@runfusion/fusion 0.30.0 → 0.31.0

package/dist/bin.js

@@ -866,6 +866,7 @@ Your job: help users transform high-level goals into structured mission plans wi
 - Features should be specific and actionable
 - ALWAYS include verification/acceptance criteria at every level:
   - Milestone: "verification" field \u2014 how to confirm this phase is complete (e.g., "All API endpoints return correct responses, integration tests pass")
+  - Milestone: optional "acceptanceCriteria" field for explicit milestone-level completion bars (if omitted, acceptance can be auto-derived from child feature criteria/descriptions)
   - Slice: "verification" field \u2014 how to confirm this work unit is done (e.g., "Auth flow works end-to-end from signup through login")
   - Feature: "acceptanceCriteria" field \u2014 how to verify this specific deliverable (e.g., "JWT tokens expire after 1 hour and refresh correctly")
 - Suggest sensible defaults and push for specificity
@@ -879,7 +880,7 @@ For questions:
 {"type": "question", "data": {"id": "unique-id", "type": "text|single_select|multi_select|confirm", "question": "The question text", "description": "Helpful context", "options": [{"id": "opt1", "label": "Option 1", "description": "Details"}]}}
 
 For completion (when you have enough information):
-{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`
+{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "acceptanceCriteria": "Optional explicit milestone criteria (omit to auto-derive from features)", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`
       },
       "ai-refine-system": {
         key: "ai-refine-system",
@@ -1451,7 +1452,7 @@ function validateMessageMetadata(metadata) {
     throw new Error("metadata.wakeRecipient must be a boolean");
   }
 }
-var THINKING_LEVELS, COLUMNS, DEFAULT_COLUMN, TASK_PRIORITIES, DEFAULT_TASK_PRIORITY, HIGH_FANOUT_BLOCKER_TODO_THRESHOLD, STALE_HIGH_FANOUT_BLOCKER_AGE_THRESHOLD_MS, EXECUTION_MODES, DEFAULT_EXECUTION_MODE, THEME_MODES, COLOR_THEMES, MERGE_STRATEGY_OVERLAP_BEHAVIORS, POST_MERGE_AUDIT_MODES, MERGE_AUDIT_AUTO_RECOVERY_MODES, AUTO_RECOVERY_MODES, NOTIFICATION_EVENTS, WORKFLOW_STEP_TEMPLATES, DOCUMENT_KEY_RE, REPO_OVERRIDE_RE, CheckoutConflictError, SHARED_STATE_SNAPSHOT_VERSION, COLUMN_LABELS, COLUMN_DESCRIPTIONS, VALID_TRANSITIONS, AGENT_VALID_TRANSITIONS, AGENT_PERMISSIONS, PERMANENT_AGENT_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_ACTION_CATEGORIES, AGENT_PROVISIONING_APPROVAL_MODES, AGENT_PERMISSION_POLICY_PRESET_IDS, APPROVAL_REQUEST_STATUSES, APPROVAL_REQUEST_AUDIT_EVENT_TYPES, LEGACY_AGENT_PERMISSION_POLICY_ACTION_CATEGORY_ALIASES, DEFAULT_HEARTBEAT_PROCEDURE_PATH, DASHBOARD_USER_ID, DASHBOARD_USER_ALIASES;
+var THINKING_LEVELS, COLUMNS, DEFAULT_COLUMN, TASK_PRIORITIES, DEFAULT_TASK_PRIORITY, HIGH_FANOUT_BLOCKER_TODO_THRESHOLD, STALE_HIGH_FANOUT_BLOCKER_AGE_THRESHOLD_MS, EXECUTION_MODES, DEFAULT_EXECUTION_MODE, THEME_MODES, COLOR_THEMES, MERGE_STRATEGY_OVERLAP_BEHAVIORS, POST_MERGE_AUDIT_MODES, MERGE_AUDIT_AUTO_RECOVERY_MODES, AUTO_RECOVERY_MODES, NOTIFICATION_EVENTS, WORKFLOW_STEP_TEMPLATES, DOCUMENT_KEY_RE, REPO_OVERRIDE_RE, CheckoutConflictError, SHARED_STATE_SNAPSHOT_VERSION, COLUMN_LABELS, COLUMN_DESCRIPTIONS, VALID_TRANSITIONS, AGENT_VALID_TRANSITIONS, AGENT_PERMISSIONS, PERMANENT_AGENT_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES, AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES, AGENT_PROVISIONING_APPROVAL_MODES, AGENT_PERMISSION_POLICY_PRESET_IDS, APPROVAL_REQUEST_STATUSES, APPROVAL_REQUEST_AUDIT_EVENT_TYPES, LEGACY_AGENT_PERMISSION_POLICY_ACTION_CATEGORY_ALIASES, DEFAULT_HEARTBEAT_PROCEDURE_PATH, DASHBOARD_USER_ID, DASHBOARD_USER_ALIASES;
 var init_types = __esm({
   "../core/src/types.ts"() {
     "use strict";
@@ -1885,6 +1886,36 @@ Do NOT spend time on nits when no real issues exist.`
       "network_api",
       "task_agent_mutation"
     ];
+    AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES = {
+      git_write: ["git commit", "git push", "git merge", "git branch -d", "git worktree add", "write", "edit"],
+      file_write_delete: ["write", "edit", "fn_task_attach"],
+      command_execution: ["bash (non-git)", "read", "find", "grep", "ls"],
+      network_api: ["fn_research_run (web/research)", "fn_web_fetch"],
+      task_agent_mutation: [
+        "fn_task_create",
+        "fn_delegate_task",
+        "fn_task_import_github",
+        "fn_task_import_github_issue",
+        "fn_spawn_agent",
+        "fn_update_agent_config",
+        "fn_update_identity"
+      ]
+    };
+    AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES = [
+      "fn_send_message",
+      "fn_post_room_message",
+      "fn_read_messages",
+      "fn_task_log",
+      "fn_task_done",
+      "fn_heartbeat_done",
+      "fn_task_document_write",
+      "fn_task_document_read",
+      "fn_memory_search",
+      "fn_memory_get",
+      "fn_memory_append",
+      "fn_read_evaluations",
+      "fn_reflect_on_performance"
+    ];
     AGENT_PROVISIONING_APPROVAL_MODES = ["always", "trusted-only", "never"];
     AGENT_PERMISSION_POLICY_PRESET_IDS = ["unrestricted", "approval-required", "locked-down", "custom"];
     APPROVAL_REQUEST_STATUSES = ["pending", "approved", "denied", "completed"];
@@ -3727,7 +3758,7 @@ var init_db = __esm({
     DEFAULT_SQLITE_BUSY_TIMEOUT_MS = 5e3;
     DEFAULT_SQLITE_LOCK_RECOVERY_WINDOW_MS = 1e3;
     DEFAULT_SQLITE_LOCK_RECOVERY_DELAY_MS = 50;
-    SCHEMA_VERSION = 79;
+    SCHEMA_VERSION = 81;
     SCHEMA_SQL = `
 -- Tasks table with JSON columns for nested data
 CREATE TABLE IF NOT EXISTS tasks (
@@ -3782,6 +3813,8 @@ CREATE TABLE IF NOT EXISTS tasks (
   createdAt TEXT NOT NULL,
   updatedAt TEXT NOT NULL,
   columnMovedAt TEXT,
+  firstExecutionAt TEXT,
+  cumulativeActiveMs INTEGER,
   executionStartedAt TEXT,
   executionCompletedAt TEXT,
   -- JSON columns for nested arrays/objects
@@ -4249,6 +4282,7 @@ CREATE TABLE IF NOT EXISTS milestones (
   orderIndex INTEGER NOT NULL,
   interviewState TEXT NOT NULL,
   dependencies TEXT DEFAULT '[]',
+  acceptanceCriteria TEXT,
   createdAt TEXT NOT NULL,
   updatedAt TEXT NOT NULL,
   FOREIGN KEY (missionId) REFERENCES missions(id) ON DELETE CASCADE
@@ -6369,6 +6403,25 @@ This means a caller passed a .fusion directory where a project root was expected
             this.addColumnIfMissing("tasks", "overlapBlockedBy", "TEXT");
           });
         }
+        if (version < 80) {
+          this.applyMigration(80, () => {
+            this.addColumnIfMissing("milestones", "acceptanceCriteria", "TEXT");
+          });
+        }
+        if (version < 81) {
+          this.applyMigration(81, () => {
+            this.addColumnIfMissing("tasks", "firstExecutionAt", "TEXT");
+            this.addColumnIfMissing("tasks", "cumulativeActiveMs", "INTEGER");
+            if (this.hasColumn("tasks", "executionStartedAt")) {
+              this.db.prepare(
+                `UPDATE tasks
+               SET firstExecutionAt = executionStartedAt
+               WHERE firstExecutionAt IS NULL
+                 AND executionStartedAt IS NOT NULL`
+              ).run();
+            }
+          });
+        }
       }
       /**
        * Run a single migration step inside a transaction and bump the version.
