@rallycry/conveyor-agent 11.0.20 → 11.0.22

package/dist/{chunk-POK3QCGN.js → chunk-RW6V7KCE.js}

@@ -31,2349 +31,93 @@ import {
   turnOptionsFrom
 } from "./chunk-W5INK3NE.js";
 import {
+  AGENT_STATUS_REASON_USER_QUESTION,
   AgentConnection,
+  CARD_DESCRIPTION_FIELD_HINT,
+  CONTEXT_LINK_LOCATOR_MAX,
+  CRITICAL_AUTOMATED_SOURCES,
   CodespacePortVisibility,
+  DEFAULT_CI_WAIT_TIMEOUT_MINUTES,
+  DEFAULT_CODEX_CODING_MODEL,
   DEFAULT_LIFECYCLE_CONFIG,
+  DEFAULT_SONNET_MODEL,
+  EXTERNAL_AGENT_MESSAGE_SOURCE,
+  FABLE_MODEL,
+  HUMAN_PROSE_WRITING_STYLE,
   Lifecycle,
+  MAX_CI_WAIT_TIMEOUT_MINUTES,
+  MAX_FILE_SIZE_BYTES,
+  PM_CHAT_HISTORY_LIMIT,
+  PRE_BUILD_TASK_STATUSES,
+  PTY_STREAM_PORT_ATTEMPTS,
+  PTY_STREAM_PORT_BASE,
   PortDiscovery,
+  PtyStreamFrameReader,
+  ReviewGuideContentSchema,
+  SEVERITY_ENUM,
+  TAG_DESCRIPTION_MAX,
+  TAG_OVERVIEW_MAX,
+  TAG_REASON_MAX,
+  TASK_CHAT_HISTORY_LIMIT,
+  TUI_KINDS,
   awaitGitReady,
   clearForceFreshCooldown,
   createServiceLogger,
+  encodePtyStreamFrame,
   ensureOnTaskBranch,
   flushAllPendingWork,
   flushPendingChanges,
   forceFreshCooldownNotice,
   forceFreshMintBlocked,
   getCurrentBranch,
-  git,
-  hasUncommittedChanges,
-  hasUnpushedCommits,
-  pushToOrigin,
-  readWorkspaceBytes,
-  readWorkspaceDir,
-  readWorkspaceFile,
-  recordForceFreshFailure,
-  remoteMatchesLocalHead,
-  restoreWipSnapshot,
-  stageAndCommit,
-  statWorkspacePath,
-  updateRemoteToken,
-  verifyGitCredential
-} from "./chunk-JBGPARLG.js";
-import {
-  registerBootMilestoneSocketFallback,
-  reportBootMilestone
-} from "./chunk-Q4FQOJ7D.js";
-import {
-  describeTokenFile,
-  ghHostsExternallyOwned,
-  githubTokenFilePath,
-  sleep
-} from "./chunk-W4LZ7R6Z.js";
-import {
-  isHeavyGateActive,
-  listAbandonedGateReceipts,
-  listGateExitSentinels,
-  refreshGenericGateStatus
-} from "./chunk-372R6E4C.js";
-import {
-  LoopLagMonitor,
-  loopStatusForRunnerStatus
-} from "./chunk-IA45XHOA.js";
-import {
-  getWorkbenchClient
-} from "./chunk-SQM2BQ7H.js";
-import {
-  workbenchEnabled
-} from "./chunk-KMB3BU4S.js";
-
-// ../shared/dist/chunk-OKJPFFQI.js
-var CARD_DESCRIPTION_MAX = 255;
-var CARD_DESCRIPTION_LIMIT_MESSAGE = `Card descriptions are capped at ${CARD_DESCRIPTION_MAX} characters \u2014 write 1-2 plain sentences a non-engineer can read; put technical detail in the plan or card chat.`;
-var CARD_DESCRIPTION_FIELD_HINT = `max ${CARD_DESCRIPTION_MAX} chars, 1-2 plain sentences a non-engineer can read \u2014 put technical detail in the plan`;
-var SEVERITY_ENUM = [
-  "DEBUG",
-  "INFO",
-  "NOTICE",
-  "WARNING",
-  "ERROR",
-  "CRITICAL",
-  "ALERT",
-  "EMERGENCY"
-];
-var MAX_LINE_CHARS = 400;
-var DEFAULT_SINCE_MINUTES = 60;
-function truncateLine(text) {
-  const oneLine = text.replace(/\s*\n\s*/g, " \u23CE ");
-  if (oneLine.length <= MAX_LINE_CHARS) return oneLine;
-  const overflow = oneLine.length - MAX_LINE_CHARS;
-  return `${oneLine.slice(0, MAX_LINE_CHARS)}\u2026[+${overflow}c]`;
-}
-function entrySource(entry) {
-  return entry.resource.service_name ?? entry.resource.pod_name ?? entry.resource.database_id ?? entry.resourceType ?? "-";
-}
-var PAYLOAD_SKIP_KEYS = /* @__PURE__ */ new Set(["message", "severity", "timestamp", "level", "stack"]);
-var PAYLOAD_PRIORITY = [
-  "error",
-  "outcome",
-  "serviceName",
-  "methodName",
-  "userId",
-  "taskId",
-  "sessionId",
-  "workspaceId",
-  "projectId",
-  "durationMs"
-];
-var PAYLOAD_VALUE_MAX_CHARS = 160;
-function compactPayloadValue(value) {
-  const raw = typeof value === "string" ? value : JSON.stringify(value);
-  const flat = (raw ?? "undefined").replace(/\s+/g, " ");
-  const quoted = typeof value === "string" && /[\s"]/.test(flat) ? JSON.stringify(flat) : flat;
-  return quoted.length > PAYLOAD_VALUE_MAX_CHARS ? `${quoted.slice(0, PAYLOAD_VALUE_MAX_CHARS)}\u2026` : quoted;
-}
-function formatPayloadSuffix(payloadJson) {
-  if (!payloadJson) return "";
-  let parsed;
-  try {
-    parsed = JSON.parse(payloadJson);
-  } catch {
-    return "";
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return "";
-  const obj = parsed;
-  const rank = (key) => {
-    const i = PAYLOAD_PRIORITY.indexOf(key);
-    return i === -1 ? PAYLOAD_PRIORITY.length : i;
-  };
-  const parts = Object.keys(obj).filter((k) => !PAYLOAD_SKIP_KEYS.has(k) && obj[k] !== void 0 && obj[k] !== null).sort((a, b) => rank(a) - rank(b) || a.localeCompare(b)).map((k) => `${k}=${compactPayloadValue(obj[k])}`);
-  return parts.length > 0 ? ` | ${parts.join(" ")}` : "";
-}
-function formatLogEntryLine(entry) {
-  const httpPrefix = entry.httpRequest?.status ? `http ${entry.httpRequest.status} ${entry.httpRequest.method ?? ""} ${entry.httpRequest.url ?? ""}`.trim() + " \u2014 " : "";
-  return `${entry.timestamp} ${entry.severity.padEnd(7)} [${entrySource(entry)}] ${truncateLine(
-    `${httpPrefix}${entry.message}${formatPayloadSuffix(entry.payload)}`
-  )}`;
-}
-async function runQueryGcpLogs(port, params, now = Date.now) {
-  const startTime = params.startTime ?? new Date(now() - (params.sinceMinutes ?? DEFAULT_SINCE_MINUTES) * 6e4).toISOString();
-  const result = await port.queryGcpLogs({
-    projectId: params.projectId,
-    env: params.env,
-    severity: params.severity,
-    services: params.services,
-    sqlInstances: params.sqlInstances,
-    allServices: params.allServices,
-    search: params.search,
-    filter: params.filter,
-    startTime,
-    endTime: params.endTime,
-    limit: params.limit,
-    pageToken: params.pageToken
-  });
-  if (result.error) return result.error;
-  const header = [
-    `env=${params.env ?? "prod"}`,
-    `window=${startTime}\u2192${params.endTime ?? "now"}`,
-    ...params.severity ? [`minSeverity=${params.severity}`] : [],
-    `scope=${result.scopedServices ? `[${result.scopedServices.join(", ")}]` : "all"}`,
-    `entries=${result.entries.length}`
-  ].join(" ");
-  const lines = result.entries.map(formatLogEntryLine);
-  const footer = result.nextPageToken ? [`-- more available: pass pageToken="${result.nextPageToken}" to continue`] : [];
-  if (lines.length === 0) {
-    return [
-      header,
-      "(no matching log entries \u2014 widen the window, lower minSeverity, or drop filters)"
-    ].join("\n");
-  }
-  return [header, ...lines, ...footer].join("\n");
-}
-async function runQueryGrafanaLogs(port, params, now = Date.now) {
-  const startTime = params.startTime ?? new Date(now() - (params.sinceMinutes ?? DEFAULT_SINCE_MINUTES) * 6e4).toISOString();
-  const result = await port.queryGrafanaLogs({
-    projectId: params.projectId,
-    env: params.env,
-    level: params.level,
-    services: params.services,
-    search: params.search,
-    logql: params.logql,
-    startTime,
-    endTime: params.endTime,
-    limit: params.limit
-  });
-  if (result.error) return result.error;
-  const header = [
-    `env=${params.env ?? "prod"}`,
-    `window=${startTime}\u2192${params.endTime ?? "now"}`,
-    ...params.level ? [`minLevel=${params.level}`] : [],
-    ...result.logql ? [`logql=${truncateLine(result.logql)}`] : [],
-    `entries=${result.entries.length}`
-  ].join(" ");
-  const lines = result.entries.map(formatLogEntryLine);
-  const oldest = result.entries.map((e) => e.timestamp).sort()[0];
-  const footer = result.hasMore ? [`-- hit the limit: older lines exist \u2014 pass endTime="${oldest}" to page further back`] : [];
-  if (lines.length === 0) {
-    return [
-      header,
-      "(no matching log entries \u2014 widen the window, lower minLevel, or drop filters)"
-    ].join("\n");
-  }
-  return [header, ...lines, ...footer].join("\n");
-}
-
-// ../shared/dist/index.js
-import { z } from "zod";
-import { z as z2 } from "zod";
-import { z as z3 } from "zod";
-import { z as z4 } from "zod";
-import { z as z5 } from "zod";
-import { z as z6 } from "zod";
-import { z as z7 } from "zod";
-import { z as z8 } from "zod";
-import { z as z9 } from "zod";
-import { z as z10 } from "zod";
-var EXTERNAL_AGENT_MESSAGE_SOURCE = "external_agent";
-var DEFAULT_SONNET_MODEL = "claude-sonnet-5";
-var DEFAULT_OPUS_MODEL = "claude-opus-5";
-var DEFAULT_HAIKU_MODEL = "claude-haiku-4-5-20251001";
-var FABLE_MODEL = "claude-fable-5-1";
-var PREVIOUS_SONNET_MODEL = "claude-sonnet-4-6";
-var PREVIOUS_OPUS_MODEL = "claude-opus-4-8";
-var PTY_STREAM_PORT_BASE = 7420;
-var PTY_STREAM_PORT_ATTEMPTS = 8;
-function encodePtyStreamFrame(frame) {
-  return `${JSON.stringify(frame)}
-`;
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null;
-}
-function parsePtyStreamFrame(line) {
-  if (!line) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(line);
-  } catch {
-    return null;
-  }
-  if (!isRecord(parsed) || typeof parsed.t !== "string") return null;
-  switch (parsed.t) {
-    case "hello":
-    case "data":
-    case "ended":
-    case "input":
-    case "resize":
-      return parsed;
-    default:
-      return null;
-  }
-}
-var PtyStreamFrameReader = class {
-  constructor(onFrame) {
-    this.onFrame = onFrame;
-  }
-  onFrame;
-  buffer = "";
-  push(chunk) {
-    this.buffer += chunk;
-    let index = this.buffer.indexOf("\n");
-    while (index >= 0) {
-      const line = this.buffer.slice(0, index);
-      this.buffer = this.buffer.slice(index + 1);
-      const frame = parsePtyStreamFrame(line);
-      if (frame) this.onFrame(frame);
-      index = this.buffer.indexOf("\n");
-    }
-  }
-};
-var PREVIEW_PORT_DENY_LIST = [
-  5432,
-  6379,
-  9200,
-  ...Array.from({ length: PTY_STREAM_PORT_ATTEMPTS }, (_, i) => PTY_STREAM_PORT_BASE + i)
-];
-function normalizeCheckpointPath(value) {
-  let normalized = value.trim().replace(/\/{2,}/g, "/");
-  normalized = normalized.split("/").filter((segment) => segment !== ".").join("/");
-  while (normalized.endsWith("/")) normalized = normalized.slice(0, -1);
-  return normalized;
-}
-var checkpointPathSchema = z.string().transform(normalizeCheckpointPath).pipe(
-  z.string().min(1).refine((value) => value !== ".", "Checkpoint paths must name a repository entry").refine((value) => !value.startsWith("/"), "Checkpoint paths must be repository-relative").refine(
-    (value) => !/^[A-Za-z]:[\\/]/.test(value) && !value.includes("\\"),
-    "Checkpoint paths must use repository-relative POSIX syntax"
-  ).refine(
-    (value) => !value.split("/").includes(".."),
-    "Checkpoint paths must not traverse a parent directory"
-  )
-);
-var secretNameSchema = z.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/);
-var checkpointKeySchema = z.string().regex(/^[0-9a-f]{64}$/);
-var checkpointDigestRefSchema = z.string().regex(/^[^\s@]+@sha256:[0-9a-f]{64}$/);
-var ACTIONS_PREBAKE_REGISTRY_PATTERN = /^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::(?:[1-9][0-9]{0,4}))?(?:\/[a-z0-9]+(?:[._-][a-z0-9]+)*)*$/;
-var actionsPrebakeRegistrySchema = z.string().trim().min(1).regex(
-  ACTIONS_PREBAKE_REGISTRY_PATTERN,
-  "Actions prebake registry must be a lowercase host[:port] with an optional path prefix"
-).refine((value) => {
-  const port = /:([0-9]+)(?:\/|$)/.exec(value)?.[1];
-  return !port || Number(port) <= 65535;
-}, "Actions prebake registry port must be between 1 and 65535");
-function uniqueSortedArray(item, minimum = 0) {
-  return z.array(item).min(minimum).superRefine((values, ctx) => {
-    if (new Set(values).size !== values.length) {
-      ctx.addIssue({ code: z.ZodIssueCode.custom, message: "Duplicate values are not allowed" });
-    }
-  }).transform((values) => [...values].sort());
-}
-var projectCheckpointSettingsSchema = z.object({
-  enabled: z.literal(true),
-  cacheCommand: z.string().trim().min(1),
-  cacheInputPaths: uniqueSortedArray(checkpointPathSchema, 1),
-  reusableArtifactPaths: uniqueSortedArray(checkpointPathSchema, 1),
-  finalizeCommand: z.string().trim().min(1),
-  credentialEpoch: z.string().trim().min(1),
-  requiredSecretNames: uniqueSortedArray(secretNameSchema).optional(),
-  optionalSecretNames: uniqueSortedArray(secretNameSchema).optional(),
-  bakeWebAppBuild: z.boolean().optional()
-}).superRefine((checkpoint, ctx) => {
-  const required = new Set(checkpoint.requiredSecretNames ?? []);
-  for (const name of checkpoint.optionalSecretNames ?? []) {
-    if (required.has(name)) {
-      ctx.addIssue({
-        code: z.ZodIssueCode.custom,
-        path: ["optionalSecretNames"],
-        message: "A secret cannot be both required and optional"
-      });
-    }
-  }
-});
-var TUI_KINDS = ["claude-code", "opencode", "codex"];
-var ACHIEVEMENT_RARITIES = [
-  {
-    key: "common",
-    name: "Common",
-    color: "#22c55e",
-    iconPath: "/storypoints/square-solid-full.svg"
-  },
-  {
-    key: "magic",
-    name: "Magic",
-    color: "#3b82f6",
-    iconPath: "/storypoints/diamond-solid-full.svg"
-  },
-  { key: "rare", name: "Rare", color: "#eab308", iconPath: "/storypoints/gem-solid-full.svg" },
-  {
-    key: "unique",
-    name: "Unique",
-    color: "#f97316",
-    iconPath: "/storypoints/scroll-sharp-solid-full.svg"
-  },
-  { key: "pack", name: "Pack", color: "#9c27b0", iconPath: "/storypoints/pack.svg" }
-];
-var RISK_LEVELS = ["critical", "high", "medium", "low"];
-var riskLevelSchema = z2.enum(RISK_LEVELS);
-var DEFAULT_RISK_LEVELS = [
-  {
-    level: "critical",
-    value: 4,
-    label: "Critical",
-    description: "Touches critical surface area; give it the closest review.",
-    color: "#dc2626",
-    ordinal: 0
-  },
-  {
-    level: "high",
-    value: 3,
-    label: "Elevated",
-    description: "Touches important surface area; review carefully.",
-    color: "#ea580c",
-    ordinal: 1
-  },
-  {
-    level: "medium",
-    value: 2,
-    label: "Moderate",
-    description: "Moderate surface area; normal review.",
-    color: "#d97706",
-    ordinal: 2
-  },
-  {
-    level: "low",
-    value: 1,
-    label: "Minimal",
-    description: "Small or isolated surface area.",
-    color: "#64748b",
-    ordinal: 3
-  }
-];
-var LEVEL_BY_VALUE = new Map(
-  DEFAULT_RISK_LEVELS.map((m) => [m.value, m.level])
-);
-var ACTIVE_WORK_STATUSES = [
-  "InProgress",
-  "ReviewPR",
-  "ReviewDev",
-  "ReviewLive",
-  "Complete"
-];
-var IDENTIFIED_WORK_STATUSES = ["Open", ...ACTIVE_WORK_STATUSES];
-var DEFAULT_TASK_STATUS_COLOR = "#a8a29e";
-var DEFAULT_TASK_STATUS_COLOR_INT = Number.parseInt(DEFAULT_TASK_STATUS_COLOR.slice(1), 16);
-var MAX_FILE_SIZE_BYTES = 25 * 1024 * 1024;
-var MAX_FILE_TAGS = 5;
-var MAX_FILE_TAG_LENGTH = 100;
-var EMBED_THRESHOLD_IMAGES = 5 * 1024 * 1024;
-var EMBED_THRESHOLD_TEXT = 2 * 1024 * 1024;
-var IDLE_HEARTBEAT_MS = 90 * 1e3;
-var RUNNER_MODES = [
-  "task",
-  "plan",
-  "pm",
-  "code-review",
-  "adhoc",
-  "pack",
-  "shell",
-  "serving"
-];
-var TurnEndToolCallSchema = z3.object({
-  tool: z3.string(),
-  input: z3.string().optional(),
-  output: z3.string().optional(),
-  timestamp: z3.string().optional()
-}).passthrough();
-var KnownAgentEventSchema = z3.discriminatedUnion("type", [
-  // ── Lifecycle / connection ────────────────────────────────────────────
-  z3.object({
-    type: z3.literal("connected"),
-    sessionId: z3.string(),
-    projectId: z3.string().optional()
-  }).passthrough(),
-  // Open-ended context snapshot spread from buildInitializationContext().
-  z3.object({ type: z3.literal("session_manifest") }).passthrough(),
-  z3.object({
-    type: z3.literal("agent_runner_status"),
-    reason: z3.string(),
-    attempt: z3.number().optional(),
-    attempts: z3.number().optional()
-  }).passthrough(),
-  z3.object({ type: z3.literal("shutdown"), reason: z3.string().optional() }).passthrough(),
-  z3.object({ type: z3.literal("mode_changed"), agentMode: z3.string() }).passthrough(),
-  z3.object({ type: z3.literal("mode_transition"), from: z3.string(), to: z3.string() }).passthrough(),
-  // ── Turn stream ───────────────────────────────────────────────────────
-  z3.object({ type: z3.literal("message"), content: z3.string() }).passthrough(),
-  z3.object({ type: z3.literal("thinking"), message: z3.string() }).passthrough(),
-  z3.object({
-    type: z3.literal("tool_use"),
-    tool: z3.string(),
-    // Producers send JSON.stringify(input); consumers defend against
-    // object inputs from older agents, so the wire stays permissive here.
-    input: z3.unknown().optional()
-  }).passthrough(),
-  z3.object({
-    type: z3.literal("tool_result"),
-    tool: z3.string(),
-    output: z3.unknown().optional(),
-    isError: z3.boolean().optional(),
-    redactedCount: z3.number().optional()
-  }).passthrough(),
-  z3.object({ type: z3.literal("turn_end"), toolCalls: z3.array(TurnEndToolCallSchema) }).passthrough(),
-  z3.object({
-    type: z3.literal("completed"),
-    summary: z3.string().optional(),
-    durationMs: z3.number().optional()
-  }).passthrough(),
-  z3.object({ type: z3.literal("error"), message: z3.string() }).passthrough(),
-  z3.object({ type: z3.literal("agent_typing_start") }).passthrough(),
-  z3.object({ type: z3.literal("agent_typing_stop") }).passthrough(),
-  // ── Telemetry ─────────────────────────────────────────────────────────
-  // heartbeat/typing: legacy telemetry the server still classifies as
-  // transient (TRANSIENT_EVENT_TYPES) — kept in the vocabulary.
-  z3.object({ type: z3.literal("heartbeat") }).passthrough(),
-  z3.object({ type: z3.literal("typing") }).passthrough(),
-  z3.object({
-    type: z3.literal("context_update"),
-    contextTokens: z3.number(),
-    contextWindow: z3.number(),
-    inputTokens: z3.number().optional(),
-    cacheReadInputTokens: z3.number().optional(),
-    cacheCreationInputTokens: z3.number().optional(),
-    totalTokensUsed: z3.number().optional()
-  }).passthrough(),
-  // Four producer shapes share this type: {rateLimitType, utilization, status}
-  // (SDK rate_limit_event), {resetsAt} (agent-connection resume notice), the
-  // usage-sampler ({rateLimitType, utilization, status, resetsAt, gauges}
-  // — resetsAt matches rateLimitType; gauges survives via .passthrough()), and
-  // {unmeasurable, reason} (the sampler reporting it cannot read this key).
-  z3.object({
-    type: z3.literal("rate_limit_update"),
-    rateLimitType: z3.string().optional(),
-    utilization: z3.number().optional(),
-    status: z3.string().optional(),
-    resetsAt: z3.string().optional(),
-    unmeasurable: z3.boolean().optional(),
-    reason: z3.string().optional()
-  }).passthrough(),
-  z3.object({
-    type: z3.literal("context_compacted"),
-    trigger: z3.string().optional(),
-    preTokens: z3.number().optional()
-  }).passthrough(),
-  z3.object({
-    type: z3.literal("tool_progress"),
-    toolName: z3.string().optional(),
-    elapsedSeconds: z3.number().optional()
-  }).passthrough(),
-  z3.object({
-    type: z3.literal("subagent_started"),
-    sdkTaskId: z3.string().optional(),
-    description: z3.string().optional()
-  }).passthrough(),
-  z3.object({
-    type: z3.literal("subagent_progress"),
-    sdkTaskId: z3.string().optional(),
-    description: z3.string().optional(),
-    toolUses: z3.number().optional(),
-    durationMs: z3.number().optional()
-  }).passthrough(),
-  // ── Work products ─────────────────────────────────────────────────────
-  z3.object({ type: z3.literal("pr_created"), url: z3.string(), number: z3.number() }).passthrough(),
-  z3.object({
-    type: z3.literal("code_review_complete"),
-    result: z3.enum(["approved", "changes_requested"]),
-    summary: z3.string().optional(),
-    issues: z3.array(
-      z3.object({
-        file: z3.string(),
-        line: z3.number().optional(),
-        severity: z3.string().optional(),
-        description: z3.string().optional()
-      }).passthrough()
-    ).optional()
-  }).passthrough(),
-  // ── Environment setup / start command ─────────────────────────────────
-  z3.object({ type: z3.literal("setup_output"), stream: z3.string(), data: z3.string() }).passthrough(),
-  z3.object({
-    type: z3.literal("setup_complete"),
-    startCommandRunning: z3.boolean().optional(),
-    startCommandConfigured: z3.boolean().optional(),
-    // Sanitized server-side by sanitizeSessionPreviewPorts — stays unknown.
-    previewPorts: z3.unknown().optional()
-  }).passthrough(),
-  z3.object({ type: z3.literal("setup_error"), message: z3.string() }).passthrough(),
-  z3.object({ type: z3.literal("start_command_started") }).passthrough(),
-  z3.object({ type: z3.literal("start_command_output"), stream: z3.string(), data: z3.string() }).passthrough(),
-  z3.object({
-    type: z3.literal("start_command_exited"),
-    code: z3.number().nullable().optional(),
-    signal: z3.string().nullable().optional(),
-    message: z3.string().optional()
-  }).passthrough(),
-  z3.object({ type: z3.literal("start_command_error"), message: z3.string() }).passthrough()
-]);
-var AgentEventSchema = z3.union([
-  KnownAgentEventSchema,
-  z3.object({ type: z3.string().min(1) }).catchall(z3.unknown())
-]);
-var cardDescription = z4.string().max(CARD_DESCRIPTION_MAX, CARD_DESCRIPTION_LIMIT_MESSAGE).optional();
-var AgentHeartbeatSchema = z4.object({
-  sessionId: z4.string().optional(),
-  timestamp: z4.string(),
-  status: z4.enum(["active", "idle", "building"]),
-  currentAction: z4.string().optional(),
-  /** Sender-observed main event-loop lag (ms) — see AgentHeartbeat.loopLagMs. */
-  loopLagMs: z4.number().nonnegative().optional()
-});
-var CreatePRInputSchema = z4.object({
-  title: z4.string().min(1),
-  body: z4.string(),
-  head: z4.string().optional(),
-  base: z4.string().optional()
-});
-var PostToChatInputSchema = z4.object({
-  message: z4.string().min(1),
-  type: z4.enum(["message", "question", "update"]).optional().default("message"),
-  milestone: z4.enum(["plan_ready", "implementation_complete", "blocked"]).optional()
-});
-var GetTaskContextRequestSchema = z4.object({
-  sessionId: z4.string(),
-  includeHistory: z4.boolean().optional().default(false),
-  /**
-   * Read the plan-revised marker WITHOUT consuming it. Bookkeeping fetches
-   * (the session-identity check, the branch refresh) pass true so they cannot
-   * race the boot fetch and swallow the notice before it reaches the prompt.
-   * Defaults to false — consuming — so a pod running an older agent build still
-   * clears the marker instead of showing the notice on every boot forever.
-   */
-  peekPlanRevision: z4.boolean().optional().default(false)
-});
-var GetChatMessagesRequestSchema = z4.object({
-  sessionId: z4.string(),
-  limit: z4.number().int().positive().optional().default(50),
-  offset: z4.number().int().nonnegative().optional().default(0),
-  /** Task id or slug to read chat from. Omit for the session's own task. Only
-   * the session's own task or one of its children resolves — anything else is
-   * an error, never a silent fallback to the caller's own chat. */
-  taskId: z4.string().optional()
-});
-var GetTaskFilesRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var GetTaskFileRequestSchema = z4.object({
-  sessionId: z4.string(),
-  fileId: z4.string()
-});
-var GetTaskRequestSchema = z4.object({
-  sessionId: z4.string(),
-  taskSlugOrId: z4.string()
-});
-var GetCliHistoryRequestSchema = z4.object({
-  sessionId: z4.string(),
-  limit: z4.number().int().positive().optional().default(100),
-  source: z4.enum(["agent", "application"]).optional(),
-  /** Task id or slug to read logs from. Omit for the session's own task. Only
-   * the session's own task or one of its children resolves — anything else is
-   * an error, never a silent fallback to the caller's own logs. */
-  taskId: z4.string().optional()
-});
-var ListSubtasksRequestSchema = z4.object({
-  sessionId: z4.string(),
-  /** "compact" returns the slim orchestration view (ListSubtasksCompactResponse)
-   * with the pack build-slot picture; "full" (default — wire-compat with older
-   * agents) returns the verbose SubtaskSummaryDTO[] including description/plan. */
-  view: z4.enum(["compact", "full"]).optional()
-});
-var GetDependenciesRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var GetSuggestionsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  status: z4.string().optional(),
-  limit: z4.number().int().min(1).max(100).optional()
-});
-var ListManualTestsRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var QueryManualTestsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  cardStatuses: z4.array(z4.string()).optional(),
-  testStatuses: z4.array(z4.enum(["open", "approved", "rejected"])).optional()
-});
-var CreatePullRequestRequestSchema = CreatePRInputSchema.extend({ sessionId: z4.string() });
-var RequestFileUploadRequestSchema = z4.object({
-  sessionId: z4.string(),
-  fileName: z4.string().min(1).max(255),
-  mimeType: z4.string().min(1).max(128),
-  fileSize: z4.number().int().positive().max(MAX_FILE_SIZE_BYTES)
-});
-var ConfirmFileUploadRequestSchema = z4.object({
-  sessionId: z4.string(),
-  fileId: z4.string(),
-  title: z4.string().max(500).optional(),
-  /** Glossary tag names (or ids) this file is an example of. */
-  tags: z4.array(z4.string().min(1).max(MAX_FILE_TAG_LENGTH)).max(MAX_FILE_TAGS).optional()
-});
-var UpdateTaskStatusRequestSchema = z4.object({
-  sessionId: z4.string(),
-  status: z4.string(),
-  force: z4.boolean().optional().default(false)
-});
-var StoreSessionIdRequestSchema = z4.object({
-  sessionId: z4.string(),
-  sdkSessionId: z4.string()
-});
-var SetManualTestsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  items: z4.array(z4.object({ title: z4.string().min(1) })).min(1)
-});
-var EditManualTestRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1),
-  newTitle: z4.string().min(1)
-});
-var RemoveManualTestRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1)
-});
-var ApproveManualTestRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1)
-});
-var RejectManualTestRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1),
-  reason: z4.string().min(1).max(2e3)
-});
-var SessionStartRequestSchema = z4.object({
-  sessionId: z4.string(),
-  agentVersion: z4.string(),
-  capabilities: z4.array(z4.string())
-});
-var SessionStopRequestSchema = z4.object({
-  sessionId: z4.string(),
-  reason: z4.string().optional()
-});
-var EndReviewSessionRequestSchema = z4.object({
-  sessionId: z4.string(),
-  reason: z4.enum(["approved", "changes_requested", "finished"]).optional()
-});
-var ConnectAgentRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var ReportAgentStatusRequestSchema = z4.object({
-  sessionId: z4.string(),
-  status: z4.string(),
-  /** Why the agent reports this status (e.g. "user_question" while an AskUserQuestion questionnaire is pending in the TUI). */
-  reason: z4.string().optional(),
-  /**
-   * The pending question text, sent only alongside `reason: "user_question"`
-   * so the server can surface it in the user-question notification body (and
-   * thus the Attention feed) instead of a generic string. Optional: older
-   * agents omit it and the server falls back to the generic wording.
-   */
-  questionText: z4.string().optional()
-});
-var NotifyAgentVersionRequestSchema = z4.object({
-  sessionId: z4.string(),
-  agentVersion: z4.string()
-});
-var DiscoveredPortSchema = z4.object({
-  port: z4.number().int().min(1).max(65535),
-  label: z4.string().min(1).max(64).optional(),
-  protocol: z4.enum(["http", "tcp"]).optional(),
-  detectedAt: z4.string()
-});
-var ReportDiscoveredPortsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  ports: z4.array(DiscoveredPortSchema).max(64)
-});
-var ReportBootMilestoneRequestSchema = z4.object({
-  sessionId: z4.string(),
-  key: z4.string().max(64)
-});
-var CreateSubtaskRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1),
-  description: cardDescription,
-  plan: z4.string().optional(),
-  storyPointValue: z4.number().int().positive().optional(),
-  ordinal: z4.number().int().nonnegative().optional(),
-  followParentStatus: z4.boolean().optional(),
-  /** Sibling subtask ids or slugs this subtask blocks on (explicit dependency
-   * metadata — preferred over encoding order in plan text / ordinal). */
-  dependsOn: z4.array(z4.string().min(1)).max(32).optional(),
-  /** Glossary tag names to assign to the child. Unmatched names come back in
-   * the response rather than failing the create. */
-  tags: z4.array(z4.string().min(1)).max(10).optional()
-});
-var UpdateSubtaskRequestSchema = z4.object({
-  sessionId: z4.string(),
-  subtaskId: z4.string(),
-  title: z4.string().min(1).optional(),
-  description: cardDescription,
-  plan: z4.string().optional(),
-  /** Orchestration statuses only ("Planning" | "Open") — the pack parent's
-   * sanctioned promotion path. Execution statuses stay with the build
-   * pipeline / force_update_task_status. Enforced server-side. */
-  status: z4.string().optional(),
-  /** Assign a project agent to the child — accepts the agent's id or exact
-   * name; resolved against the parent task's project server-side. */
-  agentIdOrName: z4.string().min(1).optional(),
-  storyPointValue: z4.number().int().positive().optional(),
-  followParentStatus: z4.boolean().optional(),
-  /** Replace this subtask's dependency edges with these sibling ids/slugs.
-   * Empty array clears all. Omit to leave dependencies unchanged. */
-  dependsOn: z4.array(z4.string().min(1)).max(32).optional()
-});
-var DeleteSubtaskRequestSchema = z4.object({
-  sessionId: z4.string(),
-  subtaskId: z4.string()
-});
-var SetSubtaskParentRequestSchema = z4.object({
-  sessionId: z4.string(),
-  taskId: z4.string().min(1),
-  detach: z4.boolean().optional(),
-  ordinal: z4.number().int().nonnegative().optional(),
-  followParentStatus: z4.boolean().optional()
-});
-var GetTaskPropertiesRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var UpdateTaskFieldsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  plan: z4.string().optional(),
-  description: cardDescription
-});
-var UpdateTaskPropertiesRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().optional(),
-  storyPointValue: z4.number().int().positive().optional(),
-  tagIds: z4.array(z4.string()).optional(),
-  tagNames: z4.array(z4.string()).optional(),
-  githubPRUrl: z4.string().url().optional(),
-  githubBranch: z4.string().optional(),
-  // Canonical risk level, or null to clear — same semantics as the headless
-  // update_task boundary (resolved to the project's Risk row in the handler).
-  risk: riskLevelSchema.nullable().optional()
-});
-var ListIconsRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var GenerateTaskIconRequestSchema = z4.object({
-  sessionId: z4.string(),
-  prompt: z4.string().min(1),
-  aspectRatio: z4.string().optional()
-});
-var SearchFaIconsRequestSchema = z4.object({
-  sessionId: z4.string(),
-  query: z4.string().min(1),
-  first: z4.number().int().positive().optional()
-});
-var PickFaIconRequestSchema = z4.object({
-  sessionId: z4.string(),
-  fontAwesomeId: z4.string().min(1),
-  fontAwesomeStyle: z4.string().optional()
-});
-var CreateFollowUpTaskRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1),
-  description: cardDescription,
-  plan: z4.string().optional(),
-  storyPointValue: z4.number().int().positive().optional()
-});
-var AddDependencyRequestSchema = z4.object({
-  sessionId: z4.string(),
-  dependsOnSlugOrId: z4.string()
-});
-var RemoveDependencyRequestSchema = z4.object({
-  sessionId: z4.string(),
-  dependsOnSlugOrId: z4.string()
-});
-var CreateSuggestionRequestSchema = z4.object({
-  sessionId: z4.string(),
-  title: z4.string().min(1),
-  description: cardDescription,
