@gethmy/agent 1.18.1 → 1.19.0

package/dist/cli.js

@@ -730,1457 +730,1505 @@ var init_config_validation = __esm(() => {
     }
   };
 });
-
-// src/git-pr.ts
-var exports_git_pr = {};
-__export(exports_git_pr, {
-  validateGitProviderCli: () => validateGitProviderCli,
-  upsertReviewedSha: () => upsertReviewedSha,
-  updateExistingPr: () => updateExistingPr,
-  resolvePrUrl: () => resolvePrUrl,
-  renameRemoteBranch: () => renameRemoteBranch,
-  remoteBranchExists: () => remoteBranchExists,
-  pushBranch: () => pushBranch,
-  mergePullRequest: () => mergePullRequest,
-  getPrStatus: () => getPrStatus,
-  getHeadSha: () => getHeadSha,
-  getBranchWebUrl: () => getBranchWebUrl,
-  findExistingPr: () => findExistingPr,
-  extractReviewedSha: () => extractReviewedSha,
-  extractPrUrl: () => extractPrUrl,
-  detectGitProvider: () => detectGitProvider,
-  deriveCiStatus: () => deriveCiStatus,
-  createPullRequest: () => createPullRequest,
-  checkPrMergeStatus: () => checkPrMergeStatus,
-  buildPrBody: () => buildPrBody
+// ../harmony-shared/dist/branchRef.js
+var BRANCH_REF_PATTERN, SAFE_GIT_REF_PATTERN;
+var init_branchRef = __esm(() => {
+  BRANCH_REF_PATTERN = /Branch:\s*`([^`]+)`/;
+  SAFE_GIT_REF_PATTERN = /^[a-zA-Z0-9/_.+-]+$/;
 });
-import { execFile, execFileSync } from "node:child_process";
-import { promisify } from "node:util";
-function detectGitProvider(cwd) {
-  try {
-    const url = execFileSync("git", ["remote", "get-url", "origin"], {
-      cwd,
-      encoding: "utf-8"
-    }).trim();
-    if (url.includes("github.com"))
-      return "github";
-    if (url.includes("dev.azure.com") || url.includes("visualstudio.com"))
-      return "azure";
-    if (url.includes("gitlab.com") || /\bgitlab\b/.test(url))
-      return "gitlab";
-    if (url.includes("bitbucket.org"))
-      return "bitbucket";
-    return "unknown";
-  } catch {
-    return "unknown";
-  }
-}
-function validateGitProviderCli(provider, cwd) {
-  switch (provider) {
-    case "github": {
-      try {
-        execFileSync("gh", ["auth", "status"], { cwd, stdio: "pipe" });
-      } catch {
-        throw new Error("GitHub CLI (gh) is not authenticated. Run: gh auth login");
-      }
-      break;
-    }
-    case "azure": {
-      try {
-        execFileSync("az", ["--version"], { cwd, stdio: "pipe" });
-      } catch {
-        throw new Error("Azure CLI (az) not found. Install it: https://learn.microsoft.com/en-us/cli/azure/install-azure-cli");
-      }
-      try {
-        execFileSync("az", ["account", "show"], { cwd, stdio: "pipe" });
-      } catch {
-        throw new Error("Azure CLI is not authenticated. Run: az login");
-      }
-      break;
-    }
-    case "gitlab": {
-      try {
-        execFileSync("glab", ["auth", "status"], { cwd, stdio: "pipe" });
-      } catch {
-        throw new Error("GitLab CLI (glab) is not installed or not authenticated. Install: https://gitlab.com/gitlab-org/cli — then run: glab auth login");
-      }
-      break;
-    }
-    case "bitbucket":
-    case "unknown":
-      log.warn(TAG2, `Git provider "${provider}" — PR creation will be skipped (no CLI support)`);
-      break;
-  }
+
+// ../harmony-shared/dist/cardLinks.js
+var init_cardLinks = () => {};
+// ../harmony-shared/dist/classification.js
+function escalateTier(tier) {
+  const i = MODEL_TIERS.indexOf(tier);
+  return MODEL_TIERS[Math.min(i + 1, MODEL_TIERS.length - 1)];
 }
-function isValidPrUrl(url) {
-  return VALID_PR_URL_RE.test(url);
+function isModelTier(v) {
+  return typeof v === "string" && MODEL_TIERS.includes(v);
 }
-function extractReviewedSha(description) {
-  if (!description)
-    return null;
-  const m = description.match(REVIEWED_SHA_RE);
-  return m ? m[1] : null;
+var MODEL_TIERS;
+var init_classification = __esm(() => {
+  MODEL_TIERS = ["simple", "advanced", "research"];
+});
+
+// ../harmony-shared/dist/commentSerializer.js
+function sanitizeHeaderField(value) {
+  return value.replace(/[\]\r\n|<>]/g, " ").trim() || "—";
 }
-function upsertReviewedSha(description, sha) {
-  const line = `Reviewed-SHA: ${sha}`;
-  if (REVIEWED_SHA_RE.test(description)) {
-    return description.replace(REVIEWED_SHA_RE, line);
-  }
-  const sep = description ? `
-` : "";
-  return `${description}${sep}${line}`;
+function authorLabel(c) {
+  if (c.author_type === "agent")
+    return "AI agent";
+  const raw = c.author?.full_name || "teammate";
+  return sanitizeHeaderField(raw);
 }
-function deriveCiStatus(rollup) {
-  if (!Array.isArray(rollup) || rollup.length === 0)
-    return "unknown";
-  let anyPending = false;
-  for (const check of rollup) {
-    if (typeof check !== "object" || check === null)
-      continue;
-    const c = check;
-    if (typeof c.status === "string") {
-      if (c.status.toUpperCase() !== "COMPLETED") {
-        anyPending = true;
-        continue;
-      }
-      const conclusion = typeof c.conclusion === "string" ? c.conclusion.toUpperCase() : "";
-      if (["SUCCESS", "NEUTRAL", "SKIPPED"].includes(conclusion))
-        continue;
-      return "failure";
+function criticalIds(comments) {
+  const keep = new Set;
+  for (const c of comments) {
+    if (c.comment_type === "decision")
+      keep.add(c.id);
+    if (c.supersedes_id) {
+      keep.add(c.id);
+      keep.add(c.supersedes_id);
     }
-    if (typeof c.state === "string") {
-      const state = c.state.toUpperCase();
-      if (state === "SUCCESS")
-        continue;
-      if (state === "PENDING") {
-        anyPending = true;
-        continue;
-      }
-      return "failure";
+    if (c.confirms_id) {
+      keep.add(c.id);
+      keep.add(c.confirms_id);
     }
   }
-  return anyPending ? "pending" : "success";
+  return keep;
 }
-async function getPrStatus(prUrl, cwd, provider) {
-  if (provider !== "github" || !isValidPrUrl(prUrl)) {
-    return { ciStatus: "unknown", headSha: null };
+function serializeCommentThread(comments, options = {}) {
+  const { heading = "Conversation", includeInstructions = true, activity = [], maxComments } = options;
+  const visible = comments.filter((c) => !c.deleted_at).slice().sort((a, b) => a.created_at.localeCompare(b.created_at));
+  if (visible.length === 0)
+    return "";
+  const indexById = new Map;
+  visible.forEach((c, i) => {
+    indexById.set(c.id, i + 1);
+  });
+  let rendered = visible;
+  let elidedCount = 0;
+  if (maxComments && visible.length > maxComments) {
+    const keep = criticalIds(visible);
+    const recentThreshold = visible.length - maxComments;
+    rendered = visible.filter((c, i) => i >= recentThreshold || keep.has(c.id));
+    elidedCount = visible.length - rendered.length;
   }
-  try {
-    const { stdout } = await execFileAsync("gh", ["pr", "view", prUrl, "--json", "statusCheckRollup,headRefOid"], { cwd, encoding: "utf-8", timeout: 1e4 });
-    const parsed = JSON.parse(stdout.trim());
-    const headSha = typeof parsed.headRefOid === "string" ? parsed.headRefOid : null;
-    return { ciStatus: deriveCiStatus(parsed.statusCheckRollup), headSha };
-  } catch {
-    return { ciStatus: "unknown", headSha: null };
+  const ref = (id) => {
+    const n = indexById.get(id);
+    return n ? `#${n}` : `#${id.slice(0, 8)}`;
+  };
+  const lines = [];
+  if (elidedCount > 0) {
+    lines.push({
+      at: visible[0]?.created_at ?? "",
+      text: `(${elidedCount} earlier comment(s) omitted for brevity)`
+    });
   }
-}
-async function mergePullRequest(prUrl, cwd, provider, strategy, deleteBranch) {
-  if (provider !== "github") {
-    throw new Error(`auto-merge unsupported for provider "${provider}"`);
+  for (const c of rendered) {
+    const tags = [];
+    if (c.edited_at)
+      tags.push("edited");
+    if (c.reply_to_id)
+      tags.push(`reply to ${ref(c.reply_to_id)}`);
+    if (c.supersedes_id)
+      tags.push(`supersedes ${ref(c.supersedes_id)}`);
+    if (c.confirms_id)
+      tags.push(`confirms ${ref(c.confirms_id)}`);
+    if (c.resolved_at)
+      tags.push("resolved");
+    const tagStr = tags.length ? ` | ${tags.join(" | ")}` : "";
+    const header = `[${sanitizeHeaderField(ref(c.id))} | ${sanitizeHeaderField(c.author_type)} | ${authorLabel(c)} | ${sanitizeHeaderField(c.comment_type)} | ${sanitizeHeaderField(c.created_at)}${tagStr}]`;
+    const fencedBody = c.body.trim().replaceAll("<", "&lt;").replaceAll(">", "&gt;");
+    lines.push({
+      at: c.created_at,
+      text: `${header}
+<comment-body>
+${fencedBody}
+</comment-body>`
+    });
   }
-  const args = ["pr", "merge", prUrl, `--${strategy}`];
-  if (deleteBranch)
-    args.push("--delete-branch");
-  await execFileAsync("gh", args, { cwd, encoding: "utf-8", timeout: 30000 });
-}
-function getHeadSha(cwd) {
-  try {
-    return execFileSync("git", ["rev-parse", "HEAD"], {
-      cwd,
-      encoding: "utf-8"
-    }).trim();
-  } catch {
-    return null;
+  for (const a of activity) {
+    const actor = a.actor ? `${a.actor} ` : "";
+    lines.push({ at: a.at, text: `· (system) ${a.at} — ${actor}${a.text}` });
   }
+  lines.sort((a, b) => a.at.localeCompare(b.at));
+  const body = lines.map((l) => l.text).join(`
+
+`);
+  const instruction = includeInstructions ? `
+
+${CONFLICT_INSTRUCTION}` : "";
+  return `## ${heading} (oldest → newest)
+
+${body}${instruction}`;
 }
-async function checkPrMergeStatus(prUrl, cwd, provider) {
-  if (!isValidPrUrl(prUrl))
-    return "unknown";
-  try {
-    switch (provider) {
-      case "github": {
-        const { stdout } = await execFileAsync("gh", ["pr", "view", prUrl, "--json", "state", "--jq", ".state"], { cwd, encoding: "utf-8", timeout: 1e4 });
-        switch (stdout.trim()) {
-          case "MERGED":
-            return "merged";
-          case "OPEN":
-            return "open";
-          case "CLOSED":
-            return "closed";
-          default:
-            return "unknown";
+var CONFLICT_INSTRUCTION;
+var init_commentSerializer = __esm(() => {
+  CONFLICT_INSTRUCTION = "When two comments conflict, prefer the latest created_at, UNLESS a later " + "comment explicitly confirms or restates the earlier finding. Evaluate " + "substance, not just recency. Cite the comment id(s) you relied on.";
+});
+
+// ../harmony-shared/dist/constants.js
+var TIMINGS;
+var init_constants = __esm(() => {
+  TIMINGS = {
+    SEARCH_DEBOUNCE: 300,
+    AUTOSAVE_DEBOUNCE: 1000,
+    TOAST_DURATION: 3000,
+    QUERY_STALE_TIME: 1000 * 60 * 5,
+    QUERY_GC_TIME: 1000 * 60 * 60 * 24
+  };
+});
+// ../harmony-shared/dist/gateEvaluate.js
+function isGateKind(value) {
+  return typeof value === "string" && GATE_KINDS.includes(value);
+}
+function isGateOperator(value) {
+  return typeof value === "string" && GATE_OPERATORS.includes(value);
+}
+function gateEvaluate(gateSpec, evidence) {
+  const structured = isPlainObject(evidence) ? evidence.structured ?? {} : {};
+  const safeStructured = isPlainObject(structured) ? structured : {};
+  if (!isPlainObject(gateSpec)) {
+    return {
+      passed: false,
+      findings: [{ level: "error", message: "Malformed gate: not an object." }],
+      structured: safeStructured
+    };
+  }
+  const spec = gateSpec;
+  if (!isGateKind(spec.kind)) {
+    return {
+      passed: false,
+      findings: [
+        {
+          level: "error",
+          message: `Malformed gate: unknown kind ${formatValue(spec.kind)}.`
         }
-      }
-      case "gitlab": {
-        const mrMatch = prUrl.match(/merge_requests\/(\d+)/);
-        if (!mrMatch)
-          return "unknown";
-        const { stdout } = await execFileAsync("glab", ["mr", "view", mrMatch[1], "--output", "json"], { cwd, encoding: "utf-8", timeout: 1e4 });
-        let parsed;
-        try {
-          parsed = JSON.parse(stdout.trim());
-        } catch {
-          log.warn(TAG2, `Failed to parse glab JSON output for MR ${mrMatch[1]}`);
-          return "unknown";
+      ],
+      structured: safeStructured
+    };
+  }
+  if (spec.pendingEngine === true) {
+    return {
+      passed: true,
+      findings: [
+        {
+          level: "info",
+          message: `Gate "${spec.kind}" is advisory (pending engine); not enforced.`
         }
-        if (typeof parsed !== "object" || parsed === null)
-          return "unknown";
-        const state = parsed.state;
-        if (state === "merged")
-          return "merged";
-        if (state === "opened")
-          return "open";
-        if (state === "closed")
-          return "closed";
-        return "unknown";
-      }
-      default:
-        return "unknown";
+      ],
+      structured: safeStructured
+    };
+  }
+  if (!isPlainObject(evidence)) {
+    return {
+      passed: false,
+      findings: [
+        { level: "error", message: "Malformed evidence: not an object." }
+      ],
+      structured: safeStructured
+    };
+  }
+  const result = evidence.result;
+  const resultIsKnown = result === "passed" || result === "failed" || result === "blocked";
+  const conditions = Array.isArray(spec.conditions) ? spec.conditions : null;
+  if (conditions === null) {
+    if (result === "passed") {
+      return {
+        passed: true,
+        findings: [
+          {
+            level: "info",
+            message: `Gate "${spec.kind}" passed on evidence result.`
+          }
+        ],
+        structured: safeStructured
+      };
     }
-  } catch {
-    return "unknown";
+    return {
+      passed: false,
+      findings: [
+        {
+          level: "error",
+          message: resultIsKnown ? `Gate "${spec.kind}" not satisfied: evidence result is "${String(result)}".` : `Gate "${spec.kind}" not satisfied: evidence result is missing or invalid.`
+        }
+      ],
+      structured: safeStructured
+    };
   }
-}
-function extractPrUrl(description) {
-  if (!description)
-    return null;
-  const match = description.match(PR_URL_RE);
-  if (!match)
-    return null;
-  try {
-    return new URL(match[1]).href;
-  } catch {
-    return null;
+  const mode = spec.mode === "any" ? "any" : "all";
+  const findings = [];
+  const outcomes = [];
+  for (const raw of conditions) {
+    const { ok, finding } = evaluateCondition(raw, safeStructured);
+    outcomes.push(ok);
+    if (finding)
+      findings.push(finding);
   }
-}
-function resolvePrUrl(description, branchName, cwd, provider) {
-  const fromDesc = extractPrUrl(description);
-  if (fromDesc)
-    return fromDesc;
-  if (!branchName)
-    return null;
-  return findExistingPr(branchName, cwd, provider) || null;
-}
-function remoteBranchExists(branchName, cwd) {
-  try {
-    execFileSync("git", ["ls-remote", "--exit-code", "origin", `refs/heads/${branchName}`], { cwd, stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
+  if (result === "blocked") {
+    findings.unshift({
+      level: "error",
+      message: `Gate "${spec.kind}" cannot pass: evidence result is "blocked".`
+    });
+    return { passed: false, findings, structured: safeStructured };
   }
-}
-function pushBranch(branchName, cwd) {
-  if (remoteBranchExists(branchName, cwd)) {
-    log.info(TAG2, `Remote branch ${branchName} exists (rework), force-pushing`);
-    let expectedSha = null;
-    try {
-      execFileSync("git", ["fetch", "origin", branchName], {
-        cwd,
-        stdio: "pipe"
+  let predicatePassed;
+  if (mode === "any") {
+    predicatePassed = outcomes.length > 0 && outcomes.some((o) => o);
+    if (outcomes.length === 0) {
+      findings.push({
+        level: "error",
+        message: `Gate "${spec.kind}" (mode "any") has no conditions to satisfy.`
       });
-      expectedSha = execFileSync("git", ["rev-parse", `refs/remotes/origin/${branchName}`], { cwd, encoding: "utf-8" }).trim();
-    } catch (err) {
-      log.warn(TAG2, `could not resolve remote tip for ${branchName}, falling back to weak lease: ${err instanceof Error ? err.message : err}`);
     }
-    const lease = expectedSha ? `--force-with-lease=refs/heads/${branchName}:${expectedSha}` : "--force-with-lease";
-    execFileSync("git", ["push", lease, "-u", "origin", branchName], {
-      cwd,
-      stdio: "pipe"
-    });
   } else {
-    execFileSync("git", ["push", "-u", "origin", branchName], {
-      cwd,
-      stdio: "pipe"
+    predicatePassed = outcomes.every((o) => o);
+  }
+  if (predicatePassed) {
+    findings.push({
+      level: "info",
+      message: `Gate "${spec.kind}" predicate satisfied (mode "${mode}").`
     });
   }
+  return { passed: predicatePassed, findings, structured: safeStructured };
 }
-function renameRemoteBranch(oldRef, newRef, cwd) {
-  if (oldRef === newRef)
-    return;
-  let sha;
-  try {
-    sha = execFileSync("git", ["rev-parse", "HEAD"], {
-      cwd,
-      encoding: "utf-8"
-    }).trim();
-  } catch (err) {
-    throw new Error(`renameRemoteBranch: could not resolve HEAD: ${err instanceof Error ? err.message : err}`);
+function evaluateCondition(raw, structured) {
+  if (!isPlainObject(raw)) {
+    return {
+      ok: false,
+      finding: {
+        level: "error",
+        message: "Malformed condition: not an object."