@@ -10611,6 +10664,21 @@ var init_db_migrate = __esm({
 
 // ../core/src/mission-store.ts
 import { EventEmitter as EventEmitter4 } from "node:events";
+function deriveMilestoneAcceptanceCriteriaFromFeatures(features) {
+  const lines = features.map((feature) => {
+    const acceptance = feature.acceptanceCriteria?.trim();
+    const description = feature.description?.trim();
+    const text = acceptance && acceptance.length > 0 ? acceptance : description && description.length > 0 ? description : void 0;
+    if (!text) {
+      return void 0;
+    }
+    return `- ${feature.title}: ${text}`;
+  }).filter((line) => Boolean(line));
+  if (lines.length === 0) {
+    return void 0;
+  }
+  return lines.join("\n");
+}
 var DEFAULT_IMPLEMENTATION_RETRY_BUDGET, MissionStore;
 var init_mission_store = __esm({
   "../core/src/mission-store.ts"() {
@@ -10672,6 +10740,7 @@ var init_mission_store = __esm({
           dependencies: fromJson(row.dependencies) || [],
           planningNotes: row.planningNotes || void 0,
           verification: row.verification || void 0,
+          acceptanceCriteria: row.acceptanceCriteria || void 0,
           validationState: row.validationState || "not_started",
           createdAt: row.createdAt,
           updatedAt: row.updatedAt
@@ -11384,13 +11453,14 @@ var init_mission_store = __esm({
           dependencies: input.dependencies || [],
           planningNotes: input.planningNotes,
           verification: input.verification,
+          acceptanceCriteria: input.acceptanceCriteria,
           validationState: "not_started",
           createdAt: now,
           updatedAt: now
         };
         this.db.prepare(`
-      INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, validationState, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, acceptanceCriteria, validationState, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `).run(
           milestone.id,
           milestone.missionId,
@@ -11402,6 +11472,7 @@ var init_mission_store = __esm({
           toJson(milestone.dependencies),
           milestone.planningNotes ?? null,
           milestone.verification ?? null,
+          milestone.acceptanceCriteria ?? null,
           milestone.validationState,
           milestone.createdAt,
           milestone.updatedAt
@@ -11465,6 +11536,7 @@ var init_mission_store = __esm({
         dependencies = ?,
         planningNotes = ?,
         verification = ?,
+        acceptanceCriteria = ?,
         validationState = ?,
         updatedAt = ?
       WHERE id = ?
@@ -11477,6 +11549,7 @@ var init_mission_store = __esm({
           toJson(updated.dependencies),
           updated.planningNotes ?? null,
           updated.verification ?? null,
+          updated.acceptanceCriteria ?? null,
           updated.validationState || "not_started",
           updated.updatedAt,
           updated.id
@@ -11540,6 +11613,21 @@ var init_mission_store = __esm({
       updateMilestoneInterviewState(id, state) {
         return this.updateMilestone(id, { interviewState: state });
       }
+      applyDerivedMilestoneAcceptanceCriteria(milestoneId) {
+        const milestone = this.getMilestone(milestoneId);
+        if (!milestone) {
+          throw new Error(`Milestone ${milestoneId} not found`);
+        }
+        if (milestone.acceptanceCriteria?.trim()) {
+          return milestone;
+        }
+        const features = this.listSlices(milestoneId).flatMap((slice) => this.listFeatures(slice.id));
+        const derivedAcceptanceCriteria = deriveMilestoneAcceptanceCriteriaFromFeatures(features);
+        if (!derivedAcceptanceCriteria) {
+          return milestone;
+        }
+        return this.updateMilestone(milestoneId, { acceptanceCriteria: derivedAcceptanceCriteria });
+      }
       // ── Slice Operations ───────────────────────────────────────────────
       /**
        * Add a slice to a milestone.
@@ -11811,6 +11899,7 @@ var init_mission_store = __esm({
         this.db.bumpLastModified();
         this.emit("feature:created", feature);
         this.recomputeSliceStatus(sliceId);
+        this.applyDerivedMilestoneAcceptanceCriteria(slice.milestoneId);
         return feature;
       }
       /**
@@ -13180,11 +13269,11 @@ ${feature.acceptanceCriteria}`);
           applied++;
         }
         for (const milestone of snapshot.payload.milestones) {
-          this.db.prepare(`INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, validationState, createdAt, updatedAt)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+          this.db.prepare(`INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, acceptanceCriteria, validationState, createdAt, updatedAt)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
         ON CONFLICT(id) DO UPDATE SET title=excluded.title, description=excluded.description, status=excluded.status, orderIndex=excluded.orderIndex,
           interviewState=excluded.interviewState, dependencies=excluded.dependencies, planningNotes=excluded.planningNotes, verification=excluded.verification,
-          validationState=excluded.validationState, updatedAt=excluded.updatedAt`).run(
+          acceptanceCriteria=excluded.acceptanceCriteria, validationState=excluded.validationState, updatedAt=excluded.updatedAt`).run(
             milestone.id,
             milestone.missionId,
             milestone.title,
@@ -13195,6 +13284,7 @@ ${feature.acceptanceCriteria}`);
             toJsonNullable(milestone.dependencies),
             milestone.planningNotes ?? null,
             milestone.verification ?? null,
+            milestone.acceptanceCriteria ?? null,
             milestone.validationState ?? null,
             milestone.createdAt,
             milestone.updatedAt
@@ -37226,6 +37316,8 @@ var init_store = __esm({
           createdAt: row.createdAt,
           updatedAt: row.updatedAt,
           columnMovedAt: row.columnMovedAt || void 0,
+          firstExecutionAt: row.firstExecutionAt || void 0,
+          cumulativeActiveMs: row.cumulativeActiveMs ?? void 0,
           executionStartedAt: row.executionStartedAt || void 0,
           executionCompletedAt: row.executionCompletedAt || void 0,
           dependencies: fromJson(row.dependencies) || [],
@@ -37353,6 +37445,8 @@ var init_store = __esm({
           createdAt: entry.createdAt,
           updatedAt: entry.updatedAt,
           columnMovedAt: entry.columnMovedAt,
+          firstExecutionAt: entry.firstExecutionAt,
+          cumulativeActiveMs: entry.cumulativeActiveMs,
           executionStartedAt: entry.executionStartedAt,
           executionCompletedAt: entry.executionCompletedAt,
           modelPresetId: entry.modelPresetId,
@@ -37460,6 +37554,8 @@ ${recentText}` : void 0
           createdAt: task.createdAt,
           updatedAt: task.updatedAt,
           columnMovedAt: task.columnMovedAt,
+          firstExecutionAt: task.firstExecutionAt,
+          cumulativeActiveMs: task.cumulativeActiveMs,
           executionStartedAt: task.executionStartedAt,
           executionCompletedAt: task.executionCompletedAt,
           archivedAt,
@@ -37577,6 +37673,8 @@ ${recentText}` : void 0
           "createdAt",
           "updatedAt",
           "columnMovedAt",
+          "firstExecutionAt",
+          "cumulativeActiveMs",
           "executionStartedAt",
           "executionCompletedAt",
           "dependencies",
@@ -37713,6 +37811,8 @@ ${outcome}`;
           "createdAt",
           "updatedAt",
           "columnMovedAt",
+          "firstExecutionAt",
+          "cumulativeActiveMs",
           "executionStartedAt",
           "executionCompletedAt",
           "dependencies",
