@plainconceptsplatform/workflows 0.4.34 → 0.6.1

package/dist/stack-defaults.test.js

@@ -65,10 +65,10 @@ describe("generateStackDefaults", () => {
 });
 describe("injectStackEnv", () => {
     it("injects VERIFY_COMMANDS into a worker that has an env block", () => {
-        const content = `---
-env:
-  REPO_RULES: "some rules"
-description: test
+        const content = `---
+env:
+  REPO_RULES: "some rules"
+description: test
 ---`;
         const defaults = generateStackDefaults(makeInspection({
             solutionFiles: ["app.slnx"],
@@ -77,9 +77,9 @@ description: test
         expect(result).toContain('VERIFY_COMMANDS: "dotnet restore && dotnet build -c Release --no-restore && dotnet test"');
     });
     it("injects pnpm verification when no .slnx is present", () => {
-        const content = `---
-env:
-  REPO_RULES: "some rules"
+        const content = `---
+env:
+  REPO_RULES: "some rules"
 ---`;
         const defaults = generateStackDefaults(makeInspection({
             pnpmLockfile: true,
@@ -88,47 +88,47 @@ env:
         expect(result).toContain('VERIFY_COMMANDS: "pnpm verify"');
     });
 });
-const OPENCODE_CI_MD = `---
-env:
-  AGENTMEMORY_VERSION: "0.9.28"
-  CODEGRAPH_VERSION: "1.5.0"
-description: Shared CI setup.
-
-pre-agent-steps:
-  - name: Install RTK
-    run: |
-      rtk --version
-      rtk init -g --opencode --auto-patch
-  - name: Install opencode plugin dependencies
-    run: |
-      set -euo pipefail
-      if [ ! -f .opencode/package.json ]; then
-        echo "No .opencode/package.json, nothing to install"
-        exit 0
-      fi
-  - name: Install workspace dependencies
-    run: pnpm install --frozen-lockfile
-  - name: Merge the CI-only OpenCode provider into opencode.jsonc
-    run: |
-      jq -e . "$FRAGMENT" > /dev/null
+const OPENCODE_CI_MD = `---
+env:
+  AGENTMEMORY_VERSION: "0.9.28"
+  CODEGRAPH_VERSION: "1.5.0"
+description: Shared CI setup.
+
+pre-agent-steps:
+  - name: Install RTK
+    run: |
+      rtk --version
+      rtk init -g --opencode --auto-patch
+  - name: Install opencode plugin dependencies
+    run: |
+      set -euo pipefail
+      if [ ! -f .opencode/package.json ]; then
+        echo "No .opencode/package.json, nothing to install"
+        exit 0
+      fi
+  - name: Install workspace dependencies
+    run: pnpm install --frozen-lockfile
+  - name: Merge the CI-only OpenCode provider into opencode.jsonc
+    run: |
+      jq -e . "$FRAGMENT" > /dev/null
 ---`;
 describe("generateOpencodeCi", () => {
     it("adds NuGet cache and restores detected solution when .slnx is found", () => {
         const result = generateOpencodeCi(OPENCODE_CI_MD, makeInspection({
-            solutionFiles: ["apps/api/Numa.slnx"],
+            solutionFiles: ["apps/api/Contoso.slnx"],
         }));
         expect(result).toContain("Cache NuGet packages");
         expect(result).toContain("Restore .NET dependencies");
-        expect(result).toContain("dotnet restore apps/api/Numa.slnx");
+        expect(result).toContain("dotnet restore apps/api/Contoso.slnx");
         expect(result).toContain("\n  - name: Restore .NET dependencies\n");
         expect(result).not.toContain("\n    - name: Restore .NET dependencies\n");
     });
     it("uses POSIX separators for .NET restore commands", () => {
