@pellux/goodvibes-sdk 0.33.36 → 0.33.38

package/dist/platform/agents/wrfc-controller.d.ts

@@ -9,6 +9,11 @@ import type { RuntimeEventBus } from '../runtime/events/index.js';
 import type { ProjectWorkPlanTaskCreateInput, ProjectWorkPlanTaskUpdateInput } from '../knowledge/project-planning/index.js';
 import { type AgentManagerLike } from './wrfc-config.js';
 export { extractScoreFromText, extractPassedFromText, extractIssuesFromText } from './wrfc-reporting.js';
+/**
+ * Schema version for the serialized WRFC chain envelope.
+ * Increment when the WrfcChain shape changes in an incompatible way.
+ */
+export declare const CURRENT_WRFC_CHAIN_SCHEMA_VERSION = 1;
 type WrfcWorktreeOps = Pick<AgentWorktree, 'merge' | 'cleanup'> & Partial<Pick<AgentWorktree, 'commitWorkingTree' | 'currentHead'>>;
 type WrfcWorkPlanService = {
     createWorkPlanTask(input: ProjectWorkPlanTaskCreateInput): Promise<unknown>;
@@ -22,6 +27,9 @@ export declare class WrfcController {
     private readonly sessionId;
     private readonly workmap;
     private readonly projectRoot;
+    private readonly skipClaimVerification;
+    /** Cached at construction time: whether projectRoot existed on disk when this controller was created. */
+    private readonly projectRootExistedAtStartup;
     private runtimeBus;
     private readonly messageBus;
     private planManager;
@@ -31,6 +39,10 @@ export declare class WrfcController {
     private readonly selectChildRoute;
     private workPlanService;
     private readonly workPlanTaskQueues;
+    /** Tracks last-seen timestamp per agent for watchdog timeout. */
+    private readonly agentLastSeen;
+    /** Active watchdog timer handle, if any. */
+    private watchdogTimer;
     constructor(runtimeBus: RuntimeEventBus, messageBus: Pick<AgentMessageBus, 'registerAgent'>, deps: {
         readonly agentManager: AgentManagerLike;
         readonly configManager: Pick<ConfigManager, 'get' | 'getCategory'>;
@@ -38,6 +50,13 @@ export declare class WrfcController {
         readonly surfaceRoot?: string | undefined;
         readonly createWorktree?: (() => WrfcWorktreeOps) | undefined;
         readonly selectChildRoute?: WrfcChildRouteSelector | undefined;
+        /**
+         * When true, skip verifyEngineerClaims for both engineer and fixer completions.
+         * Use ONLY in test harnesses where projectRoot is a synthetic path without real files.
+         * Production code must NEVER set this flag — it disables the phantom-work guard.
+         * Prefer the environment-driven skip (nonexistent projectRoot) where possible.
+         */
+        readonly skipClaimVerification?: boolean;
     });
     createChain(ownerRecord: AgentRecord): WrfcChain;
     getSessionId(): string;
@@ -49,6 +68,34 @@ export declare class WrfcController {
     listChains(): WrfcChain[];
     resumeChain(chainId: string): boolean;
     resumeAllActiveChains(): number;
+    /**
+     * Item 3: Serialize a chain to a JSON string for durable storage.
+     * Returns null if the chain does not exist.
+     */
+    serializeChain(chainId: string): string | null;
+    /**
+     * Item 3: Deserialize a chain from a JSON string.
+     * Returns null if the JSON is invalid, the required fields are missing, or
+     * the schema version is newer than this runtime supports.
+     *
+     * Schema versioning:
+     * - Missing schemaVersion (v0/legacy): accepted for back-compat — the JSON
+     *   is the raw chain object directly.
+     * - schemaVersion === CURRENT_WRFC_CHAIN_SCHEMA_VERSION (1): unwrap { schemaVersion, chain }.
+     * - schemaVersion > CURRENT_WRFC_CHAIN_SCHEMA_VERSION: rejected — fail closed.
+     */
+    deserializeChain(json: string): WrfcChain | null;
+    /**
+     * Item 3: Import a deserialized chain into this controller instance.
+     * After importing, call resumeChain(chain.id) to continue from recorded state.
+     *
+     * Refuses to overwrite a non-terminal chain (state is not 'passed' or 'failed')
+     * to prevent accidental clobber of live chains. Use force=true to override.
+     * Always overwrites terminal chains (idempotent replay is safe for completed work).
+     *
+     * Returns true if the chain was imported, false if refused.
+     */
+    importChain(chain: WrfcChain, force?: boolean): boolean;
     dispose(): void;
     private transition;
     private applyWrfcAgentMetadata;
@@ -56,6 +103,33 @@ export declare class WrfcController {
     private ownerProgress;
     private wrfcPhaseOrder;
     private setupListeners;
+    /**
+     * Start (or restart) the watchdog timer based on current config.
+     * Called once on setup and whenever the timeout config may have changed.
