@pmelab/gtd 24.2.0 → 24.4.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gtd",
-  "version": "24.2.0",
+  "version": "24.4.0",
   "description": "Drive the gtd loop inside Claude Code: agent turns run as subagents, gtd decides every beat",
   "author": {
     "name": "Philipp Melab"

package/README.md

@@ -475,10 +475,21 @@ noted in steps 3 and 4 below.
    turns first), then a fresh review of the change stops at the review again.
    `praise` is dropped; a round of only praise signs off. When a round mixes
    them, questions are answered and nits fixed first, then the edits are planned
-   — risk: the planning lap may redo nit fixes it touches. A hand-edit to code
-   always plans a lap. Only a confident non-`edit` verdict skips the replan — a
-   note whose evidence was cut, or that got no verdict, counts as `edit`. The
-   same `gtd judge answer` / conservative-default shape as step 3's own judged
+   — risk: the planning lap may redo nit fixes it touches.
+
+   Each `edit` note also gets a severity tier from four judge questions
+   (security, reversibility, blast radius, new concept). `critical` and `should`
+   notes are re-planned this round; `could` notes are deferred. A leading `!` on
+   a note forces `critical` and skips the judge. Deferral appends to the
+   committed `.gtd/TODO.md`; it never starts a process on its own, and it ships
+   in the branch/PR unless you delete it. Landing clean at the gate after a
+   deferral signs off without the deferred notes; the gate lists them. To pull
+   one in, edit its line in `.gtd/TODO.md` when you start a process.
+   `reviewSeverityMinP` sets the confidence floor (see
+   [configuration](docs/configuration.md)). A hand-edit to code always plans a
+   lap. Only a confident non-`edit` verdict skips the replan — a note whose
+   evidence was cut, or that got no verdict, counts as `edit`. The same
+   `gtd judge answer` / conservative-default shape as step 3's own judged
    points.
 
 You never talk to it. Every exchange is a file in `.gtd/` that you edit in your
@@ -544,6 +555,30 @@ unknown key. `gtd.config.ts` is the only repository config: gtd 23 removed the
 home directory — fails every command until you delete it. See
 [Migrating from `.gtdrc`](https://github.com/pmelab/gtd/blob/main/docs/configuration.md#migrating-from-gtdrc).
 
+## Process history
+
+When a process finishes, the landing that closes it also keeps the whole run
+behind a ref, `refs/gtd/history/<entry>`, so a squash or a deleted branch
+doesn't lose it. `/gtd ship` changes nothing about this: the turns are already
+kept before it squashes.
+
+```sh
+gtd history list                 # one line per kept process
+gtd history show <ref>           # replay its steps and judge verdicts
+gtd history fetch | sh           # pull every kept ref from origin
+```
+
+`gtd history fetch` only prints a fetch script; pipe it into `sh` to run it.
+Refs are not pushed or fetched by default. To share them:
+
+```sh
+git push origin 'refs/gtd/history/*'
+git config --add remote.origin.fetch 'refs/gtd/history/*:refs/gtd/history/*'
+```
+
+The second line makes every plain `git fetch` include them. It has no leading
+`+`, so a conflicting local ref fails instead of being overwritten.
+
 ## Entrypoints
 
 gtd is one package, `@pmelab/gtd`, and every entrypoint shares its version and
@@ -565,8 +600,8 @@ install for any of these but `./testkit`: gtd resolves a `gtd.config.ts`'s
 
 The `gtd` bin's commands — `next`, `land`, `abandon`, `restore`, `validate`,
 `check`, `uncheck`, `install`, `summary`, `base`, `door`, `doors`, `version`,
-`help`, and the tools `ui`, `lsp`, `loop` and `judge` (`judge answer`,
-`judge run`) — are listed in the
+`help`, `history list`, `history show`, `history fetch`, and the tools `ui`,
+`lsp`, `loop` and `judge` (`judge answer`, `judge run`) — are listed in the
 [CLI reference](https://github.com/pmelab/gtd/blob/main/docs/cli.md).
 