         const result = generateOpencodeCi(OPENCODE_CI_MD, makeInspection({
-            solutionFiles: ["apps\\api\\Numa.slnx"],
+            solutionFiles: ["apps\\api\\Contoso.slnx"],
         }));
-        expect(result).toContain("dotnet restore apps/api/Numa.slnx");
-        expect(result).not.toContain("dotnet restore apps\\api\\Numa.slnx");
+        expect(result).toContain("dotnet restore apps/api/Contoso.slnx");
+        expect(result).not.toContain("dotnet restore apps\\api\\Contoso.slnx");
     });
     it("adds the pinned OpenSpec CLI install step when openspec/ directory exists", () => {
         const result = generateOpencodeCi(OPENCODE_CI_MD, makeInspection({
@@ -160,49 +160,49 @@ describe("generateOpencodeCi", () => {
         expect(result).toContain("Merge the CI-only OpenCode provider");
     });
 });
-const OPENCODE_CI_JSON = `{
-  "$schema": "https://opencode.ai/config.json",
-  "model": "plainconcepts/glm-5-2",
-  "plugin": [],
-  "default_agent": "ci-workflow-agent",
-  "agent": {
-    "ci-workflow-agent": {
-      "description": "Executes GitHub Agentic Workflow tasks in CI.",
-      "mode": "primary",
-      "prompt": "You execute the GitHub Agentic Workflow task in the user prompt."
-    }
-  },
-  "permission": {
-    "read": "allow"
-  },
-  "lsp": {
-    "csharp": {
-      "disabled": true
-    },
-    "fsharp": {
-      "disabled": true
-    },
-    "razor": {
-      "disabled": true
-    }
-  },
-  "provider": {
-    "plainconcepts": {
-      "api": "http://172.30.0.30:10000",
-      "options": {
-        "apiKey": "awf-openai-proxy"
-      },
-      "models": {
-        "glm-5-2": {
-          "name": "GLM 5.2"
-        },
-        "glm-5-1": {
-          "name": "GLM 5.1"
-        }
-      }
-    }
-  }
-}
+const OPENCODE_CI_JSON = `{
+  "$schema": "https://opencode.ai/config.json",
+  "model": "plainconcepts/glm-5-3",
+  "plugin": [],
+  "default_agent": "ci-workflow-agent",
+  "agent": {
+    "ci-workflow-agent": {
+      "description": "Executes GitHub Agentic Workflow tasks in CI.",
+      "mode": "primary",
+      "prompt": "You execute the GitHub Agentic Workflow task in the user prompt."
+    }
+  },
+  "permission": {
+    "read": "allow"
+  },
+  "lsp": {
+    "csharp": {
+      "disabled": true
+    },
+    "fsharp": {
+      "disabled": true
+    },
+    "razor": {
+      "disabled": true
+    }
+  },
+  "provider": {
+    "plainconcepts": {
+      "api": "http://172.30.0.30:10000",
+      "options": {
+        "apiKey": "awf-openai-proxy"
+      },
+      "models": {
+        "glm-5-3": {
+          "name": "GLM 5.3"
+        },
+        "glm-5-2": {
+          "name": "GLM 5.2"
+        }
+      }
+    }
+  }
+}
 `;
 describe("generateOpencodeConfig", () => {
     it("keeps LSP section when .slnx is present", () => {
@@ -243,8 +243,8 @@ describe("generateOpencodeConfig", () => {
             solutionFiles: ["app.slnx"],
         }));
         const parsed = JSON.parse(result);
+        expect(parsed.provider.plainconcepts.models["glm-5-3"]).toBeDefined();
         expect(parsed.provider.plainconcepts.models["glm-5-2"]).toBeDefined();
-        expect(parsed.provider.plainconcepts.models["glm-5-1"]).toBeDefined();
     });
     it("preserves the plainconcepts provider and its API URL", () => {
         const result = generateOpencodeConfig(OPENCODE_CI_JSON, makeInspection({

