@loicngr/kobo 1.11.45 → 2.1.0

package/dist/server/services/settings-service.js

@@ -1,16 +1,24 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { MASK_CHARACTER, MASKED_SECRET, SECRET_GLOBAL_KEYS, WORKTREES_PATH } from '../../shared/consts.js';
+import { normalizePublicSounds } from '../../shared/notification-assets.js';
 import { isValidProjectColor } from '../../shared/project-colors.js';
 import { isValidSkillSuite } from '../../shared/skill-suite-prompts.js';
 import { DEFAULT_WHIP_SHORTCUT, isValidWhipShortcut } from '../../shared/whip-shortcut.js';
+import { isWorkflowPolicy, LEGACY_WORKFLOW_POLICY, MANUAL_WORKFLOW_POLICY, resolveWorkflowPolicy, } from '../../shared/workflow-policy.js';
 import { listClaudeMcpEntries } from '../utils/mcp-client.js';
 import { getSettingsPath } from '../utils/paths.js';
 import { InvalidWorktreesPathError, resolveGlobalWorktreesRoot, sanitizeWorktreesPath, validateWorktreesPath, } from '../utils/worktree-paths.js';
 import { DEFAULT_NOTION_INITIAL_PROMPT, DEFAULT_SENTRY_INITIAL_PROMPT } from './initial-prompt-template-service.js';
+import { LEGACY_AGNOSTIC_AUTO_LOOP_REVIEW_GATE, LEGACY_AGNOSTIC_REVIEW_TEMPLATE, LEGACY_CI_FIX_PROMPT_TEMPLATE, LEGACY_FINALIZATION_PROMPT, LEGACY_NOTION_INITIAL_PROMPT, LEGACY_PR_PROMPT_TEMPLATE, LEGACY_SENTRY_INITIAL_PROMPT, } from './legacy-public-prompts.js';
 import { DEFAULT_REVIEW_PROMPT_TEMPLATE } from './review-template-service.js';
-import { DEFAULT_CHANGE_SOURCE_BRANCH_SCRIPT, DEFAULT_MODEL_BY_ENGINE } from './settings-defaults.js';
+import { DEFAULT_CHANGE_SOURCE_BRANCH_SCRIPT, DEFAULT_MODEL_BY_ENGINE, FRESH_MODEL_BY_ENGINE, } from './settings-defaults.js';
 import { AGNOSTIC_PROMPTS } from './skill-suite-prompts.js';
+export const STANDARD_GIT_CONVENTIONS = `Follow the repository's existing Git conventions and the user's instructions.
+Work locally by default. Commit, push, publish comments or open pull requests only when explicitly authorized.
+Inspect git status and all staged, unstaged and untracked changes before staging. Preserve unrelated work.
+Never rewrite shared history or run destructive Git commands without explicit authorization.
+`;
 export const DEFAULT_GIT_CONVENTIONS = `# Git conventions
 
 ## Commits
@@ -55,8 +63,8 @@ Steps:
 1. For each failing job, fetch its logs from the forge and pinpoint the root cause.
 2. Fix the underlying issue locally — never disable a check or skip a test to "fix" CI.
 3. Run the relevant lint / type-check / test commands locally to verify the fix.
-4. Commit with a clear, conventional message and push to the same branch.
-5. Wait for CI to re-run and confirm every job now passes.
+4. Report the local changes and checks. Commit or push only when explicitly authorized; otherwise leave the fix local.
+5. If a push was authorized, wait for CI to re-run and report its result.
 `;
 export const DEFAULT_PR_PROMPT_TEMPLATE = `A pull request has been opened: {{pr_url}} (#{{pr_number}})
 
@@ -79,15 +87,15 @@ Acceptance criteria:
 {{acceptance_criteria}}
 
 Please:
-1. Review the PR description on GitHub and improve it if needed (add a proper summary, screenshots if relevant, a test plan)
+1. Read the PR/MR description using the configured forge and propose improvements locally (summary, screenshots if relevant, test plan)
 2. Verify that all acceptance criteria are checked
-3. Post a comment on the PR summarizing what was done and any follow-up items
-4. Do NOT add a "Generated with Claude Code" footer or any AI attribution to the PR description
+3. Draft a summary of the work and follow-up items locally. Publish comments or edit the PR/MR only when explicitly authorized.
+4. Follow the repository policy for attribution and PR/MR formatting.
 `;
 export const DEFAULT_FINALIZATION_PROMPT = `Run final quality checks before closing the workspace:
 
 1. Verify all work tasks and acceptance criteria are marked \`done\`. If any remain pending/in_progress, keep finalization open and report them.
-2. Run the project's linters, type-checkers, and tests (see CLAUDE.md or package.json scripts).
+2. Run the project's linters, type-checkers, and tests (see the repository instructions and existing build/test configuration).
 3. If any check fails or cannot be run, create a regular repair task with a title like \`Fix lint failure in X\` (role \`work\`, no \`[FINAL]\` prefix), record the failed/not_run checks and leave this finalization task pending. Kōbō will process the repairs first, then run final verification again against the repaired state.
 4. Only after all required checks actually pass, mark this task as \`done\` with structured verification: method, summary, and the named checks with status \`passed\`.
 