+      }
+    };
   }
-  log.info(TAG2, `Renaming remote ${oldRef} → ${newRef}`);
-  execFileSync("git", ["push", "origin", `${sha}:refs/heads/${newRef}`, "--force-with-lease"], { cwd, stdio: "pipe" });
-  try {
-    execFileSync("git", ["push", "origin", `:refs/heads/${oldRef}`], {
-      cwd,
-      stdio: "pipe"
-    });
-  } catch (err) {
-    log.warn(TAG2, `renameRemoteBranch: could not delete old ref ${oldRef}: ${err instanceof Error ? err.message : err}`);
+  const cond = raw;
+  if (typeof cond.path !== "string" || cond.path.length === 0) {
+    return {
+      ok: false,
+      finding: {
+        level: "error",
+        message: "Malformed condition: missing string `path`."
+      }
+    };
   }
-  try {
-    execFileSync("git", ["branch", "-m", oldRef, newRef], {
-      cwd,
-      stdio: "pipe"
-    });
-  } catch {}
-}
-function getBranchWebUrl(branchName, cwd) {
-  try {
-    const remoteUrl = execFileSync("git", ["remote", "get-url", "origin"], {
-      cwd,
-      encoding: "utf-8"
-    }).trim();
-    const encoded = branchName.split("/").map(encodeURIComponent).join("/");
-    if (/github\.com[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
-      const m = remoteUrl.match(/github\.com[:/]([^/]+)\/([^/.]+?)(?:\.git)?$/);
-      if (m)
-        return `https://github.com/${m[1]}/${m[2]}/tree/${encoded}`;
-    }
-    if (/gitlab\.com[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
-      const m = remoteUrl.match(/gitlab\.com[:/](.+?)(?:\.git)?$/);
-      if (m)
-        return `https://gitlab.com/${m[1]}/-/tree/${encoded}`;
-    }
-    if (/bitbucket\.org[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
-      const m = remoteUrl.match(/bitbucket\.org[:/](.+?)(?:\.git)?$/);
-      if (m)
-        return `https://bitbucket.org/${m[1]}/branch/${encoded}`;
+  if (!isGateOperator(cond.op)) {
+    return {
+      ok: false,
+      finding: {
+        level: "error",
+        message: `Unknown operator ${formatValue(cond.op)} at "${cond.path}"; failing closed.`,
+        path: cond.path
+      }
+    };
+  }
+  const actual = resolvePath(structured, cond.path);
+  const expected = cond.value;
+  const op = cond.op;
+  let ok;
+  switch (op) {
+    case "exists":
+      ok = actual !== undefined;
+      break;
+    case "eq":
+      ok = strictEquals(actual, expected);
+      break;
+    case "neq":
+      ok = !strictEquals(actual, expected);
+      break;
+    case "gte":
+    case "gt":
+    case "lte":
+    case "lt":
+      ok = numericCompare(op, actual, expected);
+      break;
+    case "contains":
+      ok = containsCheck(actual, expected);
+      break;
+    default: {
+      const _never = op;
+      ok = false;
     }
-    return null;
-  } catch {
-    return null;
   }
+  if (ok)
+    return { ok: true };
+  return {
+    ok: false,
+    finding: {
+      level: "error",
+      message: `Condition failed: ${cond.path} ${op} ${formatValue(expected)} (actual: ${formatValue(actual)}).`,
+      path: cond.path
+    }
+  };
 }
-function buildPrBody(card, commitLog) {
-  return [
-    "## Summary",
-    "",
-    `Automated PR for card **#${card.short_id} — ${card.title}**.`,
-    "",
-    "## Commits",
-    "",
-    "```",
-    commitLog,
-    "```",
-    "",
-    "## Card",
-    "",
-    card.description?.slice(0, 500) || "No description.",
-    "",
-    "---",
-    "*Created by Harmony Agent Daemon*"
-  ].join(`
-`);
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function createPullRequest(card, branchName, worktreePath, config, provider) {
-  let commitLog = "";
-  try {
-    commitLog = execFileSync("git", ["log", "--oneline", `origin/${config.worktree.baseBranch}..HEAD`], { cwd: worktreePath, encoding: "utf-8" }).trim();
-  } catch {
-    commitLog = "(unable to retrieve commit log)";
-  }
-  const title = `#${card.short_id} ${card.title}`;
-  const body = buildPrBody(card, commitLog);
-  const base = config.worktree.baseBranch;
-  const existingUrl = findExistingPr(branchName, worktreePath, provider);
-  if (existingUrl) {
-    log.info(TAG2, `PR already exists for ${branchName}, updating body...`);
-    updateExistingPr(branchName, body, worktreePath, provider);
-    return existingUrl;
-  }
-  try {
-    let result;
-    switch (provider) {
-      case "github":
-        result = execFileSync("gh", ["pr", "create", "--title", title, "--body", body, "--base", base], { cwd: worktreePath, encoding: "utf-8" }).trim();
-        break;
-      case "azure": {
-        const azOutput = execFileSync("az", [
-          "repos",
-          "pr",
-          "create",
-          "--title",
-          title,
-          "--description",
-          body,
-          "--source-branch",
-          branchName,
-          "--target-branch",
-          base,
-          "--auto-complete",
-          "false"
-        ], { cwd: worktreePath, encoding: "utf-8" }).trim();
-        try {
-          const parsed = JSON.parse(azOutput);
-          result = parsed.remoteUrl ?? parsed.url ?? azOutput;
-        } catch {
-          result = azOutput;
-        }
-        break;
+function resolvePath(root, path) {
+  const segments = path.split(".");
+  let current = root;
+  for (const segment of segments) {
+    if (current === null || current === undefined)
+      return;
+    if (Array.isArray(current)) {
+      const index = Number(segment);
+      if (!Number.isInteger(index) || index < 0 || index >= current.length) {
+        return;
       }
-      case "gitlab":
-        result = execFileSync("glab", [
-          "mr",
-          "create",
-          "--title",
-          title,
-          "--description",
-          body,
-          "--source-branch",
-          branchName,
-          "--target-branch",
-          base,
-          "--no-editor"
-        ], { cwd: worktreePath, encoding: "utf-8" }).trim();
-        break;
-      default:
-        log.warn(TAG2, `No PR CLI for provider "${provider}" — branch pushed but no PR created`);
-        return null;
-    }
-    log.info(TAG2, `PR created: ${result}`);
-    return result;
-  } catch (err) {
-    log.error(TAG2, `Failed to create PR: ${err instanceof Error ? err.message : err}`);
-    return null;
-  }
-}
-function findExistingPr(branchName, worktreePath, provider) {
-  try {
-    switch (provider) {
-      case "github":
-        return execFileSync("gh", ["pr", "view", branchName, "--json", "url", "--jq", ".url"], { cwd: worktreePath, encoding: "utf-8" }).trim();
-      case "gitlab": {
-        const json = execFileSync("glab", ["mr", "view", branchName, "--output", "json"], { cwd: worktreePath, encoding: "utf-8" }).trim();
-        const parsed = JSON.parse(json);
-        return parsed.web_url || null;
+      current = current[index];
+    } else if (typeof current === "object") {
+      if (!Object.hasOwn(current, segment)) {
+        return;
       }
-      default:
-        return null;
+      current = current[segment];
+    } else {
+      return;
     }
-  } catch {
-    return null;
   }
+  return current;
 }
-function updateExistingPr(branchName, body, worktreePath, provider) {
-  try {
-    switch (provider) {
-      case "github":
-        execFileSync("gh", ["pr", "edit", branchName, "--body", body], {
-          cwd: worktreePath,
-          stdio: "pipe"
-        });
-        break;
-      case "gitlab":
-        execFileSync("glab", ["mr", "update", branchName, "--description", body], { cwd: worktreePath, stdio: "pipe" });
-        break;
-    }
-    log.info(TAG2, `Updated existing PR body for ${branchName}`);
-  } catch (err) {
-    log.warn(TAG2, `Failed to update PR body: ${err instanceof Error ? err.message : err}`);
+function strictEquals(a, b) {
+  if (a === null || b === null)
+    return a === b;
+  const t = typeof a;
+  if (t !== "string" && t !== "number" && t !== "boolean")
+    return false;
+  return a === b;
+}
+function numericCompare(op, actual, expected) {
+  if (typeof actual !== "number" || typeof expected !== "number")
+    return false;
+  if (Number.isNaN(actual) || Number.isNaN(expected))
+    return false;
+  switch (op) {
+    case "gte":
+      return actual >= expected;
+    case "gt":
+      return actual > expected;
+    case "lte":
+      return actual <= expected;
+    case "lt":
+      return actual < expected;
   }
 }
-var execFileAsync, TAG2 = "git-pr", VALID_PR_URL_RE, PR_URL_RE, REVIEWED_SHA_RE;
-var init_git_pr = __esm(() => {
-  init_log();
-  execFileAsync = promisify(execFile);
-  VALID_PR_URL_RE = /^https:\/\/(github\.com|gitlab\.com|dev\.azure\.com|bitbucket\.org)\//;
-  PR_URL_RE = /PR:\s*(https?:\/\/[^\s)]+)/;
-  REVIEWED_SHA_RE = /^Reviewed-SHA:\s*([0-9a-f]{7,40})\s*$/im;
-});
-
-// src/http-server.ts
-import {
-  createServer
-} from "node:http";
-
-class HttpServer {
-  opts;
-  server = null;
-  boundPort = null;
-  constructor(opts) {
-    this.opts = opts;
+function containsCheck(actual, expected) {
+  if (typeof actual === "string" && typeof expected === "string") {
+    return actual.includes(expected);
   }
-  get port() {
-    return this.boundPort;
+  if (Array.isArray(actual)) {
+    return actual.some((el) => strictEquals(el, expected));
   }
-  async start() {
-    this.server = createServer((req, res) => {
-      this.route(req, res).catch((err) => {
-        log.error(TAG3, `unhandled: ${err instanceof Error ? err.message : err}`);
-        if (!res.headersSent) {
-          res.writeHead(500, { "content-type": "application/json" });
-          res.end(JSON.stringify({ error: "internal_error" }));
-        }
-      });
-    });
-    const attempts = Math.max(1, this.opts.maxPortAttempts ?? 10);
-    const startPort = this.opts.port;
-    for (let i = 0;i < attempts; i++) {
-      const port = startPort + i;
-      try {
-        await this.listenOnce(port);
-        this.boundPort = port;
-        if (port !== startPort) {
-          log.info(TAG3, `port ${startPort} busy — bound to ${port} instead`);
-        }
-        return port;
-      } catch (err) {
-        const lastAttempt = i === attempts - 1;
-        if (isAddrInUse(err) && !lastAttempt) {
-          log.debug(TAG3, `port ${port} in use, trying ${port + 1}`);
-          continue;
-        }
-        throw err;
-      }
-    }
-    throw new Error("HTTP server failed to bind");
-  }
-  listenOnce(port) {
-    return new Promise((resolve, reject) => {
-      const server = this.server;
-      if (!server) {
-        reject(new Error("server not created"));
-        return;
-      }
-      const onError = (err) => {
-        server.removeListener("listening", onListening);
-        reject(err);
-      };
-      const onListening = () => {
-        server.removeListener("error", onError);
-        resolve();
-      };
-      server.once("error", onError);
-      server.once("listening", onListening);
-      server.listen(port, this.opts.bindAddr);
-    });
-  }
-  async stop() {
-    if (!this.server)
-      return;
-    await new Promise((resolve) => {
-      this.server?.close(() => resolve());
-    });
-    this.server = null;
-    this.boundPort = null;
-  }
-  async route(req, res) {
-    const url = new URL(req.url ?? "/", "http://localhost");
-    const method = (req.method ?? "GET").toUpperCase();
-    const path = url.pathname;
-    if (method === "GET" && path === "/health") {
-      return this.respondHealth(res);
-    }
-    if (method === "GET" && path === "/status") {
-      return this.respondStatus(res);
-    }
-    if (method === "POST") {
-      const cmd = parseCommand(path);
-      if (cmd) {
-        return this.respondCommand(res, cmd.command, cmd.cardId);
-      }
-    }
-    res.writeHead(404, { "content-type": "application/json" });
-    res.end(JSON.stringify({ error: "not_found", path }));
-  }
-  respondHealth(res) {
-    const health = this.opts.getHealth();
-    res.writeHead(health.healthy ? 200 : 503, {
-      "content-type": "application/json"
-    });
-    res.end(JSON.stringify(health));
-  }
-  respondStatus(res) {
-    const snapshot = this.opts.getStatus();
-    res.writeHead(200, { "content-type": "application/json" });
-    res.end(JSON.stringify(snapshot));
+  return false;
+}
+function formatValue(value) {