 ## License

package/dist/chunks/{Schema-Dh-mkwkq.mjs → Schema-B5yK7QrT.mjs}

@@ -12242,6 +12242,7 @@ const mapErrorCause = /*#__PURE__*/ dual(2, (self, f) => matchCauseEffect$2(self
 	onSuccess: succeed$5
 }));
 const negate$1 = (self) => map$5(self, (b) => !b);
+const orElseSucceed$1 = /*#__PURE__*/ dual(2, (self, evaluate) => orElse$2(self, () => sync$1(evaluate)));
 const patchFiberRefs = (patch) => updateFiberRefs((fiberId, fiberRefs) => pipe(patch, patch$2(fiberId, fiberRefs)));
 const promise$1 = (evaluate) => evaluate.length >= 1 ? async_((resolve, signal) => {
 	try {
@@ -21189,6 +21190,51 @@ const orDie = orDie$1;
 */
 const orElse$1 = orElse$2;
 /**
+* Ensures the effect always succeeds by replacing failures with a default
+* success value.
+*
+* **Details**
+*
+* This function transforms an effect that may fail into one that cannot fail by
+* replacing any failure with a provided success value. If the original effect
+* fails, the failure is "swallowed," and the specified success value is
+* returned instead. If the original effect succeeds, its value remains
+* unchanged.
+*
+* **When to Use**
+*
+* This is especially useful for providing default values in case of failure,
+* ensuring that an effect always completes successfully. By using this
+* function, you can avoid the need for complex error handling and guarantee a
+* fallback result.
+*
+* **Example**
+*
+* ```ts
+* import { Effect } from "effect"
+*
+* const validate = (age: number): Effect.Effect<number, string> => {
+*   if (age < 0) {
+*     return Effect.fail("NegativeAgeError")
+*   } else if (age < 18) {
+*     return Effect.fail("IllegalAgeError")
+*   } else {
+*     return Effect.succeed(age)
+*   }
+* }
+*
+* const program = Effect.orElseSucceed(validate(-1), () => 18)
+*
+* console.log(Effect.runSyncExit(program))
+* // Output:
+* // { _id: 'Exit', _tag: 'Success', value: 18 }
+* ```
+*
+* @since 2.0.0
+* @category Fallback
+*/
+const orElseSucceed = orElseSucceed$1;
+/**
 * Returns an effect that accesses the runtime, which can be used to (unsafely)
 * execute tasks.
 *
@@ -25350,4 +25396,4 @@ Struct({
 	description: "Represents an issue returned by the ArrayFormatter formatter"
 });
 //#endregion
-export { makeSemaphore as $, equals$2 as $i, match$3 as $n, get$4 as $r, scoped$1 as $t, catchTag as A, omit$1 as Ai, _await as An, interruptAsFiber as Ar, tap as At, flatten as B, map$11 as Bi, modify as Bn, uninterruptible$1 as Br, when as Bt, all as C, unsafeGet as Ci, map$3 as Cn, exitSucceed$1 as Cr, scopeWith as Ct, async as D, add$2 as Di, forEachConcurrentDiscard as Dn, fiberRefLocally as Dr, succeed$1 as Dt, asVoid as E, Tag as Ei, ensuring$1 as En, fiberId as Er, serviceOption as Et, exit as F, flatMap$6 as Fi, bind as Fn, scopeClose as Fr, try_ as Ft, forkScoped as G, left as Gi, spanTag as Gn, zipRight$2 as Gr, zipWith as Gt, forEach as H, none$4 as Hi, update$1 as Hn, void_$2 as Hr, zip as Ht, fail$1 as I, fromNullable as Ii, bindTo as In, succeed$5 as Ir, uninterruptible as It, interrupt as J, pipeArguments as Ji, fail$4 as Jn, combine$5 as Jr, tagged as Jt, gen as K, match$7 as Ki, all$2 as Kn, DeferredTypeId as Kr, spaced as Kt, failCause as L, getOrElse as Li, sleep as Ln, suspend$3 as Lr, uninterruptibleMask as Lt, dieMessage as M, fromIterable$6 as Mi, interruptAllAs as Mn, interruptible$2 as Mr, timeout as Mt, either as N, splitAt as Ni, join as Nn, map$5 as Nr, tryMap as Nt, catchAll as O, get$7 as Oi, scopeMake as On, flatMap$3 as Or, suspend$1 as Ot, ensuring as P, filter$3 as Pi, sequential$1 as Pn, onInterrupt as Pr, tryPromise as Pt, logWarning as Q, toJSON as Qi, mapBoth$2 as Qn, none$2 as Qr, provideMerge as Qt, fiberIdWith as R, isNone as Ri, get as Rn, sync$1 as Rr, unsafeMakeLatch as Rt, addFinalizer as S, unsafeFromArray as Si, isInterruptedOnly as Sn, exitFailCause$1 as Sr, scope as St, as as