@hasna/loops 0.4.9 → 0.4.11

package/CHANGELOG.md

@@ -5,6 +5,51 @@ documented in this file. Version entries are generated from the
 conventional-commit git history; one commit maps to one released patch version
 unless noted.
 
+## 0.4.11 (2026-07-05)
+
+Scheduler fairness and PR-route hygiene: fast command loops no longer starve
+behind long agent workers, PR tasks dedupe by GitHub identity, and merged/closed
+PR routes close themselves out of the queue.
+
+### Fixed
+
+- **Daemon scheduler — separated concurrency lanes:** the daemon shared a single
+  concurrency pool, so long agent/workflow workers (minutes to over an hour) could
+  occupy every slot and starve fast command loops (monitors, digests, syncs) —
+  even the merge router starved. Command-target and agent/workflow-target loops
+  now draw from independent claim budgets. New env `LOOPS_DAEMON_COMMAND_CONCURRENCY`
+  (default 4) and `LOOPS_DAEMON_AGENT_CONCURRENCY` (default 8); the legacy
+  `LOOPS_DAEMON_CONCURRENCY` / `--concurrency` still work as the agent-lane knob for
+  back-compat, and new `--command-concurrency` / `--agent-concurrency` daemon flags
+  are added. A saturated lane no longer consumes the other lane's budget.
+- **Todos-task routing — PR fingerprint dedupe:** the repos registry maps several
+  local checkouts to one GitHub repo, so a single PR was minted as 2-3 duplicate
+  todos tasks (distinct ids + checkout paths) that each dispatched a full worker.
+  PR-subject tasks now dedupe by a stable `owner/repo#number` fingerprint (from an
+  explicit PR fingerprint field or a canonical PR URL / `github-pr:` handle,
+  lowercased) instead of the `(source-path, task-id)` key, collapsing the
+  duplicates to one work item. Non-PR tasks keep the path/id key (no false dedupe).
+- **Todos-task routing — freshness skip closes the task:** 0.4.10's freshness gate
+  stopped dispatching a worker for a merged/closed PR but left the task pending +
+  route-opted-in, so every drain tick re-skipped it forever. On a definitive
+  MERGED/CLOSED freshness skip the drain now marks the source task done and strips
+  its `auto:route`/`route:enabled` opt-in so it leaves the queue. Only fires when
+  gh/metadata definitively reports MERGED/CLOSED; never on dry-run.
+
+## 0.4.10 (2026-07-05)
+
+Hotfix bundle for the PR-merge drain pipeline.
+
+### Fixed
+
+- **Todos-task drain:** re-admit a terminal work item whose todos task is still
+  actionable (bounded by a redispatch cap + per-attempt backoff) instead of
+  deduping it away forever, so real task work keeps dispatching.
+- **PR review gate:** freshness gate skips merge/review routes for already
+  merged/closed PRs; normalize `app/<slug>` and `<slug>[bot]` bot logins so
+  bot-authored PRs resolve an author instead of hard-failing the format check.
+- **Runtime/store:** cap persisted run stdout/stderr; project path resolution fix.
+
 ## 0.4.9 (2026-07-04)
 
 Unblock the PR-merge pipeline: task-lifecycle/route workers now dispatch real

package/dist/api/index.js

@@ -3,7 +3,7 @@
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.9",
+  version: "0.4.11",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",

package/dist/cli/index.js

@@ -56,8 +56,12 @@ function nowIso() {
 import { mkdirSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
+function homeDir() {
+  const home = process.env.HOME?.trim();
+  return home ? home : homedir();
+}
 function dataDir() {
-  return process.env.LOOPS_DATA_DIR || join(homedir(), ".hasna", "loops");
+  return process.env.LOOPS_DATA_DIR || join(homeDir(), ".hasna", "loops");
 }
 function ensureDataDir() {
   const dir = dataDir();
@@ -74,10 +78,10 @@ function daemonLogPath() {
   return join(dataDir(), "daemon.log");
 }
 function systemdServicePath() {
-  return join(homedir(), ".config", "systemd", "user", "loops-daemon.service");
+  return join(homeDir(), ".config", "systemd", "user", "loops-daemon.service");
 }
 function launchdPlistPath() {
-  return join(homedir(), "Library", "LaunchAgents", "com.hasna.loops.daemon.plist");