+  if (value === undefined)
+    return "undefined";
+  if (value === null)
+    return "null";
+  if (typeof value === "string")
+    return JSON.stringify(value);
+  if (typeof value === "number" || typeof value === "boolean") {
+    return String(value);
   }
-  async respondCommand(res, command, cardId) {
-    try {
-      await this.opts.handleCommand(command, cardId);
-      res.writeHead(200, { "content-type": "application/json" });
-      res.end(JSON.stringify({ ok: true, command, cardId }));
-    } catch (err) {
-      res.writeHead(500, { "content-type": "application/json" });
-      res.end(JSON.stringify({
-        error: "command_failed",
-        detail: err instanceof Error ? err.message : String(err)
-      }));
-    }
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return "[unserializable]";
   }
 }
-function isAddrInUse(err) {
-  return typeof err === "object" && err !== null && err.code === "EADDRINUSE";
-}
-function parseCommand(path) {
-  const match = path.match(/^\/(pause|resume|stop)\/([^/]+)$/);
-  if (!match)
-    return null;
-  return { command: match[1], cardId: decodeURIComponent(match[2]) };
-}
-var TAG3 = "http";
-var init_http_server = __esm(() => {
-  init_log();
+var GATE_KINDS, GATE_OPERATORS;
+var init_gateEvaluate = __esm(() => {
+  GATE_KINDS = [
+    "build_green",
+    "review_passed",
+    "checklist",
+    "dod",
+    "artifact",
+    "label",
+    "custom"
+  ];
+  GATE_OPERATORS = [
+    "eq",
+    "neq",
+    "gte",
+    "gt",
+    "lte",
+    "lt",
+    "contains",
+    "exists"
+  ];
 });
 
-// src/auto-merge.ts
-function decideAutoMergeAction(input) {
-  const { ciStatus, headSha, reviewedSha, config } = input;
-  if (!config.enabled)
-    return "wait";
-  if (config.requireGreenCi) {
-    if (ciStatus === "failure")
-      return "stamp-failure";
-    if (ciStatus !== "success")
-      return "wait";
+// ../harmony-shared/dist/gateEvidence.js
+function toStageGateEvidenceInsert(context, evidence) {
+  return {
+    card_id: context.cardId,
+    workspace_id: context.workspaceId,
+    stage_id: context.stageId,
+    gate_kind: context.gate.kind,
+    result: evidence.result,
+    structured: evidence.structured
+  };
+}
+
+// ../harmony-shared/dist/logger.js
+var init_logger = () => {};
+// ../harmony-shared/dist/playbookCatalog.js
+var init_playbookCatalog = () => {};
+
+// ../harmony-shared/dist/playbookStage.js
+function normalizeLoopDef(raw) {
+  if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const obj = raw;
+  if (obj.mode !== "converge" && obj.mode !== "fanout")
+    return null;
+  const mode = obj.mode;
+  const rawMax = obj.max_iterations;
+  const maxInt = typeof rawMax === "number" && Number.isFinite(rawMax) && rawMax >= 1 ? Math.floor(rawMax) : DEFAULT_LOOP_MAX_ITERATIONS;
+  const exitGate = obj.exit_gate && typeof obj.exit_gate === "object" && !Array.isArray(obj.exit_gate) ? obj.exit_gate : null;
+  const def = { mode, max_iterations: maxInt };
+  if (exitGate)
+    def.exit_gate = exitGate;
+  if (obj.item_source && typeof obj.item_source === "object" && !Array.isArray(obj.item_source)) {
+    def.item_source = obj.item_source;
   }
-  if (config.reReviewOnBranchChange && reviewedSha && headSha && reviewedSha !== headSha) {
-    return "rereview";
+  if (typeof obj.concurrency === "number" && obj.concurrency >= 1) {
+    def.concurrency = Math.floor(obj.concurrency);
   }
-  return "merge";
+  if (obj.on_item_fail === "continue" || obj.on_item_fail === "halt") {
+    def.on_item_fail = obj.on_item_fail;
+  }
+  return def;
 }
-async function stampCiFailure(client, card) {
-  const existing = card.description || "";
-  if (existing.includes("CI checks failed"))
-    return;
-  const sep = existing ? `
-` : "";
-  const ts = new Date().toISOString();
-  await client.updateCard(card.id, {
-    description: `${existing}${sep}CI checks failed at ${ts}`
-  });
+function getStageLoop(stage) {
+  return normalizeLoopDef(stage.loop);
 }
-async function removeApprovedLabel(client, card, resolvedLabels, approvedLabel) {
-  const name = approvedLabel.toLowerCase();
-  const obj = resolvedLabels.find((l) => l.name.toLowerCase() === name);
-  if (obj)
-    await client.removeLabelFromCard(card.id, obj.id);
+function isConvergeLoop(loop) {
+  return loop !== null && loop.mode === "converge";
 }
-async function attemptAutoMerge(deps) {
-  const { client, card, resolvedLabels, prUrl, cwd, provider, config } = deps;
-  const autoMerge = config.review.autoMerge;
-  if (!autoMerge.enabled || provider !== "github")
-    return;
-  const { ciStatus, headSha } = await getPrStatus(prUrl, cwd, provider);
-  const reviewedSha = extractReviewedSha(card.description ?? null);
-  const action = decideAutoMergeAction({
-    ciStatus,
-    headSha,
-    reviewedSha,
-    config: autoMerge
-  });
-  switch (action) {
-    case "wait":
-      log.debug(TAG4, `#${card.short_id} waiting (ci=${ciStatus})`);
-      return;
-    case "stamp-failure":
-      log.info(TAG4, `#${card.short_id} CI failed — flagging for human`);
-      await stampCiFailure(client, card);
-      return;
-    case "rereview":
-      log.info(TAG4, `#${card.short_id} branch changed since review — re-reviewing`);
-      await removeApprovedLabel(client, card, resolvedLabels, config.review.approvedLabel);
-      return;
-    case "merge":
-      log.info(TAG4, `#${card.short_id} auto-merging (${autoMerge.strategy})`);
-      await mergePullRequest(prUrl, cwd, provider, autoMerge.strategy, autoMerge.deleteBranch);
-      return;
+function resolveLoopExitGate(stage, loop) {
+  return loop.exit_gate ?? stage.gate ?? null;
+}
+function decideLoopContinuation(args) {
+  const { loop, gatePassed, hasExitGate, completedIterations } = args;
+  const max = Math.max(1, Math.floor(loop.max_iterations) || 1);
+  if (!hasExitGate) {
+    return completedIterations >= max ? "exit" : "iterate";
   }
+  if (gatePassed)
+    return "exit";
+  if (completedIterations >= max)
+    return "exhausted";
+  return "iterate";
 }
-var TAG4 = "auto-merge";
-var init_auto_merge = __esm(() => {
-  init_git_pr();
-  init_log();
-});
-// ../harmony-shared/dist/branchRef.js
-var BRANCH_REF_PATTERN, SAFE_GIT_REF_PATTERN;
-var init_branchRef = __esm(() => {
-  BRANCH_REF_PATTERN = /Branch:\s*`([^`]+)`/;
-  SAFE_GIT_REF_PATTERN = /^[a-zA-Z0-9/_.-]+$/;
-});
-
-// ../harmony-shared/dist/cardLinks.js
-var init_cardLinks = () => {};
-// ../harmony-shared/dist/classification.js
-function escalateTier(tier) {
-  const i = MODEL_TIERS.indexOf(tier);
-  return MODEL_TIERS[Math.min(i + 1, MODEL_TIERS.length - 1)];
+function readStageDefs(def) {
+  if (def.steps_version !== 2)
+    return [];
+  return Array.isArray(def.steps) ? def.steps : [];
 }
-function isModelTier(v) {
-  return typeof v === "string" && MODEL_TIERS.includes(v);
+function resolveStageDef(def, currentStage) {
+  if (def.steps_version !== 2)
+    return { kind: "not_stage_model" };
+  const stages = readStageDefs(def);
+  const index = stages.findIndex((s) => s?.id === currentStage);
+  if (index === -1)
+    return { kind: "stage_not_found" };
+  return { kind: "found", stage: stages[index], index };
 }
-var MODEL_TIERS;
-var init_classification = __esm(() => {
-  MODEL_TIERS = ["simple", "advanced", "research"];
-});
-
-// ../harmony-shared/dist/commentSerializer.js
-function sanitizeHeaderField(value) {
-  return value.replace(/[\]\r\n|<>]/g, " ").trim() || "—";
+function isAgentRunnableOwner(owner) {
+  return owner === "agent" || owner === "either";
 }
-function authorLabel(c) {
-  if (c.author_type === "agent")
-    return "AI agent";
-  const raw = c.author?.full_name || "teammate";
-  return sanitizeHeaderField(raw);
+function nextStageAfter(def, index) {
+  const stages = readStageDefs(def);
+  if (index < 0 || index >= stages.length)
+    return { kind: "out_of_range" };
+  const next = stages[index + 1];
+  if (!next)
+    return { kind: "terminal" };
+  return { kind: "next", stage: next, index: index + 1 };
 }
-function criticalIds(comments) {
-  const keep = new Set;
-  for (const c of comments) {
-    if (c.comment_type === "decision")
-      keep.add(c.id);
-    if (c.supersedes_id) {
-      keep.add(c.id);
-      keep.add(c.supersedes_id);
-    }
-    if (c.confirms_id) {
-      keep.add(c.id);
-      keep.add(c.confirms_id);
+function entryActionAllowlist(entryAction) {
+  if (!entryAction)
+    return null;
+  const direct = SKILL_TOOL_ALLOWLIST[entryAction];
+  if (direct)
+    return direct;
+  if (HARMONY_TOOL_RE.test(entryAction)) {
+    const qualified = `mcp__harmony__${entryAction}`;
+    if (STAGE_DAEMON_OWNED_TOOLS.includes(qualified)) {
+      return null;
     }
+    return qualified;
   }
-  return keep;
+  return null;
 }
-function serializeCommentThread(comments, options = {}) {
-  const { heading = "Conversation", includeInstructions = true, activity = [], maxComments } = options;
-  const visible = comments.filter((c) => !c.deleted_at).slice().sort((a, b) => a.created_at.localeCompare(b.created_at));
-  if (visible.length === 0)
-    return "";
-  const indexById = new Map;
-  visible.forEach((c, i) => {
-    indexById.set(c.id, i + 1);
-  });
-  let rendered = visible;
-  let elidedCount = 0;
-  if (maxComments && visible.length > maxComments) {
-    const keep = criticalIds(visible);
-    const recentThreshold = visible.length - maxComments;
-    rendered = visible.filter((c, i) => i >= recentThreshold || keep.has(c.id));
-    elidedCount = visible.length - rendered.length;
-  }
-  const ref = (id) => {
-    const n = indexById.get(id);
-    return n ? `#${n}` : `#${id.slice(0, 8)}`;
+function stageDisallowedTools() {
+  return STAGE_DAEMON_OWNED_TOOLS.length > 0 ? STAGE_DAEMON_OWNED_TOOLS.join(",") : null;
+}
+var DEFAULT_LOOP_MAX_ITERATIONS = 5, SKILL_TOOL_ALLOWLIST, HARMONY_TOOL_RE, STAGE_DAEMON_OWNED_TOOLS;
+var init_playbookStage = __esm(() => {
+  SKILL_TOOL_ALLOWLIST = {
+    hmy: "Bash,Read,Write,Edit,Glob,Grep,Agent,mcp__harmony__*",
+    "hmy-new": "Read,Grep,Glob,mcp__harmony__*",
+    "hmy-plan": "Read,Grep,Glob,mcp__harmony__*",
+    "hmy-review": "Read,Grep,Glob,Bash,mcp__harmony__*",
+    "hmy-cleanup": "Read,Grep,Glob,mcp__harmony__*",
+    "hmy-standup": "Read,Grep,Glob,mcp__harmony__*"
   };
-  const lines = [];
-  if (elidedCount > 0) {
-    lines.push({
-      at: visible[0]?.created_at ?? "",
-      text: `(${elidedCount} earlier comment(s) omitted for brevity)`
-    });
-  }
-  for (const c of rendered) {
-    const tags = [];
-    if (c.edited_at)
-      tags.push("edited");
-    if (c.reply_to_id)
-      tags.push(`reply to ${ref(c.reply_to_id)}`);
-    if (c.supersedes_id)
-      tags.push(`supersedes ${ref(c.supersedes_id)}`);
-    if (c.confirms_id)
-      tags.push(`confirms ${ref(c.confirms_id)}`);
-    if (c.resolved_at)
-      tags.push("resolved");
-    const tagStr = tags.length ? ` | ${tags.join(" | ")}` : "";
-    const header = `[${sanitizeHeaderField(ref(c.id))} | ${sanitizeHeaderField(c.author_type)} | ${authorLabel(c)} | ${sanitizeHeaderField(c.comment_type)} | ${sanitizeHeaderField(c.created_at)}${tagStr}]`;
-    const fencedBody = c.body.trim().replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-    lines.push({
-      at: c.created_at,
-      text: `${header}
-<comment-body>
-${fencedBody}
-</comment-body>`
-    });
-  }
-  for (const a of activity) {
-    const actor = a.actor ? `${a.actor} ` : "";
-    lines.push({ at: a.at, text: `· (system) ${a.at} — ${actor}${a.text}` });
-  }
-  lines.sort((a, b) => a.at.localeCompare(b.at));
-  const body = lines.map((l) => l.text).join(`
+  HARMONY_TOOL_RE = /^harmony_[a-z_]+$/;
+  STAGE_DAEMON_OWNED_TOOLS = [
+    "mcp__harmony__harmony_end_agent_session",
+    "mcp__harmony__harmony_start_agent_session",
+    "mcp__harmony__harmony_move_card"
+  ];
+});
 
-`);
-  const instruction = includeInstructions ? `
+// ../harmony-shared/dist/projectTemplates.js
+var init_projectTemplates = () => {};
 
-${CONFLICT_INSTRUCTION}` : "";
-  return `## ${heading} (oldest → newest)
+// ../harmony-shared/dist/reviewMethodology.js
+var REVIEW_SYSTEM_PROMPT = `You are a senior code reviewer. Follow this two-pass methodology strictly.