package/dist/tui.test.js

@@ -10,19 +10,22 @@ function makeEntry(name, kind, installed = false) {
     };
 }
 function makeEntries(installed = []) {
-    const routes = ["refine", "implement", "direct", "triage", "apply-review", "merge-gate", "audit", "propose"];
+    const routes = ["refine", "implement", "triage", "apply-review", "merge-gate", "audit"];
     const templates = ["agentics-checks", "agentics-maintenance", "app-ci-dotnet-next", "app-ci-node-monorepo", "opencode.ci.json"];
     return [
         ...routes.map((name) => makeEntry(name, "route", installed.includes(name))),
         ...templates.map((name) => makeEntry(name, "template", installed.includes(name))),
     ];
 }
+// Counts derive from the fixture, so adding or removing a route above cannot silently
+// desynchronise five assertions again.
+const FIXTURE_COUNT = makeEntries().length;
 describe("createSelectionState", () => {
     it("returns all items as visible initially", () => {
         const entries = makeEntries();
         const state = createSelectionState(entries);
-        expect(state.allItems).toHaveLength(13);
-        expect(state.visibleItems).toHaveLength(13);
+        expect(state.allItems).toHaveLength(FIXTURE_COUNT);
+        expect(state.visibleItems).toHaveLength(FIXTURE_COUNT);
     });
     it("pre-selects installed items", () => {
         const entries = makeEntries(["refine", "agentics-checks"]);
@@ -73,7 +76,7 @@ describe("fuzzyMatch", () => {
 describe("filterItems", () => {
     const entries = makeEntries();
     it("returns all items when filter is empty", () => {
-        expect(filterItems(entries, "")).toHaveLength(13);
+        expect(filterItems(entries, "")).toHaveLength(FIXTURE_COUNT);
     });
     it("filters by name", () => {
         const result = filterItems(entries, "refine");
@@ -82,7 +85,7 @@ describe("filterItems", () => {
     });
     it("filters by description", () => {
         const result = filterItems(entries, "description");
-        expect(result).toHaveLength(13);
+        expect(result).toHaveLength(FIXTURE_COUNT);
     });
     it("filters by fuzzy subsequence over name and description", () => {
         const result = filterItems(entries, "acdn");
@@ -125,7 +128,7 @@ describe("clearFilter", () => {
         let state = applyFilter(createSelectionState(makeEntries()), "ref");
         state = clearFilter(state);
         expect(state.filter).toBe("");
-        expect(state.visibleItems).toHaveLength(13);
+        expect(state.visibleItems).toHaveLength(FIXTURE_COUNT);
     });
 });
 describe("moveCursorUp / moveCursorDown", () => {
@@ -150,7 +153,7 @@ describe("moveCursorUp / moveCursorDown", () => {
     });
     it("wraps cursor to bottom from top", () => {
         const state = moveCursorUp(createSelectionState(makeEntries()));
-        expect(state.cursor).toBe(12);
+        expect(state.cursor).toBe(FIXTURE_COUNT - 1);
     });
     it("does not move when list is empty", () => {
         const entries = [];

package/dist/workflow-catalog.d.ts

@@ -1,4 +1,4 @@
-export declare const routeNames: readonly ["refine", "implement", "direct", "triage", "apply-review", "merge-gate", "audit", "propose"];
+export declare const routeNames: readonly ["refine", "implement", "triage", "apply-review", "merge-gate", "audit"];
 export type RouteName = (typeof routeNames)[number];
 export interface WorkflowRoute {
     readonly name: RouteName;

package/dist/workflow-catalog.js

@@ -1,22 +1,18 @@
 export const routeNames = [
     "refine",
     "implement",
-    "direct",
     "triage",
     "apply-review",
     "merge-gate",
     "audit",
-    "propose",
 ];
 export const workflowRoutes = [
     { name: "refine", worker: "agent-refine.md", description: "Refines an issue into a user story, on a first pass or after the author has answered the bot's questions.", defaultEnabled: true },
     { name: "implement", worker: "agent-implement.md", description: "Implements an issue and opens a pull request. Stops there: the merge decision belongs to the merge gate.", defaultEnabled: true },
-    { name: "direct", worker: "agent-direct.md", description: "Executes a free-form instruction from an issue body and posts the results back on the same issue.", defaultEnabled: true },
     { name: "triage", worker: "agent-triage.md", description: "Triages issues opened by outside collaborators: runs 10 checks (template, security, size, danger, duplicates, clarity, reproducibility, acceptance, cross-cutting). Loops up to 3 rounds. Passes to refine or blocks.", defaultEnabled: true },
     { name: "apply-review", worker: "agent-apply-review.md", description: "Applies reviewer feedback to an open pull request the bot authored, then pushes the fixes to the same branch.", defaultEnabled: true },
     { name: "merge-gate", worker: "agent-merge-gate.md", description: "Decides what happens to a bot-authored pull request once CI has reported: merge, hand to a human, or fix CI.", defaultEnabled: true },
-    { name: "audit", worker: "agent-audit.md", description: "Read-only repository audit. Finds 5-7 problems, scores each 1-10, files a single issue with the top 3 refined as actionable user stories.", defaultEnabled: true },
-    { name: "propose", worker: "agent-propose.md", description: "Proposes the next feature. Reads the manifesto, recent history, and comparable tools, scores candidates, and files the winner as a single issue.", defaultEnabled: false },
+    { name: "audit", worker: "agent-audit.md", description: "Read-only repository audit. Finds 5-7 problems, scores each 1-10, and files a single issue that Refine then sizes and splits.", defaultEnabled: true },
 ];
 export const packageOwnedTargets = [
     ".github/actions",