+  return join(homeDir(), "Library", "LaunchAgents", "com.hasna.loops.daemon.plist");
 }
 
 // src/lib/process-identity.ts
@@ -1474,6 +1478,21 @@ function workItemStatusForLoopRun(status, attempt, maxAttempts) {
 function scrubbedOrNull(value) {
   return value == null ? null : scrubSecrets(value);
 }
+var MAX_PERSISTED_RUN_OUTPUT_CHARS = 64 * 1024;
+function clampPersistedRunOutput(value) {
+  if (value == null || value.length <= MAX_PERSISTED_RUN_OUTPUT_CHARS)
+    return value;
+  const half = Math.floor(MAX_PERSISTED_RUN_OUTPUT_CHARS / 2);
+  const head = value.slice(0, half);
+  const tail = value.slice(value.length - half);
+  const omitted = value.length - head.length - tail.length;
+  return `${head}
+\u2026[${omitted} chars truncated by loops run-output retention]\u2026
+${tail}`;
+}
+function persistedRunOutput(value) {
+  return clampPersistedRunOutput(scrubbedOrNull(value));
+}
 function chmodIfExists(path, mode) {
   try {
     if (existsSync(path))
@@ -3220,8 +3239,8 @@ class Store {
              ))`).run({
         $workflowRunId: workflowRunId,
         $stepId: stepId,
-        $stdout: progress.stdout === undefined ? null : scrubbedOrNull(progress.stdout),
-        $stderr: progress.stderr === undefined ? null : scrubbedOrNull(progress.stderr),
+        $stdout: progress.stdout === undefined ? null : persistedRunOutput(progress.stdout),
+        $stderr: progress.stderr === undefined ? null : persistedRunOutput(progress.stderr),
         $updated: now,
         $daemonLeaseId: opts.daemonLeaseId ?? null,
         $now: now
@@ -3282,8 +3301,8 @@ class Store {
         $finished: finishedAt,
         $exitCode: patch.exitCode ?? null,
         $durationMs: patch.durationMs ?? null,
-        $stdout: scrubbedOrNull(patch.stdout),
-        $stderr: scrubbedOrNull(patch.stderr),
+        $stdout: persistedRunOutput(patch.stdout),
+        $stderr: persistedRunOutput(patch.stderr),
         $error: error ?? null,
         $updated: finishedAt,
         $daemonLeaseId: opts.daemonLeaseId ?? null,
@@ -3661,8 +3680,8 @@ class Store {
       $pid: patch.pid ?? null,
       $exitCode: patch.exitCode ?? null,
       $durationMs: patch.durationMs ?? null,
-      $stdout: scrubbedOrNull(patch.stdout),
-      $stderr: scrubbedOrNull(patch.stderr),
+      $stdout: persistedRunOutput(patch.stdout),
+      $stderr: persistedRunOutput(patch.stderr),
       $error: error ?? null,
       $updated: finishedAt,
       $claimedBy: opts.claimedBy ?? null,
@@ -4059,8 +4078,8 @@ class Store {
       $processStartedAt: run.processStartedAt ?? null,
       $exitCode: run.exitCode ?? null,
       $durationMs: run.durationMs ?? null,
-      $stdout: scrubbedOrNull(run.stdout),
-      $stderr: scrubbedOrNull(run.stderr),
+      $stdout: persistedRunOutput(run.stdout),
+      $stderr: persistedRunOutput(run.stderr),
       $error: scrubbedOrNull(run.error),
       $goalRunId: run.goalRunId ?? null,
       $created: run.createdAt,
@@ -4218,7 +4237,7 @@ class Store {
 // package.json
 var package_default = {
   name: "@hasna/loops",
-  version: "0.4.9",
+  version: "0.4.11",
   description: "Persistent local loop and workflow runner for deterministic commands and headless AI coding agents",
   type: "module",
   main: "dist/index.js",
@@ -4938,6 +4957,20 @@ function notifySpawn(pid, opts) {
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+function codewithProfileCandidateFromLine(line) {
+  const cols = line.trim().split(/\s+/);
+  if (cols[0] === "*")
+    return cols[1];
+  return cols[0];
+}
+function codewithProfileForError(profile) {
+  return /[\u0000-\u001F\u007F]/.test(profile) ? JSON.stringify(profile) ?? profile : profile;
+}
+function assertCodewithAuthProfileSupported(profile) {
+  if (profile.includes("\x00")) {
+    throw new Error(`codewith auth profile contains unsupported NUL byte: ${codewithProfileForError(profile)}`);
+  }
+}
 function metadataEnv(metadata) {
   const env = {};
   if (metadata.loopId)
@@ -5004,6 +5037,9 @@ function commandSpec(target, opts) {
     };
   }
   const agentTarget = target;
+  if (agentTarget.provider === "codewith" && agentTarget.authProfile) {
