@knpkv/control-center 0.3.0 → 0.5.0

package/dist/server/assets/{relationshipInferenceMaterialization-DYBcaWhQ.js → relationshipInferenceMaterialization-Dyix96px.js}

@@ -1,15 +1,16 @@
-import { $ as GovernedActionEnvelopeMaterialV1, $n as ReadinessAssessment, Ai as PrReviewSuggestion, C as RelationshipRepairReview, Ct as DeliveryEntityService, D as advanceGovernedActionLifecycle, E as GovernedActionProviderLineage, Et as DeliveryRelationship, F as GovernedActionTransitionDigest, Fi as PrReviewSuggestionId, Fn as Person, Ft as LedgerRevision, G as governedActionAuthorizationMatchesTransition, In as PersonAvatar, J as GovernedActionAttemptDigest, K as governedActionAuthorizationMismatches, L as GovernedActionTransitionV1, Ln as PersonSourceIdentity, M as GovernedActionState, Mt as EvidenceValue, N as GovernedActionTransitionCause, O as GovernedActionCommandDigest, Oi as PrReviewReport, Ot as EvidenceClaim, P as GovernedActionTransitionCommand, Q as GovernedActionEnvelopeDigest, Qn as ReadinessArtifactRevision, Qr as Freshness, R as GovernedActionUnknownOutcome, Rn as Role, Rt as RelationshipEndpointKind, S as RelationshipRepairRationale, St as DeliveryEntityProjection, T as GovernedActionLifecycleHeadV1, Tr as ReleaseReadinessAssessment, Tt as DeliveryNode, Un as EnvironmentReadinessAssessment, Vn as derivePersonInitials, W as governedActionAuthorityMismatches, X as GovernedActionAuthorizationDigest, Y as GovernedActionAttemptV1, Z as GovernedActionAuthorizationV1, _t as PortfolioInvalidatedEventV1, a as WorkspaceSettingsSections, ai as PrReviewSuggestionEdit, b as RelationshipRepairProposal, br as ReadinessRuleVersion, c as isGovernedWorkspaceSettingsSection, ci as PrReviewSuggestionRevision, ct as GovernedActionPolicyDigest, di as PrReviewSuggestionRevisionPageSize, ei as PluginHealth, er as ReadinessCandidateDigest, et as GovernedActionEnvelopeV1, fi as PrReviewSuggestionRevisionSequence, hi as hasSamePrReviewTechnicalClaim, hn as Release, ht as DomainEventMetadataV1, ii as PrReviewSuggestionAgentAuthor, it as GovernedActionIdempotencyKey, jn as Actor, k as GovernedActionCommandId, ki as PrReviewSubject, kt as EvidenceItem, l as TimelineActorKind, li as PrReviewSuggestionRevisionAuthor, lt as GovernedActionPolicyEvaluationDigest, mi as PrReviewSuggestionValidated, mt as DomainEventCorrelationId, nr as ReadinessDerivationVersion, nt as GovernedActionEvidenceSet, o as WorkspaceSettingsV1, q as governedActionPermissionGrants, r as GovernedWorkspaceSettingsSections, rt as GovernedActionEvidenceSetDigest, s as changedWorkspaceSettingsSections, si as PrReviewSuggestionRequiresRevalidation, t as DEFAULT_WORKSPACE_SETTINGS, ui as PrReviewSuggestionRevisionPage, ut as GovernedActionPolicyEvaluationV1, v as RelationshipRepairApplication, vr as ReadinessRuleId, vt as PortfolioInvalidatedPayloadV1, w as RelationshipRepairReviewDecision, wr as ReadinessVerdict, wt as DeliveryEntityStatusGroup, x as RelationshipRepairProposalOrigin, xt as DeliveryEntityKind, y as RelationshipRepairDisposition, zn as RoleAssignment } from "./workspaceSettings-BE713Oe8.js";
-import { $ as SourceRevision, At as SessionId, Ct as RelationshipId, Dt as ReviewCommandArtifactId, Et as ReleaseId, K as MaximumPluginPayloadBytes, Mt as WorkspaceId, N as NormalizedPluginEventV1, Nt as WorkspaceSettingsMutationId, Ot as ReviewSuggestionPublicationReservationId, Q as Revision$1, S as PluginProviderOperationId, St as ReadinessAssessmentId, Tt as RelationshipRepairReviewId, X as NormalizationSchemaVersion, Y as hasMaximumPluginJsonBytes, Z as ProviderId, _t as JobId, at as DomainEventId, bt as PrReviewSuggestionRevisionId, c as SemanticVersion, ct as EventCursor, dt as FollowedResourceId, et as SourceUrl, ft as GovernedActionAttemptId, g as PluginActionPayloadDigest, gt as GraphNodeId, h as PluginActionDispatchResultV1, ht as GovernedActionTransitionId, it as AgentThreadId, jt as ShareId, kt as RoleAssignmentId, lt as EvidenceClaimId, mt as GovernedActionId, n as NegotiatedPluginDescriptorV1, nt as UtcTimestamp, o as PluginDescriptorV1, ot as EntityId, pt as GovernedActionAuthorizationId, rt as AgentId, st as EnvironmentId, tt as VendorImmutableId, ut as EvidenceId, vt as PersonId, wt as RelationshipRepairProposalId, xt as ProviderAccountId, y as PluginActionReconciliationKey, yt as PluginConnectionId } from "./descriptor-CKtTnhef.js";
-import { V as ReviewAgentProfile } from "./agent-CyZ40zs1.js";
-import { a as ReleaseReadinessCandidateMaterial, c as normalizeReadinessRuleMaterial, i as ReadinessRuleMaterial, l as normalizeReleaseReadinessCandidateMaterial, n as summarizeEnvironmentReadiness, r as EnvironmentReadinessCandidateMaterial, s as normalizeEnvironmentReadinessCandidateMaterial, u as AuthorizedShareGrant } from "./readiness-BhA-Nr9c.js";
-import { d as PluginUnsupportedCapabilityFailure, o as PluginMalformedResponseFailure } from "./failures-mgYDkUZy.js";
+import { $n as PrReviewSuggestionEdit, A as DeliveryNode, Ai as PortfolioInvalidatedPayloadV1, Ar as PrReviewSuggestionId, B as LedgerRevision, Bi as RoleAssignment, Br as GovernedActionCommandId, C as RelationshipRepairReview, Cr as PrReviewReport, D as DeliveryEntityProjection, Di as DomainEventMetadataV1, E as DeliveryEntityKind, Ei as DomainEventCorrelationId, Fr as reconcilePrReviewReports, Gr as GovernedActionTransitionCommand, Hi as derivePersonInitials, Ii as Person, Ir as GovernedActionLifecycleHeadV1, Jn as PluginHealth, Jr as GovernedActionTransitionV1, Jt as ReadinessCandidateDigest, Kn as Freshness, Kr as GovernedActionTransitionDigest, Kt as ReadinessArtifactRevision, L as EvidenceValue, Li as PersonAvatar, Lr as GovernedActionProviderLineage, Lt as EnvironmentReadinessAssessment, Mi as Actor, N as EvidenceClaim, O as DeliveryEntityService, P as EvidenceItem, Qn as PrReviewSuggestionAgentAuthor, Ri as PersonSourceIdentity, Rr as advanceGovernedActionLifecycle, S as RelationshipRepairRationale, Tr as PrReviewSuggestion, U as RelationshipEndpointKind, Ur as GovernedActionState, Wr as GovernedActionTransitionCause, Xt as ReadinessDerivationVersion, Yr as GovernedActionUnknownOutcome, a as WorkspaceSettingsSections, ai as GovernedActionAttemptDigest, ar as PrReviewSuggestionRevisionPageSize, b as RelationshipRepairProposal, bi as GovernedActionPolicyEvaluationDigest, bt as Release, c as isGovernedWorkspaceSettingsSection, ci as GovernedActionAuthorizationV1, cr as PrReviewSuggestionValidated, di as GovernedActionEnvelopeV1, fn as ReadinessRuleId, hi as GovernedActionIdempotencyKey, ii as governedActionPermissionGrants, ir as PrReviewSuggestionRevisionPage, j as DeliveryRelationship, k as DeliveryEntityStatusGroup, ki as PortfolioInvalidatedEventV1, l as TimelineActorKind, li as GovernedActionEnvelopeDigest, lr as hasSamePrReviewTechnicalClaim, mi as GovernedActionEvidenceSetDigest, mn as ReadinessRuleVersion, ni as governedActionAuthorizationMatchesTransition, nr as PrReviewSuggestionRevision, o as WorkspaceSettingsV1, oi as GovernedActionAttemptV1, or as PrReviewSuggestionRevisionSequence, pi as GovernedActionEvidenceSet, qt as ReadinessAssessment, r as GovernedWorkspaceSettingsSections, ri as governedActionAuthorizationMismatches, rr as PrReviewSuggestionRevisionAuthor, s as changedWorkspaceSettingsSections, si as GovernedActionAuthorizationDigest, t as DEFAULT_WORKSPACE_SETTINGS, ti as governedActionAuthorityMismatches, tr as PrReviewSuggestionRequiresRevalidation, ui as GovernedActionEnvelopeMaterialV1, v as RelationshipRepairApplication, vn as ReadinessVerdict, w as RelationshipRepairReviewDecision, wr as PrReviewSubject, x as RelationshipRepairProposalOrigin, xi as GovernedActionPolicyEvaluationV1, y as RelationshipRepairDisposition, yi as GovernedActionPolicyDigest, yn as ReleaseReadinessAssessment, zi as Role, zr as GovernedActionCommandDigest } from "./workspaceSettings-sv8h_h2P.js";
+import { $ as SourceRevision, At as ShareId, Ct as RelationshipRepairProposalId, Dt as ReviewSuggestionPublicationReservationId, Et as ReviewCommandArtifactId, K as MaximumPluginPayloadBytes, Mt as WorkspaceSettingsMutationId, N as NormalizedPluginEventV1, Nt as UtcTimestamp, Ot as RoleAssignmentId, Q as Revision$1, S as PluginProviderOperationId, St as RelationshipId, Tt as ReleaseId, X as NormalizationSchemaVersion, Y as hasMaximumPluginJsonBytes, Z as ProviderId, _t as PersonId, at as EntityId, bt as ProviderAccountId, c as SemanticVersion, ct as EvidenceClaimId, dt as GovernedActionAttemptId, et as SourceUrl, ft as GovernedActionAuthorizationId, g as PluginActionPayloadDigest, gt as JobId, h as PluginActionDispatchResultV1, ht as GraphNodeId, it as DomainEventId, jt as WorkspaceId, kt as SessionId, lt as EvidenceId, mt as GovernedActionTransitionId, n as NegotiatedPluginDescriptorV1, nt as AgentId, o as PluginDescriptorV1, ot as EnvironmentId, pt as GovernedActionId, rt as AgentThreadId, st as EventCursor, tt as VendorImmutableId, ut as FollowedResourceId, vt as PluginConnectionId, wt as RelationshipRepairReviewId, xt as ReadinessAssessmentId, y as PluginActionReconciliationKey, yt as PrReviewSuggestionRevisionId } from "./descriptor-CCvNzSZL.js";
+import { U as ReviewAgentProfile, q as ReviewSuggestionPublicationOperation } from "./agent-xQhAQXly.js";
+import { a as ReleaseReadinessCandidateMaterial, c as normalizeReadinessRuleMaterial, i as ReadinessRuleMaterial, l as normalizeReleaseReadinessCandidateMaterial, n as summarizeEnvironmentReadiness, r as EnvironmentReadinessCandidateMaterial, s as normalizeEnvironmentReadinessCandidateMaterial, u as AuthorizedShareGrant } from "./readiness-31Mqc-9H.js";
+import { d as PluginUnsupportedCapabilityFailure, o as PluginMalformedResponseFailure } from "./failures-CesHLYbN.js";
 import { AgentContextFingerprint, AgentProviderError, AgentProviderId, AgentRuntimeEvent, AgentSessionRef, MAXIMUM_AGENT_RUNTIME_EVENT_BYTES } from "@knpkv/ai-runtime";
 import * as Effect$1 from "effect/Effect";
 import * as Schema$1 from "effect/Schema";
-import { Cause, Context, Crypto, Effect, FileSystem, Layer, Option, Path, Predicate, Result, Schema, Semaphore, Stream } from "effect";
 import * as DateTime$1 from "effect/DateTime";
+import { Cause, Context, Crypto, Effect, FileSystem, Layer, Option, Path, Predicate, Result, Schema, Semaphore, Stream } from "effect";
 import * as Encoding$1 from "effect/Encoding";
 import * as Result$1 from "effect/Result";
+import * as SchemaGetter from "effect/SchemaGetter";
 import * as Context$1 from "effect/Context";
 import * as Layer$1 from "effect/Layer";
 import * as Option$1 from "effect/Option";
@@ -221,7 +222,7 @@ var schema_default = {
 		{
 			"type": "table",
 			"name": "agent_review_suggestion_publications",
-			"sql": "CREATE TABLE agent_review_suggestion_publications (\n    workspace_id TEXT NOT NULL,\n    job_id TEXT NOT NULL,\n    suggestion_id TEXT NOT NULL CHECK(\n      length(suggestion_id) = 71 AND suggestion_id GLOB 'sha256:*'\n        AND substr(suggestion_id, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    revision_id TEXT NOT NULL CHECK(\n      length(revision_id) = 71 AND revision_id GLOB 'sha256:*'\n        AND substr(revision_id, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    content_digest TEXT NOT NULL CHECK(\n      length(content_digest) = 71 AND content_digest GLOB 'sha256:*'\n        AND substr(content_digest, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    state TEXT NOT NULL CHECK(state IN ('reserved', 'published')),\n    publication_id TEXT,\n    reservation_id TEXT NOT NULL,\n    reservation_acquired_at TEXT NOT NULL,\n    reserved_at TEXT NOT NULL,\n    published_at TEXT,\n    PRIMARY KEY (workspace_id, job_id, suggestion_id, revision_id),\n    FOREIGN KEY (workspace_id, job_id)\n      REFERENCES agent_jobs(workspace_id, job_id)\n      ON DELETE RESTRICT,\n    CHECK(reserved_at <= reservation_acquired_at),\n    CHECK(\n      (state = 'reserved' AND (\n        (publication_id IS NULL AND published_at IS NULL) OR\n        (publication_id IS NOT NULL AND published_at IS NOT NULL AND reserved_at <= published_at)\n      )) OR\n      (state = 'published' AND publication_id IS NOT NULL AND published_at IS NOT NULL\n        AND reserved_at <= published_at)\n    )\n  )"
+			"sql": "CREATE TABLE agent_review_suggestion_publications (\n    workspace_id TEXT NOT NULL,\n    job_id TEXT NOT NULL,\n    suggestion_id TEXT NOT NULL CHECK(\n      length(suggestion_id) = 71 AND suggestion_id GLOB 'sha256:*'\n        AND substr(suggestion_id, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    revision_id TEXT NOT NULL CHECK(\n      length(revision_id) = 71 AND revision_id GLOB 'sha256:*'\n        AND substr(revision_id, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    content_digest TEXT NOT NULL CHECK(\n      length(content_digest) = 71 AND content_digest GLOB 'sha256:*'\n        AND substr(content_digest, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    state TEXT NOT NULL CHECK(state IN ('reserved', 'published')),\n    publication_id TEXT,\n    comment_id TEXT CHECK(comment_id IS NULL OR length(comment_id) BETWEEN 1 AND 512),\n    previous_content_digest TEXT CHECK(previous_content_digest IS NULL OR (length(previous_content_digest) = 71 AND previous_content_digest GLOB 'sha256:*' AND substr(previous_content_digest, 8) NOT GLOB '*[^0-9a-f]*')),\n    previous_publication_id TEXT CHECK(previous_publication_id IS NULL OR length(previous_publication_id) BETWEEN 1 AND 512),\n    previous_published_at TEXT,\n    reservation_id TEXT NOT NULL,\n    reservation_acquired_at TEXT NOT NULL,\n    reserved_at TEXT NOT NULL,\n    published_at TEXT,\n    CHECK((previous_content_digest IS NULL AND previous_publication_id IS NULL AND previous_published_at IS NULL) OR (previous_content_digest IS NOT NULL AND previous_publication_id IS NOT NULL AND previous_published_at IS NOT NULL AND state = 'reserved')),\n    PRIMARY KEY (workspace_id, job_id, suggestion_id, revision_id),\n    FOREIGN KEY (workspace_id, job_id)\n      REFERENCES agent_jobs(workspace_id, job_id)\n      ON DELETE RESTRICT,\n    CHECK(reserved_at <= reservation_acquired_at),\n    CHECK(\n      (state = 'reserved' AND (\n        (publication_id IS NULL AND published_at IS NULL) OR\n        (publication_id IS NOT NULL AND published_at IS NOT NULL AND reserved_at <= published_at)\n      )) OR\n      (state = 'published' AND publication_id IS NOT NULL AND published_at IS NOT NULL\n        AND reserved_at <= published_at)\n    )\n  )"
 		},
 		{
 			"type": "table",
@@ -328,6 +329,11 @@ var schema_default = {
 			"name": "governed_action_denial_policy_evaluations",
 			"sql": "CREATE TABLE governed_action_denial_policy_evaluations (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    transition_id TEXT NOT NULL,\n    policy_evaluation_digest TEXT NOT NULL,\n    PRIMARY KEY (workspace_id, action_id, transition_id),\n    UNIQUE (workspace_id, action_id, policy_evaluation_digest),\n    FOREIGN KEY (workspace_id, action_id, transition_id)\n      REFERENCES governed_action_transitions(workspace_id, action_id, transition_id),\n    FOREIGN KEY (workspace_id, action_id, policy_evaluation_digest)\n      REFERENCES governed_action_policy_evaluations(workspace_id, action_id, evaluation_digest)\n  )"
 		},
+		{
+			"type": "table",
+			"name": "governed_action_entity_targets",
+			"sql": "CREATE TABLE governed_action_entity_targets (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    plugin_connection_id TEXT NOT NULL,\n    provider_id TEXT NOT NULL CHECK(provider_id IN (\n      'codecommit', 'codepipeline', 'jira', 'confluence', 'clockify'\n    )),\n    entity_id TEXT NOT NULL,\n    PRIMARY KEY (workspace_id, action_id),\n    FOREIGN KEY (workspace_id, action_id)\n      REFERENCES governed_actions(workspace_id, action_id)\n      ON DELETE RESTRICT,\n    FOREIGN KEY (workspace_id, entity_id, plugin_connection_id, provider_id)\n      REFERENCES entities(workspace_id, entity_id, plugin_connection_id, provider_id)\n      ON DELETE RESTRICT\n  )"
+		},
 		{
 			"type": "table",
 			"name": "governed_action_execution_leases",
@@ -368,6 +374,16 @@ var schema_default = {
 			"name": "governed_action_recovery_claims",
 			"sql": "CREATE TABLE governed_action_recovery_claims (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    claim_sequence INTEGER NOT NULL CHECK(claim_sequence >= 1),\n    claim_token_digest TEXT NOT NULL CHECK(\n      length(claim_token_digest) = 64 AND claim_token_digest NOT GLOB '*[^0-9a-f]*'\n    ),\n    claimed_at TEXT NOT NULL,\n    lease_expires_at TEXT NOT NULL,\n    PRIMARY KEY (workspace_id, action_id, claim_sequence),\n    UNIQUE (claim_token_digest),\n    UNIQUE (workspace_id, action_id, claim_token_digest),\n    FOREIGN KEY (workspace_id, action_id)\n      REFERENCES governed_action_execution_leases(workspace_id, action_id),\n    CHECK(claimed_at < lease_expires_at)\n  )"
 		},
+		{
+			"type": "table",
+			"name": "governed_action_release_publication_slots",
+			"sql": "CREATE TABLE governed_action_release_publication_slots (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    provider_id TEXT NOT NULL CHECK(provider_id = 'confluence'),\n    release_id TEXT NOT NULL CHECK(length(release_id) = 36),\n    predecessor_action_id TEXT CHECK(\n      predecessor_action_id IS NULL OR length(predecessor_action_id) = 36\n    ),\n    PRIMARY KEY (workspace_id, action_id),\n    FOREIGN KEY (workspace_id, action_id)\n      REFERENCES governed_action_release_publications(workspace_id, action_id)\n      ON DELETE RESTRICT\n  )"
+		},
+		{
+			"type": "table",
+			"name": "governed_action_release_publications",
+			"sql": "CREATE TABLE governed_action_release_publications (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    provider_id TEXT NOT NULL CHECK(provider_id IN (\n      'codecommit', 'codepipeline', 'jira', 'confluence', 'clockify'\n    )),\n    release_id TEXT NOT NULL CHECK(length(release_id) = 36),\n    predecessor_action_id TEXT CHECK(\n      predecessor_action_id IS NULL OR length(predecessor_action_id) = 36\n    ),\n    PRIMARY KEY (workspace_id, action_id),\n    FOREIGN KEY (workspace_id, action_id)\n      REFERENCES governed_actions(workspace_id, action_id)\n      ON DELETE RESTRICT,\n    FOREIGN KEY (workspace_id, release_id)\n      REFERENCES releases(workspace_id, release_id)\n      ON DELETE RESTRICT\n  )"
+		},
 		{
 			"type": "table",
 			"name": "governed_action_target_dimensions",
@@ -381,7 +397,7 @@ var schema_default = {
 		{
 			"type": "table",
 			"name": "governed_actions",