+Report findings; do NOT fix them. This is a read-only review.
 
-${body}${instruction}`;
-}
-var CONFLICT_INSTRUCTION;
-var init_commentSerializer = __esm(() => {
-  CONFLICT_INSTRUCTION = "When two comments conflict, prefer the latest created_at, UNLESS a later " + "comment explicitly confirms or restates the earlier finding. Evaluate " + "substance, not just recency. Cite the comment id(s) you relied on.";
-});
+Review the diff through five lenses on every pass: functionality, security,
+performance, code quality, and best practices. For every finding, set
+\`relatedToDiff\`: true when the change under review introduced or exposed it,
+false when it is a pre-existing issue you happened to notice. Only diff-caused
+findings gate the verdict — pre-existing ones are reported for context and never
+block.
 
-// ../harmony-shared/dist/constants.js
-var TIMINGS;
-var init_constants = __esm(() => {
-  TIMINGS = {
-    SEARCH_DEBOUNCE: 300,
-    AUTOSAVE_DEBOUNCE: 1000,
-    TOAST_DURATION: 3000,
-    QUERY_STALE_TIME: 1000 * 60 * 5,
-    QUERY_GC_TIME: 1000 * 60 * 60 * 24
-  };
-});
-// ../harmony-shared/dist/gateEvaluate.js
-function isGateKind(value) {
-  return typeof value === "string" && GATE_KINDS.includes(value);
-}
-function isGateOperator(value) {
-  return typeof value === "string" && GATE_OPERATORS.includes(value);
-}
-function gateEvaluate(gateSpec, evidence) {
-  const structured = isPlainObject(evidence) ? evidence.structured ?? {} : {};
-  const safeStructured = isPlainObject(structured) ? structured : {};
-  if (!isPlainObject(gateSpec)) {
-    return {
-      passed: false,
-      findings: [{ level: "error", message: "Malformed gate: not an object." }],
-      structured: safeStructured
-    };
-  }
-  const spec = gateSpec;
-  if (!isGateKind(spec.kind)) {
-    return {
-      passed: false,
-      findings: [
-        {
-          level: "error",
-          message: `Malformed gate: unknown kind ${formatValue(spec.kind)}.`
-        }
-      ],
-      structured: safeStructured
-    };
-  }
-  if (spec.pendingEngine === true) {
-    return {
-      passed: true,
-      findings: [
-        {
-          level: "info",
-          message: `Gate "${spec.kind}" is advisory (pending engine); not enforced.`
-        }
-      ],
-      structured: safeStructured
-    };
-  }
-  if (!isPlainObject(evidence)) {
-    return {
-      passed: false,
-      findings: [
-        { level: "error", message: "Malformed evidence: not an object." }
-      ],
-      structured: safeStructured
-    };
-  }
-  const result = evidence.result;
-  const resultIsKnown = result === "passed" || result === "failed" || result === "blocked";
-  const conditions = Array.isArray(spec.conditions) ? spec.conditions : null;
-  if (conditions === null) {
-    if (result === "passed") {
-      return {
-        passed: true,
-        findings: [
-          {
-            level: "info",
-            message: `Gate "${spec.kind}" passed on evidence result.`
-          }
-        ],
-        structured: safeStructured
-      };
-    }
-    return {
-      passed: false,
-      findings: [
-        {
-          level: "error",
-          message: resultIsKnown ? `Gate "${spec.kind}" not satisfied: evidence result is "${String(result)}".` : `Gate "${spec.kind}" not satisfied: evidence result is missing or invalid.`
-        }
-      ],
-      structured: safeStructured
-    };
+## Two-Pass Review
+
+### Pass 1 — CRITICAL (highest severity)
+
+**SQL & Data Safety**
+- String interpolation in SQL — use parameterized queries / prepared statements
+- TOCTOU races: check-then-set patterns that should be atomic WHERE + UPDATE
+
+**Race Conditions & Concurrency**
+- Read-check-write without uniqueness constraint or duplicate key handling
+- Status transitions without atomic WHERE old_status UPDATE SET new_status
+- Unsafe HTML rendering (dangerouslySetInnerHTML, v-html) on user-controlled data (XSS)
+
+**Security & Access Control**
+- Hardcoded secrets, API keys, or credentials committed to source
+- New endpoints, mutations, or service-role/RLS-exempt queries missing an auth or ownership check
+- Over-broad CORS, missing input validation on a trust boundary, injection beyond SQL (command, path, template)
+
+**LLM Output Trust Boundary**
+- LLM-generated values written to DB without format validation (EMAIL_REGEXP, URI.parse, .trim())
+- Structured tool output accepted without type/shape checks before database writes
+
+**Enum & Value Completeness**
+- When the diff introduces a new enum/status/type value, trace it through every consumer
+- Check allowlists, filter arrays, and case/if-elsif chains for the new value
+- Use Grep to find all references to sibling values and Read each match — look OUTSIDE the diff
+
+### Pass 2 — INFORMATIONAL (lower severity)
+
+**Functionality & Edge Cases**
+- Logic errors, off-by-one, unhandled null/undefined, wrong API or library usage
+- Conditional side effects: code paths that branch but forget a side effect on one branch (e.g., promoting without attaching URL)
+
+**Performance**
+- O(n²) algorithms and O(n*m) lookups (Array.find in a loop instead of a Map/index)
+- N+1 queries, unbounded fetches missing pagination, repeated work that should be cached/memoized
+- Unnecessary React re-renders (unstable props/deps, inline object/array literals); leaked subscriptions, timers, or listeners
+- Inline styles re-parsed every render
+
+**Code Quality**
+- Dead code: variables assigned but never read, unreachable branches
+- Duplication that should be extracted, over-long functions, unclear naming
+- \`any\` / unchecked casts that defeat the type system
+- Comments/docstrings describing old behavior after code changed
+
+**Best Practices & Conventions**
+- Deviations from established project conventions and framework idioms / anti-patterns
+- React hook dependency arrays that are wrong, missing, or over-broad
+- Accessibility gaps on new UI: missing labels, roles, alt text, or keyboard paths
+
+**Test Gaps**
+- Missing negative-path tests for new error handling
+- Security enforcement features without integration tests
+
+**Completeness Gaps**
+- Partial enum handling, incomplete error paths, missing edge cases that are straightforward to add
+
+## Severity Classification
+
+- **critical**: SQL safety, race conditions, XSS, secrets/auth/injection holes, LLM trust boundary violations, enum completeness gaps causing runtime errors
+- **major**: Missing requirements, broken functionality, significant completeness gaps, conditional side effects, performance regressions on a hot path
+- **minor**: Dead code, stale comments, test gaps, naming/duplication, minor view issues, cosmetic completeness gaps
+
+## Suppressions — DO NOT flag these
+
+- Redundancy that aids readability (e.g., present? redundant with length > 20)
+- "Add a comment explaining why this threshold was chosen" — thresholds change, comments rot
+- Consistency-only changes (wrapping a value to match how another constant is guarded)
+- Regex edge cases when input is constrained and the edge case never occurs in practice
+- Eval threshold changes — these are tuned empirically
+- Harmless no-ops (e.g., .reject on an element never in the array)
+- Pre-existing issues unrelated to the diff, beyond a single noted finding (set relatedToDiff:false; never block on them)
+- ANYTHING already addressed in the diff you are reviewing — read the FULL diff before flagging`, REVIEW_ACCEPTANCE_CHECKS = `## Acceptance Checks
+
+Before judging code quality, verify the change actually satisfies the card.
+Derive one acceptance check per concrete requirement in the card description and
+one per subtask (the stated acceptance criteria). For each, assign a status from
+hard evidence — cite the file:line you read or the dev-server behaviour you
+observed that proves it:
+
+- **pass** — implemented and verified by code you read or behaviour you observed
+- **partial** — started but incomplete (a missing branch, an edge case, or one of several bundled requirements)
+- **fail** — required but absent, or implemented incorrectly
+- **unverifiable** — cannot be confirmed from the diff or a running app (state why)
+
+Do NOT mark a check "pass" on the implementing agent's say-so or a subtask's
+checkbox alone — only on evidence you found yourself. Any \`fail\` or \`partial\`
+check is an unaddressed requirement and forces a rejected verdict.`, QA_VISUAL_CHECKLIST = `## Visual QA Checklist
+
+For each page affected by the changes:
+
+1. **Visual scan** — Screenshot the page. Check for layout breaks, broken images, alignment issues, z-index problems.
+2. **Interactive elements** — Click every button, link, and control. Does each do what it says?
+3. **Forms** — Fill and submit. Test empty submission, invalid data, edge cases.
+4. **Navigation** — Check all paths in/out. Breadcrumbs, back button, deep links.
+5. **States** — Check empty state, loading state, error state, overflow state.
+6. **Console** — Check for JS exceptions, failed network requests (4xx/5xx), CORS errors after interactions.
+7. **Responsiveness** — If the change is visual, check mobile viewport (375px).
+
+### SPA-Specific (React/Vite)
+- Use snapshot for navigation — client-side routes may not appear in link lists.
+- Check for stale state: navigate away and back — does data refresh correctly?
+- Test browser back/forward — does the app handle history correctly?
+- Watch for hydration errors or layout shifts after dynamic content loads.`, REVIEW_VERDICT_SCHEMA = `{
+  "verdict": "approved" | "rejected",
+  "summary": "Brief overall assessment",
+  "scopeCheck": {
+    "status": "clean" | "drift" | "missing",
+    "notes": "Optional explanation of scope issues"
+  },
+  "acceptanceChecks": [
+    {
+      "criterion": "The requirement or subtask being verified",
+      "status": "pass" | "partial" | "fail" | "unverifiable",
+      "evidence": "file:line or observed behaviour that proves the status"
+    }
+  ],
+  "findings": [
+    {
+      "severity": "critical" | "major" | "minor",
+      "category": "sql-safety | race-condition | security | llm-trust | enum-completeness | functional | performance | code-quality | best-practices | accessibility | visual | ux | console | scope | other",
+      "title": "Short title",
+      "description": "Detailed description of the issue",
+      "location": "file:line (if applicable)",
+      "relatedToDiff": true
+    }
+  ]
+}`, REVIEW_DECISION_RULES = `Counting only findings with \`relatedToDiff: true\`:
+- **rejected**: Any acceptance check that is \`fail\` or \`partial\`, any \`critical\` finding, unaddressed requirements, or 2+ \`major\` findings.