+    assertCodewithAuthProfileSupported(agentTarget.authProfile);
+  }
   const adapter = providerAdapter(agentTarget.provider);
   const invocation = adapter.buildInvocation(agentTarget);
   return {
@@ -5176,7 +5212,8 @@ function remotePreflightScript(spec, metadata) {
     lines.push(`if ! ${spec.preflightAnyOf.map((command) => `command -v ${shellQuote(command)} >/dev/null 2>&1`).join(" && ! ")}; then`, `  echo 'none of required executables found: ${spec.preflightAnyOf.join(", ")}' >&2`, "  exit 127", "fi");
   }
   if (spec.nativeAuthProfile?.provider === "codewith") {
-    lines.push(`__OPENLOOPS_CODEWITH_PROFILES="$(${shellQuote(spec.command)} profile list)" || {`, `  printf '%s\\n' ${shellQuote("codewith auth profile preflight failed")} >&2`, "  exit 1", "}", `if ! printf '%s\\n' "$__OPENLOOPS_CODEWITH_PROFILES" | awk 'NR > 1 { print $1 }' | grep -Fx ${shellQuote(spec.nativeAuthProfile.profile)} >/dev/null; then`, `  printf '%s\\n' ${shellQuote(`codewith auth profile not found: ${spec.nativeAuthProfile.profile}`)} >&2`, "  exit 1", "fi");
+    const profileForError = codewithProfileForError(spec.nativeAuthProfile.profile);
+    lines.push(`__OPENLOOPS_CODEWITH_PROFILE=${shellQuote(spec.nativeAuthProfile.profile)}`, "export __OPENLOOPS_CODEWITH_PROFILE", `__OPENLOOPS_CODEWITH_PROFILES="$(${shellQuote(spec.command)} profile list)" || {`, `  printf '%s\\n' ${shellQuote("codewith auth profile preflight failed")} >&2`, "  exit 1", "}", `if ! printf '%s\\n' "$__OPENLOOPS_CODEWITH_PROFILES" | awk 'NR > 1 { candidate = ($1 == "*" ? $2 : $1); if (candidate == ENVIRON["__OPENLOOPS_CODEWITH_PROFILE"]) found = 1 } END { exit(found ? 0 : 1) }'; then`, `  printf '%s\\n' ${shellQuote(`codewith auth profile not found: ${profileForError}`)} >&2`, "  exit 1", "fi");
   }
   return lines.join(`
 `);
@@ -5201,9 +5238,9 @@ function assertCodewithProfileListed(profile, result) {
     const detail = (result.stderr || result.stdout || `exit ${result.status ?? "unknown"}`).trim();
     throw new Error(`codewith auth profile preflight failed${detail ? `: ${detail}` : ""}`);
   }
-  const profiles = new Set((result.stdout || "").split(/\r?\n/).slice(1).map((line) => line.trim().split(/\s+/)[0]).filter(Boolean));
+  const profiles = new Set((result.stdout || "").split(/\r?\n/).slice(1).map(codewithProfileCandidateFromLine).filter(Boolean));
   if (!profiles.has(profile)) {
-    throw new Error(`codewith auth profile not found: ${profile}`);
+    throw new Error(`codewith auth profile not found: ${codewithProfileForError(profile)}`);
   }
 }
 function preflightNativeAuthProfileSync(spec, env) {
@@ -6932,6 +6969,9 @@ function buildHealthReport(store, opts = {}) {
 }
 
 // src/lib/scheduler.ts
+function loopLane(loop) {
+  return loop.target.type === "command" ? "command" : "agent";
+}
 function manualRunScheduledFor(loop, now = new Date) {
   if (loop.archivedAt)
     return now.toISOString();
@@ -7324,14 +7364,23 @@ function claimDueRuns(deps) {
   const maxClaims = Math.max(0, deps.maxClaims ?? Number.POSITIVE_INFINITY);
   if (maxClaims === 0)
     return { claims, claimed, completed: [], skipped, recovered, expired };
+  const laneLimits = deps.laneLimits;
+  const laneClaims = { command: 0, agent: 0 };
+  const laneCap = (lane) => laneLimits === undefined ? Number.POSITIVE_INFINITY : Math.max(0, laneLimits[lane] ?? Number.POSITIVE_INFINITY);
+  const laneFull = (lane) => laneClaims[lane] >= laneCap(lane);
   for (const loop of deps.store.dueLoops(now)) {
     if (claims.length >= maxClaims)
       break;
+    const lane = loopLane(loop);
+    if (laneFull(lane))
+      continue;
     const plan = dueSlots(loop, now);
     let loopSkips = 0;
     for (const slot of plan.slots) {
       if (claims.length >= maxClaims)
         break;
+      if (laneFull(lane))
+        break;
       if (loopSkips >= MAX_SKIPS_PER_LOOP_PER_TICK)
         break;
       const run = claimSlot(deps, loop, slot);
@@ -7340,6 +7389,7 @@ function claimDueRuns(deps) {
       if ("loop" in run) {
         claims.push(run);