-			"sql": "CREATE TABLE governed_actions (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    plugin_connection_id TEXT NOT NULL,\n    provider_id TEXT NOT NULL CHECK(provider_id IN (\n      'codecommit', 'codepipeline', 'jira', 'confluence', 'clockify'\n    )),\n    target_entity_id TEXT NOT NULL,\n    idempotency_key TEXT NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 512),\n    envelope_digest TEXT NOT NULL CHECK(\n      length(envelope_digest) = 71 AND envelope_digest GLOB 'sha256:*'\n        AND substr(envelope_digest, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    envelope_json TEXT NOT NULL CHECK(length(envelope_json) BETWEEN 2 AND 1048576),\n    state TEXT CHECK(state IN (\n      'proposed', 'authorized', 'denied', 'expired', 'cancelled', 'started',\n      'cancel-requested', 'cancel-requested-unknown', 'succeeded', 'failed', 'unknown'\n    )),\n    lineage_json TEXT CHECK(lineage_json IS NULL OR length(lineage_json) BETWEEN 2 AND 65536),\n    lineage_kind TEXT CHECK(lineage_kind IS NULL OR lineage_kind IN (\n      'none', 'accepted', 'reconcilable', 'manual', 'terminal'\n    )),\n    provider_operation_id TEXT CHECK(\n      provider_operation_id IS NULL OR length(provider_operation_id) BETWEEN 1 AND 512\n    ),\n    reconciliation_key TEXT CHECK(\n      reconciliation_key IS NULL OR length(reconciliation_key) BETWEEN 1 AND 512\n    ),\n    terminal_status TEXT CHECK(\n      terminal_status IS NULL OR terminal_status IN ('succeeded', 'failed', 'cancelled')\n    ),\n    head_transition_id TEXT,\n    head_sequence INTEGER CHECK(head_sequence IS NULL OR head_sequence >= 1),\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    PRIMARY KEY (workspace_id, action_id),\n    UNIQUE (workspace_id, plugin_connection_id, idempotency_key),\n    UNIQUE (workspace_id, action_id, envelope_digest),\n    FOREIGN KEY (workspace_id) REFERENCES workspaces(workspace_id),\n    FOREIGN KEY (workspace_id, plugin_connection_id, provider_id)\n      REFERENCES plugin_connections(workspace_id, plugin_connection_id, provider_id),\n    FOREIGN KEY (workspace_id, target_entity_id, plugin_connection_id, provider_id)\n      REFERENCES entities(workspace_id, entity_id, plugin_connection_id, provider_id),\n    CHECK(created_at <= updated_at),\n    CHECK(\n      (state IS NULL AND lineage_json IS NULL AND lineage_kind IS NULL\n        AND provider_operation_id IS NULL AND reconciliation_key IS NULL AND terminal_status IS NULL\n        AND head_transition_id IS NULL AND head_sequence IS NULL) OR\n      (state IS NOT NULL AND lineage_json IS NOT NULL AND lineage_kind IS NOT NULL\n        AND head_transition_id IS NOT NULL AND head_sequence IS NOT NULL)\n    ),\n    CHECK(\n      lineage_kind IS NULL OR\n      (lineage_kind = 'none' AND provider_operation_id IS NULL\n        AND reconciliation_key IS NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'accepted' AND provider_operation_id IS NOT NULL\n        AND reconciliation_key IS NOT NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'reconcilable' AND reconciliation_key IS NOT NULL\n        AND terminal_status IS NULL) OR\n      (lineage_kind = 'manual' AND reconciliation_key IS NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'terminal' AND provider_operation_id IS NOT NULL\n        AND reconciliation_key IS NULL AND terminal_status IS NOT NULL)\n    ),\n    CHECK(\n      state IS NULL OR\n      (state IN ('proposed', 'authorized', 'denied', 'expired') AND lineage_kind = 'none') OR\n      (state = 'cancelled' AND (\n        lineage_kind = 'none' OR (lineage_kind = 'terminal' AND terminal_status = 'cancelled')\n      )) OR\n      (state IN ('started', 'cancel-requested') AND lineage_kind IN ('none', 'accepted')) OR\n      (state IN ('unknown', 'cancel-requested-unknown')\n        AND lineage_kind IN ('reconcilable', 'manual')) OR\n      (state = 'succeeded' AND lineage_kind = 'terminal' AND terminal_status = 'succeeded') OR\n      (state = 'failed' AND lineage_kind = 'terminal' AND terminal_status = 'failed')\n    )\n  )"
+			"sql": "CREATE TABLE governed_actions (\n    workspace_id TEXT NOT NULL,\n    action_id TEXT NOT NULL,\n    plugin_connection_id TEXT NOT NULL,\n    provider_id TEXT NOT NULL CHECK(provider_id IN (\n      'codecommit', 'codepipeline', 'jira', 'confluence', 'clockify'\n    )),\n    target_entity_id TEXT NOT NULL,\n    idempotency_key TEXT NOT NULL CHECK(length(idempotency_key) BETWEEN 1 AND 512),\n    envelope_digest TEXT NOT NULL CHECK(\n      length(envelope_digest) = 71 AND envelope_digest GLOB 'sha256:*'\n        AND substr(envelope_digest, 8) NOT GLOB '*[^0-9a-f]*'\n    ),\n    envelope_json TEXT NOT NULL CHECK(length(envelope_json) BETWEEN 2 AND 1048576),\n    state TEXT CHECK(state IN (\n      'proposed', 'authorized', 'denied', 'expired', 'cancelled', 'started',\n      'cancel-requested', 'cancel-requested-unknown', 'succeeded', 'failed', 'unknown'\n    )),\n    lineage_json TEXT CHECK(lineage_json IS NULL OR length(lineage_json) BETWEEN 2 AND 65536),\n    lineage_kind TEXT CHECK(lineage_kind IS NULL OR lineage_kind IN (\n      'none', 'accepted', 'reconcilable', 'manual', 'terminal'\n    )),\n    provider_operation_id TEXT CHECK(\n      provider_operation_id IS NULL OR length(provider_operation_id) BETWEEN 1 AND 512\n    ),\n    reconciliation_key TEXT CHECK(\n      reconciliation_key IS NULL OR length(reconciliation_key) BETWEEN 1 AND 512\n    ),\n    terminal_status TEXT CHECK(\n      terminal_status IS NULL OR terminal_status IN ('succeeded', 'failed', 'cancelled')\n    ),\n    head_transition_id TEXT,\n    head_sequence INTEGER CHECK(head_sequence IS NULL OR head_sequence >= 1),\n    created_at TEXT NOT NULL,\n    updated_at TEXT NOT NULL,\n    PRIMARY KEY (workspace_id, action_id),\n    UNIQUE (workspace_id, plugin_connection_id, idempotency_key),\n    UNIQUE (workspace_id, action_id, envelope_digest),\n    FOREIGN KEY (workspace_id) REFERENCES workspaces(workspace_id),\n    FOREIGN KEY (workspace_id, plugin_connection_id, provider_id)\n      REFERENCES plugin_connections(workspace_id, plugin_connection_id, provider_id),\n    CHECK(created_at <= updated_at),\n    CHECK(\n      (state IS NULL AND lineage_json IS NULL AND lineage_kind IS NULL\n        AND provider_operation_id IS NULL AND reconciliation_key IS NULL AND terminal_status IS NULL\n        AND head_transition_id IS NULL AND head_sequence IS NULL) OR\n      (state IS NOT NULL AND lineage_json IS NOT NULL AND lineage_kind IS NOT NULL\n        AND head_transition_id IS NOT NULL AND head_sequence IS NOT NULL)\n    ),\n    CHECK(\n      lineage_kind IS NULL OR\n      (lineage_kind = 'none' AND provider_operation_id IS NULL\n        AND reconciliation_key IS NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'accepted' AND provider_operation_id IS NOT NULL\n        AND reconciliation_key IS NOT NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'reconcilable' AND reconciliation_key IS NOT NULL\n        AND terminal_status IS NULL) OR\n      (lineage_kind = 'manual' AND reconciliation_key IS NULL AND terminal_status IS NULL) OR\n      (lineage_kind = 'terminal' AND provider_operation_id IS NOT NULL\n        AND reconciliation_key IS NULL AND terminal_status IS NOT NULL)\n    ),\n    CHECK(\n      state IS NULL OR\n      (state IN ('proposed', 'authorized', 'denied', 'expired') AND lineage_kind = 'none') OR\n      (state = 'cancelled' AND (\n        lineage_kind = 'none' OR (lineage_kind = 'terminal' AND terminal_status = 'cancelled')\n      )) OR\n      (state IN ('started', 'cancel-requested') AND lineage_kind IN ('none', 'accepted')) OR\n      (state IN ('unknown', 'cancel-requested-unknown')\n        AND lineage_kind IN ('reconcilable', 'manual')) OR\n      (state = 'succeeded' AND lineage_kind = 'terminal' AND terminal_status = 'succeeded') OR\n      (state = 'failed' AND lineage_kind = 'terminal' AND terminal_status = 'failed')\n    )\n  )"
 		},
 		{
 			"type": "table",
@@ -656,7 +672,7 @@ var schema_default = {
 		{
 			"type": "index",
 			"name": "agent_thread_events_review_result_idx",
-			"sql": "CREATE UNIQUE INDEX agent_thread_events_review_result_idx\n    ON agent_thread_events(workspace_id, job_id)\n    WHERE event_kind = 'review-report'"
+			"sql": "CREATE INDEX agent_thread_events_review_result_idx\n    ON agent_thread_events(workspace_id, job_id, event_sequence DESC)\n    WHERE event_kind = 'review-report'"
 		},
 		{
 			"type": "index",
@@ -778,6 +794,16 @@ var schema_default = {
 			"name": "governed_action_recovery_claim_expiry_idx",
 			"sql": "CREATE INDEX governed_action_recovery_claim_expiry_idx\n    ON governed_action_recovery_claims(lease_expires_at, workspace_id, action_id, claim_sequence)"
 		},
+		{
+			"type": "index",
+			"name": "governed_action_release_publication_slots_unique_idx",
+			"sql": "CREATE UNIQUE INDEX governed_action_release_publication_slots_unique_idx\n    ON governed_action_release_publication_slots(\n      workspace_id, provider_id, release_id, COALESCE(predecessor_action_id, '')\n    )"
+		},
+		{
+			"type": "index",
+			"name": "governed_action_release_publications_lookup_idx",
+			"sql": "CREATE INDEX governed_action_release_publications_lookup_idx\n    ON governed_action_release_publications(\n      workspace_id, provider_id, release_id, action_id DESC\n    )"
+		},
 		{
 			"type": "index",
 			"name": "governed_action_target_dimensions_lookup_idx",
@@ -1203,6 +1229,21 @@ var schema_default = {
 			"name": "governed_action_denial_policy_exact_owner",
 			"sql": "CREATE TRIGGER governed_action_denial_policy_exact_owner\n    BEFORE INSERT ON governed_action_denial_policy_evaluations\n    WHEN NOT EXISTS (\n      SELECT 1\n      FROM governed_action_transitions transition_record\n      JOIN governed_action_policy_evaluations evaluation\n        ON evaluation.workspace_id = NEW.workspace_id\n        AND evaluation.action_id = NEW.action_id\n        AND evaluation.evaluation_digest = NEW.policy_evaluation_digest\n      WHERE transition_record.workspace_id = NEW.workspace_id\n        AND transition_record.action_id = NEW.action_id\n        AND transition_record.transition_id = NEW.transition_id\n        AND transition_record.command_tag = 'deny'\n        AND evaluation.decision = 'denied'\n        AND evaluation.evaluated_at <= transition_record.occurred_at\n        AND NOT EXISTS (\n          SELECT 1\n          FROM audit_events audit\n          WHERE audit.workspace_id = transition_record.workspace_id\n            AND audit.action_id = transition_record.action_id\n            AND audit.transition_id = transition_record.transition_id\n        )\n    )\n    BEGIN\n      SELECT RAISE(ABORT, 'denial policy evaluation must belong to its exact deny transition');\n    END"
 		},
+		{
+			"type": "trigger",
+			"name": "governed_action_entity_targets_exact",
+			"sql": "CREATE TRIGGER governed_action_entity_targets_exact\n    BEFORE INSERT ON governed_action_entity_targets\n    WHEN NOT EXISTS (\n      SELECT 1 FROM governed_actions action\n      WHERE action.workspace_id = NEW.workspace_id\n        AND action.action_id = NEW.action_id\n        AND action.plugin_connection_id = NEW.plugin_connection_id\n        AND action.provider_id = NEW.provider_id\n        AND action.target_entity_id = NEW.entity_id\n        AND json_type(action.envelope_json, '$.releasePublication') IS NULL\n    )\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action entity target must match the immutable envelope');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_entity_targets_no_delete",
+			"sql": "CREATE TRIGGER governed_action_entity_targets_no_delete\n    BEFORE DELETE ON governed_action_entity_targets\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action entity targets are immutable');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_entity_targets_no_update",
+			"sql": "CREATE TRIGGER governed_action_entity_targets_no_update\n    BEFORE UPDATE ON governed_action_entity_targets\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action entity targets are immutable');\n    END"
+		},
 		{
 			"type": "trigger",
 			"name": "governed_action_execution_lease_exact_start",
@@ -1338,6 +1379,36 @@ var schema_default = {
 			"name": "governed_action_recovery_claims_no_update",
 			"sql": "CREATE TRIGGER governed_action_recovery_claims_no_update\n      BEFORE UPDATE ON governed_action_recovery_claims\n      BEGIN\n        SELECT RAISE(ABORT, 'governed_action_recovery_claims is immutable');\n      END"
 		},
+		{
+			"type": "trigger",
+			"name": "governed_action_release_publication_slots_exact",
+			"sql": "CREATE TRIGGER governed_action_release_publication_slots_exact\n    BEFORE INSERT ON governed_action_release_publication_slots\n    WHEN NOT EXISTS (\n      SELECT 1 FROM governed_action_release_publications publication\n      WHERE publication.workspace_id = NEW.workspace_id\n        AND publication.action_id = NEW.action_id\n        AND publication.provider_id = NEW.provider_id\n        AND publication.release_id = NEW.release_id\n        AND publication.predecessor_action_id IS NEW.predecessor_action_id\n    )\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action release publication slot must match immutable publication history');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_release_publication_slots_release",
+			"sql": "CREATE TRIGGER governed_action_release_publication_slots_release\n    AFTER UPDATE OF state ON governed_actions\n    WHEN NEW.state IN ('denied', 'expired', 'cancelled', 'failed')\n    BEGIN\n      DELETE FROM governed_action_release_publication_slots\n      WHERE workspace_id = NEW.workspace_id AND action_id = NEW.action_id;\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_release_publications_exact",
+			"sql": "CREATE TRIGGER governed_action_release_publications_exact\n    BEFORE INSERT ON governed_action_release_publications\n    WHEN NOT EXISTS (\n      SELECT 1 FROM governed_actions action\n      WHERE action.workspace_id = NEW.workspace_id\n        AND action.action_id = NEW.action_id\n        AND action.provider_id = NEW.provider_id\n        AND json_extract(action.envelope_json, '$.releasePublication.releaseId') = NEW.release_id\n        AND json_extract(action.envelope_json, '$.releasePublication.predecessorPublicationActionId') IS NEW.predecessor_action_id\n    )\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action release publication must match the immutable envelope');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_release_publications_no_delete",
+			"sql": "CREATE TRIGGER governed_action_release_publications_no_delete\n    BEFORE DELETE ON governed_action_release_publications\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action release publications are immutable');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_release_publications_no_update",
+			"sql": "CREATE TRIGGER governed_action_release_publications_no_update\n    BEFORE UPDATE ON governed_action_release_publications\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action release publications are immutable');\n    END"
+		},
+		{
+			"type": "trigger",
+			"name": "governed_action_target_authority_exact",
+			"sql": "CREATE TRIGGER governed_action_target_authority_exact\n    BEFORE INSERT ON governed_actions\n    WHEN NOT EXISTS (\n      SELECT 1 FROM entities entity\n      WHERE entity.workspace_id = NEW.workspace_id\n        AND entity.entity_id = NEW.target_entity_id\n        AND entity.plugin_connection_id = NEW.plugin_connection_id\n        AND entity.provider_id = NEW.provider_id\n    ) AND NOT (\n      json_valid(NEW.envelope_json)\n      AND json_extract(NEW.envelope_json, '$.releasePublication.releaseId') = NEW.target_entity_id\n      AND (\n        (\n          NEW.provider_id = 'jira'\n          AND json_extract(NEW.envelope_json, '$.proposal.request.actionKind') = 'create-release-version'\n          AND json_extract(NEW.envelope_json, '$.proposal.request.target.entityType') = 'jira.project-version'\n        ) OR (\n          NEW.provider_id = 'confluence'\n          AND (\n            (\n              json_extract(NEW.envelope_json, '$.proposal.request.actionKind') = 'create-page'\n              AND json_extract(NEW.envelope_json, '$.proposal.request.target.entityType') = 'release-page'\n            ) OR (\n              json_extract(NEW.envelope_json, '$.proposal.request.actionKind') = 'update-page'\n              AND json_extract(NEW.envelope_json, '$.proposal.request.target.entityType') = 'page'\n            )\n          )\n        )\n      )\n      AND EXISTS (\n        SELECT 1 FROM releases release\n        WHERE release.workspace_id = NEW.workspace_id\n          AND release.release_id = NEW.target_entity_id\n      )\n    )\n    BEGIN\n      SELECT RAISE(ABORT, 'governed action target must be an exact entity or supported release publication');\n    END"
+		},
 		{
 			"type": "trigger",
 			"name": "governed_action_target_dimensions_exact",
@@ -1868,13 +1939,13 @@ var configureAndVerifyPragmas = Effect.fn("Database.configureAndVerifyPragmas")(
 		yield* sql`PRAGMA foreign_keys = ON`;
 		yield* sql`PRAGMA journal_mode = WAL`;
 		yield* sql`PRAGMA busy_timeout = 5000`;
-	}).pipe(Effect.catchCause(() => new DatabaseInitializationError({ operation: "configure" })));
+	}).pipe(Effect.mapError(() => new DatabaseInitializationError({ operation: "configure" })));
 	yield* Effect.gen(function* () {
 		const foreignKeys = yield* sql`PRAGMA foreign_keys`.pipe(Effect.flatMap((rows) => decodeRows$4(ForeignKeysPragmaRow, rows)));
 		const journalMode = yield* sql`PRAGMA journal_mode`.pipe(Effect.flatMap((rows) => decodeRows$4(JournalModePragmaRow, rows)));
 		const busyTimeout = yield* sql`PRAGMA busy_timeout`.pipe(Effect.flatMap((rows) => decodeRows$4(BusyTimeoutPragmaRow, rows)));
 		if (foreignKeys.length !== 1 || foreignKeys[0]?.foreignKeys !== 1 || journalMode.length !== 1 || journalMode[0]?.journalMode.toLowerCase() !== "wal" || busyTimeout.length !== 1 || busyTimeout[0]?.timeout !== 5e3) return yield* Effect.fail("SQLite pragmas did not retain their required values");
-	}).pipe(Effect.catchCause(() => new DatabaseInitializationError({ operation: "verify-pragmas" })));
+	}).pipe(Effect.mapError(() => new DatabaseInitializationError({ operation: "verify-pragmas" })));
 });
 /** Run the startup SQLite integrity boundary. @internal */
 var verifyDatabaseIntegrity = Effect.fn("Database.verifyIntegrity")(function* (sql) {
@@ -1885,7 +1956,7 @@ var verifyDatabaseIntegrity = Effect.fn("Database.verifyIntegrity")(function* (s
 	}).pipe(Effect.mapError(() => new DatabaseInitializationError({ operation: "verify-integrity" })));
 });
 var checkpointBeforeSchemaChange = Effect.fn("Database.checkpointBeforeSchemaChange")(function* (sql) {
-	yield* sql`PRAGMA wal_checkpoint(TRUNCATE)`.pipe(Effect.catchCause(() => new SchemaWriteBarrierError({ phase: "acquire" })));
+	yield* sql`PRAGMA wal_checkpoint(TRUNCATE)`.pipe(Effect.mapError(() => new SchemaWriteBarrierError({ phase: "acquire" })));
 });
 var verifyCheckpointStayedQuiescent = Effect.fn("Database.verifyCheckpointStayedQuiescent")(function* (databaseFile) {
 	const fileSystem = yield* FileSystem.FileSystem;
@@ -1894,10 +1965,11 @@ var verifyCheckpointStayedQuiescent = Effect.fn("Database.verifyCheckpointStayed
 	const info = yield* fileSystem.stat(walFile).pipe(Effect.mapError(() => new SchemaWriteBarrierError({ phase: "verify" })));
 	if (info.type !== "File" || info.size !== 0n) return yield* new SchemaWriteBarrierError({ phase: "verify" });
 });
-/** Convert schema transaction defects and interruption into a redacted typed failure. */
+/** Convert transaction defects into a redacted failure while preserving cancellation. */
 var sandboxSchemaTransaction = (transaction) => transaction.pipe(Effect.catchCause((cause) => {
+	if (Cause.hasInterrupts(cause)) return Effect.failCause(cause);
 	const typedFailure = Cause.findErrorOption(cause);
-	if (Cause.hasDies(cause) || Cause.hasInterrupts(cause) || Option.isNone(typedFailure)) return Effect.fail(new SchemaWriteBarrierError({ phase: "verify" }));
+	if (Cause.hasDies(cause) || Option.isNone(typedFailure)) return Effect.fail(new SchemaWriteBarrierError({ phase: "verify" }));
 	return Effect.fail(typedFailure.value);
 }));
 /** Hold SQLite's reserved writer transaction across one fresh-schema operation. */
@@ -1909,8 +1981,10 @@ var makeClientLayer = (busyTimeoutMilliseconds, databaseUrl, maxConnections) =>
 		transformResultNames: snakeToCamel,
 		url: databaseUrl
 	};
-	return LibsqlClient.layer(clientConfig).pipe(Layer.catchCause(() => Layer.effectContext(Effect.fail(new DatabaseInitializationError({ operation: "connect" })))));