+- **approved**: Every acceptance check \`pass\` (or \`unverifiable\` with a stated reason), no critical findings, at most 1 major finding; minor findings OK.`;
+// ../harmony-shared/dist/stageHandoff.js
+function buildHandoffCommentBody(input) {
+  const handoff = {
+    version: STAGE_HANDOFF_VERSION,
+    stageId: input.stageId,
+    stageName: input.stageName,
+    artifactType: input.artifactType,
+    produced: input.produced,
+    decisions: input.decisions,
+    nextStageNeeds: input.nextStageNeeds,
+    producedAt: input.producedAt ?? new Date().toISOString()
+  };
+  const decisionLines = handoff.decisions.length > 0 ? handoff.decisions.map((d) => `- ${d}`).join(`
+`) : "_None._";
+  const prose = [
+    `**Stage handoff — ${handoff.stageName}**`,
+    "",
+    `**Produced:** ${handoff.produced}`,
+    "",
+    "**Decisions (settled — do not re-litigate):**",
+    decisionLines,
+    "",
+    `**What the next stage needs:** ${handoff.nextStageNeeds}`
+  ].join(`
+`);
+  const payload = [
+    "```json",
+    `// ${HANDOFF_MARKER}`,
+    JSON.stringify(handoff, null, 2),
+    "```"
+  ].join(`
+`);
+  return `${prose}
+
+${payload}`;
+}
+function isTypedStageHandoff(value) {
+  if (typeof value !== "object" || value === null)
+    return false;
+  const v = value;
+  return typeof v.stageId === "string" && typeof v.stageName === "string" && typeof v.produced === "string" && typeof v.nextStageNeeds === "string" && typeof v.producedAt === "string" && Array.isArray(v.decisions) && v.decisions.every((d) => typeof d === "string") && (v.artifactType === null || typeof v.artifactType === "string") && v.version === STAGE_HANDOFF_VERSION;
+}
+function parseHandoffCommentBody(body) {
+  const match = HANDOFF_BLOCK_RE.exec(body);
+  if (!match)
+    return null;
+  try {
+    const parsed = JSON.parse(match[1]);
+    return isTypedStageHandoff(parsed) ? parsed : null;
+  } catch {
+    return null;
   }
-  const mode = spec.mode === "any" ? "any" : "all";
-  const findings = [];
-  const outcomes = [];
-  for (const raw of conditions) {
-    const { ok, finding } = evaluateCondition(raw, safeStructured);
-    outcomes.push(ok);
-    if (finding)
-      findings.push(finding);
+}
+function extractLatestHandoff(comments, opts = {}) {
+  let best = null;
+  for (const c of comments) {
+    if (c.deleted_at)
+      continue;
+    if (c.author_type !== "agent")
+      continue;
+    const handoff = parseHandoffCommentBody(c.body);
+    if (!handoff)
+      continue;
+    if (opts.excludeStageId && handoff.stageId === opts.excludeStageId)
+      continue;
+    if (!best || c.created_at.localeCompare(best.at) > 0) {
+      best = { handoff, at: c.created_at };
+    }
   }
-  if (result === "blocked") {
-    findings.unshift({
-      level: "error",
-      message: `Gate "${spec.kind}" cannot pass: evidence result is "blocked".`
-    });
-    return { passed: false, findings, structured: safeStructured };
+  return best?.handoff ?? null;
+}
+function renderInheritedHandoffSection(handoff) {
+  const decisions = handoff.decisions.length > 0 ? handoff.decisions.map((d) => `- ${d}`).join(`
+`) : "- (none recorded)";
+  return [
+    "## Inherited handoff (from the previous stage)",
+    "",
+    `This is the only state you inherit. The **${handoff.stageName}** stage produced it; treat its decisions as settled.`,
+    "",
+    `**Produced:** ${handoff.produced}`,
+    "",
+    "**Decisions you must respect:**",
+    decisions,
+    "",
+    `**What you need to do with it:** ${handoff.nextStageNeeds}`
+  ].join(`
+`);
+}
+var STAGE_HANDOFF_VERSION = 1, HANDOFF_MARKER = "harmony:stage-handoff", HANDOFF_BLOCK_RE;
+var init_stageHandoff = __esm(() => {
+  HANDOFF_BLOCK_RE = new RegExp("```json\\s*\\n//\\s*" + HANDOFF_MARKER + "\\s*\\n([\\s\\S]*?)\\n```", "m");
+});
+
+// ../harmony-shared/dist/types.js
+var init_types2 = () => {};
+
+// ../harmony-shared/dist/index.js
+var init_dist = __esm(() => {
+  init_branchRef();
+  init_cardLinks();
+  init_classification();
+  init_commentSerializer();
+  init_constants();
+  init_gateEvaluate();
+  init_logger();
+  init_playbookCatalog();
+  init_playbookStage();
+  init_projectTemplates();
+  init_stageHandoff();
+  init_types2();
+});
+
+// src/git-pr.ts
+var exports_git_pr = {};
+__export(exports_git_pr, {
+  validateGitProviderCli: () => validateGitProviderCli,
+  upsertReviewedSha: () => upsertReviewedSha,
+  updateExistingPr: () => updateExistingPr,
+  resolvePrUrl: () => resolvePrUrl,
+  resolvePrHeadBranch: () => resolvePrHeadBranch,
+  renameRemoteBranch: () => renameRemoteBranch,
+  remoteBranchExists: () => remoteBranchExists,
+  pushBranch: () => pushBranch,
+  mergePullRequest: () => mergePullRequest,
+  getPrStatus: () => getPrStatus,
+  getHeadSha: () => getHeadSha,
+  getBranchWebUrl: () => getBranchWebUrl,
+  findExistingPr: () => findExistingPr,
+  extractReviewedSha: () => extractReviewedSha,
+  extractPrUrl: () => extractPrUrl,
+  detectGitProvider: () => detectGitProvider,
+  deriveCiStatus: () => deriveCiStatus,
+  decidePrBranch: () => decidePrBranch,
+  createPullRequest: () => createPullRequest,
+  checkPrMergeStatus: () => checkPrMergeStatus,
+  buildPrBody: () => buildPrBody
+});
+import { execFile, execFileSync } from "node:child_process";
+import { promisify } from "node:util";
+function detectGitProvider(cwd) {
+  try {
+    const url = execFileSync("git", ["remote", "get-url", "origin"], {
+      cwd,
+      encoding: "utf-8"
+    }).trim();
+    if (url.includes("github.com"))
+      return "github";
+    if (url.includes("dev.azure.com") || url.includes("visualstudio.com"))
+      return "azure";
+    if (url.includes("gitlab.com") || /\bgitlab\b/.test(url))
+      return "gitlab";
+    if (url.includes("bitbucket.org"))
+      return "bitbucket";
+    return "unknown";
+  } catch {
+    return "unknown";
   }
-  let predicatePassed;
-  if (mode === "any") {
-    predicatePassed = outcomes.length > 0 && outcomes.some((o) => o);
-    if (outcomes.length === 0) {
-      findings.push({
-        level: "error",
-        message: `Gate "${spec.kind}" (mode "any") has no conditions to satisfy.`
-      });
+}
+function validateGitProviderCli(provider, cwd) {
+  switch (provider) {
+    case "github": {
+      try {
+        execFileSync("gh", ["auth", "status"], { cwd, stdio: "pipe" });
+      } catch {
+        throw new Error("GitHub CLI (gh) is not authenticated. Run: gh auth login");
+      }
+      break;
+    }
+    case "azure": {
+      try {
+        execFileSync("az", ["--version"], { cwd, stdio: "pipe" });
+      } catch {
+        throw new Error("Azure CLI (az) not found. Install it: https://learn.microsoft.com/en-us/cli/azure/install-azure-cli");
+      }
+      try {
+        execFileSync("az", ["account", "show"], { cwd, stdio: "pipe" });
+      } catch {
+        throw new Error("Azure CLI is not authenticated. Run: az login");
+      }
+      break;
+    }
+    case "gitlab": {
+      try {
+        execFileSync("glab", ["auth", "status"], { cwd, stdio: "pipe" });
+      } catch {
+        throw new Error("GitLab CLI (glab) is not installed or not authenticated. Install: https://gitlab.com/gitlab-org/cli — then run: glab auth login");
+      }
+      break;
+    }
+    case "bitbucket":
+    case "unknown":
+      log.warn(TAG2, `Git provider "${provider}" — PR creation will be skipped (no CLI support)`);
+      break;
+  }
+}
+function isValidPrUrl(url) {
+  return VALID_PR_URL_RE.test(url);
+}
+function extractReviewedSha(description) {
+  if (!description)
+    return null;
+  const m = description.match(REVIEWED_SHA_RE);
+  return m ? m[1] : null;
+}
+function upsertReviewedSha(description, sha) {
+  const line = `Reviewed-SHA: ${sha}`;
+  if (REVIEWED_SHA_RE.test(description)) {
+    return description.replace(REVIEWED_SHA_RE, line);
+  }
+  const sep = description ? `
+` : "";
+  return `${description}${sep}${line}`;
+}
+function deriveCiStatus(rollup) {
+  if (!Array.isArray(rollup) || rollup.length === 0)
+    return "unknown";
+  let anyPending = false;
+  for (const check of rollup) {
+    if (typeof check !== "object" || check === null)
+      continue;
+    const c = check;
+    if (typeof c.status === "string") {
+      if (c.status.toUpperCase() !== "COMPLETED") {
+        anyPending = true;
+        continue;
+      }
+      const conclusion = typeof c.conclusion === "string" ? c.conclusion.toUpperCase() : "";
+      if (["SUCCESS", "NEUTRAL", "SKIPPED"].includes(conclusion))
+        continue;
+      return "failure";
+    }
+    if (typeof c.state === "string") {
+      const state = c.state.toUpperCase();
+      if (state === "SUCCESS")
+        continue;
+      if (state === "PENDING") {
+        anyPending = true;
+        continue;
+      }
+      return "failure";
+    }
+  }
+  return anyPending ? "pending" : "success";
+}
+async function getPrStatus(prUrl, cwd, provider) {
+  if (provider !== "github" || !isValidPrUrl(prUrl)) {
+    return { ciStatus: "unknown", headSha: null };
+  }
+  try {
+    const { stdout } = await execFileAsync("gh", ["pr", "view", prUrl, "--json", "statusCheckRollup,headRefOid"], { cwd, encoding: "utf-8", timeout: 1e4 });
+    const parsed = JSON.parse(stdout.trim());
+    const headSha = typeof parsed.headRefOid === "string" ? parsed.headRefOid : null;
+    return { ciStatus: deriveCiStatus(parsed.statusCheckRollup), headSha };
+  } catch {
+    return { ciStatus: "unknown", headSha: null };
+  }
+}
+async function mergePullRequest(prUrl, cwd, provider, strategy, deleteBranch) {
+  if (provider !== "github") {
+    throw new Error(`auto-merge unsupported for provider "${provider}"`);
+  }
+  const args = ["pr", "merge", prUrl, `--${strategy}`];
+  if (deleteBranch)
+    args.push("--delete-branch");
+  await execFileAsync("gh", args, { cwd, encoding: "utf-8", timeout: 30000 });
+}
+function getHeadSha(cwd) {
+  try {
+    return execFileSync("git", ["rev-parse", "HEAD"], {
+      cwd,
+      encoding: "utf-8"
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+async function checkPrMergeStatus(prUrl, cwd, provider) {
+  if (!isValidPrUrl(prUrl))
+    return "unknown";
+  try {
+    switch (provider) {
+      case "github": {
+        const { stdout } = await execFileAsync("gh", ["pr", "view", prUrl, "--json", "state", "--jq", ".state"], { cwd, encoding: "utf-8", timeout: 1e4 });
+        switch (stdout.trim()) {
+          case "MERGED":
+            return "merged";
+          case "OPEN":
+            return "open";
+          case "CLOSED":
+            return "closed";
+          default:
+            return "unknown";
+        }
+      }
+      case "gitlab": {
+        const mrMatch = prUrl.match(/merge_requests\/(\d+)/);
+        if (!mrMatch)
+          return "unknown";
+        const { stdout } = await execFileAsync("glab", ["mr", "view", mrMatch[1], "--output", "json"], { cwd, encoding: "utf-8", timeout: 1e4 });
+        let parsed;
+        try {
+          parsed = JSON.parse(stdout.trim());
+        } catch {
+          log.warn(TAG2, `Failed to parse glab JSON output for MR ${mrMatch[1]}`);
+          return "unknown";
+        }
+        if (typeof parsed !== "object" || parsed === null)
+          return "unknown";
+        const state = parsed.state;
+        if (state === "merged")
+          return "merged";
+        if (state === "opened")
+          return "open";
+        if (state === "closed")
+          return "closed";
+        return "unknown";
+      }
+      default:
+        return "unknown";
     }
-  } else {
-    predicatePassed = outcomes.every((o) => o);
-  }
-  if (predicatePassed) {
-    findings.push({
-      level: "info",
-      message: `Gate "${spec.kind}" predicate satisfied (mode "${mode}").`
-    });
+  } catch {
+    return "unknown";
   }
-  return { passed: predicatePassed, findings, structured: safeStructured };
 }
-function evaluateCondition(raw, structured) {
-  if (!isPlainObject(raw)) {
+function decidePrBranch(provider, rawJson) {
+  if (provider !== "github") {
     return {
-      ok: false,
-      finding: {
-        level: "error",
-        message: "Malformed condition: not an object."
-      }
+      kind: "skip",
+      reason: `PR-link review not yet supported for provider "${provider}" (GitHub only)`
     };
   }
-  const cond = raw;
-  if (typeof cond.path !== "string" || cond.path.length === 0) {
-    return {
-      ok: false,
-      finding: {
-        level: "error",
-        message: "Malformed condition: missing string `path`."