-  tagNames: z4.array(z4.string()).optional()
-});
-var VoteSuggestionRequestSchema = z4.object({
-  sessionId: z4.string(),
-  suggestionId: z4.string(),
-  value: z4.union([z4.literal(1), z4.literal(-1)])
-});
-var TriggerIdentificationRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var HandoffToImplementerRequestSchema = z4.object({
-  sessionId: z4.string(),
-  // Optional difficulty sizing — sets the task's story points before resolving
-  // the matched implementer agent. Omit to hand off using the task's current
-  // story points (or the project's default task agent when unsized).
-  storyPoints: z4.number().int().positive().optional(),
-  // Optional kickoff note posted to the task chat alongside the handoff notice.
-  message: z4.string().optional()
-});
-var SubmitCodeReviewResultRequestSchema = z4.object({
-  sessionId: z4.string(),
-  approved: z4.boolean(),
-  content: z4.string(),
-  // Canonical risk level the reviewer assigned to this change. Required on every
-  // verdict — the reviewer must judge it. Applied authoritatively server-side
-  // (may raise OR lower an already-set value; the reviewer has that authority).
-  risk: riskLevelSchema,
-  // The commit SHA the reviewer actually reviewed. When present, the verdict is
-  // rejected unless the task is still at this SHA (guards against a late
-  // old-SHA verdict overwriting a newer review cycle).
-  reviewedSha: z4.string().optional()
-});
-var CycleCodingAgentKeyRequestSchema = z4.object({
-  sessionId: z4.string(),
-  rateLimitType: z4.string(),
-  resetsAt: z4.string().optional()
-});
-var StartChildCloudBuildRequestSchema = z4.object({
-  sessionId: z4.string(),
-  childTaskId: z4.string()
-});
-var StopChildBuildRequestSchema = z4.object({
-  sessionId: z4.string(),
-  childTaskId: z4.string()
-});
-var ApproveAndMergePRRequestSchema = z4.object({
-  sessionId: z4.string(),
-  childTaskId: z4.string()
-});
-var PostChildChatMessageRequestSchema = z4.object({
-  sessionId: z4.string(),
-  childTaskId: z4.string(),
-  message: z4.string().min(1)
-});
-var UpdateChildStatusRequestSchema = z4.object({
-  sessionId: z4.string(),
-  childTaskId: z4.string(),
-  status: z4.string()
-});
-var GetAgentStatusRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var GetUiCliHistoryRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var GetActivePtySessionRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var ListActivePtySessionsRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var SendSoftStopRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var StopTaskSessionRequestSchema = z4.object({
-  taskId: z4.string(),
-  sessionId: z4.string()
-});
-var FlushTaskQueueRequestSchema = z4.object({
-  taskId: z4.string(),
-  softStop: z4.boolean().optional()
-});
-var CancelTaskQueuedMessageRequestSchema = z4.object({
-  taskId: z4.string(),
-  messageId: z4.string()
-});
-var FlushSingleQueuedMessageRequestSchema = z4.object({
-  taskId: z4.string(),
-  messageId: z4.string(),
-  softStop: z4.boolean().optional()
-});
-var AnswerAgentQuestionRequestSchema = z4.object({
-  taskId: z4.string(),
-  requestId: z4.string(),
-  answers: z4.record(z4.string(), z4.string())
-});
-var ClearAgentTodosRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var AgentQuestionOptionSchema = z4.object({
-  label: z4.string(),
-  description: z4.string(),
-  preview: z4.string().optional()
-});
-var AgentQuestionSchema = z4.object({
-  question: z4.string(),
-  header: z4.string(),
-  options: z4.array(AgentQuestionOptionSchema),
-  multiSelect: z4.boolean().optional()
-});
-var AskUserQuestionRequestSchema = z4.object({
-  sessionId: z4.string(),
-  question: z4.string().min(1),
-  requestId: z4.string().min(1),
-  questions: z4.array(AgentQuestionSchema).min(1)
-});
-var PostAgentMessageRequestSchema = z4.object({
-  sessionId: z4.string().min(1),
-  content: z4.string(),
-  milestone: z4.enum(["plan_ready", "implementation_complete", "blocked"]).optional()
-});
-var EmitAgentEventRequestSchema = z4.object({
-  sessionId: z4.string(),
-  events: z4.array(AgentEventSchema).max(500)
-});
-var RefreshGithubTokenRequestSchema = z4.object({
-  sessionId: z4.string(),
-  forceFresh: z4.boolean().optional()
-});
-var ReportCredentialFailureRequestSchema = z4.object({
-  sessionId: z4.string(),
-  error: z4.string().max(2e3).optional(),
-  tokenShape: z4.string().max(500).optional(),
-  healed: z4.boolean().optional()
-});
-var ReportReviewSpawnFailureRequestSchema = z4.object({
-  sessionId: z4.string(),
-  reviewSessionId: z4.string(),
-  error: z4.string().max(2e3).optional()
-});
-var ReportBuilderSpawnFailureRequestSchema = ReportReviewSpawnFailureRequestSchema.omit({
-  reviewSessionId: true
-}).extend({ buildSessionId: z4.string() });
-var SpawnTaskSessionRequestSchema = z4.object({
-  taskId: z4.string(),
-  kind: z4.enum(["tui", "shell"])
-});
-var StartCodeReviewRequestSchema = z4.object({
-  taskId: z4.string(),
-  force: z4.boolean().optional()
-});
-var StopCodeReviewRequestSchema = z4.object({
-  taskId: z4.string()
-});
-var ReportSessionSpawnFailureRequestSchema = z4.object({
-  sessionId: z4.string(),
-  spawnedSessionId: z4.string(),
-  error: z4.string().max(2e3).optional()
-});
-var RefreshGithubTokenResponseSchema = z4.object({
-  token: z4.string()
-});
-var PTY_FRAME_MAX_CHARS = 256 * 1024;
-var PTY_MAX_DIMENSION = 1e3;
-var PtyOutputRequestSchema = z4.object({
-  sessionId: z4.string(),
-  data: z4.string().max(PTY_FRAME_MAX_CHARS),
-  cols: z4.number().int().positive().max(PTY_MAX_DIMENSION).optional(),
-  rows: z4.number().int().positive().max(PTY_MAX_DIMENSION).optional()
-});
-var PtyEndedRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var PtyInputRequestSchema = z4.object({
-  sessionId: z4.string(),
-  data: z4.string().max(PTY_FRAME_MAX_CHARS)
-});
-var PtyResizeRequestSchema = z4.object({
-  sessionId: z4.string(),
-  cols: z4.number().int().positive().max(PTY_MAX_DIMENSION),
-  rows: z4.number().int().positive().max(PTY_MAX_DIMENSION)
-});
-var PtyAttachRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var ReportPtyStreamRequestSchema = z4.object({
-  sessionId: z4.string(),
-  port: z4.number().int().positive().max(65535).nullable()
-});
-var GetPtyStreamEndpointRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var PtyChatEventPayloadSchema = z4.discriminatedUnion("kind", [
-  z4.object({
-    kind: z4.literal("init"),
-    model: z4.string().max(200),
-    claudeSessionId: z4.string().max(100).optional()
-  }),
-  z4.object({
-    kind: z4.literal("user_text"),
-    text: z4.string().max(16384),
-    // Set by the SERVER (never the agent) when this prompt was injected by
-    // Conveyor rather than typed by a human — the routed message's `source`
-    // (`ci_success`, `review_trigger`, `automated_feedback`, …). The agent
-    // pastes automated messages into the TUI exactly like human prompts, so the
-    // CLI records both as plain transcript `user` records; without this the
-    // builder chat renders "All CI checks passed on your PR." as the human's
-    // own bubble. Absent ⇒ a genuine human prompt.
-    source: z4.string().max(60).optional()
-  }),
-  z4.object({ kind: z4.literal("assistant_text"), text: z4.string().max(16384) }),
-  z4.object({
-    kind: z4.literal("tool_use"),
-    name: z4.string().max(200),
-    // Compact preview: JSON.stringify(input) truncated agent-side. The cap
-    // matches the text events because AskUserQuestion payloads ride this field
-    // and the web lifts them into an interactive card — a tight cap forced
-    // option descriptions down to 80 chars, making them unreadable. Every
-    // other tool keeps a far smaller agent-side budget (`TOOL_INPUT_MAX` in
-    // `chat-record-mapper.ts`), so the ring does not grow for normal calls.
-    input: z4.string().max(16384),
-    // Transcript tool_use block id — lets the client pair the tool_result.
-    id: z4.string().max(100).optional()
-  }),
-  z4.object({
-    kind: z4.literal("tool_result"),
-    // tool_use block id this result answers (absent on malformed records).
-    toolUseId: z4.string().max(100).optional(),
-    // Compact output preview, truncated agent-side.
-    output: z4.string().max(2e3),
-    isError: z4.boolean().optional()
-  }),
-  z4.object({ kind: z4.literal("turn_end") })
-]);
-var PtyChatEventRequestSchema = z4.object({
-  sessionId: z4.string(),
-  event: PtyChatEventPayloadSchema
-});
-var PtyChatAttachRequestSchema = z4.object({
-  sessionId: z4.string()
-});
-var CreatePRResponseSchema = z4.object({
-  prNumber: z4.number().int().positive(),
-  prUrl: z4.string().url(),
-  /** Advisory glossary-upkeep note derived from the PR's changed files matched
-   *  against tag contextPaths — rendered into the tool result, never stored. */
-  glossaryNote: z4.string().optional()
-});
-var PostToChatResponseSchema = z4.object({
-  messageId: z4.string()
-});
-var UpdateTaskStatusResponseSchema = z4.object({
-  taskId: z4.string(),
-  status: z4.string()
-});
-var StoreSessionIdResponseSchema = z4.object({
-  success: z4.boolean()
-});
-var HeartbeatResponseSchema = z4.object({
-  acknowledged: z4.boolean()
-});
-var SessionStartResponseSchema = z4.object({
-  sessionId: z4.string(),
-  startedAt: z4.string()
-});
-var SessionStopResponseSchema = z4.object({
-  sessionId: z4.string(),
-  stoppedAt: z4.string()
-});
-var DeleteSubtaskResponseSchema = z4.object({
-  deleted: z4.boolean()
-});
-var GIT_BRANCH_NAME_MAX = 255;
-var GIT_BRANCH_NAME_MESSAGE = "Invalid git branch name \u2014 use only letters, numbers, '.', '_', '/' and '-', starting with a letter or number, with no '..', '@{' or '//', and no trailing '/', '-', '.' or '.lock'";
-var ALLOWED_REF = /^[A-Za-z0-9][A-Za-z0-9._/-]*$/;
-function isValidGitBranchName(name) {
-  if (typeof name !== "string") return false;
-  if (name.length === 0 || name.length > GIT_BRANCH_NAME_MAX) return false;
-  if (!ALLOWED_REF.test(name)) return false;
-  if (name.includes("..") || name.includes("@{") || name.includes("//")) return false;
-  if (name.endsWith("/") || name.endsWith("-")) return false;
-  if (name.endsWith(".") || name.endsWith(".lock")) return false;
-  return true;
-}
-var cardDescription2 = z5.string().max(CARD_DESCRIPTION_MAX, CARD_DESCRIPTION_LIMIT_MESSAGE).optional();
-var ListAccessibleProjectsRequestSchema = z5.object({
-  pageSize: z5.number().int().positive().max(100).optional().default(100)
-});
-var ListProjectTasksRequestSchema = z5.object({
-  projectId: z5.string(),
-  status: z5.string().optional(),
-  // Card types to include. Omitted/empty → defaults to ["task"] in the handler
-  // (mirrors searchProjectTasks) so listing doesn't surface incidents/suggestions
-  // unless asked. Enum validation lives at the MCP tool layer.
-  typeFilters: z5.array(z5.string()).optional(),
-  assigneeId: z5.string().optional(),
-  unassigned: z5.boolean().optional(),
-  // Scope to a sub-project board when provided. Unlike the board layer's `?? null`
-  // semantics, agents default to seeing the whole project when omitted.
-  subProjectId: z5.string().nullable().optional(),
-  limit: z5.number().int().positive().optional().default(50)
-}).refine((p) => !(p.unassigned && p.assigneeId), {
-  message: "Pass either assigneeId or unassigned, not both"
-});
-var GetProjectTaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var SearchProjectTasksRequestSchema = z5.object({
-  projectId: z5.string(),
-  // Tag names, matched case-insensitively against the project glossary.
-  tagNames: z5.array(z5.string()).optional(),
-  // How to combine tagNames: "any" (default) = carries at least one,
-  // "all" = carries every one.
-  tagMatch: z5.enum(["any", "all"]).optional(),
-  // Expand each named tag to its descendants in the tag DAG before matching,
-  // so a parent tag sweeps its whole area. Default false.
-  includeChildTags: z5.boolean().optional(),
-  searchQuery: z5.string().optional(),
-  statusFilters: z5.array(z5.string()).optional(),
-  // Card types to include. Omitted/empty → defaults to ["task"] in the handler so
-  // search doesn't surface incidents/suggestions unless asked. Enum validation lives
-  // at the MCP tool layer (mirrors statusFilters).
-  typeFilters: z5.array(z5.string()).optional(),
-  assigneeId: z5.string().optional(),
-  unassigned: z5.boolean().optional(),
-  // Scope to a sub-project board when provided. Unlike the board layer's `?? null`
-  // semantics, agents default to seeing the whole project when omitted.
-  subProjectId: z5.string().nullable().optional(),
-  limit: z5.number().int().positive().optional().default(20)
-}).refine((p) => !(p.unassigned && p.assigneeId), {
-  message: "Pass either assigneeId or unassigned, not both"
-});
-var ListProjectTagsRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var GetProjectTagRequestSchema = z5.object({
-  projectId: z5.string(),
-  /** Tag id or exact (case-insensitive) tag name. */
-  tag: z5.string().min(1).max(100)
-});
-var ListProjectTagAttachmentsRequestSchema = z5.object({
-  projectId: z5.string(),
-  /** Tag id or exact (case-insensitive) tag name. */
-  tag: z5.string().min(1).max(100),
-  limit: z5.number().int().min(1).max(60).optional(),
-  offset: z5.number().int().min(0).optional()
-});
-var SetProjectFileTagsRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  fileId: z5.string(),
-  tags: z5.array(z5.string().min(1).max(MAX_FILE_TAG_LENGTH)).max(MAX_FILE_TAGS),
-  requestingUserId: z5.string().optional()
-});
-var GetProjectSummaryRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var GetProjectOnboardingStatusRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var GetProjectOnboardingStepRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var GetProjectConnectUrlsRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var conveyorCapabilitySchema = z5.enum([
-  "read",
-  "create",
-  "update",
-  "chat",
-  "files",
-  "build"
-]);
-var GetConnectionContextRequestSchema = z5.object({
-  projectId: z5.string(),
-  // Optional board scope (CONVEYOR_SUBPROJECT_ID). Validated to belong to the
-  // project in the handler; an invalid/foreign id is reported, not silently
-  // dropped, so a mis-scoped connection is never presented as board-specific.
-  subProjectId: z5.string().nullable().optional()
-});
-var VerifyConnectionRequestSchema = z5.object({
-  projectId: z5.string(),
-  subProjectId: z5.string().nullable().optional(),
-  intendedActions: z5.array(conveyorCapabilitySchema).optional()
-});
-var ListAccessibleSubprojectsRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var CreateProjectTaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  title: z5.string().min(1),
-  description: cardDescription2,
-  plan: z5.string().optional(),
-  status: z5.string().optional(),
-  // Assign to a sub-project board. Validated to belong to `projectId` in the handler.
-  subProjectId: z5.string().nullable().optional(),
-  requestingUserId: z5.string().optional()
-});
-var SetProjectTaskParentRequestSchema = z5.object({
-  projectId: z5.string(),
-  /** Card to move — id or slug. */
-  taskId: z5.string().min(1),
-  /** New parent (id or slug), or null to detach. */
-  parentTaskId: z5.string().min(1).nullable(),
-  ordinal: z5.number().int().nonnegative().optional(),
-  followParentStatus: z5.boolean().optional(),
-  requestingUserId: z5.string().optional()
-}).strict();
-var UpdateProjectTaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().optional(),
-  description: cardDescription2,
-  plan: z5.string().optional(),
-  // Enum validation lives at the MCP tool layer (mirrors createProjectTask);
-  // the handler routes through the shared updateStatus core (InProgress
-  // dependency check + cleanup/board/Slack side effects), not the stricter
-  // card-type-validating path the Socket.IO updateTaskStatus mutation uses.
-  status: z5.string().optional(),
-  // Canonical risk level, or null to clear. Resolved to the project's
-  // configured Risk row (by rank) in the handler.
-  risk: riskLevelSchema.nullable().optional(),
-  // Story-point value, or null to clear. Resolved to the project's configured
-  // StoryPoint row in the handler, which rejects an unconfigured value.
-  storyPointValue: z5.number().int().positive().nullable().optional(),
-  assignedUserId: z5.string().nullish(),
-  // Move to a different sub-project board, or null to move to the parent board.
-  // Validated to belong to `projectId` in the handler.
-  subProjectId: z5.string().nullable().optional(),
-  // Record the task's ACTUAL working branch (e.g. a locally-driven pack's
-  // branch, so identification never mints a competing name and pack-child
-  // merge handling matches reality), or null to detach. Guarded in the
-  // handler: the ref must exist on origin and no live workspace may be bound
-  // to a different branch.
-  githubBranch: z5.string().min(1).max(GIT_BRANCH_NAME_MAX).refine(isValidGitBranchName, { message: GIT_BRANCH_NAME_MESSAGE }).nullable().optional(),
-  requestingUserId: z5.string().optional()
-}).strict().refine(
-  (v) => v.title !== void 0 || v.description !== void 0 || v.plan !== void 0 || v.status !== void 0 || v.risk !== void 0 || v.storyPointValue !== void 0 || v.assignedUserId !== void 0 || v.subProjectId !== void 0 || v.githubBranch !== void 0,
-  {
-    message: "update_task requires at least one field to change (title, description, plan, status, risk, storyPointValue, assignedUserId, subProjectId, or githubBranch)"
-  }
-);
-var TransitionProjectTaskStatusRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  toStatus: z5.string(),
-  expectedFromStatus: z5.string().optional(),
-  // Optional raise-only risk to attempt alongside the transition
-  // (approve → low, request_changes → medium by default).
-  risk: riskLevelSchema.optional(),
-  requestingUserId: z5.string().optional()
-});
-var MoveProjectCardRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  destinationProjectId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var PostToProjectTaskChatRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  content: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var GetProjectTaskCliRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  limit: z5.number().int().positive().optional().default(50),
-  source: z5.string().optional()
-});
-var GetProjectTaskSessionsRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var QueryProjectGcpLogsRequestSchema = z5.object({
-  projectId: z5.string(),
-  env: z5.enum(["prod", "dev", "claudespace"]).optional(),
-  severity: z5.enum(["DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY"]).optional(),
-  services: z5.array(z5.string().min(1).max(200)).max(25).optional(),
-  sqlInstances: z5.array(z5.string().min(1).max(200)).max(25).optional(),
-  allServices: z5.boolean().optional(),
-  search: z5.string().max(256).optional(),
-  filter: z5.string().max(1e3).optional(),
-  startTime: z5.string().optional(),
-  endTime: z5.string().optional(),
-  limit: z5.number().int().min(1).max(200).optional().default(50),
-  pageToken: z5.string().max(4096).optional()
-});
-var QueryProjectGrafanaLogsRequestSchema = z5.object({
-  projectId: z5.string(),
-  env: z5.enum(["prod", "dev"]).optional(),
-  services: z5.array(z5.string().min(1).max(200)).max(25).optional(),
-  level: z5.enum(["debug", "info", "warn", "error", "fatal"]).optional(),
-  search: z5.string().max(256).optional(),
-  logql: z5.string().max(2e3).optional(),
-  startTime: z5.string().optional(),
-  endTime: z5.string().optional(),
-  limit: z5.number().int().min(1).max(200).optional().default(50)
-});
-var driveFileNameSchema = z5.string().min(1).max(255).regex(/^[^/\\\r\n]+$/, "File names cannot contain slashes or line breaks");
-var DRIVE_MAX_CONTENT_CHARS = 1e6;
-var ListProjectDriveFilesRequestSchema = z5.object({
-  projectId: z5.string(),
-  folderId: z5.string().max(200).optional(),
-  search: z5.string().max(200).optional(),
-  limit: z5.number().int().min(1).max(200).optional()
-});
-var ReadProjectDriveFileRequestSchema = z5.object({
-  projectId: z5.string(),
-  fileId: z5.string().min(1).max(200)
-});
-var CreateProjectDriveFileRequestSchema = z5.object({
-  projectId: z5.string(),
-  name: driveFileNameSchema,
-  content: z5.string().max(DRIVE_MAX_CONTENT_CHARS),
-  mimeType: z5.string().max(200).optional(),
-  folderId: z5.string().max(200).optional()
-});
-var UpdateProjectDriveFileRequestSchema = z5.object({
-  projectId: z5.string(),
-  fileId: z5.string().min(1).max(200),
-  content: z5.string().max(DRIVE_MAX_CONTENT_CHARS),
-  mimeType: z5.string().max(200).optional()
-});
-var DeleteProjectDriveFileRequestSchema = z5.object({
-  projectId: z5.string(),
-  fileId: z5.string().min(1).max(200)
-});
-var CreateProjectDriveFolderRequestSchema = z5.object({
-  projectId: z5.string(),
-  name: driveFileNameSchema,
-  folderId: z5.string().max(200).optional()
-});
-var StartProjectBuildRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var StopProjectBuildRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var StartProjectWorkspaceRequestSchema = z5.object({
-  projectId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var StopProjectWorkspaceRequestSchema = z5.object({
-  projectId: z5.string(),
-  destroy: z5.boolean().optional(),
-  requestingUserId: z5.string().optional()
-});
-var ListMyLiveSessionsRequestSchema = z5.object({
-  projectId: z5.string(),
-  /** Admin-only: list another member's sessions instead of the caller's. */
-  targetUserId: z5.string().optional()
-});
-var ListProjectSessionGroupsRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var ListMyLiveSessionsAcrossProjectsRequestSchema = z5.object({});
-var ListSessionGroupsAcrossProjectsRequestSchema = z5.object({});
-var GetProjectAvailableTuisRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var StartAdhocSessionRequestSchema = z5.object({
-  projectId: z5.string(),
-  label: z5.string().max(200).optional(),
-  /** Coding-agent key to launch under — validated pick-time (ownership + TUI availability) in the handler. */
-  codingAgentKeyId: z5.string().optional(),
-  /** Model override (Claude model id) — overrides the launch key's own model. */
-  model: z5.string().max(200).optional(),
-  /**
-   * Session role. Constrained: other task-less modes fall through to the pm
-   * runner in the pod entrypoint, and "review" would crash without a task.
-   */
-  mode: z5.enum(["adhoc", "pm"]).optional(),
-  /** Base branch to check out (defaults to the project's dev branch). */
-  branch: z5.string().max(300).optional(),
-  /**
-   * Server-assembled instructions the pod's TUI auto-submits once on first boot
-   * (headless kickoff). Used by the onboarding "Set it up for me" flow to seed a
-   * setup-driver prompt; the session stays watchable/interactive in the Sessions
-   * view. `ensureAdhocWorkspace` persists it and clears it after first submit.
-   */
-  initialPrompt: z5.string().max(2e4).optional(),
-  requestingUserId: z5.string().optional()
-});
-var StopAdhocSessionRequestSchema = z5.object({
-  projectId: z5.string(),
-  workspaceId: z5.string(),
-  destroy: z5.boolean().optional(),
-  requestingUserId: z5.string().optional()
-});
-var ResumeAdhocSessionRequestSchema = z5.object({
-  projectId: z5.string(),
-  workspaceId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var RefreshCodingAgentKeyUsageRequestSchema = z5.object({
-  projectId: z5.string(),
-  keyId: z5.string().optional(),
-  requestingUserId: z5.string().optional()
-});
-var ListKeysToProbeRequestSchema = z5.object({
-  sessionId: z5.string()
-});
-var CreateProjectReleaseRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskIds: z5.array(z5.string()).optional(),
-  requestingUserId: z5.string().optional()
-});
-var AddTasksToProjectReleaseRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskIds: z5.array(z5.string()).min(1),
-  requestingUserId: z5.string().optional()
-});
-var ApproveProjectMergePRRequestSchema = z5.object({
-  projectId: z5.string(),
-  childTaskId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var ListProjectSubtasksRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var CreateProjectSubtaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  parentTaskId: z5.string(),
-  title: z5.string().min(1),
-  description: cardDescription2,
-  plan: z5.string().optional(),
-  ordinal: z5.number().int().nonnegative().optional(),
-  storyPointValue: z5.number().int().positive().optional(),
-  followParentStatus: z5.boolean().optional(),
-  /** Sibling subtask ids or slugs this subtask blocks on (explicit dependency
-   * metadata — preferred over encoding order in plan text / ordinal). */
-  dependsOn: z5.array(z5.string().min(1)).max(32).optional(),
-  requestingUserId: z5.string().optional()
-});
-var UpdateProjectSubtaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  subtaskId: z5.string(),
-  title: z5.string().optional(),
-  description: cardDescription2,
-  plan: z5.string().optional(),
-  status: z5.string().optional(),
-  ordinal: z5.number().int().nonnegative().optional(),
-  storyPointValue: z5.number().int().positive().optional(),
-  followParentStatus: z5.boolean().optional(),
-  /** Replace-set of sibling subtask ids/slugs this subtask blocks on ([] clears).
-   * Mirrors the in-pod updateSubtask semantics. */
-  dependsOn: z5.array(z5.string().min(1)).max(32).optional(),
-  requestingUserId: z5.string().optional()
-});
-var DeleteProjectSubtaskRequestSchema = z5.object({
-  projectId: z5.string(),
-  subtaskId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var GetProjectTaskChatRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  limit: z5.number().int().positive().optional().default(20)
-});
-var AddProjectTaskDependencyRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  dependsOnSlugOrId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var RemoveProjectTaskDependencyRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  dependsOnSlugOrId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var VoteProjectSuggestionRequestSchema = z5.object({
-  projectId: z5.string(),
-  suggestionId: z5.string(),
-  value: z5.union([z5.literal(1), z5.literal(-1)]),
-  requestingUserId: z5.string().optional()
-});
-var GetProjectTaskDependenciesRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var ListProjectTaskFilesRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var GetProjectAttachmentRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  fileId: z5.string(),
-  /** Byte offset into text content (paging large logs/JSON). Default 0. */
-  offset: z5.number().int().nonnegative().optional(),
-  /** Max bytes of text content to return from `offset`. Server default applies. */
-  maxBytes: z5.number().int().positive().optional()
-});
-var RequestProjectFileUploadRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  fileName: z5.string().min(1).max(255),
-  mimeType: z5.string().min(1).max(128),
-  fileSize: z5.number().int().positive().max(MAX_FILE_SIZE_BYTES),
-  requestingUserId: z5.string().optional()
-});
-var ConfirmProjectFileUploadRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  fileId: z5.string(),
-  /** When set, the attachment is also posted to the task chat with this text. */
-  comment: z5.string().max(2e3).optional(),
-  /** Glossary tag names (or ids) this file is an example of. */
-  tags: z5.array(z5.string().min(1).max(MAX_FILE_TAG_LENGTH)).max(MAX_FILE_TAGS).optional(),
-  requestingUserId: z5.string().optional()
-});
-var CreateProjectPullRequestRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().min(1),
-  body: z5.string(),
-  head: z5.string().optional(),
-  base: z5.string().optional(),
-  requestingUserId: z5.string().optional()
-});
-var ListProjectMembersRequestSchema = z5.object({
-  projectId: z5.string()
-});
-var AddProjectTaskReviewerRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  userId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var RemoveProjectTaskReviewerRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  userId: z5.string(),
-  requestingUserId: z5.string().optional()
-});
-var ListProjectManualTestsRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string()
-});
-var QueryProjectManualTestsRequestSchema = z5.object({
-  projectId: z5.string(),
-  cardStatuses: z5.array(z5.string()).optional(),
-  testStatuses: z5.array(z5.enum(["open", "approved", "rejected"])).optional()
-});
-var SetProjectManualTestsRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  items: z5.array(z5.object({ title: z5.string().min(1) })).min(1),
-  requestingUserId: z5.string().optional()
-});
-var EditProjectManualTestRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().min(1),
-  newTitle: z5.string().min(1),
-  requestingUserId: z5.string().optional()
-});
-var RemoveProjectManualTestRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().min(1),
-  requestingUserId: z5.string().optional()
-});
-var ApproveProjectManualTestRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().min(1),
-  requestingUserId: z5.string().optional()
-});
-var RejectProjectManualTestRequestSchema = z5.object({
-  projectId: z5.string(),
-  taskId: z5.string(),
-  title: z5.string().min(1),
-  reason: z5.string().min(1).max(2e3),
-  requestingUserId: z5.string().optional()
-});
-var CreateProjectSuggestionRequestSchema = z5.object({
-  projectId: z5.string(),
-  title: z5.string().min(1),
-  description: cardDescription2,
-  tagNames: z5.array(z5.string()).optional(),
-  requestingUserId: z5.string().optional()
-});
-var ListProjectChannelsRequestSchema = z6.object({
-  projectId: z6.string()
-});
-var READ_CHANNEL_MESSAGES_MAX_LIMIT = 50;
-var ReadChannelMessagesRequestSchema = z6.object({
-  projectId: z6.string(),
-  channelId: z6.string().min(1).max(200),
-  limit: z6.number().int().min(1).max(READ_CHANNEL_MESSAGES_MAX_LIMIT).optional(),
-  /** Provider-native cursor: return messages OLDER than this one. */
-  before: z6.string().max(100).optional(),
-  /** Provider-native cursor: return messages NEWER than this one. */
-  after: z6.string().max(100).optional(),
-  /**
-   * Read one thread instead of the channel surface. Slack calls this a
-   * `thread_ts`; on Discord it is the thread channel's id. One field for both,
-   * because a caller holding a `threadTs` from a previous read should not have
-   * to know which provider produced it.
-   */
-  threadTs: z6.string().max(100).optional()
-});
-var POST_CHANNEL_MESSAGE_MAX_CHARS = 1800;
-var PostChannelMessageRequestSchema = z6.object({
-  projectId: z6.string(),
-  channelId: z6.string().min(1).max(200),
-  text: z6.string().min(1).max(POST_CHANNEL_MESSAGE_MAX_CHARS),
-  /** Reply inside a thread rather than to the channel. */
-  threadTs: z6.string().max(100).optional()
-});
-var GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS = 90;
-var GetProjectAnalyticsSummaryRequestSchema = z6.object({
-  projectId: z6.string(),
-  rangeDays: z6.number().int().min(1).max(GET_ANALYTICS_SUMMARY_MAX_RANGE_DAYS).optional(),
-  campaign: z6.string().max(200).optional()
-});
-var RequestWorkspaceRecycleRequestSchema = z7.object({
-  sessionId: z7.string(),
-  reason: z7.string().max(2e3)
-});
-var ReportApiOutageRequestSchema = z7.object({
-  sessionId: z7.string(),
-  detail: z7.string().max(2e3),
-  attempts: z7.number().int().min(0).max(100)
-});
-var SHA_PATTERN = /^[0-9a-f]{40}$/i;
-var ReviewGuideFileReferenceSchema = z8.object({
-  path: z8.string().min(1).max(500),