@@ -254,11 +262,11 @@ const settingsMigrations = [
         migrate({ projects }) {
             for (const p of projects) {
                 if (!p.finalization || typeof p.finalization !== 'object') {
-                    p.finalization = { prompt: DEFAULT_FINALIZATION_PROMPT };
+                    p.finalization = { prompt: LEGACY_FINALIZATION_PROMPT };
                 }
                 else if (typeof p.finalization.prompt !== 'string') {
                     ;
-                    p.finalization.prompt = DEFAULT_FINALIZATION_PROMPT;
+                    p.finalization.prompt = LEGACY_FINALIZATION_PROMPT;
                 }
             }
         },
@@ -317,10 +325,10 @@ const settingsMigrations = [
         name: 'add-notion-sentry-initial-prompts',
         migrate({ global, projects }) {
             if (typeof global.notionInitialPromptTemplate !== 'string') {
-                global.notionInitialPromptTemplate = DEFAULT_NOTION_INITIAL_PROMPT;
+                global.notionInitialPromptTemplate = LEGACY_NOTION_INITIAL_PROMPT;
             }
             if (typeof global.sentryInitialPromptTemplate !== 'string') {
-                global.sentryInitialPromptTemplate = DEFAULT_SENTRY_INITIAL_PROMPT;
+                global.sentryInitialPromptTemplate = LEGACY_SENTRY_INITIAL_PROMPT;
             }
             for (const p of projects) {
                 if (typeof p.notionInitialPromptTemplate !== 'string') {
@@ -447,10 +455,10 @@ const settingsMigrations = [
                 global.skillSuite = 'superpowers';
             }
             if (typeof global.customReviewTemplate !== 'string') {
-                global.customReviewTemplate = AGNOSTIC_PROMPTS.reviewTemplate;
+                global.customReviewTemplate = LEGACY_AGNOSTIC_REVIEW_TEMPLATE;
             }
             if (typeof global.customAutoLoopReviewGate !== 'string') {
-                global.customAutoLoopReviewGate = AGNOSTIC_PROMPTS.autoLoopReviewGate;
+                global.customAutoLoopReviewGate = LEGACY_AGNOSTIC_AUTO_LOOP_REVIEW_GATE;
             }
             if (typeof global.customAutoLoopGroomingIntro !== 'string') {
                 global.customAutoLoopGroomingIntro = AGNOSTIC_PROMPTS.autoLoopGroomingIntro;
@@ -586,7 +594,7 @@ const settingsMigrations = [
         name: 'add-ci-fix-prompt-template',
         migrate: ({ global, projects }) => {
             if (typeof global.ciFixPromptTemplate !== 'string') {
-                global.ciFixPromptTemplate = DEFAULT_CI_FIX_PROMPT_TEMPLATE;
+                global.ciFixPromptTemplate = LEGACY_CI_FIX_PROMPT_TEMPLATE;
             }
             for (const p of projects) {
                 if (typeof p.ciFixPromptTemplate !== 'string')
@@ -632,7 +640,7 @@ const settingsMigrations = [
             // Seed the global default; projects keep their own override (or empty to
             // inherit this global value — cascade handled by getEffectiveFinalization).
             if (typeof global.finalizationPrompt !== 'string') {
-                global.finalizationPrompt = DEFAULT_FINALIZATION_PROMPT;
+                global.finalizationPrompt = LEGACY_FINALIZATION_PROMPT;
             }
         },
     },
@@ -909,6 +917,59 @@ const settingsMigrations = [
                 global.activityDigestEnabled = true;
         },
     },
+    {
+        version: 59,
+        name: 'neutral-built-in-prompts',
+        migrate: ({ global, projects }) => {
+            const defaults = [
+                ['customReviewTemplate', LEGACY_AGNOSTIC_REVIEW_TEMPLATE, AGNOSTIC_PROMPTS.reviewTemplate],
+                ['customAutoLoopReviewGate', LEGACY_AGNOSTIC_AUTO_LOOP_REVIEW_GATE, AGNOSTIC_PROMPTS.autoLoopReviewGate],
+                ['notionInitialPromptTemplate', LEGACY_NOTION_INITIAL_PROMPT, DEFAULT_NOTION_INITIAL_PROMPT],
+                ['sentryInitialPromptTemplate', LEGACY_SENTRY_INITIAL_PROMPT, DEFAULT_SENTRY_INITIAL_PROMPT],
+                ['ciFixPromptTemplate', LEGACY_CI_FIX_PROMPT_TEMPLATE, DEFAULT_CI_FIX_PROMPT_TEMPLATE],
+                ['prPromptTemplate', LEGACY_PR_PROMPT_TEMPLATE, DEFAULT_PR_PROMPT_TEMPLATE],
+                ['finalizationPrompt', LEGACY_FINALIZATION_PROMPT, DEFAULT_FINALIZATION_PROMPT],
+            ];
+            for (const [key, previous, next] of defaults) {
+                if (global[key] === previous)
+                    global[key] = next;
+                for (const project of projects) {
+                    if (project[key] === previous)
+                        project[key] = next;
+                }
+            }
+            for (const project of projects) {
+                const finalization = project.finalization;
+                if (finalization?.prompt === LEGACY_FINALIZATION_PROMPT)
+                    finalization.prompt = DEFAULT_FINALIZATION_PROMPT;
+            }
+        },
+    },
+    {
+        version: 60,
+        name: 'add-onboarding-completion',
+        migrate: ({ global }) => {
+            if (typeof global.onboardingComplete !== 'boolean')
+                global.onboardingComplete = true;
+        },
+    },
+    {
+        version: 61,
+        name: 'original-public-notification-sounds',
+        migrate: ({ global }) => normalizePublicSounds(global),
+    },
+    {
+        version: 62,
+        name: 'explicit-workflow-preferences',
+        migrate: ({ global, projects }) => {
+            if (!isWorkflowPolicy(global.workflowPolicy))
+                global.workflowPolicy = { ...LEGACY_WORKFLOW_POLICY };
+            for (const project of projects) {
+                if (!isWorkflowPolicy(project.workflowPolicy))
+                    project.workflowPolicy = {};
+            }
+        },
+    },
 ];
 /** Current settings schema version — always equals the highest migration version. */
 export const SETTINGS_SCHEMA_VERSION = settingsMigrations.length > 0 ? settingsMigrations[settingsMigrations.length - 1].version : 0;
@@ -938,7 +999,9 @@ function defaultSettings() {
     return {