+     */
+    private resetWatchdog;
+    /** Tick: fail any chain whose active child agent has been silent longer than timeoutMs. */
+    private tickWatchdog;
+    /**
+     * Returns true when verifyEngineerClaims should be skipped for a completion event.
+     *
+     * Skip conditions (applied uniformly to engineer AND fixer completions):
+     *   1. `this.skipClaimVerification` is true — explicit opt-out for test harnesses that
+     *      use real /tmp paths (directories that exist on disk) where files are never actually
+     *      written to disk by agents. Use this when the environment-driven skip does not apply.
+     *   2. `!this.projectRootExistedAtStartup` — environment-driven skip: projectRoot did not
+     *      exist on disk when this controller was constructed. Cached at construction time because
+     *      the WrfcWorkmap mkdir's the directory tree on the first appendOwnerDecision call,
+     *      making a late-bound existsSync check unreliable (would always return true after that).
+     *      Preferred mechanism; harnesses should use nonexistent projectRoot paths when feasible.
+     *
+     * PRODUCTION INVARIANT: In any real GoodVibes session the projectRoot is the cloned
+     * repo root which always exists at startup. Both skip conditions are false in production;
+     * claim verification always runs for both engineer and fixer completions.
+     */
+    private shouldSkipClaimVerification;
+    /** Returns the single currently-active child agent ID for a chain, if deterministic. */
+    private activeChildAgentId;
     private onAgentComplete;
     private onAgentFailed;
     private onAgentCancelled;

package/dist/platform/agents/wrfc-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrfc-controller.d.ts","sourceRoot":"","sources":["../../../src/platform/agents/wrfc-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AASnD,OAAO,KAAK,EAGV,SAAS,EACT,sBAAsB,EAMvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,KAAK,EACV,8BAA8B,EAE9B,8BAA8B,EAC/B,MAAM,wCAAwC,CAAC;AAUhD,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAmB1B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAezG,KAAK,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,GAAG,aAAa,CAAC,CAAC,CAAC;AACpI,KAAK,mBAAmB,GAAG;IACzB,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E,CAAC;AASF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IACpE,OAAO,CAAC,WAAW,CAAuE;IAC1F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,eAAe,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoC;gBAGrE,UAAU,EAAE,eAAe,EAC3B,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAClD,IAAI,EAAE;QACJ,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,CAAC;QACnE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,eAAe,CAAC,GAAG,SAAS,CAAC;QAC9D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;KAChE;IAcH,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS;IAyBhD,YAAY,IAAI,MAAM;IAEtB,UAAU,IAAI,WAAW;IAEzB,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG,IAAI;IAIzF,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI;IAOhD,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAIzE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAE3C,UAAU,IAAI,SAAS,EAAE;IAEzB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAwBrC,qBAAqB,IAAI,MAAM;IAQ/B,OAAO,IAAI,IAAI;IAKf,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,oBAAoB;IAiC5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,cAAc;YA2BR,eAAe;IAiF7B,OAAO,CAAC,aAAa;IA0BrB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,WAAW;YAyDL,aAAa;IA4G3B,OAAO,CAAC,QAAQ;YAuEF,QAAQ;IAuBtB,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,0BAA0B;YA4CpB,kBAAkB;IAoHhC,OAAO,CAAC,oBAAoB;YASd,sBAAsB;YAsCtB,UAAU;IA0DxB,OAAO,CAAC,2BAA2B;IA8BnC,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,WAAW;YAqCL,WAAW;IAyBzB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,kBAAkB;IAE1B,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,eAAe;IA8CvB,OAAO,CAAC,qBAAqB;IA8C7B,OAAO,CAAC,6BAA6B;IAoDrC,OAAO,CAAC,wBAAwB;IA0EhC,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,4BAA4B;IA0BpC,OAAO,CAAC,oBAAoB;YAad,8BAA8B;IAsB5C,OAAO,CAAC,gCAAgC;IAsExC,OAAO,CAAC,0BAA0B;YAgDpB,4BAA4B;IAmE1C,OAAO,CAAC,uBAAuB;IAuD/B,OAAO,CAAC,gBAAgB;IAqCxB,OAAO,CAAC,0BAA0B;IAalC,OAAO,CAAC,kCAAkC;IAiB1C,OAAO,CAAC,cAAc;IAuCtB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,kBAAkB;IAiC1B,OAAO,CAAC,sBAAsB;IAqD9B,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,gCAAgC;IAgCxC,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;CAKxB"}