-  startLine: z8.number().int().positive().max(1e6).optional(),
-  endLine: z8.number().int().positive().max(1e6).optional(),
-  hunkHeader: z8.string().min(1).max(300).optional()
-}).strict().superRefine((value, ctx) => {
-  if (value.endLine !== void 0 && value.startLine === void 0) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["startLine"],
-      message: "startLine is required when endLine is set"
-    });
-  }
-  if (value.startLine !== void 0 && value.endLine !== void 0 && value.endLine < value.startLine) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["endLine"],
-      message: "endLine must be greater than or equal to startLine"
-    });
-  }
-});
-var ReviewGuideSectionSchema = z8.object({
-  title: z8.string().min(1).max(160),
-  explanation: z8.string().min(1).max(2e3),
-  classification: z8.enum(["core", "supporting"]).optional(),
-  files: z8.array(ReviewGuideFileReferenceSchema).min(1).max(20)
-}).strict();
-var ReviewGuideContentSchema = z8.object({
-  overview: z8.string().min(1).max(3e3),
-  sections: z8.array(ReviewGuideSectionSchema).min(1).max(12)
-}).strict();
-var PublishReviewGuideRequestSchema = ReviewGuideContentSchema.extend({
-  sessionId: z8.string().min(1),
-  reviewedSha: z8.string().regex(SHA_PATTERN, "reviewedSha must be a 40-character commit SHA")
-}).strict();
-var CONTEXT_LINK_LOCATOR_MAX = 300;
-var TEST_TITLE = /\b(?:it|test|describe)(?:\.\w+)?\s*\(\s*(['"`])((?:(?!\1)[\s\S])*)\1/g;
-function extractTestTitles(content) {
-  return [...content.matchAll(TEST_TITLE)].map((m) => m[2]);
-}
-function isPlaceholderLocator(locator) {
-  return locator.includes("<") || locator.includes(">");
-}
-function locatorMatchesContent(content, locatorType, locator) {
-  if (locatorType === "code") return content.includes(locator);
-  return extractTestTitles(content).some((title) => title.includes(locator));
-}
-var TAG_DESCRIPTION_MAX = CARD_DESCRIPTION_MAX;
-var TAG_OVERVIEW_MAX = 32e3;
-var TAG_REASON_MAX = 500;
-var ProjectTagContextPathSchema = z9.object({
-  type: z9.enum(["rule", "doc", "file", "folder"]),
-  path: z9.string().min(1).max(500),
-  label: z9.string().max(100).optional(),
-  /** Verified-link tether — text that must keep existing in the file. */
-  locator: z9.string().min(1).max(CONTEXT_LINK_LOCATOR_MAX).regex(/^[^\r\n]*$/, "Locator cannot contain line breaks").optional(),
-  /** test = must appear in a real test/describe title; code = any substring. */
-  locatorType: z9.enum(["test", "code"]).optional()
-}).refine((link) => link.locator === void 0 === (link.locatorType === void 0), {
-  message: "locator and locatorType must be provided together"
-}).refine((link) => link.locator === void 0 || link.type !== "folder", {
-  message: "folder links cannot carry a locator"
-});
-var hexColor = z9.string().regex(/^#[0-9a-fA-F]{6}$/, "Expected #RRGGBB hex color");
-var overviewPathSchema = z9.string().min(1).max(500).regex(/^[^\r\n]*$/, "Overview path cannot contain line breaks");
-var CreateProjectTagRequestSchema = z9.object({
-  projectId: z9.string(),
-  name: z9.string().min(1).max(50),
-  color: hexColor.optional(),
-  description: z9.string().max(TAG_DESCRIPTION_MAX).optional(),
-  overview: z9.string().max(TAG_OVERVIEW_MAX).optional(),
-  /** Source the overview from this repo file (stored overview stays as the pending fallback). */
-  overviewPath: overviewPathSchema.optional(),
-  contextPaths: z9.array(ProjectTagContextPathSchema).max(20).optional(),
-  /** Parents to link at create time (multi-parent DAG). */
-  parentTagIds: z9.array(z9.string()).max(25).optional(),
-  requestingUserId: z9.string().optional()
-});
-var UpdateProjectTagRequestSchema = z9.object({
-  projectId: z9.string(),
-  tagId: z9.string(),
-  name: z9.string().min(1).max(50).optional(),
-  color: hexColor.optional(),
-  description: z9.string().max(TAG_DESCRIPTION_MAX).optional(),
-  /** Full markdown glossary body; null clears it. Rejected while overviewPath is set. */
-  overview: z9.string().max(TAG_OVERVIEW_MAX).nullable().optional(),
-  /** Repo file to source the overview from; null clears back to the stored overview. */
-  overviewPath: overviewPathSchema.nullable().optional(),
-  /** Full replacement of the tag's context links when provided. */
-  contextPaths: z9.array(ProjectTagContextPathSchema).max(20).optional(),
-  /** Full-set replacement of the tag's parent tags (multi-parent DAG). */
-  parentTagIds: z9.array(z9.string()).max(25).optional(),
-  /** One-line revision provenance, recorded in the tag's history. */
-  reason: z9.string().max(TAG_REASON_MAX).optional(),
-  /** Card the caller was working in — stamped into the revision history. */
-  taskId: z9.string().optional(),
-  requestingUserId: z9.string().optional()
-});
-var PostToProjectChatRequestSchema = z9.object({
-  projectId: z9.string(),
-  content: z9.string().min(1).max(2e4),
-  requestingUserId: z9.string().optional(),
-  /** Marks the post so the server can persist it beyond chat (tag-audit summaries land in tag history). */
-  kind: z9.enum(["tag_audit_summary"]).optional()
-});
-var StartTagAuditRequestSchema = z9.object({
-  projectId: z9.string(),
-  requestingUserId: z9.string().optional()
-});
-var StartTaskAuditRequestSchema = z9.object({
-  projectId: z9.string(),
-  taskIds: z9.array(z9.string()).min(1).max(20),
-  requestingUserId: z9.string().optional()
-});
-var GetActiveAuditSessionsRequestSchema = z9.object({
-  projectId: z9.string()
-});
-var ReportTaskAuditResultRequestSchema = z9.object({
-  projectId: z9.string(),
-  taskId: z9.string(),
-  summary: z9.string(),
-  turnGrades: z9.array(
-    z9.object({
-      turnIndex: z9.number(),
-      phase: z9.enum(["planning", "building", "human"]),
-      grade: z9.enum(["correct", "neutral", "blunder"]),
-      reasoning: z9.string(),
-      eventType: z9.string(),
-      eventSummary: z9.string()
-    })
-  ),
-  planningAccuracy: z9.number().nullable(),
-  buildingAccuracy: z9.number().nullable(),
-  humanAccuracy: z9.number().nullable(),
-  planningCorrect: z9.number(),
-  planningNeutral: z9.number(),
-  planningBlunder: z9.number(),
-  buildingCorrect: z9.number(),
-  buildingNeutral: z9.number(),
-  buildingBlunder: z9.number(),
-  humanCorrect: z9.number(),
-  humanNeutral: z9.number(),
-  humanBlunder: z9.number(),
-  humanEvaluations: z9.array(
-    z9.object({
-      messageIndex: z9.number(),
-      rating: z9.union([z9.literal(-1), z9.literal(0), z9.literal(1)]),
-      reasoning: z9.string()
-    })
-  ).optional(),
-  suggestionIds: z9.array(z9.string()),
-  auditCostUsd: z9.number().nullable(),
-  model: z9.string().nullable(),
-  /** When set, the audit is marked failed with this message instead. */
-  error: z9.string().optional()
-});
-var GetTaskAuditsRequestSchema = z9.object({
-  projectId: z9.string(),
-  limit: z9.number().int().positive().max(200).optional().default(50)
-});
-var GetTaskAuditRequestSchema = z9.object({
-  projectId: z9.string(),
-  auditId: z9.string()
-});
-var GetTaskAuditAggregatesRequestSchema = z9.object({
-  projectId: z9.string()
-});
-var DeleteTaskAuditRequestSchema = z9.object({
-  projectId: z9.string(),
-  auditId: z9.string(),
-  requestingUserId: z9.string().optional()
-});
-var MarkInitialPromptSubmittedRequestSchema = z9.object({
-  sessionId: z9.string()
-});
-var CRITICAL_AUTOMATED_SOURCES = /* @__PURE__ */ new Set([
-  "ci_failure",
-  "review_trigger",
-  "merge_conflict",
-  "merge_failed",
-  "pull_branch",
-  // Child-task events for pack parents: the orchestrator must act (merge the
-  // child's PR, start unblocked siblings, finish the pack) even after it
-  // reported completed for a prior turn. Only ever sent to parent tasks.
-  "parent"
-]);
-var PACK_EXECUTIONS = ["single-pod", "fan-out"];
-var DEFAULT_PACK_EXECUTION = "single-pod";
-function parsePackExecution(value) {
-  return PACK_EXECUTIONS.includes(value ?? "") ? value : DEFAULT_PACK_EXECUTION;
-}
-var MEETING_CHECKLIST_TITLE_MAX = 300;
-var MEETING_TRANSCRIPT_MAX_CHARS = 2e6;
-var MEETING_TITLE_MAX = 200;
-var MEETING_OCCURRED_AT_MIN_YEAR = 2e3;
-var MEETING_OCCURRED_AT_MAX_FUTURE_MS = 48 * 60 * 60 * 1e3;
-var OCCURRED_AT_RANGE_MESSAGE = `occurredAt must be a real date: no earlier than ${MEETING_OCCURRED_AT_MIN_YEAR}, and no more than 48 hours in the future.`;
-var MeetingOccurredAtSchema = z10.string().datetime().refine((value) => {
-  const ms = Date.parse(value);
-  if (Number.isNaN(ms)) return false;
-  if (ms > Date.now() + MEETING_OCCURRED_AT_MAX_FUTURE_MS) return false;
-  return new Date(ms).getUTCFullYear() >= MEETING_OCCURRED_AT_MIN_YEAR;
-}, OCCURRED_AT_RANGE_MESSAGE);
-var CreateMeetingFromTranscriptRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  rawText: z10.string().min(1).max(MEETING_TRANSCRIPT_MAX_CHARS),
-  title: z10.string().min(1).max(MEETING_TITLE_MAX).optional(),
-  /** ISO 8601. Defaults to now when the source carries no date. */
-  occurredAt: MeetingOccurredAtSchema.optional(),
-  /** Override auto-detection. Rarely needed; detection handles the three formats. */
-  format: z10.enum(["text", "vtt", "srt"]).optional(),
-  source: z10.enum(["manual", "slack"]).optional()
-});
-var GetMeetingRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid()
-});
-var UpdateMeetingRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  title: z10.string().min(1).max(MEETING_TITLE_MAX).optional(),
-  occurredAt: MeetingOccurredAtSchema.optional()
-});
-var RegenerateMeetingSummaryRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid()
-});
-var DeleteMeetingRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid()
-});
-var checklistTitle = z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX);
-var ListMeetingChecklistRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid()
-});
-var AddMeetingChecklistItemsRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  items: z10.array(z10.object({ title: checklistTitle })).min(1).max(50)
-});
-var UpdateMeetingChecklistItemRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  itemId: z10.string().cuid(),
-  title: checklistTitle.optional(),
-  ordinal: z10.number().int().min(0).optional(),
-  /** Explicit null clears the link; undefined leaves it alone. */
-  linkedTaskId: z10.string().cuid().nullable().optional()
-}).refine(
-  (v) => v.title !== void 0 || v.ordinal !== void 0 || v.linkedTaskId !== void 0,
-  "Pass at least one of title, ordinal, or linkedTaskId."
-);
-var DeleteMeetingChecklistItemRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  itemId: z10.string().cuid()
-});
-var SetMeetingChecklistItemCheckedRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  itemId: z10.string().cuid(),
-  checked: z10.boolean(),
-  /** Attach the card in the same call that ticks the item. */
-  linkedTaskId: z10.string().cuid().nullable().optional()
-});
-var ListMeetingsRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  limit: z10.number().int().min(1).max(50).optional(),
-  search: z10.string().max(200).optional()
-});
-var ReadMeetingTranscriptRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  offset: z10.number().int().min(0).optional(),
-  limit: z10.number().int().min(1).max(500).optional()
-});
-var MEETING_SUMMARY_MAX_CHARS = 5e4;
-var AddProjectMeetingChecklistItemsRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  items: z10.array(z10.object({ title: z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX) })).min(1).max(50),
-  requestingUserId: z10.string().optional()
-});
-var CheckProjectMeetingChecklistItemRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  title: z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX),
-  checked: z10.boolean(),
-  /** Card id or slug. Resolved server-side and required to be in the project. */
-  linkedTask: z10.string().min(1).optional(),
-  requestingUserId: z10.string().optional()
-});
-var EditProjectMeetingChecklistItemRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  title: z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX),
-  newTitle: z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX),
-  requestingUserId: z10.string().optional()
-});
-var RemoveProjectMeetingChecklistItemRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  title: z10.string().min(1).max(MEETING_CHECKLIST_TITLE_MAX),
-  requestingUserId: z10.string().optional()
-});
-var CreateProjectMeetingRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  rawText: z10.string().min(1).max(MEETING_TRANSCRIPT_MAX_CHARS),
-  title: z10.string().min(1).max(MEETING_TITLE_MAX).optional(),
-  occurredAt: MeetingOccurredAtSchema.optional(),
-  requestingUserId: z10.string().optional()
-});
-var UpdateProjectMeetingRequestSchema = z10.object({
-  projectId: z10.string().cuid(),
-  meetingId: z10.string().cuid(),
-  title: z10.string().min(1).max(MEETING_TITLE_MAX).optional(),
-  occurredAt: MeetingOccurredAtSchema.optional(),
-  summary: z10.string().min(1).max(MEETING_SUMMARY_MAX_CHARS).optional(),
-  requestingUserId: z10.string().optional()
-}).refine(
-  (v) => v.title !== void 0 || v.occurredAt !== void 0 || v.summary !== void 0,
-  "Pass at least one of title, occurredAt, or summary."
-);
-var AGENT_STATUS_REASON_USER_QUESTION = "user_question";
-var TASK_CHAT_HISTORY_LIMIT = 20;
-var PM_CHAT_HISTORY_LIMIT = 40;
-var AGENT_CHAT_HISTORY_FETCH_LIMIT = Math.max(TASK_CHAT_HISTORY_LIMIT, PM_CHAT_HISTORY_LIMIT) + 10;
-function formatModelId(provider, model) {
-  return `${provider}/${model}`;
-}
-function anthropicEntry(model, label, inputPerMillion, outputPerMillion, opts = {}) {
-  return {
-    provider: "anthropic",
-    model,
-    id: formatModelId("anthropic", model),
-    label,
-    format: "anthropic-messages",
-    inputPrice: inputPerMillion / 1e6,
-    outputPrice: outputPerMillion / 1e6,
-    supportsTools: true,
-    supportsEffort: opts.supportsEffort ?? true,
-    ...opts.experimental ? { experimental: true } : {}
-  };
-}
-var ANTHROPIC_CATALOG = [
-  anthropicEntry(DEFAULT_OPUS_MODEL, "Opus 5 Latest", 5, 25),
-  anthropicEntry(PREVIOUS_OPUS_MODEL, "Opus 4.8", 5, 25),
-  anthropicEntry(DEFAULT_SONNET_MODEL, "Sonnet 5 Latest", 3, 15),
-  anthropicEntry(PREVIOUS_SONNET_MODEL, "Sonnet 4.6", 3, 15),
-  // The Haiku line (4.5 and older) predates the tuning surface and 400s on it.
-  anthropicEntry(DEFAULT_HAIKU_MODEL, "Haiku 4.5", 1, 5, { supportsEffort: false }),
-  anthropicEntry(FABLE_MODEL, "Fable 5.1", 10, 50)
-];
-var CODEX_REASONING_EFFORTS = ["low", "medium", "high", "xhigh", "max"];
-var DEFAULT_CODEX_CODING_MODEL = "gpt-5.6-terra";
-function isCodexReasoningEffort(value) {
-  return typeof value === "string" && CODEX_REASONING_EFFORTS.includes(value);
-}
-var HUMAN_PROSE_WRITING_STYLE = `## Writing style for humans
-When you write prose a person will read \u2014 chat messages, plan updates, PR titles and bodies, PR review guides (the \`publish_review_guide\` overview and section explanations), review comments \u2014 follow these rules (based on ASD-STE100 Simplified Technical English):
-- Use active voice. Say who does what ("The API rejects the request", not "the request is rejected").
-- Use simple tenses ("we received", not "we have received").
-- One instruction or fact per sentence. Keep sentences under ~20 words.
-- Pick one word for one thing and reuse it. Do not rotate synonyms (check/verify/confirm) for the same action.
-- Prefer the plain, common word ("use", not "utilize"; "start", not "initiate").
-- Do not stack more than 3 nouns in a row ("task queue handler" is the limit).
-- Use a numbered or bulleted list for 3+ steps or conditions instead of burying them in one sentence.
-- Define a technical term on first use when a non-engineer will read the message.
-- Never drop a condition, number, or scope qualifier to shorten a sentence. Precision beats brevity.
-These rules do NOT apply to code, code comments, commit messages, or quoted output.`;
-var CLAUDESPACE_WORKLOAD_LABEL = "rc-workload";
-var CLAUDESPACE_WORKLOAD_VALUE = "claudespace";
-var CONVEYOR_POD_SELECTOR = `${CLAUDESPACE_WORKLOAD_LABEL}=${CLAUDESPACE_WORKLOAD_VALUE}`;
-var MS_PER_DAY = 24 * 60 * 60 * 1e3;
-var MENTION_TOKEN_REGEX = /@\[(\w+):([^\]]+)\]/g;
-function parseMentions(content) {
-  const tokens = [];
-  for (const match of content.matchAll(MENTION_TOKEN_REGEX)) {
-    tokens.push({ type: match[1], id: match[2] });
-  }
-  return tokens;
-}
-var POSTGRES_ENV = {
-  POSTGRES_HOST_AUTH_METHOD: "trust",
-  POSTGRES_DB: "conveyor"
-};
-var FIREBASE_EMULATOR_COMMAND = [
-  "sh",
-  "-c",
-  `set -e; mkdir -p /home/node && cd /home/node && cat > firebase.json <<'EOF'
-{"emulators":{"auth":{"host":"0.0.0.0","port":9099},"hub":{"host":"0.0.0.0","port":4400},"ui":{"enabled":false}}}
-EOF
-exec firebase emulators:start --only=auth --project=rally-cry-dev`
-];
-var FIREBASE_EMULATOR_ENV = {
-  METADATA_SERVER_DETECTION: "none",
-  GOOGLE_APPLICATION_CREDENTIALS: "/dev/null"
-};
-var CATALOG = {
-  postgresql: {
-    name: "postgresql",
-    image: "postgres:16-alpine",
-    command: [
-      "sh",
-      "-c",
-      // Start postgres, wait for readiness, then create the test database.
-      // Durability flags: service state is ephemeral by design (overlayfs, no
-      // PVC; a crash re-seeds from pod-data), so commits must never wait on a
-      // WAL flush. fsync=off + synchronous_commit=off + full_page_writes=off
-      // remove all blocking storage I/O — without them, per-commit flushes on
-      // the node's network boot disk dominated int-test wall time (~100ms/commit).
-      "if [ ! -s /var/lib/postgresql/data/PG_VERSION ] && [ -d /var/lib/postgresql/pod-data ]; then cp -a /var/lib/postgresql/pod-data/. /var/lib/postgresql/data/; fi; chown -R postgres:postgres /var/lib/postgresql/data; docker-entrypoint.sh postgres -c fsync=off -c synchronous_commit=off -c full_page_writes=off & PID=$!; for i in $(seq 1 30); do pg_isready -U postgres && break; sleep 1; done; createdb -U postgres conveyor_test 2>/dev/null || true; wait $PID"
-    ],
-    ports: [5432],
-    livenessProbe: {
-      exec: ["pg_isready", "-U", "postgres"],
-      periodSeconds: 30,
-      failureThreshold: 3,
-      timeoutSeconds: 5,
-      initialDelaySeconds: 60
-    },
-    env: { ...POSTGRES_ENV },
-    resources: {
-      // postgres runs from the baked seed at /var/lib/postgresql/pod-data via
-      // overlayfs CoW (no emptyDir — see k8s-pod-spec.ts), so WAL + catalog +
-      // re-seed churn charges the container's ephemeral-storage. It must exceed
-      // the ~1Gi ceiling where pods evicted, but is bounded by TWO Autopilot rules:
-      //   1) limit == request — Autopilot caps the limit DOWN to the request at
-      //      admission, so headroom must live on the REQUEST, not just the limit;
-      //   2) the SUM of all container ephemeral requests in a pod must be ≤ 10Gi
-      //      (an emptyDir doesn't escape this: its usage still evicts against the
-      //      container limit, and raising the limit re-hits rule 1 → the cap).
-      // The agent is trimmed to 4Gi (resource-tiers.ts) to free room: with
-      // agent 4 + gcsfuse 1 + lgtm 1 + es/redis/firebase 0.75, postgres gets 3Gi
-      // and the heaviest (URC) pod sits at 9.75Gi + 10Mi for GCS Fuse metadata
-      // prefetch — under the 10Gi cap — while giving postgres 3x the ~1Gi
-      // ceiling that evicted. Keep request == limit;
-      // see the per-pod ephemeral budget guard test.
-      // CPU: the request is the CFS floor; the old 50m starved postgres to 5ms
-      // of CPU per 100ms period — every query burst hit throttle stalls, which
-      // showed up as ~100ms floors on trivial statements and dominated the API
-      // int suite even after the fsync flags above. 500m is paid for out of the
-      // agent's derived share (resource-tiers.ts). The limit bursts to 2 for
-      // spiky work — the first-boot pod-data seed copy and int-suite query
-      // storms — borrowing idle node CPU without moving the request.
-      requests: { cpuMillicores: 500, memoryMi: 512, ephemeralMi: 3 * 1024 },
-      limits: { cpuMillicores: 2e3, memoryMi: 512, ephemeralMi: 3 * 1024 }
-    },
-    connectionEnv: {
-      DATABASE_URL: "postgresql://postgres@postgresql:5432/conveyor",
-      TEST_DATABASE_URL: "postgresql://postgres@postgresql:5432/conveyor_test"
-    },
-    statefulBake: true,
-    bake: {
-      // Start postgres, wait for readiness, then create the test database so
-      // it's baked into the committed image. No pod-data restore (nothing is
-      // seeded yet) and no durability flags (the bake's writes must land).
-      // NOTE: docker-compose interpolates `$VAR`/`$(...)`, so every `$` that
-      // must reach the shell is doubled.
-      command: [
-        "sh",
-        "-c",
-        "docker-entrypoint.sh postgres & PID=$$!; for i in $$(seq 1 30); do pg_isready -U postgres && break; sleep 1; done; createdb -U postgres conveyor_test 2>/dev/null || true; wait $$PID"
-      ],
-      environment: { ...POSTGRES_ENV },
-      healthcheck: {
-        test: ["CMD-SHELL", "pg_isready -U postgres"],
-        intervalSec: 2,
-        timeoutSec: 5,
-        retries: 15
-      }
-    }
-  },
-  redis: {
-    name: "redis",
-    image: "redis:7-alpine",
-    command: ["redis-server", "--appendonly", "yes", "--dir", "/data"],
-    ports: [6379],
-    env: {},
-    resources: {
-      requests: { cpuMillicores: 25, memoryMi: 32, ephemeralMi: 256 },
-      limits: { cpuMillicores: 50, memoryMi: 64, ephemeralMi: 256 }
-    },
-    connectionEnv: {
-      REDIS_URL: "redis://redis:6379",
-      AUTH_REDIS_URL: "redis://redis:6379"
-    },
-    statefulBake: false,
-    // Redis holds no baked state, so the bake runs the stock image CMD.
-    bake: {},
-    mirror: { src: "redis:7-alpine", dest: "mirror-redis:7-alpine" }
-  },
-  elasticsearch: {
-    name: "elasticsearch",
-    // 9.4.0 matches universal-rally-cry's local compose + its v9 ES client —
-    // the v9 client sends Accept: compatible-with=9, which an 8.x server
-    // rejects (media_type_header_exception), breaking search/audit indexing
-    // in pods. 512m heap matches the project compose sizing.
-    image: "docker.elastic.co/elasticsearch/elasticsearch:9.4.0",
-    mirror: {
-      src: "docker.elastic.co/elasticsearch/elasticsearch:9.4.0",
-      dest: "mirror-elasticsearch:9.4.0"
-    },
-    ports: [9200],
-    // Baked service images are `docker commit`s of a recently-running ES, so
-    // they carry a stale data-dir node.lock; ES 9 hard-fails on it at boot
-    // ("Underlying file changed by an external force" → AlreadyClosedException).
-    // Clear it before handing off to the stock entrypoint.
-    command: [
-      "sh",
-      "-c",
-      // ALL Lucene lock files, not just node.lock — the baked image also
-      // carries per-index write.lock + snapshot_cache/write.lock, and ES 9
-      // fail-fasts on any of them ("changed by an external force").
-      "find /usr/share/elasticsearch/data -name '*.lock' -type f -delete 2>/dev/null; exec /usr/local/bin/docker-entrypoint.sh eswrapper"
-    ],
-    env: {
-      "discovery.type": "single-node",
-      "xpack.security.enabled": "false",
-      "xpack.ml.enabled": "false",
-      "xpack.watcher.enabled": "false",
-      "xpack.profiling.enabled": "false",
-      "ingest.geoip.downloader.enabled": "false",
-      ES_JAVA_OPTS: "-Xms512m -Xmx512m"
-    },
-    resources: {
-      // CPU limit 4x the request: ES cold-start is a CPU-bound JVM boot
-      // (class loading + JIT + recovery of the docker-commit'ed data dir),
-      // and the 500m hard cap put it at ~135s to yellow — past the sidecar
-      // wait script's original 90s budget. Bursting to 2 cut it to ~40s on
-      // the real cluster (A/B on identical nodes, 2 rounds). The burst only
-      // borrows idle node CPU at boot; under contention CFS still floors ES
-      // at its 500m request.
-      requests: { cpuMillicores: 500, memoryMi: 1024, ephemeralMi: 256 },
-      limits: { cpuMillicores: 2e3, memoryMi: 1024, ephemeralMi: 256 }
-    },
-    connectionEnv: {
-      ELASTICSEARCH_URL: "http://elasticsearch:9200"
-    },
-    statefulBake: true,
-    bake: {
-      // No lock-clearing command at bake time: the bake starts from the stock
-      // image, which has no committed data dir to unlock yet.
-      environment: {
-        "discovery.type": "single-node",
-        "xpack.security.enabled": "false",
-        ES_JAVA_OPTS: "-Xms512m -Xmx512m"
-      }
-    }
-  },
-  // All-in-one image bundling Grafana + Loki + Tempo + Mimir + an OTEL Collector.
-  // Pinned tag (not :latest) so the image-builder content hash stays
-  // deterministic across upstream releases — see image-builder.ts content-hash
-  // dedup keyed on `deps.sorted()`.
-  lgtm: {
-    name: "lgtm",
-    image: "grafana/otel-lgtm:0.11.6",
-    // The otel-lgtm image's own CMD is ["/otel-lgtm/run-all.sh"] (WORKDIR
-    // /otel-lgtm). Declaring it explicitly makes lgtm a command-based service so
-    // the lazy start-file gate wraps it like the others — otherwise it launches
-    // via image CMD at boot and can't be parked (which is why warm-booting it at
-    // a minimal request OOMKilled it). getSidecarSpecs strips this command for a
-    // baked lgtm image, so it only applies to the stock image whose launcher is
-    // exactly this path.
-    command: ["/otel-lgtm/run-all.sh"],
-    ports: [
-      // OTLP gRPC + HTTP — agents and user code emit telemetry here.
-      4317,
-      4318,
-      // Grafana UI — reachable through the existing preview proxy on
-      // https://3000-{sessionId}.preview.<PREVIEW_DOMAIN>/.
-      3e3
-    ],
-    env: {
-      // The pod is per-task; the preview proxy authenticates the session
-      // upstream, so anonymous in-pod admin is acceptable here.
-      GF_AUTH_ANONYMOUS_ENABLED: "true",
-      GF_AUTH_ANONYMOUS_ORG_ROLE: "Admin",
-      GF_SECURITY_ALLOW_EMBEDDING: "true",
-      ENABLE_LOGS_GRAFANA: "true",
-      ENABLE_LOGS_OTELCOL: "true"
-    },
-    resources: {
-      // Autopilot caps the ephemeral-storage limit to the request (see the
-      // postgresql note), so the 1Gi headroom must be on the request too.
-      requests: { cpuMillicores: 250, memoryMi: 1024, ephemeralMi: 1024 },
-      limits: { cpuMillicores: 1e3, memoryMi: 2048, ephemeralMi: 1024 }
-    },
-    statefulBake: false,
-    // No `bake` block: a BAKE produces traces nobody reads, so starting the
-    // (heavy) collector image would only add a pull + boot to every build.
-    // lgtm still runs for live pods, and is never committed regardless.
-    mirror: { src: "grafana/otel-lgtm:0.11.6", dest: "mirror-otel-lgtm:0.11.6" }
-  },
-  "firebase-auth-emulator": {
-    name: "firebase-auth-emulator",
-    image: "andreysenov/firebase-tools:latest",
-    command: FIREBASE_EMULATOR_COMMAND,
-    ports: [9099, 4400],
-    env: {
-      // The emulator container inherits the pod's Workload Identity, so
-      // firebase-tools finds GCP credentials and its `emulators:start` does an
-      // online "auto auth" + project validation that stalls ~47s on the pod's
-      // locked-down egress (the dominant service boot cost — measured live).
-      // The emulator needs NO real credentials, so cut off credential discovery
-      // for this container only: google-auth-library skips metadata detection
-      // and finds no key file, firebase-tools logs "not authenticated" and
-      // starts the emulator immediately. The agent container keeps its WI.
-      ...FIREBASE_EMULATOR_ENV
-    },
-    resources: {
-      requests: { cpuMillicores: 100, memoryMi: 256, ephemeralMi: 256 },
-      limits: { cpuMillicores: 500, memoryMi: 512, ephemeralMi: 256 }
-    },
-    connectionEnv: {
-      // In docker-compose, services reach each other by service name — the
-      // runtime pod equivalents use `localhost` because co-located services
-      // share the pod's network namespace.
-      FIREBASE_AUTH_EMULATOR_HOST: "firebase-auth-emulator:9099",
-      NEXT_PUBLIC_FIREBASE_AUTH_EMULATOR_HOST: "firebase-auth-emulator:9099"
-    },
-    statefulBake: false,
-    mirror: {
-      src: "andreysenov/firebase-tools:latest",
-      dest: "mirror-firebase-tools:latest"
-    },
-    bake: {
-      // The emulator writes its config at startup, so the bake needs the same
-      // inline command the runtime uses.
-      command: FIREBASE_EMULATOR_COMMAND,
-      environment: FIREBASE_EMULATOR_ENV,
-      healthcheck: {
-        // Probe with node, the one runtime this image guarantees. The image
-        // (`andreysenov/firebase-tools`) is a slim Node image that ships
-        // NEITHER `wget` NOR `curl`, so the `wget -qO- …` probe this replaced
-        // exited 127 on every attempt: a healthy emulator burned all 20 retries
-        // and every bake reported it unhealthy. See the catalog invariant in
-        // `service-definitions.test.ts`, which also executes this probe.
-        test: [
-          "CMD-SHELL",
-          `node -e "fetch('http://localhost:9099/').then((response) => process.exit(response.ok ? 0 : 1)).catch(() => process.exit(1))"`
-        ],
-        intervalSec: 3,
-        timeoutSec: 5,
-        retries: 20
-      }
-    }
-  }
-};
-var SERVICE_DEFINITIONS = CATALOG;
-var SUPPORTED_CLAUDESPACE_DEPS = Object.keys(CATALOG);
-var STATEFUL_BAKE_DEPS = new Set(
-  SUPPORTED_CLAUDESPACE_DEPS.filter((dep) => SERVICE_DEFINITIONS[dep].statefulBake)
-);
-var MIRRORABLE_SIDECARS = Object.fromEntries(
-  SUPPORTED_CLAUDESPACE_DEPS.flatMap((dep) => {
-    const mirror = SERVICE_DEFINITIONS[dep].mirror;
-    return mirror ? [[dep, mirror]] : [];
-  })
-);
-var LEVELS_PER_BAND = 100;
-var PRESTIGE_TIERS = ACHIEVEMENT_RARITIES.map((rarity, index) => ({
-  prestige: index + 1,
-  name: rarity.name,
-  color: rarity.color,
-  iconPath: rarity.iconPath,
-  minLevel: (index + 1) * LEVELS_PER_BAND
-}));
-var TOP_PRESTIGE_BAND = PRESTIGE_TIERS.length;
-var PRE_BUILD_TASK_STATUSES = /* @__PURE__ */ new Set(["Planning", "Open"]);
-function hasTaskPlan(plan) {
-  return !!plan?.trim();
-}
-var CARD_TYPE_SURFACE = {
-  task: "board",
-  chat: "board",
-  incident: "report",
-  suggestion: "report"
-};
-var surfaceTypes = (surface) => Object.keys(CARD_TYPE_SURFACE).filter(
-  (type) => CARD_TYPE_SURFACE[type] === surface
-);
-var BOARD_CARD_TYPES = surfaceTypes("board");
-var REPORT_CARD_TYPES = surfaceTypes("report");
+  git,
+  hasTaskPlan,
+  hasUncommittedChanges,
+  hasUnpushedCommits,
+  isCodexReasoningEffort,
+  isPlaceholderLocator,
+  locatorMatchesContent,
+  parseMentions,
+  pushToOrigin,
+  readWorkspaceBytes,
+  readWorkspaceDir,
+  readWorkspaceFile,
+  recordForceFreshFailure,
+  remoteMatchesLocalHead,
+  restoreWipSnapshot,
+  runQueryGcpLogs,
+  runQueryGrafanaLogs,
+  stageAndCommit,
+  statWorkspacePath,
+  updateRemoteToken,
+  verifyGitCredential
+} from "./chunk-OMD77OIJ.js";
+import {
+  registerBootMilestoneSocketFallback,
+  reportBootMilestone
+} from "./chunk-Q4FQOJ7D.js";
+import {
+  describeTokenFile,
+  ghHostsExternallyOwned,
+  githubTokenFilePath,
+  sleep
+} from "./chunk-W4LZ7R6Z.js";
+import {
+  isHeavyGateActive,
+  listAbandonedGateReceipts,
+  listGateExitSentinels,
+  refreshGenericGateStatus
+} from "./chunk-372R6E4C.js";
+import {
+  LoopLagMonitor,
+  loopStatusForRunnerStatus
+} from "./chunk-IA45XHOA.js";
+import {
+  getWorkbenchClient
+} from "./chunk-SQM2BQ7H.js";
+import {
+  workbenchEnabled
+} from "./chunk-KMB3BU4S.js";
 