+	return LibsqlClient.layer(clientConfig).pipe(Layer.catchCause(handleDatabaseConnectionCause));
 };
+/** Redact client construction defects while retaining every original interruption reason. @internal */
+var handleDatabaseConnectionCause = (cause) => Cause.hasInterrupts(cause) ? Layer.effectContext(Effect.failCause(Cause.fromReasons(cause.reasons.filter(Cause.isInterruptReason)))) : Layer.effectContext(Effect.fail(new DatabaseInitializationError({ operation: "connect" })));
 var initializeDatabase = Effect.fn("Database.initializeDatabase")(function* (config) {
 	yield* schemaLock.withPermit(Effect.scoped(Effect.gen(function* () {
 		const context = yield* Layer.build(makeClientLayer(config.busyTimeoutMilliseconds, config.databaseUrl, 1));
@@ -2451,6 +2525,10 @@ var MAXIMUM_AGENT_ATTEMPT_OUTPUT_BYTES = 1048576;
 var MAXIMUM_AGENT_JOB_PROMPT_LENGTH = 5e3;
 /** Maximum thread events returned by one replay page. */
 var MAXIMUM_AGENT_THREAD_EVENT_PAGE_SIZE = 128;
+/** One explicit extension is bounded to the selected profile's original budget. */
+var MAXIMUM_REVIEW_BUDGET_EXTENSION_COUNT = 1;
+/** Hard upper bound for one immutable review, including its single extension. */
+var MAXIMUM_REVIEW_BUDGET_MILLIS = 36e5;
 /** Positive sequence assigned to attempts within one durable job. */
 var AgentAttemptSequence = Schema$1.Int.check(Schema$1.isBetween({
 	minimum: 1,
@@ -2481,7 +2559,18 @@ var ReleaseChatAgentJobTask = Schema$1.TaggedStruct("release-chat", {});
 var PrReviewAgentJobTaskFields = {
 	pluginConnectionId: PluginConnectionId,
 	subject: PrReviewSubject,
-	reviewProfile: ReviewAgentProfile
+	reviewProfile: ReviewAgentProfile,
+	intent: Schema$1.optionalKey(Schema$1.Literals([
+		"full-review",
+		"suggestion-edit",
+		"suggestion-revalidation"
+	])),
+	target: Schema$1.optionalKey(Schema$1.Struct({
+		sourceJobId: JobId,
+		suggestionId: PrReviewSuggestionId,
+		selectedRevisionId: PrReviewSuggestionRevisionId,
+		history: PrReviewSuggestionRevisionPage
+	}))
 };
 /** Read-only review request bound to one immutable pull request head. */
 var EnqueuePrReviewAgentJobTask = Schema$1.TaggedStruct("pr-review", PrReviewAgentJobTaskFields);
@@ -2497,6 +2586,7 @@ var PrReviewThreadRunSummary = Schema$1.Struct({
 	state: Schema$1.Literals([
 		"cancelled",
 		"failed",
+		"interrupted",
 		"succeeded",
 		"unknown"
 	]),
@@ -2579,6 +2669,14 @@ var ClaimedAgentJob = Schema$1.Struct({
 	access: Schema$1.Literals(["read-only", "workspace-write"]),
 	prompt: AgentJobPrompt,
 	context: AgentContextSnapshotRecord,
+	reviewBudgetMillis: Schema$1.optionalKey(Schema$1.Int.check(Schema$1.isBetween({
+		minimum: 1,
+		maximum: 36e5
+	}))),
+	reviewBudgetExtensionCount: Schema$1.optionalKey(Schema$1.Int.check(Schema$1.isBetween({
+		minimum: 0,
+		maximum: 1
+	}))),
 	sessionRef: Schema$1.NullOr(AgentSessionRef),
 	cancellationRequested: Schema$1.Boolean
 });
@@ -2614,8 +2712,53 @@ var CompleteAgentReviewInput = Schema$1.Struct({
 	report: Schema$1.Unknown,
 	completedAt: UtcTimestamp
 });
+/** Startup transition for review attempts whose owning process disappeared. */
+var InterruptRunningReviewsInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	interruptedAt: UtcTimestamp,
+	preservedAttempts: Schema$1.optionalKey(Schema$1.Array(Schema$1.Struct({
+		jobId: JobId,
+		attemptSequence: AgentAttemptSequence
+	})))
+});
+/** Durable identity used to match a live Review Sandbox to one immutable attempt. */
+var RunningPrReviewAttempt = Schema$1.Struct({
+	jobId: JobId,
+	attemptSequence: AgentAttemptSequence,
+	attemptId: Schema$1.String.check(Schema$1.isPattern(/^[a-f0-9]{12}$/u)),
+	sessionRef: Schema$1.NullOr(AgentSessionRef)
+});
+/** Startup handoff for a live server-private Review Sandbox. */
+var AttachRunningPrReviewSessionInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	jobId: JobId,
+	attemptSequence: AgentAttemptSequence,
+	sessionRef: AgentSessionRef
+});
+/** Persist the latest validated report while an immutable review is still running. */
+var RecordAgentReviewProgressInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	jobId: JobId,
+	attemptSequence: AgentAttemptSequence,
+	leaseToken: AgentLeaseToken,
+	report: Schema$1.Unknown,
+	occurredAt: UtcTimestamp
+});
+/** Read the effective budget of one claimed immutable review. */
+var ReadReviewBudgetInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	jobId: JobId,
+	task: AgentJobTask
+});
 /** Digest binding one durable publication reservation to the exact confirmed body. */
 var ReviewSuggestionPublicationDigest = Schema$1.String.check(Schema$1.isPattern(/^sha256:[0-9a-f]{64}$/u, { expected: "a lowercase SHA-256 digest" })).pipe(Schema$1.brand("ReviewSuggestionPublicationDigest"));
+/** Provider comment identity retained for governed lifecycle operations. */
+var ReviewSuggestionPublicationCommentId = Schema$1.String.check(Schema$1.isTrimmed(), Schema$1.isNonEmpty(), Schema$1.isMaxLength(512)).pipe(Schema$1.brand("ReviewSuggestionPublicationCommentId"));
+/** Provider receipt coordinate decoded to the persisted comment identity. */
+var ReviewSuggestionPublicationCommentLocator = Schema$1.TemplateLiteral([Schema$1.Literal("comment:"), ReviewSuggestionPublicationCommentId]).pipe(Schema$1.decodeTo(ReviewSuggestionPublicationCommentId, {
+	decode: SchemaGetter.transform((locator) => locator.slice(8)),
+	encode: SchemaGetter.transform((commentId) => `comment:${commentId}`)
+}));
 /** Atomic pre-provider reservation for one suggestion and exact confirmed body. */
 var ReserveReviewSuggestionPublicationInput = Schema$1.Struct({
 	workspaceId: WorkspaceId,
@@ -2623,21 +2766,25 @@ var ReserveReviewSuggestionPublicationInput = Schema$1.Struct({
 	suggestionId: PrReviewSuggestionId,
 	revisionId: PrReviewSuggestionRevisionId,
 	contentDigest: ReviewSuggestionPublicationDigest,
+	operation: Schema$1.optionalKey(ReviewSuggestionPublicationOperation),
+	commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId),
 	reservationId: ReviewSuggestionPublicationReservationId,
 	reservedAt: UtcTimestamp
 });
 /** Durable result of reserving an exact publication body. */
 var ReviewSuggestionPublicationReservation = Schema$1.Union([
-	Schema$1.TaggedStruct("acquired", {}),
-	Schema$1.TaggedStruct("in-progress", {}),
+	Schema$1.TaggedStruct("acquired", { commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId) }),
+	Schema$1.TaggedStruct("in-progress", { commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId) }),
 	Schema$1.TaggedStruct("recoverable", {
 		publicationId: GovernedActionId,
 		publishedAt: UtcTimestamp,
-		reservationId: ReviewSuggestionPublicationReservationId
+		reservationId: ReviewSuggestionPublicationReservationId,
+		commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId)
 	}),
 	Schema$1.TaggedStruct("published", {
 		publicationId: GovernedActionId,
-		publishedAt: UtcTimestamp
+		publishedAt: UtcTimestamp,
+		commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId)
 	})
 ]);
 /** Release one exact reservation after a confirmed provider no-write outcome. */
@@ -2656,16 +2803,36 @@ var RecordReviewSuggestionPublicationInput = Schema$1.Struct({
 	suggestionId: PrReviewSuggestionId,
 	revisionId: PrReviewSuggestionRevisionId,
 	contentDigest: ReviewSuggestionPublicationDigest,
+	operation: Schema$1.optionalKey(ReviewSuggestionPublicationOperation),
 	reservationId: ReviewSuggestionPublicationReservationId,
 	publicationId: GovernedActionId,
+	commentId: Schema$1.optionalKey(ReviewSuggestionPublicationCommentId),
 	publishedAt: UtcTimestamp,
 	finalize: Schema$1.optionalKey(Schema$1.Boolean)
 });
+/** Lookup for the latest durable publication target of one exact suggestion. */
+var ReadReviewSuggestionPublicationInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	jobId: JobId,
+	suggestionId: PrReviewSuggestionId,
+	revisionId: PrReviewSuggestionRevisionId
+});
+var ReadReviewSuggestionPublication = Schema$1.Struct({
+	state: Schema$1.Literal("published"),
+	publicationId: GovernedActionId,
+	commentId: ReviewSuggestionPublicationCommentId
+});
 /** Workspace-scoped lookup for one durable review result. */
 var AgentReviewResultInput = Schema$1.Struct({
 	workspaceId: WorkspaceId,
 	jobId: JobId
 });
+/** Request one operator-authorized extension of a running review's budget. */
+var ExtendReviewBudgetInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	jobId: JobId,
+	extendedAt: UtcTimestamp
+});
 /** Sanitized durable review result attributable to one terminal attempt. */
 var AgentReviewResultRecord = Schema$1.Struct({
 	workspaceId: WorkspaceId,
@@ -2683,6 +2850,11 @@ var ReadReviewSuggestionRevisionsInput = Schema$1.Struct({
 	limit: PrReviewSuggestionRevisionPageSize
 });
 /** Complete compare-and-append command for one immutable suggestion edit. */
+var ReviewSuggestionRevisionLeaseFence = Schema$1.Struct({
+	jobId: JobId,
+	attemptSequence: AgentAttemptSequence,
+	leaseToken: AgentLeaseToken
+});
 var AppendReviewSuggestionRevisionInput = Schema$1.Struct({
 	workspaceId: WorkspaceId,
 	jobId: JobId,
@@ -2690,16 +2862,27 @@ var AppendReviewSuggestionRevisionInput = Schema$1.Struct({
 	expectedRevisionId: PrReviewSuggestionRevisionId,
 	expectedSequence: PrReviewSuggestionRevisionSequence,
 	edit: PrReviewSuggestionEdit,
-	state: Schema$1.optionalKey(Schema$1.Literal("dismissed")),
+	state: Schema$1.optionalKey(Schema$1.Literals(["dismissed", "stale"])),
+	dismissalReason: Schema$1.optionalKey(PrReviewSuggestion.fields.dismissalReason),
+	validation: Schema$1.optionalKey(Schema$1.Literal("validated")),
 	author: PrReviewSuggestionRevisionAuthor,
-	createdAt: UtcTimestamp
+	createdAt: UtcTimestamp,
+	leaseFence: Schema$1.optionalKey(ReviewSuggestionRevisionLeaseFence)
+});
+/** Atomic targeted completion: append the source revision and terminalize the worker job together. */
+var CompleteTargetedReviewInput = Schema$1.Struct({
+	source: AppendReviewSuggestionRevisionInput,
+	target: CompleteAgentReviewInput
 });
 /** Exact immutable subject used to recover its newest durable review job. */
 var LatestAgentReviewInput = Schema$1.Struct({
 	workspaceId: WorkspaceId,
 	pluginConnectionId: PluginConnectionId,
 	subject: PrReviewSubject,
-	jobId: Schema$1.optionalKey(JobId)
+	excludeJobId: Schema$1.optionalKey(JobId),
+	excludeSubjectRevision: Schema$1.optionalKey(Schema$1.String),
+	jobId: Schema$1.optionalKey(JobId),
+	allowDifferentHead: Schema$1.optionalKey(Schema$1.Boolean)
 });
 /** Cursor-bounded lookup for the durable thread behind a stable pull request. */
 var PrReviewThreadSubject = Schema$1.Struct({
@@ -2741,16 +2924,26 @@ var LatestAgentReviewRecord = Schema$1.Struct({
 	threadId: AgentThreadId,
 	providerId: AgentProviderId,
 	model: AgentModel,
-	state: AgentJobState,
+	state: Schema$1.Union([AgentJobState, Schema$1.Literal("interrupted")]),
 	createdAt: UtcTimestamp,
 	terminalAt: Schema$1.NullOr(UtcTimestamp),
+	startedAt: Schema$1.optionalKey(Schema$1.NullOr(UtcTimestamp)),
+	reviewBudgetMillis: Schema$1.optionalKey(Schema$1.Int.check(Schema$1.isBetween({
+		minimum: 1,
+		maximum: 36e5
+	}))),
+	reviewBudgetExtensionCount: Schema$1.optionalKey(Schema$1.Int.check(Schema$1.isBetween({
+		minimum: 0,
+		maximum: 1
+	}))),
+	taskIntent: Schema$1.optionalKey(Schema$1.NullOr(Schema$1.Literals(["suggestion-edit", "suggestion-revalidation"]))),
 	report: Schema$1.NullOr(PrReviewReport),
 	reviewProfile: ReviewAgentProfile,
 	activity: Schema$1.Struct({
 		events: Schema$1.Array(Schema$1.String.check(Schema$1.isNonEmpty(), Schema$1.isMaxLength(MAXIMUM_AGENT_ATTEMPT_OUTPUT_BYTES))).check(Schema$1.isMaxLength(128)),
 		truncated: Schema$1.Boolean
 	})
-}).check(Schema$1.makeFilter(({ report, state }) => state === "succeeded" === (report !== null), { expected: "only succeeded review jobs to carry a report" }));
+}).check(Schema$1.makeFilter(({ report, state }) => report === null || state === "succeeded" || state === "failed" || state === "cancelled" || state === "interrupted", { expected: "only terminal review jobs to carry a report" }));
 /** One immutable event in a release thread. */
 var AgentThreadEvent = Schema$1.Struct({
 	workspaceId: WorkspaceId,
@@ -2860,10 +3053,15 @@ var makeBlobPublisher = (fs, path, cryptoService) => {
 				}).pipe(Effect.result);
 				if (Result.isFailure(opened)) return openFailure(opened.failure);
 				yield* Effect.addFinalizer(() => fs.remove(temporary, { force: true }).pipe(Effect.ignore));
+				yield* directory.assertIdentity;
 				yield* restore(opened.success.writeAll(bytes)).pipe(Effect.mapError((cause) => blobStoreIoError("write temporary blob", cause)));
 				yield* restore(opened.success.sync).pipe(Effect.mapError((cause) => blobStoreIoError("sync temporary blob", cause)));
+				yield* directory.assertIdentity;
 				const linked = yield* (mode === "replace" ? fs.rename(temporary, destination) : fs.link(temporary, destination)).pipe(Effect.result);
-				if (Result.isSuccess(linked) && commit !== void 0) yield* commit(destination);
+				if (Result.isSuccess(linked)) {
+					yield* directory.assertIdentity;
+					if (commit !== void 0) yield* commit(destination);
+				}
 				return linkResult(linked);
 			})));
 			if (outcome._tag === "LinkResult") return outcome.linked;
@@ -2875,11 +3073,15 @@ var makeBlobPublisher = (fs, path, cryptoService) => {
 //#endregion
 //#region src/server/persistence/object-store/PinnedDirectory.ts
 var descriptorAliases = (path, descriptor) => [path.join("/proc/self/fd", String(descriptor)), path.join("/dev/fd", String(descriptor))];
+var sameIdentity = (left, right) => left.dev === right.dev && Option.isSome(left.ino) && Option.isSome(right.ino) && left.ino.value === right.ino.value;
+var sameDescriptorAlias = (alias, opened) => alias.type === opened.type && Option.isSome(alias.ino) && Option.isSome(opened.ino) && alias.ino.value === opened.ino.value;
 /** Resolve a verified alias for the exact object already held by a descriptor. */
-var resolveDescriptorAlias = Effect.fn("BlobStore.resolveDescriptorAlias")(function* (fs, path, descriptor, expectedPath, operation) {
+var resolveDescriptorAlias = Effect.fn("BlobStore.resolveDescriptorAlias")(function* (fs, path, descriptor, openedInfo, expectedPath, operation) {
 	for (const alias of descriptorAliases(path, descriptor)) {
-		const resolved = yield* fs.realPath(alias).pipe(Effect.result);
-		if (Result.isSuccess(resolved) && resolved.success === expectedPath) return alias;
+		const aliasInfo = yield* fs.stat(alias).pipe(Effect.result);
+		const expectedInfo = yield* fs.stat(expectedPath).pipe(Effect.result);
+		const canonicalExpected = yield* fs.realPath(expectedPath).pipe(Effect.result);
+		if (Result.isSuccess(aliasInfo) && Result.isSuccess(expectedInfo) && Result.isSuccess(canonicalExpected) && canonicalExpected.success === expectedPath && sameDescriptorAlias(aliasInfo.success, openedInfo) && sameIdentity(openedInfo, expectedInfo.success)) return alias;
 	}
 	return yield* new BlobContainmentError({
 		operation,
@@ -2892,11 +3094,21 @@ var resolveDescriptorAlias = Effect.fn("BlobStore.resolveDescriptorAlias")(funct
 */
 var pinDirectory = Effect.fn("BlobStore.pinDirectory")(function* (fs, path, directory) {
 	const handle = yield* fs.open(directory, { flag: "r" }).pipe(Effect.mapError((cause) => blobStoreIoError("pin object directory", cause)));
-	const alias = yield* resolveDescriptorAlias(fs, path, handle.fd, directory, "publish blob");
-	const assertIdentity = fs.realPath(alias).pipe(Effect.result, Effect.flatMap((current) => Result.isSuccess(current) && current.success === directory ? Effect.void : new BlobContainmentError({
+	const openedInfo = yield* handle.stat.pipe(Effect.mapError((cause) => blobStoreIoError("inspect pinned object directory", cause)));
+	const alias = yield* resolveDescriptorAlias(fs, path, handle.fd, openedInfo, directory, "publish blob");
+	const traversedAlias = yield* fs.stat(`${alias}${path.sep}.`).pipe(Effect.result);
+	if (Result.isFailure(traversedAlias) || !sameIdentity(openedInfo, traversedAlias.success)) return yield* new BlobContainmentError({
 		operation: "publish blob",
-		message: "pinned object directory identity changed"
-	})));
+		message: "platform cannot address children through the pinned directory descriptor"
+	});
+	const assertIdentity = Effect.gen(function* () {
+		const current = yield* handle.stat.pipe(Effect.result);
+		const pathInfo = yield* fs.stat(directory).pipe(Effect.result);
+		if (Result.isFailure(current) || Result.isFailure(pathInfo) || !sameIdentity(openedInfo, current.success) || !sameIdentity(openedInfo, pathInfo.success)) return yield* new BlobContainmentError({
+			operation: "publish blob",
+			message: "pinned object directory identity changed"
+		});
+	});
 	return {
 		path: alias,
 		sync: handle.sync.pipe(Effect.mapError((cause) => blobStoreIoError("sync pinned object directory", cause))),
@@ -2926,8 +3138,8 @@ var makeOpenedBlobReader = (fs, path) => {
 			return yield* blobStoreIoError(operation, opened.failure);
 		}
 		const file = opened.success;
-		yield* resolveDescriptorAlias(fs, path, file.fd, reference.filePath, operation);
 		const openedInfo = yield* file.stat.pipe(Effect.mapError((cause) => blobStoreIoError(operation, cause)));
+		yield* resolveDescriptorAlias(fs, path, file.fd, openedInfo, reference.filePath, operation);
 		if (openedInfo.type !== "File" || (openedInfo.mode & 63) !== 0) return yield* new BlobContainmentError({
 			operation,
 			message: "opened blob is not a supported regular file"
@@ -3602,6 +3814,58 @@ var ContentStore = class ContentStore extends Context.Service()("@knpkv/control-
 	static layer = Layer.effect(ContentStore, makeContentStore);
 };
 //#endregion
+//#region src/domain/prReviewReconciliation.ts
+/** Pure cross-head reconciliation for immutable PR-review suggestions. @module */
+/** Validate a report's explicit host transition set against the two immutable heads. */
+var validatePrReviewReportTransitions = (previous, current, declared) => {
+	const expected = reconcilePrReviewReports(previous, current);
+	const expectedById = new Map(expected.map((transition) => [transition.suggestionId, transition]));
+	const declaredById = /* @__PURE__ */ new Map();
+	for (const transition of declared) {
+		if (!expectedById.has(transition.suggestionId)) return {
+			_tag: "failure",
+			failure: {
+				_tag: "unknown-id",
+				suggestionId: transition.suggestionId
+			}
+		};
+		if (declaredById.has(transition.suggestionId)) return {
+			_tag: "failure",
+			failure: {
+				_tag: "duplicate-id",
+				suggestionId: transition.suggestionId
+			}
+		};
+		declaredById.set(transition.suggestionId, transition);
+	}
+	for (const [suggestionId, expectedTransition] of expectedById) {
+		const actual = declaredById.get(suggestionId);
+		if (actual === void 0) return {
+			_tag: "failure",
+			failure: {
+				_tag: "missing-transition",
+				suggestionId
+			}
+		};
+		if (actual.transition !== expectedTransition.transition || actual.previousState !== expectedTransition.previousState || actual.currentState !== expectedTransition.currentState || actual.previousDismissalReason !== expectedTransition.previousDismissalReason || actual.previousHead !== expectedTransition.previousHead || actual.currentHead !== expectedTransition.currentHead) return {
+			_tag: "failure",
+			failure: {
+				_tag: "contradictory-transition",
+				suggestionId,
+				expected: expectedTransition.transition,
+				actual: actual.transition
+			}
+		};
+	}
+	return {
+		_tag: "success",
+		transitions: expected.map(({ suggestionId, transition: kind }) => ({