@@ -37838,6 +37938,8 @@ ${outcome}`;
           task.createdAt,
           task.updatedAt,
           task.columnMovedAt ?? null,
+          task.firstExecutionAt ?? null,
+          task.cumulativeActiveMs ?? null,
           task.executionStartedAt ?? null,
           task.executionCompletedAt ?? null,
           toJson(task.dependencies || []),
@@ -37902,7 +38004,7 @@ ${outcome}`;
         workflowStepRetries, stuckKillCount, postReviewFixCount, recoveryRetryCount, taskDoneRetryCount, verificationFailureCount, mergeConflictBounceCount, mergeAuditBounceCount, branchConflictRecoveryCount, reviewerContextRetryCount, reviewerFallbackRetryCount, nextRecoveryAt, error,
         summary, thinkingLevel, executionMode, tokenUsageInputTokens, tokenUsageOutputTokens, tokenUsageCachedTokens,
         tokenUsageCacheWriteTokens, tokenUsageTotalTokens, tokenUsageFirstUsedAt, tokenUsageLastUsedAt, tokenBudgetSoftAlertedAt, tokenBudgetHardAlertedAt, tokenBudgetOverride, createdAt, updatedAt, columnMovedAt,
-        executionStartedAt, executionCompletedAt,
+        firstExecutionAt, cumulativeActiveMs, executionStartedAt, executionCompletedAt,
         dependencies, steps, log, attachments, steeringComments,
         comments, review, reviewState, workflowStepResults, prInfo, issueInfo, githubTracking,
         sourceIssueProvider, sourceIssueRepository, sourceIssueExternalIssueId, sourceIssueNumber, sourceIssueUrl,
@@ -37926,7 +38028,7 @@ ${outcome}`;
         workflowStepRetries, stuckKillCount, postReviewFixCount, recoveryRetryCount, taskDoneRetryCount, verificationFailureCount, mergeConflictBounceCount, mergeAuditBounceCount, branchConflictRecoveryCount, reviewerContextRetryCount, reviewerFallbackRetryCount, nextRecoveryAt, error,
         summary, thinkingLevel, executionMode, tokenUsageInputTokens, tokenUsageOutputTokens, tokenUsageCachedTokens,
         tokenUsageCacheWriteTokens, tokenUsageTotalTokens, tokenUsageFirstUsedAt, tokenUsageLastUsedAt, tokenBudgetSoftAlertedAt, tokenBudgetHardAlertedAt, tokenBudgetOverride, createdAt, updatedAt, columnMovedAt,
-        executionStartedAt, executionCompletedAt,
+        firstExecutionAt, cumulativeActiveMs, executionStartedAt, executionCompletedAt,
         dependencies, steps, log, attachments, steeringComments,
         comments, review, reviewState, workflowStepResults, prInfo, issueInfo, githubTracking,
         sourceIssueProvider, sourceIssueRepository, sourceIssueExternalIssueId, sourceIssueNumber, sourceIssueUrl,
@@ -37988,6 +38090,8 @@ ${outcome}`;
         createdAt = excluded.createdAt,
         updatedAt = excluded.updatedAt,
         columnMovedAt = excluded.columnMovedAt,
+        firstExecutionAt = excluded.firstExecutionAt,
+        cumulativeActiveMs = excluded.cumulativeActiveMs,
         executionStartedAt = excluded.executionStartedAt,
         executionCompletedAt = excluded.executionCompletedAt,
         dependencies = excluded.dependencies,
@@ -39645,10 +39749,20 @@ ${newTask.description}
           task.column = toColumn;
           task.columnMovedAt = (/* @__PURE__ */ new Date()).toISOString();
           task.updatedAt = task.columnMovedAt;
-          if (toColumn === "in-progress" && !task.executionStartedAt) {
-            task.executionStartedAt = task.columnMovedAt;
+          if (fromColumn === "in-progress" && toColumn !== "in-progress") {
+            const segmentStartMs = Date.parse(task.executionStartedAt ?? task.columnMovedAt);
+            const segmentEndMs = Date.parse(task.columnMovedAt);
+            const segmentDeltaMs = Number.isFinite(segmentStartMs) && Number.isFinite(segmentEndMs) ? Math.max(0, segmentEndMs - segmentStartMs) : 0;
+            task.cumulativeActiveMs = Math.max(0, task.cumulativeActiveMs ?? 0) + segmentDeltaMs;
           }
           if (toColumn === "in-progress") {
+            task.cumulativeActiveMs ??= 0;
+            if (!task.firstExecutionAt) {
+              task.firstExecutionAt = task.columnMovedAt;
+            }
+            if (!task.executionStartedAt) {
+              task.executionStartedAt = task.columnMovedAt;
+            }
             task.userPaused = void 0;
           }
           if (toColumn === "done" && !task.executionCompletedAt) {
@@ -40090,6 +40204,16 @@ ${newTask.description}
           } else if (updates.sessionFile !== void 0) {
             task.sessionFile = updates.sessionFile;
           }
+          if (updates.firstExecutionAt === null) {
+            task.firstExecutionAt = void 0;
+          } else if (updates.firstExecutionAt !== void 0) {
+            task.firstExecutionAt = updates.firstExecutionAt;
+          }
+          if (updates.cumulativeActiveMs === null) {
+            task.cumulativeActiveMs = void 0;
+          } else if (updates.cumulativeActiveMs !== void 0) {
+            task.cumulativeActiveMs = updates.cumulativeActiveMs;
+          }
           if (updates.executionStartedAt === null) {
             task.executionStartedAt = void 0;
           } else if (updates.executionStartedAt !== void 0) {
@@ -40221,6 +40345,7 @@ ${newTask.description}
           }
           if (!paused) {
             task.pausedByAgentId = void 0;
+            task.userPaused = void 0;
           }
           if (task.column === "in-progress" || task.column === "in-review") {
             task.status = paused ? "paused" : void 0;
@@ -60259,13 +60384,15 @@ var init_chat_store = __esm({
           whereClauses.push("createdAt < ?");
           params.push(filter2.before);
         }
+        const order = filter2?.order === "desc" ? "DESC" : "ASC";
         const rows = this.db.prepare(`
       SELECT * FROM chat_room_messages
       WHERE ${whereClauses.join(" AND ")}
-      ORDER BY createdAt ASC
+      ORDER BY createdAt ${order}
       LIMIT ? OFFSET ?
     `).all(...params, filter2?.limit ?? 100, filter2?.offset ?? 0);
-        return rows.map((row) => this.rowToRoomMessage(row));
+        const normalizedRows = filter2?.order === "desc" ? [...rows].reverse() : rows;
+        return normalizedRows.map((row) => this.rowToRoomMessage(row));
       }
       listRoomMessagesSince(roomId, sinceIso, options) {
         const whereClauses = ["roomId = ?", "createdAt > ?"];
@@ -60546,6 +60673,8 @@ var src_exports = {};
 __export(src_exports, {
   AGENT_PERMISSIONS: () => AGENT_PERMISSIONS,
   AGENT_PERMISSION_POLICY_ACTION_CATEGORIES: () => AGENT_PERMISSION_POLICY_ACTION_CATEGORIES,
+  AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES: () => AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES,
+  AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES: () => AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES,
   AGENT_PERMISSION_POLICY_PRESET_IDS: () => AGENT_PERMISSION_POLICY_PRESET_IDS,
   AGENT_PROVISIONING_APPROVAL_MODES: () => AGENT_PROVISIONING_APPROVAL_MODES,
   AGENT_VALID_TRANSITIONS: () => AGENT_VALID_TRANSITIONS,
@@ -64764,6 +64893,7 @@ var init_gating_classifications = __esm({
       "fn_slice_activate",
       "fn_feature_link_task",
       "fn_feature_update",
+      "fn_milestone_update",
       "fn_agent_stop",
       "fn_agent_start"
     ];
@@ -64784,9 +64914,15 @@ var init_gating_classifications = __esm({
     NETWORK_API_TOOLS = /* @__PURE__ */ new Set([
       "fn_research_run",
       "fn_research_cancel",
-      "fn_research_retry"
+      "fn_research_retry",
+      "fn_web_fetch"
+      // FN-4603: outbound HTTP fetch should be network-classified.
+    ]);
+    ACTION_GATE_NETWORK_API_TOOLS = /* @__PURE__ */ new Set([
+      "fn_research_run",
+      "fn_web_fetch"
+      // FN-4603: honor network_api approval policy for web fetches.