 // src/connection/auth-errors.ts
 function isPermissionDeniedError(err) {
@@ -2608,7 +352,7 @@ function defineTool(name, description, schema, handler, options) {
 
 // src/harness/claude-code/index.ts
 import { query, tool, createSdkMcpServer } from "@anthropic-ai/claude-agent-sdk";
-import { z as z11 } from "zod";
+import { z } from "zod";
 var ClaudeCodeHarness = class {
   /** The SDK stream is itself the structured-event source. */
   emitsStructuredEvents = true;
@@ -2641,7 +385,7 @@ var ClaudeCodeHarness = class {
         }
       );
       if (t.strict) {
-        sdkTool.inputSchema = z11.strictObject(t.schema);
+        sdkTool.inputSchema = z.strictObject(t.schema);
       }
       return sdkTool;
     });
@@ -3038,7 +782,7 @@ function redact(input) {
 import { open } from "fs/promises";
 
 // src/harness/pty/record-mapper.ts
-function isRecord2(value) {
+function isRecord(value) {
   return typeof value === "object" && value !== null;
 }
 function isUnknownArray(value) {
@@ -3084,7 +828,7 @@ function mapSystem(record) {
 }
 function mapUsage(message) {
   const usage = message.usage;
-  if (!isRecord2(usage)) return void 0;
+  if (!isRecord(usage)) return void 0;
   const result = {};
   const input = numberField(usage, "input_tokens");
   const cacheRead = numberField(usage, "cache_read_input_tokens");
@@ -3095,7 +839,7 @@ function mapUsage(message) {
   return result;
 }
 function mapContentBlock(raw) {
-  if (!isRecord2(raw)) return null;
+  if (!isRecord(raw)) return null;
   const type = stringField(raw, "type");
   if (type === void 0) return null;
   const block = { type };
@@ -3110,7 +854,7 @@ function mapContentBlock(raw) {
 }
 function mapAssistant(record) {
   const message = record.message;
-  if (!isRecord2(message)) return null;
+  if (!isRecord(message)) return null;
   const rawContent = isUnknownArray(message.content) ? message.content : [];
   const content = [];
   for (const item of rawContent) {
@@ -3134,7 +878,7 @@ function mapResultSuccess(record) {
     total_cost_usd: numberField(record, "total_cost_usd", "totalCostUsd") ?? 0
   };
   const modelUsage = record.modelUsage;
-  if (isRecord2(modelUsage)) event.modelUsage = modelUsage;
+  if (isRecord(modelUsage)) event.modelUsage = modelUsage;
   const sessionId = stringField(record, "session_id", "sessionId");
   if (sessionId !== void 0) event.sessionId = sessionId;
   return event;
@@ -3153,7 +897,7 @@ function mapResult(record) {
   return null;
 }
 function mapTranscriptRecord(raw) {
-  if (!isRecord2(raw)) return null;
+  if (!isRecord(raw)) return null;
   switch (raw.type) {
     case "system":
       return mapSystem(raw);
@@ -3670,7 +1414,7 @@ var TEXT_MAX = 16e3;
 var TOOL_INPUT_MAX = 1900;
 var TOOL_OUTPUT_MAX = 1900;
 var QUESTION_INPUT_MAX = 16e3;
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null;
 }
 function isUnknownArray2(value) {
@@ -3701,7 +1445,7 @@ function compactQuestionsJson(questions) {
   return serialize(withDescriptions(0)).slice(0, QUESTION_INPUT_MAX);
 }
 function compactToolInput(name, input) {
-  if (name === "AskUserQuestion" && isRecord3(input)) {
+  if (name === "AskUserQuestion" && isRecord2(input)) {
     const questions = parseUserQuestions(input);
     if (questions.length > 0) return compactQuestionsJson(questions);
   }
@@ -3714,15 +1458,15 @@ function isNonConversationText(text) {
 }
 function userRecordText(record) {
   const message = record.message;
-  if (!isRecord3(message)) return void 0;
+  if (!isRecord2(message)) return void 0;
   const content = message.content;
   if (typeof content === "string") return content;
   if (!isUnknownArray2(content)) return void 0;
-  if (content.some((b) => isRecord3(b) && b.type === "tool_result")) return void 0;
-  return content.filter((b) => isRecord3(b) && b.type === "text").map((b) => typeof b.text === "string" ? b.text : "").filter((t) => t.length > 0).join("\n");
+  if (content.some((b) => isRecord2(b) && b.type === "tool_result")) return void 0;
+  return content.filter((b) => isRecord2(b) && b.type === "text").map((b) => typeof b.text === "string" ? b.text : "").filter((t) => t.length > 0).join("\n");
 }
 function isBackgroundTaskNotificationRecord(raw) {
-  if (!isRecord3(raw) || raw.type !== "user") return false;
+  if (!isRecord2(raw) || raw.type !== "user") return false;
   if (raw.isSidechain === true || raw.isMeta === true) return false;
   const text = userRecordText(raw);
   return text !== void 0 && text.trimStart().startsWith(TASK_NOTIFICATION_PREFIX);
@@ -3742,11 +1486,11 @@ function mapSystem2(record) {
 }
 function mapAssistant2(record) {
   const message = record.message;
-  if (!isRecord3(message)) return [];
+  if (!isRecord2(message)) return [];
   const content = isUnknownArray2(message.content) ? message.content : [];
   const events = [];
   for (const raw of content) {
-    if (!isRecord3(raw)) continue;
+    if (!isRecord2(raw)) continue;
     if (raw.type === "text") {
       const text = stringField2(raw, "text");
       if (text && text.length > 0) {
@@ -3773,14 +1517,14 @@ function toolResultText(block) {
   const content = block.content;
   if (typeof content === "string") return content;
   if (isUnknownArray2(content)) {
-    return content.filter((b) => isRecord3(b) && b.type === "text").map((b) => typeof b.text === "string" ? b.text : "").filter((t) => t.length > 0).join("\n");
+    return content.filter((b) => isRecord2(b) && b.type === "text").map((b) => typeof b.text === "string" ? b.text : "").filter((t) => t.length > 0).join("\n");
   }
   return "";
 }
 function mapToolResults(content) {
   const events = [];
   for (const raw of content) {
-    if (!isRecord3(raw) || raw.type !== "tool_result") continue;
+    if (!isRecord2(raw) || raw.type !== "tool_result") continue;
     const event = {
       kind: "tool_result",
       output: truncate2(toolResultText(raw), TOOL_OUTPUT_MAX),
@@ -3794,9 +1538,9 @@ function mapToolResults(content) {
 }
 function mapUser(record) {
   const message = record.message;
-  if (!isRecord3(message)) return [];
+  if (!isRecord2(message)) return [];
   const content = message.content;
-  if (isUnknownArray2(content) && content.some((b) => isRecord3(b) && b.type === "tool_result")) {
+  if (isUnknownArray2(content) && content.some((b) => isRecord2(b) && b.type === "tool_result")) {
     return mapToolResults(content);
   }
   const text = userRecordText(record);
@@ -3806,7 +1550,7 @@ function mapUser(record) {
   return [{ kind: "user_text", text: truncate2(trimmed, TEXT_MAX) }];
 }
 function mapChatRecords(raw) {
-  if (!isRecord3(raw)) return [];
+  if (!isRecord2(raw)) return [];
   if (raw.isSidechain === true || raw.isMeta === true) return [];
   switch (raw.type) {
     case "system":
@@ -4134,7 +1878,7 @@ var PtyOutputCoalescer = class {
 