T, GenericTag as Ti, squash as Tn, exitZipRight as Tr, scopedWith as Tt, forkDaemon as U, some as Ui, TypeId$4 as Un, whenEffect as Ur, zipLeft as Ut, fnUntraced as V, match$6 as Vi, set as Vn, uninterruptibleMask$2 as Vr, withFiberRuntime as Vt, forkIn as W, isLeft as Wi, Class as Wn, withFiberRuntime$1 as Wr, zipRight as Wt, intoDeferred as X, NodeInspectSymbol as Xi, isFailure as Xn, ids as Xr, mergeAll as Xt, interruptible as Y, BaseProto as Yi, failCause$2 as Yn, combineAll as Yr, fromEffect as Yt, isEffect as Z, format$4 as Zi, map$4 as Zn, make$20 as Zr, provide$1 as Zt, decodeSync as _, reduce$6 as _i, flipCauseOption as _n, deferredSucceed as _r, retry as _t, Literal as a, dual as aa, isFinite as ai, unsafeMakeSemaphore$1 as an, asVoid$1 as ar, matchCauseEffect as at, acquireRelease as b, takeRight as bi, isDieType as bn, exitAs as br, runtime as bt, String$ as c, drop as ci, addFinalizerExit as cn, currentContext as cr, onError as ct, Union as d, fromIterable$5 as di, fork as dn, deferredFail as dr, promise as dt, hasProperty as ea, make$22 as ei, succeed$2 as en, succeed$4 as er, map$1 as et, between as f, isChunk as fi, make$2 as fn, deferredFailCause as fr, provide as ft, standardSchemaV1 as g, prepend$1 as gi, failureOrCause as gn, deferredMake as gr, repeat as gt, optionalWith as h, of$1 as hi, fail$2 as hn, deferredIsDone as hr, raceWith as ht, Defect as i, constVoid as ia, decode as ii, forkIn$1 as in, as$1 as ir, matchCause as it, die as j, empty$22 as ji, inheritAll as jn, interruptFiber as jr, tapErrorCause as jt, catchAllCause as k, getOption as ki, scopeTag as kn, interrupt$2 as kr, sync as kt, Struct as l, empty$19 as li, close as ln, deferredAwait as lr, orDie as lt, optional as m, map$9 as mi, die$1 as mn, deferredInterruptWith as mr, race as mt, Boolean$ as n, constTrue as na, has$1 as ni, unsafeRunPromiseExit as nn, zip$1 as nr, mapError$1 as nt, Never as o, identity as oa, append as oi, Scope as on, asyncInterrupt as or, matchEffect as ot, decodeUnknown as p, isEmpty$5 as pi, NoSuchElementException as pn, deferredInterrupt as pr, provideService as pt, ignore as q, right as qi, die$2 as qn, empty$15 as qr, TaggedError$1 as qt, Cause as r, constUndefined as ra, size$2 as ri, updateContext as rn, zipRight$1 as rr, match as rt, Number$ as s, pipe as sa, appendAll$1 as si, addFinalizer$1 as sn, catchAll$1 as sr, negate as st, Array$ as t, constFalse as ta, set$3 as ti, unsafeFork as tn, void_$1 as tr, mapBoth$1 as tt, TaggedError as u, filter$1 as ui, extend$1 as un, deferredComplete as ur, orElse$1 as ut, encodeSync as v, reverse$1 as vi, interrupt$1 as vn, deferredUnsafeDone as vr, runPromise as vt, annotateLogs as w, unsafeHead as wi, reduceWithContext as wn, exitVoid$1 as wr, scoped as wt, acquireUseRelease as x, toArray$1 as xi, isInterrupted as xn, exitFail as xr, sandbox as xt, _void as y, take as yi, interruptors as yn, deferredUnsafeMake as yr, runPromiseExit as yt, flatMap$1 as z, isSome as zi, make$12 as zn, tap$1 as zr, unsafeMakeSemaphore as zt };
+export { makeSemaphore as $, toJSON as $i, mapBoth$2 as $n, none$2 as $r, provideMerge as $t, catchTag as A, getOption as Ai, scopeTag as An, interrupt$2 as Ar, sync as At, flatten as B, isSome as Bi, make$12 as Bn, tap$1 as Br, unsafeMakeSemaphore as Bt, all as C, unsafeFromArray as Ci, isInterruptedOnly as Cn, exitFailCause$1 as Cr, scope as Ct, async as D, Tag as Di, ensuring$1 as Dn, fiberId as Dr, serviceOption as Dt, asVoid as E, GenericTag as Ei, squash as En, exitZipRight as Er, scopedWith as Et, exit as F, filter$3 as Fi, sequential$1 as Fn, onInterrupt as Fr, tryPromise as Ft, forkScoped as G, isLeft as Gi, Class as Gn, withFiberRuntime$1 as Gr, zipRight as Gt, forEach as H, match$6 as Hi, set as Hn, uninterruptibleMask$2 as Hr, withFiberRuntime as Ht, fail$1 as I, flatMap$6 as Ii, bind as In, scopeClose as Ir, try_ as It, interrupt as J, right as Ji, die$2 as Jn, empty$15 as Jr, TaggedError$1 as Jt, gen as K, left as Ki, spanTag as Kn, zipRight$2 as Kr, zipWith as Kt, failCause as L, fromNullable as Li, bindTo as Ln, succeed$5 as Lr, uninterruptible as Lt, dieMessage as M, empty$22 as Mi, inheritAll as Mn, interruptFiber as Mr, tapErrorCause as Mt, either as N, fromIterable$6 as Ni, interruptAllAs as Nn, interruptible$2 as Nr, timeout as Nt, catchAll as O, add$2 as Oi, forEachConcurrentDiscard as On, fiberRefLocally as Or, succeed$1 as Ot, ensuring as P, splitAt as Pi, join as Pn, map$5 as Pr, tryMap as Pt, logWarning as Q, format$4 as Qi, map$4 as Qn, make$20 as Qr, provide$1 as Qt, fiberIdWith as R, getOrElse as Ri, sleep as Rn, suspend$3 as Rr, uninterruptibleMask as Rt, addFinalizer as S, toArray$1 as Si, isInterrupted as Sn, exitFail as Sr, sandbox as St, as as T, unsafeHead as Ti, reduceWithContext as Tn, exitVoid$1 as Tr, scoped as Tt, forkDaemon as U, none$4 as Ui, update$1 as Un, void_$2 as Ur, zip as Ut, fnUntraced as V, map$11 as Vi, modify as Vn, uninterruptible$1 as Vr, when as Vt, forkIn as W, some as Wi, TypeId$4 as Wn, whenEffect as Wr, zipLeft as Wt, intoDeferred as X, BaseProto as Xi, failCause$2 as Xn, combineAll as Xr, fromEffect as Xt, interruptible as Y, pipeArguments as Yi, fail$4 as Yn, combine$5 as Yr, tagged as Yt, isEffect as Z, NodeInspectSymbol as Zi, isFailure as Zn, ids as Zr, mergeAll as Zt, decodeSync as _, prepend$1 as _i, failureOrCause as _n, deferredMake as _r, repeat as _t, Literal as a, constVoid as aa, decode as ai, forkIn$1 as an, as$1 as ar, matchCauseEffect as at, acquireRelease as b, take as bi, interruptors as bn, deferredUnsafeMake as br, runPromiseExit as bt, String$ as c, pipe as ca, appendAll$1 as ci, addFinalizer$1 as cn, catchAll$1 as cr, onError as ct, Union as d, filter$1 as di, extend$1 as dn, deferredComplete as dr, orElseSucceed as dt, equals$2 as ea, get$4 as ei, scoped$1 as en, match$3 as er, map$1 as et, between as f, fromIterable$5 as fi, fork as fn, deferredFail as fr, promise as ft, standardSchemaV1 as g, of$1 as gi, fail$2 as gn, deferredIsDone as gr, raceWith as gt, optionalWith as h, map$9 as hi, die$1 as hn, deferredInterruptWith as hr, race as ht, Defect as i, constUndefined as ia, size$2 as ii, updateContext as in, zipRight$1 as ir, matchCause as it, die as j, omit$1 as ji, _await as jn, interruptAsFiber as jr, tap as jt, catchAllCause as k, get$7 as ki, scopeMake as kn, flatMap$3 as kr, suspend$1 as kt, Struct as l, drop as li, addFinalizerExit as ln, currentContext as lr, orDie as lt, optional as m, isEmpty$5 as mi, NoSuchElementException as mn, deferredInterrupt as mr, provideService as mt, Boolean$ as n, constFalse as na, set$3 as ni, unsafeFork as nn, void_$1 as nr, mapError$1 as nt, Never as o, dual as oa, isFinite as oi, unsafeMakeSemaphore$1 as on, asVoid$1 as or, matchEffect as ot, decodeUnknown as p, isChunk as pi, make$2 as pn, deferredFailCause as pr, provide as pt, ignore as q, match$7 as qi, all$2 as qn, DeferredTypeId as qr, spaced as qt, Cause as r, constTrue as ra, has$1 as ri, unsafeRunPromiseExit as rn, zip$1 as rr, match as rt, Number$ as s, identity as sa, append as si, Scope as sn, asyncInterrupt as sr, negate as st, Array$ as t, hasProperty as ta, make$22 as ti, succeed$2 as tn, succeed$4 as tr, mapBoth$1 as tt, TaggedError as u, empty$19 as ui, close as un, deferredAwait as ur, orElse$1 as ut, encodeSync as v, reduce$6 as vi, flipCauseOption as vn, deferredSucceed as vr, retry as vt, annotateLogs as w, unsafeGet as wi, map$3 as wn, exitSucceed$1 as wr, scopeWith as wt, acquireUseRelease as x, takeRight as xi, isDieType as xn, exitAs as xr, runtime as xt, _void as y, reverse$1 as yi, interrupt$1 as yn, deferredUnsafeDone as yr, runPromise as yt, flatMap$1 as z, isNone as zi, get as zn, sync$1 as zr, unsafeMakeLatch as zt };