+{"version":3,"file":"wrfc-controller.d.ts","sourceRoot":"","sources":["../../../src/platform/agents/wrfc-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUnD,OAAO,KAAK,EAGV,SAAS,EACT,sBAAsB,EAMvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAG3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,KAAK,EACV,8BAA8B,EAE9B,8BAA8B,EAC/B,MAAM,wCAAwC,CAAC;AAUhD,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAmB1B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEzG;;;GAGG;AACH,eAAO,MAAM,iCAAiC,IAAI,CAAC;AAenD,KAAK,eAAe,GAAG,IAAI,CAAC,aAAa,EAAE,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,GAAG,aAAa,CAAC,CAAC,CAAC;AACpI,KAAK,mBAAmB,GAAG;IACzB,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E,CAAC;AASF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAU;IAChD,yGAAyG;IACzG,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IACtD,OAAO,CAAC,UAAU,CAAkB;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyC;IACpE,OAAO,CAAC,WAAW,CAAuE;IAC1F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAgC;IACjE,OAAO,CAAC,eAAe,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoC;IACvE,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;IAC3D,4CAA4C;IAC5C,OAAO,CAAC,aAAa,CAA+C;gBAGlE,UAAU,EAAE,eAAe,EAC3B,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,EAClD,IAAI,EAAE;QACJ,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;QACxC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,aAAa,CAAC,CAAC;QACnE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,eAAe,CAAC,GAAG,SAAS,CAAC;QAC9D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;QAC/D;;;;;WAKG;QACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;KAC1C;IAkBH,WAAW,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS;IAyBhD,YAAY,IAAI,MAAM;IAEtB,UAAU,IAAI,WAAW;IAEzB,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG,IAAI;IAIzF,aAAa,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI;IAOhD,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAIzE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAE3C,UAAU,IAAI,SAAS,EAAE;IAEzB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IA8ErC,qBAAqB,IAAI,MAAM;IAQ/B;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAW9C;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IA+ChD;;;;;;;;;OASG;IACH,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,UAAQ,GAAG,OAAO;IAkBrD,OAAO,IAAI,IAAI;IASf,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,oBAAoB;IAiC5B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;IAmBtB,OAAO,CAAC,cAAc;IAmDtB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAgBrB,2FAA2F;IAC3F,OAAO,CAAC,YAAY;IA0BpB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,2BAA2B;IAInC,wFAAwF;IACxF,OAAO,CAAC,kBAAkB;YAQZ,eAAe;IAiF7B,OAAO,CAAC,aAAa;IA0BrB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,WAAW;YAyDL,aAAa;IA6G3B,OAAO,CAAC,QAAQ;YAuEF,QAAQ;IAuBtB,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,0BAA0B;YA4CpB,kBAAkB;IAoHhC,OAAO,CAAC,oBAAoB;YASd,sBAAsB;YAsCtB,UAAU;IA0DxB,OAAO,CAAC,2BAA2B;IA8BnC,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,SAAS;IAuCjB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,WAAW;YAqCL,WAAW;IAyBzB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,cAAc;IAEtB,OAAO,CAAC,kBAAkB;IAE1B,OAAO,CAAC,mBAAmB;IA0C3B,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,eAAe;IA8CvB,OAAO,CAAC,qBAAqB;IA8C7B,OAAO,CAAC,6BAA6B;IAoDrC,OAAO,CAAC,wBAAwB;IAiIhC,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,4BAA4B;IA0BpC,OAAO,CAAC,oBAAoB;YAad,8BAA8B;IAsB5C,OAAO,CAAC,gCAAgC;IA6GxC,OAAO,CAAC,0BAA0B;YAgDpB,4BAA4B;IAoE1C,OAAO,CAAC,uBAAuB;IAuD/B,OAAO,CAAC,gBAAgB;IAqCxB,OAAO,CAAC,0BAA0B;IAalC,OAAO,CAAC,kCAAkC;IAiB1C,OAAO,CAAC,cAAc;IAuCtB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,kBAAkB;IAiC1B,OAAO,CAAC,sBAAsB;IAqD9B,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,gCAAgC;IAgCxC,OAAO,CAAC,oBAAoB;IAiB5B,OAAO,CAAC,sBAAsB;IAQ9B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,eAAe;CAKxB"}

package/dist/platform/agents/wrfc-controller.js

@@ -2,18 +2,23 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import { AgentMessageBus } from './message-bus.js';
 import {} from './completion-report.js';
-import { buildGateFailureTask, buildFixTask, buildReviewTask, parseEngineerCompletionReport, parseReviewerCompletionReport, } from './wrfc-reporting.js';
+import { buildGateFailureTask, buildFixTask, buildReviewTask, parseEngineerCompletionReport, parseReviewerCompletionReport, verifyEngineerClaims, } from './wrfc-reporting.js';
 import { WrfcWorkmap } from './wrfc-workmap.js';
 import { AgentWorktree } from './worktree.js';
 import { completePlanItemsForAgent } from './wrfc-plan-sync.js';
 import { logger } from '../utils/logger.js';
 import { summarizeError } from '../utils/error-display.js';
 import { emitAgentCompleted, emitAgentFailed, emitAgentProgress, emitAgentRunning, emitWorkflowChainFailed, emitWorkflowFixAttempted, emitWorkflowReviewCompleted, } from '../runtime/emitters/index.js';
-import { getWrfcAutoCommit, getWrfcMaxFixAttempts, getWrfcScoreThreshold, } from './wrfc-config.js';
+import { getWrfcAutoCommit, getWrfcMaxFixAttempts, getWrfcScoreThreshold, getWrfcAgentHeartbeatTimeoutMs, } from './wrfc-config.js';
 import { buildEngineerConstraintAddendum, } from './wrfc-prompt-addenda.js';
 import { completeWrfcOrchestrationNode, createWrfcWorkflowContext, emitWrfcAutoCommitted, emitWrfcCascadeAbort, emitWrfcChainCreated, emitWrfcChainPassed, emitWrfcConstraintsEnumerated, emitWrfcGraphCreated, emitWrfcStateChanged, failWrfcOrchestrationNode, startWrfcOrchestrationNode, } from './wrfc-runtime-events.js';
 import { runWrfcGateChecks } from './wrfc-gate-runtime.js';
 export { extractScoreFromText, extractPassedFromText, extractIssuesFromText } from './wrfc-reporting.js';
+/**
+ * Schema version for the serialized WRFC chain envelope.