package/loops/actions/add-issue-labels/action.yml

@@ -9,7 +9,7 @@ inputs:
     description: Issue or pull request number.
     required: true
   labels:
-    description: Newline-delimited labels to add.
+    description: Labels to add, one per line. A comma-separated list is accepted as well.
     required: true
 runs:
   using: composite
@@ -22,7 +22,7 @@ runs:
       with:
         github-token: ${{ inputs.token }}
         script: |
-          const labels = process.env.LABELS.split(/\r?\n/).filter(Boolean);
+          const labels = process.env.LABELS.split(/\r?\n|,/).map((label) => label.trim()).filter(Boolean);
           await github.rest.issues.addLabels({
             ...context.repo,
             issue_number: Number(process.env.ISSUE_NUMBER),

package/loops/actions/agent-output.cjs

@@ -1,17 +1,17 @@
-// Managed by @plainconceptsplatform/workflows. Source: loops/actions/agent-output.cjs. Update with `workflows update --force`; consumer edits may be overwritten.
-const fs = require('node:fs');
-
-// Every apply-agent-* action reads the same artifact the same way: a missing file means the
-// agent produced nothing, which is a normal outcome rather than a failure.
-function readAgentItems(outputFile, type) {
-  if (!outputFile || !fs.existsSync(outputFile)) {
-    return [];
-  }
-
-  const parsed = JSON.parse(fs.readFileSync(outputFile, 'utf8'));
-  const items = Array.isArray(parsed.items) ? parsed.items : [];
-
-  return type ? items.filter((item) => item.type === type) : items;
-}
-
-module.exports = { readAgentItems };
+// Managed by @plainconceptsplatform/workflows. Source: loops/actions/agent-output.cjs. Update with `workflows update --force`; consumer edits may be overwritten.
+const fs = require('node:fs');
+
+// Every apply-agent-* action reads the same artifact the same way: a missing file means the
+// agent produced nothing, which is a normal outcome rather than a failure.
+function readAgentItems(outputFile, type) {
+  if (!outputFile || !fs.existsSync(outputFile)) {
+    return [];
+  }
+
+  const parsed = JSON.parse(fs.readFileSync(outputFile, 'utf8'));
+  const items = Array.isArray(parsed.items) ? parsed.items : [];
+
+  return type ? items.filter((item) => item.type === type) : items;
+}
+
+module.exports = { readAgentItems };

package/loops/actions/apply-agent-bundle/apply-bundle.sh

@@ -40,7 +40,20 @@ git fetch --no-tags "$BUNDLE_FILE" "$BUNDLE_REF"
 [ "$(git cat-file -t "$BUNDLE_TIP")" = commit ] || fail "Git bundle ref must point directly to a commit"
 [ "$(git rev-parse FETCH_HEAD)" = "$BUNDLE_TIP" ] || fail "Fetched bundle commit did not match listed bundle ref"
 
-git merge-base --is-ancestor "$TARGET_TIP" "$BUNDLE_TIP" || fail "Git bundle cannot fast-forward $TARGET_BRANCH"
+# Fast-forward only, deliberately: a push that is not one would discard somebody's commits.
+#
+# "Cannot fast-forward" said nothing about why, and there are two reasons: the agent
+# rewrote history (a rebase, an amend, a reset), or somebody pushed to the branch while it
+# was working. Both mean the same thing to git, that the branch carries commits the bundle
+# does not, so the applier cannot tell them apart and does not try. It prints the commits
+# that are missing instead: their authors and dates answer the question immediately.
+if ! git merge-base --is-ancestor "$TARGET_TIP" "$BUNDLE_TIP"; then
+  echo "::error::Nothing was applied. $TARGET_BRANCH is at $TARGET_TIP and the bundle is at $BUNDLE_TIP, which does not contain it, so pushing would drop the commits below. Either the agent rewrote history, which this push refuses, or the branch moved while it was working, in which case nothing is lost and the gate only needs running again on the current head."
+  echo "On $TARGET_BRANCH but missing from the bundle:"
+  git --no-pager log --format="  %h %ad %an  %s" --date=short "$BUNDLE_TIP..$TARGET_TIP" |
+    head -20 || true
+  exit 1
+fi
 git switch --detach "$TARGET_TIP"
 git merge --ff-only "$BUNDLE_TIP"
 git push origin "HEAD:refs/heads/$TARGET_BRANCH"

package/loops/actions/audit-close/action.yml

@@ -81,6 +81,30 @@ runs:
               ? 'This report references no issues.'
               : `All ${closedRefs} referenced issue(s) are closed.`;
 