         schemaVersion: SETTINGS_SCHEMA_VERSION,
         global: {
-            defaultModelByEngine: { ...DEFAULT_MODEL_BY_ENGINE },
+            workflowPolicy: { ...MANUAL_WORKFLOW_POLICY },
+            onboardingComplete: false,
+            defaultModelByEngine: { ...FRESH_MODEL_BY_ENGINE },
             dangerouslySkipPermissions: true,
             prPromptTemplate: DEFAULT_PR_PROMPT_TEMPLATE,
             reviewPromptTemplate: DEFAULT_REVIEW_PROMPT_TEMPLATE,
@@ -946,7 +1009,7 @@ function defaultSettings() {
             finalizationPrompt: DEFAULT_FINALIZATION_PROMPT,
             notionInitialPromptTemplate: DEFAULT_NOTION_INITIAL_PROMPT,
             sentryInitialPromptTemplate: DEFAULT_SENTRY_INITIAL_PROMPT,
-            gitConventions: DEFAULT_GIT_CONVENTIONS,
+            gitConventions: STANDARD_GIT_CONVENTIONS,
             setupScript: '',
             cleanupScript: '',
             cleanupScriptMode: 'no-tasks',
@@ -963,7 +1026,7 @@ function defaultSettings() {
             autoLoopMaxRetries: 5,
             awaitingUserReminderMinutes: 0,
             activityDigestEnabled: true,
-            maxConcurrentAgents: 0,
+            maxConcurrentAgents: 2,
             wsEventsRetentionDays: 0,
             wsEventsKeepPerWorkspace: 0,
             networkAccessEnabled: false,
@@ -972,11 +1035,11 @@ function defaultSettings() {
             bitbucketToken: '',
             bitbucketUsername: '',
             browserNotifications: true,
-            audioNotifications: true,
+            audioNotifications: false,
             audioQuestionNotifications: false,
             audioWorkspaceCreatedNotifications: false,
             audioAgentErrorNotifications: false,
-            audioNotificationSound: 'hey.mp3',
+            audioNotificationSound: 'neutral.wav',
             audioQuestionSound: 'inherit',
             audioWorkspaceCreatedSound: 'inherit',
             audioAgentErrorSound: 'inherit',
@@ -1012,8 +1075,8 @@ function defaultSettings() {
             defaultPermissionModeByEngine: { 'claude-code': 'plan', codex: 'plan' },
             notionMcpKey: '',
             sentryMcpKey: '',
-            notionEnabled: true,
-            sentryEnabled: true,
+            notionEnabled: false,
+            sentryEnabled: false,
             showThinkingBlocks: true,
             whipEnabled: false,
             whipShortcut: DEFAULT_WHIP_SHORTCUT,
@@ -1033,7 +1096,7 @@ function defaultSettings() {
             voiceTranslateToEnglish: false,
             voiceSuppressNonSpeechTokens: true,
             flattenWorkspaceList: false,
-            skillSuite: 'superpowers',
+            skillSuite: 'standard',
             customReviewTemplate: AGNOSTIC_PROMPTS.reviewTemplate,
             customAutoLoopReviewGate: AGNOSTIC_PROMPTS.autoLoopReviewGate,
             customAutoLoopGroomingIntro: AGNOSTIC_PROMPTS.autoLoopGroomingIntro,
@@ -1045,6 +1108,7 @@ function defaultSettings() {
 }
 function defaultProjectSettings(projectPath) {
     return {
+        workflowPolicy: {},
         path: projectPath,
         displayName: '',
         defaultSourceBranch: '',
@@ -1103,10 +1167,18 @@ export function runSettingsMigrations(raw) {
             version = m.version;
         }
     }
+    if (typeof current.global.onboardingComplete !== 'boolean')
+        current.global.onboardingComplete = true;
+    current.global.workflowPolicy = resolveWorkflowPolicy(current.global.workflowPolicy);
+    for (const project of current.projects) {
+        if (!isWorkflowPolicy(project.workflowPolicy))
+            project.workflowPolicy = {};
+    }
     current.global.worktreesPath = sanitizeWorktreesPath(current.global.worktreesPath);
     current.global.whipEnabled = current.global.whipEnabled === true;
     current.global.whipShortcut = normalizeWhipShortcut(current.global.whipShortcut);
     current.global.whipVolume = normalizeWhipVolume(current.global.whipVolume);
+    normalizePublicSounds(current.global);
     current.schemaVersion = version;
     return current;
 }
@@ -1472,7 +1544,16 @@ export function updateGlobalSettings(input) {
     if ('activityDigestEnabled' in data && typeof data.activityDigestEnabled !== 'boolean') {
         delete data.activityDigestEnabled;
     }
+    if ('onboardingComplete' in data && typeof data.onboardingComplete !== 'boolean')
+        delete data.onboardingComplete;
+    if ('workflowPolicy' in data) {
+        if (!isWorkflowPolicy(data.workflowPolicy))
+            throw new Error('Invalid workflowPolicy');
+        data.workflowPolicy = resolveWorkflowPolicy(settings.global.workflowPolicy, data.workflowPolicy);
+    }
     const allowedGlobalKeys = [
+        'workflowPolicy',
+        'onboardingComplete',
         'defaultModelByEngine',
         'dangerouslySkipPermissions',
         'prPromptTemplate',
@@ -1573,6 +1654,7 @@ export function updateGlobalSettings(input) {
         'customBrainstormingInstruction',
     ];
     const filtered = pickKnownKeys(data, allowedGlobalKeys);
+    normalizePublicSounds(filtered);
     if (filtered.tags !== undefined) {
         filtered.tags = Array.isArray(filtered.tags)
             ? Array.from(new Set(filtered.tags
@@ -1686,7 +1768,10 @@ export function upsertProject(projectPath, data) {
             delete data.cleanupScriptMode;
         }
     }
+    if ('workflowPolicy' in data && !isWorkflowPolicy(data.workflowPolicy))
+        throw new Error('Invalid workflowPolicy');
     const allowedProjectKeys = [
+        'workflowPolicy',
         'displayName',
         'defaultSourceBranch',
         'defaultModel',
@@ -1785,3 +1870,7 @@ export function listActiveClaudeMcpServers() {
         args: entry.args ?? [],
     }));
 }
+/** Resolve inheritance before taking a new workspace snapshot. */
+export function getEffectiveWorkflowPolicy(projectPath, override) {
+    return resolveWorkflowPolicy(getGlobalSettings().workflowPolicy, getProjectSettings(projectPath)?.workflowPolicy, override);
+}