+			suggestionId,
+			kind
+		}))
+	};
+};
+//#endregion
 //#region src/server/persistence/repositories/internal/reviewSuggestionRevisions.ts
 var REVISION_ID_NAMESPACE = "review-suggestion-revision/v1";
 var PersistedDigest$1 = Schema$1.String.check(Schema$1.isPattern(/^sha256:[0-9a-f]{64}$/u, { expected: "a lowercase SHA-256 digest" }));
@@ -3775,68 +4039,91 @@ var makeReviewSuggestionRevisionOperations = (dependencies) => {
 			nextBeforeSequence: hasMore ? revisions.at(-1)?.sequence ?? null : null
 		}).pipe(Effect$1.mapError(() => operationFailure("agent-job.review-revision-page-invalid")));
 	});
-	return {
-		append: Effect$1.fn("ReviewSuggestionRevisions.append")(function* (input) {
-			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(AppendReviewSuggestionRevisionInput))(input);
-			return yield* database.transaction(Effect$1.gen(function* () {
-				const current = yield* currentRevision(request.workspaceId, request.jobId, request.suggestionId);
-				if ((yield* deriveRevisionId(request.jobId, request.suggestionId, request.expectedSequence)) !== request.expectedRevisionId) return yield* new AgentJobInputError({
-					workspaceId: request.workspaceId,
-					jobId: request.jobId,
-					reason: "revision-identity-mismatch"
-				});
-				if (current.revisionId !== request.expectedRevisionId || current.sequence !== request.expectedSequence) return yield* new RevisionConflictError({
+	const appendInTransaction = Effect$1.fn("ReviewSuggestionRevisions.appendInTransaction")(function* (input) {
+		const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(AppendReviewSuggestionRevisionInput))(input);
+		return yield* Effect$1.gen(function* () {
+			if (request.leaseFence !== void 0) {
+				if ((yield* sql`SELECT 1
+            FROM agent_jobs job
+            JOIN agent_job_leases lease
+              ON lease.workspace_id = job.workspace_id
+              AND lease.job_id = job.job_id
+              AND lease.attempt_sequence = ${request.leaseFence.attemptSequence}
+              AND lease.lease_token = ${request.leaseFence.leaseToken}
+            WHERE job.workspace_id = ${request.workspaceId}
+              AND job.job_id = ${request.leaseFence.jobId}
+              AND job.state = 'running'
+              AND job.cancel_requested_at IS NULL
+              AND lease.lease_expires_at > ${Schema$1.encodeSync(PrReviewSuggestionRevision.fields.createdAt)(request.createdAt)}
+            LIMIT 1`).length !== 1) return yield* new AgentJobInputError({
 					workspaceId: request.workspaceId,
-					recordKind: "agent-review-suggestion-revision",
-					recordKey: revisionRecordKey(request.jobId, request.suggestionId),
-					expectedRevision: request.expectedSequence,
-					actualRevision: current.sequence
+					jobId: request.leaseFence.jobId,
+					reason: "cancellation-requested"
 				});
-				const currentEdit = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewSuggestionEdit))(current.suggestion).pipe(Effect$1.mapError(() => recordFailure(request.workspaceId, request.jobId, request.suggestionId, "agent-review-current-edit-invalid")));
-				if ((yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSuggestionEdit))(currentEdit).pipe(Effect$1.mapError(() => operationFailure("agent-job.encode-current-review-edit")))) === (yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSuggestionEdit))(request.edit).pipe(Effect$1.mapError(() => operationFailure("agent-job.encode-requested-review-edit")))) && request.state === void 0) return current;
-				if ((yield* sql`SELECT 1
+			}
+			const current = yield* currentRevision(request.workspaceId, request.jobId, request.suggestionId);
+			if ((yield* deriveRevisionId(request.jobId, request.suggestionId, request.expectedSequence)) !== request.expectedRevisionId) return yield* new AgentJobInputError({
+				workspaceId: request.workspaceId,
+				jobId: request.jobId,
+				reason: "revision-identity-mismatch"
+			});
+			if (current.revisionId !== request.expectedRevisionId || current.sequence !== request.expectedSequence) return yield* new RevisionConflictError({
+				workspaceId: request.workspaceId,
+				recordKind: "agent-review-suggestion-revision",
+				recordKey: revisionRecordKey(request.jobId, request.suggestionId),
+				expectedRevision: request.expectedSequence,
+				actualRevision: current.sequence
+			});
+			const currentEdit = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewSuggestionEdit))(current.suggestion).pipe(Effect$1.mapError(() => recordFailure(request.workspaceId, request.jobId, request.suggestionId, "agent-review-current-edit-invalid")));
+			if ((yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSuggestionEdit))(currentEdit).pipe(Effect$1.mapError(() => operationFailure("agent-job.encode-current-review-edit")))) === (yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSuggestionEdit))(request.edit).pipe(Effect$1.mapError(() => operationFailure("agent-job.encode-requested-review-edit")))) && request.state === void 0 && request.validation === void 0) return current;
+			if ((yield* sql`SELECT 1
           FROM agent_review_suggestion_publications
           WHERE workspace_id = ${request.workspaceId}
             AND job_id = ${request.jobId}
             AND suggestion_id = ${request.suggestionId}
           LIMIT 1`).length > 0) return yield* new AgentJobInputError({
-					workspaceId: request.workspaceId,
-					jobId: request.jobId,
-					reason: "invalid-transition"
-				});
-				if (current.suggestion.state !== "draft" || request.edit.replacement !== void 0 && request.edit.replacement.reviewedHead !== current.subject.headRevision || DateTime$1.Order(request.createdAt, current.createdAt) < 0) return yield* new AgentJobInputError({
-					workspaceId: request.workspaceId,
-					jobId: request.jobId,
-					reason: "invalid-transition"
-				});
-				const sequence = PrReviewSuggestionRevisionSequence.make(current.sequence + 1);
-				const revisionId = yield* deriveRevisionId(request.jobId, request.suggestionId, sequence);
-				const validation = hasSamePrReviewTechnicalClaim(currentEdit, request.edit) ? current.validation : PrReviewSuggestionRequiresRevalidation.make({
-					reviewedHead: current.subject.headRevision,
-					sourceRevisionId: current.revisionId,
-					reason: request.author._tag === "agent" ? "agent-edit-not-validated" : "technical-claim-edited"
-				});
-				const suggestion = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewSuggestion))({
-					suggestionId: request.suggestionId,
-					state: request.state ?? current.suggestion.state,
-					...request.edit
-				}).pipe(Effect$1.mapError(() => operationFailure("agent-job.review-revision-suggestion-invalid")));
-				const revision = yield* Effect$1.try({
-					try: () => PrReviewSuggestionRevision.make({
-						revisionId,
-						sequence,
-						predecessorRevisionId: current.revisionId,
-						sourceJobId: request.jobId,
-						subject: current.subject,
-						suggestion,
-						validation,
-						author: request.author,
-						createdAt: request.createdAt
-					}),
-					catch: () => operationFailure("agent-job.review-revision-invalid")
-				});
-				const encoded = yield* encodeRevision(request.workspaceId, revision);
-				yield* sql`INSERT INTO agent_review_suggestion_revisions (
+				workspaceId: request.workspaceId,
+				jobId: request.jobId,
+				reason: "invalid-transition"
+			});
+			if (current.suggestion.state !== "draft" && !(request.state === "stale" && current.suggestion.state === "published") || request.state === "dismissed" && request.dismissalReason === void 0 || request.state !== "dismissed" && request.dismissalReason !== void 0 || request.edit.replacement !== void 0 && request.edit.replacement.reviewedHead !== current.subject.headRevision || DateTime$1.Order(request.createdAt, current.createdAt) < 0) return yield* new AgentJobInputError({
+				workspaceId: request.workspaceId,
+				jobId: request.jobId,
+				reason: "invalid-transition"
+			});
+			const sequence = PrReviewSuggestionRevisionSequence.make(current.sequence + 1);
+			const revisionId = yield* deriveRevisionId(request.jobId, request.suggestionId, sequence);
+			const validation = request.validation === "validated" && request.author._tag === "agent" ? PrReviewSuggestionValidated.make({
+				reviewedHead: current.subject.headRevision,
+				validatingJobId: request.author.jobId,
+				sourceRevisionId: current.revisionId
+			}) : hasSamePrReviewTechnicalClaim(currentEdit, request.edit) ? current.validation : PrReviewSuggestionRequiresRevalidation.make({
+				reviewedHead: current.subject.headRevision,
+				sourceRevisionId: current.revisionId,
+				reason: request.author._tag === "agent" ? "agent-edit-not-validated" : "technical-claim-edited"
+			});
+			const suggestion = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewSuggestion))({
+				suggestionId: request.suggestionId,
+				state: request.state ?? current.suggestion.state,
+				...request.dismissalReason === void 0 ? {} : { dismissalReason: request.dismissalReason },
+				...request.edit
+			}).pipe(Effect$1.mapError(() => operationFailure("agent-job.review-revision-suggestion-invalid")));
+			const revision = yield* Effect$1.try({
+				try: () => PrReviewSuggestionRevision.make({
+					revisionId,
+					sequence,
+					predecessorRevisionId: current.revisionId,
+					sourceJobId: request.jobId,
+					subject: current.subject,
+					suggestion,
+					validation,
+					author: request.author,
+					createdAt: request.createdAt
+				}),
+				catch: () => operationFailure("agent-job.review-revision-invalid")
+			});
+			const encoded = yield* encodeRevision(request.workspaceId, revision);
+			yield* sql`INSERT INTO agent_review_suggestion_revisions (
           workspace_id, source_job_id, suggestion_id, revision_sequence,
           revision_id, predecessor_revision_id, revision_json,
           revision_digest, created_at
@@ -3846,27 +4133,32 @@ var makeReviewSuggestionRevisionOperations = (dependencies) => {
           ${encoded.json}, ${encoded.digest},
           ${Schema$1.encodeSync(PrReviewSuggestionRevision.fields.createdAt)(request.createdAt)}
         )`;
-				const job = yield* getJob(request.workspaceId, request.jobId);
-				yield* appendThreadEvent({
-					workspaceId: request.workspaceId,
-					threadId: job.threadId,
-					jobId: request.jobId,
-					attemptSequence: null,
-					eventKind: "review-suggestion-revised",
-					payload: {
-						suggestionId: request.suggestionId,
-						revisionId,
-						sequence,
-						authorKind: request.author._tag,
-						validationState: validation._tag,
-						suggestionState: suggestion.state
-					},
-					payloadSchema: ReviewSuggestionRevisedPayload,
-					occurredAt: request.createdAt
-				});
-				return revision;
-			}));
+			const job = yield* getJob(request.workspaceId, request.jobId);
+			yield* appendThreadEvent({
+				workspaceId: request.workspaceId,
+				threadId: job.threadId,
+				jobId: request.jobId,
+				attemptSequence: null,
+				eventKind: "review-suggestion-revised",
+				payload: {
+					suggestionId: request.suggestionId,
+					revisionId,
+					sequence,
+					authorKind: request.author._tag,
+					validationState: validation._tag,
+					suggestionState: suggestion.state
+				},
+				payloadSchema: ReviewSuggestionRevisedPayload,
+				occurredAt: request.createdAt
+			});
+			return revision;
+		});
+	});
+	return {
+		append: Effect$1.fn("ReviewSuggestionRevisions.append")(function* (input) {
+			return yield* database.transaction(appendInTransaction(input));
 		}),
+		appendInTransaction,
 		read
 	};
 };
@@ -3904,10 +4196,16 @@ var PersistedJobQueuedPayload = Schema$1.Struct({
 	model: EnqueueAgentJobInput.fields.model,
 	providerId: EnqueueAgentJobInput.fields.providerId,
 	subjectRevision: EnqueueAgentJobInput.fields.subjectRevision,
-	task: AgentJobTask
+	task: AgentJobTask,
+	reviewBudgetMillis: Schema$1.optionalKey(Schema$1.Int.check(Schema$1.isBetween({
+		minimum: 1,
+		maximum: 36e5
+	}))),
+	reviewBudgetExtensionCount: Schema$1.optionalKey(Schema$1.Literal(1))
 });
 var CancellationRequestedPayload = Schema$1.Struct({ requestedAt: UtcTimestamp });
 var ProviderFailurePayload = Schema$1.Struct({ error: AgentProviderError });
+var PROCESS_RESTART_INTERRUPTION_MESSAGE = "Review interrupted because the Control Center process restarted.";
 var ReviewSuggestionPublishedPayload = Schema$1.Struct({
 	suggestionId: RecordReviewSuggestionPublicationInput.fields.suggestionId,
 	revisionId: RecordReviewSuggestionPublicationInput.fields.revisionId,
@@ -3918,6 +4216,10 @@ var ReviewSuggestionPublicationRow = Schema$1.Struct({
 	contentDigest: ReviewSuggestionPublicationDigest,
 	state: Schema$1.Literals(["reserved", "published"]),
 	publicationId: Schema$1.NullOr(GovernedActionId),
+	commentId: Schema$1.NullOr(ReviewSuggestionPublicationCommentId),
+	previousContentDigest: Schema$1.NullOr(ReviewSuggestionPublicationDigest),
+	previousPublicationId: Schema$1.NullOr(GovernedActionId),
+	previousPublishedAt: Schema$1.NullOr(UtcTimestamp),
 	reservationAcquiredAt: UtcTimestamp,
 	reservationId: ReviewSuggestionPublicationReservationId,
 	reservedAt: UtcTimestamp,
@@ -4069,6 +4371,11 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			json
 		};
 	});
+	const sanitizeAgentReviewReport = (report) => (() => {
+		const { transitions: _agentOwnedTransitions, ...agentOwnedReport } = report;
+		return PrReviewReport.make(agentOwnedReport);
+	})();
+	const isAgentOwnedSuggestionState = (state) => state === "draft" || state === "resolved";
 	const decodeTaskContext = Effect$1.fn("AgentJobRepository.decodeTaskContext")(function* (workspaceId, jobId, taskContextJson, taskContextDigest) {
 		const bytes = yield* bytesFromText(taskContextJson);
 		if ((yield* digestBytes(bytes)) !== taskContextDigest) return yield* persistedRecordError(workspaceId, "agent-job", jobId, "agent-job-task-context-integrity-invalid");
@@ -4255,6 +4562,49 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			case "job-completed": return yield* decodeRuntimePayload(workspaceId, row, payload);
 		}
 	});
+	const reviewBudgetState = Effect$1.fn("AgentJobRepository.reviewBudgetState")(function* (workspaceId, jobId, task) {
+		if (task._tag !== "pr-review") return {
+			reviewBudgetMillis: void 0,
+			reviewBudgetExtensionCount: 0
+		};
+		const rows = yield* sql`SELECT
+      workspace_id AS workspaceId, thread_id AS threadId,
+      event_sequence AS eventSequence, job_id AS jobId,
+      attempt_sequence AS attemptSequence, event_kind AS eventKind,
+      payload_json AS payloadJson, payload_digest AS payloadDigest,
+      payload_byte_length AS payloadByteLength, occurred_at AS occurredAt
+      FROM agent_thread_events
+      WHERE workspace_id = ${workspaceId}
+        AND job_id = ${jobId}
+        AND event_kind = 'job-queued'
+      ORDER BY event_sequence`.pipe(mapPersistenceOperation("agent-job.review-budget"));
+		let reviewBudgetMillis = task.reviewProfile.budgetMillis;
+		let reviewBudgetExtensionCount = 0;
+		for (const unknownRow of rows) {
+			const row = Schema$1.decodeUnknownResult(ThreadEventRow)(unknownRow);
+			if (Result$1.isFailure(row)) return yield* persistedRecordError(workspaceId, "agent-review-budget", jobId, "agent-review-budget-event-schema-invalid");
+			const bytes = yield* bytesFromText(row.success.payloadJson);
+			const actualDigest = yield* digestBytes(bytes);
+			if (bytes.length !== row.success.payloadByteLength || actualDigest !== row.success.payloadDigest) return yield* persistedRecordError(workspaceId, "agent-review-budget", jobId, "agent-review-budget-event-integrity-invalid");
+			const parsed = Schema$1.decodeUnknownResult(Schema$1.UnknownFromJsonString)(row.success.payloadJson);
+			if (Result$1.isFailure(parsed)) return yield* persistedRecordError(workspaceId, "agent-review-budget", jobId, "agent-review-budget-event-json-invalid");
+			const decoded = Schema$1.decodeUnknownResult(PersistedJobQueuedPayload)(parsed.success);
+			if (Result$1.isFailure(decoded)) {
+				const legacy = Schema$1.decodeUnknownResult(JobQueuedPayload)(parsed.success);
+				if (Result$1.isFailure(legacy)) return yield* persistedRecordError(workspaceId, "agent-review-budget", jobId, "agent-review-budget-event-invalid");
+				continue;
+			}
+			if (decoded.success.task._tag !== "pr-review") continue;
+			if (decoded.success.reviewBudgetMillis !== void 0) {
+				reviewBudgetMillis = decoded.success.reviewBudgetMillis;
+				reviewBudgetExtensionCount = decoded.success.reviewBudgetExtensionCount ?? 1;
+			}
+		}
+		return {
+			reviewBudgetMillis,
+			reviewBudgetExtensionCount
+		};
+	});
 	const reviewContextSnapshot = Effect$1.fn("AgentJobRepository.reviewContextSnapshot")(function* (workspaceId, threadId) {
 		const rendered = renderAgentReviewContextEventsQuery({
 			workspaceId,
@@ -4320,12 +4670,14 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 					});
 					break;
 				}
-				case "job-failed":
+				case "job-failed": {
+					const failure = yield* Schema$1.decodeUnknownEffect(ProviderFailurePayload)(payload);
 					runs.set(row.jobId, {
 						...current,
-						state: "failed"
+						state: failure.error.message === "Review interrupted because the Control Center process restarted." ? "interrupted" : "failed"
 					});
 					break;
+				}
 				case "cancel-requested":
 					if (row.jobState === "cancelled") runs.set(row.jobId, {
 						...current,
@@ -4416,14 +4768,16 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
       FROM agent_thread_events
       WHERE workspace_id = ${request.workspaceId}
         AND job_id = ${request.jobId}
-        AND event_kind = 'review-report'`.pipe(mapPersistenceOperation("agent-job.review-result"));
+        AND event_kind = 'review-report'
+      ORDER BY event_sequence DESC
+      LIMIT 1`.pipe(mapPersistenceOperation("agent-job.review-result"));
 		if (rows.length === 0) return yield* new RecordNotFoundError({
 			workspaceId: request.workspaceId,
 			recordKind: "agent-review-result",
 			recordKey: request.jobId
 		});
 		const row = Schema$1.decodeUnknownResult(ThreadEventRow)(rows[0]);
-		if (rows.length !== 1 || Result$1.isFailure(row) || row.success.attemptSequence === null) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-result-schema-invalid");
+		if (Result$1.isFailure(row) || row.success.attemptSequence === null) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-result-schema-invalid");
 		const report = yield* decodeEventPayload(request.workspaceId, row.success);
 		const decodedReport = Schema$1.decodeUnknownResult(PrReviewReport)(report);
 		if (Result$1.isFailure(decodedReport)) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-result-payload-invalid");
@@ -4508,14 +4862,16 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
       FROM agent_thread_events
       WHERE workspace_id = ${request.workspaceId}
         AND job_id = ${request.jobId}
-        AND event_kind = 'review-report'`.pipe(mapPersistenceOperation("agent-job.original-review-result"));
+        AND event_kind = 'review-report'
+      ORDER BY event_sequence ASC
+      LIMIT 1`.pipe(mapPersistenceOperation("agent-job.original-review-result"));
 		if (rows.length === 0) return yield* new RecordNotFoundError({
 			workspaceId: request.workspaceId,
 			recordKind: "agent-review-result",
 			recordKey: request.jobId
 		});
 		const row = Schema$1.decodeUnknownResult(ThreadEventRow)(rows[0]);
-		if (rows.length !== 1 || Result$1.isFailure(row) || row.success.attemptSequence === null) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-original-result-schema-invalid");
