperty(exports2, "hasEmptyCiChecks", { enumerable: true, get: function() {
+      return autopilotPreflight_1.hasEmptyCiChecks;
+    } });
+    Object.defineProperty(exports2, "emptyCiChecksMessage", { enumerable: true, get: function() {
+      return autopilotPreflight_1.emptyCiChecksMessage;
+    } });
+    Object.defineProperty(exports2, "APPROVAL_GATE_SCRIPT", { enumerable: true, get: function() {
+      return autopilotPreflight_1.APPROVAL_GATE_SCRIPT;
+    } });
+    Object.defineProperty(exports2, "AUTOPILOT_ENV", { enumerable: true, get: function() {
+      return autopilotPreflight_1.AUTOPILOT_ENV;
+    } });
     var CodexRunner_1 = require_CodexRunner();
     Object.defineProperty(exports2, "CodexRunner", { enumerable: true, get: function() {
       return CodexRunner_1.CodexRunner;
@@ -43891,7 +45228,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@delete101020/aidlc",
-      version: "4.0.38",
+      version: "4.0.41",
       description: "AIDLC Native CLI, a fork of AIDLC \u2014 drive Claude through the six-stage AI-Native SDLC Playbook: Plan \u2192 Design \u2192 Build \u2192 Test \u2192 Deploy \u2192 Maintain, with artifact gates, requirements traceability, an incident loop back to Plan, and Spec Kit support.",
       license: "MIT",
       repository: {
@@ -47158,6 +48495,76 @@ function providerChecks(ws) {
   }
   return checks;
 }
+function autopilotChecks(root, ws) {
+  const checks = [];
+  const autopilot = ws.config.pipelines.filter((p) => p.autopilot).map((p) => p.id);
+  const needed = autopilot.length > 0;
+  const missing = (label, info2) => needed ? fail(label, info2) : warn(label, info2);
+  if (needed) {
+    checks.push(ok(`autopilot pipeline${autopilot.length !== 1 ? "s" : ""}`, autopilot.join(", ")));
+  }
+  const usesClaude = ws.config.agents.some((a) => a.runner === "default");
+  if (usesClaude) {
+    const gate = (0, import_core5.findApprovalGate)(root);
+    checks.push(gate.found ? ok("approval gate hook", path4.relative(root, gate.settingsFile).split(path4.sep).join("/") || gate.settingsFile) : missing("approval gate hook", gate.reason));
+    const args = ws.config.providers.default?.args ?? [];
+    const viaArgs = args.some((a) => /^--(allowedTools|allowed-tools|permission-mode)(=|$)/.test(a));
+    const viaSettings = claudeAllowListFiles(root);
+    checks.push(viaArgs ? ok("headless permissions", "providers.default.args") : viaSettings.length > 0 ? ok("headless permissions", `permissions.allow in ${viaSettings.join(", ")}`) : missing(
+      "headless permissions",
+      'nothing allows Claude to edit files or run commands without asking, and under --print nobody can be asked \u2014 set providers.default.args (e.g. [--permission-mode, acceptEdits, --allowedTools, "Bash(npm test:*)"])'
+    ));
+  }
+  for (const id of autopilot) {
+    const pipeline = ws.config.pipelines.find((p) => p.id === id);
+    const runners = new Set(pipeline.steps.map((s) => ws.config.agents.find((a) => a.id === (typeof s === "string" ? s : s.agent))?.runner).filter((r) => !!r && r !== "default"));
+    for (const runner of runners) {
+      checks.push(warn(
+        `"${id}" on ${runner}`,
+        `the approval gate is a Claude Code hook, and ${runner} steps run without it \u2014 they rely on ${runner}'s own sandbox`
+      ));
+    }
+  }
+  const unattended = [
+    ...ws.config.pipelines.filter((p) => p.autopilot).map((p) => ({ label: `"${p.id}"`, pipeline: p, fatal: true }))
+  ];
+  for (const r of ws.config.recipes.filter((r2) => r2.autopilot)) {