+            // Do not close if there are open PRs that close this issue.
+            // The audit report may have spawned implement workers whose PRs
+            // are still under review — closing the report prematurely is misleading.
+            const openPRs = await github.paginate(github.rest.pulls.list, {
+              ...context.repo,
+              state: 'open',
+              per_page: 100,
+            });
+
+            const closesThisReport = openPRs.some((pr) => {
+              const body = pr.body ?? '';
+              const patterns = [
+                new RegExp(`(?:^|[^A-Za-z0-9_/])#(?:closes?|fixes?|resolves?|closed?)\\s+#${report.number}\\b`, 'i'),
+                new RegExp(`(?:^|[^A-Za-z0-9_/])#${report.number}\\b`),
+              ];
+              return patterns.some((p) => p.test(body));
+            });
+
+            if (closesThisReport) {
+              core.info(`#${report.number}: kept open, has open PR(s) that close it.`);
+              keptOpen += 1;
+              continue;
+            }
+
             await github.rest.issues.createComment({
               ...context.repo,
               issue_number: report.number,

package/loops/actions/classify-route/action.yml

@@ -24,12 +24,15 @@ outputs:
   ci-run-id:
     description: Workflow run ID of that CI run.
     value: ${{ steps.classify.outputs.ci-run-id }}
+  merge-gate-attempts:
+    description: Failed merge-gate attempts already made against this CI verdict.
+    value: ${{ steps.classify.outputs.merge-gate-attempts }}
+  implement-attempts:
+    description: Implement runs already made for this issue that died before producing an answer.
+    value: ${{ steps.classify.outputs.implement-attempts }}
   refine-mode:
     description: first or rerefine.
     value: ${{ steps.classify.outputs.refine-mode }}
-  direct-mode:
-    description: first or continue.
-    value: ${{ steps.classify.outputs.direct-mode }}
   triage-mode:
     description: first or retriage.
     value: ${{ steps.classify.outputs.triage-mode }}
@@ -47,6 +50,7 @@ runs:
         ACTION: ${{ github.event.action }}
         LABEL: ${{ github.event.label.name }}
         ISSUE_LABELS: ${{ toJSON(github.event.issue.labels.*.name) }}
+        ISSUE_STATE: ${{ github.event.issue.state }}
         EVENT_ISSUE_NUMBER: ${{ github.event.issue.number }}
         EVENT_PR_NUMBER: ${{ github.event.pull_request.number }}
         COMMENT_ON_PR: ${{ github.event.issue.pull_request != '' }}
@@ -62,6 +66,7 @@ runs:
         INPUT_MODE: ${{ github.event.inputs.mode }}
         INPUT_CI_CONCLUSION: ${{ github.event.inputs.ci-conclusion }}
         INPUT_CI_RUN_ID: ${{ github.event.inputs.ci-run-id }}
+        INPUT_ATTEMPTS_SO_FAR: ${{ github.event.inputs.attempts_so_far }}
         INPUT_TRIGGER_KIND: ${{ github.event.inputs.trigger-kind }}
       run: |
         set -euo pipefail

package/loops/actions/classify-route/classify-route.sh

@@ -11,11 +11,7 @@ set -euo pipefail
 readonly AUDIT_CRON="17 1 * * 1"
 readonly AUDIT_CLOSE_CRON="43 3 * * *"
 readonly CLEANUP_ARTIFACTS_CRON="0 6 * * *"
-readonly RECONCILE_BOT_PR_RUNS_CRON="17 */2 * * *"
-# Daily, but it proposes far less often than daily: the worker holds one open
-# proposal at a time and skips while that slot is filled. The cron is a heartbeat,
-# the queue is the pacing.
-readonly PROPOSE_CRON="29 7 * * *"
+readonly RECONCILE_BOT_PR_RUNS_CRON="17 * * * *"
 