         claimed.push(run.run);
+        laneClaims[lane] += 1;
       } else if (run.status === "skipped") {
         skipped.push(run);
         loopSkips += 1;
@@ -7611,13 +7661,23 @@ function intervalFromEnv() {
   const value = Number(raw);
   return Number.isFinite(value) && value > 0 ? value : undefined;
 }
-function concurrencyFromEnv() {
-  const raw = process.env.LOOPS_DAEMON_CONCURRENCY;
+function positiveIntEnv(name) {
+  const raw = process.env[name];
   if (!raw)
     return;
   const value = Number(raw);
   return Number.isInteger(value) && value > 0 ? value : undefined;
 }
+function concurrencyFromEnv() {
+  return positiveIntEnv("LOOPS_DAEMON_CONCURRENCY");
+}
+var DEFAULT_COMMAND_CONCURRENCY = 4;
+var DEFAULT_AGENT_CONCURRENCY = 8;
+function resolveLaneConcurrency(opts = {}) {
+  const command = Math.max(1, opts.commandConcurrency ?? positiveIntEnv("LOOPS_DAEMON_COMMAND_CONCURRENCY") ?? DEFAULT_COMMAND_CONCURRENCY);
+  const agent = Math.max(1, opts.agentConcurrency ?? opts.concurrency ?? positiveIntEnv("LOOPS_DAEMON_AGENT_CONCURRENCY") ?? concurrencyFromEnv() ?? DEFAULT_AGENT_CONCURRENCY);
+  return { command, agent };
+}
 var DAEMON_LOG_MAX_BYTES = 50 * 1024 * 1024;
 var DAEMON_LOG_KEEP = 2;
 function daemonLogLine(message) {
@@ -7663,7 +7723,7 @@ async function runDaemon(opts = {}) {
   const runnerId = `${hostname2()}:${process.pid}:${leaseId}`;
   const intervalMs = opts.intervalMs ?? intervalFromEnv() ?? 1000;
   const leaseTtlMs = opts.leaseTtlMs ?? Math.max(60000, intervalMs * 10);
-  const concurrency = Math.max(1, opts.concurrency ?? concurrencyFromEnv() ?? 4);
+  const laneConcurrency = resolveLaneConcurrency(opts);
   const log = opts.log ?? defaultDaemonLog;
   const sleep = opts.sleep ?? realSleep;
   const lease = store.acquireDaemonLease({
@@ -7675,12 +7735,13 @@ async function runDaemon(opts = {}) {
   if (!lease)
     throw new Error("another loops daemon holds the database lease");
   writePid(process.pid, pidPath);
-  log(`started pid=${process.pid} interval=${intervalMs}ms lease=${leaseId}`);
+  log(`started pid=${process.pid} interval=${intervalMs}ms lease=${leaseId} ` + `command_concurrency=${laneConcurrency.command} agent_concurrency=${laneConcurrency.agent}`);
   let stopFlag = false;
   let leaseLost = false;
   let leaseEpoch = 0;
   let runAbort = new AbortController;
   const activeRuns = new Map;
+  const activeByLane = { command: 0, agent: 0 };
   const requestStop = (message) => {
     stopFlag = true;
     if (!runAbort.signal.aborted)
@@ -7773,7 +7834,12 @@ async function runDaemon(opts = {}) {
     log(`run ${finalRun.id} ${finalRun.status} loop=${claim.loop.id}`);
   };
   const startClaim = (claim) => {
-    const task = executeDaemonRun(claim).catch((err) => log(`run ${claim.run.id} error: ${err instanceof Error ? err.message : String(err)}`)).finally(() => activeRuns.delete(claim.run.id));
+    const lane = loopLane(claim.loop);
+    activeByLane[lane] += 1;
+    const task = executeDaemonRun(claim).catch((err) => log(`run ${claim.run.id} error: ${err instanceof Error ? err.message : String(err)}`)).finally(() => {
+      activeRuns.delete(claim.run.id);
+      activeByLane[lane] -= 1;
+    });
     activeRuns.set(claim.run.id, task);
   };
   try {
@@ -7809,19 +7875,23 @@ async function runDaemon(opts = {}) {
       onTickError: (err) => log(`tick error: ${err instanceof Error ? err.message : String(err)}`),
       tickFn: async () => {
         ensureLease();
-        const available = Math.max(0, concurrency - activeRuns.size);
+        const laneLimits = {
+          command: Math.max(0, laneConcurrency.command - activeByLane.command),
+          agent: Math.max(0, laneConcurrency.agent - activeByLane.agent)
+        };
         const result = claimDueRuns({
           store,
           runnerId,
           daemonLeaseId: leaseId,
           beforeRun: () => ensureLease(),
-          maxClaims: available
+          maxClaims: laneLimits.command + laneLimits.agent,
+          laneLimits
         });
         for (const claim of result.claims)
           startClaim(claim);