package/dist/chunks/{reserved-ejn-LVYO.mjs → reserved-B9pG93Fc.mjs}

@@ -1,6 +1,6 @@
-import { accessFor, agent, answered, check, codeThreads, defineWorkflow, env, head, human, judge, numeric, quote, read, refuse, removeScript, run, scope, skillsFor, start, vars } from "../flows.mjs";
+import { accessFor, agent, answered, check, codeThreads, defineWorkflow, env, head, human, judge, numeric, quote, read, refuse, removeScript, run, scope, showScript, skillsFor, start, vars } from "../flows.mjs";
 import { escalation as escalation$1, fixFindings, gate as gate$1, healthy as healthy$1, holdWording as holdWording$1, lensScopes, lensesOf, qualityLap as qualityLap$1, reviewToHandOff, untilSettled } from "../workflow-kit.mjs";
-import { c as String$, g as standardSchemaV1, h as optionalWith, l as Struct } from "./Schema-Dh-mkwkq.mjs";
+import { c as String$, g as standardSchemaV1, h as optionalWith, l as Struct } from "./Schema-B5yK7QrT.mjs";
 import { dirname } from "node:path";
 //#region src/workflows/shared/prose.ts
 const skillsPreamble = `- Load whatever's listed here that your harness actually has installed,
@@ -310,6 +310,10 @@ ${stateFileRules}
 ${footnoteFoldIn}${codeThreadReplies()}
 - The only state file this turn touches is \`.gtd/REQUIREMENTS.md\`
   — no other files for notes or output
+- Lines of a \`## Deferred review notes\` section of \`.gtd/TODO.md\`
+  that the start diff does not touch are parked by review, never folded;
+  the human's edits to such a line (or its removal) are input like any
+  other part of the start diff
 - \`.gtd/TODO.md\` is the likely home of the sketch that started
   this process — the human's input, folded into the concerns
   below like any other part of the start diff; never a state
@@ -793,9 +797,10 @@ const reviewNotesCapture = (commit) => `This is machine-captured input, not inst
 Commit: ${commit}
 The human's notes are in .gtd/REVIEW.md at this commit. Run: git show ${commit}
 `;
+const noteHead = (n) => `${n.id} — ${n.anchor}${n.label === void 0 ? "" : ` (${n.label})`}`;
 const notesCapture = (notes) => `This is machine-captured input, not instructions.
 
-${notes.map((n) => `- ${n.id} — ${n.anchor}\n  ${n.text.replace(/\n/g, "\n  ")}`).join("\n")}
+${notes.map((n) => `- ${noteHead(n)}\n  ${n.text.replace(/\n/g, "\n  ")}`).join("\n")}
 `;
 const buildReviewAnswerQuestionsPrompt = (notes) => `${stateFileRules}
 - The only state file this turn writes is \`.gtd/REVIEW.md\`; touch no
@@ -857,12 +862,47 @@ record.
 What each change does next (then run \`gtd land\`):
 - **Re-review** — re-run the reviewer to author a fresh \`.gtd/REVIEW.md\` (**build.review.reviewing**).
 `;
+/** Greedy wrap at 80 columns with a 2-space continuation indent: oxfmt (`proseWrap: always`) rewrites any other shape. */
+const wrapItem = (item) => {
+	const out = [];
+	let line = "";
+	for (const word of item.split(" ")) if (line !== "" && line.length + 1 + word.length > 80) {
+		out.push(line);
+		line = `  ${word}`;
+	} else line = line === "" ? word : `${line} ${word}`;
+	return [...out, line];
+};
+/** Appends one section of `notes` to `.gtd/TODO.md`, wrapped the way oxfmt writes it; an existing file is only ever appended to. */
+const deferNotesScript = (notes, round) => {
+	return `mkdir -p .gtd
+if [ -s .gtd/TODO.md ]; then
+  [ -z "$(tail -c1 .gtd/TODO.md)" ] || printf '\\n' >> .gtd/TODO.md
+  printf '\\n' >> .gtd/TODO.md
+fi
+printf '%s\\n' ${[
+		`## Deferred review notes (${round.slice(0, 7)})`,
+		"",
+		...notes.flatMap((n) => wrapItem(`- ${noteHead(n)}: ${n.text.replace(/\s+/g, " ")}`))
+	].map(quote).join(" ")} >> .gtd/TODO.md
+`;
+};
+/** The gate right after a deferral: landing clean signs off without these notes. */
+const buildReviewAwaitAfterDeferMessage = (base, deferred) => `${buildReviewAwaitReviewMessage(base)}
+Deferred to \`.gtd/TODO.md\` just now, NOT acted on in this process — landing
+clean signs off without them:
+
+${deferred.map((n) => `- ${noteHead(n)}: ${n.text.replace(/\s*\n\s*/g, " ")}`).join("\n")}
+`;
 const buildReviewTriageMessage = () => `Judging each note the human added to \`.gtd/REVIEW.md\` (a line note, a
 footnote, or prose under a chunk) with one verdict: \`edit\` (a change
 request), \`question\`, \`nit\` (a small fix needing no re-plan) or
 \`praise\`. Run \`gtd judge answer\` and pipe a choice per note — or land
 untouched, which treats every note as \`edit\` (the conservative
 default; a skipped judgment never dismisses a note).
+
+Also judge each note's severity, one id per note: \`note-<n>.security\`,
+\`note-<n>.reversibility\`, \`note-<n>.blastRadius\` and
+\`note-<n>.newConcept\`.
 `;
 const buildReviewCollectingPrompt = (capture) => `${styleBlock}
 