package/dist/server/services/skill-suite-prompts.js

@@ -12,7 +12,7 @@ const REVIEW_BODY = `## Scope
 
 Review ALL changes — both committed and uncommitted in the working tree:
 - \`git diff {{base_commit}}..HEAD\` — committed changes on this branch
-- \`git status\` and \`git diff\` — uncommitted changes (staged + unstaged)
+- \`git status\` and \`git diff\` / \`git diff --cached\` — unstaged / staged changes; inspect untracked files too
 
 ## Diff summary
 {{diff_stats}}
@@ -36,20 +36,21 @@ export const SUPERPOWERS_PROMPTS = {
     reviewTemplate: REVIEW_HEADER +
         'If a code-review skill is available (e.g. superpowers:requesting-code-review), invoke it to drive this review. Otherwise follow the steps below directly.\n\n' +
         REVIEW_BODY,
-    autoLoopReviewGate: 'Code review gate — BEFORE marking the task done, dispatch an independent code-reviewer subagent via the Task tool with `subagent_type: "code-reviewer"` (or `"superpowers:code-reviewer"` / `"pr-review-toolkit:code-reviewer"` — use whichever exists in this environment; fall back to `superpowers:requesting-code-review` skill if none is available). Brief the reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether the commit is clean.',
+    autoLoopReviewGate: 'If the named skills or subagents are unavailable, review the full diff manually with the same checks. Code review gate — BEFORE marking the task done, dispatch an independent code-reviewer subagent via the Task tool with `subagent_type: "code-reviewer"` (or `"superpowers:code-reviewer"` / `"pr-review-toolkit:code-reviewer"` — use whichever exists in this environment; fall back to `superpowers:requesting-code-review` skill if none is available). Brief the reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether committed and uncommitted changes (including staged and untracked files) are correct.',
     autoLoopGroomingIntro: GROOMING_INTRO_SUPERPOWERS,
     qaPromptTemplate: 'QA pass for workspace "{{workspace_name}}" in project {{project_name}}.\n\nBranch: {{branch_name}}\nStaging URL: {{staging_url}}\n\nIf a QA-style skill that drives a real browser is available in this environment (e.g. via the superpowers-chrome browsing skill), use it to navigate the staging URL and exercise the changes. Otherwise, fall back to manually scripting the smoke checks and recording your findings as a bug report.',
-    brainstormingInstruction: 'Brainstorm the implementation approach with discipline:\n' +
+    brainstormingInstruction: 'Use only skills and tools actually available in this session. If a named skill is unavailable, perform its described planning or review steps directly. Do not install tools or expand permissions automatically.\n' +
+        'Brainstorm the implementation approach with discipline:\n' +
         '1. Use the `superpowers:brainstorming` skill — it walks you through purpose, requirements, and design BEFORE any code. Ask clarifying questions and wait for explicit user approval on the design before moving on.\n' +
         '2. Use `superpowers:writing-plans` to turn the approved design into a multi-step implementation plan, saved under `docs/superpowers/plans/`.\n' +
         '3. If you encounter a bug or unexpected behaviour during exploration, use `superpowers:systematic-debugging` rather than guessing.\n' +
-        "Do NOT skip the skills or rationalise around them — that's how the rigour gets lost.",
+        'Apply the planning and review steps rigorously; when a named skill is unavailable, perform those steps directly.',
 };
 export const GSTACK_PROMPTS = {
     reviewTemplate: REVIEW_HEADER +
         'Run /review to drive this audit (the gstack Staff Engineer skill — finds bugs that pass CI but blow up in production, auto-fixes the obvious ones, flags completeness gaps). If /review is unavailable in this environment, fall back to the manual checklist below.\n\n' +
         REVIEW_BODY,
-    autoLoopReviewGate: 'Code review gate — BEFORE marking the task done, run /review (the gstack Staff Engineer skill). Brief it with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether the commit is clean. If /review auto-fixes minor issues, accept the fixes via an amend or fix-up commit, then re-run step 3 checks.',
+    autoLoopReviewGate: 'If the named skills or subagents are unavailable, review the full diff manually with the same checks. Code review gate — BEFORE marking the task done, run /review (the gstack Staff Engineer skill). Brief it with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether committed and uncommitted changes (including staged and untracked files) are correct. If /review auto-fixes minor issues, apply fixes locally and re-run checks; commit only when explicitly authorized.',
     autoLoopGroomingIntro: GROOMING_INTRO_GSTACK,
     qaPromptTemplate: `QA pass for workspace "{{workspace_name}}" in project {{project_name}}.
 
@@ -64,10 +65,11 @@ Pick the right gstack tool for the situation:
   - **Standard** — adds medium-severity bugs.
   - **Exhaustive** — adds cosmetic issues.
 - \`/qa-only {{staging_url}}\` — Same methodology as \`/qa\` but report only, no code changes. Use when you only want a bug report.
-- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Commits atomic fixes with before/after screenshots.
+- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Prepare local fixes with before/after screenshots. Commit only when explicitly authorized; if the skill cannot avoid automatic commits, perform the visual audit manually.
 