         const changed = result.claims.length + result.skipped.length + result.recovered.length + result.expired.length;
         if (changed > 0) {
-          log(`tick claimed=${result.claims.length} active=${activeRuns.size} skipped=${result.skipped.length} recovered=${result.recovered.length} expired=${result.expired.length}`);
+          log(`tick claimed=${result.claims.length} active=${activeRuns.size} (command=${activeByLane.command} agent=${activeByLane.agent}) skipped=${result.skipped.length} recovered=${result.recovered.length} expired=${result.expired.length}`);
         }
         await reapAbandoned(result.recovered);
       }
@@ -11376,11 +11446,18 @@ var PR_REVIEW_REQUIRED_FIELDS = [
   "branch_protection_review_required",
   "branchProtectionReviewRequired"
 ];
+var GITHUB_USER_LOGIN = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
 function githubLogin(value) {
   if (!value?.trim())
     return;
-  const login = value.trim().replace(/^@/, "");
-  return /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/.test(login) ? login : undefined;
+  let login = value.trim().replace(/^@/, "");
+  const appActor = /^app\/([A-Za-z0-9](?:[A-Za-z0-9-]{0,38}))$/.exec(login);
+  if (appActor)
+    login = `${appActor[1]}[bot]`;
+  const bot = /^([A-Za-z0-9](?:[A-Za-z0-9-]{0,38}))\[bot\]$/.exec(login);
+  if (bot)
+    return `${bot[1]}[bot]`;
+  return GITHUB_USER_LOGIN.test(login) ? login : undefined;
 }
 function githubLogins(values) {
   const seen = new Set;
@@ -11439,6 +11516,27 @@ function routeTextFieldValues(record, field) {
   }
   return values;
 }
+var PR_STATE_FIELDS = [
+  "pr_state",
+  "prState",
+  "pull_request_state",
+  "pullRequestState",
+  "state",
+  "pr_status",
+  "prStatus"
+];
+var CLOSED_PR_STATES = new Set(["MERGED", "CLOSED"]);
+function normalizePrState(value) {
+  const trimmed = value?.trim().toUpperCase();
+  return trimmed ? trimmed : undefined;
+}
+function prStateFromEvidence(records, text) {
+  const field = normalizePrState(firstRouteField(records, PR_STATE_FIELDS));
+  if (field)
+    return field;
+  const match = /\b(?:pr[_\s-]?state|pull[_\s-]?request[_\s-]?state|state)\s*[:=]\s*(MERGED|CLOSED|OPEN)\b/i.exec(text);
+  return match ? match[1].toUpperCase() : undefined;
+}
 function prReferenceFrom(text) {
   const url = /github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/pull\/(\d+)/i.exec(text);
   if (url)
@@ -11448,12 +11546,54 @@ function prReferenceFrom(text) {
     return { owner: short[1], repo: short[2], number: Number(short[3]) };
   return;
 }
+var PR_FINGERPRINT_FIELDS = [
+  "pr_fingerprint",
+  "prFingerprint",
+  "github_pr",
+  "githubPr",
+  "github_pr_fingerprint",
+  "githubPrFingerprint",
+  "pull_request_fingerprint",
+  "pullRequestFingerprint"
+];
+function prFingerprint(ref) {
+  return `${ref.owner.toLowerCase()}/${ref.repo.toLowerCase()}#${ref.number}`;
+}
+function prFingerprintFromField(value) {
+  if (!value)
+    return;
+  const match = /([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)#(\d+)/.exec(value);
+  return match ? prFingerprint({ owner: match[1], repo: match[2], number: Number(match[3]) }) : undefined;
+}
+function prFingerprintFromTask(data, metadata) {
+  const records = [...taskEventRecords(data, metadata), ...automationRecords(data, metadata)];
+  for (const field of PR_FINGERPRINT_FIELDS) {
+    for (const value of routeFieldValues(records, field)) {
+      const fingerprint = prFingerprintFromField(value);
+      if (fingerprint)
+        return fingerprint;
+    }
+  }
+  const ref = prReferenceFrom(routeEvidenceText(records));
+  return ref ? prFingerprint(ref) : undefined;
+}
 function ghAuthorResolver(ref) {
   const result = spawnSync7("gh", ["pr", "view", String(ref.number), "--repo", `${ref.owner}/${ref.repo}`, "--json", "author", "-q", ".author.login"], { encoding: "utf8", timeout: 20000 });
   if (result.error || result.status !== 0)
     return;
   return githubLogin((result.stdout ?? "").trim());
 }
+function ghStateResolver(ref) {