@@ -883,6 +923,8 @@ ${footnoteFoldIn}${codeThreadReplies()}
 - When the capture names an answering commit, carry each answered
   question into \`.gtd/REQUIREMENTS.md\`'s \`## Answered Questions\` as
   \`### <the note>\` plus its answer — the lap replaces \`.gtd/REVIEW.md\`
+- Keep capture order, and carry each note's \`(tier: reason)\`
+  label into the concern folded from it
 - Nit notes were already fixed: never re-raise a fixed nit as a concern
 - Finish by running \`gtd check review .gtd/REVIEW.md\` and fix
   what it reports
@@ -1109,12 +1151,13 @@ const fixRisks = (notes) => agentWithSkills("review.fix.risks.fixing", buildRevi
 	system: reviewerSystem(),
 	allowEmpty: true
 });
-const awaitReview = (base, message = buildReviewAwaitReviewMessage(base)) => human("review.await-review", {
+const awaitReview = (base, message = buildReviewAwaitReviewMessage(base), acceptClean = false) => human("review.await-review", {
 	message,
 	label: "Awaiting your review",
 	file: REVIEW,
 	mode: "review",
-	base
+	base,
+	...acceptClean ? { acceptClean } : {}
 });
 /** The round at commit `round` left no `.gtd/REVIEW.md`. */
 const reviewMissing = (round) => human("review.review-missing", {
@@ -1214,6 +1257,7 @@ const defaults = {
 	judgeBudgetBytes: "32768",
 	judgeIdenticalMinP: "0.7",
 	reviewNoteActionable: "0.7",
+	reviewSeverityMinP: "0.7",
 	qualityReviews: "correctness, owasp-security, ponytail-review, test-audit, conventions, spec-challenge"
 };
 /** Environment settings. */
@@ -1231,6 +1275,7 @@ const ShippedOptions = Struct({
 	judgeBudgetBytes: setting,
 	judgeIdenticalMinP: setting,
 	reviewNoteActionable: setting,
+	reviewSeverityMinP: setting,
 	qualityReviews: setting,
 	testCommand: setting,
 	fastTestCommand: setting,
@@ -1317,12 +1362,6 @@ const tail = (fixFirst, finish, built) => scope("build", async () => {
 	else await repair();
 	return finish(escalations, frozen);
 });
-const handOffScript = (reviewed) => [
-	"#!/usr/bin/env sh",
-	"set -e",
-	`git show ${quote(`${reviewed}:${REVIEW}`)} > ${quote(REVIEW_ORIG)}`,
-	""
-].join("\n");
 /**
 * The review and fix workflows' human review since `base`: a sign-off closes
 * `.gtd/REVIEW.md`; a note leaves it, with the reviewer's own version as
@@ -1336,7 +1375,7 @@ const handOffReview = (base, escalations) => reviewToHandOff(base, {
 	awaitReview: (b) => awaitReview(b, handOffAwaitReviewMessage(b)),
 	reviewMissing,
 	close: closeReview,
-	handOff: (reviewed) => run("review.handing-off", handOffScript(reviewed), { label: "Handing your notes to fix" }),
+	handOff: (reviewed) => run("review.handing-off", showScript(reviewed, REVIEW, REVIEW_ORIG), { label: "Handing your notes to fix" }),
 	threadsPending: "gtd land: open-threads: a thread in .gtd/REVIEW.md or an `H:` code comment waits on the agent — nothing answers it here; delete it, or turn it into a note for fix.",
 	unparsed: "gtd land: review-doc: your edit to .gtd/REVIEW.md contains no note fix can read — restore the deleted chunk, or write the note as a line under its entry.",