 // src/harness/pty/tool-server.ts
 import { createServer as createServer2 } from "http";
-import { z as z12 } from "zod";
+import { z as z2 } from "zod";
 import { writeFile as writeFile4 } from "fs/promises";
 import { join as join4 } from "path";
 import { randomBytes } from "crypto";
@@ -4191,7 +1935,7 @@ var PtyToolServer = class {
     const mcp = new McpServer({ name: this.name, version: "1.0.0" });
     const register = mcp.registerTool.bind(mcp);
     for (const tool2 of this.tools) {
-      const inputSchema = tool2.strict ? z12.strictObject(tool2.schema) : tool2.schema;
+      const inputSchema = tool2.strict ? z2.strictObject(tool2.schema) : tool2.schema;
       register(
         tool2.name,
         {
@@ -7524,383 +5268,122 @@ var DirectStreamController = class {
     const off = this.inner.onResize((cols, rows) => {
       this.relayDims = { cols, rows };
       this.applyDims();
-    });
-    return () => {
-      if (this.resizeHandler === handler) this.resizeHandler = null;
-      off();
-    };
-  }
-  async dispose() {
-    if (this.disposed) return;
-    this.disposed = true;
-    this.relayCoalescer.dispose();
-    this.reporter.reportPtyStream(null);
-    const current = this.server;
-    this.server = null;
-    if (current) await current.close();
-  }
-};
-function wrapBridgeWithDirectStream(inner, reporter, options = {}) {
-  const controller = new DirectStreamController(inner, reporter, options);
-  return {
-    bridge: {
-      ...inner,
-      sendOutput: (data, dims) => controller.sendOutput(data, dims),
-      sendEnded: () => controller.sendEnded(),
-      onInput: (handler) => controller.onInput(handler),
-      onResize: (handler) => controller.onResize(handler)
-    },
-    dispose: () => controller.dispose()
-  };
-}
-
-// src/execution/query-executor.ts
-import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
-import { existsSync, readFileSync as readFileSync3, renameSync as renameSync2, truncateSync } from "fs";
-
-// src/execution/chat-instructions.ts
-function buildChatInstructions(context, scenario, newMessages) {
-  const userMessages = newMessages.filter((m) => m.role === "user");
-  const parts = [];
-  if (scenario === "fresh") {
-    parts.push(
-      `The user's message is above. Do what it asks and reply with post_to_chat \u2014 your turn output is NOT shown in chat, so post_to_chat is the only way the user sees your answer.`
-    );
-  } else if (userMessages.length > 0) {
-    parts.push(
-      `You have new messages on this card.`,
-      `
-New messages since your last run:`,
-      ...userMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`),
-      `
-Respond to them with post_to_chat (your turn output is NOT shown in chat).`
-    );
-  } else {
-    parts.push(
-      `You were relaunched but no new messages have arrived since your last run.`,
-      `Post a brief status update with post_to_chat if you still owe the team a response, then wait for them.`
-    );
-  }
-  if (context.githubPRUrl) {
-    parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
-  }
-  return parts;
-}
-
-// src/execution/relaunch-hold.ts
-function findLastAgentMessageIndex(history) {
-  for (let i = history.length - 1; i >= 0; i--) {
-    if (history[i].role === "assistant") return i;
-  }
-  return -1;
-}
-function messagesAfterCursor(history, lastSeenMessageId) {
-  if (!lastSeenMessageId) return history;
-  const idx = history.findIndex((m) => m.id === lastSeenMessageId);
-  return idx === -1 ? history : history.slice(idx + 1);
-}
-function relaunchMessageBatch(context) {
-  if (context.lastSeenMessageId) {
-    return messagesAfterCursor(context.chatHistory, context.lastSeenMessageId);
-  }
-  return context.chatHistory.slice(findLastAgentMessageIndex(context.chatHistory) + 1);
-}
-function isCodeReviewRun(mode, agentMode) {
-  return mode === "code-review" || mode !== "pm" && agentMode === "review";
-}
-function isActionableRelaunchMessage(m) {
-  if (m.source && CRITICAL_AUTOMATED_SOURCES.has(m.source)) return true;
-  return m.role === "user" && m.source !== EXTERNAL_AGENT_MESSAGE_SOURCE;
-}
-function isReviewHostHold(context, newMessages, isCodeReview) {
-  if (isCodeReview) return false;
-  if (context.status !== "ReviewPR" || !context.githubPRUrl) return false;
-  return !newMessages.some((m) => isActionableRelaunchMessage(m));
-}
-function buildReviewHostHoldParts(context, newMessages) {
-  const parts = [
-    `You were relaunched while this task is in review, but nothing here asks you to change the code.`,
-    `Most likely this workspace was woken to HOST the code review session, not to work.`,
-    `Do NOT take a work turn: do not re-review your own diff, re-run gates, commit, or push. The PR is mid-review and moving the branch now would pull it out from under the reviewer.`,
-    `Work on the git branch "${context.githubBranch}". Stay on this branch \u2014 do not checkout or create other branches.`
-  ];
-  if (newMessages.length > 0) {
-    parts.push(
-      `
-New messages since your last run:`,
-      ...newMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`)
-    );
-  }
-  parts.push(
-    `
-Review these messages and wait for the team to provide instructions before taking action.`,
-    `If the review requests changes, or CI fails, you will be woken again with that feedback \u2014 act then, not now.`
-  );
-  if (context.githubPRUrl) {
-    parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
-  }
-  return parts;
-}
-
-// src/execution/pack-runner-prompt.ts
-function findLastAgentMessageIndex2(history) {
-  for (let i = history.length - 1; i >= 0; i--) {
-    if (history[i].role === "assistant") return i;
-  }
-  return -1;
-}
-function formatProjectAgents(agents) {
-  const parts = [``, `## Project Agents`];
-  for (const agent of agents) {
-    const role = agent.role ? `role: ${agent.role}` : "role: unassigned";
-    const sp = agent.storyPoints === null || agent.storyPoints === void 0 ? "" : `, story points: ${agent.storyPoints}`;
-    parts.push(`- ${agent.name} (${role}${sp})`);
-  }
-  return parts;
-}
-function formatStoryPoints(storyPoints) {
-  const parts = [``, `## Story Point Tiers`];
-  for (const sp of storyPoints) {
-    const desc = sp.description ? ` \u2014 ${sp.description}` : "";
-    parts.push(`- Value ${sp.value}: "${sp.name}"${desc}`);
-  }
-  return parts;
-}
-var PACK_RUNNER_FOOTER = [
-  ``,
-  `Your turn output appears ONLY in the live agent terminal \u2014 it is NOT posted to the task chat. The team does NOT see your replies unless you post them.`,
-  `Use post_to_chat (omit task_id \u2192 this task's chat) to report which children you fired, status as you orchestrate, and any blocker or escalation the team needs to act on.`,
-  `Pass task_id only to message a DIFFERENT task's chat (e.g. a child task).`,
-  `Use read_task_chat only if you need to re-read earlier messages beyond the chat context above.`,
-  ``,
-  `If a Conveyor tool call fails or reports the MCP server is unavailable/disconnected, this is almost always a transient socket reconnect \u2014 RETRY the same call; it will succeed once the connection re-establishes. A tool error is NOT a reason to go idle or stop the loop. (Going idle is only correct when you are genuinely waiting on child-task status changes or CI \u2014 see the loop above.)`,
-  ``,
-  HUMAN_PROSE_WRITING_STYLE
-];
-function formatBaseSync(packBranch, devBranch) {
-  return [
-    ``,
-    `## Pack Branch Base Sync`,
-    `This is a feature-branch pack: children branch from \`${packBranch}\` and PR back into it, and the whole pack lands on \`${devBranch}\` in one final PR at the end.`,
-    `YOU are the reviewer of record for child PRs \u2014 the automated code reviewer skips PRs that target \`${packBranch}\` (the full automated review runs on the pack's final PR into \`${devBranch}\`). Review each child diff properly before merging; a merged child advances to ReviewDev automatically.`,
-    `Before each child launch the server merges \`${devBranch}\` into \`${packBranch}\` for you, so children start from a fresh base. You do not need to do this yourself.`,
-    `When start_child_cloud_build reports a base-sync conflict, that merge could not be applied automatically. Fix it before firing more children:`,
-    `1. \`git fetch origin ${devBranch} && git checkout ${packBranch} && git pull origin ${packBranch}\``,
-    `2. \`git merge origin/${devBranch}\`, resolve the conflicts, commit, and push to \`${packBranch}\`.`,
-    `3. Resume the loop.`,
-    `Resolving this merge is git coordination, not code-writing \u2014 it does NOT violate the "Do NOT attempt to write code yourself" rule below. Keep the resolution to the conflict markers; if a conflict needs real code decisions, escalate to the team instead of authoring the fix.`,
-    `The launch itself is never blocked by a conflict \u2014 the child was already started from the un-synced branch, so sync promptly.`
-  ];
-}
-function resolveMergedWorkBranch(context) {
-  return context.featureBranch && context.githubBranch ? context.githubBranch : context.baseBranch;
-}
-function resolveSinglePodPackBranch(context) {
-  return context.githubBranch || context.baseBranch;
-}
-function buildPackRunnerSystemPrompt(context, config, setupLog) {
-  const mergedWorkBranch = resolveMergedWorkBranch(context);
-  const parts = [
-    `You are an autonomous Pack Runner managing child tasks for the "${context.title}" project.`,
-    `You are running locally with full access to the repository and task management tools.`,
-    `Your job is to execute child tasks by firing cloud builds, reviewing their PRs, and merging them \u2014 respecting dependency chains for parallel execution.`,
-    ``,
-    `## Child Task Status Lifecycle`,
-    `- "Planning" \u2014 Not ready for execution. If its plan is solid, promote it yourself: update_subtask with status "Open" (plus storyPointValue and agentIdOrName if unset \u2014 setting story points does NOT auto-promote). Otherwise skip it (or escalate if blocking).`,
-    `- "Open" \u2014 Ready to execute (if dependencies are met). Use start_child_cloud_build to fire it.`,
-    `- "InProgress" \u2014 Currently being worked on by a Task Runner. Wait \u2014 it will move to ReviewPR when done.`,
-    `- "ReviewPR" \u2014 Task Runner finished and opened a PR. Review and merge it.`,
-    `- "ReviewDev" \u2014 PR was merged (to dev, or into this pack's feature branch for feature-branch packs). This child is complete. Move on.`,
-    `- "Complete" \u2014 Fully done. Move on.`,
-    ``,
-    `## Autonomous Loop`,
-    `Follow this loop each time you are launched or relaunched:`,
-    ``,
-    `1. Call list_subtasks to see the current state of all child tasks.`,
-    `   The response includes PR info, agent assignment, **dependency info** (dependsOn array + allDependenciesMet flag), and the **packSlots** build-slot picture.`,
-    `   If list_subtasks returns NO children, this is a fresh parent card: break the work down now \u2014 explore the codebase, save a parent-level plan with update_task, then create child tasks with create_subtask, each with a detailed plan (file:line citations, verification steps) and dependsOn set for any child that blocks on another. Then fire the ready children and continue the loop.`,
-    ``,
-    `2. Evaluate children by status and dependency readiness:`,
-    `   - "ReviewPR": Review and merge its PR with approve_and_merge_pr. (Highest priority)`,
-    `     - If merge fails due to pending CI: post a status update to chat, state you are going idle.`,
-    `     - If merge fails due to failed CI: use get_execution_logs(childTaskId) to check. Escalate to team.`,
-    `   - "InProgress": A Task Runner is actively working. Do nothing \u2014 wait.`,
-    `   - "Open" + allDependenciesMet=true: Ready to fire. Use start_child_cloud_build.`,
-    `   - "Open" + allDependenciesMet=false: Blocked \u2014 skip for now. Will be unblocked when deps complete.`,
-    `   - "ReviewDev" / "Complete": Already done. Skip.`,
-    `   - "Planning": Not ready. Promote it with update_subtask (status "Open" + story points + agent) once its plan is solid; if it genuinely isn't plannable, notify team.`,
-    ``,
-    `3. Fire ALL ready "Open" tasks whose dependencies are met, not just one \u2014 independent tasks run in parallel. There is a concurrency limit: if start_child_cloud_build returns a PACK_CHILD_LIMIT error, that is backpressure, not a failure. Check list_subtasks' packSlots to see which children hold the in-flight slots \u2014 merge or wait on them (or stop_child_build a stale holder that isn't actually running), then start more as slots free up.`,
-    `   A successful start_child_cloud_build moves that child to "InProgress" \u2014 that status IS your confirmation the fire landed. Never re-fire a child that already reads "InProgress".`,
-    ``,
-    `4. After merging a PR: run \`git pull origin ${mergedWorkBranch}\` then re-check list_subtasks \u2014 previously blocked tasks may now be ready.`,
-    ``,
-    `5. After firing all ready tasks: report which tasks you fired to chat, then state you are going idle.`,
-    ``,
-    `6. When ALL children are in "ReviewDev" or "Complete" (no "Open", "InProgress", or "ReviewPR" remaining): do a final review, summarize results in chat, and mark this parent task complete with force_update_task_status("Complete").`,
-    ``,
-    `## Important Rules`,
-    `- When dependencies are set on children, use them to determine execution order. Fire all ready tasks in parallel (up to the PACK_CHILD_LIMIT backpressure \u2014 see the loop above).`,
-    `- Dependencies are explicit card metadata (set at creation via create_subtask's dependsOn, or rewired with update_subtask). Prefer them over reading order out of plan text. When NO dependencies are set on any children, fall back to ordinal order (one at a time) \u2014 this is legacy behavior; set dependsOn when a child truly blocks on another.`,
-    `- After firing builds OR when waiting on CI, explicitly state you are going idle. Go idle when waiting \u2014 the system wakes you (or relaunches this environment) when a child changes status.`,
-    `- Do NOT attempt to write code yourself. Your role is coordination only.`,
-    `- If a child is stuck in "InProgress" for an unusually long time, use get_execution_logs(childTaskId) to check its logs and escalate to the team if it appears stuck.`,
-    `- stop_child_build is a signal, not an immediate teardown: it tells the child's agent to stop, but the build slot stays held until that environment actually tears down. A slot still held right after a stop is normal, NOT a wedge \u2014 re-check list_subtasks' packSlots on a later turn instead of re-firing, stopping again, or escalating.`,
-    `- You can use get_task(childTaskId) to get a child's full details including PR URL and branch.`,
-    `- list_subtasks (compact view, the default) returns per child: status, agent assignment (agentId), story points, PR number/state, dependency info, and holdsBuildSlot \u2014 plus a packSlots summary of in-flight environments vs the cap. Use this to verify readiness before firing builds; pass verbose:true only if you need full plan/description text.`,
-    `- You can use read_task_chat to check for team messages.`
-  ];
-  if (context.featureBranch && context.githubBranch) {
-    parts.push(...formatBaseSync(context.githubBranch, context.baseBranch));
-  }
-  if (context.storyPoints && context.storyPoints.length > 0) {
-    parts.push(...formatStoryPoints(context.storyPoints));
-  }
-  if (context.agents && context.agents.length > 0) {
-    parts.push(...formatProjectAgents(context.agents));
-  }
-  if (setupLog.length > 0) {
-    parts.push(``, `## Environment setup log`, "```", ...setupLog, "```");
-  }
-  if (context.agentInstructions) {
-    parts.push(``, `## Agent Instructions`, context.agentInstructions);
-  }
-  if (config.instructions) {
-    parts.push(``, `## Additional Instructions`, config.instructions);
-  }
-  parts.push(...PACK_RUNNER_FOOTER);
-  return parts.join("\n");
-}
-function buildSinglePodPackPrompt(context, config, setupLog) {
-  const packBranch = resolveSinglePodPackBranch(context);
-  const parts = [
-    `You are an autonomous Pack Runner for the "${context.title}" pack, and you implement the work yourself.`,
-    ``,
-    `Run the \`/conveyor-build\` skill and follow its PACK PATH. It is the source of truth for the loop \u2014 child selection, dependency order, the reviewer-of-record pass, the finale \u2014 and it carries the pod substitution this session runs under. Do not re-derive the workflow from memory.`,
-    ``,
-    // Session-bound facts only. Everything the skill CAN know now lives there;
-    // what stays is what is true of THIS pod and this card.
-    `## This session`,
-    `- You are ALREADY bound to this parent card. There is nothing to claim.`,
-    `- One checkout, one branch: \`${packBranch}\`. Every child's work is commits on it.`,
-    `- Children get NO branches and NO pull requests here. \`create_pull_request\` always opens the PR for the card you are bound to, so calling it mid-pack opens the PARENT's PR early and strands the remaining children. One PR, at the very end, for this parent.`,
-    `- You move each child's status yourself: \`update_task(task_id: <child>, status: ...)\`. No per-child build fires, so a status you do not write is a board that silently lies. A child is "ReviewDev" once its commits are on \`${packBranch}\`.`,
-    `- \`start_child_cloud_build\` and \`stop_child_build\` belong to the fan-out model and are not available to you \u2014 you are the implementer.`,
-    `- Merge \`origin/${context.baseBranch}\` into \`${packBranch}\` after each child, never rebase: the branch is shared with WIP refs and rewriting it breaks them.`,
-    `- Nothing will wake you to start the next child. Go idle only when genuinely blocked on something external.`,
-    ``
-  ];
-  if (context.storyPoints && context.storyPoints.length > 0) {
-    parts.push(...formatStoryPoints(context.storyPoints));
-  }
-  if (context.agents && context.agents.length > 0) {
-    parts.push(...formatProjectAgents(context.agents));
-  }
-  if (setupLog.length > 0) {
-    parts.push(``, `## Environment setup log`, "```", ...setupLog, "```");
-  }
-  if (context.agentInstructions) {
-    parts.push(``, `## Agent Instructions`, context.agentInstructions);
+    });
+    return () => {
+      if (this.resizeHandler === handler) this.resizeHandler = null;
+      off();
+    };
   }
-  if (config.instructions) {
-    parts.push(``, `## Additional Instructions`, config.instructions);
+  async dispose() {
+    if (this.disposed) return;
+    this.disposed = true;
+    this.relayCoalescer.dispose();
+    this.reporter.reportPtyStream(null);
+    const current = this.server;
+    this.server = null;
+    if (current) await current.close();
   }
-  parts.push(...PACK_RUNNER_FOOTER);
-  return parts.join("\n");
+};
+function wrapBridgeWithDirectStream(inner, reporter, options = {}) {
+  const controller = new DirectStreamController(inner, reporter, options);
+  return {
+    bridge: {
+      ...inner,
+      sendOutput: (data, dims) => controller.sendOutput(data, dims),
+      sendEnded: () => controller.sendEnded(),
+      onInput: (handler) => controller.onInput(handler),
+      onResize: (handler) => controller.onResize(handler)
+    },
+    dispose: () => controller.dispose()
+  };
 }
-function buildSinglePodPackInstructions(context, scenario) {
-  const parts = [`
-## Instructions`];
+
+// src/execution/query-executor.ts
+import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
+import { existsSync, readFileSync as readFileSync3, renameSync as renameSync2, truncateSync } from "fs";
+
+// src/execution/chat-instructions.ts
+function buildChatInstructions(context, scenario, newMessages) {
+  const userMessages = newMessages.filter((m) => m.role === "user");
+  const parts = [];
   if (scenario === "fresh") {
     parts.push(
-      `You are the Pack Runner for this task and its subtasks, and you implement them yourself.`,
-      `Start now: call list_subtasks to see where the pack stands.`,
-      `No children yet? Break the work down first \u2014 save a parent-level plan with update_task, then create_subtask each child with a detailed plan and dependsOn set where one blocks another.`,
-      `Otherwise take the first "Open" child whose dependencies are met, claim it with update_task(task_id, status: "InProgress"), and implement it on this branch.`
-    );
-  } else if (scenario === "idle_relaunch") {
-    parts.push(
-      `You have been relaunched. Re-derive where the pack stands \u2014 call list_subtasks and check the branch, never rely on what you remember.`,
-      `A child left "InProgress" is one YOU were implementing: check the working tree and the log for what already landed before redoing any of it.`,
-      `Otherwise continue the loop: next ready child, or the finale if none remain.`
+      `The user's message is above. Do what it asks and reply with post_to_chat \u2014 your turn output is NOT shown in chat, so post_to_chat is the only way the user sees your answer.`
     );
-  } else {
-    const lastAgentIdx = findLastAgentMessageIndex2(context.chatHistory);
-    const newMessages = context.chatHistory.slice(lastAgentIdx + 1).filter((m) => m.role === "user");
+  } else if (userMessages.length > 0) {
     parts.push(
-      `You have been relaunched with new messages.`,
+      `You have new messages on this card.`,
       `
 New messages since your last run:`,
-      ...newMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`),
+      ...userMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`),
       `
-After addressing the feedback, resume: call list_subtasks and continue with the next ready child.`
-    );
-  }
-  return parts;
-}
-function buildPackRunnerInstructions(context, scenario) {
-  const parts = [`
-## Instructions`];
-  if (scenario === "fresh") {
-    parts.push(
-      `You are the Pack Runner for this task and its subtasks.`,
-      `Begin your autonomous loop immediately: call list_subtasks to assess the current state.`,
-      `If there are no children yet, create them first \u2014 save a parent-level plan with update_task, then create child tasks with detailed plans and dependsOn set where one blocks on another. Then fire the ready ones.`,
-      `If any child is in "ReviewPR" status, review and merge its PR first.`,
-      `Then fire the next "Open" child task.`
-    );
-  } else if (scenario === "idle_relaunch") {
-    parts.push(
-      `You have been relaunched \u2014 a child task likely changed status.`,
-      `Call list_subtasks to check the current state of all children.`,
-      `Look for children in "ReviewPR" status first \u2014 review and merge their PRs.`,
-      `Check if any previously blocked tasks now have allDependenciesMet=true \u2014 fire them.`,
-      `If a child you previously fired is now in "ReviewDev", pull latest with \`git pull origin ${resolveMergedWorkBranch(context)}\`.`,
-      `If no children need action, state you are going idle.`
+Respond to them with post_to_chat (your turn output is NOT shown in chat).`
     );
   } else {
-    const lastAgentIdx = findLastAgentMessageIndex2(context.chatHistory);
-    const newMessages = context.chatHistory.slice(lastAgentIdx + 1).filter((m) => m.role === "user");
     parts.push(
-      `You have been relaunched with new messages.`,
-      `
-New messages since your last run:`,
-      ...newMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`),
-      `
-After addressing the feedback, resume your autonomous loop: call list_subtasks and proceed accordingly.`
+      `You were relaunched but no new messages have arrived since your last run.`,
+      `Post a brief status update with post_to_chat if you still owe the team a response, then wait for them.`
     );
   }
+  if (context.githubPRUrl) {
+    parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
+  }
   return parts;
 }
 
-// src/execution/plan-revision-notice.ts
-var MINUTE_MS = 60 * 1e3;
-var HOUR_MS = 60 * MINUTE_MS;
-var DAY_MS = 24 * HOUR_MS;
-function describeAge(revisedAt, now) {
-  const at = Date.parse(revisedAt);
-  if (Number.isNaN(at)) return "";
-  const ago = now - at;
-  if (ago < MINUTE_MS) return "just now";
-  if (ago < HOUR_MS) return `${Math.round(ago / MINUTE_MS)} minutes ago`;
-  if (ago < DAY_MS) return `${Math.round(ago / HOUR_MS)} hours ago`;
-  return `${Math.round(ago / DAY_MS)} days ago`;
+// src/execution/relaunch-hold.ts
+function findLastAgentMessageIndex(history) {
+  for (let i = history.length - 1; i >= 0; i--) {
+    if (history[i].role === "assistant") return i;
+  }
+  return -1;
 }
-function buildPlanRevisionNotice(context, now = Date.now()) {
-  const revisedAt = context.planRevisedAt;
-  if (!revisedAt) return [];
-  const age = describeAge(revisedAt, now);
-  const when = age ? `${age} (${revisedAt})` : revisedAt;
-  return [
-    `
-## \u26A0\uFE0F The plan changed since this build was dispatched`,
-    `Someone revised this card's plan ${when}. It was NOT you \u2014 an agent is never told about its own plan edit.`,
-    `Before your next Write or Edit:`,
-    `1. Call \`get_current_plan\` and read the current plan in full.`,
-    `2. Compare it against the plan you were launched with. Treat the current plan as the truth.`,
-    `3. Drop or redo any work the revision supersedes. Do NOT keep building the old plan.`,
-    `If the revision invalidates work you already committed, say so with post_to_chat before you continue.`
+function messagesAfterCursor(history, lastSeenMessageId) {
+  if (!lastSeenMessageId) return history;
+  const idx = history.findIndex((m) => m.id === lastSeenMessageId);
+  return idx === -1 ? history : history.slice(idx + 1);
+}
+function relaunchMessageBatch(context) {
+  if (context.lastSeenMessageId) {
+    return messagesAfterCursor(context.chatHistory, context.lastSeenMessageId);
+  }
+  return context.chatHistory.slice(findLastAgentMessageIndex(context.chatHistory) + 1);
+}
+function isCodeReviewRun(mode, agentMode) {
+  return mode === "code-review" || mode !== "pm" && agentMode === "review";
+}
+function isActionableRelaunchMessage(m) {
+  if (m.source && CRITICAL_AUTOMATED_SOURCES.has(m.source)) return true;
+  return m.role === "user" && m.source !== EXTERNAL_AGENT_MESSAGE_SOURCE;
+}
+function isReviewHostHold(context, newMessages, isCodeReview) {
+  if (isCodeReview) return false;
+  if (context.status !== "ReviewPR" || !context.githubPRUrl) return false;
+  return !newMessages.some((m) => isActionableRelaunchMessage(m));
+}
+function buildReviewHostHoldParts(context, newMessages) {
+  const parts = [
+    `You were relaunched while this task is in review, but nothing here asks you to change the code.`,
+    `Most likely this workspace was woken to HOST the code review session, not to work.`,
+    `Do NOT take a work turn: do not re-review your own diff, re-run gates, commit, or push. The PR is mid-review and moving the branch now would pull it out from under the reviewer.`,
+    `Work on the git branch "${context.githubBranch}". Stay on this branch \u2014 do not checkout or create other branches.`
   ];
+  if (newMessages.length > 0) {
+    parts.push(
+      `
+New messages since your last run:`,
+      ...newMessages.map((m) => `[${m.userName ?? "user"}]: ${m.content}`)
+    );
+  }
+  parts.push(
+    `
+Review these messages and wait for the team to provide instructions before taking action.`,
+    `If the review requests changes, or CI fails, you will be woken again with that feedback \u2014 act then, not now.`
+  );
+  if (context.githubPRUrl) {
+    parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
+  }
+  return parts;
 }
 