+    try {
+      unattended.push({ label: `recipe "${r.id}"`, pipeline: (0, import_core5.assemblePipeline)(ws.config, { recipeId: r.id }), fatal: false });
+    } catch {
+    }
+  }
+  for (const { label, pipeline, fatal } of unattended) {
+    for (const s of pipeline.steps) {
+      const norm = (0, import_core5.normalizeStep)(s);
+      const runner = norm.auto_review ? norm.auto_review_runner : void 0;
+      if (!runner) {
+        continue;
+      }
+      const step = norm.name ?? norm.agent;
+      checks.push((0, import_core5.hasEmptyCiChecks)(root, runner) ? (fatal ? fail : warn)(`${label} CI checks`, (0, import_core5.emptyCiChecksMessage)(runner, step)) : ok(`${label} auto-review on "${step}"`, runner));
+    }
+  }
+  return checks;
+}
+function claudeAllowListFiles(root) {
+  const files = [
+    path4.join(root, ".claude", "settings.json"),
+    path4.join(root, ".claude", "settings.local.json"),
+    path4.join((0, import_core5.claudeConfigDir)(), "settings.json")
+  ];
+  return files.filter((f) => {
+    try {
+      const allow = JSON.parse(fs3.readFileSync(f, "utf8"))?.permissions?.allow;
+      return Array.isArray(allow) && allow.length > 0;
+    } catch {
+      return false;
+    }
+  }).map((f) => {
+    const r = path4.relative(root, f);
+    return r.startsWith("..") ? f.replace(os.homedir(), "~") : r.split(path4.sep).join("/");
+  });
+}
 function registerDoctor(program3) {
   program3.command("doctor").description("Validate workspace, claude binary, env, skills, and run state files").option("--json", "Output all checks as JSON (exit 1 still signals failures)").action((opts, cmd) => {
     const root = resolveWorkspaceRoot(cmd);
@@ -47266,6 +48673,7 @@ function registerDoctor(program3) {
     if (ws) {
       emitSection("Harness parity", parityChecks(root, ws));
       emitSection("Providers", providerChecks(ws));
+      emitSection("Unattended runs", autopilotChecks(root, ws));
     }
     const runChecks = [];
     const runsDir = path4.join(root, ".aidlc", "runs");
@@ -47576,21 +48984,9 @@ function findPipelineForRun(root, state) {
     return null;
   }
 }
-var AMBIGUOUS_STEP = -2;
+var AMBIGUOUS_STEP = import_core7.AMBIGUOUS_STEP_INDEX;
 function resolveStepIdx(state, step) {
-  const asInt = parseInt(step, 10);
-  if (!isNaN(asInt) && String(asInt) === step) {
-    return asInt >= 0 && asInt < state.steps.length ? asInt : -1;
-  }
-  const byName = state.steps.findIndex((s) => s.name === step);
-  if (byName >= 0) {
-    return byName;
-  }
-  const byAgent = state.steps.map((s, i) => s.agent === step ? i : -1).filter((i) => i >= 0);
-  if (byAgent.length > 1) {
-    return AMBIGUOUS_STEP;
-  }
-  return byAgent.length === 1 ? byAgent[0] : -1;
+  return (0, import_core7.findStepIndex)(state.steps, step);
 }
 function stepLabel(s) {
   return s.name ?? s.agent;
@@ -48730,19 +50126,40 @@ function registerRun(program3) {
       console.log(import_chalk10.default.green("\u{1F389} Run completed \u2014 all steps approved."));
     }
   });
-  cmd.command("reject <runId>").description("Reject the current awaiting_review step").requiredOption("--reason <text>", "Why the step was rejected").action((runId, opts, actionCmd) => {
+  cmd.command("reject <runId>").description(
+    'Reject the current awaiting_review step.\n  Without --to the work stays on this step (then `run rerun`). With --to it goes\n  back to an earlier step: that step reopens with the reason as its feedback and\n  the steps after it reset to pending. Mirrors the extension\'s "Send back to step N".'