-      }
-    };
+  if (rawJson === null) {
+    return { kind: "skip", reason: "gh pr view failed" };
   }
-  if (!isGateOperator(cond.op)) {
+  let parsed;
+  try {
+    parsed = JSON.parse(rawJson.trim());
+  } catch {
+    return { kind: "skip", reason: "unparseable gh pr view output" };
+  }
+  if (typeof parsed !== "object" || parsed === null) {
+    return { kind: "skip", reason: "unparseable gh pr view output" };
+  }
+  if (parsed.isCrossRepository === true) {
     return {
-      ok: false,
-      finding: {
-        level: "error",
-        message: `Unknown operator ${formatValue(cond.op)} at "${cond.path}"; failing closed.`,
-        path: cond.path
-      }
+      kind: "skip",
+      reason: "fork PR (cross-repo head branch not on origin)"
     };
   }
-  const actual = resolvePath(structured, cond.path);
-  const expected = cond.value;
-  const op = cond.op;
-  let ok;
-  switch (op) {
-    case "exists":
-      ok = actual !== undefined;
-      break;
-    case "eq":
-      ok = strictEquals(actual, expected);
-      break;
-    case "neq":
-      ok = !strictEquals(actual, expected);
-      break;
-    case "gte":
-    case "gt":
-    case "lte":
-    case "lt":
-      ok = numericCompare(op, actual, expected);
-      break;
-    case "contains":
-      ok = containsCheck(actual, expected);
-      break;
-    default: {
-      const _never = op;
-      ok = false;
-    }
+  const branch = typeof parsed.headRefName === "string" ? parsed.headRefName : null;
+  if (!branch) {
+    return { kind: "skip", reason: "PR has no head branch name" };
   }
-  if (ok)
-    return { ok: true };
-  return {
-    ok: false,
-    finding: {
-      level: "error",
-      message: `Condition failed: ${cond.path} ${op} ${formatValue(expected)} (actual: ${formatValue(actual)}).`,
-      path: cond.path
-    }
-  };
-}
-function isPlainObject(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function resolvePath(root, path) {
-  const segments = path.split(".");
-  let current = root;
-  for (const segment of segments) {
-    if (current === null || current === undefined)
-      return;
-    if (Array.isArray(current)) {
-      const index = Number(segment);
-      if (!Number.isInteger(index) || index < 0 || index >= current.length) {
-        return;
-      }
-      current = current[index];
-    } else if (typeof current === "object") {
-      if (!Object.hasOwn(current, segment)) {
-        return;
-      }
-      current = current[segment];
-    } else {
-      return;
-    }
+  if (!SAFE_GIT_REF_PATTERN.test(branch)) {
+    return { kind: "skip", reason: `unsafe git ref: ${branch}` };
   }
-  return current;
-}
-function strictEquals(a, b) {
-  if (a === null || b === null)
-    return a === b;
-  const t = typeof a;
-  if (t !== "string" && t !== "number" && t !== "boolean")
-    return false;
-  return a === b;
+  return { kind: "branch", branch };
 }
-function numericCompare(op, actual, expected) {
-  if (typeof actual !== "number" || typeof expected !== "number")
-    return false;
-  if (Number.isNaN(actual) || Number.isNaN(expected))
-    return false;
-  switch (op) {
-    case "gte":
-      return actual >= expected;
-    case "gt":
-      return actual > expected;
-    case "lte":
-      return actual <= expected;
-    case "lt":
-      return actual < expected;
+async function resolvePrHeadBranch(prUrl, cwd, provider) {
+  if (provider !== "github")
+    return decidePrBranch(provider, null);
+  try {
+    const { stdout } = await execFileAsync("gh", ["pr", "view", prUrl, "--json", "headRefName,isCrossRepository"], { cwd, encoding: "utf-8", timeout: 1e4 });
+    return decidePrBranch("github", stdout);
+  } catch (err) {
+    log.warn(TAG2, `gh pr view failed for ${prUrl}: ${err instanceof Error ? err.message : String(err)}`);
+    return decidePrBranch("github", null);
   }
 }
-function containsCheck(actual, expected) {
-  if (typeof actual === "string" && typeof expected === "string") {
-    return actual.includes(expected);
-  }
-  if (Array.isArray(actual)) {
-    return actual.some((el) => strictEquals(el, expected));
+function extractPrUrl(description) {
+  if (!description)
+    return null;
+  const match = description.match(PR_URL_RE);
+  if (!match)
+    return null;
+  try {
+    return new URL(match[1]).href;
+  } catch {
+    return null;
   }
-  return false;
 }
-function formatValue(value) {
-  if (value === undefined)
-    return "undefined";
-  if (value === null)
-    return "null";
-  if (typeof value === "string")
-    return JSON.stringify(value);
-  if (typeof value === "number" || typeof value === "boolean") {
-    return String(value);
-  }
+function resolvePrUrl(description, branchName, cwd, provider) {
+  const fromDesc = extractPrUrl(description);
+  if (fromDesc)
+    return fromDesc;
+  if (!branchName)
+    return null;
+  return findExistingPr(branchName, cwd, provider) || null;
+}
+function remoteBranchExists(branchName, cwd) {
   try {
-    return JSON.stringify(value);
+    execFileSync("git", ["ls-remote", "--exit-code", "origin", `refs/heads/${branchName}`], { cwd, stdio: "pipe" });
+    return true;
   } catch {
-    return "[unserializable]";
+    return false;
   }
 }
-var GATE_KINDS, GATE_OPERATORS;
-var init_gateEvaluate = __esm(() => {
-  GATE_KINDS = [
-    "build_green",
-    "review_passed",
-    "checklist",
-    "dod",
-    "artifact",
-    "label",
-    "custom"
-  ];
-  GATE_OPERATORS = [
-    "eq",
-    "neq",
-    "gte",
-    "gt",
-    "lte",
-    "lt",
-    "contains",
-    "exists"
-  ];
-});
-
-// ../harmony-shared/dist/gateEvidence.js
-function toStageGateEvidenceInsert(context, evidence) {
-  return {
-    card_id: context.cardId,
-    workspace_id: context.workspaceId,
-    stage_id: context.stageId,
-    gate_kind: context.gate.kind,
-    result: evidence.result,
-    structured: evidence.structured
-  };
-}
-
-// ../harmony-shared/dist/logger.js
-var init_logger = () => {};
-// ../harmony-shared/dist/playbookCatalog.js
-var init_playbookCatalog = () => {};
-
-// ../harmony-shared/dist/playbookStage.js
-function normalizeLoopDef(raw) {
-  if (raw === null || typeof raw !== "object" || Array.isArray(raw))
-    return null;
-  const obj = raw;
-  if (obj.mode !== "converge" && obj.mode !== "fanout")
-    return null;
-  const mode = obj.mode;
-  const rawMax = obj.max_iterations;
-  const maxInt = typeof rawMax === "number" && Number.isFinite(rawMax) && rawMax >= 1 ? Math.floor(rawMax) : DEFAULT_LOOP_MAX_ITERATIONS;
-  const exitGate = obj.exit_gate && typeof obj.exit_gate === "object" && !Array.isArray(obj.exit_gate) ? obj.exit_gate : null;
-  const def = { mode, max_iterations: maxInt };
-  if (exitGate)
-    def.exit_gate = exitGate;
-  if (obj.item_source && typeof obj.item_source === "object" && !Array.isArray(obj.item_source)) {
-    def.item_source = obj.item_source;
+function pushBranch(branchName, cwd) {
+  if (remoteBranchExists(branchName, cwd)) {
+    log.info(TAG2, `Remote branch ${branchName} exists (rework), force-pushing`);
+    let expectedSha = null;
+    try {
+      execFileSync("git", ["fetch", "origin", branchName], {
+        cwd,
+        stdio: "pipe"
+      });
+      expectedSha = execFileSync("git", ["rev-parse", `refs/remotes/origin/${branchName}`], { cwd, encoding: "utf-8" }).trim();
+    } catch (err) {
+      log.warn(TAG2, `could not resolve remote tip for ${branchName}, falling back to weak lease: ${err instanceof Error ? err.message : err}`);
+    }
+    const lease = expectedSha ? `--force-with-lease=refs/heads/${branchName}:${expectedSha}` : "--force-with-lease";
+    execFileSync("git", ["push", lease, "-u", "origin", branchName], {
+      cwd,
+      stdio: "pipe"
+    });
+  } else {
+    execFileSync("git", ["push", "-u", "origin", branchName], {
+      cwd,
+      stdio: "pipe"
+    });
   }
-  if (typeof obj.concurrency === "number" && obj.concurrency >= 1) {
-    def.concurrency = Math.floor(obj.concurrency);
+}
+function renameRemoteBranch(oldRef, newRef, cwd) {
+  if (oldRef === newRef)
+    return;
+  let sha;
+  try {
+    sha = execFileSync("git", ["rev-parse", "HEAD"], {
+      cwd,
+      encoding: "utf-8"
+    }).trim();
+  } catch (err) {
+    throw new Error(`renameRemoteBranch: could not resolve HEAD: ${err instanceof Error ? err.message : err}`);
   }
-  if (obj.on_item_fail === "continue" || obj.on_item_fail === "halt") {
-    def.on_item_fail = obj.on_item_fail;
+  log.info(TAG2, `Renaming remote ${oldRef} → ${newRef}`);
+  execFileSync("git", ["push", "origin", `${sha}:refs/heads/${newRef}`, "--force-with-lease"], { cwd, stdio: "pipe" });
+  try {
+    execFileSync("git", ["push", "origin", `:refs/heads/${oldRef}`], {
+      cwd,
+      stdio: "pipe"
+    });
+  } catch (err) {
+    log.warn(TAG2, `renameRemoteBranch: could not delete old ref ${oldRef}: ${err instanceof Error ? err.message : err}`);
   }
-  return def;
-}
-function getStageLoop(stage) {
-  return normalizeLoopDef(stage.loop);
-}
-function isConvergeLoop(loop) {
-  return loop !== null && loop.mode === "converge";
-}
-function resolveLoopExitGate(stage, loop) {
-  return loop.exit_gate ?? stage.gate ?? null;
+  try {
+    execFileSync("git", ["branch", "-m", oldRef, newRef], {
+      cwd,
+      stdio: "pipe"
+    });
+  } catch {}
 }
-function decideLoopContinuation(args) {
-  const { loop, gatePassed, hasExitGate, completedIterations } = args;
-  const max = Math.max(1, Math.floor(loop.max_iterations) || 1);
-  if (!hasExitGate) {
-    return completedIterations >= max ? "exit" : "iterate";
+function getBranchWebUrl(branchName, cwd) {
+  try {
+    const remoteUrl = execFileSync("git", ["remote", "get-url", "origin"], {
+      cwd,
+      encoding: "utf-8"
+    }).trim();
+    const encoded = branchName.split("/").map(encodeURIComponent).join("/");
+    if (/github\.com[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
+      const m = remoteUrl.match(/github\.com[:/]([^/]+)\/([^/.]+?)(?:\.git)?$/);
+      if (m)
+        return `https://github.com/${m[1]}/${m[2]}/tree/${encoded}`;
+    }
+    if (/gitlab\.com[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
+      const m = remoteUrl.match(/gitlab\.com[:/](.+?)(?:\.git)?$/);
+      if (m)
+        return `https://gitlab.com/${m[1]}/-/tree/${encoded}`;
+    }
+    if (/bitbucket\.org[:/]([^/]+)\/([^/.]+)/.test(remoteUrl)) {
+      const m = remoteUrl.match(/bitbucket\.org[:/](.+?)(?:\.git)?$/);
+      if (m)
+        return `https://bitbucket.org/${m[1]}/branch/${encoded}`;
+    }
+    return null;
+  } catch {
+    return null;
   }
-  if (gatePassed)
-    return "exit";
-  if (completedIterations >= max)
-    return "exhausted";
-  return "iterate";
-}
-function readStageDefs(def) {
-  if (def.steps_version !== 2)
-    return [];
-  return Array.isArray(def.steps) ? def.steps : [];
-}
-function resolveStageDef(def, currentStage) {
-  if (def.steps_version !== 2)
-    return { kind: "not_stage_model" };
-  const stages = readStageDefs(def);
-  const index = stages.findIndex((s) => s?.id === currentStage);
-  if (index === -1)
-    return { kind: "stage_not_found" };
-  return { kind: "found", stage: stages[index], index };
-}
-function isAgentRunnableOwner(owner) {
-  return owner === "agent" || owner === "either";
 }
-function nextStageAfter(def, index) {
-  const stages = readStageDefs(def);
-  if (index < 0 || index >= stages.length)
-    return { kind: "out_of_range" };
-  const next = stages[index + 1];
-  if (!next)
-    return { kind: "terminal" };
-  return { kind: "next", stage: next, index: index + 1 };
+function buildPrBody(card, commitLog) {
+  return [
+    "## Summary",
+    "",
+    `Automated PR for card **#${card.short_id} — ${card.title}**.`,
+    "",
+    "## Commits",
+    "",
+    "```",
+    commitLog,
+    "```",
+    "",
+    "## Card",
+    "",
+    card.description?.slice(0, 500) || "No description.",
+    "",
+    "---",
+    "*Created by Harmony Agent Daemon*"
+  ].join(`
+`);
 }
-function entryActionAllowlist(entryAction) {
-  if (!entryAction)
-    return null;
-  const direct = SKILL_TOOL_ALLOWLIST[entryAction];
-  if (direct)
-    return direct;
-  if (HARMONY_TOOL_RE.test(entryAction)) {
-    const qualified = `mcp__harmony__${entryAction}`;
-    if (STAGE_DAEMON_OWNED_TOOLS.includes(qualified)) {
-      return null;
+function createPullRequest(card, branchName, worktreePath, config, provider) {
+  let commitLog = "";
+  try {
+    commitLog = execFileSync("git", ["log", "--oneline", `origin/${config.worktree.baseBranch}..HEAD`], { cwd: worktreePath, encoding: "utf-8" }).trim();
+  } catch {
+    commitLog = "(unable to retrieve commit log)";
+  }
+  const title = `#${card.short_id} ${card.title}`;
+  const body = buildPrBody(card, commitLog);
+  const base = config.worktree.baseBranch;
+  const existingUrl = findExistingPr(branchName, worktreePath, provider);
+  if (existingUrl) {
+    log.info(TAG2, `PR already exists for ${branchName}, updating body...`);
+    updateExistingPr(branchName, body, worktreePath, provider);
+    return existingUrl;
+  }
+  try {
+    let result;
+    switch (provider) {
+      case "github":
+        result = execFileSync("gh", ["pr", "create", "--title", title, "--body", body, "--base", base], { cwd: worktreePath, encoding: "utf-8" }).trim();
+        break;
+      case "azure": {
+        const azOutput = execFileSync("az", [
+          "repos",
+          "pr",
+          "create",
+          "--title",
+          title,
+          "--description",
+          body,
+          "--source-branch",
+          branchName,
+          "--target-branch",
+          base,
+          "--auto-complete",
+          "false"
+        ], { cwd: worktreePath, encoding: "utf-8" }).trim();
+        try {
+          const parsed = JSON.parse(azOutput);
+          result = parsed.remoteUrl ?? parsed.url ?? azOutput;
+        } catch {
+          result = azOutput;
+        }
+        break;
+      }
+      case "gitlab":
+        result = execFileSync("glab", [
+          "mr",
+          "create",
+          "--title",
+          title,
+          "--description",
+          body,
+          "--source-branch",
+          branchName,
+          "--target-branch",
+          base,
+          "--no-editor"
+        ], { cwd: worktreePath, encoding: "utf-8" }).trim();
+        break;
+      default:
+        log.warn(TAG2, `No PR CLI for provider "${provider}" — branch pushed but no PR created`);
+        return null;
     }
-    return qualified;
+    log.info(TAG2, `PR created: ${result}`);
+    return result;
+  } catch (err) {
+    log.error(TAG2, `Failed to create PR: ${err instanceof Error ? err.message : err}`);
+    return null;
   }
-  return null;
 }
-function stageDisallowedTools() {
-  return STAGE_DAEMON_OWNED_TOOLS.length > 0 ? STAGE_DAEMON_OWNED_TOOLS.join(",") : null;
+function findExistingPr(branchName, worktreePath, provider) {
+  try {
+    switch (provider) {
+      case "github":
+        return execFileSync("gh", ["pr", "view", branchName, "--json", "url", "--jq", ".url"], { cwd: worktreePath, encoding: "utf-8" }).trim();
+      case "gitlab": {
+        const json = execFileSync("glab", ["mr", "view", branchName, "--output", "json"], { cwd: worktreePath, encoding: "utf-8" }).trim();
+        const parsed = JSON.parse(json);
+        return parsed.web_url || null;
+      }
+      default:
+        return null;
+    }
+  } catch {
+    return null;
+  }
 }
-var DEFAULT_LOOP_MAX_ITERATIONS = 5, SKILL_TOOL_ALLOWLIST, HARMONY_TOOL_RE, STAGE_DAEMON_OWNED_TOOLS;
-var init_playbookStage = __esm(() => {
-  SKILL_TOOL_ALLOWLIST = {
-    hmy: "Bash,Read,Write,Edit,Glob,Grep,Agent,mcp__harmony__*",
-    "hmy-new": "Read,Grep,Glob,mcp__harmony__*",
-    "hmy-plan": "Read,Grep,Glob,mcp__harmony__*",
-    "hmy-review": "Read,Grep,Glob,Bash,mcp__harmony__*",
-    "hmy-cleanup": "Read,Grep,Glob,mcp__harmony__*",
-    "hmy-standup": "Read,Grep,Glob,mcp__harmony__*"
-  };
-  HARMONY_TOOL_RE = /^harmony_[a-z_]+$/;
-  STAGE_DAEMON_OWNED_TOOLS = [
-    "mcp__harmony__harmony_end_agent_session",
-    "mcp__harmony__harmony_start_agent_session",
-    "mcp__harmony__harmony_move_card"
-  ];
+function updateExistingPr(branchName, body, worktreePath, provider) {
+  try {
+    switch (provider) {
+      case "github":
+        execFileSync("gh", ["pr", "edit", branchName, "--body", body], {
+          cwd: worktreePath,
+          stdio: "pipe"
+        });
+        break;
+      case "gitlab":
+        execFileSync("glab", ["mr", "update", branchName, "--description", body], { cwd: worktreePath, stdio: "pipe" });
+        break;
+    }
+    log.info(TAG2, `Updated existing PR body for ${branchName}`);
+  } catch (err) {
+    log.warn(TAG2, `Failed to update PR body: ${err instanceof Error ? err.message : err}`);
+  }
+}
+var execFileAsync, TAG2 = "git-pr", VALID_PR_URL_RE, PR_URL_RE, REVIEWED_SHA_RE;
+var init_git_pr = __esm(() => {
+  init_dist();
+  init_log();
+  execFileAsync = promisify(execFile);
+  VALID_PR_URL_RE = /^https:\/\/(github\.com|gitlab\.com|dev\.azure\.com|bitbucket\.org)\//;
+  PR_URL_RE = /PR:\s*(https?:\/\/[^\s)]+)/;
+  REVIEWED_SHA_RE = /^Reviewed-SHA:\s*([0-9a-f]{7,40})\s*$/im;
 });
 
-// ../harmony-shared/dist/projectTemplates.js
-var init_projectTemplates = () => {};
-
-// ../harmony-shared/dist/reviewMethodology.js
-var REVIEW_SYSTEM_PROMPT = `You are a senior code reviewer. Follow this two-pass methodology strictly.