+ * Increment when the WrfcChain shape changes in an incompatible way.
+ */
+export const CURRENT_WRFC_CHAIN_SCHEMA_VERSION = 1;
 const VALID_TRANSITIONS = {
     pending: ['engineering'],
     engineering: ['integrating', 'reviewing', 'failed'],
@@ -34,6 +39,9 @@ export class WrfcController {
     sessionId;
     workmap;
     projectRoot;
+    skipClaimVerification;
+    /** Cached at construction time: whether projectRoot existed on disk when this controller was created. */
+    projectRootExistedAtStartup;
     runtimeBus;
     messageBus;
     planManager = null;
@@ -43,12 +51,20 @@ export class WrfcController {
     selectChildRoute;
     workPlanService = null;
     workPlanTaskQueues = new Map();
+    /** Tracks last-seen timestamp per agent for watchdog timeout. */
+    agentLastSeen = new Map();
+    /** Active watchdog timer handle, if any. */
+    watchdogTimer = null;
     constructor(runtimeBus, messageBus, deps) {
         this.runtimeBus = runtimeBus;
         this.messageBus = messageBus;
         this.agentManager = deps.agentManager;
         this.configManager = deps.configManager;
         this.projectRoot = deps.projectRoot;
+        this.skipClaimVerification = deps.skipClaimVerification ?? false;
+        // Cache existsSync at construction time — the workmap will mkdir under projectRoot
+        // during the first appendOwnerDecision, so checking later would always return true.
+        this.projectRootExistedAtStartup = existsSync(deps.projectRoot);
         this.createWorktree = deps.createWorktree ?? (() => new AgentWorktree(this.projectRoot));
         this.selectChildRoute = deps.selectChildRoute ?? null;
         this.sessionId = crypto.randomUUID().slice(0, 8);
@@ -102,10 +118,6 @@ export class WrfcController {
             this.appendOwnerDecision(chain, 'resume_skipped', 'WRFC chain already has an active child agent');
             return true;
         }
-        if (chain.state !== 'pending') {
-            this.appendOwnerDecision(chain, 'resume_skipped', `WRFC chain state ${chain.state} cannot be resumed without an active phase result`);
-            return true;
-        }
         if (this.activeChainCount >= MAX_ACTIVE_CHAINS) {
             if (!this.chainQueue.some((queued) => queued.record.id === chain.ownerAgentId)) {
                 const owner = this.agentManager.getStatus(chain.ownerAgentId);
@@ -115,6 +127,62 @@ export class WrfcController {
             this.appendOwnerDecision(chain, 'resume_skipped', 'WRFC chain is queued because active chain capacity is full');
             return true;
         }
+        // Item 3: Resume interrupted chains from their recorded state.
+        if (chain.state === 'reviewing') {
+            // Re-spawn reviewer using the last engineer report on record.
+            const report = chain.engineerReport;
+            if (report) {
+                this.appendOwnerDecision(chain, 'resume_started', `WRFC owner re-spawning reviewer for interrupted chain (was reviewing)`);
+                // MIN-6: Re-inject phantom-work synthetic issue on resume if claimsVerified was false,
+                // so the flag is not silently laundered by the startReview synthetic-issue clear.
+                // NOTE: We intentionally only re-inject for claimsVerified===false (kind='unverified').
+                // The 'unverifiable_no_claims' path leaves claimsVerified===undefined; if that chain
+                // was interrupted mid-review, the reviewer already received the synthetic issue in
+                // its task text during startReview — it does not need re-injection on resume.
+                if (chain.claimsVerified === false) {
+                    chain.syntheticIssues ??= [];
+                    const alreadyInjected = chain.syntheticIssues.some((issue) => issue.description.includes('Claimed work not found on disk') ||
+                        issue.description.includes('No work claimed and no git diff'));
+                    if (!alreadyInjected) {
+                        chain.syntheticIssues.push({
+                            severity: 'critical',
+                            description: 'Claimed work not found on disk (re-injected on resume): claimsVerified=false from prior engineering phase',
+                        });
+                    }
+                }
+                // Reset to engineering so transition() accepts reviewing.