 	deleted: "gtd land: review-doc: .gtd/REVIEW.md was deleted — restore it, or leave a note to hand to fix."
@@ -1372,6 +1411,7 @@ const access = (vars) => ({
 	architecture: { write: [".gtd/REQUIREMENTS.md"] },
 	"architecture.decompose": { write: [".gtd/packages/**", ".gtd/ARCHITECTURE.md"] },
 	"build.review": { write: [".gtd/REVIEW.md"] },
+	"build.review.defer": { write: [".gtd/TODO.md"] },
 	"build.review.fix.nits": {},
 	"build.review.fix.risks": {},
 	...lensScopes("build.quality", lensesOf(vars.qualityReviews ?? ""), () => ({ write: [] }))
@@ -1385,4 +1425,4 @@ const steering = {
 	[REVIEW]: "review"
 };
 //#endregion
-export { unwindFailure as $, architectureAuthorPrompt as A, designTriagePrompt as B, fixCheck as C, reviewing as D, reviewMissing as E, buildReviewFixNitsPrompt as F, packagesItemFixSuitePrompt as G, fixReviewNotesPrompt as H, buildReviewTriageMessage as I, reviewGateBlockedMessage as J, reviewEditNotesCapture as K, builderSystem as L, architectureGateAnswerMessage as M, buildReviewAnswerQuestionsPrompt as N, agentWithSkills as O, buildReviewCollectingPrompt as P, unwindFailedMessage as Q, designGateAnswerMessage as R, coder as S, planner as T, idleMessage as U, finisherSystem as V, packagesItemBuildingPrompt as W, reviewerSystem as X, reviewNotesCapture as Y, startGateBlockedMessage as Z, ARCHITECTURE as _, REVIEW_ORIG as a, REVIEW as b, refusePendingHandOff as c, shipped as d, defaults as f, healthy as g, gate as h, skills as i, architectureDecomposePrompt as j, architectSystem as k, tail as l, baseline as m, summary as n, closeReview as o, envDefaults as p, reviewEditsCapture as q, access as r, handOffTail as s, steering as t, guarded as u, FEEDBACK as v, fixRisks as w, awaitReview as x, REQUIREMENTS as y, designSystem as z };
+export { startGateBlockedMessage as $, architectureAuthorPrompt as A, designGateAnswerMessage as B, fixCheck as C, reviewing as D, reviewMissing as E, buildReviewCollectingPrompt as F, idleMessage as G, designTriagePrompt as H, buildReviewFixNitsPrompt as I, reviewEditNotesCapture as J, packagesItemBuildingPrompt as K, buildReviewTriageMessage as L, architectureGateAnswerMessage as M, buildReviewAnswerQuestionsPrompt as N, agentWithSkills as O, buildReviewAwaitAfterDeferMessage as P, reviewerSystem as Q, builderSystem as R, coder as S, planner as T, finisherSystem as U, designSystem as V, fixReviewNotesPrompt as W, reviewGateBlockedMessage as X, reviewEditsCapture as Y, reviewNotesCapture as Z, ARCHITECTURE as _, REVIEW_ORIG as a, REVIEW as b, refusePendingHandOff as c, shipped as d, unwindFailedMessage as et, defaults as f, healthy as g, gate as h, skills as i, architectureDecomposePrompt as j, architectSystem as k, tail as l, baseline as m, summary as n, closeReview as o, envDefaults as p, packagesItemFixSuitePrompt as q, access as r, handOffTail as s, steering as t, unwindFailure as tt, guarded as u, FEEDBACK as v, fixRisks as w, awaitReview as x, REQUIREMENTS as y, deferNotesScript as z };