-Report findings; do NOT fix them. This is a read-only review.
-
-Review the diff through five lenses on every pass: functionality, security,
-performance, code quality, and best practices. For every finding, set
-\`relatedToDiff\`: true when the change under review introduced or exposed it,
-false when it is a pre-existing issue you happened to notice. Only diff-caused
-findings gate the verdict — pre-existing ones are reported for context and never
-block.
-
-## Two-Pass Review
-
-### Pass 1 — CRITICAL (highest severity)
-
-**SQL & Data Safety**
-- String interpolation in SQL — use parameterized queries / prepared statements
-- TOCTOU races: check-then-set patterns that should be atomic WHERE + UPDATE
-
-**Race Conditions & Concurrency**
-- Read-check-write without uniqueness constraint or duplicate key handling
-- Status transitions without atomic WHERE old_status UPDATE SET new_status
-- Unsafe HTML rendering (dangerouslySetInnerHTML, v-html) on user-controlled data (XSS)
-
-**Security & Access Control**
-- Hardcoded secrets, API keys, or credentials committed to source
-- New endpoints, mutations, or service-role/RLS-exempt queries missing an auth or ownership check
-- Over-broad CORS, missing input validation on a trust boundary, injection beyond SQL (command, path, template)
-
-**LLM Output Trust Boundary**
-- LLM-generated values written to DB without format validation (EMAIL_REGEXP, URI.parse, .trim())
-- Structured tool output accepted without type/shape checks before database writes
-
-**Enum & Value Completeness**
-- When the diff introduces a new enum/status/type value, trace it through every consumer
-- Check allowlists, filter arrays, and case/if-elsif chains for the new value
-- Use Grep to find all references to sibling values and Read each match — look OUTSIDE the diff
-
-### Pass 2 — INFORMATIONAL (lower severity)
-
-**Functionality & Edge Cases**
-- Logic errors, off-by-one, unhandled null/undefined, wrong API or library usage
-- Conditional side effects: code paths that branch but forget a side effect on one branch (e.g., promoting without attaching URL)
-
-**Performance**
-- O(n²) algorithms and O(n*m) lookups (Array.find in a loop instead of a Map/index)
-- N+1 queries, unbounded fetches missing pagination, repeated work that should be cached/memoized
-- Unnecessary React re-renders (unstable props/deps, inline object/array literals); leaked subscriptions, timers, or listeners
-- Inline styles re-parsed every render
-
-**Code Quality**
-- Dead code: variables assigned but never read, unreachable branches
-- Duplication that should be extracted, over-long functions, unclear naming
-- \`any\` / unchecked casts that defeat the type system
-- Comments/docstrings describing old behavior after code changed
-
-**Best Practices & Conventions**
-- Deviations from established project conventions and framework idioms / anti-patterns
-- React hook dependency arrays that are wrong, missing, or over-broad
-- Accessibility gaps on new UI: missing labels, roles, alt text, or keyboard paths
-
-**Test Gaps**
-- Missing negative-path tests for new error handling
-- Security enforcement features without integration tests
-
-**Completeness Gaps**
-- Partial enum handling, incomplete error paths, missing edge cases that are straightforward to add
-
-## Severity Classification
-
-- **critical**: SQL safety, race conditions, XSS, secrets/auth/injection holes, LLM trust boundary violations, enum completeness gaps causing runtime errors
-- **major**: Missing requirements, broken functionality, significant completeness gaps, conditional side effects, performance regressions on a hot path
-- **minor**: Dead code, stale comments, test gaps, naming/duplication, minor view issues, cosmetic completeness gaps
-
-## Suppressions — DO NOT flag these
-
-- Redundancy that aids readability (e.g., present? redundant with length > 20)
-- "Add a comment explaining why this threshold was chosen" — thresholds change, comments rot
-- Consistency-only changes (wrapping a value to match how another constant is guarded)
-- Regex edge cases when input is constrained and the edge case never occurs in practice
-- Eval threshold changes — these are tuned empirically
-- Harmless no-ops (e.g., .reject on an element never in the array)
-- Pre-existing issues unrelated to the diff, beyond a single noted finding (set relatedToDiff:false; never block on them)
-- ANYTHING already addressed in the diff you are reviewing — read the FULL diff before flagging`, REVIEW_ACCEPTANCE_CHECKS = `## Acceptance Checks
-
-Before judging code quality, verify the change actually satisfies the card.
-Derive one acceptance check per concrete requirement in the card description and
-one per subtask (the stated acceptance criteria). For each, assign a status from
-hard evidence — cite the file:line you read or the dev-server behaviour you
-observed that proves it:
-
-- **pass** — implemented and verified by code you read or behaviour you observed
-- **partial** — started but incomplete (a missing branch, an edge case, or one of several bundled requirements)
-- **fail** — required but absent, or implemented incorrectly
-- **unverifiable** — cannot be confirmed from the diff or a running app (state why)
-
-Do NOT mark a check "pass" on the implementing agent's say-so or a subtask's
-checkbox alone — only on evidence you found yourself. Any \`fail\` or \`partial\`
-check is an unaddressed requirement and forces a rejected verdict.`, QA_VISUAL_CHECKLIST = `## Visual QA Checklist
-
-For each page affected by the changes:
-
-1. **Visual scan** — Screenshot the page. Check for layout breaks, broken images, alignment issues, z-index problems.
-2. **Interactive elements** — Click every button, link, and control. Does each do what it says?
-3. **Forms** — Fill and submit. Test empty submission, invalid data, edge cases.
-4. **Navigation** — Check all paths in/out. Breadcrumbs, back button, deep links.
-5. **States** — Check empty state, loading state, error state, overflow state.
-6. **Console** — Check for JS exceptions, failed network requests (4xx/5xx), CORS errors after interactions.
-7. **Responsiveness** — If the change is visual, check mobile viewport (375px).
+// src/http-server.ts
+import {
+  createServer
+} from "node:http";
 
-### SPA-Specific (React/Vite)
-- Use snapshot for navigation — client-side routes may not appear in link lists.
-- Check for stale state: navigate away and back — does data refresh correctly?
-- Test browser back/forward — does the app handle history correctly?
-- Watch for hydration errors or layout shifts after dynamic content loads.`, REVIEW_VERDICT_SCHEMA = `{
-  "verdict": "approved" | "rejected",
-  "summary": "Brief overall assessment",
-  "scopeCheck": {
-    "status": "clean" | "drift" | "missing",
-    "notes": "Optional explanation of scope issues"
-  },
-  "acceptanceChecks": [
-    {
-      "criterion": "The requirement or subtask being verified",
-      "status": "pass" | "partial" | "fail" | "unverifiable",
-      "evidence": "file:line or observed behaviour that proves the status"
+class HttpServer {
+  opts;
+  server = null;
+  boundPort = null;
+  constructor(opts) {
+    this.opts = opts;
+  }
+  get port() {
+    return this.boundPort;
+  }
+  async start() {
+    this.server = createServer((req, res) => {
+      this.route(req, res).catch((err) => {
+        log.error(TAG3, `unhandled: ${err instanceof Error ? err.message : err}`);
+        if (!res.headersSent) {
+          res.writeHead(500, { "content-type": "application/json" });
+          res.end(JSON.stringify({ error: "internal_error" }));
+        }
+      });
+    });
+    const attempts = Math.max(1, this.opts.maxPortAttempts ?? 10);
+    const startPort = this.opts.port;
+    for (let i = 0;i < attempts; i++) {
+      const port = startPort + i;
+      try {
+        await this.listenOnce(port);
+        this.boundPort = port;
+        if (port !== startPort) {
+          log.info(TAG3, `port ${startPort} busy — bound to ${port} instead`);
+        }
+        return port;
+      } catch (err) {
+        const lastAttempt = i === attempts - 1;
+        if (isAddrInUse(err) && !lastAttempt) {
+          log.debug(TAG3, `port ${port} in use, trying ${port + 1}`);
+          continue;
+        }
+        throw err;
+      }
     }
-  ],
-  "findings": [
-    {
-      "severity": "critical" | "major" | "minor",
-      "category": "sql-safety | race-condition | security | llm-trust | enum-completeness | functional | performance | code-quality | best-practices | accessibility | visual | ux | console | scope | other",
-      "title": "Short title",
-      "description": "Detailed description of the issue",
-      "location": "file:line (if applicable)",
-      "relatedToDiff": true
+    throw new Error("HTTP server failed to bind");
+  }
+  listenOnce(port) {
+    return new Promise((resolve, reject) => {
+      const server = this.server;
+      if (!server) {
+        reject(new Error("server not created"));
+        return;
+      }
+      const onError = (err) => {
+        server.removeListener("listening", onListening);
+        reject(err);
+      };
+      const onListening = () => {
+        server.removeListener("error", onError);
+        resolve();
+      };
+      server.once("error", onError);
+      server.once("listening", onListening);
+      server.listen(port, this.opts.bindAddr);
+    });
+  }
+  async stop() {
+    if (!this.server)
+      return;
+    await new Promise((resolve) => {
+      this.server?.close(() => resolve());
+    });
+    this.server = null;
+    this.boundPort = null;
+  }
+  async route(req, res) {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    const method = (req.method ?? "GET").toUpperCase();
+    const path = url.pathname;
+    if (method === "GET" && path === "/health") {
+      return this.respondHealth(res);
+    }
+    if (method === "GET" && path === "/status") {
+      return this.respondStatus(res);
+    }
+    if (method === "POST") {
+      const cmd = parseCommand(path);
+      if (cmd) {
+        return this.respondCommand(res, cmd.command, cmd.cardId);
+      }
+    }
+    res.writeHead(404, { "content-type": "application/json" });
+    res.end(JSON.stringify({ error: "not_found", path }));
+  }
+  respondHealth(res) {
+    const health = this.opts.getHealth();
+    res.writeHead(health.healthy ? 200 : 503, {
+      "content-type": "application/json"
+    });
+    res.end(JSON.stringify(health));
+  }
+  respondStatus(res) {
+    const snapshot = this.opts.getStatus();
+    res.writeHead(200, { "content-type": "application/json" });
+    res.end(JSON.stringify(snapshot));
+  }
+  async respondCommand(res, command, cardId) {
+    try {
+      await this.opts.handleCommand(command, cardId);
+      res.writeHead(200, { "content-type": "application/json" });
+      res.end(JSON.stringify({ ok: true, command, cardId }));
+    } catch (err) {
+      res.writeHead(500, { "content-type": "application/json" });
+      res.end(JSON.stringify({
+        error: "command_failed",
+        detail: err instanceof Error ? err.message : String(err)
+      }));
     }
-  ]
-}`, REVIEW_DECISION_RULES = `Counting only findings with \`relatedToDiff: true\`:
-- **rejected**: Any acceptance check that is \`fail\` or \`partial\`, any \`critical\` finding, unaddressed requirements, or 2+ \`major\` findings.