+                chain.state = 'engineering';
+                this.startReview(chain, report);
+                return true;
+            }
+            this.appendOwnerDecision(chain, 'resume_skipped', 'WRFC chain in reviewing state but no engineer report found for re-review');
+            return true;
+        }
+        if (chain.state === 'fixing') {
+            // Re-spawn fixer using the last reviewer report.
+            const reviewerReport = chain.reviewerReport;
+            if (reviewerReport) {
+                this.appendOwnerDecision(chain, 'resume_started', `WRFC owner re-spawning fixer for interrupted chain (was fixing)`);
+                // Reset to reviewing so transition() will allow fixing.
+                chain.state = 'reviewing';
+                this.startFix(chain, reviewerReport);
+                return true;
+            }
+            this.appendOwnerDecision(chain, 'resume_skipped', 'WRFC chain in fixing state but no reviewer report found for re-fix');
+            return true;
+        }
+        if (chain.state === 'awaiting_gates') {
+            this.appendOwnerDecision(chain, 'resume_started', `WRFC owner re-running gates for interrupted chain (was awaiting_gates)`);
+            this.checkAndRunGatesForAll().catch((error) => {
+                logger.error('WrfcController.resumeChain: gate phase error', { chainId: chain.id, error: summarizeError(error) });
+                this.failChain(chain, `Gate phase error during resume: ${summarizeError(error)}`);
+            });
+            return true;
+        }
+        if (chain.state !== 'pending') {
+            this.appendOwnerDecision(chain, 'resume_skipped', `WRFC chain state ${chain.state} cannot be resumed`);
+            return true;
+        }
         this.appendOwnerDecision(chain, 'resume_started', 'WRFC owner resumed pending chain');
         this.startEngineeringChain(chain, false);
         return true;
@@ -127,10 +195,110 @@ export class WrfcController {
         }
         return resumed;
     }
+    /**
+     * Item 3: Serialize a chain to a JSON string for durable storage.
+     * Returns null if the chain does not exist.
+     */
+    serializeChain(chainId) {
+        const chain = this.chains.get(chainId);
+        if (!chain)
+            return null;
+        try {
+            return JSON.stringify({ schemaVersion: CURRENT_WRFC_CHAIN_SCHEMA_VERSION, chain });
+        }
+        catch (error) {
+            logger.error('WrfcController.serializeChain: JSON serialization failed', { chainId, error: summarizeError(error) });
+            return null;
+        }
+    }
+    /**
+     * Item 3: Deserialize a chain from a JSON string.
+     * Returns null if the JSON is invalid, the required fields are missing, or
+     * the schema version is newer than this runtime supports.
+     *
+     * Schema versioning:
+     * - Missing schemaVersion (v0/legacy): accepted for back-compat — the JSON
+     *   is the raw chain object directly.
+     * - schemaVersion === CURRENT_WRFC_CHAIN_SCHEMA_VERSION (1): unwrap { schemaVersion, chain }.
+     * - schemaVersion > CURRENT_WRFC_CHAIN_SCHEMA_VERSION: rejected — fail closed.
+     */
+    deserializeChain(json) {
+        let raw;
+        try {
+            raw = JSON.parse(json);
+        }
+        catch (error) {
+            logger.error('WrfcController.deserializeChain: JSON parse failed', { error: summarizeError(error) });
+            return null;
+        }
+        // Unwrap schema-versioned envelope or treat as legacy (v0) raw chain.
+        let candidate;
+        if (raw !== null
+            && typeof raw === 'object'
+            && 'schemaVersion' in raw
+            && typeof raw.schemaVersion === 'number') {
+            const version = raw.schemaVersion;
+            if (version > CURRENT_WRFC_CHAIN_SCHEMA_VERSION) {
+                logger.error('WrfcController.deserializeChain: future schemaVersion rejected — upgrade runtime to read this payload', {
+                    schemaVersion: version,
+                    supportedVersion: CURRENT_WRFC_CHAIN_SCHEMA_VERSION,
+                });
+                return null;
+            }
+            // version <= current: unwrap the chain field.
+            candidate = raw.chain;
+        }
+        else {
+            // Legacy v0: the JSON payload IS the chain directly.
+            candidate = raw;
+        }
+        // Structural validation of required fields.
+        if (!candidate
+            || typeof candidate !== 'object'
+            || !('id' in candidate) || typeof candidate.id !== 'string'
+            || !('state' in candidate) || typeof candidate.state !== 'string'
+            || !('ownerAgentId' in candidate) || typeof candidate.ownerAgentId !== 'string'
+            || !('task' in candidate) || typeof candidate.task !== 'string') {
+            logger.warn('WrfcController.deserializeChain: invalid chain JSON — missing required fields (id, state, ownerAgentId, task)');
+            return null;
+        }
+        return candidate;
+    }
+    /**
+     * Item 3: Import a deserialized chain into this controller instance.
+     * After importing, call resumeChain(chain.id) to continue from recorded state.
+     *
+     * Refuses to overwrite a non-terminal chain (state is not 'passed' or 'failed')
+     * to prevent accidental clobber of live chains. Use force=true to override.