+  ).requiredOption("--reason <text>", "Why the step was rejected").option("--to <step>", "Earlier step to send the work back to (0-based index, step name or agent id)").action((runId, opts, actionCmd) => {
     const root = resolveWorkspaceRoot(actionCmd);
     const state = requireRun(root, runId);
     const pipeline = requirePipelineForRun(root, state);
+    const idx = state.currentStepIdx;
+    let targetIdx;
+    if (opts.to !== void 0) {
+      targetIdx = requireStepIdx(state, opts.to);
+      if (targetIdx >= idx) {
+        console.error(import_chalk10.default.red(
+          `--to must name a step before the rejected one (${idx}:${state.steps[idx].agent}), got ${targetIdx}:${state.steps[targetIdx].agent}.`
+        ));
+        process.exit(1);
+      }
+    }
     let next;
     try {
-      next = (0, import_core13.rejectStep)({ state, reason: opts.reason, pipeline });
+      next = (0, import_core13.rejectStep)({ state, reason: opts.reason, targetIdx, pipeline });
     } catch (err) {
       console.error(import_chalk10.default.red(err instanceof Error ? err.message : String(err)));
       process.exit(1);
     }
     saveRunState(root, next, state);
-    const step = state.steps[state.currentStepIdx];
+    const step = state.steps[idx];
+    if (targetIdx !== void 0) {
+      const target = next.steps[targetIdx];
+      console.log(import_chalk10.default.red("\u2718") + ` Rejected "${step.agent}" \u2014 sent back to "${target.agent}" (rev ${target.revision})`);
+      console.log(import_chalk10.default.dim(`  Reason: ${opts.reason}`));
+      console.log(import_chalk10.default.dim(`  When done: aidlc run mark-done ${runId}`));
+      printRunSummary(next);
+      return;
+    }
     console.log(import_chalk10.default.red("\u2718") + ` Rejected "${step.agent}"`);
     console.log(import_chalk10.default.dim(`  Reason: ${opts.reason}`));
     console.log(import_chalk10.default.dim(`  Rerun:  aidlc run rerun ${runId} [--feedback "..."]`));
@@ -48845,7 +50262,7 @@ function registerRun(program3) {
     console.log(JSON.stringify(state, null, 2));
   });
   cmd.command("exec <runId>").description(
-    "Execute the current step by spawning the claude CLI, then auto-advance.\n  Streams output live. Stops at human_review steps unless --auto-approve.\n  Exit codes: 0 completed (or stopped at --until), 2 paused on a gate\n  (awaiting review / rejected / budget), 1 error. --require-complete maps\n  any non-completed outcome to 1 for CI gating."
+    "Execute the current step by spawning the claude CLI, then auto-advance.\n  Streams output live. Stops at human_review steps unless --auto-approve.\n  Exit codes: 0 completed (or stopped at --until), 2 paused on a gate\n  (awaiting review / rejected / sent back max_send_backs times / no code\n  change after a send-back or a batch / max_batches / pause_between_batches /\n  budget / stopped), 1 error (a step that ran\n  past its timeout_minutes included). --require-complete maps any\n  non-completed outcome to 1 for CI gating.\n  Ctrl+C once: stop after the running step. Twice: stop it now."
   ).option("--until <step>", "Stop after this step completes (index or agent id)").option("--auto-approve", "Also auto-approve human_review steps without pausing").option("--require-complete", "Exit 1 unless the run reaches completed (for CI gating)").option("--json", "Suppress decorative output; print a final JSON summary to stdout (claude stream goes to stderr)").option("--message <text>", "Override the user message sent to claude (default: context pairs)").option("--dry-run", "Print the assembled prompt without spawning claude").option("--skill <id>", "On steps that offer alternative skills (default_skill), run this one").action(async (runId, opts, actionCmd) => {
     const root = resolveWorkspaceRoot(actionCmd);
     if (opts.json) {
@@ -48952,12 +50369,38 @@ async function execLoop(root, runId, opts) {
   const initialState = requireRun(root, runId);
   const untilIdx = opts.until !== void 0 ? requireStepIdx(initialState, opts.until) : -1;