+		if (Result$1.isFailure(row) || row.success.attemptSequence === null) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-original-result-schema-invalid");
 		const report = Schema$1.decodeUnknownResult(PrReviewReport)(yield* decodeEventPayload(request.workspaceId, row.success));
 		if (Result$1.isFailure(report)) return yield* persistedRecordError(request.workspaceId, "agent-review-result", request.jobId, "agent-review-original-result-payload-invalid");
 		return yield* Schema$1.decodeUnknownEffect(Schema$1.toType(AgentReviewResultRecord))({
@@ -4526,6 +4882,34 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			completedAt: row.success.occurredAt
 		});
 	});
+	const findPreviousReviewReport = Effect$1.fn("AgentJobRepository.findPreviousReviewReport")(function* (input) {
+		const subjectJson = yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSubject))(input.subject).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.previous-review-subject" })));
+		const taskContextPrefix = `{"_tag":"pr-review","pluginConnectionId":"${input.pluginConnectionId}","subject":${subjectJson},"reviewProfile":`;
+		const identityPrefix = taskContextPrefix.slice(0, taskContextPrefix.indexOf("\"baseRevision\""));
+		const rendered = renderLatestAgentReviewQuery({
+			workspaceId: input.workspaceId,
+			taskContextPrefix: identityPrefix,
+			excludeTargeted: true,
+			excludeJobId: input.excludeJobId,
+			excludeSubjectRevision: input.subject.headRevision,
+			limit: 32
+		});
+		const rows = yield* sql.unsafe(rendered.sql, [...rendered.params]).pipe(mapPersistenceOperation("agent-job.previous-review"));
+		for (const rawRow of rows) {
+			const row = Schema$1.decodeUnknownResult(LatestReviewRow)(rawRow);
+			if (Result$1.isFailure(row)) return yield* persistedRecordError(input.workspaceId, "agent-review", input.subject.pullRequestId, "agent-review-previous-schema-invalid");
+			if (row.success.state !== "succeeded" && row.success.state !== "failed" && row.success.state !== "cancelled") continue;
+			const result = yield* readReviewResult({
+				workspaceId: input.workspaceId,
+				jobId: row.success.jobId
+			}).pipe(Effect$1.catchTag("RecordNotFoundError", () => Effect$1.succeed(null)));
+			if (result !== null && result.report !== null) return Option$1.some({
+				jobId: row.success.jobId,
+				report: result.report
+			});
+		}
+		return Option$1.none();
+	});
 	const decodeThreadEventRows = Effect$1.fn("AgentJobRepository.decodeThreadEventRows")(function* (workspaceId, threadId, rows) {
 		const decodedRows = yield* Schema$1.decodeUnknownEffect(Schema$1.Array(ReplayThreadEventRow))(rows).pipe(Effect$1.mapError(() => persistedRecordError(workspaceId, "agent-thread", threadId, "agent-thread-event-schema-invalid")));
 		const tasksByJob = /* @__PURE__ */ new Map();
@@ -4619,10 +5003,94 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 		});
 		return current;
 	});
+	const currentPublishedReviewSuggestion = Effect$1.fn("AgentJobRepository.currentPublishedReviewSuggestion")(function* (input) {
+		const current = (yield* reviewSuggestionRevisions.read({
+			workspaceId: input.workspaceId,
+			jobId: input.jobId,
+			suggestionId: input.suggestionId,
+			beforeSequence: null,
+			limit: PrReviewSuggestionRevisionPageSize.make(1)
+		})).current;
+		if (current.revisionId !== input.revisionId || current.suggestion.state !== "published" || current.validation._tag !== "validated") return yield* new AgentJobInputError({
+			workspaceId: input.workspaceId,
+			jobId: input.jobId,
+			reason: "invalid-transition"
+		});
+		return current;
+	});
 	return {
 		appendReviewSuggestionRevision: Effect$1.fn("AgentJobRepository.appendReviewSuggestionRevision")(function* (input) {
 			return yield* reviewSuggestionRevisions.append(input).pipe(mapPersistenceOperation("agent-job.append-review-suggestion-revision"));
 		}),
+		completeTargetedReview: Effect$1.fn("AgentJobRepository.completeTargetedReview")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(CompleteTargetedReviewInput))(input);
+			const report = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewReport))(request.target.report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+				workspaceId: request.target.workspaceId,
+				jobId: request.target.jobId,
+				reason: "invalid-result"
+			})));
+			const encodedReport = yield* encodeReviewReport(report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+				workspaceId: request.target.workspaceId,
+				jobId: request.target.jobId,
+				reason: "invalid-result"
+			})));
+			return yield* database.transaction(Effect$1.gen(function* () {
+				const job = yield* getJob(request.target.workspaceId, request.target.jobId);
+				if (job.state === "cancel-requested") return yield* new AgentJobInputError({
+					workspaceId: request.target.workspaceId,
+					jobId: request.target.jobId,
+					reason: "cancellation-requested"
+				});
+				if (job.state !== "running" || job.task._tag !== "pr-review" || job.subjectRevision !== job.task.subject.headRevision || !PrReviewSubjectEquivalence(job.task.subject, report.subject)) return yield* new AgentJobInputError({
+					workspaceId: request.target.workspaceId,
+					jobId: request.target.jobId,
+					reason: "task-mismatch"
+				});
+				yield* validateLease({
+					workspaceId: request.target.workspaceId,
+					jobId: request.target.jobId,
+					attemptSequence: request.target.attemptSequence,
+					leaseToken: request.target.leaseToken,
+					observedAt: request.target.completedAt
+				});
+				const revision = yield* reviewSuggestionRevisions.appendInTransaction(request.source);
+				const eventSequence = yield* reserveEventSequence(request.target.workspaceId, job.threadId);
+				yield* sql`INSERT INTO agent_thread_events (
+            workspace_id, thread_id, event_sequence, job_id, attempt_sequence,
+            event_kind, payload_json, payload_digest, payload_byte_length, occurred_at
+          ) VALUES (
+            ${request.target.workspaceId}, ${job.threadId}, ${eventSequence},
+            ${request.target.jobId}, ${request.target.attemptSequence}, 'review-report',
+            ${encodedReport.json}, ${encodedReport.digest}, ${encodedReport.bytes.length},
+            ${encodeTimestamp$11(request.target.completedAt)}
+          )`;
+				yield* appendThreadEvent({
+					workspaceId: request.target.workspaceId,
+					threadId: job.threadId,
+					jobId: request.target.jobId,
+					attemptSequence: request.target.attemptSequence,
+					eventKind: "job-completed",
+					payload: {
+						_tag: "completed",
+						outcome: "success",
+						sessionRef: null
+					},
+					payloadSchema: AgentRuntimeEvent,
+					occurredAt: request.target.completedAt
+				});
+				yield* completeAttempt({
+					workspaceId: request.target.workspaceId,
+					jobId: request.target.jobId,
+					attemptSequence: request.target.attemptSequence,
+					completedAt: request.target.completedAt,
+					outcome: "success",
+					state: "succeeded",
+					sessionRef: null,
+					errorJson: null
+				});
+				return revision;
+			})).pipe(mapPersistenceOperation("agent-job.complete-targeted-review"));
+		}),
 		enqueue: Effect$1.fn("AgentJobRepository.enqueue")(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(EnqueueAgentJobInput))(input);
 			if (request.task._tag === "pr-review" && (request.access !== "read-only" || request.subjectRevision !== request.task.subject.headRevision)) return yield* new AgentJobInputError({
@@ -4739,6 +5207,7 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 						fingerprint: claimed.success.contextFingerprint,
 						task
 					});
+					const reviewBudget = yield* reviewBudgetState(request.workspaceId, candidate.jobId, task);
 					const contextPayload = yield* encodePayload(AgentContextSnapshotRecord, context);
 					let sessionRef = null;
 					if (candidate.attemptSequence > 0) {
@@ -4787,6 +5256,8 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 						access: claimed.success.access,
 						prompt: claimed.success.prompt,
 						context,
+						...reviewBudget.reviewBudgetMillis === void 0 ? {} : { reviewBudgetMillis: reviewBudget.reviewBudgetMillis },
+						reviewBudgetExtensionCount: reviewBudget.reviewBudgetExtensionCount,
 						sessionRef,
 						cancellationRequested: claimed.success.state === "cancel-requested"
 					});
@@ -4942,18 +5413,64 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 				return persistedEvent;
 			})).pipe(mapPersistenceOperation("agent-job.append-event"));
 		}),
+		recordReviewProgress: Effect$1.fnUntraced(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(RecordAgentReviewProgressInput))(input);
+			const agentReport = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewReport))(request.report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+				workspaceId: request.workspaceId,
+				jobId: request.jobId,
+				reason: "invalid-result"
+			})));
+			if (!agentReport.suggestions.every(({ state }) => isAgentOwnedSuggestionState(state))) return yield* new AgentJobInputError({
+				workspaceId: request.workspaceId,
+				jobId: request.jobId,
+				reason: "invalid-result"
+			});
+			const report = sanitizeAgentReviewReport(agentReport);
+			return yield* database.transaction(Effect$1.gen(function* () {
+				const job = yield* getJob(request.workspaceId, request.jobId);
+				if (job.state !== "running" && job.state !== "cancel-requested" || job.task._tag !== "pr-review" || !PrReviewSubjectEquivalence(job.task.subject, report.subject)) return yield* new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "task-mismatch"
+				});
+				yield* validateLease({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					attemptSequence: request.attemptSequence,
+					leaseToken: request.leaseToken,
+					observedAt: request.occurredAt
+				});
+				yield* appendThreadEvent({
+					workspaceId: request.workspaceId,
+					threadId: job.threadId,
+					jobId: request.jobId,
+					attemptSequence: request.attemptSequence,
+					eventKind: "review-report",
+					payload: report,
+					payloadSchema: PrReviewReport,
+					occurredAt: request.occurredAt
+				});
+				return yield* Schema$1.decodeUnknownEffect(Schema$1.toType(AgentReviewResultRecord))({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					attemptSequence: request.attemptSequence,
+					report,
+					completedAt: request.occurredAt
+				});
+			})).pipe(mapPersistenceOperation("agent-job.record-review-progress"));
+		}, Effect$1.withTracerEnabled(false)),
 		completeReview: Effect$1.fnUntraced(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(CompleteAgentReviewInput))(input);
-			const report = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewReport))(request.report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+			const agentReport = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(PrReviewReport))(request.report).pipe(Effect$1.mapError(() => new AgentJobInputError({
 				workspaceId: request.workspaceId,
 				jobId: request.jobId,
 				reason: "invalid-result"
 			})));
-			const encodedReport = yield* encodeReviewReport(report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+			if (!agentReport.suggestions.every(({ state }) => isAgentOwnedSuggestionState(state))) return yield* new AgentJobInputError({
 				workspaceId: request.workspaceId,
 				jobId: request.jobId,
 				reason: "invalid-result"
-			})));
+			});
 			return yield* database.transaction(Effect$1.gen(function* () {
 				const job = yield* getJob(request.workspaceId, request.jobId);
 				if (job.state === "cancel-requested") return yield* new AgentJobInputError({
@@ -4961,11 +5478,66 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 					jobId: request.jobId,
 					reason: "cancellation-requested"
 				});
-				if (job.state !== "running" || job.task._tag !== "pr-review" || job.subjectRevision !== job.task.subject.headRevision || !PrReviewSubjectEquivalence(job.task.subject, report.subject)) return yield* new AgentJobInputError({
+				if (job.state !== "running" || job.task._tag !== "pr-review" || job.subjectRevision !== job.task.subject.headRevision || !PrReviewSubjectEquivalence(job.task.subject, agentReport.subject)) return yield* new AgentJobInputError({
 					workspaceId: request.workspaceId,
 					jobId: request.jobId,
 					reason: "task-mismatch"
 				});
+				const previous = yield* findPreviousReviewReport({
+					workspaceId: request.workspaceId,
+					pluginConnectionId: job.task.pluginConnectionId,
+					subject: job.task.subject,
+					excludeJobId: request.jobId
+				});
+				const previousReport = Option$1.isSome(previous) ? previous.value.report : PrReviewReport.make({
+					...agentReport,
+					suggestions: [],
+					transitions: []
+				});
+				if (Option$1.isSome(previous)) for (const suggestion of previous.value.report.suggestions) {
+					if (suggestion.state !== "draft" && suggestion.state !== "published" && suggestion.state !== "reopened") continue;
+					const currentRevision = yield* reviewSuggestionRevisions.read({
+						workspaceId: request.workspaceId,
+						jobId: previous.value.jobId,
+						suggestionId: suggestion.suggestionId,
+						beforeSequence: null,
+						limit: PrReviewSuggestionRevisionPageSize.make(1)
+					});
+					if (currentRevision.current.suggestion.state !== "draft" && currentRevision.current.suggestion.state !== "published") continue;
+					yield* reviewSuggestionRevisions.appendInTransaction({
+						workspaceId: request.workspaceId,
+						jobId: previous.value.jobId,
+						suggestionId: suggestion.suggestionId,
+						expectedRevisionId: currentRevision.current.revisionId,
+						expectedSequence: currentRevision.current.sequence,
+						edit: Schema$1.decodeUnknownSync(PrReviewSuggestionEdit)(currentRevision.current.suggestion),
+						state: "stale",
+						author: PrReviewSuggestionAgentAuthor.make({
+							jobId: request.jobId,
+							providerId: job.providerId,
+							model: job.model,
+							runtimeMetadata: null
+						}),
+						createdAt: request.completedAt
+					});
+				}
+				const expectedTransitions = reconcilePrReviewReports(previousReport, agentReport);
+				if (agentReport.transitions !== void 0) {
+					if (validatePrReviewReportTransitions(previousReport, agentReport, agentReport.transitions)._tag === "failure") return yield* new AgentJobInputError({
+						workspaceId: request.workspaceId,
+						jobId: request.jobId,
+						reason: "invalid-result"
+					});
+				}
+				const report = PrReviewReport.make({
+					...agentReport,
+					transitions: expectedTransitions
+				});
+				const encodedReport = yield* encodeReviewReport(report).pipe(Effect$1.mapError(() => new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "invalid-result"
+				})));
 				yield* validateLease({
 					workspaceId: request.workspaceId,
 					jobId: request.jobId,
@@ -5016,12 +5588,43 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 				});
 			})).pipe(mapPersistenceOperation("agent-job.complete-review"));
 		}, Effect$1.withTracerEnabled(false)),
+		readReviewSuggestionPublication: Effect$1.fn("AgentJobRepository.readReviewSuggestionPublication")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(ReadReviewSuggestionPublicationInput))(input);
+			const rows = yield* sql`SELECT
+        revision_id AS revisionId, content_digest AS contentDigest, state,
+        publication_id AS publicationId, comment_id AS commentId,
+        previous_content_digest AS previousContentDigest,
+        previous_publication_id AS previousPublicationId,
+        previous_published_at AS previousPublishedAt,
+        reservation_id AS reservationId,
+        reservation_acquired_at AS reservationAcquiredAt, reserved_at AS reservedAt,
+        published_at AS publishedAt
+        FROM agent_review_suggestion_publications
+        WHERE workspace_id = ${request.workspaceId}
+          AND job_id = ${request.jobId}
+          AND suggestion_id = ${request.suggestionId}
+          AND revision_id = ${request.revisionId}`;
+			if (rows.length === 0) return null;
+			const decoded = Schema$1.decodeUnknownResult(ReviewSuggestionPublicationRow)(rows[0]);
+			if (Result$1.isFailure(decoded)) return yield* persistedRecordError(request.workspaceId, "agent-review-suggestion-publication", `${request.jobId}:${request.suggestionId}:${request.revisionId}`, "agent-review-suggestion-publication-schema-invalid");
+			const row = decoded.success;
+			if (row.state !== "published" || row.publicationId === null || row.commentId === null) return null;
+			return yield* Schema$1.decodeUnknownEffect(ReadReviewSuggestionPublication)({
+				state: row.state,
+				publicationId: row.publicationId,
+				commentId: row.commentId
+			});
+		}),
 		reserveReviewSuggestionPublication: Effect$1.fn("AgentJobRepository.reserveReviewSuggestionPublication")(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(ReserveReviewSuggestionPublicationInput))(input);
 			return yield* database.transaction(Effect$1.gen(function* () {
+				const operation = request.operation ?? "create";
 				const existingRows = yield* sql`SELECT
             revision_id AS revisionId, content_digest AS contentDigest, state,
-            publication_id AS publicationId, reservation_id AS reservationId,
+            publication_id AS publicationId, comment_id AS commentId,
+            previous_content_digest AS previousContentDigest,
+            previous_publication_id AS previousPublicationId,
+            previous_published_at AS previousPublishedAt, reservation_id AS reservationId,
             reservation_acquired_at AS reservationAcquiredAt, reserved_at AS reservedAt,
             published_at AS publishedAt
             FROM agent_review_suggestion_publications
@@ -5031,23 +5634,54 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
               AND revision_id = ${request.revisionId}`;
 				if (existingRows.length > 0) {
 					const existing = yield* Schema$1.decodeUnknownEffect(ReviewSuggestionPublicationRow)(existingRows[0]);
-					if (existing.contentDigest !== request.contentDigest) return yield* new AgentJobInputError({
-						workspaceId: request.workspaceId,
-						jobId: request.jobId,
-						reason: "invalid-transition"
-					});
+					if (existing.contentDigest !== request.contentDigest) {
+						if (operation !== "create" && existing.state === "published" && existing.publicationId !== null && existing.publishedAt !== null && existing.commentId !== null && existing.commentId === request.commentId) {
+							yield* currentPublishedReviewSuggestion(request);
+							yield* sql`UPDATE agent_review_suggestion_publications
+                  SET content_digest = ${request.contentDigest},
+                      state = 'reserved',
+                      publication_id = NULL,
+                      previous_content_digest = ${existing.contentDigest},
+                      previous_publication_id = ${existing.publicationId},
+                      previous_published_at = ${encodeTimestamp$11(existing.publishedAt)},
+                      reservation_id = ${request.reservationId},
+                      reservation_acquired_at = ${encodeTimestamp$11(request.reservedAt)},
+                      published_at = NULL
+                  WHERE workspace_id = ${request.workspaceId}
+                    AND job_id = ${request.jobId}
+                    AND suggestion_id = ${request.suggestionId}
+                    AND revision_id = ${request.revisionId}
+                    AND state = 'published'
+                    AND content_digest = ${existing.contentDigest}
+                    AND comment_id = ${request.commentId}`;
+							return ReviewSuggestionPublicationReservation.make({