     ]);
-    ACTION_GATE_NETWORK_API_TOOLS = /* @__PURE__ */ new Set(["fn_research_run"]);
     READONLY_FN_TOOLS = /* @__PURE__ */ new Set([
       "fn_task_list",
       "fn_task_show",
@@ -86590,6 +86726,91 @@ var init_auto_recovery = __esm({
   }
 });
 
+// ../engine/src/restart-recovery-coordinator.ts
+function hasStepProgress(task) {
+  const steps = Array.isArray(task.steps) ? task.steps : [];
+  return steps.some((step) => step.status === "done" || step.status === "in-progress" || step.status === "skipped");
+}
+function isNoTaskDoneFailure(task) {
+  return task.status === "failed" && typeof task.error === "string" && task.error.toLowerCase().includes("without calling fn_task_done");
+}
+function findMissingWorktreeSessionPrefix(error) {
+  for (const prefix of MISSING_WORKTREE_SESSION_PREFIXES) {
+    if (error.includes(prefix)) {
+      return prefix;
+    }
+  }
+  return null;
+}
+function isMissingWorktreeSessionStartFailure(error) {
+  if (typeof error !== "string") {
+    return false;
+  }
+  return findMissingWorktreeSessionPrefix(error) !== null;
+}
+function extractMissingWorktreePathFromSessionStartFailure(error) {
+  if (typeof error !== "string") return null;
+  const prefix = findMissingWorktreeSessionPrefix(error);
+  if (!prefix) return null;
+  const idx = error.indexOf(prefix);
+  const pathPart = error.slice(idx + prefix.length).trim();
+  return pathPart.length > 0 ? pathPart : null;
+}
+function isRecoverableMissingWorktreeReviewFailure(task) {
+  return task.column === "in-review" && !task.paused && task.status === "failed" && isMissingWorktreeSessionStartFailure(task.error) && hasStepProgress(task);
+}
+var log14, MISSING_WORKTREE_SESSION_PREFIXES, RestartRecoveryCoordinator;
+var init_restart_recovery_coordinator = __esm({
+  "../engine/src/restart-recovery-coordinator.ts"() {
+    "use strict";
+    init_logger2();
+    log14 = createLogger2("restart-recovery");
+    MISSING_WORKTREE_SESSION_PREFIXES = [
+      "Refusing to start coding agent in missing worktree:",
+      "Refusing to start coding agent in incomplete worktree:",
+      "Refusing to start coding agent in unregistered git worktree:"
+    ];
+    RestartRecoveryCoordinator = class {
+      constructor(store, executor) {
+        this.store = store;
+        this.executor = executor;
+      }
+      async recoverInterruptedRuns() {
+        const allInProgress = await this.store.listTasks({ slim: true, column: "in-progress" });
+        const candidates = allInProgress.filter((task) => task.column === "in-progress" && !task.paused);
+        if (candidates.length === 0) return;
+        let requeued = 0;
+        for (const task of candidates) {
+          if (!this.mustSafeRetry(task)) continue;
+          await this.safeRequeue(task);
+          requeued++;
+        }
+        if (requeued > 0) {
+          log14.log(`Restart recovery requeued ${requeued} interrupted task(s) for safe retry`);
+        }
+        await this.executor.resumeOrphaned();
+      }
+      mustSafeRetry(task) {
+        return isNoTaskDoneFailure(task) && !hasStepProgress(task);
+      }
+      async safeRequeue(task) {
+        await this.store.updateTask(task.id, {
+          status: "stuck-killed",
+          worktree: null,
+          branch: null,
+          sessionFile: null,
+          error: null
+        });
+        await this.store.logEntry(
+          task.id,
+          "Restart recovery: interrupted run had no step progress and no fn_task_done \u2014 requeued to todo for safe retry"
+        );
+        await this.store.moveTask(task.id, "todo");
+      }
+    };
+  }
+});
+
 // ../engine/src/auto-recovery-handlers/branch-worktree.ts
 import { exec as exec9 } from "node:child_process";
 import { existsSync as existsSync32 } from "node:fs";
@@ -87763,6 +87984,7 @@ var init_executor = __esm({
     init_prompt_layers();
     init_run_audit();
     init_auto_recovery();
+    init_restart_recovery_coordinator();
     init_branch_worktree();
     init_contamination();
     init_file_scope();
@@ -90446,7 +90668,22 @@ ${summary}`,
                 this.options.onComplete?.(task);
               } else {
                 let taskDoneSessionRetries = 0;
+                let retryAbortedDueToReclaim = false;
                 while (!taskDone && taskDoneSessionRetries < MAX_TASK_DONE_SESSION_RETRIES) {
+                  const liveTask = await this.store.getTask(task.id);
+                  const hasExplicitWorktreeBinding = typeof liveTask.worktree === "string" || liveTask.worktree === null;
+                  const hasExplicitBranchBinding = typeof liveTask.branch === "string" || liveTask.branch === null;
+                  const worktreeContractIntact = liveTask.column === "in-progress" && !liveTask.paused && (!hasExplicitWorktreeBinding || liveTask.worktree === worktreePath) && (!hasExplicitBranchBinding || typeof liveTask.branch === "string" && liveTask.branch.length > 0);
+                  if (!worktreeContractIntact) {
+                    const reclaimMessage = `${task.id}: worktree/branch reclaimed during no-fn_task_done retry \u2014 aborting retry and requeueing`;
+                    executorLog.log(reclaimMessage);
+                    await this.store.logEntry(task.id, reclaimMessage, void 0, this.currentRunContext);
+                    this.activeSessions.delete(task.id);
+                    this.tokenUsageBaselines.delete(task.id);
+                    session.dispose();
+                    retryAbortedDueToReclaim = true;
+                    break;
+                  }
                   taskDoneSessionRetries++;
                   executorLog.log(
                     `\u26A0 ${task.id} finished without fn_task_done \u2014 retrying with new session (${taskDoneSessionRetries}/${MAX_TASK_DONE_SESSION_RETRIES})`
@@ -90473,88 +90710,112 @@ ${summary}`,
                   this.activeSessions.delete(task.id);
                   this.tokenUsageBaselines.delete(task.id);
                   session.dispose();
-                  const { session: retrySession2, sessionFile: retrySessionFile } = await createResolvedAgentSession({
-                    sessionPurpose: "executor",
-                    runtimeHint: executorRuntimeHint,
-                    pluginRunner: this.options.pluginRunner,
-                    cwd: worktreePath,
-                    systemPrompt: executorSystemPromptFinal,
-                    systemPromptLayers: executorLayers,
-                    tools: "coding",
-                    customTools,
-                    onText: agentLogger.onText,
-                    onThinking: agentLogger.onThinking,
-                    onToolStart: agentLogger.onToolStart,
-                    onToolEnd: agentLogger.onToolEnd,
-                    defaultProvider: executorProvider,
-                    defaultModelId: executorModelId,
-                    fallbackProvider: executorFallbackProvider,
-                    fallbackModelId: executorFallbackModelId,
-                    defaultThinkingLevel: executorThinkingLevel,
-                    sessionManager: SessionManager2.create(worktreePath),
-                    taskEnv,
-                    // Skill selection: use assigned agent skills if available, otherwise role fallback
-                    ...skillContext.skillSelectionContext ? { skillSelection: skillContext.skillSelectionContext } : {},
-                    actionGateContext: this.buildActionGateContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy),
-                    permanentAgentGating: this.buildPermanentAgentGatingContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy)
-                  });
-                  if (retrySessionFile) {
-                    this.store.updateTask(task.id, { sessionFile: retrySessionFile }).catch((err) => {
-                      const msg = err instanceof Error ? err.message : String(err);
-                      executorLog.warn(`${task.id} failed to persist retry sessionFile: ${msg}`);
+                  let retrySession2 = null;
+                  try {
+                    const createdRetrySession = await createResolvedAgentSession({
+                      sessionPurpose: "executor",
+                      runtimeHint: executorRuntimeHint,
+                      pluginRunner: this.options.pluginRunner,
+                      cwd: worktreePath,
+                      systemPrompt: executorSystemPromptFinal,
+                      systemPromptLayers: executorLayers,
+                      tools: "coding",
+                      customTools,
+                      onText: agentLogger.onText,
+                      onThinking: agentLogger.onThinking,
+                      onToolStart: agentLogger.onToolStart,
+                      onToolEnd: agentLogger.onToolEnd,
+                      defaultProvider: executorProvider,
+                      defaultModelId: executorModelId,
+                      fallbackProvider: executorFallbackProvider,
+                      fallbackModelId: executorFallbackModelId,
+                      defaultThinkingLevel: executorThinkingLevel,
+                      sessionManager: SessionManager2.create(worktreePath),
+                      taskEnv,
+                      // Skill selection: use assigned agent skills if available, otherwise role fallback
+                      ...skillContext.skillSelectionContext ? { skillSelection: skillContext.skillSelectionContext } : {},
+                      actionGateContext: this.buildActionGateContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy),
+                      permanentAgentGating: this.buildPermanentAgentGatingContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy)
                     });
+                    retrySession2 = createdRetrySession.session;
+                    if (createdRetrySession.sessionFile) {
+                      this.store.updateTask(task.id, { sessionFile: createdRetrySession.sessionFile }).catch((err) => {
+                        const msg = err instanceof Error ? err.message : String(err);
+                        executorLog.warn(`${task.id} failed to persist retry sessionFile: ${msg}`);
+                      });
+                    }
+                    session = retrySession2;
+                    sessionRef.current = retrySession2;
+                    this.activeSessions.set(task.id, {
+                      session: retrySession2,
+                      seenSteeringIds,
+                      lastResolvedModelProvider: executorProvider,
+                      lastResolvedModelId: executorModelId,
+                      lastTaskModelProvider: detail.modelProvider,
+                      lastTaskModelId: detail.modelId,
+                      lastAssignedAgentId: detail.assignedAgentId ?? null
+                    });
+                    stuckDetector?.trackTask(task.id, retrySession2);
+                    let retryPrompt;
+                    if (pseudoPause.kind !== "none") {