+     * Always overwrites terminal chains (idempotent replay is safe for completed work).
+     *
+     * Returns true if the chain was imported, false if refused.
+     */
+    importChain(chain, force = false) {
+        const existing = this.chains.get(chain.id);
+        if (existing && existing.state !== 'passed' && existing.state !== 'failed' && !force) {
+            logger.warn('WrfcController.importChain: refused — existing chain is non-terminal; use force=true to overwrite', {
+                chainId: chain.id,
+                existingState: existing.state,
+            });
+            return false;
+        }
+        this.chains.set(chain.id, chain);
+        logger.info('WrfcController.importChain: chain imported', {
+            chainId: chain.id,
+            state: chain.state,
+            overwroteExisting: existing !== undefined,
+        });
+        return true;
+    }
     dispose() {
         for (const unsub of this.unsubscribers)
             unsub();
         this.unsubscribers = [];
+        if (this.watchdogTimer !== null) {
+            clearInterval(this.watchdogTimer);
+            this.watchdogTimer = null;
+        }
     }
     transition(chain, to) {
         const allowed = VALID_TRANSITIONS[chain.state];
@@ -237,6 +405,7 @@ export class WrfcController {
     }
     setupListeners() {
         const unsubComplete = this.runtimeBus.on('AGENT_COMPLETED', ({ payload }) => {
+            this.agentLastSeen.set(payload.agentId, Date.now());
             this.onAgentComplete(payload.agentId).catch((error) => {
                 logger.error('WrfcController.onAgentComplete unhandled error', {
                     agentId: payload.agentId,
@@ -245,12 +414,104 @@ export class WrfcController {
             });
         });
         const unsubError = this.runtimeBus.on('AGENT_FAILED', ({ payload }) => {
+            this.agentLastSeen.set(payload.agentId, Date.now());
             this.onAgentFailed(payload.agentId, payload.error);
         });
         const unsubCancelled = this.runtimeBus.on('AGENT_CANCELLED', ({ payload }) => {
+            this.agentLastSeen.set(payload.agentId, Date.now());
             this.onAgentCancelled(payload.agentId, payload.reason);
         });
-        this.unsubscribers.push(unsubComplete, unsubError, unsubCancelled);
+        const unsubRunning = this.runtimeBus.on('AGENT_RUNNING', ({ payload }) => {
+            this.agentLastSeen.set(payload.agentId, Date.now());
+        });
+        const unsubStreamDelta = this.runtimeBus.on('AGENT_STREAM_DELTA', ({ payload }) => {
+            // MAJ-3: Reset agentLastSeen on streaming output so watchdog does not
+            // time out a streaming-only agent that emits no PROGRESS events.
+            this.agentLastSeen.set(payload.agentId, Date.now());
+        });
+        const unsubProgress = this.runtimeBus.on('AGENT_PROGRESS', ({ payload }) => {
+            this.agentLastSeen.set(payload.agentId, Date.now());
+        });
+        this.unsubscribers.push(unsubComplete, unsubError, unsubCancelled, unsubRunning, unsubProgress, unsubStreamDelta);
+        this.resetWatchdog();
+    }
+    /**
+     * Start (or restart) the watchdog timer based on current config.
+     * Called once on setup and whenever the timeout config may have changed.
+     */
+    resetWatchdog() {
+        if (this.watchdogTimer !== null) {
+            clearInterval(this.watchdogTimer);
+            this.watchdogTimer = null;
+        }
+        const timeoutMs = getWrfcAgentHeartbeatTimeoutMs(this.configManager);
+        if (timeoutMs <= 0)
+            return;
+        // Check at 1/4 the timeout interval, but no less than 50ms (for testability)
+        // and no more than 5 seconds (to avoid excessive polling in production).
+        const intervalMs = Math.min(5_000, Math.max(50, Math.floor(timeoutMs / 4)));
+        this.watchdogTimer = setInterval(() => {
+            this.tickWatchdog(timeoutMs);
+        }, intervalMs);
+        this.watchdogTimer.unref?.();
+    }
+    /** Tick: fail any chain whose active child agent has been silent longer than timeoutMs. */
+    tickWatchdog(timeoutMs) {
+        const now = Date.now();
+        for (const chain of this.chains.values()) {
+            if (chain.state === 'passed' || chain.state === 'failed' || chain.state === 'pending')
+                continue;
+            // Find the active child agent for this chain.
+            const activeAgentId = this.activeChildAgentId(chain);
+            if (!activeAgentId)
+                continue;
+            const record = this.agentManager.getStatus(activeAgentId);
+            if (!record || (record.status !== 'running' && record.status !== 'pending'))
+                continue;
+            const lastSeen = this.agentLastSeen.get(activeAgentId) ?? record.startedAt ?? now;
+            const silentMs = now - lastSeen;
+            if (silentMs >= timeoutMs) {
+                logger.error('WrfcController.watchdog: agent silent, failing chain', {
+                    chainId: chain.id,
+                    agentId: activeAgentId,
+                    silentMs,
+                    timeoutMs,
+                });
+                this.failChain(chain, `Agent ${activeAgentId} went silent for ${Math.round(silentMs / 1000)}s (timeout: ${Math.round(timeoutMs / 1000)}s)`);
+            }
+        }
+    }
+    /**
+     * Returns true when verifyEngineerClaims should be skipped for a completion event.