+  const result = spawnSync7("gh", ["pr", "view", String(ref.number), "--repo", `${ref.owner}/${ref.repo}`, "--json", "state,mergeStateStatus"], { encoding: "utf8", timeout: 20000 });
+  if (result.error || result.status !== 0)
+    return;
+  try {
+    const parsed = JSON.parse(result.stdout ?? "{}");
+    return { state: parsed.state, mergeStateStatus: parsed.mergeStateStatus };
+  } catch {
+    return;
+  }
+}
 function authorFromPrText(text) {
   const patterns = [
     /\bauthor\s+(?:is\s+also|is|=|:)\s+@?([A-Za-z0-9](?:[A-Za-z0-9-]{0,38}))/i,
@@ -11480,7 +11620,7 @@ function reviewersFromPrText(text) {
   }
   return githubLogins(reviewers);
 }
-function prReviewRoutingDecision(data, metadata, opts, resolveAuthor = ghAuthorResolver) {
+function prReviewRoutingDecision(data, metadata, opts, resolveAuthor = ghAuthorResolver, resolveState = ghStateResolver) {
   const records = [...taskEventRecords(data, metadata), ...automationRecords(data, metadata)];
   const text = routeEvidenceText(records);
   const signals = [];
@@ -11500,6 +11640,23 @@ function prReviewRoutingDecision(data, metadata, opts, resolveAuthor = ghAuthorR
   const required = hasPrReference && (reviewRequiredByField || reviewRequiredByText || mergeBlockedByText || approvalIntent);
   if (!required)
     return { required: false, allowed: true, reviewers: [], signals };
+  const prRef = prReferenceFrom(text);
+  let prState = prStateFromEvidence(records, text);
+  if (!prState && prRef) {
+    const live = resolveState(prRef);
+    prState = normalizePrState(live?.state);
+  }
+  if (prState && CLOSED_PR_STATES.has(prState)) {
+    return {
+      required: true,
+      allowed: false,
+      reason: `PR is already ${prState.toLowerCase()}; skipping merge/review route (freshness gate)`,
+      reviewers: [],
+      signals: [...signals, "pr-not-open"],
+      freshnessSkip: true,
+      prState
+    };
+  }
   const reviewers = githubLogins([
     opts.githubReviewer,
     ...splitList(opts.githubReviewerPool) ?? [],
@@ -11508,14 +11665,11 @@ function prReviewRoutingDecision(data, metadata, opts, resolveAuthor = ghAuthorR
     ...reviewersFromPrText(text)
   ]);
   let author = githubLogin(firstRouteField(records, PR_AUTHOR_FIELDS)) ?? authorFromPrText(text);
-  if (!author) {
-    const ref = prReferenceFrom(text);
-    if (ref) {
-      const derived = githubLogin(resolveAuthor(ref));
-      if (derived) {
-        author = derived;
-        signals.push("author-derived-gh");
-      }
+  if (!author && prRef) {
+    const derived = githubLogin(resolveAuthor(prRef));
+    if (derived) {
+      author = derived;
+      signals.push("author-derived-gh");
     }
   }
   const selectedReviewer = author ? reviewers.find((reviewer) => reviewer.toLowerCase() !== author.toLowerCase()) : undefined;
@@ -11711,6 +11865,34 @@ var UNCLEARED_ROUTE_WORK_ITEM_STATUSES = new Set([
 function isUnclearedRouteWorkItem(item) {
   return UNCLEARED_ROUTE_WORK_ITEM_STATUSES.has(item.status);
 }
+var REACTIVATABLE_TERMINAL_STATUSES = new Set([
+  "succeeded",
+  "failed",
+  "dead_letter",
+  "cancelled"
+]);
+var MAX_TODOS_TASK_ROUTE_REDISPATCHES = 8;
+function todosTaskRouteRedispatchBackoffMs(attempts) {
+  const base = 2 * 60000;
+  const cap = 30 * 60000;
+  const exp = Math.max(0, Math.min(attempts - 1, 10));
+  return Math.min(cap, base * 2 ** exp);
+}
+function reactivateStaleTodosTaskWorkItem(store, routeKey, item, now = Date.now()) {
+  if (routeKey !== "todos-task")
+    return;
+  if (!REACTIVATABLE_TERMINAL_STATUSES.has(item.status))
+    return;
+  if (item.attempts >= MAX_TODOS_TASK_ROUTE_REDISPATCHES)
+    return;
+  const finishedAt = Date.parse(item.updatedAt);
+  if (Number.isFinite(finishedAt) && now - finishedAt < todosTaskRouteRedispatchBackoffMs(item.attempts)) {
+    return;
+  }
+  return store.requeueWorkflowWorkItem(item.id, {
+    reason: `re-admitted from ${item.status}: todos task still actionable after prior run (attempt ${item.attempts + 1}/${MAX_TODOS_TASK_ROUTE_REDISPATCHES})`
+  });
+}
 function todosTaskRouteTemplateId(opts) {
   const id = (opts.template ?? TODOS_TASK_WORKER_VERIFIER_TEMPLATE_ID).trim();