+                      const shortMatch = (pseudoPause.matched ?? "").slice(0, 120);
+                      retryPrompt = [
+                        `Your previous turn ended with a pseudo-pause: "${shortMatch}". This is forbidden.`,
+                        "",
+                        "Turn-ending rules you violated:",
+                        "- You MUST NOT end a turn by asking the user a question, summarizing progress, or requesting permission to continue.",
+                        "- Phrases like 'If you want, I can continue', 'Should I proceed?', 'Let me know if...' are FORBIDDEN turn-endings.",
+                        "- The user is not watching this conversation. Questions written as prose are ignored.",
+                        "- If you genuinely cannot proceed, call fn_task_done with a clear explanation \u2014 never write the blocker as plain prose.",
+                        "",
+                        "What you must do now:",
+                        "1. Review the PROMPT.md steps and identify the next pending step.",
+                        "2. Do the work for that step immediately \u2014 call fn_task_update, write code, run tests.",
+                        "3. Continue until all steps are done, then call fn_task_done.",
+                        "Do NOT ask for permission. Do NOT write a summary. Just call a tool and keep working.",
+                        "",
+                        "Original task:",
+                        buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
+                      ].join("\n");
+                    } else {
+                      retryPrompt = [
+                        "Your previous session ended without calling the fn_task_done tool.",
+                        "The task may already be complete \u2014 review the current state of the worktree and either:",
+                        "1. If the work is done, call fn_task_done with a summary of what was accomplished.",
+                        "2. If there is remaining work, finish it and then call fn_task_done.",
+                        "",
+                        "Original task:",
+                        buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
+                      ].join("\n");
+                    }
+                    stuckDetector?.recordActivity(task.id);
+                    await promptWithFallback(retrySession2, retryPrompt);
+                    checkSessionError(retrySession2);
+                    await accumulateSessionTokenUsage(this.store, task.id, retrySession2, {
+                      agentId: task.assignedAgentId ?? void 0,
+                      role: "executor"
+                    });
+                  } catch (retryError) {
+                    const retryErrorText = retryError instanceof Error ? retryError.message : String(retryError);
+                    if (!isMissingWorktreeSessionStartFailure(retryErrorText)) {
+                      throw retryError;
+                    }
+                    const recoveredPath = extractMissingWorktreePathFromSessionStartFailure(retryErrorText) ?? worktreePath;
+                    const reclaimMessage = `${task.id}: no-fn_task_done retry hit missing worktree session-start failure (${recoveredPath}) \u2014 clearing stale metadata and requeueing`;
+                    executorLog.log(reclaimMessage);
+                    await this.store.logEntry(task.id, reclaimMessage, void 0, this.currentRunContext);
+                    await this.store.updateTask(task.id, {
+                      sessionFile: null,
+                      worktree: null,
+                      branch: null,
+                      baseCommitSha: null
+                    });
+                    this.activeSessions.delete(task.id);
+                    this.tokenUsageBaselines.delete(task.id);
+                    retrySession2?.dispose();
+                    retryAbortedDueToReclaim = true;
+                    break;
                   }
-                  session = retrySession2;
-                  sessionRef.current = retrySession2;
-                  this.activeSessions.set(task.id, {
-                    session: retrySession2,
-                    seenSteeringIds,
-                    lastResolvedModelProvider: executorProvider,
-                    lastResolvedModelId: executorModelId,
-                    lastTaskModelProvider: detail.modelProvider,
-                    lastTaskModelId: detail.modelId,
-                    lastAssignedAgentId: detail.assignedAgentId ?? null
-                  });
-                  stuckDetector?.trackTask(task.id, retrySession2);
-                  let retryPrompt;
-                  if (pseudoPause.kind !== "none") {
-                    const shortMatch = (pseudoPause.matched ?? "").slice(0, 120);
-                    retryPrompt = [
-                      `Your previous turn ended with a pseudo-pause: "${shortMatch}". This is forbidden.`,
-                      "",
-                      "Turn-ending rules you violated:",
-                      "- You MUST NOT end a turn by asking the user a question, summarizing progress, or requesting permission to continue.",
-                      "- Phrases like 'If you want, I can continue', 'Should I proceed?', 'Let me know if...' are FORBIDDEN turn-endings.",
-                      "- The user is not watching this conversation. Questions written as prose are ignored.",
-                      "- If you genuinely cannot proceed, call fn_task_done with a clear explanation \u2014 never write the blocker as plain prose.",
-                      "",
-                      "What you must do now:",
-                      "1. Review the PROMPT.md steps and identify the next pending step.",
-                      "2. Do the work for that step immediately \u2014 call fn_task_update, write code, run tests.",
-                      "3. Continue until all steps are done, then call fn_task_done.",
-                      "Do NOT ask for permission. Do NOT write a summary. Just call a tool and keep working.",
-                      "",
-                      "Original task:",
-                      buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
-                    ].join("\n");
-                  } else {
-                    retryPrompt = [
-                      "Your previous session ended without calling the fn_task_done tool.",
-                      "The task may already be complete \u2014 review the current state of the worktree and either:",
-                      "1. If the work is done, call fn_task_done with a summary of what was accomplished.",
-                      "2. If there is remaining work, finish it and then call fn_task_done.",
-                      "",
-                      "Original task:",
-                      buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
-                    ].join("\n");
-                  }
-                  stuckDetector?.recordActivity(task.id);
-                  await promptWithFallback(retrySession2, retryPrompt);
-                  checkSessionError(retrySession2);
-                  await accumulateSessionTokenUsage(this.store, task.id, retrySession2, {
-                    agentId: task.assignedAgentId ?? void 0,
-                    role: "executor"
-                  });
                   if (!taskDone) {
                     const implicitCheck = await this.store.getTask(task.id);
                     if (implicitCheck.steps.length > 0 && implicitCheck.steps.every((s) => s.status === "done" || s.status === "skipped")) {
@@ -90617,7 +90878,7 @@ ${summary}`,
                 } else {
                   const priorRequeues = task.taskDoneRetryCount ?? 0;
                   const nextRequeueCount = priorRequeues + 1;
-                  const errorMessage = `Agent finished without calling fn_task_done (after ${MAX_TASK_DONE_SESSION_RETRIES} retries)`;
+                  const errorMessage = retryAbortedDueToReclaim ? "Worktree/branch reclaimed during no-fn_task_done retry \u2014 requeueing" : `Agent finished without calling fn_task_done (after ${MAX_TASK_DONE_SESSION_RETRIES} retries)`;
                   if (priorRequeues < MAX_TASK_DONE_REQUEUE_RETRIES) {
                     await this.store.updateTask(task.id, {
                       status: "failed",
@@ -102943,7 +103204,7 @@ function extractJson(raw) {
   if (first >= 0 && last > first) return trimmed.slice(first, last + 1);
   return trimmed;
 }
-var log14, HybridEvaluatorService;
+var log15, HybridEvaluatorService;
 var init_evaluator = __esm({
   "../engine/src/evaluator.ts"() {
     "use strict";
@@ -102952,7 +103213,7 @@ var init_evaluator = __esm({
     init_eval_followups();
     init_pi();
     init_logger2();
-    log14 = createLogger2("evaluator");
+    log15 = createLogger2("evaluator");
     HybridEvaluatorService = class {
       constructor(deps) {
         this.deps = deps;
@@ -103044,7 +103305,7 @@ var init_evaluator = __esm({
           try {
             session.dispose();
           } catch (error) {
-            log14.warn(`Evaluator session disposal failed: ${error instanceof Error ? error.message : String(error)}`);
+            log15.warn(`Evaluator session disposal failed: ${error instanceof Error ? error.message : String(error)}`);
           }
         }
       }
@@ -103176,7 +103437,7 @@ function truncateOutput2(stdout, stderr) {
   }
   return combined;
 }
-var log15, FUSION_BINARY_TOKENS, SHELL_METACHARACTERS_REGEX, DEFAULT_TIMEOUT_MS8, MAX_BUFFER, MAX_OUTPUT_LENGTH, DEFAULT_POLL_INTERVAL_MS, MIN_POLL_INTERVAL_MS, CronRunner, AI_AUTOMATION_SYSTEM_PROMPT;
+var log16, FUSION_BINARY_TOKENS, SHELL_METACHARACTERS_REGEX, DEFAULT_TIMEOUT_MS8, MAX_BUFFER, MAX_OUTPUT_LENGTH, DEFAULT_POLL_INTERVAL_MS, MIN_POLL_INTERVAL_MS, CronRunner, AI_AUTOMATION_SYSTEM_PROMPT;
 var init_cron_runner = __esm({
   "../engine/src/cron-runner.ts"() {
     "use strict";
@@ -103185,7 +103446,7 @@ var init_cron_runner = __esm({
     init_shell_utils();
     init_pi();
     init_evaluator();
-    log15 = createLogger2("cron-runner");
+    log16 = createLogger2("cron-runner");
     FUSION_BINARY_TOKENS = /* @__PURE__ */ new Set([
       "fn",
       "fusion",
@@ -103226,7 +103487,7 @@ var init_cron_runner = __esm({
       start() {
         if (this.running) return;
         this.running = true;
-        log15.log(`Started (poll every ${this.pollIntervalMs / 1e3}s, scope: ${this.scope})`);
+        log16.log(`Started (poll every ${this.pollIntervalMs / 1e3}s, scope: ${this.scope})`);
         void this.tick();
         this.pollInterval = setInterval(() => {
           void this.tick();
@@ -103240,7 +103501,7 @@ var init_cron_runner = __esm({
           clearInterval(this.pollInterval);
           this.pollInterval = null;
         }
-        log15.log("Stopped");
+        log16.log("Stopped");
       }
       /**
        * Single poll cycle: find due schedules and execute them.