+								_tag: (yield* readChanges(sql)) === 1 ? "acquired" : "in-progress",
+								commentId: existing.commentId
+							});
+						}
+						return yield* new AgentJobInputError({
+							workspaceId: request.workspaceId,
+							jobId: request.jobId,
+							reason: "invalid-transition"
+						});
+					}
 					return existing.state === "published" && existing.publicationId !== null && existing.publishedAt !== null ? ReviewSuggestionPublicationReservation.make({
 						_tag: "published",
 						publicationId: existing.publicationId,
-						publishedAt: existing.publishedAt
+						publishedAt: existing.publishedAt,
+						...existing.commentId === null ? {} : { commentId: existing.commentId }
 					}) : existing.publicationId !== null && existing.publishedAt !== null ? ReviewSuggestionPublicationReservation.make({
 						_tag: "recoverable",
 						publicationId: existing.publicationId,
 						publishedAt: existing.publishedAt,
-						reservationId: existing.reservationId
+						reservationId: existing.reservationId,
+						...existing.commentId === null ? {} : { commentId: existing.commentId }
 					}) : yield* Effect$1.gen(function* () {
 						const recoveryEligibleAt = DateTime$1.add(existing.reservationAcquiredAt, { minutes: REVIEW_SUGGESTION_PUBLICATION_RESERVATION_LIFETIME_MINUTES });
-						if (DateTime$1.Order(request.reservedAt, recoveryEligibleAt) < 0) return ReviewSuggestionPublicationReservation.make({ _tag: "in-progress" });
+						if (DateTime$1.Order(request.reservedAt, recoveryEligibleAt) < 0) return ReviewSuggestionPublicationReservation.make({
+							_tag: "in-progress",
+							...existing.commentId === null ? {} : { commentId: existing.commentId }
+						});
 						yield* sql`UPDATE agent_review_suggestion_publications
                   SET reservation_id = ${request.reservationId},
                       reservation_acquired_at = ${encodeTimestamp$11(request.reservedAt)}
@@ -5060,24 +5694,37 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
                     AND publication_id IS NULL
                     AND reservation_id = ${existing.reservationId}
                     AND reservation_acquired_at = ${encodeTimestamp$11(existing.reservationAcquiredAt)}`;
-						return ReviewSuggestionPublicationReservation.make({ _tag: (yield* readChanges(sql)) === 1 ? "acquired" : "in-progress" });
+						return ReviewSuggestionPublicationReservation.make({
+							_tag: (yield* readChanges(sql)) === 1 ? "acquired" : "in-progress",
+							...existing.commentId === null ? {} : { commentId: existing.commentId }
+						});
 					});
 				}
+				if (operation !== "create") return yield* new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "invalid-transition"
+				});
 				yield* currentPublishableReviewSuggestion(request);
 				const inserted = yield* sql`INSERT INTO agent_review_suggestion_publications (
             workspace_id, job_id, suggestion_id, revision_id, content_digest, state,
-            publication_id, reservation_id, reservation_acquired_at,
-            reserved_at, published_at
+            publication_id, comment_id, reservation_id, reservation_acquired_at,
+            reserved_at, published_at, previous_content_digest,
+            previous_publication_id, previous_published_at
           ) VALUES (
             ${request.workspaceId}, ${request.jobId}, ${request.suggestionId},
             ${request.revisionId}, ${request.contentDigest}, 'reserved', NULL,
+            NULL,
             ${request.reservationId}, ${encodeTimestamp$11(request.reservedAt)},
-            ${encodeTimestamp$11(request.reservedAt)}, NULL
+            ${encodeTimestamp$11(request.reservedAt)}, NULL, NULL, NULL, NULL
           ) ON CONFLICT DO NOTHING
           RETURNING suggestion_id AS suggestionId`;
 				const rows = yield* sql`SELECT
             revision_id AS revisionId, content_digest AS contentDigest, state,
-            publication_id AS publicationId, reservation_id AS reservationId,
+            publication_id AS publicationId, comment_id AS commentId,
+            previous_content_digest AS previousContentDigest,
+            previous_publication_id AS previousPublicationId,
+            previous_published_at AS previousPublishedAt, reservation_id AS reservationId,
             reservation_acquired_at AS reservationAcquiredAt, reserved_at AS reservedAt,
             published_at AS publishedAt
             FROM agent_review_suggestion_publications
@@ -5094,26 +5741,47 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 				return row.success.state === "published" && row.success.publicationId !== null && row.success.publishedAt !== null ? ReviewSuggestionPublicationReservation.make({
 					_tag: "published",
 					publicationId: row.success.publicationId,
-					publishedAt: row.success.publishedAt
+					publishedAt: row.success.publishedAt,
+					...row.success.commentId === null ? {} : { commentId: row.success.commentId }
 				}) : row.success.publicationId !== null && row.success.publishedAt !== null ? ReviewSuggestionPublicationReservation.make({
 					_tag: "recoverable",
 					publicationId: row.success.publicationId,
 					publishedAt: row.success.publishedAt,
-					reservationId: row.success.reservationId
+					reservationId: row.success.reservationId,
+					...row.success.commentId === null ? {} : { commentId: row.success.commentId }
 				}) : ReviewSuggestionPublicationReservation.make({ _tag: inserted.length === 1 ? "acquired" : "in-progress" });
 			})).pipe(mapPersistenceOperation("agent-job.reserve-review-suggestion-publication"));
 		}),
 		releaseReviewSuggestionPublication: Effect$1.fn("AgentJobRepository.releaseReviewSuggestionPublication")(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(ReleaseReviewSuggestionPublicationInput))(input);
-			yield* sql`DELETE FROM agent_review_suggestion_publications
-        WHERE workspace_id = ${request.workspaceId}
-          AND job_id = ${request.jobId}
-          AND suggestion_id = ${request.suggestionId}
-          AND revision_id = ${request.revisionId}
-          AND content_digest = ${request.contentDigest}
-          AND state = 'reserved'
-          AND publication_id IS NULL
-          AND reservation_id = ${request.reservationId}`.pipe(mapPersistenceOperation("agent-job.release-review-suggestion-publication"));
+			yield* database.transaction(Effect$1.gen(function* () {
+				yield* sql`UPDATE agent_review_suggestion_publications
+            SET content_digest = previous_content_digest,
+                state = 'published',
+                publication_id = previous_publication_id,
+                previous_content_digest = NULL,
+                previous_publication_id = NULL,
+                previous_published_at = NULL,
+                published_at = previous_published_at
+            WHERE workspace_id = ${request.workspaceId}
+              AND job_id = ${request.jobId}
+              AND suggestion_id = ${request.suggestionId}
+              AND revision_id = ${request.revisionId}
+              AND content_digest = ${request.contentDigest}
+              AND state = 'reserved'
+              AND publication_id IS NULL
+              AND previous_content_digest IS NOT NULL
+              AND reservation_id = ${request.reservationId}`;
+				if ((yield* readChanges(sql)) === 0) yield* sql`DELETE FROM agent_review_suggestion_publications
+              WHERE workspace_id = ${request.workspaceId}
+                AND job_id = ${request.jobId}
+                AND suggestion_id = ${request.suggestionId}
+                AND revision_id = ${request.revisionId}
+                AND content_digest = ${request.contentDigest}
+                AND state = 'reserved'
+                AND publication_id IS NULL
+                AND reservation_id = ${request.reservationId}`;
+			})).pipe(mapPersistenceOperation("agent-job.release-review-suggestion-publication"));
 		}),
 		recordReviewSuggestionPublication: Effect$1.fn("AgentJobRepository.recordReviewSuggestionPublication")(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(RecordReviewSuggestionPublicationInput))(input);
@@ -5121,7 +5789,10 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 				const job = yield* getJob(request.workspaceId, request.jobId);
 				const publicationRows = yield* sql`SELECT
             revision_id AS revisionId, content_digest AS contentDigest, state,
-            publication_id AS publicationId, reservation_id AS reservationId,
+            publication_id AS publicationId, comment_id AS commentId,
+            previous_content_digest AS previousContentDigest,
+            previous_publication_id AS previousPublicationId,
+            previous_published_at AS previousPublishedAt, reservation_id AS reservationId,
             reservation_acquired_at AS reservationAcquiredAt, reserved_at AS reservedAt,
             published_at AS publishedAt
             FROM agent_review_suggestion_publications
@@ -5136,7 +5807,7 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 					reason: "invalid-transition"
 				});
 				if (publication.success.state === "published") {
-					if (publication.success.contentDigest === request.contentDigest && publication.success.publicationId === request.publicationId) return;
+					if (publication.success.contentDigest === request.contentDigest && publication.success.publicationId === request.publicationId && (request.commentId === void 0 || publication.success.commentId === request.commentId)) return;
 					return yield* new AgentJobInputError({
 						workspaceId: request.workspaceId,
 						jobId: request.jobId,
@@ -5148,9 +5819,18 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 					jobId: request.jobId,
 					reason: "invalid-transition"
 				});
+				if (request.commentId !== void 0 && publication.success.commentId !== null && publication.success.commentId !== request.commentId) return yield* new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "invalid-transition"
+				});
 				if (request.finalize === false) {
 					yield* sql`UPDATE agent_review_suggestion_publications
               SET publication_id = ${request.publicationId},
+                  comment_id = COALESCE(${request.commentId ?? null}, comment_id),
+                  previous_content_digest = NULL,
+                  previous_publication_id = NULL,
+                  previous_published_at = NULL,
                   published_at = ${encodeTimestamp$11(request.publishedAt)}
               WHERE workspace_id = ${request.workspaceId}
                 AND job_id = ${request.jobId}
@@ -5178,10 +5858,15 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 					workspaceId: request.workspaceId,
 					jobId: request.jobId
 				});
-				yield* currentPublishableReviewSuggestion(request);
+				if ((request.operation ?? "create") === "create") yield* currentPublishableReviewSuggestion(request);
+				else yield* currentPublishedReviewSuggestion(request);
 				yield* sql`UPDATE agent_review_suggestion_publications
             SET state = 'published',
                 publication_id = ${request.publicationId},
+                comment_id = COALESCE(${request.commentId ?? null}, comment_id),
+                previous_content_digest = NULL,
+                previous_publication_id = NULL,
+                previous_published_at = NULL,
                 published_at = ${encodeTimestamp$11(request.publishedAt)}
             WHERE workspace_id = ${request.workspaceId}
               AND job_id = ${request.jobId}
@@ -5260,6 +5945,181 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 				return persistedEvent;
 			})).pipe(mapPersistenceOperation("agent-job.fail-attempt"));
 		}),
+		listRunningPrReviewAttempts: Effect$1.fn("AgentJobRepository.listRunningPrReviewAttempts")(function* (workspaceId) {
+			const rows = yield* sql`SELECT
+        job.job_id AS jobId, attempt.attempt_sequence AS attemptSequence,
+        job.provider_id AS providerId, attempt.session_ref AS sessionRef
+        FROM agent_jobs job
+        JOIN agent_job_attempts attempt
+          ON attempt.workspace_id = job.workspace_id
+          AND attempt.job_id = job.job_id
+        WHERE job.workspace_id = ${workspaceId}
+          AND job.state IN ('running', 'cancel-requested')
+          AND attempt.completed_at IS NULL
+        ORDER BY job.job_id, attempt.attempt_sequence`;
+			const attempts = [];
+			for (const row of rows) {
+				const jobId = yield* Schema$1.decodeUnknownEffect(JobId)(row.jobId).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.running-review-job-id" })));
+				const attemptSequence = yield* Schema$1.decodeUnknownEffect(AgentAttemptSequence)(row.attemptSequence).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.running-review-attempt-sequence" })));
+				const providerId = yield* Schema$1.decodeUnknownEffect(Schema$1.String)(row.providerId).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.running-review-provider-id" })));
+				if ((yield* getJob(workspaceId, jobId)).task._tag !== "pr-review") continue;
+				const digest = yield* cryptoService.digest("SHA-256", yield* bytesFromText(`${providerId}:${jobId}:${String(attemptSequence)}`)).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.running-review-attempt-id" })));
+				const attempt = Schema$1.decodeUnknownResult(RunningPrReviewAttempt)({
+					jobId,
+					attemptSequence,
+					attemptId: Encoding$1.encodeHex(digest).slice(0, 12),
+					sessionRef: row.sessionRef
+				});
+				if (Result$1.isFailure(attempt)) return yield* new PersistenceOperationError({ operation: "agent-job.running-review-attempt-invalid" });
+				attempts.push(attempt.success);
+			}
+			return attempts;
+		}),
+		attachRunningPrReviewSession: Effect$1.fn("AgentJobRepository.attachRunningPrReviewSession")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(AttachRunningPrReviewSessionInput))(input);
+			yield* sql`UPDATE agent_job_attempts
+        SET session_ref = ${request.sessionRef}
+        WHERE workspace_id = ${request.workspaceId}
+          AND job_id = ${request.jobId}
+          AND attempt_sequence = ${request.attemptSequence}
+          AND completed_at IS NULL
+          AND EXISTS (
+            SELECT 1 FROM agent_jobs job
+            WHERE job.workspace_id = agent_job_attempts.workspace_id
+              AND job.job_id = agent_job_attempts.job_id
+              AND job.state IN ('running', 'cancel-requested')
+          )`;
+		}),
+		interruptRunningReviews: Effect$1.fn("AgentJobRepository.interruptRunningReviews")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(InterruptRunningReviewsInput))(input);
+			return yield* database.transaction(Effect$1.gen(function* () {
+				const rows = yield* sql`SELECT job_id AS jobId
+            FROM agent_jobs
+            WHERE workspace_id = ${request.workspaceId}
+              AND state IN ('running', 'cancel-requested')`;
+				let interrupted = 0;
+				for (const row of rows) {
+					const jobId = yield* Schema$1.decodeUnknownEffect(JobId)(row.jobId).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.interrupt-job-id" })));
+					const job = yield* getJob(request.workspaceId, jobId);
+					if (job.task._tag !== "pr-review") continue;
+					const attemptRows = yield* sql`SELECT attempt_sequence AS attemptSequence
+              FROM agent_job_attempts
+              WHERE workspace_id = ${request.workspaceId}
+                AND job_id = ${jobId}
+                AND completed_at IS NULL
+              ORDER BY attempt_sequence DESC
+              LIMIT 1`;
+					const attempt = Schema$1.decodeUnknownResult(Schema$1.Struct({ attemptSequence: AgentAttemptSequence }))(attemptRows[0]);
+					if (Result$1.isFailure(attempt)) continue;
+					if (request.preservedAttempts?.some((preserved) => preserved.jobId === jobId && preserved.attemptSequence === attempt.success.attemptSequence)) continue;
+					const existing = yield* readReviewResult({
+						workspaceId: request.workspaceId,
+						jobId
+					}).pipe(Effect$1.result);
+					if (Result$1.isFailure(existing) && existing.failure._tag !== "RecordNotFoundError") return yield* existing.failure;
+					const report = Result$1.isSuccess(existing) ? {
+						...existing.success.report,
+						completion: {
+							status: "unable-to-conclude",
+							reason: PROCESS_RESTART_INTERRUPTION_MESSAGE
+						}
+					} : {
+						schemaVersion: 3,
+						subject: job.task.subject,
+						completion: {
+							status: "unable-to-conclude",
+							reason: PROCESS_RESTART_INTERRUPTION_MESSAGE
+						},
+						suggestions: [],
+						notes: []
+					};
+					yield* appendThreadEvent({
+						workspaceId: request.workspaceId,
+						threadId: job.threadId,
+						jobId,
+						attemptSequence: attempt.success.attemptSequence,
+						eventKind: "review-report",
+						payload: report,
+						payloadSchema: PrReviewReport,
+						occurredAt: request.interruptedAt
+					});
+					const error = new AgentProviderError({
+						providerId: job.providerId,
+						phase: "execution",
+						message: PROCESS_RESTART_INTERRUPTION_MESSAGE,
+						retryable: false
+					});
+					const encodedFailure = yield* encodePayload(ProviderFailurePayload, { error });
+					yield* appendThreadEvent({
+						workspaceId: request.workspaceId,
+						threadId: job.threadId,
+						jobId,
+						attemptSequence: attempt.success.attemptSequence,
+						eventKind: "job-failed",
+						payload: { error },
+						payloadSchema: ProviderFailurePayload,
+						occurredAt: request.interruptedAt
+					});
+					yield* completeAttempt({
+						workspaceId: request.workspaceId,
+						jobId,
+						attemptSequence: attempt.success.attemptSequence,
+						completedAt: request.interruptedAt,
+						outcome: "failed",
+						state: "failed",
+						sessionRef: null,
+						errorJson: encodedFailure.json
+					});
+					interrupted += 1;
+				}
+				return { interrupted };
+			})).pipe(mapPersistenceOperation("agent-job.interrupt-running-reviews"));
+		}),
+		reviewBudget: Effect$1.fn("AgentJobRepository.reviewBudget")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(ReadReviewBudgetInput))(input);
+			return yield* reviewBudgetState(request.workspaceId, request.jobId, request.task);
+		}),
+		extendReviewBudget: Effect$1.fn("AgentJobRepository.extendReviewBudget")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(ExtendReviewBudgetInput))(input);
+			return yield* database.transaction(Effect$1.gen(function* () {
+				const job = yield* getJob(request.workspaceId, request.jobId);
+				if (job.task._tag !== "pr-review" || job.state !== "running") return yield* new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "invalid-transition"
+				});
+				const current = yield* reviewBudgetState(request.workspaceId, request.jobId, job.task);
+				if (current.reviewBudgetExtensionCount >= 1 || current.reviewBudgetMillis === void 0 || current.reviewBudgetMillis + job.task.reviewProfile.budgetMillis > 36e5) return yield* new AgentJobInputError({
+					workspaceId: request.workspaceId,
+					jobId: request.jobId,
+					reason: "invalid-transition"
+				});
+				const reviewBudgetMillis = current.reviewBudgetMillis + job.task.reviewProfile.budgetMillis;
+				yield* appendThreadEvent({
+					workspaceId: request.workspaceId,
+					threadId: job.threadId,
+					jobId: request.jobId,
+					attemptSequence: null,
+					eventKind: "job-queued",
+					payload: {
+						access: job.access,
+						contextFingerprint: job.contextFingerprint,
+						model: job.model,
+						providerId: job.providerId,
+						subjectRevision: job.subjectRevision,
+						task: job.task,
+						reviewBudgetMillis,