 // src/execution/prompt-formatters.ts
@@ -8177,11 +5660,6 @@ function buildAutoPrompt(context, runnerMode) {
     `You are in Auto mode \u2014 plan this card, then build it, without stopping for approval.`,
     `Run \`/conveyor-plan\` FIRST to produce the plan and save it to the card, then run \`/conveyor-build\` to implement it. Both are sources of truth; do not re-derive them.`,
     ...buildSkillInvocation("/conveyor-build"),
-    ``,
-    `### What "auto" changes`,
-    `- There is no plan-approval step and no read-only phase. The plan is a RECORD for the team, not a gate \u2014 save it, then immediately write the code. A card whose only output is a plan (or a plan-only PR) has not been built.`,
-    `- Decide independently. Escalate only when genuinely blocked: ambiguous requirements, missing access, conflicting instructions. Everything else is yours to call.`,
-    `- Skip \`/conveyor-plan\` only if the card already carries a plan you are not materially diverging from.`,
     ...buildHarnessContracts(context)
   ];
   if (context) parts.push(...buildPropertyInstructions(context, runnerMode));
@@ -8215,81 +5693,175 @@ function buildModePrompt(agentMode, context, runnerMode) {
       return null;
   }
 }
-function buildChatPrompt(context) {
-  const branch = context?.githubBranch?.trim();
-  const gitScope = branch ? ` on branch \`${branch}\`` : "";
-  return [
-    `
-## Mode: Interactive`,
-    `This is a direct Claude Code session on this card. The user drives it message by message; you have the same access you would have running Claude Code locally in this repo (full read/write, shell, git${gitScope}).`,
-    `- Your turn output is NOT shown in chat \u2014 reply with \`post_to_chat\`.`,
-    `- There is no required Conveyor workflow here. Do what the message asks: answer, investigate, write files, build, or open a PR. Skills such as \`/conveyor-plan\` and \`/conveyor-build\` are available if the user asks for them or they clearly help; nothing runs them for you.`,
-    ``,
-    `### Card facts`,
-    `- This card starts Unidentified and stays so until a plan is saved with \`update_task\`; that first plan identifies it and moves it to In Progress.`,
-    `- Files the user should keep go on the card via \`upload_attachment\` (any file type, up to 25MB), not an off-platform link.`,
-    `- \`create_pull_request\` opens the PR for this card and moves it to Review PR. Save a short plan first so the card is identified \u2014 a record, not an approval gate.`,
-    `- When the user says they are done, call \`force_update_task_status\` with status \`"Complete"\`. Not if a PR is open \u2014 the review flow takes it from there.`
-  ].join("\n");
-}
-function buildReviewTagSection(context) {
-  const assignedIds = new Set(context?.taskTagIds ?? []);
-  const assigned = (context?.projectTags ?? []).filter((t) => assignedIds.has(t.id));
-  if (assigned.length === 0) return [];
+function buildChatPrompt(context) {
+  const branch = context?.githubBranch?.trim();
+  const gitScope = branch ? ` on branch \`${branch}\`` : "";
+  return [
+    `
+## Mode: Interactive`,
+    `This is a direct Claude Code session on this card. The user drives it message by message; you have the same access you would have running Claude Code locally in this repo (full read/write, shell, git${gitScope}).`,
+    `- Your turn output is NOT shown in chat \u2014 reply with \`post_to_chat\`.`,
+    `- There is no required Conveyor workflow here. Do what the message asks: answer, investigate, write files, build, or open a PR. Skills such as \`/conveyor-plan\` and \`/conveyor-build\` are available if the user asks for them or they clearly help; nothing runs them for you.`,
+    ``,
+    `### Card facts`,
+    `- This card starts Unidentified and stays so until a plan is saved with \`update_task\`; that first plan identifies it and moves it to In Progress.`,
+    `- Files the user should keep go on the card via \`upload_attachment\` (any file type, up to 25MB), not an off-platform link.`,
+    `- \`create_pull_request\` opens the PR for this card and moves it to Review PR. Save a short plan first so the card is identified \u2014 a record, not an approval gate.`,
+    `- When the user says they are done, call \`force_update_task_status\` with status \`"Complete"\`. Not if a PR is open \u2014 the review flow takes it from there.`
+  ].join("\n");
+}
+function buildReviewTagSection(context) {
+  const assignedIds = new Set(context?.taskTagIds ?? []);
+  const assigned = (context?.projectTags ?? []).filter((t) => assignedIds.has(t.id));
+  if (assigned.length === 0) return [];
+  const parts = [
+    `### Card Tags & Domain Context`,
+    `This card carries these project glossary tags:`
+  ];
+  for (const tag of assigned) parts.push(...formatTagWithContextPaths(tag));
+  parts.push(
+    ``,
+    `A tag's rules and overview define the conventions the code under review must follow. Use them when you judge Pattern Consistency:`,
+    `- Read the tag entries that match the files in this diff. The "Reference Guides" section of the task brief lists the same tags with a one-line summary of each linked doc.`,
+    `- Call get_tag("<name>") for a term's full spec (overview, linked files, hierarchy) when the linked docs are not enough.`,
+    `- A change that contradicts a tagged system's documented conventions is a review finding, even when it reads fine on its own.`,
+    `- Skip the tags this diff does not touch \u2014 do not read them all up front.`,
+    `- If the diff changes how a tagged system behaves and the tag's overview is now wrong, say so in your review.`,
+    ``
+  );
+  return parts;
+}
+function buildReviewPrompt(context) {
+  return [
+    `
+## Mode: Review`,
+    ...buildSkillInvocation("/conveyor-review"),
+    ``,
+    // Everything below is harness-bound: the skill cannot know this session's
+    // resolved branch, and the verdict tool names differ per surface (the skill
+    // documents both pairs; this names the one that exists here).
+    `### This session`,
+    `- The diff under review: \`${baseDiffCommand(context?.baseBranch)}\``,
+    `- Your verdict tools on this pod are \`approve_code_review\` and \`request_code_changes\`. The local conveyor-mcp pair does not exist here.`,
+    ...buildEnforcedToolContracts(),
+    ...buildReviewTagSection(context)
+  ].join("\n");
+}
+
+// src/execution/pack-runner-prompt.ts
+function formatProjectAgents(agents) {
+  const parts = [``, `## Project Agents`];
+  for (const agent of agents) {
+    const role = agent.role ? `role: ${agent.role}` : "role: unassigned";
+    const sp = agent.storyPoints === null || agent.storyPoints === void 0 ? "" : `, story points: ${agent.storyPoints}`;
+    parts.push(`- ${agent.name} (${role}${sp})`);
+  }
+  return parts;
+}
+function formatStoryPoints(storyPoints) {
+  const parts = [``, `## Story Point Tiers`];
+  for (const sp of storyPoints) {
+    const desc = sp.description ? ` \u2014 ${sp.description}` : "";
+    parts.push(`- Value ${sp.value}: "${sp.name}"${desc}`);
+  }
+  return parts;
+}
+var PACK_RUNNER_FOOTER = [
+  ``,
+  `Your turn output appears ONLY in the live agent terminal \u2014 it is NOT posted to the task chat. The team does NOT see your replies unless you post them.`,
+  `Use post_to_chat (omit task_id \u2192 this task's chat) to report which child you are on, status as you work the pack, and any blocker or escalation the team needs to act on.`,
+  `Pass task_id only to message a DIFFERENT task's chat (e.g. a child task).`,
+  `Use read_task_chat only if you need to re-read earlier messages beyond the chat context above.`,
+  ``,
+  `If a Conveyor tool call fails or reports the MCP server is unavailable/disconnected, this is almost always a transient socket reconnect \u2014 RETRY the same call; it will succeed once the connection re-establishes. A tool error is NOT a reason to go idle or stop the pack. (When a turn may end is the pack path's call \u2014 see its goal and finish line.)`,
+  ``,
+  HUMAN_PROSE_WRITING_STYLE
+];
+function resolveSinglePodPackBranch(context) {
+  return context.githubBranch || context.baseBranch;
+}
+function isPackRunnerSession(mode, isAuto, isParentTask) {
+  return mode === "pack" || mode === "pm" && !!isAuto && !!isParentTask;
+}
+function buildSinglePodPackPrompt(context, setupLog) {
+  const packBranch = resolveSinglePodPackBranch(context);
+  const parts = [
+    `You are an autonomous Pack Runner for the "${context.title}" pack, and you implement the work yourself.`,
+    ``,
+    `Run the \`/conveyor-build\` skill and follow its PACK PATH. It is the source of truth for the loop \u2014 child selection, dependency order, the reviewer-of-record pass, the finale \u2014 and it carries the pod substitution this session runs under. Do not re-derive the workflow from memory.`,
+    ``,
+    // Session-bound facts only. Everything the skill CAN know now lives there;
+    // what stays is what is true of THIS pod and this card.
+    `## This session`,
+    `- You are ALREADY bound to this parent card. There is nothing to claim.`,
+    `- One checkout, one branch: \`${packBranch}\`. Every child's work is commits on it.`,
+    `- Children get NO branches and NO pull requests here. \`create_pull_request\` always opens the PR for the card you are bound to, so calling it mid-pack opens the PARENT's PR early and strands the remaining children. One PR, at the very end, for this parent.`,
+    `- This pack's base branch is \`${context.baseBranch}\`: sync \`origin/${context.baseBranch}\` into \`${packBranch}\` after each child (merge, never rebase \u2014 the branch carries WIP refs), and the finale PR targets it; pass it explicitly when you open the PR.`,
+    `- Child status writes carry the child's id: \`update_task(task_id: <child>, status: ...)\`. Without \`task_id\` the write targets this parent card.`,
+    ``
+  ];
+  if (context.storyPoints && context.storyPoints.length > 0) {
+    parts.push(...formatStoryPoints(context.storyPoints));
+  }
+  if (context.agents && context.agents.length > 0) {
+    parts.push(...formatProjectAgents(context.agents));
+  }
+  if (setupLog.length > 0) {
+    parts.push(``, `## Environment setup log`, "```", ...setupLog, "```");
+  }
+  if (context.agentInstructions) {
+    parts.push(``, `## Agent Instructions`, context.agentInstructions);
+  }
+  parts.push(...PACK_RUNNER_FOOTER);
+  return parts.join("\n");
+}
+function buildSinglePodPackInstructions(scenario) {
   const parts = [
-    `### Card Tags & Domain Context`,
-    `This card carries these project glossary tags:`
+    `
+## Instructions`,
+    `You are the Pack Runner for this pack and you implement every child yourself, on this pod.`
   ];
-  for (const tag of assigned) parts.push(...formatTagWithContextPaths(tag));
-  parts.push(
-    ``,
-    `A tag's rules and overview define the conventions the code under review must follow. Use them when you judge Pattern Consistency:`,
-    `- Read the tag entries that match the files in this diff. The "Reference Guides" section of the task brief lists the same tags with a one-line summary of each linked doc.`,
-    `- Call get_tag("<name>") for a term's full spec (overview, linked files, hierarchy) when the linked docs are not enough.`,
-    `- A change that contradicts a tagged system's documented conventions is a review finding, even when it reads fine on its own.`,
-    `- Skip the tags this diff does not touch \u2014 do not read them all up front.`,
-    `- If the diff changes how a tagged system behaves and the tag's overview is now wrong, say so in your review.`,
-    ``
-  );
+  if (scenario === "idle_relaunch") {
+    parts.push(
+      `You were relaunched with no new messages \u2014 re-derive pack state from the card, never from memory.`
+    );
+  } else if (scenario === "feedback_relaunch") {
+    parts.push(
+      `You have been relaunched with the feedback in New Messages above \u2014 address it, then continue the pack.`
+    );
+  }
+  parts.push(...buildSkillInvocation("/conveyor-build"));
   return parts;
 }
-function buildReviewPrompt(context) {
-  if (context?.isParentTask) return buildParentReviewPrompt();
-  return [
-    `
-## Mode: Review`,
-    ...buildSkillInvocation("/conveyor-review"),
-    ``,
-    // Everything below is harness-bound: the skill cannot know this session's
-    // resolved branch, and the verdict tool names differ per surface (the skill
-    // documents both pairs; this names the one that exists here).
-    `### This session`,
-    `- The diff under review: \`${baseDiffCommand(context?.baseBranch)}\``,
-    `- Your verdict tools on this pod are \`approve_code_review\` and \`request_code_changes\`. The local conveyor-mcp pair does not exist here.`,
-    ...buildEnforcedToolContracts(),
-    ...buildReviewTagSection(context)
-  ].join("\n");
+
+// src/execution/plan-revision-notice.ts
+var MINUTE_MS = 60 * 1e3;
+var HOUR_MS = 60 * MINUTE_MS;
+var DAY_MS = 24 * HOUR_MS;
+function describeAge(revisedAt, now) {
+  const at = Date.parse(revisedAt);
+  if (Number.isNaN(at)) return "";
+  const ago = now - at;
+  if (ago < MINUTE_MS) return "just now";
+  if (ago < HOUR_MS) return `${Math.round(ago / MINUTE_MS)} minutes ago`;
+  if (ago < DAY_MS) return `${Math.round(ago / HOUR_MS)} hours ago`;
+  return `${Math.round(ago / DAY_MS)} days ago`;
 }
-function buildParentReviewPrompt() {
+function buildPlanRevisionNotice(context, now = Date.now()) {
+  const revisedAt = context.planRevisedAt;
+  if (!revisedAt) return [];
+  const age = describeAge(revisedAt, now);
+  const when = age ? `${age} (${revisedAt})` : revisedAt;
   return [
     `
-## Mode: Review`,
-    `### Parent Task Review`,
-    `You are reviewing and coordinating child tasks.`,
-    `- Use \`list_subtasks\` to see current child task state and progress.`,
-    `- For children in ReviewPR status: review their code quality and merge with \`approve_and_merge_pr\`.`,
-    `- For children with failing CI: check with \`get_execution_logs(childTaskId)\` and escalate if stuck.`,
-    `- Fire next child builds with \`start_child_cloud_build\` when ready.`,
-    `- Create follow-up tasks for issues discovered during review.`,
-    ``,
-    `### Coordination Workflow`,
-    `1. Check child task statuses with \`list_subtasks\``,
-    `2. Review completed children \u2014 check PRs, run tests if needed`,
-    `3. Approve and merge passing PRs`,
-    `4. Fire builds for children that are ready`,
-    `5. Create follow-up tasks for anything out of scope`,
-    `6. As children complete, correct their story points with update_subtask (storyPointValue) when the actual work diverged from the estimate \u2014 either direction`
-  ].join("\n");
+## \u26A0\uFE0F The plan changed since this build was dispatched`,
+    `Someone revised this card's plan ${when}. It was NOT you \u2014 an agent is never told about its own plan edit.`,
+    `Before your next Write or Edit:`,
+    `1. Call \`get_current_plan\` and read the current plan in full.`,
+    `2. Compare it against the plan you were launched with. Treat the current plan as the truth.`,
+    `3. Drop or redo any work the revision supersedes. Do NOT keep building the old plan.`,
+    `If the revision invalidates work you already committed, say so with post_to_chat before you continue.`
+  ];
 }
 
 // src/execution/tag-context-resolver.ts
@@ -8618,15 +6190,17 @@ Your plan has been approved \u2014 you are the Builder on this card now.`,
     `When finished, use the mcp__conveyor__create_pull_request tool to open a PR. Do NOT use gh CLI.`
   ];
 }
-function buildPmReviewRelaunchParts() {
-  return [
+function buildPmReviewRelaunchParts(context) {
+  const parts = [
     `
-Resume reviewing and coordinating this task.`,
-    `Call list_subtasks to check current child-task state and progress.`,
-    `Review children in ReviewPR status first, then approve and merge passing PRs.`,
-    `Fire next child builds with start_child_cloud_build when ready.`,
-    `Do not implement code directly or create a new PR from the PM review session.`
+You are the Reviewer on this card now.`,
+    ...buildSkillInvocation("/conveyor-review"),
+    branchLine(context)
   ];
+  if (context.githubPRUrl) {
+    parts.push(`The PR under review is ${context.githubPRUrl}. Do not create a new PR.`);
+  }
+  return parts;
 }
 function buildPmAutoWithPlanRelaunchParts(context) {
   return [
@@ -8657,7 +6231,7 @@ function buildPmRelaunchParts(context, lastAgentIdx, isAuto, agentMode) {
   const intent = resolvePmRelaunchIntent(context, isAuto, agentMode);
   const intentPartsByIntent = {
     ["build" /* Build */]: () => buildPmBuildRelaunchParts(context),
-    ["review" /* Review */]: buildPmReviewRelaunchParts,
+    ["review" /* Review */]: () => buildPmReviewRelaunchParts(context),
     ["auto_with_plan" /* AutoWithPlan */]: () => buildPmAutoWithPlanRelaunchParts(context),
     ["auto_planning" /* AutoPlanning */]: () => buildPmAutoPlanningRelaunchParts(context),
     ["wait_for_team" /* WaitForTeam */]: buildPmWaitForTeamRelaunchParts
@@ -8700,15 +6274,6 @@ Workflow:`,
     `- After saving the plan, call post_to_chat with a short summary for the team (your turn output is NOT posted to chat \u2014 they only see what you post), then end your turn. Do NOT attempt to execute the plan yourself.`,
     `- A separate task agent will handle execution after the team reviews and approves your plan.`
   ];
-  if (context.isParentTask) {
-    parts.push(
-      `
-You are the Project Manager for this set of tasks.`,
-      `This task has child tasks (subtasks) that are tracked on the board.`,
-      `Your role is to coordinate, plan, and manage the subtasks \u2014 not to write code directly.`,
-      `Use the subtask tools (create_subtask, update_subtask, list_subtasks) to manage work breakdown.`
-    );
-  }
   if (context.agents && context.agents.length > 0) {
     parts.push(`
 Project Agents:`);
@@ -8744,7 +6309,10 @@ Workflow:`,
     `- If you toggled into active mode temporarily, mention when you're done so the team can switch you back to planning mode.`
   ].filter(Boolean);
 }
-function buildTaskAgentPreamble(context, workspaceDir, runtimeTui) {
+function ciWaitRule(agentMode) {
+  return agentMode === "review" ? `A review session has no \`wait_for_checks\`: after pushing a fix, read \`gh pr checks\` ONCE and decide on what it shows; never loop on it, and never end the turn expecting a CI wake.` : `Waiting on CI is never a \`gh pr checks\` loop, a pr-wait script, or a sleep: call \`wait_for_checks\` (mcp__conveyor__wait_for_checks) and END THE TURN. Conveyor wakes this session with the result; the pod sleeps in between instead of holding compute for a run it cannot influence.`;
+}
+function buildTaskAgentPreamble(context, workspaceDir, runtimeTui, agentMode) {
   const managedStack = repoHasScript(workspaceDir, "web:rebuild");
   const stackLines = managedStack ? [
     `- The web app is served on port 3050, the API on port 7090.`,
@@ -8762,7 +6330,7 @@ Environment \u2014 already built${managedStack ? " and running" : ""}. These are
     `- Browser automation is the Playwright CLI (\`playwright\`, pinned 1.62.1), NOT an MCP server \u2014 there are no \`mcp__playwright__*\` tools here. Only the headless shell is baked, so a launch must name it AND disable the sandbox: \`chromium.launch({ channel: "chromium-headless-shell", args: ["--no-sandbox"] })\`. A bare \`chromium.launch()\` FAILS: since playwright 1.49 that resolves to the full browser, which is deliberately not installed (pods have no display and cannot run Chromium's sandbox). Screenshots land wherever you write them \u2014 move or delete them before committing.`,
     `- The clone is \`--single-branch\`, so a bare \`git fetch origin <branch>\` does NOT create \`origin/<branch>\`. To reference any other branch, use the explicit refspec: \`git fetch origin <branch>:refs/remotes/origin/<branch>\`.`,
     `- The shell cwd resets between Bash calls, and so does every shell variable. A var you export in one call is EMPTY in the next, which silently redirects output to \`/\` and loses it. Write literal absolute paths (\`git -C\`, \`bun run --cwd\`), and \`mkdir -p\` a directory in the SAME call as the redirect that writes to it.`,
-    `- The \`gh\` CLI is available for READ-ONLY PR and CI state (\`gh pr view\`, \`gh pr checks\`, \`gh pr diff\`). Use the mcp__conveyor__* tools for anything that mutates a PR or card.`,
+    `- The \`gh\` CLI is available for READ-ONLY PR and CI state (\`gh pr view\`, \`gh pr checks\`, \`gh pr diff\`), one read at a time. ${ciWaitRule(agentMode)} Use the mcp__conveyor__* tools for anything that mutates a PR or card.`,
     `- The core mcp__conveyor__* tools are preloaded \u2014 call them directly; do NOT spend a ToolSearch call on them. For any tool that IS still deferred (schema not loaded), load ALL the schemas you expect to need in ONE ToolSearch call using fully-qualified names (query "select:Monitor,mcp__conveyor__<name>" \u2014 bare MCP tool names without the mcp__<server>__ prefix do not match); never guess a deferred tool's parameters.`,
     managedStack ? `Because the environment is already up, do not run installs, builds, database setup, dev-server starts, or exploratory \`pwd\`/\`ls\` probes to confirm any of the above. Run them only when a specific error demands it.` : `Do not run installs, database setup, or exploratory \`pwd\`/\`ls\` probes to confirm any of the above \u2014 they are done. If the task needs a running app, check whether one is already up before you start it, and use the repo's own scripts.`,
     `
@@ -8770,25 +6338,22 @@ Working rules:`,
     `- Read a file before your first Write/Edit to it, and batch multiple changes to the same file into a single call instead of many sequential edits.`,
     `- To learn what calls a symbol or where it lives, query the prebuilt code graph before grepping: \`graphify query "<SymbolName>"\` from the repo root. Query a SYMBOL, never a sentence \u2014 \`graphify query "resolveTaskBaseBranch"\` returns the definition plus every call site, while "how does a task get its base branch" seeds unrelated start nodes and returns test files and loggers. Don't know the symbol yet? Grep for the name first, then query it: grep finds names, the graph finds relationships. \`No matching nodes found\` means "not in this graph" (it is prebuilt, so very recent code is absent), NOT "not in the codebase" \u2014 fall back to \`git grep\`. Skip all of this if \`graphify-out/graph.json\` is not present.`,
     `- When a build/lint/test run fails, capture its output to a file once and grep the file \u2014 never re-run the suite just to re-filter the same output.`,
-    runtimeTui === "codex" ? `- Waiting on long-running commands: retain and resume the command session until it returns an exit result. Finish each required gate before ending the task. Never pretend a completion notification will resume you, and never start another gate while the current one is running.` : `- Waiting on long-running commands: if a gate finishes in under ~2 minutes, run it in the foreground with a timeout. For a longer one, launch it with run_in_background and STOP; a completion notification arrives when it finishes, and the workspace stays awake for as long as background work is outstanding, so a backgrounded gate will not be killed by an idle sleep. For the final pre-PR gate a bounded foreground run (\`timeout 590 <gate>\` with Bash \`timeout: 600000\`) is still preferred as defense in depth \u2014 it survives a pod resume, which a background job does not. Never busy-wait with sleep/pgrep/tail loops, and never re-run the suite to escape a wait that looks stalled.`,
-    runtimeTui === "codex" ? `- Do not end your turn to wait on a required gate. Resume its command session, inspect its exit result, and then continue the checklist.` : `- Ending your turn with NO tool call is the correct way to wait, and it is safe: the pod stays alive and the next notification re-invokes you. Never emit filler commands (\`echo waiting\`, \`true\`, \`sleep N; echo done\`) to "stay alive" \u2014 they are detected and blocked. The proven long-wait shape: start the job with run_in_background, then end the turn. Arm a ScheduleWakeup (delaySeconds 900-1500, prompt restating your next steps) only when nothing will notify you \u2014 an external CI run, a deploy, a remote queue \u2014 never as insurance against a background job's own notification, which does fire.`,
+    `- App servers (including development and production servers) keep running after startup. Start them with the harness background/session facility, then run a separate bounded HTTP readiness check and continue verification. Never wait for server exit or a completion notification to mean the app is ready. If readiness times out, inspect build output and process/resource state before restarting.`,
+    runtimeTui === "codex" ? `- Waiting on long-running commands: retain and resume the command session until it returns an exit result. Finish each required gate before ending the task. Never pretend a completion notification will resume you, and never start another gate while the current one is running.` : `- Waiting on long-running commands: if a gate finishes in under ~2 minutes, run it in the foreground with a timeout. For a longer one, launch it with run_in_background and STOP; a completion notification arrives when it finishes, and tracked background work holds the workspace awake for up to 45 minutes. Inspect any gate approaching that cap. For the final pre-PR gate a bounded foreground run (\`timeout 590 <gate>\` with Bash \`timeout: 600000\`) is still preferred as defense in depth. A pod restart loses both foreground and background processes. Never busy-wait with sleep/pgrep/tail loops, and never re-run the suite to escape a wait that looks stalled.`,
+    runtimeTui === "codex" ? `- Do not end your turn to wait on a required gate. Resume its command session, inspect its exit result, and then continue the checklist.` : `- For a finite background gate, end your turn and its completion notification re-invokes you within the bounded liveness window. Never emit filler commands (\`echo waiting\`, \`true\`, \`sleep N; echo done\`) to "stay alive" \u2014 they are detected and blocked. The proven long-wait shape: start the job with run_in_background, then end the turn.${agentMode === "review" ? "" : " For CI on a pushed commit the shape is `wait_for_checks`, then end the turn (the pod may sleep; the GitHub result wakes it)."} Arm a ScheduleWakeup (delaySeconds 900-1500, prompt restating your next steps) only when nothing will notify you \u2014 a deploy, a remote queue \u2014 never for CI, and never as insurance against a background job's own notification, which does fire.`,
     `
 Git:`,
     `- Stay on \`${context.githubBranch}\` for the whole task: do not check out another branch and do not create one. It was cut from \`${context.baseBranch}\`, and PRs target that automatically.`,
     `- If \`git push\` is rejected as non-fast-forward, run \`git push --force-with-lease origin ${context.githubBranch}\`. This branch is exclusively yours, so force-with-lease is safe.`
   ];
 }
-function buildPackPrompt(mode, context, config, setupLog) {
-  return mode === "pack" && config.packExecution !== "fan-out" ? buildSinglePodPackPrompt(context, config, setupLog) : buildPackRunnerSystemPrompt(context, config, setupLog);
-}
 function buildSystemPrompt(mode, context, config, setupLog, agentMode) {
   const isPm = mode === "pm";
   const isPmActive = isPm && agentMode === "building";
-  const isPackRunner = mode === "pack" || isPm && !!config.isAuto && !!context.isParentTask;
-  if (isPackRunner) {
-    return buildPackPrompt(mode, context, config, setupLog);
+  if (isPackRunnerSession(mode, config.isAuto, context.isParentTask)) {
+    return buildSinglePodPackPrompt(context, setupLog);
   }
-  const parts = isPmActive ? buildActivePreamble(context, config.workspaceDir) : isPm ? buildPmPreamble(context) : buildTaskAgentPreamble(context, config.workspaceDir, config.runtimeTui);
+  const parts = isPmActive ? buildActivePreamble(context, config.workspaceDir) : isPm ? buildPmPreamble(context) : buildTaskAgentPreamble(context, config.workspaceDir, config.runtimeTui, agentMode);
   if (setupLog.length > 0) {
     parts.push(
       `
@@ -8802,11 +6367,6 @@ Environment setup log (already executed before you started \u2014 proof that set
     parts.push(`
 Agent Instructions:
 ${context.agentInstructions}`);
-  }
-  if (config.instructions) {
-    parts.push(`
-Additional Instructions:
-${config.instructions}`);
   }
   parts.push(
     `
@@ -8896,6 +6456,14 @@ function buildRelaunchWithSession(mode, context, agentMode, isAuto) {
       allNew.filter((m) => m.role === "user")
     ).join("\n");
   }
+  if (isCodeReviewRun(mode, agentMode)) {
+    parts.push(
+      scenario === "feedback_relaunch" ? `You have been relaunched with new feedback.` : `You were relaunched but no new instructions have been given since your last run.`,
+      ...newMessagesBlock(allNew.filter((m) => m.role === "user")),
+      ...buildFreshCodeReviewInstructions(context)
+    );
+    return parts.join("\n");
+  }
   if (mode === "pm") {
     parts.push(...buildPmRelaunchParts(context, lastAgentIdx, isAuto, agentMode));
   } else if (isPlanningSession(mode, agentMode, isAuto)) {
@@ -8911,23 +6479,10 @@ function buildRelaunchWithSession(mode, context, agentMode, isAuto) {
       ...builderKickoff(context, `You are the Builder on this card \u2014 address the feedback above.`)
     );
   } else {
-    parts.push(`You were relaunched but no new instructions have been given since your last run.`);
-    if (agentMode === "auto" || agentMode === "building" || isAuto) {
-      parts.push(
-        ...builderKickoff(
-          context,
-          `You are the Builder on this card \u2014 pick up where you left off.`
-        )
-      );
-    } else {
-      parts.push(
-        branchRule(context),
-        `Post a brief status update with post_to_chat (your turn output is NOT shown in chat \u2014 post_to_chat is how the team sees it), then wait for further instructions.`
-      );
-      if (context.githubPRUrl) {
-        parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
-      }
-    }
+    parts.push(
+      `You were relaunched but no new instructions have been given since your last run.`,
+      ...builderKickoff(context, `You are the Builder on this card \u2014 pick up where you left off.`)
+    );
   }
   return parts.join("\n");
 }
@@ -9039,7 +6594,7 @@ function buildFeedbackInstructions(context, isPlanning) {
     `You have been relaunched to address the feedback in New Messages above.`
   );
 }
-function buildIdleRelaunchInstructions(context, isPlanning, agentMode, isAuto) {
+function buildIdleRelaunchInstructions(context, isPlanning) {
   const opener = `You were relaunched but no new instructions have been given since your last run.`;
   if (isPlanning) {
     return [
@@ -9047,28 +6602,16 @@ function buildIdleRelaunchInstructions(context, isPlanning, agentMode, isAuto) {
       `You are the Planner on this card. Post a brief status update with post_to_chat (your turn output is NOT shown in chat \u2014 post_to_chat is how the team sees it), then wait for the team.`
     ];
   }
-  if (agentMode === "auto" || agentMode === "building" || isAuto) {
-    return [
-      opener,
-      ...builderKickoff(context, `You are the Builder on this card \u2014 pick up where you left off.`)
-    ];
-  }
-  const parts = [
+  return [
     opener,
-    branchRule(context),
-    `Post a brief status update summarizing where things stand with post_to_chat (your turn output is NOT shown in chat \u2014 post_to_chat is how the team sees it).`,
-    `Then wait for further instructions \u2014 do NOT redo work that was already completed.`
+    ...builderKickoff(context, `You are the Builder on this card \u2014 pick up where you left off.`)
   ];
-  if (context.githubPRUrl) {
-    parts.push(`An existing PR is open at ${context.githubPRUrl}. Do not create a new PR.`);
-  }
-  return parts;
 }
 function buildInstructions(mode, context, scenario, agentMode, isAuto) {
   const parts = [`
 ## Instructions`];
   const isPm = mode === "pm";
-  const isCodeReview = mode === "code-review" || !isPm && agentMode === "review";
+  const isCodeReview = isCodeReviewRun(mode, agentMode);
   const isPlanning = isPlanningSession(mode, agentMode, isAuto);
   if (agentMode === "chat") {
     parts.push(...buildChatInstructions(context, scenario, relaunchMessageBatch(context)));
@@ -9093,14 +6636,14 @@ function buildInstructions(mode, context, scenario, agentMode, isAuto) {
     return parts;
   }
   if (scenario === "idle_relaunch") {
-    parts.push(...buildIdleRelaunchInstructions(context, isPlanning, agentMode, isAuto));
+    parts.push(...buildIdleRelaunchInstructions(context, isPlanning));
     return parts;
   }
   parts.push(...buildFeedbackInstructions(context, isPlanning));
   return parts;
 }
-async function buildInitialPrompt(mode, context, isAuto, agentMode, packExecution) {
-  const isPackRunner = mode === "pack" || mode === "pm" && !!isAuto && !!context.isParentTask;
+async function buildInitialPrompt(mode, context, isAuto, agentMode) {
+  const isPackRunner = isPackRunnerSession(mode, isAuto, context.isParentTask);
   if (!isPackRunner) {
     const sessionRelaunch = buildRelaunchWithSession(mode, context, agentMode, isAuto);
     if (sessionRelaunch) {
@@ -9113,13 +6656,12 @@ async function buildInitialPrompt(mode, context, isAuto, agentMode, packExecutio
     scenario = "fresh";
   }
   const body = await buildTaskBody(context, mode);
-  const singlePodPack = mode === "pack" && packExecution !== "fan-out";
-  const instructions = isPackRunner ? singlePodPack ? buildSinglePodPackInstructions(context, scenario) : buildPackRunnerInstructions(context, scenario) : buildInstructions(mode, context, scenario, agentMode, isAuto);
+  const instructions = isPackRunner ? buildSinglePodPackInstructions(scenario) : buildInstructions(mode, context, scenario, agentMode, isAuto);
   return [...body, ...instructions].join("\n");
 }
 
 // src/tools/task-context-tools.ts
-import { z as z14 } from "zod";
+import { z as z4 } from "zod";
 