@@ -103264,29 +103525,29 @@ var init_cron_runner = __esm({
           const executedIds = /* @__PURE__ */ new Set();
           for (const schedule of dueSchedules) {
             if (this.inFlight.has(schedule.id)) {
-              log15.warn(`Skipping ${schedule.name} (${schedule.id}) \u2014 still running from previous tick`);
+              log16.warn(`Skipping ${schedule.name} (${schedule.id}) \u2014 still running from previous tick`);
               continue;
             }
             if (executedIds.has(schedule.id)) {
-              log15.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 already executed from another scope this tick`);
+              log16.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 already executed from another scope this tick`);
               continue;
             }
             executedIds.add(schedule.id);
             const scheduleScope = schedule.scope ?? "project";
             if (scheduleScope !== this.scope && this.scope !== "all") {
-              log15.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 belongs to ${scheduleScope} scope, not polling`);
+              log16.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 belongs to ${scheduleScope} scope, not polling`);
               continue;
             }
-            log15.log(`Executing ${schedule.name} (${schedule.id}) [scope: ${scheduleScope}]`);
+            log16.log(`Executing ${schedule.name} (${schedule.id}) [scope: ${scheduleScope}]`);
             const currentSettings = await this.store.getSettings();
             if (currentSettings.globalPause || currentSettings.enginePaused) {
-              log15.log("Pause detected mid-tick \u2014 stopping schedule execution");
+              log16.log("Pause detected mid-tick \u2014 stopping schedule execution");
               break;
             }
             await this.executeSchedule(schedule);
           }
         } catch (err) {
-          log15.error(`Tick error: ${err.message}`);
+          log16.error(`Tick error: ${err.message}`);
         } finally {
           this.ticking = false;
         }
@@ -103316,13 +103577,13 @@ var init_cron_runner = __esm({
         try {
           await this.automationStore.recordRun(schedule.id, result);
         } catch (recordErr) {
-          log15.error(`Failed to record run for ${schedule.id}: ${recordErr.message}`);
+          log16.error(`Failed to record run for ${schedule.id}: ${recordErr.message}`);
         }
         if (this.onScheduleRunProcessed) {
           try {
             await this.onScheduleRunProcessed(schedule, result);
           } catch (callbackErr) {
-            log15.error(
+            log16.error(
               `Post-run callback failed for ${schedule.name} (${schedule.id}): ${callbackErr.message}`
             );
           }
@@ -103333,7 +103594,7 @@ var init_cron_runner = __esm({
        * Execute a legacy single-command schedule.
        */
       async executeLegacyCommand(schedule, startedAt) {
-        log15.log(`Executing ${schedule.name} (${schedule.id}): ${schedule.command}`);
+        log16.log(`Executing ${schedule.name} (${schedule.id}): ${schedule.command}`);
         if (isInProcessBackupCommand(schedule.command)) {
           return this.executeBackupInProcess(schedule, startedAt);
         }
@@ -103351,7 +103612,7 @@ var init_cron_runner = __esm({
             shell: defaultShell
           });
           const output = truncateOutput2(stdout, stderr);
-          log15.log(`\u2713 ${schedule.name} completed (${output.length} bytes output)`);
+          log16.log(`\u2713 ${schedule.name} completed (${output.length} bytes output)`);
           return {
             success: true,
             output,
@@ -103363,7 +103624,7 @@ var init_cron_runner = __esm({
           const stderr = err.stderr ?? "";
           const output = truncateOutput2(stdout, stderr);
           const errorMessage = err.killed ? `Command timed out after ${(schedule.timeoutMs ?? DEFAULT_TIMEOUT_MS8) / 1e3}s` : err.message ?? String(err);
-          log15.warn(`\u2717 ${schedule.name} failed: ${errorMessage}`);
+          log16.warn(`\u2717 ${schedule.name} failed: ${errorMessage}`);
           return {
             success: false,
             output,
@@ -103381,9 +103642,9 @@ var init_cron_runner = __esm({
       async executeBackupInProcess(schedule, startedAt) {
         const action = await this.runBackupActionInProcess();
         if (action.success) {
-          log15.log(`\u2713 ${schedule.name} completed in-process`);
+          log16.log(`\u2713 ${schedule.name} completed in-process`);
         } else {
-          log15.warn(`\u2717 ${schedule.name} in-process backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
+          log16.warn(`\u2717 ${schedule.name} in-process backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
         }
         return {
           success: action.success,
@@ -103396,9 +103657,9 @@ var init_cron_runner = __esm({
       async executeMemoryBackupInProcess(schedule, startedAt) {
         const action = await this.runMemoryBackupActionInProcess();
         if (action.success) {
-          log15.log(`\u2713 ${schedule.name} completed in-process`);
+          log16.log(`\u2713 ${schedule.name} completed in-process`);
         } else {
-          log15.warn(`\u2717 ${schedule.name} in-process memory backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
+          log16.warn(`\u2717 ${schedule.name} in-process memory backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
         }
         return {
           success: action.success,
@@ -103487,25 +103748,25 @@ var init_cron_runner = __esm({
        */
       async executeSteps(schedule, startedAt) {
         const steps = schedule.steps;
-        log15.log(`Executing ${schedule.name} (${schedule.id}): ${steps.length} steps`);
+        log16.log(`Executing ${schedule.name} (${schedule.id}): ${steps.length} steps`);
         const stepResults = [];
         let overallSuccess = true;
         let stoppedEarly = false;
         for (let i = 0; i < steps.length; i++) {
           const step = steps[i];
-          log15.log(`  Step ${i + 1}/${steps.length}: ${step.name} (${step.type})`);
+          log16.log(`  Step ${i + 1}/${steps.length}: ${step.name} (${step.type})`);
           const stepResult = await this.executeStep(schedule, step, i);
           stepResults.push(stepResult);
           if (!stepResult.success) {
             overallSuccess = false;
             if (!step.continueOnFailure) {
-              log15.warn(`  Step "${step.name}" failed \u2014 stopping execution`);
+              log16.warn(`  Step "${step.name}" failed \u2014 stopping execution`);
               stoppedEarly = true;
               break;
             }
-            log15.warn(`  Step "${step.name}" failed \u2014 continuing (continueOnFailure=true)`);
+            log16.warn(`  Step "${step.name}" failed \u2014 continuing (continueOnFailure=true)`);
           } else {
-            log15.log(`  \u2713 Step "${step.name}" completed`);
+            log16.log(`  \u2713 Step "${step.name}" completed`);
           }
         }
         const outputParts = [];
@@ -103518,7 +103779,7 @@ var init_cron_runner = __esm({
         const failedSteps = stepResults.filter((sr) => !sr.success);
         const error = failedSteps.length > 0 ? `${failedSteps.length} step(s) failed: ${failedSteps.map((s) => s.stepName).join(", ")}${stoppedEarly ? " (execution stopped)" : ""}` : void 0;
         const status = overallSuccess ? "\u2713" : "\u2717";
-        log15.log(`${status} ${schedule.name}: ${stepResults.length}/${steps.length} steps executed, ${failedSteps.length} failed`);
+        log16.log(`${status} ${schedule.name}: ${stepResults.length}/${steps.length} steps executed, ${failedSteps.length} failed`);
         return {
           success: overallSuccess,
           output,
@@ -103661,8 +103922,8 @@ var init_cron_runner = __esm({
         const modelProvider = step.modelProvider?.trim() || defaultModel.provider;
         const modelId = step.modelId?.trim() || defaultModel.modelId;
         const model = modelProvider && modelId ? `${modelProvider}/${modelId}` : "default";
-        log15.log(`    AI prompt step "${step.name}" using model: ${model}`);
-        log15.log(`    Prompt: ${step.prompt.slice(0, 100)}${step.prompt.length > 100 ? "\u2026" : ""}`);
+        log16.log(`    AI prompt step "${step.name}" using model: ${model}`);
+        log16.log(`    Prompt: ${step.prompt.slice(0, 100)}${step.prompt.length > 100 ? "\u2026" : ""}`);
         try {
           const resultPromise = this.aiPromptExecutor(step.prompt, modelProvider, modelId);
           const timeoutPromise = new Promise((_resolve, reject2) => {
@@ -103671,7 +103932,7 @@ var init_cron_runner = __esm({
           const response = await Promise.race([resultPromise, timeoutPromise]);
           const responseText = String(response ?? "");