-For reproducible regression coverage that runs on every PR, prefer **Cypress** specs in \`test/cypress/\` instead of \`/qa\`. Reserve the gstack tools above for exploration, dogfooding, and one-shot visual debugging.`,
-    brainstormingInstruction: 'Brainstorm the implementation approach using the gstack sprint pipeline:\n' +
+For reproducible regression coverage that runs on every PR, use the project's configured test framework and existing test directory instead of \`/qa\`. Reserve the gstack tools above for exploration, dogfooding, and one-shot visual debugging.`,
+    brainstormingInstruction: 'Use only skills and tools actually available in this session. If a named skill is unavailable, perform its described planning or review steps directly. Do not install tools or expand permissions automatically.\n' +
+        'Brainstorm the implementation approach using the gstack sprint pipeline:\n' +
         '1. Run `/office-hours` — six forcing questions that reframe the problem and write a design doc. This is where you challenge premises and surface alternatives before any code.\n' +
         '2. Run `/autoplan` — it chains CEO → design → eng → DX reviews automatically (auto-detects which apply) and surfaces only the taste decisions you need to approve. Prefer this over manual orchestration.\n' +
         '3. If you need fine control (e.g. skip a step, run one in isolation), invoke the individual skills instead: `/plan-ceo-review`, `/plan-eng-review`, `/plan-design-review`, `/plan-devex-review`.\n' +
@@ -77,14 +79,15 @@ export const ECC_PROMPTS = {
     reviewTemplate: REVIEW_HEADER +
         'If a code-review skill is available (e.g. `ecc:code-review`, or dispatch a subagent via the Task tool with `subagent_type: "ecc:code-reviewer"`), invoke it to drive this review. Otherwise follow the steps below directly.\n\n' +
         REVIEW_BODY,
-    autoLoopReviewGate: 'Code review gate — BEFORE marking the task done, dispatch an independent code-reviewer subagent via the Task tool with `subagent_type: "ecc:code-reviewer"` (or run the `ecc:code-review` / `ecc:quality-gate` skill if you prefer a driven workflow over a bare subagent). Brief the reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether the commit is clean.',
+    autoLoopReviewGate: 'If the named skills or subagents are unavailable, review the full diff manually with the same checks. Code review gate — BEFORE marking the task done, dispatch an independent code-reviewer subagent via the Task tool with `subagent_type: "ecc:code-reviewer"` (or run the `ecc:code-review` / `ecc:quality-gate` skill if you prefer a driven workflow over a bare subagent). Brief the reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether committed and uncommitted changes (including staged and untracked files) are correct.',
     autoLoopGroomingIntro: GROOMING_INTRO_ECC,
     qaPromptTemplate: 'QA pass for workspace "{{workspace_name}}" in project {{project_name}}.\n\nBranch: {{branch_name}}\nStaging URL: {{staging_url}}\n\nIf a QA-style skill is available in this environment (e.g. `ecc:browser-qa`, or dispatch a subagent via the Task tool with `subagent_type: "ecc:e2e-runner"`), use it to exercise the staging URL. Otherwise, fall back to manually scripting the smoke checks and recording your findings as a bug report.',
-    brainstormingInstruction: 'Brainstorm the implementation approach using the ECC pipeline:\n' +
+    brainstormingInstruction: 'Use only skills and tools actually available in this session. If a named skill is unavailable, perform its described planning or review steps directly. Do not install tools or expand permissions automatically.\n' +
+        'Brainstorm the implementation approach using the ECC pipeline:\n' +
         '1. Run the `ecc:plan` skill (or dispatch a subagent via the Task tool with `subagent_type: "ecc:planner"`) — it expands the request into a full spec with features, sprints, and evaluation criteria before any code. Ask clarifying questions and wait for explicit user approval on the design before moving on.\n' +
         '2. Use `ecc:tdd-workflow` to shape the approved design into a test-first implementation plan.\n' +
         '3. If you encounter a bug or unexpected behaviour during exploration, dispatch a subagent via the Task tool with `subagent_type: "ecc:architect"` (or the relevant language-specific `ecc:*-reviewer` agent) rather than guessing.\n' +
-        "Do NOT skip the skills or rationalise around them — that's how the rigour gets lost.",
+        'Apply the planning and review steps rigorously; when a named skill is unavailable, perform those steps directly.',
 };
 export const AGNOSTIC_PROMPTS = {
     reviewTemplate: AGNOSTIC_REVIEW_TEMPLATE,
@@ -103,15 +106,15 @@ export const AGNOSTIC_PROMPTS = {
 //   - superpowers-chrome:browsing    → low-level browser control fallback
 export const COMBINED_PROMPTS = {
     reviewTemplate: REVIEW_HEADER +
-        'Two complementary review skills are available — pick by intent:\n' +
+        'If installed, these complementary review skills can be used — pick by intent:\n' +
         '- `/review` (gstack Staff Engineer) for tactical bug-hunting that finds issues passing CI but blowing up in production. Auto-fixes the obvious ones.\n' +
         '- `superpowers:requesting-code-review` for principles-level critique — silent failures, test-design soundness, surface-area discipline.\n' +
         'You can run both on the same diff if the change is large. If neither is available, fall back to the manual checklist below.\n\n' +
         REVIEW_BODY,
-    autoLoopReviewGate: 'Code review gate — BEFORE marking the task done, pick the appropriate review skill (two are installed):\n' +
+    autoLoopReviewGate: 'If the named skills or subagents are unavailable, review the full diff manually with the same checks. Code review gate — BEFORE marking the task done, pick the appropriate review skill from those actually available:\n' +
         '- Default to `/review` (gstack Staff Engineer) for tactical code-level bugs and auto-fixes.\n' +
         '- Use `superpowers:requesting-code-review` instead when the task introduces tests, refactors, or design decisions worth a principles-level critique.\n\n' +
-        'Brief the chosen reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether the commit is clean. If the reviewer auto-fixes minor issues, accept the fixes via an amend or fix-up commit, then re-run step 3 checks.',
+        'Brief the chosen reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether committed and uncommitted changes (including staged and untracked files) are correct. If the reviewer auto-fixes minor issues, apply fixes locally and re-run checks; commit only when explicitly authorized.',
     autoLoopGroomingIntro: GROOMING_INTRO_COMBINED,
     qaPromptTemplate: `QA pass for workspace "{{workspace_name}}" in project {{project_name}}.
 