-- **approved**: Every acceptance check \`pass\` (or \`unverifiable\` with a stated reason), no critical findings, at most 1 major finding; minor findings OK.`;
-// ../harmony-shared/dist/stageHandoff.js
-function buildHandoffCommentBody(input) {
-  const handoff = {
-    version: STAGE_HANDOFF_VERSION,
-    stageId: input.stageId,
-    stageName: input.stageName,
-    artifactType: input.artifactType,
-    produced: input.produced,
-    decisions: input.decisions,
-    nextStageNeeds: input.nextStageNeeds,
-    producedAt: input.producedAt ?? new Date().toISOString()
-  };
-  const decisionLines = handoff.decisions.length > 0 ? handoff.decisions.map((d) => `- ${d}`).join(`
-`) : "_None._";
-  const prose = [
-    `**Stage handoff — ${handoff.stageName}**`,
-    "",
-    `**Produced:** ${handoff.produced}`,
-    "",
-    "**Decisions (settled — do not re-litigate):**",
-    decisionLines,
-    "",
-    `**What the next stage needs:** ${handoff.nextStageNeeds}`
-  ].join(`
-`);
-  const payload = [
-    "```json",
-    `// ${HANDOFF_MARKER}`,
-    JSON.stringify(handoff, null, 2),
-    "```"
-  ].join(`
-`);
-  return `${prose}
-
-${payload}`;
+  }
 }
-function isTypedStageHandoff(value) {
-  if (typeof value !== "object" || value === null)
-    return false;
-  const v = value;
-  return typeof v.stageId === "string" && typeof v.stageName === "string" && typeof v.produced === "string" && typeof v.nextStageNeeds === "string" && typeof v.producedAt === "string" && Array.isArray(v.decisions) && v.decisions.every((d) => typeof d === "string") && (v.artifactType === null || typeof v.artifactType === "string") && v.version === STAGE_HANDOFF_VERSION;
+function isAddrInUse(err) {
+  return typeof err === "object" && err !== null && err.code === "EADDRINUSE";
 }
-function parseHandoffCommentBody(body) {
-  const match = HANDOFF_BLOCK_RE.exec(body);
+function parseCommand(path) {
+  const match = path.match(/^\/(pause|resume|stop)\/([^/]+)$/);
   if (!match)
     return null;
-  try {
-    const parsed = JSON.parse(match[1]);
-    return isTypedStageHandoff(parsed) ? parsed : null;
-  } catch {
-    return null;
-  }
+  return { command: match[1], cardId: decodeURIComponent(match[2]) };
 }
-function extractLatestHandoff(comments, opts = {}) {
-  let best = null;
-  for (const c of comments) {
-    if (c.deleted_at)
-      continue;
-    if (c.author_type !== "agent")
-      continue;
-    const handoff = parseHandoffCommentBody(c.body);
-    if (!handoff)
-      continue;
-    if (opts.excludeStageId && handoff.stageId === opts.excludeStageId)
-      continue;
-    if (!best || c.created_at.localeCompare(best.at) > 0) {
-      best = { handoff, at: c.created_at };
-    }
+var TAG3 = "http";
+var init_http_server = __esm(() => {
+  init_log();
+});
+
+// src/auto-merge.ts
+function decideAutoMergeAction(input) {
+  const { ciStatus, headSha, reviewedSha, config } = input;
+  if (!config.enabled)
+    return "wait";
+  if (config.requireGreenCi) {
+    if (ciStatus === "failure")
+      return "stamp-failure";
+    if (ciStatus !== "success")
+      return "wait";
   }
-  return best?.handoff ?? null;
+  if (config.reReviewOnBranchChange && reviewedSha && headSha && reviewedSha !== headSha) {
+    return "rereview";
+  }
+  return "merge";
 }
-function renderInheritedHandoffSection(handoff) {
-  const decisions = handoff.decisions.length > 0 ? handoff.decisions.map((d) => `- ${d}`).join(`
-`) : "- (none recorded)";
-  return [
-    "## Inherited handoff (from the previous stage)",
-    "",
-    `This is the only state you inherit. The **${handoff.stageName}** stage produced it; treat its decisions as settled.`,
-    "",
-    `**Produced:** ${handoff.produced}`,
-    "",
-    "**Decisions you must respect:**",
-    decisions,
-    "",
-    `**What you need to do with it:** ${handoff.nextStageNeeds}`
-  ].join(`
-`);
+async function stampCiFailure(client, card) {
+  const existing = card.description || "";
+  if (existing.includes("CI checks failed"))
+    return;
+  const sep = existing ? `
+` : "";
+  const ts = new Date().toISOString();
+  await client.updateCard(card.id, {
+    description: `${existing}${sep}CI checks failed at ${ts}`
+  });
 }
-var STAGE_HANDOFF_VERSION = 1, HANDOFF_MARKER = "harmony:stage-handoff", HANDOFF_BLOCK_RE;
-var init_stageHandoff = __esm(() => {
-  HANDOFF_BLOCK_RE = new RegExp("```json\\s*\\n//\\s*" + HANDOFF_MARKER + "\\s*\\n([\\s\\S]*?)\\n```", "m");
-});
-
-// ../harmony-shared/dist/types.js
-var init_types2 = () => {};
-
-// ../harmony-shared/dist/index.js
-var init_dist = __esm(() => {
-  init_branchRef();
-  init_cardLinks();
-  init_classification();
-  init_commentSerializer();
-  init_constants();
-  init_gateEvaluate();
-  init_logger();
-  init_playbookCatalog();
-  init_playbookStage();
-  init_projectTemplates();
-  init_stageHandoff();
-  init_types2();
+async function removeApprovedLabel(client, card, resolvedLabels, approvedLabel) {
+  const name = approvedLabel.toLowerCase();
+  const obj = resolvedLabels.find((l) => l.name.toLowerCase() === name);
+  if (obj)
+    await client.removeLabelFromCard(card.id, obj.id);
+}
+async function attemptAutoMerge(deps) {
+  const { client, card, resolvedLabels, prUrl, cwd, provider, config } = deps;
+  const autoMerge = config.review.autoMerge;
+  if (!autoMerge.enabled || provider !== "github")
+    return;
+  const { ciStatus, headSha } = await getPrStatus(prUrl, cwd, provider);
+  const reviewedSha = extractReviewedSha(card.description ?? null);
+  const action = decideAutoMergeAction({
+    ciStatus,
+    headSha,
+    reviewedSha,
+    config: autoMerge
+  });
+  switch (action) {
+    case "wait":
+      log.debug(TAG4, `#${card.short_id} waiting (ci=${ciStatus})`);
+      return;
+    case "stamp-failure":
+      log.info(TAG4, `#${card.short_id} CI failed — flagging for human`);
+      await stampCiFailure(client, card);
+      return;
+    case "rereview":
+      log.info(TAG4, `#${card.short_id} branch changed since review — re-reviewing`);
+      await removeApprovedLabel(client, card, resolvedLabels, config.review.approvedLabel);
+      return;
+    case "merge":
+      log.info(TAG4, `#${card.short_id} auto-merging (${autoMerge.strategy})`);
+      await mergePullRequest(prUrl, cwd, provider, autoMerge.strategy, autoMerge.deleteBranch);
+      return;
+  }
+}
+var TAG4 = "auto-merge";
+var init_auto_merge = __esm(() => {
+  init_git_pr();
+  init_log();
 });
 
 // src/pm.ts
@@ -2506,9 +2554,24 @@ function extractBranchFromDescription(description) {
   }
   return branch;
 }
+function qualifiesForAutoReview(description) {
+  return Boolean(extractBranchFromDescription(description) || extractPrUrl(description ?? null));
+}
+async function resolveReviewBranch(description, cwd) {
+  const fromLine = extractBranchFromDescription(description);
+  if (fromLine)
+    return { kind: "branch", branch: fromLine };
+  const prUrl = extractPrUrl(description ?? null);
+  if (!prUrl)
+    return { kind: "none" };
+  const provider = detectGitProvider(cwd);
+  const resolved = await resolvePrHeadBranch(prUrl, cwd, provider);
+  return resolved;
+}
 var TAG7 = "review-worktree";
 var init_review_worktree = __esm(() => {
   init_dist();
+  init_git_pr();
   init_log();
   init_pm();
   init_worktree();
@@ -6409,40 +6472,30 @@ class ReviewWorker {
         costCents: 0,
         numTurns: 0
       });
-      this.branchName = extractBranchFromDescription(card.description);
-      const localMode = !this.branchName;
-      let localDiff = null;
-      if (localMode) {
-        log.info(this.tag, `No branch found for #${card.short_id}, attempting local review`);
-        this.worktreePath = execFileSync10("git", ["rev-parse", "--show-toplevel"], {
-          encoding: "utf-8",
-          timeout: 5000
-        }).trim();
-        const resolved = this.resolveLocalChanges(this.worktreePath, card.short_id);
-        if (!resolved) {
-          log.info(this.tag, `No local changes found for #${card.short_id} — marking for human review (staying in Review)`);
-          await addLabelByName(this.client, card, NEED_REVIEW_LABEL, NEED_REVIEW_LABEL_COLOR);
-          return;
-        }
-        log.info(this.tag, `Found local changes via ${resolved.source} for #${card.short_id}`);
-        localDiff = resolved.diff;
-      }
-      if (this.branchName) {
-        log.info(this.tag, `Review branch: ${this.branchName}`);
+      const repoRoot = execFileSync10("git", ["rev-parse", "--show-toplevel"], {
+        encoding: "utf-8",
+        timeout: 5000
+      }).trim();
+      const resolution = await resolveReviewBranch(card.description, repoRoot);
+      if (resolution.kind !== "branch") {
+        const why = resolution.kind === "skip" ? resolution.reason : "no branch or PR reference";
+        log.info(this.tag, `#${card.short_id} not auto-reviewable (${why}) — marking for human review (staying in Review)`);
+        await addLabelByName(this.client, card, NEED_REVIEW_LABEL, NEED_REVIEW_LABEL_COLOR);
+        return;
       }
+      this.branchName = resolution.branch;
+      log.info(this.tag, `Review branch: ${this.branchName}`);
       const { session: reviewSession } = await this.client.startAgentSession(card.id, {
         agentIdentifier: agentIdentifier(this.id),
         agentName: `${AGENT_NAME} (Review)`,
         agentId: this.agentId,
         status: "working",
-        currentTask: localMode ? "Reviewing local changes" : "Setting up review worktree",
+        currentTask: "Setting up review worktree",
         progressPercent: 5
       });
       this.sessionId = reviewSession && typeof reviewSession === "object" && "id" in reviewSession ? reviewSession.id ?? null : null;
       const labelPromise = addLabelByName(this.client, card, "agent", "#8b5cf6");
-      if (!localMode) {
-        this.worktreePath = checkoutExistingBranch(this.config.worktree.basePath, this.branchName);
-      }
+      this.worktreePath = checkoutExistingBranch(this.config.worktree.basePath, this.branchName);
       await labelPromise;
       if (this.aborted)
         return;
@@ -6453,47 +6506,41 @@ class ReviewWorker {
       }
       const port = this.reviewPort;
       const cwd = this.worktreePath;
-      if (!localMode) {
-        log.info(this.tag, `Starting dev server on port ${port}...`);
-        const [devCmd, devArgs] = spawnRunArgs("dev", "--port", String(port));
-        this.devServerProcess = spawnInGroup(devCmd, devArgs, {
-          cwd,
-          stdio: ["ignore", "pipe", "pipe"]
-        });
-        let devServerSpawnError = null;
-        this.devServerProcess.once("error", (err) => {
-          devServerSpawnError = err;
-        });
-        await this.client.updateAgentProgress(card.id, {
-          agentIdentifier: agentIdentifier(this.id),
-          agentName: `${AGENT_NAME} (Review)`,
-          status: "waiting",
-          currentTask: `Starting dev server on port ${port}…`,
-          progressPercent: 10
-        });
-        if (devServerSpawnError) {
-          throw new DevServerReadinessError(`dev server failed to start (${devCmd}): ${devServerSpawnError.message}`);
-        }
-        await waitForDevServer(this.devServerProcess, 30000);
-        await probeDevServer(port);
-        log.info(this.tag, `Dev server ready on port ${port}`);
-        await this.client.updateAgentProgress(card.id, {
-          agentIdentifier: agentIdentifier(this.id),
-          agentName: `${AGENT_NAME} (Review)`,
-          status: "working",
-          currentTask: "Reviewing changes",
-          progressPercent: 15
-        });
+      log.info(this.tag, `Starting dev server on port ${port}...`);
+      const [devCmd, devArgs] = spawnRunArgs("dev", "--port", String(port));
+      this.devServerProcess = spawnInGroup(devCmd, devArgs, {
+        cwd,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+      let devServerSpawnError = null;
+      this.devServerProcess.once("error", (err) => {
+        devServerSpawnError = err;
+      });
+      await this.client.updateAgentProgress(card.id, {
+        agentIdentifier: agentIdentifier(this.id),
+        agentName: `${AGENT_NAME} (Review)`,
+        status: "waiting",
+        currentTask: `Starting dev server on port ${port}…`,
+        progressPercent: 10
+      });
+      if (devServerSpawnError) {
+        throw new DevServerReadinessError(`dev server failed to start (${devCmd}): ${devServerSpawnError.message}`);
       }
+      await waitForDevServer(this.devServerProcess, 30000);
+      await probeDevServer(port);
+      log.info(this.tag, `Dev server ready on port ${port}`);
+      await this.client.updateAgentProgress(card.id, {
+        agentIdentifier: agentIdentifier(this.id),
+        agentName: `${AGENT_NAME} (Review)`,
+        status: "working",
+        currentTask: "Reviewing changes",
+        progressPercent: 15
+      });
       if (this.aborted)
         return;
       let diff = "";
       try {
-        if (localMode) {
-          diff = localDiff ?? "";
-        } else {
-          diff = execFileSync10("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
-        }
+        diff = execFileSync10("git", ["diff", `origin/${this.config.worktree.baseBranch}..HEAD`], { cwd, encoding: "utf-8", timeout: 30000 });
       } catch {
         diff = "(unable to retrieve diff)";
       }
@@ -6545,9 +6592,7 @@ class ReviewWorker {
       this.state = "completing";
       await this.recordPhase("completing");
       log.info(this.tag, `Claude review finished for #${card.short_id}`);
-      if (!localMode) {
-        this.killDevServer();
-      }
+      this.killDevServer();
       const result = parseReviewOutput(stdout);
       log.info(this.tag, `Review verdict: ${result.verdict} (${result.findings.length} finding(s))`);
       await this.client.updateAgentProgress(card.id, {
@@ -6799,50 +6844,6 @@ class ReviewWorker {
       log.debug(this.tag, "Killed dev server group");
     }
   }
-  resolveLocalChanges(repoRoot, shortId) {
-    try {
-      const localChanges = execFileSync10("git", ["diff", "HEAD"], {
-        cwd: repoRoot,
-        encoding: "utf-8",
-        timeout: 5000
-      });
-      if (localChanges) {
-        return { diff: localChanges, source: "uncommitted changes" };
-      }
-    } catch {
-      log.warn(this.tag, "Failed to check uncommitted changes");
-    }
-    try {
-      const matchingCommits = execFileSync10("git", ["log", "--format=%H", "-20", `--grep=#${shortId}`], { cwd: repoRoot, encoding: "utf-8", timeout: 1e4 }).trim();
-      if (matchingCommits) {
-        const hashes = matchingCommits.split(`
-`).filter((h) => /^[0-9a-f]{4,40}$/i.test(h));
-        if (hashes.length === 0)
-          return null;
-        log.info(this.tag, `Found ${hashes.length} commit(s) referencing #${shortId}`);
-        const diffs = [];
-        for (const hash of hashes) {
-          try {
-            const commitDiff = execFileSync10("git", ["diff", `${hash}~1..${hash}`], { cwd: repoRoot, encoding: "utf-8", timeout: 30000 });
-            if (commitDiff)
-              diffs.push(commitDiff);
-          } catch {
-            log.warn(this.tag, `Failed to diff commit ${hash}`);
-          }
-        }
-        if (diffs.length > 0) {
-          return {
-            diff: diffs.join(`
-`),
-            source: `${diffs.length} commit(s) matching #${shortId}`
-          };
-        }
-      }
-    } catch {
-      log.warn(this.tag, "Failed to search recent commits");
-    }
-    return null;
-  }
   cleanup() {
     if (this.timeoutTimer) {
       clearTimeout(this.timeoutTimer);
@@ -9540,8 +9541,8 @@ class Reconciler {
             log.debug(TAG36, `Skipping #${card.short_id} — has "${NEED_REVIEW_LABEL}" label (needs human)`);
             continue;
           }
-          if (mode === "review" && !extractBranchFromDescription(card.description)) {
-            log.debug(TAG36, `Skipping #${card.short_id} — no branch reference (not qualified for auto-review)`);
+          if (mode === "review" && !qualifiesForAutoReview(card.description)) {
+            log.debug(TAG36, `Skipping #${card.short_id} — no branch or PR reference (not qualified for auto-review)`);
             continue;
           }
           log.info(TAG36, `Missed assignment: #${card.short_id} "${card.title}" (${mode}) — enqueueing`);
@@ -10581,8 +10582,12 @@ async function tryEnqueueCard(cardId, client, pool, config, agentId) {
     log.debug(TAG40, `Card #${card.short_id} already has "${config.agent.review.approvedLabel}" — skipping review`);
     return;
   }
-  if (mode === "review" && !extractBranchFromDescription(card.description)) {
-    log.info(TAG40, `Card #${card.short_id} has no branch reference — skipping auto-review`);
+  if (mode === "review" && hasLabel(cardLabels, NEED_REVIEW_LABEL)) {
+    log.debug(TAG40, `Card #${card.short_id} has "${NEED_REVIEW_LABEL}" label (needs human) — skipping review`);
+    return;
+  }
+  if (mode === "review" && !qualifiesForAutoReview(card.description)) {
+    log.info(TAG40, `Card #${card.short_id} has no branch or PR reference — skipping auto-review`);
     return;
   }
   await pool.enqueue(card, column, cardLabels, subtasks, mode);
@@ -10604,6 +10609,7 @@ var init_src = __esm(() => {
   init_startup_banner();
   init_state_store();
   init_stream_parser_selftest();
+  init_types();
   init_unblock();
   init_watcher();
   init_worktree_gc();