           const output = responseText.length > MAX_OUTPUT_LENGTH ? responseText.slice(0, MAX_OUTPUT_LENGTH) + "\n[output truncated]" : responseText;
-          log15.log(`    \u2713 AI prompt step "${step.name}" completed (${responseText.length} chars)`);
+          log16.log(`    \u2713 AI prompt step "${step.name}" completed (${responseText.length} chars)`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -103683,7 +103944,7 @@ var init_cron_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err.message ?? String(err);
-          log15.warn(`    \u2717 AI prompt step "${step.name}" failed: ${errorMessage}`);
+          log16.warn(`    \u2717 AI prompt step "${step.name}" failed: ${errorMessage}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -103727,7 +103988,7 @@ var init_cron_runner = __esm({
         try {
           const task = await this.store.createTask(taskInput);
           const output = `Created task ${task.id}: ${task.title || task.description.slice(0, 80)}`;
-          log15.log(`    \u2713 Create-task step "${step.name}" created task ${task.id}`);
+          log16.log(`    \u2713 Create-task step "${step.name}" created task ${task.id}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -103739,7 +104000,7 @@ var init_cron_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err.message ?? String(err);
-          log15.warn(`    \u2717 Create-task step "${step.name}" failed: ${errorMessage}`);
+          log16.warn(`    \u2717 Create-task step "${step.name}" failed: ${errorMessage}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -103781,7 +104042,7 @@ function truncateOutput3(stdout, stderr) {
   }
   return output;
 }
-var import_cron_parser4, log16, execAsync12, DEFAULT_TIMEOUT_MS9, MAX_BUFFER2, MAX_OUTPUT_LENGTH2, MAX_CATCH_UP_INTERVALS, RoutineRunner;
+var import_cron_parser4, log17, execAsync12, DEFAULT_TIMEOUT_MS9, MAX_BUFFER2, MAX_OUTPUT_LENGTH2, MAX_CATCH_UP_INTERVALS, RoutineRunner;
 var init_routine_runner = __esm({
   "../engine/src/routine-runner.ts"() {
     "use strict";
@@ -103789,7 +104050,7 @@ var init_routine_runner = __esm({
     init_cron_runner();
     init_logger2();
     init_shell_utils();
-    log16 = createLogger2("routine-runner");
+    log17 = createLogger2("routine-runner");
     execAsync12 = promisify17(exec14);
     DEFAULT_TIMEOUT_MS9 = 5 * 60 * 1e3;
     MAX_BUFFER2 = 1024 * 1024;
@@ -103826,7 +104087,7 @@ var init_routine_runner = __esm({
         }
         const concurrency = routine.executionPolicy ?? "queue";
         if (concurrency === "reject" && this.inFlightExecutions.has(routineId)) {
-          log16.log(`Routine ${routineId} rejected \u2014 already running`);
+          log17.log(`Routine ${routineId} rejected \u2014 already running`);
           return {
             routineId,
             success: false,
@@ -103837,7 +104098,7 @@ var init_routine_runner = __esm({
           };
         }
         if (concurrency === "queue" && this.inFlightExecutions.has(routineId)) {
-          log16.log(`Routine ${routineId} queued \u2014 waiting for existing execution`);
+          log17.log(`Routine ${routineId} queued \u2014 waiting for existing execution`);
           const existingResult = await this.inFlightExecutions.get(routineId);
           if (existingResult) {
             await existingResult;
@@ -103885,7 +104146,7 @@ var init_routine_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err instanceof Error ? err.message : String(err);
-          log16.error(`Routine ${routineId} execution failed: ${errorMessage}`);
+          log17.error(`Routine ${routineId} execution failed: ${errorMessage}`);
           try {
             await this.options.routineStore.completeRoutineExecution(routineId, {
               completedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -103893,7 +104154,7 @@ var init_routine_runner = __esm({
               error: errorMessage
             });
           } catch (persistError) {
-            log16.error(`[${routineId}] Failed to persist error state: ${persistError}`);
+            log17.error(`[${routineId}] Failed to persist error state: ${persistError}`);
           }
           return {
             routineId,
@@ -104155,7 +104416,7 @@ var init_routine_runner = __esm({
           if (missedIntervals.length === 0) {
             return;
           }
-          log16.log(`[${routine.id}] Running ${missedIntervals.length} catch-up executions`);
+          log17.log(`[${routine.id}] Running ${missedIntervals.length} catch-up executions`);
           for (const missedInterval of missedIntervals) {
             try {
               await this.executeRoutine(routine.id, "cron", {
@@ -104163,11 +104424,11 @@ var init_routine_runner = __esm({
                 missedInterval: missedInterval.toISOString()
               });
             } catch (err) {
-              log16.error(`[${routine.id}] Catch-up execution failed: ${err}`);
+              log17.error(`[${routine.id}] Catch-up execution failed: ${err}`);
             }
           }
         } catch (err) {
-          log16.error(`[${routine.id}] Error calculating catch-up intervals: ${err}`);
+          log17.error(`[${routine.id}] Error calculating catch-up intervals: ${err}`);
         }
       }
       /**
@@ -104753,91 +105014,6 @@ var init_stuck_task_detector = __esm({
   }
 });
 
-// ../engine/src/restart-recovery-coordinator.ts
-function hasStepProgress(task) {
-  const steps = Array.isArray(task.steps) ? task.steps : [];
-  return steps.some((step) => step.status === "done" || step.status === "in-progress" || step.status === "skipped");
-}
-function isNoTaskDoneFailure(task) {
-  return task.status === "failed" && typeof task.error === "string" && task.error.toLowerCase().includes("without calling fn_task_done");
-}
-function findMissingWorktreeSessionPrefix(error) {
-  for (const prefix of MISSING_WORKTREE_SESSION_PREFIXES) {
-    if (error.includes(prefix)) {
-      return prefix;
-    }
-  }
-  return null;
-}
-function isMissingWorktreeSessionStartFailure(error) {
-  if (typeof error !== "string") {
-    return false;
-  }
-  return findMissingWorktreeSessionPrefix(error) !== null;
-}
-function extractMissingWorktreePathFromSessionStartFailure(error) {
-  if (typeof error !== "string") return null;
-  const prefix = findMissingWorktreeSessionPrefix(error);
-  if (!prefix) return null;
-  const idx = error.indexOf(prefix);
-  const pathPart = error.slice(idx + prefix.length).trim();
-  return pathPart.length > 0 ? pathPart : null;
-}
-function isRecoverableMissingWorktreeReviewFailure(task) {
-  return task.column === "in-review" && !task.paused && task.status === "failed" && isMissingWorktreeSessionStartFailure(task.error) && hasStepProgress(task);
-}
-var log17, MISSING_WORKTREE_SESSION_PREFIXES, RestartRecoveryCoordinator;
-var init_restart_recovery_coordinator = __esm({
-  "../engine/src/restart-recovery-coordinator.ts"() {
-    "use strict";
-    init_logger2();
-    log17 = createLogger2("restart-recovery");
-    MISSING_WORKTREE_SESSION_PREFIXES = [
-      "Refusing to start coding agent in missing worktree:",
-      "Refusing to start coding agent in incomplete worktree:",
-      "Refusing to start coding agent in unregistered git worktree:"
-    ];
-    RestartRecoveryCoordinator = class {
-      constructor(store, executor) {
-        this.store = store;
-        this.executor = executor;
-      }
-      async recoverInterruptedRuns() {
-        const allInProgress = await this.store.listTasks({ slim: true, column: "in-progress" });
-        const candidates = allInProgress.filter((task) => task.column === "in-progress" && !task.paused);
-        if (candidates.length === 0) return;
-        let requeued = 0;
-        for (const task of candidates) {
-          if (!this.mustSafeRetry(task)) continue;
-          await this.safeRequeue(task);
-          requeued++;
-        }
-        if (requeued > 0) {
-          log17.log(`Restart recovery requeued ${requeued} interrupted task(s) for safe retry`);
-        }
-        await this.executor.resumeOrphaned();
-      }
-      mustSafeRetry(task) {
-        return isNoTaskDoneFailure(task) && !hasStepProgress(task);
-      }
-      async safeRequeue(task) {
-        await this.store.updateTask(task.id, {
-          status: "stuck-killed",
-          worktree: null,
-          branch: null,
-          sessionFile: null,
-          error: null
-        });
-        await this.store.logEntry(
-          task.id,
-          "Restart recovery: interrupted run had no step progress and no fn_task_done \u2014 requeued to todo for safe retry"
-        );
-        await this.store.moveTask(task.id, "todo");
-      }
-    };
-  }
-});
-
 // ../engine/src/self-healing.ts
 import { exec as exec15, execSync as execSync4 } from "node:child_process";
 import { promisify as promisify18 } from "node:util";
@@ -110615,6 +110791,13 @@ var init_in_process_runtime = __esm({
       getMessageStore() {
         return this.messageStore;
       }
+      /**
+       * Get the ChatStore instance (if initialized).