@@ -127,13 +130,14 @@ gstack QA toolkit (preferred for interactive QA):
   - **Standard** — adds medium-severity bugs.
   - **Exhaustive** — adds cosmetic issues.
 - \`/qa-only {{staging_url}}\` — Same methodology as \`/qa\` but report only, no code changes.
-- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Commits atomic fixes with before/after screenshots.
+- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Prepare local fixes with before/after screenshots. Commit only when explicitly authorized; if the skill cannot avoid automatic commits, perform the visual audit manually.
 
 Superpowers alternative (low-level browser control):
 - \`superpowers-chrome:browsing\` — Direct Chrome DevTools Protocol control over an existing Chrome session: multi-tab management, form automation, content extraction. Use when you need fine-grained control beyond what \`/browse\` exposes.
 
-For reproducible regression coverage that runs on every PR, prefer **Cypress** specs in \`test/cypress/\` instead of any interactive QA skill. Reserve the tools above for exploration, dogfooding, and one-shot visual debugging.`,
-    brainstormingInstruction: 'Brainstorm using both suites — each plays to its strength:\n' +
+For reproducible regression coverage that runs on every PR, use the project's configured test framework and existing test directory instead of any interactive QA skill. Reserve the tools above for exploration, dogfooding, and one-shot visual debugging.`,
+    brainstormingInstruction: 'Use only skills and tools actually available in this session. If a named skill is unavailable, perform its described planning or review steps directly. Do not install tools or expand permissions automatically.\n' +
+        'Brainstorm using both suites — each plays to its strength:\n' +
         '1. Early product framing: prefer gstack `/office-hours` for product-shaped work (six forcing questions + design doc). Fall back to `superpowers:brainstorming` for purely infra/refactor work where the product lens does not apply.\n' +
         '2. Plan construction — pick whichever fits the work better:\n' +
         '   - gstack `/autoplan` for the chained CEO/design/eng/DX pipeline (auto-detects which apply).\n' +
@@ -156,11 +160,11 @@ export const ALL_THREE_PROMPTS = {
         "- `ecc:code-review` (or a Task-dispatched `ecc:code-reviewer` subagent) for ECC's structured multi-agent review pass.\n" +
         'You can run more than one on the same diff if the change is large. If none is available, fall back to the manual checklist below.\n\n' +
         REVIEW_BODY,
-    autoLoopReviewGate: 'Code review gate — BEFORE marking the task done, pick the appropriate review path (three are installed):\n' +
+    autoLoopReviewGate: 'If the named skills or subagents are unavailable, review the full diff manually with the same checks. Code review gate — BEFORE marking the task done, pick the appropriate review path (three are installed):\n' +
         '- Default to `/review` (gstack Staff Engineer) for tactical code-level bugs and auto-fixes.\n' +
         '- Use `superpowers:requesting-code-review` instead when the task introduces tests, refactors, or design decisions worth a principles-level critique.\n' +
         "- Use a Task-dispatched `ecc:code-reviewer` subagent (or the `ecc:quality-gate` skill) when you want ECC's structured multi-agent pass.\n\n" +
-        'Brief the chosen reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether the commit is clean. If the reviewer auto-fixes minor issues, accept the fixes via an amend or fix-up commit, then re-run step 3 checks.',
+        'Brief the chosen reviewer with: what you just implemented, the task title, and the commit SHA (via `git rev-parse HEAD`). Ask specifically whether the change matches the task scope, whether edge cases are handled, and whether committed and uncommitted changes (including staged and untracked files) are correct. If the reviewer auto-fixes minor issues, apply fixes locally and re-run checks; commit only when explicitly authorized.',
     autoLoopGroomingIntro: GROOMING_INTRO_ALL,
     qaPromptTemplate: `QA pass for workspace "{{workspace_name}}" in project {{project_name}}.
 
@@ -176,7 +180,7 @@ gstack QA toolkit (preferred for interactive QA):
   - **Standard** — adds medium-severity bugs.
   - **Exhaustive** — adds cosmetic issues.
 - \`/qa-only {{staging_url}}\` — Same methodology as \`/qa\` but report only, no code changes.
-- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Commits atomic fixes with before/after screenshots.
+- \`/design-review\` — Visual audit (consistency, spacing, hierarchy, AI slop). Prepare local fixes with before/after screenshots. Commit only when explicitly authorized; if the skill cannot avoid automatic commits, perform the visual audit manually.
 
 ECC toolkit:
 - \`ecc:browser-qa\` skill — structured browser-driven QA pass.
@@ -185,8 +189,9 @@ ECC toolkit:
 Superpowers alternative (low-level browser control):
 - \`superpowers-chrome:browsing\` — Direct Chrome DevTools Protocol control over an existing Chrome session: multi-tab management, form automation, content extraction. Use when you need fine-grained control beyond what \`/browse\` exposes.
 
-For reproducible regression coverage that runs on every PR, prefer **Cypress** specs in \`test/cypress/\` instead of any interactive QA skill. Reserve the tools above for exploration, dogfooding, and one-shot visual debugging.`,
-    brainstormingInstruction: 'Brainstorm using all three suites — each plays to its strength:\n' +
+For reproducible regression coverage that runs on every PR, use the project's configured test framework and existing test directory instead of any interactive QA skill. Reserve the tools above for exploration, dogfooding, and one-shot visual debugging.`,
+    brainstormingInstruction: 'Use only skills and tools actually available in this session. If a named skill is unavailable, perform its described planning or review steps directly. Do not install tools or expand permissions automatically.\n' +
+        'Brainstorm using all three suites — each plays to its strength:\n' +
         '1. Early product framing: prefer gstack `/office-hours` for product-shaped work (six forcing questions + design doc), or `ecc:plan` (or `subagent_type: "ecc:planner"`) for ECC-style spec expansion (features, sprints, evaluation criteria). Fall back to `superpowers:brainstorming` for purely infra/refactor work where neither product lens applies.\n' +
         '2. Plan construction — pick whichever fits the work better:\n' +
         '   - gstack `/autoplan` for the chained CEO/design/eng/DX pipeline (auto-detects which apply).\n' +
@@ -205,6 +210,8 @@ For reproducible regression coverage that runs on every PR, prefer **Cypress** s
  * Empty-string or whitespace-only overrides fall back to AGNOSTIC defaults.
  */
 export function getSuitePrompts(suite, overrides) {
+    if (suite === 'standard')
+        return AGNOSTIC_PROMPTS;
     if (suite === 'superpowers')
         return SUPERPOWERS_PROMPTS;
     if (suite === 'gstack')