   const claudeOut = opts.json ? process.stderr : process.stdout;
-  return (0, import_core13.runExecLoop)(
-    root,
-    runId,
-    { untilIdx, autoApprove: opts.autoApprove, message: opts.message, dryRun: opts.dryRun, skill: opts.skill },
-    cliExecHooks(runId, claudeOut)
-  );
+  let cancelRequested = false;
+  const stopNow = new AbortController();
+  const onSigint = () => {
+    if (!cancelRequested) {
+      cancelRequested = true;
+      console.error(import_chalk10.default.yellow("\n\u23F9  Stopping after the running step finishes. Press Ctrl+C again to stop it now."));
+    } else if (!stopNow.signal.aborted) {
+      console.error(import_chalk10.default.yellow("\n\u23F9  Stopping the running step now\u2026"));
+      stopNow.abort();
+    } else {
+      process.exit(130);
+    }
+  };
+  process.on("SIGINT", onSigint);
+  try {
+    return await (0, import_core13.runExecLoop)(
+      root,
+      runId,
+      {
+        untilIdx,
+        autoApprove: opts.autoApprove,
+        message: opts.message,
+        dryRun: opts.dryRun,
+        skill: opts.skill,
+        shouldCancel: () => cancelRequested,
+        signal: stopNow.signal
+      },
+      cliExecHooks(runId, claudeOut)
+    );
+  } finally {
+    process.off("SIGINT", onSigint);
+  }
 }
 async function driveAutoReview(root, runId, state) {
   const pipeline = requirePipelineForRun(root, state);
@@ -49057,6 +50500,35 @@ ${reason}`)),
 \u2718  Step "${e.agent}" was rejected.`));
       info(import_chalk10.default.dim(`  Rerun: aidlc run rerun ${e.runId} [--feedback "..."]`));
     },
+    onStepStopped: (e) => {
+      info(import_chalk10.default.yellow(`
+\u23F9  Stopped "${e.agent}" mid-step (rev ${e.revision}). It is still awaiting work.`));
+      info(import_chalk10.default.dim("  Anything it half-wrote is still in the working tree \u2014 check git status."));
+      info(import_chalk10.default.dim(`  Resume: aidlc run exec ${e.runId}`));
+    },
+    onCancelled: () => info(import_chalk10.default.yellow("\n\u23F9  Stopped after the step that was running.")),
+    onStalled: (e) => {
+      info(import_chalk10.default.yellow(`
+\u23F8  ${e.reason}`));
+      info(import_chalk10.default.dim(`  What it was asked, and what it did: aidlc run report ${e.runId}`));
+      info(import_chalk10.default.dim(`  Then make the change and: aidlc run mark-done ${e.runId} \u2014 or try again: aidlc run exec ${e.runId}`));
+    },
+    onBatchDone: (e) => {
+      sep4();
+      info(import_chalk10.default.cyan(`
+\u21BB  Batch ${e.batch} of "${e.agent}" done \u2014 starting the next in a fresh session.`));
+      if (typeof e.costUsd === "number") {
+        info(import_chalk10.default.dim(`   cost: $${e.costUsd.toFixed(4)}`));
+      }
+    },
+    onBatchPause: (e) => {
+      info(import_chalk10.default.cyan(`
+\u23F8  Batch ${e.batch} of "${e.agent}" done; pausing (pause_between_batches).`));
+      if (e.report) {
+        info(import_chalk10.default.dim(`  Progress: ${e.report}`));
+      }
+      info(import_chalk10.default.dim(`  Next batch: aidlc run exec ${e.runId}`));
+    },
     onStepSkipped: (e) => {
       info(import_chalk10.default.yellow(`
 \u2933  Step "${e.agent}" was rejected \u2014 carrying on.`) + import_chalk10.default.dim(` ${e.reason}`));
@@ -49067,6 +50539,9 @@ ${reason}`)),
     onAutoReviewResult: (e) => {
       if (e.decision === "pass") {
         info(import_chalk10.default.green("\u2714  Auto-review passed") + import_chalk10.default.dim(` \u2014 ${e.reason}`));
+      } else if (e.sentBackTo) {
+        const to = e.sentBackTo;
+        info(import_chalk10.default.yellow(`\u21A9  Auto-review rejected \u2014 sent back to "${to.agent}" (rev ${to.revision}, send-back ${to.count} of ${to.max})`) + import_chalk10.default.dim(` \u2014 ${e.reason}`));
       } else {
         info(import_chalk10.default.red("\u2718  Auto-review rejected") + import_chalk10.default.dim(` \u2014 ${e.reason}`));
         info(import_chalk10.default.dim(`  Fix the issue, then: aidlc run rerun ${e.runId} [--feedback "..."]`));