 // ../shared/dist/tool-contracts/index.js
 var f = {
@@ -9148,14 +6690,14 @@ var f = {
     return { kind: "nullable", inner };
   }
 };
-function compileString(z21, spec) {
-  let schema = z21.string();
+function compileString(z11, spec) {
+  let schema = z11.string();
   if (spec.min !== void 0) schema = schema.min(spec.min);
   if (spec.max !== void 0) schema = schema.max(spec.max);
   return schema;
 }
-function compileNumber(z21, spec) {
-  let schema = z21.number();
+function compileNumber(z11, spec) {
+  let schema = z11.number();
   if (spec.int) schema = schema.int();
   if (spec.positive) schema = schema.positive();
   if (spec.nonnegative) schema = schema.nonnegative();
@@ -9163,49 +6705,49 @@ function compileNumber(z21, spec) {
   if (spec.max !== void 0) schema = schema.max(spec.max);
   return schema;
 }
-function compileArray(z21, spec) {
-  let schema = z21.array(compileField(z21, spec.item));
+function compileArray(z11, spec) {
+  let schema = z11.array(compileField(z11, spec.item));
   if (spec.min !== void 0) schema = schema.min(spec.min);
   return schema;
 }
-function compileBase(z21, spec) {
+function compileBase(z11, spec) {
   switch (spec.kind) {
     case "string":
-      return compileString(z21, spec);
+      return compileString(z11, spec);
     case "number":
-      return compileNumber(z21, spec);
+      return compileNumber(z11, spec);
     case "boolean":
-      return z21.boolean();
+      return z11.boolean();
     case "enum":
-      return z21.enum([...spec.values]);
+      return z11.enum([...spec.values]);
     case "array":
-      return compileArray(z21, spec);
+      return compileArray(z11, spec);
     case "object":
-      return z21.object(compileShape(z21, spec.fields));
+      return z11.object(compileShape(z11, spec.fields));
   }
 }
 function descriptionOf(spec) {
   if (spec.kind === "optional" || spec.kind === "nullable") return descriptionOf(spec.inner);
   return spec.desc;
 }
-function compileUndescribed(z21, spec) {
+function compileUndescribed(z11, spec) {
   if (spec.kind === "optional") {
-    return compileUndescribed(z21, spec.inner).optional();
+    return compileUndescribed(z11, spec.inner).optional();
   }
   if (spec.kind === "nullable") {
-    return compileUndescribed(z21, spec.inner).nullable();
+    return compileUndescribed(z11, spec.inner).nullable();
   }
-  return compileBase(z21, spec);
+  return compileBase(z11, spec);
 }
-function compileField(z21, spec) {
-  const schema = compileUndescribed(z21, spec);
+function compileField(z11, spec) {
+  const schema = compileUndescribed(z11, spec);
   const desc = descriptionOf(spec);
   return desc === void 0 ? schema : schema.describe(desc);
 }
-function compileShape(z21, fields) {
+function compileShape(z11, fields) {
   const shape = {};
   for (const [key, spec] of Object.entries(fields)) {
-    shape[key] = compileField(z21, spec);
+    shape[key] = compileField(z11, spec);
   }
   return shape;
 }
@@ -9374,25 +6916,6 @@ var searchTasksContract = defineToolContract({
     }
   }
 });
-var childTaskIdForMerge = f.string({
-  desc: "The child task ID whose PR should be approved and merged"
-});
-var approveAndMergePrContract = defineToolContract({
-  name: "approve_and_merge_pr",
-  agent: {
-    description: "Approve and merge a child task's PR. Preconditions: child in ReviewPR. Returns { merged }: true = merged (status\u2192ReviewDev); false = automerge queued, wait for ReviewDev. Requires project Admin, or a sub-project merge grant covering every changed file; release PRs require Admin.",
-    fields: {
-      childTaskId: childTaskIdForMerge
-    }
-  },
-  mcp: {
-    description: "Approve a child task's pull request and QUEUE it for merge \u2014 the merge lands asynchronously (~30s sweep) once the CI and code-review gates pass; the response says whether it merged or was queued, so verify PR state before depending on it. Pass projectId to target a specific project; otherwise the configured default project is used. The child task must be in ReviewPR status with a PR. Requires project Admin, or a sub-project merge grant covering every changed file; release PRs require Admin.",
-    fields: {
-      projectId: mcpProjectId,
-      childTaskId: childTaskIdForMerge
-    }
-  }
-});
 var getConnectionContextContract = defineToolContract({
   name: "get_connection_context",
   agent: {
@@ -9412,7 +6935,6 @@ var tasksContracts = [
   readTaskChatContract,
   listTagsContract,
   searchTasksContract,
-  approveAndMergePrContract,
   getConnectionContextContract
 ];
 var STATUS_ENUM = [
@@ -9803,12 +7325,12 @@ var updateSubtaskContract = defineToolContract({
       plan: f.optional(f.string()),
       status: f.optional(
         f.enum(["Planning", "Open"], {
-          desc: 'Move the child between "Planning" and "Open". "Open" marks it ready to execute \u2014 required before start_child_cloud_build. Execution statuses transition automatically.'
+          desc: 'Move the child between "Planning" and "Open". "Open" marks it ready to execute \u2014 the pack runner takes Open children in dependency order. Execution statuses transition automatically.'
         })
       ),
       agentIdOrName: f.optional(
         f.string({
-          desc: "Assign a project agent to the child (agent id or exact name from the Project Agents list). Required before start_child_cloud_build."
+          desc: "Assign a project agent to the child (agent id or exact name from the Project Agents list)."
         })
       ),
       ordinal: f.optional(f.number()),
@@ -9860,7 +7382,7 @@ var deleteSubtaskContract = defineToolContract({
 var listSubtasksContract = defineToolContract({
   name: "list_subtasks",
   agent: {
-    description: "List all subtasks under the current parent task. Default compact view returns per child: status, agent, story points, PR number/state, and dependencies. On a FAN-OUT pack it also returns holdsBuildSlot per child plus a packSlots summary (in-flight environments vs the PACK_CHILD_LIMIT cap, and which children hold the slots); both are omitted on the default single-pod path, where one pod implements every child and nothing holds a slot. Use to coordinate child work; pass verbose:true only when you need full description/plan text (large). For non-child tasks use get_task.",
+    description: "List all subtasks under the current parent task. Default compact view returns per child: status, agent, story points, PR number/state, and dependencies (dependsOn + allDependenciesMet). Use to pick the next ready child and record progress; pass verbose:true only when you need full description/plan text (large). For non-child tasks use get_task.",
     fields: {
       verbose: f.optional(
         f.boolean({
@@ -10637,6 +8159,50 @@ var logsContracts = [
   queryGcpLogsContract,
   queryGrafanaLogsContract
 ];
+var SHA = f.optional(
+  f.string({
+    desc: "Commit sha to watch, full or abbreviated. Defaults to the head of prNumber, else this card's PR, else the tip of this card's branch.",
+    min: 7,
+    max: 40
+  })
+);
+var PR_NUMBER = f.optional(
+  f.number({
+    desc: "PR number whose current head to watch. Use this for a child's PR when orchestrating a pack.",
+    int: true,
+    positive: true
+  })
+);
+var TIMEOUT_MINUTES = f.optional(
+  f.number({
+    desc: `Give up after this many minutes (default ${DEFAULT_CI_WAIT_TIMEOUT_MINUTES}, max ${MAX_CI_WAIT_TIMEOUT_MINUTES}); you are woken with timed_out.`,
+    int: true,
+    min: 1,
+    max: MAX_CI_WAIT_TIMEOUT_MINUTES
+  })
+);
+var waitForChecksContract = defineToolContract({
+  name: "wait_for_checks",
+  agent: {
+    description: "Wait for CI without holding the pod. Records the commit to watch on this session and returns immediately: if CI already finished you get the result now; otherwise the reply says `parked` and you must END YOUR TURN with no further tool calls. The pod idles out during the wait and Conveyor wakes this session with the result (success or failure with the failing job names and run URL, head_moved when the PR gets a new commit, timed_out at the deadline). Never poll `gh pr checks`, pr-wait scripts, or a sleep loop for CI. If something else wakes you before the result arrives, handle it and call this again.",
+    fields: {
+      sha: SHA,
+      prNumber: PR_NUMBER,
+      timeoutMinutes: TIMEOUT_MINUTES
+    }
+  },
+  mcp: {
+    description: "Park a task's agent session until GitHub reports the CI result for a commit. Pass projectId to target a specific project; otherwise the configured default project is used.",
+    fields: {
+      projectId: mcpProjectId,
+      taskId: f.string({ desc: "The task whose agent session should wait" }),
+      sha: SHA,
+      prNumber: PR_NUMBER,
+      timeoutMinutes: TIMEOUT_MINUTES
+    }
+  }
+});
+var ciWaitContracts = [waitForChecksContract];
 var TOOL_CONTRACTS = Object.fromEntries(
   [
     ...tasksContracts,
@@ -10651,14 +8217,15 @@ var TOOL_CONTRACTS = Object.fromEntries(
     ...integrationsContracts,
     ...driveContracts,
     ...meetingsContracts,
-    ...logsContracts
+    ...logsContracts,
+    ...ciWaitContracts
   ].map((contract) => [contract.name, contract])
 );
 
 // src/tools/contract-tool.ts
-import { z as z13 } from "zod";
+import { z as z3 } from "zod";
 function agentShape(surface) {
-  return compileShape(z13, surface.fields);
+  return compileShape(z3, surface.fields);
 }
 function defineContractTool(contract, handler, options) {
   return {
@@ -10815,11 +8382,11 @@ function buildGetExecutionLogsTool(connection) {
     "get_execution_logs",
     "Read CLI execution logs \u2014 agent reasoning, tool calls, and setup/dev-server output. Filter via source='agent' or 'application'. For human chat use read_task_chat.",
     {
-      task_id: z14.string().optional().describe(
+      task_id: z4.string().optional().describe(
         "Task ID or slug. Omit to read logs from the current task. Only the current task or one of its child tasks can be read."
       ),
-      source: z14.enum(["agent", "application"]).optional().describe("Filter by log source. Omit for all logs."),
-      limit: z14.number().optional().describe("Max number of log entries to return (default 50, max 500).")
+      source: z4.enum(["agent", "application"]).optional().describe("Filter by log source. Omit for all logs."),
+      limit: z4.number().optional().describe("Max number of log entries to return (default 50, max 500).")
     },
     async ({ task_id, source, limit }) => {
       try {
@@ -10914,7 +8481,7 @@ function buildTaskContextTools(connection) {
 }
 
 // src/tools/dependency-suggestion-tools.ts
-import { z as z15 } from "zod";
+import { z as z5 } from "zod";
 function buildGetDependenciesTool(connection) {
   return defineContractTool(
     getDependenciesContract,
@@ -10938,10 +8505,10 @@ function buildGetSuggestionsTool(connection) {
     "get_suggestions",
     "List project suggestions sorted by vote score. Filter by status or cap with limit (default 20). Suggestions are project-level ideas, not tasks \u2014 use get_task for tasks.",
     {
-      status: z15.string().optional().describe(
+      status: z5.string().optional().describe(
         "Filter by status: Planning, Open, InProgress, ReviewPR, ReviewDev, ReviewLive, Complete, Cancelled"
       ),
-      limit: z15.number().int().min(1).max(100).optional().describe("Max results (default 20)")
+      limit: z5.number().int().min(1).max(100).optional().describe("Max results (default 20)")
     },
     async ({ status, limit }) => {
       try {
@@ -10965,7 +8532,7 @@ function buildGetSuggestionsTool(connection) {
 }
 
 // src/tools/mutation-tools.ts
-import { z as z16 } from "zod";
+import { z as z6 } from "zod";
 
 // src/runner/refresh-verify-heal.ts
 async function refreshAndVerifyGithubCredential(cwd, mint) {
@@ -11097,7 +8664,7 @@ function buildForceUpdateTaskStatusTool(connection) {
     "force_update_task_status",
     "EMERGENCY ONLY: force-override a task's Kanban status. Use when an automatic transition failed and the task is wedged. Normal flow transitions status automatically.",
     {
-      status: z16.enum([
+      status: z6.enum([
         "Planning",
         "Open",
         "InProgress",
@@ -11107,7 +8674,7 @@ function buildForceUpdateTaskStatusTool(connection) {
         "Complete",
         "Cancelled"
       ]).describe("The new status for the task"),
-      task_id: z16.string().optional().describe("Child task ID to update. Omit to update the current task.")
+      task_id: z6.string().optional().describe("Child task ID to update. Omit to update the current task.")
     },
     async ({ status, task_id }) => {
       try {
@@ -11260,10 +8827,10 @@ function buildCreateFollowUpTaskTool(connection) {
     "create_follow_up_task",
     "Create a follow-up task that depends on the current task. The new card is a SIBLING of this one (same parent) and is blocked until this task merges \u2014 it is NOT a child of this card. To break this card into child cards that build as a pack, use create_subtask. For blockers use add_dependency.",
     {
-      title: z16.string().describe("Follow-up task title"),
-      description: z16.string().optional().describe(cardDescriptionDesc("Brief description of the follow-up work")),
-      plan: z16.string().optional().describe("Implementation plan if known"),
-      story_point_value: z16.number().optional().describe("Story point estimate (1=Common, 2=Magic, 3=Rare, 5=Unique)")
+      title: z6.string().describe("Follow-up task title"),
+      description: z6.string().optional().describe(cardDescriptionDesc("Brief description of the follow-up work")),
+      plan: z6.string().optional().describe("Implementation plan if known"),
+      story_point_value: z6.number().optional().describe("Story point estimate (1=Common, 2=Magic, 3=Rare, 5=Unique)")
     },
     async ({ title, description, plan, story_point_value }) => {
       try {
@@ -11290,11 +8857,11 @@ function buildCreateSuggestionTool(connection) {
     "create_suggestion",
     "Suggest a feature, improvement, rule, or idea for the project. Duplicates are deduped and your upvote is recorded. For actionable work on this task open a follow-up task.",
     {
-      title: z16.string().describe("Short title for the suggestion"),
-      description: z16.string().optional().describe(
+      title: z6.string().describe("Short title for the suggestion"),
+      description: z6.string().optional().describe(
         "1-2 sentence description of what should change and why. Keep concise and project-focused."
       ),
-      tag_names: z16.array(z16.string()).optional().describe("Tag names to categorize the suggestion")
+      tag_names: z6.array(z6.string()).optional().describe("Tag names to categorize the suggestion")
     },
     async ({ title, description, tag_names }) => {
       try {
@@ -11323,8 +8890,8 @@ function buildVoteSuggestionTool(connection) {
     "vote_suggestion",
     "Vote +1 or -1 on a project suggestion. Use to express support or disagreement with a specific suggestion returned by get_suggestions.",
     {
-      suggestion_id: z16.string().describe("The suggestion ID to vote on"),
-      value: z16.number().refine((v) => v === 1 || v === -1, { message: "Value must be 1 or -1" }).describe("+1 to upvote, -1 to downvote")
+      suggestion_id: z6.string().describe("The suggestion ID to vote on"),
+      value: z6.number().refine((v) => v === 1 || v === -1, { message: "Value must be 1 or -1" }).describe("+1 to upvote, -1 to downvote")
     },
     async ({ suggestion_id, value }) => {
       try {
@@ -11686,6 +9253,47 @@ function buildRejectManualTestTool(connection) {
   });
 }
 
+// src/tools/ci-wait-tools.ts
+function short(sha) {
+  return sha.slice(0, 7);
+}
+function describeHead(result) {
+  return `${short(result.sha)}${result.prNumber ? ` (PR #${result.prNumber})` : ""}`;
+}
+function formatParkOnCheckResult(result) {
+  if (result.status === "parked") {
+    const running = result.pendingChecks.length > 0 ? ` Still running: ${result.pendingChecks.join(", ")}.` : " No check has registered yet.";
+    return `Parked on ${describeHead(result)} until ${result.deadline}.${running}
+
+END YOUR TURN NOW: no further tool calls, no polling, no filler commands. Conveyor wakes this session with the result (SUCCESS or FAILURE with the failing jobs and run URL), with head_moved if the PR gets a new commit, or with timed_out at the deadline. Uncommitted work is covered by the per-turn WIP snapshot, but anything already committed and pushed needs no recovery at all. If something else wakes you first, handle it and call wait_for_checks again.`;
+  }
+  if (result.status === "completed") {
+    if (result.conclusion === "success") {
+      return `CI for ${describeHead(result)} already finished: SUCCESS. All ${result.checksTotal} checks passed. Continue with the next step.`;
+    }
+    const pending = result.pendingChecks.length > 0 ? ` Still running: ${result.pendingChecks.join(", ")}.` : "";
+    return `CI for ${describeHead(result)} already has a result: FAILURE. Failing: ${result.failingChecks.join(", ")}.${result.runUrl ? ` Run: ${result.runUrl}.` : ""}${pending} Triage before treating it as your bug (stale head? runner preemption? file not in your diff? base branch red?), then fix, push, and call wait_for_checks again.`;
+  }
+  return `Cannot park this session: ${result.reason}. Read the checks ONCE with read-only \`gh pr checks\` and act on what you see; never loop on it.`;
+}
+function buildWaitForChecksTool(connection) {
+  return defineContractTool(waitForChecksContract, async ({ sha, prNumber, timeoutMinutes }) => {
+    try {
+      const result = await connection.call("parkOnCheckResult", {
+        sessionId: connection.sessionId,
+        ...sha === void 0 ? {} : { sha },
+        ...prNumber === void 0 ? {} : { prNumber },
+        ...timeoutMinutes === void 0 ? {} : { timeoutMinutes }
+      });
+      return textResult(formatParkOnCheckResult(result));
+    } catch (error) {
+      return textResult(
+        `wait_for_checks failed: ${error instanceof Error ? error.message : String(error)}. Retry once if this was a transient socket reconnect; otherwise read the checks once with read-only \`gh pr checks\` and end your turn instead of polling.`
+      );
+    }
+  });
+}
+
 // src/tools/common-tools.ts
 function buildCommonTools(connection, config) {
   return [
@@ -11705,7 +9313,7 @@ function buildCommonTools(connection, config) {
 }
 
 // src/tools/pm-tools.ts
-import { z as z17 } from "zod";
+import { z as z7 } from "zod";
 
 // src/tools/task-update-tools.ts
 var CURRENT_TASK_ONLY = ["title", "description", "plan", "githubBranch"];
@@ -11778,8 +9386,8 @@ function buildUpdateTaskTool(connection) {
     "update_task_plan",
     "Save the plan and/or description to the current task. In auto/building mode, save the plan BEFORE writing code and keep it current as the approach evolves \u2014 post it, then build; never pause the build waiting for approval. For children use update_subtask; for title/tags/PR use update_task_properties.",
     {
-      plan: z17.string().optional().describe("The task plan in markdown"),
-      description: z17.string().optional().describe(cardDescriptionDesc("Updated task description"))
+      plan: z7.string().optional().describe("The task plan in markdown"),
+      description: z7.string().optional().describe(cardDescriptionDesc("Updated task description"))
     },
     async ({ plan, description }) => {
       try {
@@ -11802,10 +9410,10 @@ function buildHandoffTool(connection) {
     "handoff_to_agent",
     "Hand this task off to an implementer agent for the build phase \u2014 mid-conversation, same session, no restart. Call this once the plan is compiled and saved (update_task). The server swaps this task to the difficulty-sized implementer agent (which may run at a different model level), announces the handoff in the activity log + chat, and switches you into build mode to start implementing. Size the work with the storyPoints arg (or set it first via update_task_properties). Returns the implementer's name + model.",
     {
-      storyPoints: z17.number().int().positive().optional().describe(
+      storyPoints: z7.number().int().positive().optional().describe(
         "Difficulty sizing (1=Common, 2=Magic, 3=Rare, 5=Unique, 8=Pack) \u2014 picks which implementer agent takes over. Omit to use the task's current story points."
       ),
-      message: z17.string().optional().describe("Optional kickoff note posted to the chat alongside the handoff notice.")
+      message: z7.string().optional().describe("Optional kickoff note posted to the chat alongside the handoff notice.")
     },
     async ({ storyPoints, message }) => {
       try {
@@ -11950,81 +9558,8 @@ function buildListSubtasksTool(connection) {
     { annotations: { readOnlyHint: true } }
   );
 }
-function buildPackTools(connection) {
+function buildPmTools(connection) {
   return [
-    defineTool(
-      "start_child_cloud_build",
-      "Start a cloud build (codespace) for a child task. Preconditions: child status is `Open`, story points set, and an agent assigned \u2014 satisfy all three with update_subtask (status/agentIdOrName/storyPointValue) first; none happen automatically. A PACK_CHILD_LIMIT error is backpressure, not failure: check list_subtasks packSlots for which children hold the in-flight slots, merge/stop one, then retry. On a feature-branch pack, dev is merged into the pack branch first so the child branches from a fresh base; a conflict is reported in the result and never blocks the launch.",
-      {
-        childTaskId: z17.string().describe("The child task ID to start a cloud build for")
-      },
-      async ({ childTaskId }) => {
-        try {
-          const result = await connection.call("startChildCloudBuild", {
-            sessionId: connection.sessionId,
-            childTaskId
-          });
-          const started = `Cloud build started for child task: ${result.childTaskId}`;
-          const sync = result.baseSync;
-          if (sync?.error) {
-            return textResult(
-              `${started}
-
-Base sync: dev \u2192 ${sync.branch} failed \u2014 ${sync.error}. The child was launched from the un-synced pack branch. Merge dev into ${sync.branch} in your local checkout, resolve the conflicts, and push before firing more children.`
-            );
-          }
-          return textResult(started);
-        } catch (error) {
-          return textResult(
-            `Failed to start child cloud build: ${error instanceof Error ? error.message : "Unknown error"}`
-          );
-        }
-      }
-    ),
-    defineTool(
-      "stop_child_build",
-      "Send a graceful stop signal to a running child build's agent. Not a force-kill \u2014 the agent may take a moment to wind down. Stopping a child eventually frees its PACK_CHILD_LIMIT build slot (see list_subtasks packSlots).",
-      {
-        childTaskId: z17.string().describe("The child task ID whose build should be stopped")
-      },
-      async ({ childTaskId }) => {
-        try {
-          await connection.call("stopChildBuild", {
-            sessionId: connection.sessionId,
-            childTaskId
-          });
-          return textResult(`Stop signal sent to child task: ${childTaskId}`);
-        } catch (error) {
-          return textResult(
-            `Failed to stop child build: ${error instanceof Error ? error.message : "Unknown error"}`
-          );
-        }
-      }
-    ),
-    defineContractTool(approveAndMergePrContract, async ({ childTaskId }) => {
-      try {
-        const result = await connection.call("approveAndMergePR", {
-          sessionId: connection.sessionId,
-          childTaskId
-        });
-        if (result.merged) {
-          return textResult(
-            `PR #${result.prNumber} approved and merged for task ${result.childTaskId}. Task status updated to ReviewDev.`
-          );
-        }
-        return textResult(
-          `PR #${result.prNumber} merge queued for task ${result.childTaskId} \u2014 CI checks still in progress. The PR will auto-merge when all checks pass. Do NOT proceed as if merged. Wait for the child task status to change to ReviewDev before continuing.`
-        );
-      } catch (error) {
-        return textResult(
-          `Failed to approve and merge PR: ${error instanceof Error ? error.message : "Unknown error"}`
-        );
-      }
-    })
-  ];
-}
-function buildPmTools(connection, options) {
-  const tools = [
     buildUpdateTaskTool(connection),
     // The shared-skill vocabulary alongside the split legacy tools above.
     // Both stay REGISTERED, but the migration this comment used to defer has
@@ -12039,12 +9574,10 @@ function buildPmTools(connection, options) {
     buildDeleteSubtaskTool(connection),
     buildListSubtasksTool(connection)
   ];
-  if (!options?.includePackTools) return tools;
-  return [...tools, ...buildPackTools(connection)];
 }
 
 // src/tools/discovery-tools.ts
-import { z as z18 } from "zod";
+import { z as z8 } from "zod";
 var SP_DESCRIPTION2 = "Story point value (1=Common, 2=Magic, 3=Rare, 5=Unique). The key is 'storyPointValue' \u2014 not 'storyPoints'.";
 var VALID_PROPERTY_KEYS = "title, storyPointValue, tagNames, githubPRUrl, githubBranch, risk";
 function describeUpdatedFields(p) {
@@ -12063,12 +9596,12 @@ function buildDiscoveryTools(connection) {
       "update_task_properties",
       "Set one or more task properties in a single call. Valid keys: title, storyPointValue, tagNames, githubPRUrl, githubBranch, risk. All are optional \u2014 include only the ones you want to update (at least one). Unknown keys are rejected.",
       {
-        title: z18.string().optional().describe("The new task title"),
-        storyPointValue: z18.number().optional().describe(SP_DESCRIPTION2),
-        tagNames: z18.array(z18.string()).optional().describe("Array of tag names to assign"),
-        githubPRUrl: z18.string().url().optional().describe("GitHub pull request URL to link to this task"),
-        githubBranch: z18.string().optional().describe("Set the GitHub branch name for this task (e.g. 'conveyor/my-feature-abc123')"),
-        risk: z18.enum(["critical", "high", "medium", "low"]).nullable().optional().describe(
+        title: z8.string().optional().describe("The new task title"),
+        storyPointValue: z8.number().optional().describe(SP_DESCRIPTION2),
+        tagNames: z8.array(z8.string()).optional().describe("Array of tag names to assign"),
+        githubPRUrl: z8.string().url().optional().describe("GitHub pull request URL to link to this task"),
+        githubBranch: z8.string().optional().describe("Set the GitHub branch name for this task (e.g. 'conveyor/my-feature-abc123')"),
+        risk: z8.enum(["critical", "high", "medium", "low"]).nullable().optional().describe(
           "Risk level \u2014 how much important surface the task touches (critical/high/medium/low). Pass null to clear."
         )
       },
@@ -12108,7 +9641,7 @@ function buildDiscoveryTools(connection) {
 }
 
 // src/tools/project-tools.ts
-import { z as z19 } from "zod";
+import { z as z9 } from "zod";
 
 // src/execution/context-path-verifier.ts
 import { readFile as readFile3 } from "fs/promises";
@@ -12186,16 +9719,16 @@ function formatContextPathProblems(problems) {
 }
 