package/dist/server/services/templates-service.js

@@ -1,6 +1,12 @@
+import { createHash } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
 import { getTemplatesPath } from '../utils/paths.js';
+const LEGACY_DEFAULT_CONTENT_HASHES = {
+    'kobo-context': 'ee29ebb56186ce9537e682c25d9d7737ff8d824ab6f29c095c925b27eed70552',
+    'pr-review-comments': '67dfc29fb0c566349a72d9375e314269f061fd184d3a73c9a6bf00451a0f4d9e',
+    'ci-status': 'a96fc75efa7c1f11b58163d8a0d2912f9b22d980087ed224341979c08c250bc8',
+};
 const CURRENT_FILE_VERSION = 2;
 const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,63}$/;
 const MAX_CONTENT_LENGTH = 4096;
@@ -20,7 +26,24 @@ export function listTemplates() {
         if (parsed.version !== CURRENT_FILE_VERSION) {
             console.warn(`[templates-service] templates.json has version ${parsed.version}, expected ${CURRENT_FILE_VERSION}. Reading best-effort.`);
         }
-        return Array.isArray(parsed.templates) ? parsed.templates : [];
+        const templates = Array.isArray(parsed.templates) ? parsed.templates : [];
+        let changed = false;
+        for (const template of templates) {
+            const previousHash = LEGACY_DEFAULT_CONTENT_HASHES[template.slug];
+            if (!previousHash || typeof template.content !== 'string')
+                continue;
+            if (createHash('sha256').update(template.content).digest('hex') !== previousHash)
+                continue;
+            const next = DEFAULT_TEMPLATES.find((value) => value.slug === template.slug);
+            if (!next || next.content === template.content)
+                continue;
+            template.content = next.content;
+            template.updatedAt = new Date().toISOString();
+            changed = true;
+        }
+        if (changed)
+            writeTemplates(templates, parsed.seededDefaultSlugs);
+        return templates;
     }
     catch (err) {
         console.error('[templates-service] Failed to read templates.json:', err);
@@ -198,9 +221,9 @@ export const DEFAULT_TEMPLATES = [
             `- A dedicated MCP server (\`kobo-tasks\`) exposing tools to read/write workspace state\n\n` +
             `# Lifecycle\n` +
             `1. **Brainstorming** — you scope the work, output a plan, end with the literal marker \`[BRAINSTORM_COMPLETE]\`\n` +
-            `2. **Executing** — you implement the plan, commit, push\n` +
-            `3. **Auto-loop (opt-in)** — Kōbō re-spawns a fresh session per task; each iteration sees a clean context\n` +
-            `4. **Completed / Archived** — the workspace freezes; the worktree stays available read-only\n\n` +
+            `2. **Executing** — you implement and verify the plan locally; commit, push and publication require explicit authorization\n` +
+            `3. **Auto-loop (opt-in)** — Kōbō runs iterations using the configured session mode, with durable tasks and instructions\n` +
+            `4. **Completed / Archived** — completion records lifecycle state; archiving hides the workspace without making its worktree read-only\n\n` +
             `# Kōbō MCP tools (always namespaced \`kobo__…\`)\n` +
             `These are the main tools — the full \`kobo__\` set is larger and is listed in your available tools; consult that list for the rest (dev-server, search_codebase, documents, settings, session usage…).\n` +
             `- \`kobo__list_tasks\` / \`create_task\` / \`update_task\` / \`mark_task_done\` / \`delete_task\` — manage the visible task list\n` +
@@ -213,7 +236,7 @@ export const DEFAULT_TEMPLATES = [
             `- \`kobo__mark_auto_loop_ready\` — flip the loop into auto-execution after grooming\n\n` +
             `# Foreground & waking yourself\n` +
             `- You run in the FOREGROUND of an interactive session — do your work within the current turn\n` +
-            `- When a turn ends the workspace goes idle; nothing re-invokes you automatically. A background task or detached process finishing does NOT wake you\n` +
+            `- When a turn ends the workspace goes idle; automatic continuation depends on enabled auto-loop, schedules and lifecycle settings. A background task or detached process finishing does NOT wake you\n` +
             `- To wait and continue later (CI, long build, scheduled check), schedule your own wake-up: \`kobo__schedule_wakeup\` (one-off delay) or \`kobo__cron_create\` (recurring), then end the turn\n\n` +
             `# Conventions\n` +
             `- \`CLAUDE.md\` / \`AGENTS.md\` at the project root override default behavior — read them first\n` +
@@ -271,12 +294,12 @@ export const DEFAULT_TEMPLATES = [
     {
         slug: 'pr-review-comments',
         description: 'List PR review comments requesting changes',
-        content: 'Check if a pull request exists for branch {working_branch}.\n\nIf a PR exists (PR {pr_url}):\n1. Use the GitHub MCP tools to fetch the PR reviews and comments\n2. Filter for reviews with status "CHANGES_REQUESTED"\n3. List each review comment with:\n   - The reviewer name\n   - The file and line referenced\n   - The comment body\n   - Whether it has been resolved\n4. Summarize the outstanding requested changes that still need to be addressed\n\nIf no PR exists, say so and suggest pushing the branch first.',
+        content: 'Check if a pull request exists for branch {working_branch}.\n\nIf a PR exists (PR {pr_url}):\n1. Use the configured forge tools or CLI to fetch the PR reviews and comments\n2. Filter for reviews with status "CHANGES_REQUESTED"\n3. List each review comment with:\n   - The reviewer name\n   - The file and line referenced\n   - The comment body\n   - Whether it has been resolved\n4. Summarize the outstanding requested changes that still need to be addressed\n\nIf no PR exists, report that no PR/MR exists; do not push or publish without authorization.',
     },
     {
         slug: 'ci-status',
-        description: 'Check GitHub Actions status on PR',
-        content: 'Check the CI/CD status for the pull request on branch {working_branch}.\n\nIf a PR exists (PR {pr_url}):\n1. Use the GitHub MCP tools to list the check runs / status checks on the latest commit of the PR\n2. For each check, report:\n   - Check name\n   - Status (queued, in_progress, completed)\n   - Conclusion (success, failure, neutral, skipped, etc.)\n   - Duration if available\n3. If any checks failed, fetch the logs or annotations and summarize what went wrong\n4. Give an overall summary: all green, some failing, or still running\n\nIf no PR exists, say so and suggest creating one first.',
+        description: 'Check CI status on the configured forge',
+        content: 'Check the CI/CD status for the pull request on branch {working_branch}.\n\nIf a PR exists (PR {pr_url}):\n1. Use the configured forge tools or CLI to list the check runs / status checks on the latest commit of the PR\n2. For each check, report:\n   - Check name\n   - Status (queued, in_progress, completed)\n   - Conclusion (success, failure, neutral, skipped, etc.)\n   - Duration if available\n3. If any checks failed, fetch the logs or annotations and summarize what went wrong\n4. Give an overall summary: all green, some failing, or still running\n\nIf no PR exists, report that no PR/MR exists; do not create one without authorization.',
     },
     {
         slug: 'council',