   if (!TODOS_TASK_ROUTE_TEMPLATE_IDS.has(id)) {
@@ -11803,9 +11985,11 @@ function routeEvent(plan) {
       const invocation = store.createWorkflowInvocation(plan.invocationInput);
       const existingItem = store.findWorkflowWorkItem(plan.routeKey, idempotencyKey);
       if (existingItem && isUnclearedRouteWorkItem(existingItem)) {
-        const existingLoop = existingItem.loopId ? store.getLoop(existingItem.loopId) : undefined;
-        const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
-        return { kind: "deduped", existingItem, existingLoop, existingWorkflow, invocation };
+        if (!reactivateStaleTodosTaskWorkItem(store, plan.routeKey, existingItem)) {
+          const existingLoop = existingItem.loopId ? store.getLoop(existingItem.loopId) : undefined;
+          const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
+          return { kind: "deduped", existingItem, existingLoop, existingWorkflow, invocation };
+        }
       }
       const throttle = hasThrottleLimits(plan.throttleLimits) ? routeThrottleDecision(store, { projectPath: plan.routeProjectPath, projectGroup: plan.projectGroup, limits: plan.throttleLimits }) : undefined;
       const workItem = store.upsertWorkflowWorkItem({
@@ -11927,7 +12111,8 @@ function routeTodosTaskEvent(event, opts) {
   const projectGroup = routeProjectGroup(opts.projectGroup, data, metadata);
   const throttleLimits = routeThrottleLimitsFromOpts(opts);
   const sourceProjectIdempotencyPrefix = sourceTodosProjectPath ? normalizeRoutePath(sourceTodosProjectPath) ?? resolve7(sourceTodosProjectPath) : undefined;
-  const idempotencyKey = sourceProjectIdempotencyPrefix ? `todos-task:${sourceProjectIdempotencyPrefix}:${taskId}` : `todos-task:${taskId}`;
+  const prFingerprint2 = prFingerprintFromTask(data, metadata);
+  const idempotencyKey = prFingerprint2 ? `todos-task:pr:${prFingerprint2}` : sourceProjectIdempotencyPrefix ? `todos-task:${sourceProjectIdempotencyPrefix}:${taskId}` : `todos-task:${taskId}`;
   const idempotencySuffix = stableSuffix(idempotencyKey);
   const namePrefix = opts.namePrefix ?? "event:todos-task";
   const workflowName = `${namePrefix}:${taskId.slice(0, 8)}:${idempotencySuffix}:workflow`;
@@ -11937,10 +12122,12 @@ function routeTodosTaskEvent(event, opts) {
     try {
       const existingItem = store.findWorkflowWorkItem("todos-task", idempotencyKey);
       if (existingItem && isUnclearedRouteWorkItem(existingItem)) {
-        const existingLoop = existingItem.loopId ? store.getLoop(existingItem.loopId) : undefined;
-        const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
-        const existingInvocation = store.getWorkflowInvocation(existingItem.invocationId);
-        return dedupedRoutePrint({ event, idempotencyKey, dedupeValueExtras: {} }, { existingItem, existingLoop, existingWorkflow, invocation: existingInvocation });
+        if (!reactivateStaleTodosTaskWorkItem(store, "todos-task", existingItem)) {
+          const existingLoop = existingItem.loopId ? store.getLoop(existingItem.loopId) : undefined;
+          const existingWorkflow = existingItem.workflowId ? store.getWorkflow(existingItem.workflowId) : undefined;
+          const existingInvocation = store.getWorkflowInvocation(existingItem.invocationId);
+          return dedupedRoutePrint({ event, idempotencyKey, dedupeValueExtras: {} }, { existingItem, existingLoop, existingWorkflow, invocation: existingInvocation });
+        }
       }
     } finally {
       store.close();
@@ -11957,7 +12144,8 @@ function routeTodosTaskEvent(event, opts) {
         event,
         taskId,
         routeError: true,
-        prReviewRouting
+        prReviewRouting,
+        ...prReviewRouting.freshnessSkip ? { freshnessSkip: true, prState: prReviewRouting.prState } : {}
       },
       human: `skipped task ${taskId}: ${prReviewRouting.reason}`
     };
@@ -12518,6 +12706,31 @@ function markInvalidDrainTaskNonRouteable(sourceTodosProject, task, reason) {
     untagAutoRoute: todosMutationSummary(untagResult)
   };
 }
+function isFreshnessSkip(result) {