 // src/tools/project-tools.ts
-var CONTEXT_PATH_SHAPE = z19.object({
-  type: z19.enum(["rule", "doc", "file", "folder"]).describe(
+var CONTEXT_PATH_SHAPE = z9.object({
+  type: z9.enum(["rule", "doc", "file", "folder"]).describe(
     "Link kind \u2014 all paths are repo-relative; doc marks a synced project doc, which resolves from the workspace like rule/file"
   ),
-  path: z19.string().min(1).max(500).describe("Repo-relative path"),
-  label: z19.string().max(100).optional(),
-  locator: z19.string().min(1).max(CONTEXT_LINK_LOCATOR_MAX).regex(/^[^\r\n]*$/, "Locator cannot contain line breaks").optional().describe(
+  path: z9.string().min(1).max(500).describe("Repo-relative path"),
+  label: z9.string().max(100).optional(),
+  locator: z9.string().min(1).max(CONTEXT_LINK_LOCATOR_MAX).regex(/^[^\r\n]*$/, "Locator cannot contain line breaks").optional().describe(
     'Verified-link tether: text that must keep existing in the file. With locatorType "test" it must appear inside a real it/test/describe TITLE; with "code" anywhere in the file. Validated at write time against the checkout and re-checked by the periodic sweep \u2014 a rename/delete flags the link stale. Locators containing <> are placeholders and never checked.'
   ),
-  locatorType: z19.enum(["test", "code"]).optional().describe(
+  locatorType: z9.enum(["test", "code"]).optional().describe(
     "How the locator must match \u2014 required iff locator is set; not valid on folder links"
   )
 }).refine((link) => link.locator === void 0 === (link.locatorType === void 0), {
@@ -12244,15 +9777,15 @@ function buildCreateTagTool(connection, projectId, workspaceDir) {
     "create_tag",
     "Create a project tag. Include a crisp description (\u2264255 chars \u2014 the summary) and contextPaths (rule/doc/file/folder links agents auto-load when working on matching tasks); put the full spec in overview. Set parentTagIds to place the tag in the hierarchy right away. Every contextPath is checked against the repo checkout \u2014 a path that does not exist, or whose type does not match what is on disk, rejects the whole call. Fails if the name already exists.",
     {
-      name: z19.string().min(1).max(50),
-      color: z19.string().regex(/^#[0-9a-fA-F]{6}$/).optional().describe("#RRGGBB (default gray)"),
-      description: z19.string().max(TAG_DESCRIPTION_MAX).optional(),
-      overview: z19.string().max(TAG_OVERVIEW_MAX).optional().describe("Full markdown glossary body \u2014 the term's spec"),
-      overviewPath: z19.string().min(1).max(500).optional().describe(
+      name: z9.string().min(1).max(50),
+      color: z9.string().regex(/^#[0-9a-fA-F]{6}$/).optional().describe("#RRGGBB (default gray)"),
+      description: z9.string().max(TAG_DESCRIPTION_MAX).optional(),
+      overview: z9.string().max(TAG_OVERVIEW_MAX).optional().describe("Full markdown glossary body \u2014 the term's spec"),
+      overviewPath: z9.string().min(1).max(500).optional().describe(
         "Repo file to source the overview from (base-branch content is served everywhere). A not-yet-merged path is fine \u2014 the tag serves the stored overview as fallback until the file lands."
       ),
-      parentTagIds: z19.array(z19.string()).max(25).optional().describe("Parent tag ids from list_tags (multi-parent DAG) to link at create time"),
-      contextPaths: z19.array(CONTEXT_PATH_SHAPE).max(20).optional()
+      parentTagIds: z9.array(z9.string()).max(25).optional().describe("Parent tag ids from list_tags (multi-parent DAG) to link at create time"),
+      contextPaths: z9.array(CONTEXT_PATH_SHAPE).max(20).optional()
     },
     async ({ name, color, description, overview, overviewPath, parentTagIds, contextPaths }) => {
       const rejection = await rejectBadContextPaths(contextPaths, workspaceDir);
@@ -12280,19 +9813,19 @@ function buildUpdateTagTool(connection, projectId, taskId, workspaceDir) {
     "update_tag",
     "Update a tag's name, color, description (\u2264255), markdown overview, parent tags, or contextPaths. contextPaths and parentTagIds are FULL replacements \u2014 include what you want to keep. ALWAYS pass a short reason; it lands in the tag's revision history (with your current card auto-stamped) so the team sees why the glossary changed. Every contextPath is checked against the repo checkout \u2014 a path that does not exist, or whose type does not match what is on disk, rejects the whole call and nothing is written.",
     {
-      tagId: z19.string().describe("Tag id from list_tags"),
-      name: z19.string().min(1).max(50).optional(),
-      color: z19.string().regex(/^#[0-9a-fA-F]{6}$/).optional(),
-      description: z19.string().max(TAG_DESCRIPTION_MAX).optional(),
-      overview: z19.string().max(TAG_OVERVIEW_MAX).nullable().optional().describe(
+      tagId: z9.string().describe("Tag id from list_tags"),
+      name: z9.string().min(1).max(50).optional(),
+      color: z9.string().regex(/^#[0-9a-fA-F]{6}$/).optional(),
+      description: z9.string().max(TAG_DESCRIPTION_MAX).optional(),
+      overview: z9.string().max(TAG_OVERVIEW_MAX).nullable().optional().describe(
         "Full markdown glossary body; null clears it. REJECTED while overviewPath is set \u2014 edit the sourced file in the repo instead"
       ),
-      overviewPath: z19.string().min(1).max(500).nullable().optional().describe(
+      overviewPath: z9.string().min(1).max(500).nullable().optional().describe(
         "Repo file to source the overview from (null clears back to the stored overview). A not-yet-merged path is fine \u2014 the stored overview serves as fallback until the file lands on the base branch."
       ),
-      parentTagIds: z19.array(z19.string()).max(25).optional().describe("Full-set replacement of the tag's parent tags (multi-parent DAG)"),
-      reason: z19.string().max(TAG_REASON_MAX).optional().describe("One line on why \u2014 shown in the tag's revision history"),
-      contextPaths: z19.array(CONTEXT_PATH_SHAPE).max(20).optional()
+      parentTagIds: z9.array(z9.string()).max(25).optional().describe("Full-set replacement of the tag's parent tags (multi-parent DAG)"),
+      reason: z9.string().max(TAG_REASON_MAX).optional().describe("One line on why \u2014 shown in the tag's revision history"),
+      contextPaths: z9.array(CONTEXT_PATH_SHAPE).max(20).optional()
     },
     async ({
       tagId,
@@ -12350,8 +9883,8 @@ function buildPostToProjectChatTool(connection, projectId) {
     "post_to_project_chat",
     "Post a markdown message to the PROJECT chat \u2014 use once at the end of an audit for the summary the team reads.",
     {
-      message: z19.string().min(1).max(2e4),
-      kind: z19.enum(["tag_audit_summary"]).optional().describe(
+      message: z9.string().min(1).max(2e4),
+      kind: z9.enum(["tag_audit_summary"]).optional().describe(
         "Set to 'tag_audit_summary' when posting a tag-audit summary so it is also saved to the persistent tag history"
       )
     },
@@ -12370,7 +9903,7 @@ function buildGetProjectTaskTool(connection, projectId) {
     "get_project_task",
     "Fetch any task in the project by id or slug: title, description, plan, status, and metadata. The audit evidence trail starts here.",
     {
-      taskId: z19.string().describe("Task id or slug")
+      taskId: z9.string().describe("Task id or slug")
     },
     async ({ taskId }) => {
       try {
@@ -12388,8 +9921,8 @@ function buildReadProjectTaskChatTool(connection, projectId) {
     "read_project_task_chat",
     "Read any project task's chat messages (newest last). role 'user' rows are HUMAN turns; 'assistant'/'system' rows are agent posts and activity-log entries.",
     {
-      taskId: z19.string().describe("Task id or slug"),
-      limit: z19.number().int().min(1).max(200).optional().describe("Messages to fetch (default 50)")
+      taskId: z9.string().describe("Task id or slug"),
+      limit: z9.number().int().min(1).max(200).optional().describe("Messages to fetch (default 50)")
     },
     async ({ taskId, limit }) => {
       try {
@@ -12411,9 +9944,9 @@ function buildGetProjectTaskLogsTool(connection, projectId) {
     "get_project_task_logs",
     "Read any project task's persisted agent event stream (message / tool_use / turn_end / error / completed). Turn boundaries are turn_end events. Entries are truncated to ~2KB each; max 500 per call.",
     {
-      taskId: z19.string().describe("Task id or slug"),
-      limit: z19.number().int().min(1).max(500).optional().describe("Entries to fetch (default 50)"),
-      source: z19.enum(["agent", "application"]).optional().describe("Filter: 'agent' = model events (default useful for grading)")
+      taskId: z9.string().describe("Task id or slug"),
+      limit: z9.number().int().min(1).max(500).optional().describe("Entries to fetch (default 50)"),
+      source: z9.enum(["agent", "application"]).optional().describe("Filter: 'agent' = model events (default useful for grading)")
     },
     async ({ taskId, limit, source }) => {
       try {
@@ -12431,44 +9964,44 @@ function buildGetProjectTaskLogsTool(connection, projectId) {
     { annotations: { readOnlyHint: true } }
   );
 }
-var TURN_GRADE_SHAPE = z19.object({
-  turnIndex: z19.number().int().min(0),
-  phase: z19.enum(["planning", "building", "human"]),
-  grade: z19.enum(["correct", "neutral", "blunder"]),
-  reasoning: z19.string(),
-  eventType: z19.string().describe('e.g. "message", "tool_use", "human_message"'),
-  eventSummary: z19.string().max(200).describe("\u2264120 chars of what happened this turn")
+var TURN_GRADE_SHAPE = z9.object({
+  turnIndex: z9.number().int().min(0),
+  phase: z9.enum(["planning", "building", "human"]),
+  grade: z9.enum(["correct", "neutral", "blunder"]),
+  reasoning: z9.string(),
+  eventType: z9.string().describe('e.g. "message", "tool_use", "human_message"'),
+  eventSummary: z9.string().max(200).describe("\u2264120 chars of what happened this turn")
 });
-var HUMAN_EVAL_SHAPE = z19.object({
-  messageIndex: z19.number().int().min(0).describe("Index into the task's human messages, oldest first"),
-  rating: z19.number().int().min(-1).max(1),
-  reasoning: z19.string()
+var HUMAN_EVAL_SHAPE = z9.object({
+  messageIndex: z9.number().int().min(0).describe("Index into the task's human messages, oldest first"),
+  rating: z9.number().int().min(-1).max(1),
+  reasoning: z9.string()
 });
 function buildReportTaskAuditResultTool(connection, projectId) {
   return defineTool(
     "report_task_audit_result",
     "Persist one audited task's grades (call once per task after grading it). Pass error instead to mark the audit failed when the evidence is unusable.",
     {
-      taskId: z19.string().describe("The audited task's id (NOT slug)"),
-      summary: z19.string().describe("3-6 sentences: what went well, what was wasted"),
-      turnGrades: z19.array(TURN_GRADE_SHAPE),
-      planningAccuracy: z19.number().min(0).max(1).nullable(),
-      buildingAccuracy: z19.number().min(0).max(1).nullable(),
-      humanAccuracy: z19.number().min(0).max(1).nullable(),
-      planningCorrect: z19.number().int().min(0),
-      planningNeutral: z19.number().int().min(0),
-      planningBlunder: z19.number().int().min(0),
-      buildingCorrect: z19.number().int().min(0),
-      buildingNeutral: z19.number().int().min(0),
-      buildingBlunder: z19.number().int().min(0),
-      humanCorrect: z19.number().int().min(0),
-      humanNeutral: z19.number().int().min(0),
-      humanBlunder: z19.number().int().min(0),
-      humanEvaluations: z19.array(HUMAN_EVAL_SHAPE).optional(),
-      suggestionIds: z19.array(z19.string()).describe("Suggestion ids filed for this task, or []"),
-      auditCostUsd: z19.number().nullable(),
-      model: z19.string().nullable().describe("The model you are running as"),
-      error: z19.string().optional().describe("Set ONLY to mark this task's audit failed")
+      taskId: z9.string().describe("The audited task's id (NOT slug)"),
+      summary: z9.string().describe("3-6 sentences: what went well, what was wasted"),
+      turnGrades: z9.array(TURN_GRADE_SHAPE),
+      planningAccuracy: z9.number().min(0).max(1).nullable(),
+      buildingAccuracy: z9.number().min(0).max(1).nullable(),
+      humanAccuracy: z9.number().min(0).max(1).nullable(),
+      planningCorrect: z9.number().int().min(0),
+      planningNeutral: z9.number().int().min(0),
+      planningBlunder: z9.number().int().min(0),
+      buildingCorrect: z9.number().int().min(0),
+      buildingNeutral: z9.number().int().min(0),
+      buildingBlunder: z9.number().int().min(0),
+      humanCorrect: z9.number().int().min(0),
+      humanNeutral: z9.number().int().min(0),
+      humanBlunder: z9.number().int().min(0),
+      humanEvaluations: z9.array(HUMAN_EVAL_SHAPE).optional(),
+      suggestionIds: z9.array(z9.string()).describe("Suggestion ids filed for this task, or []"),
+      auditCostUsd: z9.number().nullable(),
+      model: z9.string().nullable().describe("The model you are running as"),
+      error: z9.string().optional().describe("Set ONLY to mark this task's audit failed")
     },
     async (input) => {
       try {
@@ -12950,34 +10483,34 @@ function connectedToolsFor(connection, context) {
 // src/tools/code-review-tools.ts
 import { execFile } from "child_process";
 import { promisify } from "util";
-import { z as z20 } from "zod";
+import { z as z10 } from "zod";
 async function endReviewSession(connection, reason) {
   await connection.call("endReviewSession", {
     sessionId: connection.sessionId,
     reason
   });
 }
-var RISK_LEVELS2 = ["critical", "high", "medium", "low"];
-var reviewedShaSchema = z20.string().regex(/^[0-9a-f]{40}$/i).describe("REQUIRED. The full 40-character commit SHA this verdict reviews.");
+var RISK_LEVELS = ["critical", "high", "medium", "low"];
+var reviewedShaSchema = z10.string().regex(/^[0-9a-f]{40}$/i).describe("REQUIRED. The full 40-character commit SHA this verdict reviews.");
 var riskDescription = "REQUIRED. The risk level this change carries, judged by the surface area it touches: critical = touches critical/foundational surface, high = important surface, medium = moderate, low = small/isolated. Set this on every verdict. You have authority to override a risk level already set on the task if you disagree with it.";
-var ReviewGuideToolSchema = z20.strictObject({
-  reviewedSha: z20.string().regex(/^[0-9a-f]{40}$/i).describe(
+var ReviewGuideToolSchema = z10.strictObject({
+  reviewedSha: z10.string().regex(/^[0-9a-f]{40}$/i).describe(
     "REQUIRED. The PR's current head as a full 40-char SHA. Run `git rev-parse HEAD` immediately before this call \u2014 never extend an abbreviated hash into 40 characters."
   ),
-  overview: z20.string().min(1).max(6e4).describe("REQUIRED. Plain-text walkthrough intro, max 3000 characters. Keep it short."),
-  sections: z20.array(
-    z20.strictObject({
-      title: z20.string().min(1).max(160),
-      explanation: z20.string().min(1).max(2e3),
-      classification: z20.enum(["core", "supporting"]).optional(),
-      files: z20.array(
-        z20.strictObject({
-          path: z20.string().min(1).max(500).describe(
+  overview: z10.string().min(1).max(6e4).describe("REQUIRED. Plain-text walkthrough intro, max 3000 characters. Keep it short."),
+  sections: z10.array(
+    z10.strictObject({
+      title: z10.string().min(1).max(160),
+      explanation: z10.string().min(1).max(2e3),
+      classification: z10.enum(["core", "supporting"]).optional(),
+      files: z10.array(
+        z10.strictObject({
+          path: z10.string().min(1).max(500).describe(
             "A file the PR's diff actually changed. Context files you merely read are rejected."
           ),
-          startLine: z20.number().int().positive().max(1e6).optional(),
-          endLine: z20.number().int().positive().max(1e6).optional(),
-          hunkHeader: z20.string().min(1).max(300).optional().describe(
+          startLine: z10.number().int().positive().max(1e6).optional(),
+          endLine: z10.number().int().positive().max(1e6).optional(),
+          hunkHeader: z10.string().min(1).max(300).optional().describe(
             "Optional anchor, matched byte-exactly against the full hunk header line from `git diff` INCLUDING the context text after the second @@. Copy it verbatim from `git diff <base>..HEAD -- <file> | grep '^@@'`, or omit anchors entirely (path-only entries always validate)."
           )
         })
@@ -13061,8 +10594,8 @@ function buildApproveCodeReviewTool(connection) {
     "Approve the code review and exit. Use when the diff passes all review criteria. Requires a summary and a risk level \u2014 for changes, use request_code_changes with a structured issues[] list.",
     {
       reviewedSha: reviewedShaSchema,
-      summary: z20.string().describe("Brief summary of what was reviewed and why it looks good"),
-      risk: z20.enum(RISK_LEVELS2).describe(riskDescription)
+      summary: z10.string().describe("Brief summary of what was reviewed and why it looks good"),
+      risk: z10.enum(RISK_LEVELS).describe(riskDescription)
     },
     async ({ reviewedSha, summary, risk }) => {
       const content = `**Code Review: Approved** :white_check_mark:
@@ -13093,16 +10626,16 @@ function buildRequestCodeChangesTool(connection) {
     "Request changes during code review and exit. Use when substantive issues must be fixed before merge. Each issue: { file, line?, severity: critical|major|minor, description }.",
     {
       reviewedSha: reviewedShaSchema,
-      issues: z20.array(
-        z20.object({
-          file: z20.string().describe("File path where the issue was found"),
-          line: z20.number().optional().describe("Line number (if applicable)"),
-          severity: z20.enum(["critical", "major", "minor"]).describe("Issue severity"),
-          description: z20.string().describe("What is wrong and how to fix it")
+      issues: z10.array(
+        z10.object({
+          file: z10.string().describe("File path where the issue was found"),
+          line: z10.number().optional().describe("Line number (if applicable)"),
+          severity: z10.enum(["critical", "major", "minor"]).describe("Issue severity"),
+          description: z10.string().describe("What is wrong and how to fix it")
         })
       ).describe("List of issues found during review"),
-      summary: z20.string().describe("Brief overall summary of the review findings"),
-      risk: z20.enum(RISK_LEVELS2).describe(riskDescription)
+      summary: z10.string().describe("Brief overall summary of the review findings"),
+      risk: z10.enum(RISK_LEVELS).describe(riskDescription)
     },
     async ({ reviewedSha, issues, summary, risk }) => {
       const issueLines = issues.map((issue) => {
@@ -13145,41 +10678,38 @@ function buildCodeReviewTools(connection) {
 // src/tools/index.ts
 function getTaskModeTools(agentMode, connection) {
   if (agentMode === "discovery" || agentMode === "auto" || agentMode === "building" || agentMode === "chat") {
-    return buildPmTools(connection, { includePackTools: false });
+    return buildPmTools(connection);
   }
   return [];
 }
 function getModeTools(agentMode, connection, config, context) {
-  if (config.mode === "pack") {
-    return buildPmTools(connection, {
-      includePackTools: config.packExecution === "fan-out"
-    });
-  }
+  if (config.mode === "pack") return buildPmTools(connection);
   if (config.mode === "task") return getTaskModeTools(agentMode, connection);
-  const packToolsFor = (isParent) => ({
-    includePackTools: !!isParent && config.packExecution === "fan-out"
-  });
   switch (agentMode) {
     case "building":
-      return context?.isParentTask ? buildPmTools(connection, packToolsFor(true)) : [];
+      return context?.isParentTask ? buildPmTools(connection) : [];
     case "review":
     case "auto":
     case "discovery":
     case "help":
-      return buildPmTools(connection, packToolsFor(context?.isParentTask));
+      return buildPmTools(connection);
     default:
-      return config.mode === "pm" ? buildPmTools(connection, { includePackTools: false }) : [];
+      return config.mode === "pm" ? buildPmTools(connection) : [];
   }
 }
 function buildPrGuideToolsFor(effectiveMode, connection, config, context) {
   const isLeafBuild = effectiveMode === "building" || effectiveMode === "auto" || effectiveMode === "chat";
-  const isSinglePodPack = config.mode === "pack" && config.packExecution !== "fan-out";
-  return (isLeafBuild || isSinglePodPack) && (isSinglePodPack || !context?.isParentTask) ? [
+  const isPackRunner = config.mode === "pack";
+  return (isLeafBuild || isPackRunner) && (isPackRunner || !context?.isParentTask) ? [
     buildPublishReviewGuideTool(connection, {
       resolveHeadSha: () => resolveGitHeadSha(config.workspaceDir)
     })
   ] : [];
 }
+function ciWaitToolsFor(effectiveMode, connection, config) {
+  const isPackRunner = config.mode === "pack";
+  return effectiveMode === "review" && !isPackRunner ? [] : [buildWaitForChecksTool(connection)];
+}
 var ALWAYS_LOADED_TOOLS = /* @__PURE__ */ new Set([
   // Every mode/session
   "post_to_chat",
@@ -13218,26 +10748,29 @@ var ALWAYS_LOADED_TOOLS = /* @__PURE__ */ new Set([
 ]);
 var ORCHESTRATION_PROMOTED_TOOLS = /* @__PURE__ */ new Set([
   "list_subtasks",
-  "update_subtask",
-  "start_child_cloud_build",
-  "stop_child_build",
-  "approve_and_merge_pr"
+  "update_subtask"
 ]);
 var BUILDING_PROMOTED_TOOLS = /* @__PURE__ */ new Set([
   "upload_attachment",
   "get_attachment",
   "create_suggestion",
   "create_follow_up_task",
-  "list_manual_tests"
+  "list_manual_tests",
+  // Every PR-opening session waits on CI at least once; deferring the wait
+  // tool behind ToolSearch is one more reason to fall back to a poll loop.
+  "wait_for_checks"
 ]);
 var REVIEW_PROMOTED_TOOLS = /* @__PURE__ */ new Set(["create_suggestion"]);
-var PACK_PROMOTED_TOOLS = /* @__PURE__ */ new Set(["get_execution_logs"]);
+var PACK_PROMOTED_TOOLS = /* @__PURE__ */ new Set([
+  "get_execution_logs",
+  "wait_for_checks"
+]);
 function glossaryToolsFor(connection, config, context) {
   return context?.projectId ? buildGlossaryTools(connection, context.projectId, config.taskId, config.workspaceDir) : [];
 }
-function promotedToolsFor(effectiveMode, isPack, isProjectAgent, isSinglePodPack = false) {
+function promotedToolsFor(effectiveMode, isPack, isProjectAgent, isPackRunner = false) {
   const names = /* @__PURE__ */ new Set();
-  if (effectiveMode === "building" || effectiveMode === "auto" || isSinglePodPack) {
+  if (effectiveMode === "building" || effectiveMode === "auto" || isPackRunner) {
     for (const name of BUILDING_PROMOTED_TOOLS) names.add(name);
   }
   if (effectiveMode === "review") {
@@ -13263,6 +10796,7 @@ function buildConveyorTools(connection, config, context, agentMode) {
   const discoveryTools = effectiveMode === "discovery" || effectiveMode === "auto" || effectiveMode === "building" || effectiveMode === "chat" ? buildDiscoveryTools(connection) : [];
   const codeReviewTools = effectiveMode === "review" ? buildCodeReviewTools(connection) : [];
   const prGuideTools = buildPrGuideToolsFor(effectiveMode, connection, config, context);
+  const ciWaitTools = ciWaitToolsFor(effectiveMode, connection, config);
   const handoffTools = config.mode === "pm" && (effectiveMode === "discovery" || effectiveMode === "auto") ? [buildHandoffTool(connection)] : [];
   const emergencyTools = [buildForceUpdateTaskStatusTool(connection)];
   const glossaryTools = glossaryToolsFor(connection, config, context);
@@ -13275,17 +10809,13 @@ function buildConveyorTools(connection, config, context, agentMode) {
       ...discoveryTools,
       ...codeReviewTools,
       ...prGuideTools,
+      ...ciWaitTools,
       ...handoffTools,
       ...glossaryTools,
       ...connectedTools,
       ...emergencyTools
     ],
-    promotedToolsFor(
-      effectiveMode,
-      isPack,
-      config.mode === "pm",
-      config.mode === "pack" && config.packExecution !== "fan-out"
-    )
+    promotedToolsFor(effectiveMode, isPack, config.mode === "pm", config.mode === "pack")
   );
 }
 function createConveyorMcpServer(harness, connection, config, context, agentMode) {
@@ -13895,7 +11425,7 @@ function buildNoOpKeepAliveMessage(noOpCount) {
   if (process.env.CONVEYOR_TUI === "codex") {
     return `Conveyor blocked this call: it is a no-op keep-alive (${noOpCount} this session). If a required command is running, resume its session for the exit result. Otherwise do real work or end the turn.`;
   }
-  return `Conveyor blocked this call: it is a no-op keep-alive (${noOpCount} this session). You do not need to emit tool calls to stay alive. Ending your turn with NO tool call is safe and expected while waiting: the pod stays up and the completion notification re-invokes you. If nothing is running, do real work or end the turn. For a long wait with no notification source, use Monitor or ScheduleWakeup instead of filler commands.`;
+  return `Conveyor blocked this call: it is a no-op keep-alive (${noOpCount} this session). You do not need to emit tool calls to stay alive. Ending your turn with NO tool call is safe and expected while waiting: the pod stays up and the completion notification re-invokes you. If nothing is running, do real work or end the turn. Waiting on CI is wait_for_checks, then end the turn. For any other long wait with no notification source, use Monitor or ScheduleWakeup instead of filler commands.`;
 }
 function buildRepeatLoopChatMessage(repeatCount, forceStopped) {
   if (forceStopped) {
@@ -14347,6 +11877,11 @@ function buildQueryOptions(host, context) {
     context,
     {
       ...host.config,
+      // ModeController's live value, NOT the boot-frozen `config.isAuto` the
+      // spread carries: the pack gate reads this, and the turn prompt below
+      // gates on `host.isAuto`. Letting the two read different sources is how
+      // a codespace parent card got "you cannot write or edit files" beside
+      // "run /conveyor-build".
       isAuto: host.isAuto,
       runtimeTui: process.env.CONVEYOR_TUI
     },
@@ -14456,7 +11991,7 @@ async function buildFollowUpPrompt(host, context, followUpContent) {
   const followUpImages = typeof followUpContent === "string" ? [] : followUpContent.filter(
     (b) => b.type === "image"
   );
-  const textPrompt = isPmMode ? `${await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode, host.config.packExecution)}
+  const textPrompt = isPmMode ? `${await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode)}
 
 ---
 
@@ -14666,8 +12201,7 @@ async function prewarmInitialTuiQuery(host, context) {
     host.config.mode,
     context,
     host.isAuto,
-    host.agentMode,
-    host.config.packExecution
+    host.agentMode
   );
   const { appendSystemPrompt } = selectInitialPromptInput(
     promptDelivery,
@@ -14699,8 +12233,7 @@ async function runPrefilledFollowUp(host, context, options, resume, followUpCont
       host.config.mode,
       context,
       host.isAuto,
-      host.agentMode,
-      host.config.packExecution
+      host.agentMode
     );
     queryOptions.appendSystemPrompt = [queryOptions.appendSystemPrompt, initialPrompt].filter(Boolean).join("\n\n").slice(0, APPEND_SYSTEM_PROMPT_MAX_CHARS);
   }
@@ -14771,8 +12304,7 @@ async function runInitialQuery(host, context, options, resume, promptDelivery) {
     host.config.mode,
     context,
     host.isAuto,
-    host.agentMode,
-    host.config.packExecution
+    host.agentMode
   );
   const { prompt, appendSystemPrompt } = selectInitialPromptInput(
     promptDelivery,
@@ -14825,13 +12357,7 @@ async function buildRetryQuery(host, context, options, lastErrorWasImage) {
     );
   }
   const retryPrompt = buildMultimodalPrompt(
-    await buildInitialPrompt(
-      host.config.mode,
-      context,
-      host.isAuto,
-      host.agentMode,
-      host.config.packExecution
-    ),
+    await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode),
     context,
     lastErrorWasImage || !supportsImageBlocks(host.harnessKind)
   );
@@ -14857,13 +12383,7 @@ async function handleAuthError(context, host, options) {
   context.claudeSessionId = null;
   host.connection.storeSessionId("");
   const freshPrompt = buildMultimodalPrompt(
-    await buildInitialPrompt(
-      host.config.mode,
-      context,
-      host.isAuto,
-      host.agentMode,
-      host.config.packExecution
-    ),
+    await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode),
     context,
     !supportsImageBlocks(host.harnessKind)
   );
@@ -14878,13 +12398,7 @@ async function handleStaleSession(context, host, options) {
   context.claudeSessionId = null;
   host.connection.storeSessionId("");
   const freshPrompt = buildMultimodalPrompt(
-    await buildInitialPrompt(
-      host.config.mode,
-      context,
-      host.isAuto,
-      host.agentMode,
-      host.config.packExecution
-    ),
+    await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode),
     context,
     !supportsImageBlocks(host.harnessKind)
   );
@@ -14978,13 +12492,7 @@ async function handleUsageCapRejection(context, host, options, rateLimitType, re
   context.claudeSessionId = null;
   host.connection.storeSessionId("");
   const freshPrompt = buildMultimodalPrompt(
-    await buildInitialPrompt(
-      host.config.mode,
-      context,
-      host.isAuto,
-      host.agentMode,
-      host.config.packExecution
-    ),
+    await buildInitialPrompt(host.config.mode, context, host.isAuto, host.agentMode),
     context,
     !supportsImageBlocks(host.harnessKind)
   );
@@ -16568,8 +14076,8 @@ var SessionRunner = class _SessionRunner {
         "[conveyor-agent] Completed \u2014 entering dormant idle (staying connected)\n"
       );
     }
+    this.pendingMessages = this.pendingMessages.filter((msg) => msg.source === "pty_passive");
     await this.flushWipNow("WIP: turn complete");
-    this.pendingMessages.length = 0;
     if (this._state !== "idle") await this.setState("idle");
     const remainingMs = Math.max(0, this.dormantDeadline - Date.now());
     this.lifecycle.startDormantTimer(remainingMs);
@@ -17075,10 +14583,8 @@ var SessionRunner = class _SessionRunner {
       taskToken: this.config.connection.taskToken,
       taskId: this.fullContext?.taskId ?? "",
       model: this.fullContext?.model ?? DEFAULT_SONNET_MODEL,
-      instructions: this.fullContext?.agentInstructions ?? "",
       workspaceDir: this.config.workspaceDir,
       mode: this.config.runnerMode,
-      packExecution: this.config.packExecution,
       isAuto: this.config.isAuto
     };
     const bridge = new QueryBridge(this.connection, this.mode, runnerConfig, {
@@ -17457,9 +14963,6 @@ function unshallowRepo(workspaceDir) {
 }
 
 export {
-  DEFAULT_SONNET_MODEL,
-  RUNNER_MODES,
-  parsePackExecution,
   isPermissionDeniedError,
   buildSynthesizedCredentials,
   claudeJsonPath,