package/dist/server/services/terminal-service.js

@@ -1,6 +1,21 @@
 import fs from 'node:fs';
 import * as pty from 'node-pty';
+import { ensureSpawnHelperExecutable } from '../utils/node-pty-spawn-helper.js';
 const terminals = new Map();
+let spawnHelperChecked = false;
+function prepareSpawnHelper() {
+    if (spawnHelperChecked)
+        return;
+    spawnHelperChecked = true;
+    try {
+        const fixed = ensureSpawnHelperExecutable();
+        if (fixed)
+            console.log(`[terminal] Made node-pty spawn-helper executable: ${fixed}`);
+    }
+    catch (err) {
+        console.warn('[terminal] node-pty spawn-helper is not executable and could not be fixed (run chmod +x on it):', err);
+    }
+}
 export function createTerminal(workspaceId, cwd) {
     if (terminals.has(workspaceId)) {
         return terminals.get(workspaceId).pty;
@@ -8,6 +23,7 @@ export function createTerminal(workspaceId, cwd) {
     if (!fs.existsSync(cwd)) {
         throw new Error(`Worktree directory does not exist: ${cwd}`);
     }
+    prepareSpawnHelper();
     const shell = process.env.SHELL || '/bin/sh';
     const term = pty.spawn(shell, [], {
         name: 'xterm-256color',

package/dist/server/services/wakeup-service.js

@@ -45,11 +45,11 @@ const failedRetries = new Map();
 /** Keep a claimed wakeup durable while the session is still unavailable. */
 function defer(workspaceId, row) {
     const targetAt = new Date(Date.now() + ACTIVE_SESSION_RETRY_MS).toISOString();
-    getDb().prepare('UPDATE pending_wakeups SET target_at = ? WHERE workspace_id = ?').run(targetAt, workspaceId);
+    getDb().prepare('UPDATE pending_wakeups SET retry_at = ? WHERE workspace_id = ?').run(targetAt, workspaceId);
     const timeout = setTimeout(() => fire(workspaceId), ACTIVE_SESSION_RETRY_MS);
     timeout.unref?.();
     timers.set(workspaceId, timeout);
-    emitEphemeral(workspaceId, 'wakeup:scheduled', { targetAt, reason: row.reason ?? undefined });
+    emitEphemeral(workspaceId, 'wakeup:scheduled', { targetAt: row.target_at, reason: row.reason ?? undefined });
 }
 /** Schedule a wakeup for the given workspace. Replaces any existing pending wakeup. */
 export function schedule(workspaceId, delaySeconds, prompt, reason, agentSessionId) {
@@ -124,7 +124,7 @@ export function getPending(workspaceId) {
 export function isWakeupScheduled(workspaceId) {
     return getPending(workspaceId) !== null;
 }
-/** Re-register timers for rows persisted across restart. Skips stale entries. */
+/** Re-register persisted timers. Previously deferred work survives downtime; only never-attempted stale wakeups expire. */
 export function rehydrate() {
     suspendForShutdown();
     suspended = false;
@@ -134,14 +134,16 @@ export function rehydrate() {
         const now = Date.now();
         for (const row of rows) {
             try {
-                const target = new Date(row.target_at).getTime();
+                const target = new Date(row.retry_at ?? row.target_at).getTime();
                 const delay = target - now;
                 if (delay > 0) {
                     const timeout = setTimeout(() => fire(row.workspace_id), delay);
                     timeout.unref?.();
                     timers.set(row.workspace_id, timeout);
                 }
-                else if (-delay <= STALE_WAKEUP_GRACE_MS) {
+                else if (row.retry_at != null || -delay <= STALE_WAKEUP_GRACE_MS) {
+                    // Admission deferred this wakeup after its deadline. Downtime does not
+                    // revoke the pending instruction; retry through the same admission gate.
                     const timeout = setTimeout(() => fire(row.workspace_id), 0);
                     timeout.unref?.();
                     timers.set(row.workspace_id, timeout);