+						reviewBudgetExtensionCount: 1
+					},
+					payloadSchema: PersistedJobQueuedPayload,
+					occurredAt: request.extendedAt
+				});
+				return {
+					reviewBudgetMillis,
+					reviewBudgetExtensionCount: 1
+				};
+			})).pipe(mapPersistenceOperation("agent-job.extend-review-budget"));
+		}),
 		requestCancellation: Effect$1.fn("AgentJobRepository.requestCancellation")(function* (input) {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(RequestAgentCancellationInput))(input);
 			yield* database.transaction(Effect$1.gen(function* () {
@@ -5299,10 +6159,13 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(LatestAgentReviewInput))(input);
 			const subjectJson = yield* Schema$1.encodeUnknownEffect(Schema$1.fromJsonString(PrReviewSubject))(request.subject).pipe(Effect$1.mapError(() => new PersistenceOperationError({ operation: "agent-job.latest-review-subject" })));
 			const taskContextPrefix = `{"_tag":"pr-review","pluginConnectionId":"${request.pluginConnectionId}","subject":${subjectJson},"reviewProfile":`;
+			const identityPrefix = taskContextPrefix.slice(0, taskContextPrefix.indexOf("\"baseRevision\""));
 			const rendered = renderLatestAgentReviewQuery({
 				workspaceId: request.workspaceId,
-				subjectRevision: request.subject.headRevision,
-				taskContextPrefix,
+				...request.excludeJobId === void 0 ? {} : { excludeJobId: request.excludeJobId },
+				...request.allowDifferentHead === true ? {} : { subjectRevision: request.subject.headRevision },
+				taskContextPrefix: request.allowDifferentHead === true ? identityPrefix : taskContextPrefix,
+				excludeTargeted: true,
 				...request.jobId === void 0 ? {} : { jobId: request.jobId }
 			});
 			const rows = yield* sql.unsafe(rendered.sql, [...rendered.params]).pipe(mapPersistenceOperation("agent-job.latest-review"));
@@ -5310,11 +6173,28 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			const row = Schema$1.decodeUnknownResult(LatestReviewRow)(rows[0]);
 			if (rows.length !== 1 || Result$1.isFailure(row)) return yield* persistedRecordError(request.workspaceId, "agent-review", request.subject.pullRequestId, "agent-review-latest-schema-invalid");
 			const task = yield* decodeTaskContext(request.workspaceId, row.success.jobId, row.success.taskContextJson, row.success.taskContextDigest);
-			if (task._tag !== "pr-review" || task.pluginConnectionId !== request.pluginConnectionId || !PrReviewSubjectEquivalence(task.subject, request.subject)) return yield* persistedRecordError(request.workspaceId, "agent-review", request.subject.pullRequestId, "agent-review-subject-mismatch");
-			const report = row.success.state === "succeeded" ? (yield* readReviewResult({
+			let interrupted = false;
+			if (row.success.state === "failed") {
+				const interruptionRows = yield* sql`SELECT COUNT(*) AS interrupted
+          FROM agent_thread_events
+          WHERE workspace_id = ${request.workspaceId}
+            AND job_id = ${row.success.jobId}
+            AND event_kind = 'job-failed'
+            AND payload_json LIKE ${`%${PROCESS_RESTART_INTERRUPTION_MESSAGE}%`}`.pipe(mapPersistenceOperation("agent-job.latest-review-interruption"));
+				interrupted = Number(interruptionRows[0]?.interrupted ?? 0) > 0;
+			}
+			if (task._tag !== "pr-review" || task.pluginConnectionId !== request.pluginConnectionId || (request.allowDifferentHead === true ? task.subject.providerId !== request.subject.providerId || task.subject.repository !== request.subject.repository || task.subject.pullRequestId !== request.subject.pullRequestId : !PrReviewSubjectEquivalence(task.subject, request.subject))) return yield* persistedRecordError(request.workspaceId, "agent-review", request.subject.pullRequestId, "agent-review-subject-mismatch");
+			const reviewBudget = yield* reviewBudgetState(request.workspaceId, row.success.jobId, task);
+			const startedRows = yield* sql`SELECT MAX(started_at) AS startedAt
+        FROM agent_job_attempts
+        WHERE workspace_id = ${request.workspaceId} AND job_id = ${row.success.jobId}`.pipe(mapPersistenceOperation("agent-job.latest-review-started-at"));
+			const startedAt = Schema$1.decodeUnknownResult(Schema$1.Struct({ startedAt: Schema$1.NullOr(UtcTimestamp) }))(startedRows[0]);
+			if (startedRows.length !== 1 || Result$1.isFailure(startedAt)) return yield* persistedRecordError(request.workspaceId, "agent-review", request.subject.pullRequestId, "agent-review-started-at-schema-invalid");
+			const reviewResult = row.success.state === "succeeded" || row.success.state === "failed" || row.success.state === "cancelled" ? yield* readReviewResult({
 				workspaceId: request.workspaceId,
 				jobId: row.success.jobId
-			})).report : null;
+			}).pipe(Effect$1.catchTag("RecordNotFoundError", () => Effect$1.succeed(null))) : null;
+			const report = reviewResult === null ? null : reviewResult.report;
 			const activityRows = yield* sql`SELECT
         workspace_id AS workspaceId, thread_id AS threadId,
         event_sequence AS eventSequence, job_id AS jobId,
@@ -5338,6 +6218,11 @@ var makeAgentJobRepository = Effect$1.gen(function* () {
 			}
 			const record = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(LatestAgentReviewRecord))({
 				...row.success,
+				state: interrupted ? "interrupted" : row.success.state,
+				startedAt: startedAt.success.startedAt,
+				...reviewBudget.reviewBudgetMillis === void 0 ? {} : { reviewBudgetMillis: reviewBudget.reviewBudgetMillis },
+				reviewBudgetExtensionCount: reviewBudget.reviewBudgetExtensionCount,
+				taskIntent: task.intent ?? null,
 				report,
 				reviewProfile: task.reviewProfile,
 				activity: {
@@ -8443,6 +9328,12 @@ var GovernedActionTargetReadInput = Schema$1.Struct({
 		maximum: 100
 	}))
 });
+/** Bounded batched lookup for the latest successful publications of exact releases. */
+var GovernedActionReleasePublicationReadInput = Schema$1.Struct({
+	workspaceId: WorkspaceId,
+	providerId: Schema$1.Literal("confluence"),
+	releaseIds: Schema$1.Array(ReleaseId).check(Schema$1.isMinLength(1), Schema$1.isMaxLength(200), Schema$1.isUnique())
+});
 Schema$1.Struct({
 	envelope: GovernedActionEnvelopeV1,
 	head: GovernedActionLifecycleHeadV1,
@@ -9252,6 +10143,10 @@ var GovernedActionTargetCandidateIdentity = Schema$1.Struct({
 	actionId: GovernedActionId,
 	sortAt: UtcTimestamp
 });
+var GovernedActionReleasePublicationCandidate = Schema$1.Struct({
+	actionId: GovernedActionId,
+	releaseId: ReleaseId
+});
 var malformed = (request, recordKind, diagnosticCode, recordKey = request.actionId) => governedActionRecordError({
 	workspaceId: request.workspaceId,
 	recordKind,
@@ -9561,6 +10456,61 @@ var makeGovernedActionRead = Effect$1.gen(function* () {
 				cursor = identities[identities.length - 1] ?? null;
 			}
 			return selectLatestTerminalByTarget(request, candidates);
+		}),
+		readLatestTerminalReleasePublications: Effect$1.fn("GovernedActionReader.readLatestTerminalReleasePublications")(function* (request) {
+			const releaseIdsJson = JSON.stringify(request.releaseIds);
+			const rows = yield* sql`WITH requested_release_ids AS (
+        SELECT value AS releaseId
+        FROM json_each(${releaseIdsJson})
+      ),
+      ranked_publications AS (
+        SELECT
+          publication.action_id AS actionId,
+          publication.release_id AS releaseId,
+          ROW_NUMBER() OVER (
+            PARTITION BY publication.release_id
+            ORDER BY action.updated_at DESC, action.action_id DESC
+          ) AS candidateRank
+        FROM governed_action_release_publications AS publication
+        JOIN governed_actions AS action
+          ON action.workspace_id = publication.workspace_id
+          AND action.action_id = publication.action_id
+        JOIN governed_action_target_dimensions AS dimensions
+          ON dimensions.workspace_id = action.workspace_id
+          AND dimensions.action_id = action.action_id
+        JOIN requested_release_ids AS requested
+          ON requested.releaseId = publication.release_id
+        WHERE publication.workspace_id = ${request.workspaceId}
+          AND publication.provider_id = ${request.providerId}
+          AND action.state IN (
+            'proposed', 'authorized', 'started', 'cancel-requested',
+            'unknown', 'cancel-requested-unknown', 'succeeded'
+          )
+          AND dimensions.action_kind IN ('create-page', 'update-page')
+      )
+      SELECT actionId, releaseId
+      FROM ranked_publications
+      WHERE candidateRank = 1
+      ORDER BY releaseId`;
+			const candidates = yield* Schema$1.decodeUnknownEffect(Schema$1.Array(GovernedActionReleasePublicationCandidate).check(Schema$1.isMaxLength(request.releaseIds.length)))(rows).pipe(Effect$1.mapError(() => new PersistedRecordError({
+				workspaceId: request.workspaceId,
+				recordKind: "governed-action",
+				recordKey: request.workspaceId,
+				diagnosticCode: "governed-action-schema-invalid"
+			})));
+			return yield* Effect$1.forEach(candidates, ({ actionId, releaseId }) => read({
+				workspaceId: request.workspaceId,
+				actionId
+			}).pipe(Effect$1.flatMap((record) => {
+				const publication = record.envelope.releasePublication;
+				const actionKind = record.envelope.proposal.request.actionKind;
+				return publication !== void 0 && publication.releaseId === releaseId && record.envelope.providerId === request.providerId && (actionKind === "create-page" || actionKind === "update-page") && (record.head.state === "proposed" || record.head.state === "authorized" || record.head.state === "started" || record.head.state === "cancel-requested" || record.head.state === "unknown" || record.head.state === "cancel-requested-unknown" || record.head.state === "succeeded" && record.head.lineage._tag === "terminal" && record.head.lineage.receipt.status === "succeeded") ? Effect$1.succeed(record) : Effect$1.fail(new PersistedRecordError({
+					workspaceId: request.workspaceId,
+					recordKind: "governed-action",
+					recordKey: actionId,
+					diagnosticCode: "governed-action-identity-mismatch"
+				}));
+			})));
 		})
 	};
 });
@@ -9596,11 +10546,13 @@ var makeGovernedActionTransaction = Effect$1.gen(function* () {
 	const read = (request) => reader.read(request).pipe(Effect$1.provideService(Crypto$1.Crypto, cryptoService));
 	const readByIdempotencyKey = (request) => reader.readByIdempotencyKey(request).pipe(Effect$1.provideService(Crypto$1.Crypto, cryptoService));
 	const readLatestTerminalByTarget = (request) => reader.readLatestTerminalByTarget(request).pipe(Effect$1.provideService(Crypto$1.Crypto, cryptoService));
+	const readLatestTerminalReleasePublications = (request) => reader.readLatestTerminalReleasePublications(request).pipe(Effect$1.provideService(Crypto$1.Crypto, cryptoService));
 	return {
 		capture,
 		read,
 		readByIdempotencyKey,
 		readLatestTerminalByTarget,
+		readLatestTerminalReleasePublications,
 		transact
 	};
 });
@@ -10066,6 +11018,28 @@ var makeGovernedActionTransactionWrite = Effect$1.gen(function* () {
           ${input.envelope.proposal.request.actionKind},
           ${input.envelope.proposal.request.expectedRevision}
         )`;
+				if (input.envelope.releasePublication !== void 0) {
+					yield* sql`INSERT INTO governed_action_release_publications (
+            workspace_id, action_id, provider_id, release_id, predecessor_action_id
+          ) VALUES (
+            ${input.envelope.workspaceId}, ${input.envelope.actionId},
+            ${input.envelope.providerId}, ${input.envelope.releasePublication.releaseId},
+            ${input.envelope.releasePublication.predecessorPublicationActionId ?? null}
+          )`;
+					if (input.envelope.providerId === "confluence") yield* sql`INSERT INTO governed_action_release_publication_slots (
+              workspace_id, action_id, provider_id, release_id, predecessor_action_id
+            ) VALUES (
+              ${input.envelope.workspaceId}, ${input.envelope.actionId},
+              ${input.envelope.providerId}, ${input.envelope.releasePublication.releaseId},
+              ${input.envelope.releasePublication.predecessorPublicationActionId ?? null}
+            )`;
+				} else yield* sql`INSERT INTO governed_action_entity_targets (
+            workspace_id, action_id, plugin_connection_id, provider_id, entity_id
+          ) VALUES (
+            ${input.envelope.workspaceId}, ${input.envelope.actionId},
+            ${input.envelope.pluginConnectionId}, ${input.envelope.providerId},
+            ${input.envelope.targetEntityId}
+          )`;
 			} else {
 				yield* verifyRootIdentity(input, envelopeJson, root).pipe(captureMalformedGovernedActionRow(root));
 				if (input.command._tag === "propose") return yield* inputError("conflicting-action-identity");
@@ -10198,6 +11172,13 @@ var makeGovernedActionRepository = Effect$1.gen(function* () {
 				reason: "invalid-request"
 			})));
 			return yield* transaction.transact("governed-action.read-latest-terminal-by-target", transaction.readLatestTerminalByTarget(request));
+		}),
+		readLatestTerminalReleasePublications: Effect$1.fn("GovernedActionRepository.readLatestTerminalReleasePublications")(function* (input) {
+			const request = yield* Schema$1.decodeUnknownEffect(Schema$1.toType(GovernedActionReleasePublicationReadInput))(input).pipe(Effect$1.mapError(() => new GovernedActionInputError({
+				operation: "read",
+				reason: "invalid-request"
+			})));
+			return yield* transaction.transact("governed-action.read-latest-terminal-release-publications", transaction.readLatestTerminalReleasePublications(request));
 		})
 	};
 });
@@ -16155,13 +17136,11 @@ var makeRetentionRepository = Effect$1.gen(function* () {
             SELECT 1 FROM agent_review_suggestion_revisions revision
             WHERE revision.workspace_id = job.workspace_id
               AND revision.source_job_id = job.job_id
-              AND revision.created_at > ${cutoffAt}
           )
           AND NOT EXISTS (
             SELECT 1 FROM agent_thread_events event
             WHERE event.workspace_id = job.workspace_id
               AND event.job_id = job.job_id
-              AND event.occurred_at > ${cutoffAt}
           )
           AND NOT EXISTS (
             SELECT 1 FROM domain_events event
@@ -16178,12 +17157,6 @@ var makeRetentionRepository = Effect$1.gen(function* () {
 			yield* Effect$1.forEach(jobIds, (jobId) => sql`INSERT INTO retention_cleanup_claims (
               workspace_id, run_id, retention_class, record_key
             ) VALUES (${workspaceId}, ${run.runId}, 'agent-content', ${jobId})`, { discard: true });
-			yield* sql`DELETE FROM agent_review_suggestion_revisions
-        WHERE workspace_id = ${workspaceId}
-          AND source_job_id IN ${sql.in(jobIds)}`;
-			yield* sql`DELETE FROM agent_thread_events
-        WHERE workspace_id = ${workspaceId}
-          AND job_id IN ${sql.in(jobIds)}`;
 			yield* sql`DELETE FROM agent_job_leases
         WHERE workspace_id = ${workspaceId}
           AND job_id IN ${sql.in(jobIds)}`;
@@ -16891,13 +17864,24 @@ var makePersistence = Effect.gen(function* () {
 			appendReviewSuggestionRevision: (...args) => publicOperation("agent-job.append-review-suggestion-revision", agentJobs.appendReviewSuggestionRevision(...args)),
 			claimNext: (...args) => publicOperation("agent-job.claim-next", agentJobs.claimNext(...args)),
 			completeReview: (...args) => publicOperation("agent-job.complete-review", agentJobs.completeReview(...args)),
+			recordReviewProgress: (...args) => publicOperation("agent-job.record-review-progress", agentJobs.recordReviewProgress(...args)),
 			enqueue: (...args) => publicOperation("agent-job.enqueue", agentJobs.enqueue(...args)),
 			failAttempt: (...args) => publicOperation("agent-job.fail-attempt", agentJobs.failAttempt(...args)),
 			latestReview: (...args) => publicOperation("agent-job.latest-review", agentJobs.latestReview(...args)),
+			latestReviewForPullRequest: (...args) => publicOperation("agent-job.latest-review-for-pull-request", agentJobs.latestReview({
+				...args[0],
+				allowDifferentHead: true
+			})),
+			listRunningPrReviewAttempts: (...args) => publicOperation("agent-job.list-running-pr-review-attempts", agentJobs.listRunningPrReviewAttempts(...args)),
+			attachRunningPrReviewSession: (...args) => publicOperation("agent-job.attach-running-pr-review-session", agentJobs.attachRunningPrReviewSession(...args)),
+			readReviewSuggestionPublication: (...args) => publicOperation("agent-job.read-review-suggestion-publication", agentJobs.readReviewSuggestionPublication(...args)),
 			releaseReviewSuggestionPublication: (...args) => publicOperation("agent-job.release-review-suggestion-publication", agentJobs.releaseReviewSuggestionPublication(...args)),
 			reserveReviewSuggestionPublication: (...args) => publicOperation("agent-job.reserve-review-suggestion-publication", agentJobs.reserveReviewSuggestionPublication(...args)),
 			recordReviewSuggestionPublication: (...args) => publicOperation("agent-job.record-review-suggestion-publication", agentJobs.recordReviewSuggestionPublication(...args)),
+			reviewBudget: (...args) => publicOperation("agent-job.review-budget", agentJobs.reviewBudget(...args)),
 			requestCancellation: (...args) => publicOperation("agent-job.request-cancellation", agentJobs.requestCancellation(...args)),
+			extendReviewBudget: (...args) => publicOperation("agent-job.extend-review-budget", agentJobs.extendReviewBudget(...args)),
+			interruptRunningReviews: (...args) => publicOperation("agent-job.interrupt-running-reviews", agentJobs.interruptRunningReviews(...args)),
 			reviewThreadAfter: (...args) => publicOperation("agent-job.review-thread-after", agentJobs.reviewThreadAfter(...args)),
 			reviewThreadBefore: (...args) => publicOperation("agent-job.review-thread-before", agentJobs.reviewThreadBefore(...args)),
 			reviewThreadTail: (...args) => publicOperation("agent-job.review-thread-tail", agentJobs.reviewThreadTail(...args)),
@@ -16946,7 +17930,8 @@ var makePersistence = Effect.gen(function* () {
 			commit: (...args) => publicOperation("governed-action.commit", governedActions.commit(...args)),
 			read: (...args) => publicOperation("governed-action.read", governedActions.read(...args)),
 			readByIdempotencyKey: (...args) => publicOperation("governed-action.read-by-idempotency-key", governedActions.readByIdempotencyKey(...args)),
-			readLatestTerminalByTarget: (...args) => publicOperation("governed-action.read-latest-terminal-by-target", governedActions.readLatestTerminalByTarget(...args))
+			readLatestTerminalByTarget: (...args) => publicOperation("governed-action.read-latest-terminal-by-target", governedActions.readLatestTerminalByTarget(...args)),
+			readLatestTerminalReleasePublications: (...args) => publicOperation("governed-action.read-latest-terminal-release-publications", governedActions.readLatestTerminalReleasePublications(...args))
 		},
 		people: {
 			createPerson: (...args) => publicOperation("people.create-person", people.createPerson(...args)),
@@ -17124,10 +18109,6 @@ var AuthorizedShares = class extends Context$1.Service()("@knpkv/control-center/
 var DeliveryGraphInspection = class extends Context$1.Service()("@knpkv/control-center/server/api/DeliveryGraphInspection") {};
 /** Authenticated mutation boundary for durable relationship-repair proposals. */
 var RelationshipRepairProposals = class extends Context$1.Service()("@knpkv/control-center/server/api/RelationshipRepairProposals") {};
-/**
-* Release-aware conversational boundary. Implementations own context projection,
-* provider selection, prompt hardening, cancellation, and provider error redaction.