+     *
+     * Skip conditions (applied uniformly to engineer AND fixer completions):
+     *   1. `this.skipClaimVerification` is true — explicit opt-out for test harnesses that
+     *      use real /tmp paths (directories that exist on disk) where files are never actually
+     *      written to disk by agents. Use this when the environment-driven skip does not apply.
+     *   2. `!this.projectRootExistedAtStartup` — environment-driven skip: projectRoot did not
+     *      exist on disk when this controller was constructed. Cached at construction time because
+     *      the WrfcWorkmap mkdir's the directory tree on the first appendOwnerDecision call,
+     *      making a late-bound existsSync check unreliable (would always return true after that).
+     *      Preferred mechanism; harnesses should use nonexistent projectRoot paths when feasible.
+     *
+     * PRODUCTION INVARIANT: In any real GoodVibes session the projectRoot is the cloned
+     * repo root which always exists at startup. Both skip conditions are false in production;
+     * claim verification always runs for both engineer and fixer completions.
+     */
+    shouldSkipClaimVerification() {
+        return this.skipClaimVerification || !this.projectRootExistedAtStartup;
+    }
+    /** Returns the single currently-active child agent ID for a chain, if deterministic. */
+    activeChildAgentId(chain) {
+        if (chain.state === 'reviewing')
+            return chain.reviewerAgentId ?? null;
+        if (chain.state === 'fixing')
+            return chain.fixerAgentId ?? null;
+        if (chain.state === 'engineering')
+            return chain.engineerAgentId ?? null;
+        if (chain.state === 'integrating')
+            return chain.integratorAgentId ?? null;
+        return null;
     }
     async onAgentComplete(agentId) {
         const chain = this.findChainByAgentId(agentId);
@@ -406,7 +667,8 @@ export class WrfcController {
             });
         }
         const { constraintsSatisfied, constraintsTotal, unsatisfiedConstraintIds, constraintFailure, } = constraintEvaluation;
-        const passed = review.score >= threshold && !constraintFailure;
+        // MIN-4: claimsVerified===false is a mechanical block — cannot pass review regardless of score.
+        const passed = review.score >= threshold && !constraintFailure && chain.claimsVerified !== false;
         this.completeCurrentNode(chain, `Score ${review.score}/10${passed ? ' passed' : ' needs fixes'}`);
         emitWorkflowReviewCompleted(this.runtimeBus, createWrfcWorkflowContext(this.sessionId, chain.id), {
             chainId: chain.id,
@@ -1158,6 +1420,62 @@ export class WrfcController {
             // The authoritative constraint list is NOT overwritten — chain.constraints remains the
             // original enumeration from the initial engineer turn.
         }
+        // Item 2 / MAJ-1 / MAJ-9: Verify claims before handing off to reviewer.
+        // Runs for BOTH the initial engineer pass (chain.state === 'engineering') AND fixer
+        // re-runs (chain.state === 'fixing'). A lying fixer that claims files it did not write
+        // is the same phantom-work pattern as a lying engineer — the same tri-state logic applies.
+        //
+        // Skip conditions (see shouldSkipClaimVerification for full rationale):
+        //   - Explicit opt-out (skipClaimVerification constructor flag) — harness use only.
+        //   - Environment-driven: projectRoot does not exist on disk (existsSync false).
+        //
+        // Tri-state kind logic (same for engineer and fixer passes):
+        //   'files_verified'          → claimsVerified=true,     no synthetic issue.
+        //   'git_corroborated'        → claimsVerified=true,     no synthetic issue.
+        //   'verified_empty'          → claimsVerified=true,     no synthetic issue (git confirms real work, no file list required).
+        //   'unverifiable_no_claims'  → claimsVerified=undefined, inject advisory synthetic issue.
+        //                               NOTE: claimsVerified is left undefined (not false) because we cannot confirm
+        //                               work WAS done, but we also cannot confirm it WASN't. The synthetic issue
+        //                               is the enforcement mechanism — the mechanical MIN-4 gate is NOT applied.
+        //                               For fixers, a zero-claims completion is MORE suspicious (a fix round
+        //                               by definition follows concrete reviewer findings) — but we keep the same
+        //                               advisory contract for consistency; the reviewer sees the synthetic issue.
+        //   'unverified'              → claimsVerified=false,    inject synthetic issue; MIN-4 gate will block pass.
+        if (!this.shouldSkipClaimVerification()) {
+            const claimVerification = verifyEngineerClaims(reportForReview, this.projectRoot);
+            if (claimVerification.kind === 'unverifiable_no_claims') {
+                // Leave chain.claimsVerified as undefined — not a confirmed false, but suspicious.