 has_label() {
   jq -e --arg name "$1" 'index($name)' >/dev/null 2>&1 <<<"${ISSUE_LABELS:-[]}"
@@ -27,18 +23,28 @@ is_issue_number() {
 
 classify_route() {
   local route="none" error=""
-  local issue_number="" pr_number="" ci_conclusion="" ci_run_id=""
-  local refine_mode="" direct_mode="" triage_mode="" trigger_kind=""
+  local issue_number="" pr_number="" ci_conclusion="" ci_run_id="" merge_gate_attempts="0" implement_attempts="0"
+  local refine_mode="" triage_mode="" trigger_kind=""
 
   case "${EVENT:-}" in
     issues)
-      if [ "${ACTION:-}" = "opened" ]; then
-        # Issue opened by an outside collaborator → triage. The authorize job
-        # gates the caller on is_outside_collaborator; this routes unconditionally
-        # so write+ openers classify to triage but the caller job skips them.
-        route="triage"
-        triage_mode="first"
-        issue_number="${EVENT_ISSUE_NUMBER:-}"
+      # A closed issue is finished work, but label edits on one still arrive as events.
+      if [ "${ISSUE_STATE:-}" = "closed" ]; then
+        error="issue is closed"
+      elif [ "${ACTION:-}" = "opened" ]; then
+        # Issue opened with a work label → skip triage.
+        # The label event will trigger authorize-bot-work → bot-working → the
+        # correct worker. Triage would only interfere.
+        if has_label refine || has_label implement; then
+          error="issue opened with a work label; triage skipped"
+        else
+          # Issue opened by an outside collaborator → triage. The authorize job
+          # gates the caller on is_outside_collaborator; this routes unconditionally
+          # so write+ openers classify to triage but the caller job skips them.
+          route="triage"
+          triage_mode="first"
+          issue_number="${EVENT_ISSUE_NUMBER:-}"
+        fi
       elif [ "${ACTION:-}" = "labeled" ]; then
         case "${LABEL:-}" in
           bot-working)
@@ -53,12 +59,8 @@ classify_route() {
               route="refine"
               refine_mode="first"
               issue_number="${EVENT_ISSUE_NUMBER:-}"
-            elif has_label direct; then
-              route="direct"
-              direct_mode="first"
-              issue_number="${EVENT_ISSUE_NUMBER:-}"
             else
-              error="bot-working added but no work label (implement/refine/direct) found"
+              error="bot-working added but no work label found"
             fi
             ;;
           triage)
@@ -75,7 +77,7 @@ classify_route() {
               triage_mode="first"
             fi
             ;;
-          refine | implement | direct)
+          refine | implement)
             # If the actor is a bot (e.g. refine→implement transition), route directly.
             # If the actor is a human, authorize-bot-work.yml will add bot-working which triggers the workflow.
             if [ "${ACTOR:-}" != "" ] && echo "${ACTOR:-}" | grep -q '\[bot\]$'; then
@@ -83,13 +85,11 @@ classify_route() {
               issue_number="${EVENT_ISSUE_NUMBER:-}"
               if [ "${LABEL:-}" = "refine" ]; then
                 refine_mode="first"
-              elif [ "${LABEL:-}" = "direct" ]; then
-                direct_mode="first"
               fi
             elif has_label bot-working; then
               # Already has bot-working - the workflow is already running or queued.
               # Don't re-trigger.
-              error="issue already has bot-working label; implement/refine/direct already in progress"
+              error="issue already has bot-working label; implement/refine already in progress"
             else
               error="waiting for bot to add bot-working label"
             fi
@@ -100,8 +100,18 @@ classify_route() {
 