-*/
 var ReleaseAgentTurns = class extends Context$1.Service()("@knpkv/control-center/server/api/ReleaseAgentTurns") {};
 /**
 * Provider-neutral durable release-agent boundary. Implementations derive job,
@@ -17174,7 +18155,14 @@ var RawConfluencePage = Schema$1.Struct({
 var RawConfluenceDraftPage = Schema$1.Struct({
 	id: boundedString(512),
 	status: Schema$1.Literal("draft"),
-	spaceId: boundedString(512)
+	title: boundedString(500),
+	spaceId: boundedString(512),
+	parentId: Schema$1.optionalKey(Schema$1.NullOr(boundedString(512))),
+	ownerId: Schema$1.optionalKey(Schema$1.NullOr(boundedString(512))),
+	body: Schema$1.Struct({ atlas_doc_format: Schema$1.Struct({
+		representation: Schema$1.optionalKey(Schema$1.Literal("atlas_doc_format")),
+		value: Schema$1.String.check(Schema$1.isMaxLength(1048576))
+	}) })
 });
 /** One bounded page of current pages from exactly one configured space. @internal */
 var RawConfluenceSpacePage = Schema$1.Struct({
@@ -17303,6 +18291,7 @@ var ConfluencePageAttributesV1 = Schema$1.Struct({
 			maximum: 2
 		}))
 	})),
+	taskUpdatesSafe: Schema$1.optionalKey(Schema$1.Boolean),
 	contentState: Schema$1.optionalKey(Schema$1.Literals(["loaded", "lazy"]))
 }).check(hasMaximumPluginJsonBytes(MaximumPluginPayloadBytes));
 //#endregion
@@ -18115,6 +19104,6 @@ var reconcileRelationshipInferencePolicy = Effect$1.fn("RelationshipInferenceMat
 	return receipt;
 });
 //#endregion
-export { negotiatePluginDescriptorV1 as $, databaseLayer as $n, AppendReviewSuggestionRevisionInput as $t, PullRequestReviews as A, PersonRecord as An, SchemaWriteBarrierError as Ar, BlobStoreInputError as At, persistenceLayerFromDatabase as B, QuarantinedRecordMetadata as Bn, AgentJobTask as Bt, CodePipelineReads as C, ContentBlobDigest as Cn, WorkspaceSettingsNoChangesError as Cr, ProjectionRow as Ct, MediaReads as D, EntityRecord as Dn, BackupManifestError as Dr, BlobContainmentError as Dt, LiveEvents as E, EntityKind as En, BackupLimitError as Er, AgentJobRepository as Et, TimelineReads as F, ProviderFamily as Fn, AgentContextSnapshotRecord as Ft, authorizeWorkspaceSettingsGovernanceRequest as G, VendorResourceId as Gn, AgentReviewResultRecord as Gt, ReviewCommandArtifactMetadata as H, ReleaseSnapshotRecord as Hn, AgentLeaseOwner as Ht, WorkspaceSettingsAdministration as I, ProviderFamilyMatchesProvider as In, AgentEventCursor as It, digestEnvironmentReadinessCandidate as J, providerFamilyForProvider as Jn, AgentReviewThreadHistoryInput as Jt, governedHumanMutationPolicyAllows as K, WorkspaceName as Kn, AgentReviewThreadAfterInput as Kt, PluginConnection as L, QuarantineDiagnosticSummary as Ln, AgentJobInputError as Lt, ReleaseAgentJobs as M, PluginConnectionRecord as Mn, BlobTooLargeError as Mt, ReleaseAgentTurns as N, ProviderAccountDisplayName as Nn, BlobUnexpectedEofError as Nt, PluginAdministration as O, FollowedResourceDisplayName as On, BackupSqlError as Or, BlobIntegrityError as Ot, TimelineExportAudits as P, ProviderAccountRecord as Pn, AgentAttemptSequence as Pt, hasPluginCapability as Q, Database as Qn, AppendAgentEventInput as Qt, Persistence as R, QuarantineReasonCode as Rn, AgentJobPrompt as Rt, AuthorizedShares as S, QuarantineRepository as Sn, WorkspaceSettingsMutationConflictError as Sr, EvidenceRow as St, DeliveryGraphInspection as T, ContentBlobStorageClass as Tn, BackupIntegrityError as Tr, DeliveryGraphWriteBatch as Tt, ReviewCommandArtifactRepository as U, RoleAssignmentRecord as Un, AgentLeaseToken as Ut, ReviewCommandArtifactHandle as V, RecordRevision as Vn, AgentJobTaskTag as Vt, WorkspaceSettingsRepository as W, VendorAccountId as Wn, AgentReviewResultInput as Wt, digestReleaseReadinessCandidate as X, mapPersistenceOperation as Xn, AgentThreadEvent as Xt, digestReadinessRule as Y, BlobClassification as Yn, AgentReviewThreadTailInput as Yt, HOST_PLUGIN_CAPABILITY_VERSIONS as Z, readChanges as Zn, AgentThreadEventPageSize as Zt, ApplicationConflict as _, ReviewSuggestionPublicationDigest as _n, ReproducibleContentUnavailableError as _r, makeGovernedActionEnvelope as _t, firstPartySyncStreamKey as a, EnqueueAgentJobTask as an, PersistenceConfig as ar, makeGovernedActionTransactionWrite as at, ApplicationResourceNotFound as b, SecretRef as bn, SourceIdentityMismatchError as br, makeDeliveryGraphDecoders as bt, RawConfluenceAttachmentPage as c, MAXIMUM_AGENT_ATTEMPT_OUTPUT_BYTES as cn, DatabaseInitializationError as cr, canonicalizeGovernedActionJson as ct, RawConfluencePage as d, PrReviewThreadContextSnapshot as dn, PersistenceConfigError as dr, digestGovernedActionPayload as dt, ClaimAgentJobInput as en, validateExistingControlCenterDatabase as er, PluginPageId as et, RawConfluenceSpacePage as f, PrReviewThreadSubject as fn, PersistenceOperationError as fr, digestGovernedActionPolicyDefinition as ft, RawConfluenceWatcherPage as g, ReserveReviewSuggestionPublicationInput as gn, RecordNotFoundError as gr, encodeGovernedActionUnknownOutcome as gt, RawConfluenceVersionPage as h, ReleaseReviewSuggestionPublicationInput as hn, RecordAlreadyExistsError as hr, encodeGovernedActionDispatchOutcome as ht, DomainEventWakeups as i, EnqueueAgentJobInput as in, LocalDatabaseUrl as ir, StoredPluginConfigurationKey as it, RelationshipRepairProposals as j, PluginConnectionDisplayName as jn, BlobDigest as jr, BlobStoreIoError as jt, PortfolioSnapshots as k, FollowedResourceRecord as kn, BackupStorageError as kr, BlobNotFoundError as kt, RawConfluenceCurrentUser as l, MAXIMUM_AGENT_JOB_PROMPT_LENGTH as ln, MAXIMUM_PERSISTENCE_RECORD_KEY_LENGTH as lr, digestCanonicalGovernedActionJson as lt, RawConfluenceVersion as m, RecordReviewSuggestionPublicationInput as mn, QuarantineWriteError as mr, digestGovernedActionTransitionCommand as mt, reconcileRelationshipInferencePolicy as n, CompleteAgentReviewInput as nn, validateCurrentSchema as nr, PluginStreamKey as nt, supportsFirstPartySynchronization as o, LatestAgentReviewInput as on, decodePersistenceConfig as or, makeGovernedActionTransaction as ot, RawConfluenceUsers as p, ReadReviewSuggestionRevisionsInput as pn, PluginConnectionLimitError as pr, digestGovernedActionPolicyEvaluation as pt, ReadinessDigestError as q, WorkspaceRecord as qn, AgentReviewThreadBeforeInput as qt, appendPortfolioInvalidation as r, EMPTY_PR_REVIEW_THREAD_CONTEXT as rn, BlobRoot as rr, StoredPluginConfiguration as rt, ConfluencePageAttributesV1 as s, LatestAgentReviewRecord as sn, ContentMetadataMismatchError as sr, GovernedActionDigestError as st, materializeRelationshipInference as t, ClaimedAgentJob as tn, CURRENT_SCHEMA_VERSION as tr, PluginRecordKey as tt, RawConfluenceDraftPage as u, MAXIMUM_AGENT_THREAD_EVENT_PAGE_SIZE as un, PersistedRecordError as ur, digestGovernedActionEvidenceSet as ut, ApplicationInvalidRequest as v, ReviewSuggestionPublicationReservation as vn, RevisionConflictError as vr, verifyGovernedActionEnvelope as vt, CompleteDiffReads as w, ContentBlobMetadata as wn, BackupInputError as wr, decodeRows$3 as wt, ApplicationServiceUnavailable as x, makePersistedRowQuarantine as xn, WorkspaceSettingsGovernanceError as xr, ClaimRow as xt, ApplicationRateLimited as y, blobPath as yn, SecretReferenceScopeConflictError as yr, GovernedActionCommitInput as yt, persistenceLayer as z, QuarantineRecordKind as zn, AgentJobState as zt };
+export { negotiatePluginDescriptorV1 as $, QuarantineReasonCode as $n, AppendAgentEventInput as $t, PullRequestReviews as A, ReviewSuggestionPublicationDigest as An, RecordAlreadyExistsError as Ar, BlobNotFoundError as At, persistenceLayerFromDatabase as B, ContentBlobStorageClass as Bn, BackupIntegrityError as Br, AgentJobState as Bt, CodePipelineReads as C, ReadReviewSuggestionRevisionsInput as Cn, DatabaseInitializationError as Cr, ProjectionRow as Ct, MediaReads as D, ReserveReviewSuggestionPublicationInput as Dn, PersistenceOperationError as Dr, PROCESS_RESTART_INTERRUPTION_MESSAGE as Dt, LiveEvents as E, ReleaseReviewSuggestionPublicationInput as En, PersistenceConfigError as Er, AgentJobRepository as Et, TimelineReads as F, SecretRef as Fn, SourceIdentityMismatchError as Fr, AgentAttemptSequence as Ft, authorizeWorkspaceSettingsGovernanceRequest as G, PersonRecord as Gn, SchemaWriteBarrierError as Gr, AgentReviewResultInput as Gt, ReviewCommandArtifactMetadata as H, EntityRecord as Hn, BackupManifestError as Hr, AgentJobTaskTag as Ht, WorkspaceSettingsAdministration as I, makePersistedRowQuarantine as In, WorkspaceSettingsGovernanceError as Ir, AgentContextSnapshotRecord as It, digestEnvironmentReadinessCandidate as J, ProviderAccountDisplayName as Jn, AgentReviewThreadBeforeInput as Jt, governedHumanMutationPolicyAllows as K, PluginConnectionDisplayName as Kn, BlobDigest as Kr, AgentReviewResultRecord as Kt, PluginConnection as L, QuarantineRepository as Ln, WorkspaceSettingsMutationConflictError as Lr, AgentEventCursor as Lt, ReleaseAgentJobs as M, ReviewSuggestionRevisionLeaseFence as Mn, ReproducibleContentUnavailableError as Mr, BlobStoreIoError as Mt, ReleaseAgentTurns as N, RunningPrReviewAttempt as Nn, RevisionConflictError as Nr, BlobTooLargeError as Nt, PluginAdministration as O, ReviewSuggestionPublicationCommentId as On, PluginConnectionLimitError as Or, BlobContainmentError as Ot, TimelineExportAudits as P, blobPath as Pn, SecretReferenceScopeConflictError as Pr, BlobUnexpectedEofError as Pt, hasPluginCapability as Q, QuarantineDiagnosticSummary as Qn, AgentThreadEventPageSize as Qt, Persistence as R, ContentBlobDigest as Rn, WorkspaceSettingsNoChangesError as Rr, AgentJobInputError as Rt, AuthorizedShares as S, ReadReviewSuggestionPublicationInput as Sn, ContentMetadataMismatchError as Sr, EvidenceRow as St, DeliveryGraphInspection as T, RecordReviewSuggestionPublicationInput as Tn, PersistedRecordError as Tr, DeliveryGraphWriteBatch as Tt, ReviewCommandArtifactRepository as U, FollowedResourceDisplayName as Un, BackupSqlError as Ur, AgentLeaseOwner as Ut, ReviewCommandArtifactHandle as V, EntityKind as Vn, BackupLimitError as Vr, AgentJobTask as Vt, WorkspaceSettingsRepository as W, FollowedResourceRecord as Wn, BackupStorageError as Wr, AgentLeaseToken as Wt, digestReleaseReadinessCandidate as X, ProviderFamily as Xn, AgentReviewThreadTailInput as Xt, digestReadinessRule as Y, ProviderAccountRecord as Yn, AgentReviewThreadHistoryInput as Yt, HOST_PLUGIN_CAPABILITY_VERSIONS as Z, ProviderFamilyMatchesProvider as Zn, AgentThreadEvent as Zt, ApplicationConflict as _, MAXIMUM_REVIEW_BUDGET_MILLIS as _n, validateCurrentSchema as _r, makeGovernedActionEnvelope as _t, firstPartySyncStreamKey as a, CompleteTargetedReviewInput as an, VendorAccountId as ar, makeGovernedActionTransactionWrite as at, ApplicationResourceNotFound as b, ReadReviewBudgetInput as bn, PersistenceConfig as br, makeDeliveryGraphDecoders as bt, RawConfluenceAttachmentPage as c, EnqueueAgentJobTask as cn, WorkspaceRecord as cr, canonicalizeGovernedActionJson as ct, RawConfluencePage as d, LatestAgentReviewInput as dn, mapPersistenceOperation as dr, digestGovernedActionPayload as dt, AppendReviewSuggestionRevisionInput as en, QuarantineRecordKind as er, PluginPageId as et, RawConfluenceSpacePage as f, LatestAgentReviewRecord as fn, readChanges as fr, digestGovernedActionPolicyDefinition as ft, RawConfluenceWatcherPage as g, MAXIMUM_REVIEW_BUDGET_EXTENSION_COUNT as gn, CURRENT_SCHEMA_VERSION as gr, encodeGovernedActionUnknownOutcome as gt, RawConfluenceVersionPage as h, MAXIMUM_AGENT_THREAD_EVENT_PAGE_SIZE as hn, validateExistingControlCenterDatabase as hr, encodeGovernedActionDispatchOutcome as ht, DomainEventWakeups as i, CompleteAgentReviewInput as in, RoleAssignmentRecord as ir, StoredPluginConfigurationKey as it, RelationshipRepairProposals as j, ReviewSuggestionPublicationReservation as jn, RecordNotFoundError as jr, BlobStoreInputError as jt, PortfolioSnapshots as k, ReviewSuggestionPublicationCommentLocator as kn, QuarantineWriteError as kr, BlobIntegrityError as kt, RawConfluenceCurrentUser as l, ExtendReviewBudgetInput as ln, providerFamilyForProvider as lr, digestCanonicalGovernedActionJson as lt, RawConfluenceVersion as m, MAXIMUM_AGENT_JOB_PROMPT_LENGTH as mn, databaseLayer as mr, digestGovernedActionTransitionCommand as mt, reconcileRelationshipInferencePolicy as n, ClaimAgentJobInput as nn, RecordRevision as nr, PluginStreamKey as nt, supportsFirstPartySynchronization as o, EMPTY_PR_REVIEW_THREAD_CONTEXT as on, VendorResourceId as or, makeGovernedActionTransaction as ot, RawConfluenceUsers as p, MAXIMUM_AGENT_ATTEMPT_OUTPUT_BYTES as pn, Database as pr, digestGovernedActionPolicyEvaluation as pt, ReadinessDigestError as q, PluginConnectionRecord as qn, AgentReviewThreadAfterInput as qt, appendPortfolioInvalidation as r, ClaimedAgentJob as rn, ReleaseSnapshotRecord as rr, StoredPluginConfiguration as rt, ConfluencePageAttributesV1 as s, EnqueueAgentJobInput as sn, WorkspaceName as sr, GovernedActionDigestError as st, materializeRelationshipInference as t, AttachRunningPrReviewSessionInput as tn, QuarantinedRecordMetadata as tr, PluginRecordKey as tt, RawConfluenceDraftPage as u, InterruptRunningReviewsInput as un, BlobClassification as ur, digestGovernedActionEvidenceSet as ut, ApplicationInvalidRequest as v, PrReviewThreadContextSnapshot as vn, BlobRoot as vr, verifyGovernedActionEnvelope as vt, CompleteDiffReads as w, RecordAgentReviewProgressInput as wn, MAXIMUM_PERSISTENCE_RECORD_KEY_LENGTH as wr, decodeRows$3 as wt, ApplicationServiceUnavailable as x, ReadReviewSuggestionPublication as xn, decodePersistenceConfig as xr, ClaimRow as xt, ApplicationRateLimited as y, PrReviewThreadSubject as yn, LocalDatabaseUrl as yr, GovernedActionCommitInput as yt, persistenceLayer as z, ContentBlobMetadata as zn, BackupInputError as zr, AgentJobPrompt as zt };
 
-//# sourceMappingURL=relationshipInferenceMaterialization-DYBcaWhQ.js.map
+//# sourceMappingURL=relationshipInferenceMaterialization-Dyix96px.js.map