+                const agentClass = chain.state === 'fixing' ? 'fixer' : 'engineer';
+                logger.warn(`WrfcController: ${agentClass} sent success prose with no claims and no git diff — suspected phantom work`, {
+                    chainId: chain.id,
+                    kind: claimVerification.kind,
+                    summary: claimVerification.summary,
+                });
+                chain.syntheticIssues ??= [];
+                chain.syntheticIssues.push({
+                    severity: 'critical',
+                    description: `No work claimed and no git diff detected — suspected phantom work: ${claimVerification.summary}`,
+                });
+            }
+            else {
+                chain.claimsVerified = claimVerification.verified;
+                if (!claimVerification.verified) {
+                    // kind === 'unverified': claims present but missing on disk and no git corroboration.
+                    const agentClass = chain.state === 'fixing' ? 'fixer' : 'engineer';
+                    logger.warn(`WrfcController: ${agentClass} claim verification failed — phantom work detected`, {
+                        chainId: chain.id,
+                        kind: claimVerification.kind,
+                        summary: claimVerification.summary,
+                        missingPaths: claimVerification.missingPaths,
+                    });
+                    chain.syntheticIssues ??= [];
+                    chain.syntheticIssues.push({
+                        severity: 'critical',
+                        description: `Claimed work not found on disk: ${claimVerification.summary}`,
+                    });
+                }
+            }
+        }
         this.startReview(chain, reportForReview);
     }
     buildSubtaskEngineerTask(chain, subtask) {
@@ -1286,6 +1604,46 @@ export class WrfcController {
             subtask.syntheticIssues.push({ severity: 'critical', description });
         }
         subtask.engineerReport = reportForReview;
+        // Item 2 / MAJ-1: Verify engineer claims for compound subtask before handing off to reviewer.
+        // Tri-state kind logic (mirrors handleEngineerCompletion):
+        //   'files_verified'          → claimsVerified=true,     no synthetic issue.
+        //   'git_corroborated'        → claimsVerified=true,     no synthetic issue.
+        //   'verified_empty'          → claimsVerified=true,     no synthetic issue.
+        //   'unverifiable_no_claims'  → claimsVerified=undefined, inject advisory synthetic issue only (no MIN-4 mechanical block).
+        //   'unverified'              → claimsVerified=false,    inject synthetic issue; MIN-4 gate blocks pass.
+        const subtaskClaimVerification = verifyEngineerClaims(reportForReview, this.projectRoot);
+        if (subtaskClaimVerification.kind === 'unverifiable_no_claims') {
+            // Leave subtask.claimsVerified as undefined — suspicious but not a confirmed false.
+            logger.warn('WrfcController: compound subtask engineer sent success prose with no claims and no git diff — suspected phantom work', {
+                chainId: chain.id,
+                subtaskId: subtask.id,
+                kind: subtaskClaimVerification.kind,
+                summary: subtaskClaimVerification.summary,
+            });
+            subtask.syntheticIssues ??= [];
+            subtask.syntheticIssues.push({
+                severity: 'critical',
+                description: `No work claimed and no git diff detected for subtask ${subtask.id} — suspected phantom work: ${subtaskClaimVerification.summary}`,
+            });
+        }
+        else {
+            subtask.claimsVerified = subtaskClaimVerification.verified;
+            if (!subtaskClaimVerification.verified) {
+                // kind === 'unverified': claims present but missing on disk and no git corroboration.
+                logger.warn('WrfcController: compound engineer claim verification failed — phantom work detected', {
+                    chainId: chain.id,
+                    subtaskId: subtask.id,
+                    kind: subtaskClaimVerification.kind,
+                    summary: subtaskClaimVerification.summary,
+                    missingPaths: subtaskClaimVerification.missingPaths,
+                });
+                subtask.syntheticIssues ??= [];
+                subtask.syntheticIssues.push({
+                    severity: 'critical',
+                    description: `Claimed work not found on disk (${subtask.id}): ${subtaskClaimVerification.summary}`,
+                });
+            }
+        }
         this.startCompoundSubtaskReview(chain, subtask, reportForReview);
     }
     startCompoundSubtaskReview(chain, subtask, report) {
@@ -1320,7 +1678,8 @@ export class WrfcController {
     async processCompoundSubtaskReview(chain, subtask, review) {
         const threshold = getWrfcScoreThreshold(this.configManager);
         const constraintEvaluation = this.evaluateSubtaskConstraints(subtask, review);
-        const passed = review.score >= threshold && !constraintEvaluation.constraintFailure;
+        // MIN-4: claimsVerified===false is a mechanical block on compound subtasks too.
+        const passed = review.score >= threshold && !constraintEvaluation.constraintFailure && subtask.claimsVerified !== false;
         this.completeSubtaskNode(chain, subtask, `Score ${review.score}/10${passed ? ' passed' : ' needs fixes'}`);
         emitWorkflowReviewCompleted(this.runtimeBus, createWrfcWorkflowContext(this.sessionId, chain.id), {
             chainId: chain.id,