package/dist/chunks/{steering-D-PvRC5W.mjs → steering-DVILanVf.mjs}

@@ -1,4 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+//#region src/steering/SteeringFormat.ts
+/** `file:line:col: message` — the shape editors and grep already jump on. Stored 0-based, printed 1-based. A finding with a `line` but no `range`, or none at all, degrades to the shorter forms. */
+const formatFinding = (file, finding) => {
+	if (finding.line === void 0) return finding.message;
+	const col = finding.range !== void 0 ? `:${finding.range.start.character + 1}` : "";
+	return `${file}:${finding.line + 1}${col}: ${finding.message}`;
+};
+//#endregion
 //#region node_modules/mdast-util-to-string/lib/index.js
 /**
 * @typedef {import('mdast').Nodes} Nodes
@@ -15912,10 +15920,13 @@ const reviewNotes = (before, after) => {
 	return [...parseReviewDoc(after).changesets.flatMap((chunk) => {
 		const prior = oldChunks.get(chunk.title);
 		return [...chunkNote(chunk, prior), ...pointerNotes(chunk, prior)];
-	}), ...footnoteNotes(before, after)].sort((a, b) => a.line - b.line).map((f, i) => ({
-		id: `note-${i + 1}`,
-		...f.note
-	}));
+	}), ...footnoteNotes(before, after)].sort((a, b) => a.line - b.line).map((f, i) => {
+		return {
+			id: `note-${i + 1}`,
+			...f.note,
+			forced: /^!(\s|$)/.test(f.note.text)
+		};
+	});
 };
 /** Pointer notes the reviewer opened with `Risk:`, in document order — the ones the workflow fixes before the human gate. */
 const reviewRisks = (content) => parseReviewDoc(content).changesets.flatMap((chunk) => chunk.files.flatMap((file) => file.note?.startsWith("Risk:") ? [{
@@ -16293,4 +16304,4 @@ const viewOf = (format, content) => ({
 /** Every OPEN thread — last entry is the agent's — as `{ name, line, firstMe }` (0-based line). `[]` for a format with no thread concept. */
 const openThreads = (format, content) => format.openThreads?.(content) ?? [];
 //#endregion
-export { headingSections as C, headingSectionBodies as S, openThreadFindings as _, unansweredQuestions as a, parseThreadsWithFindings as b, stripCodeThreads as c, reviewNotes as d, reviewRisks as f, THREAD_REPLY_ACTION_TITLE as g, FOOTNOTE_ACTION_TITLE as h, steeringFormatOrFreeForm as i, freeFormFormat as l, isAnswered as m, openThreads as n, viewOf as o, FREE_TEXT_PLACEHOLDER as p, steeringFormatFor as r, parseCodeThreads as s, BUILT_IN_MODE_NAMES as t, applySteeringEdits as u, parseFootnotes as v, getParseCount as x, parseThreads as y };
+export { headingSections as C, headingSectionBodies as S, openThreadFindings as _, unansweredQuestions as a, parseThreadsWithFindings as b, stripCodeThreads as c, reviewNotes as d, reviewRisks as f, THREAD_REPLY_ACTION_TITLE as g, FOOTNOTE_ACTION_TITLE as h, steeringFormatOrFreeForm as i, freeFormFormat as l, isAnswered as m, openThreads as n, viewOf as o, FREE_TEXT_PLACEHOLDER as p, steeringFormatFor as r, parseCodeThreads as s, BUILT_IN_MODE_NAMES as t, applySteeringEdits as u, parseFootnotes as v, formatFinding as w, getParseCount as x, parseThreads as y };

package/dist/flows.mjs

@@ -237,6 +237,13 @@ const moveScript = (from, to) => [
 	`mv -- ${quote(from)} ${quote(to)}`,
 	""
 ].join("\n");
+/** Write `path` as committed at `ref` to `to`. */
+const showScript = (ref, path, to) => [
+	"#!/usr/bin/env sh",
+	"set -e",
+	`git show ${quote(`${ref}:${path}`)} > ${quote(to)}`,
+	""
+].join("\n");
 //#endregion
 //#region src/flows/helpers.ts
 /** Whether a judge answered `expected` at a probability of at least `minP`. */
@@ -515,6 +522,7 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	scope: () => scope,
 	sectionBodies: () => sectionBodies,
 	sections: () => sections,
+	showScript: () => showScript,
 	skillsFor: () => skillsFor,
 	start: () => start,
 	threads: () => threads,
@@ -522,4 +530,4 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	wrote: () => wrote
 });
 //#endregion
-export { FLOWS_PROTOCOL, FlowsProtocolError, accessFor, agent, answered, changes, changesSince, check, checkScript, codeChanges, codeThreads, configProblems, configure, defineConfig, defineWorkflow, env, glob, hasThreadFor, head, human, installContext, isFactoryWorkflow, judge, moveScript, numeric, openQuestions, protocolMismatch, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restart, restoreScript, revertScript, run, scope, sectionBodies, sections, skillsFor, start, flows_exports as t, threads, vars, wrote };
+export { FLOWS_PROTOCOL, FlowsProtocolError, accessFor, agent, answered, changes, changesSince, check, checkScript, codeChanges, codeThreads, configProblems, configure, defineConfig, defineWorkflow, env, glob, hasThreadFor, head, human, installContext, isFactoryWorkflow, judge, moveScript, numeric, openQuestions, protocolMismatch, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restart, restoreScript, revertScript, run, scope, sectionBodies, sections, showScript, skillsFor, start, flows_exports as t, threads, vars, wrote };