     issue_comment)
       if [ "${COMMENT_ON_PR:-false}" = "true" ]; then
-        route="apply-review"
-        pr_number="${EVENT_ISSUE_NUMBER:-}"
+        if [ "${COMMENT_SENDER_TYPE:-}" = "Bot" ]; then
+          # Every App-token comment on a pull request is an issue_comment event, and the
+          # workers comment on pull requests they own. None of that is reviewer feedback.
+          error="comment authored by a bot"
+        else
+          route="apply-review"
+          pr_number="${EVENT_ISSUE_NUMBER:-}"
+        fi
+      elif [ "${ISSUE_STATE:-}" = "closed" ]; then
+        # A closing comment on a refine-labelled issue used to start a full re-refine, which
+        # held a runner for 35 minutes and filed split children under an already-shut parent.
+        error="issue is closed"
       elif [ "${COMMENT_SENDER_TYPE:-}" = "Bot" ]; then
         error="comment authored by a bot"
       elif has_label triage; then
@@ -110,12 +120,8 @@ classify_route() {
         issue_number="${EVENT_ISSUE_NUMBER:-}"
       elif has_label implement; then
         error="issue has implement label; comments do not re-trigger implement"
-      elif has_label direct; then
-        route="direct"
-        direct_mode="continue"
-        issue_number="${EVENT_ISSUE_NUMBER:-}"
       elif ! has_label refine; then
-        error="issue does not carry the refine or direct label"
+        error="issue does not carry the refine label"
       else
         route="refine"
         refine_mode="rerefine"
@@ -143,10 +149,17 @@ classify_route() {
       ;;
 
     workflow_run)
-      if is_issue_number "${RUN_PR_NUMBER:-}"; then
+      # Only a FAILED CI run on an attached pull request auto-dispatches the gate. A green
+      # run reaches the gate through the consumer CI's dispatch-merge-gate job and the
+      # reconcile belt, so routing success here would double-fire the gate for every passing
+      # pull request. GitHub delivers workflow_run only for CI runs whose actor is a human;
+      # a bot pull request's CI never arrives here at all, and the same two paths cover it.
+      if [ "${RUN_CONCLUSION:-}" != "failure" ]; then
+        error="CI concluded '${RUN_CONCLUSION:-}'; the gate auto-triggers only on failure"
+      elif is_issue_number "${RUN_PR_NUMBER:-}"; then
         route="merge-gate"
         pr_number="${RUN_PR_NUMBER}"
-        ci_conclusion="${RUN_CONCLUSION:-}"
+        ci_conclusion="failure"
         ci_run_id="${RUN_ID:-}"
       else
         error="CI run has no attached pull request"
@@ -167,14 +180,16 @@ classify_route() {
     workflow_dispatch)
       trigger_kind="manual"
       case "${OPERATION:-}" in
-        refine | implement | direct)
+        refine | implement)
           if is_issue_number "${INPUT_ISSUE_NUMBER:-}"; then
             route="${OPERATION}"
             issue_number="${INPUT_ISSUE_NUMBER}"
             if [ "$OPERATION" = "refine" ]; then
               refine_mode="${INPUT_MODE:-first}"
-            elif [ "$OPERATION" = "direct" ]; then
-              direct_mode="${INPUT_MODE:-first}"
+            else
+              # The implement worker re-dispatches itself when a run dies before doing any work,
+              # and carries the count so the budget is bounded.
+              implement_attempts="${INPUT_ATTEMPTS_SO_FAR:-0}"
             fi
           else
             error="operation '${OPERATION}' needs a positive issue-number, got '${INPUT_ISSUE_NUMBER:-}'"
@@ -203,17 +218,21 @@ classify_route() {
             pr_number="${INPUT_PR_NUMBER}"
             ci_conclusion="${INPUT_CI_CONCLUSION:-}"
             ci_run_id="${INPUT_CI_RUN_ID:-}"
+            merge_gate_attempts="${INPUT_ATTEMPTS_SO_FAR:-0}"
           else
             error="operation 'merge-gate' needs a positive pr-number, got '${INPUT_PR_NUMBER:-}'"
           fi
           ;;
-        audit | propose)
+        audit)
           route="${OPERATION}"
           trigger_kind="${INPUT_TRIGGER_KIND:-manual}"
           ;;
-          audit-close | cleanup-artifacts | reconcile-bot-pr-runs | validate)
+        audit-close | cleanup-artifacts | reconcile-bot-pr-runs | validate)
           route="${OPERATION}"
           ;;
+        release)
+          route="release"
+          ;;
         *)
           error="unknown operation '${OPERATION:-}'"
           ;;
@@ -231,8 +250,9 @@ issue-number=${issue_number}
 pr-number=${pr_number}
 ci-conclusion=${ci_conclusion}
 ci-run-id=${ci_run_id}
+merge-gate-attempts=${merge_gate_attempts}
+implement-attempts=${implement_attempts}
 refine-mode=${refine_mode}
-direct-mode=${direct_mode}
 triage-mode=${triage_mode}
 trigger-kind=${trigger_kind}
 error=${error}