+  return result.kind === "skipped" && result.value.freshnessSkip === true;
+}
+function closeFreshnessSkippedTask(sourceTodosProject, task, reason) {
+  const taskId = taskField(task, ["id", "task_id", "taskId"]);
+  if (!taskId)
+    return { attempted: false, reason: "task id missing" };
+  const comment = `OpenLoops freshness gate closed this task: ${reason}. The referenced PR is already merged/closed, so the ` + `merge/review route will not dispatch a worker. Marked done and removed auto:route/route:enabled so drains stop re-skipping it.`;
+  const commentResult = runLocalCommand("todos", ["--project", sourceTodosProject, "comment", taskId, comment], { timeoutMs: 30000 });
+  const doneResult = runLocalCommand("todos", ["--project", sourceTodosProject, "done", taskId, "--notes", "PR already merged/closed; closed by OpenLoops freshness gate"], { timeoutMs: 30000 });
+  const untagAutoRoute = runLocalCommand("todos", ["--project", sourceTodosProject, "untag", taskId, "auto:route"], { timeoutMs: 30000 });
+  const untagRouteEnabled = runLocalCommand("todos", ["--project", sourceTodosProject, "untag", taskId, "route:enabled"], { timeoutMs: 30000 });
+  const leftQueue = doneResult.ok || untagAutoRoute.ok || untagRouteEnabled.ok;
+  return {
+    ok: leftQueue,
+    attempted: true,
+    taskId,
+    action: "freshness-close",
+    error: leftQueue ? undefined : "task could not be closed or untagged; inspect per-command results",
+    comment: todosMutationSummary(commentResult),
+    done: todosMutationSummary(doneResult),
+    untagAutoRoute: todosMutationSummary(untagAutoRoute),
+    untagRouteEnabled: todosMutationSummary(untagRouteEnabled)
+  };
+}
 function drainTodosTaskRoutes(opts) {
   const maxDispatch = positiveInteger(opts.maxDispatch ?? "1", "--max-dispatch") ?? 1;
   const todosProject = opts.todosProject ?? defaultLoopsProject();
@@ -12559,6 +12772,12 @@ function drainTodosTaskRoutes(opts) {
         result = skippedDrainTask(task, event, redact(message, 640) ?? "route task failed", { fatal: true });
       }
     }
+    if (!opts.dryRun && isFreshnessSkip(result)) {
+      const sourceTaskProject = opts.todosProjectsFromRegistry ? taskField(task, ["source_project_path", "sourceProjectPath"]) ?? todosProject : todosProject;
+      const reason = stringField(result.value.reason) ?? "PR already merged/closed (freshness gate)";
+      const sourceTaskUpdate = closeFreshnessSkippedTask(sourceTaskProject, task, reason);
+      result = { ...result, value: { ...result.value, sourceTaskUpdate } };
+    }
     results.push(result);
     if (result.kind === "created")
       created += 1;
@@ -12584,6 +12803,7 @@ function drainTodosTaskRoutes(opts) {
     deduped: results.filter((result) => result.kind === "deduped").length,
     throttled: results.filter((result) => result.kind === "throttled").length,
     skipped: results.filter((result) => result.kind === "skipped").length,
+    freshnessClosed: results.filter((result) => isFreshnessSkip(result) && result.value.sourceTaskUpdate?.attempted === true).length,
     fatal: results.filter((result) => result.value.fatal === true).length,
     maxDispatch,
     source: "todos ready",
@@ -12612,6 +12832,7 @@ function drainTodosTaskRoutes(opts) {
     deduped: report.deduped,
     throttled: report.throttled,
     skipped: report.skipped,
+    freshnessClosed: report.freshnessClosed,
     fatal: report.fatal,
     maxDispatch: report.maxDispatch,
     source: report.source,
@@ -12621,7 +12842,7 @@ function drainTodosTaskRoutes(opts) {
   } : { ...report, evidencePath };
   return {
     value,
-    human: `drained todos ready queue: considered=${report.considered} created=${report.created} deduped=${report.deduped} throttled=${report.throttled} skipped=${report.skipped} fatal=${report.fatal}`
+    human: `drained todos ready queue: considered=${report.considered} created=${report.created} deduped=${report.deduped} throttled=${report.throttled} skipped=${report.skipped} freshnessClosed=${report.freshnessClosed} fatal=${report.fatal}`
   };
 }
 // src/lib/route/route-tasks.ts