+       * Returns undefined before start() or if initialization fails.
+       */
+      getChatStore() {
+        return this.chatStore;
+      }
       /**
        * Get the project's Scheduler instance.
        * @throws Error if runtime has not been started
@@ -113588,6 +113771,10 @@ ${detail}`
       getMessageStore() {
         return this.runtime.getMessageStore();
       }
+      /** Get the ChatStore (if initialized). Returns undefined before start(). */
+      getChatStore() {
+        return this.runtime.getChatStore();
+      }
       attachChatStore(chatStore) {
         this.notificationService?.attachChatStore(chatStore);
       }
@@ -119389,6 +119576,7 @@ PREFER structured question types over free-text. This makes the interview faster
 - Features should be specific and actionable
 - ALWAYS include verification/acceptance criteria at every level:
   - Milestone: "verification" field \u2014 how to confirm this phase is complete (e.g., "All API endpoints return correct responses, integration tests pass")
+  - Milestone: optional "acceptanceCriteria" field for explicit milestone-level completion bars (if omitted, acceptance can be auto-derived from child feature criteria/descriptions)
   - Slice: "verification" field \u2014 how to confirm this work unit is done (e.g., "Auth flow works end-to-end from signup through login")
   - Feature: "acceptanceCriteria" field \u2014 how to verify this specific deliverable (e.g., "JWT tokens expire after 1 hour and refresh correctly")
 - Suggest sensible defaults and push for specificity
@@ -119411,7 +119599,7 @@ For text question (use ONLY for names, URLs, or truly unique free-form input):
 {"type": "question", "data": {"id": "q-project-name", "type": "text", "question": "What is the project or product name?", "description": "Used in documentation and configuration"}}
 
 For completion (when you have enough information):
-{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`;
+{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "acceptanceCriteria": "Optional explicit milestone criteria (omit to auto-derive from features)", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`;
     sessions3 = /* @__PURE__ */ new Map();
     rateLimits3 = /* @__PURE__ */ new Map();
     cleanupInterval4 = setInterval(cleanupExpiredSessions3, CLEANUP_INTERVAL_MS4);
@@ -130592,9 +130780,13 @@ function cacheKeyForStore(store) {
 }
 function getOrCreateScopedChatStore(store, fallbackChatStore) {
   const key = cacheKeyForStore(store);
+  if (fallbackChatStore) {
+    scopedChatStoreCache.set(key, fallbackChatStore);
+    return fallbackChatStore;
+  }
   const cached = scopedChatStoreCache.get(key);
   if (cached) return cached;
-  const chatStore = fallbackChatStore ?? new ChatStore(store.getFusionDir(), store.getDatabase());
+  const chatStore = new ChatStore(store.getFusionDir(), store.getDatabase());
   scopedChatStoreCache.set(key, chatStore);
   return chatStore;
 }
@@ -130609,9 +130801,10 @@ async function resolveProjectChatContext(options) {
   const engine = engineManager?.getEngine(projectId);
   try {
     const scopedStore = engine?.getTaskStore() ?? await getOrCreateProjectStore(projectId);
+    const engineChatStore = engine?.getChatStore?.();
     return {
       store: scopedStore,
-      chatStore: getOrCreateScopedChatStore(scopedStore)
+      chatStore: getOrCreateScopedChatStore(scopedStore, engineChatStore)
     };
   } catch {
     return {
@@ -130844,14 +131037,17 @@ function registerChatRoomRoutes(ctx) {
       const { chatStore } = await resolveRoomScopedServices(req, getRequestedProjectId(req));
       const room = chatStore.getRoom(roomId);
       if (!room) throw notFound(`Chat room ${roomId} not found`);
-      const { limit: limitStr, offset: offsetStr, before } = req.query;
+      const { limit: limitStr, offset: offsetStr, before, order: orderStr } = req.query;
       const limit = limitStr !== void 0 ? parseInt(String(limitStr), 10) : 50;
       const offset = offsetStr !== void 0 ? parseInt(String(offsetStr), 10) : 0;
+      const order = orderStr === void 0 ? "asc" : String(orderStr);
       if (!Number.isFinite(limit) || limit < 1) throw badRequest("limit must be a positive integer");
       if (!Number.isFinite(offset) || offset < 0) throw badRequest("offset must be a non-negative integer");
+      if (order !== "asc" && order !== "desc") throw badRequest("order must be either asc or desc");
       const messages = chatStore.getRoomMessages(roomId, {
         limit,
         offset,
+        order,
         ...before ? { before } : {}
       });
       res.json({ messages });
@@ -181307,7 +181503,7 @@ var init_register_auth_routes = __esm({
         if (!origin || isLocalhostOrigin(origin)) {
           return false;
         }
-        if (providerId === "openai-codex" || providerId === "anthropic") {
+        if (providerId === "openai-codex" || providerId === "anthropic" || providerId === "github-copilot") {
           return false;
         }
         return true;
@@ -183080,7 +183276,8 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
           const milestone = missionStore.addMilestone(mission.id, {
             title: milestoneData.title,
             description: milestoneData.description || void 0,
-            verification: milestoneData.verification
+            verification: milestoneData.verification,
+            acceptanceCriteria: milestoneData.acceptanceCriteria
           });
           const milestoneAssertionText = milestoneData.verification || milestoneData.description || `Verify milestone completion: ${milestoneData.title}`;
           missionStore.addContractAssertion(milestone.id, {
@@ -183115,6 +183312,7 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
               missionStore.linkFeatureToAssertion(feature.id, assertion.id);
             }
           }
+          missionStore.applyDerivedMilestoneAcceptanceCriteria(milestone.id);
         }
         cleanupMissionInterviewSession2(sessionId);
         const result = missionStore.getMissionWithHierarchy(mission.id);
@@ -183321,7 +183519,7 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
     "/:missionId/milestones",
     catchTypedHandler(async (req, res) => {
       const { missionId } = req.params;
-      const { title, description, dependencies } = req.body;
+      const { title, description, dependencies, acceptanceCriteria } = req.body;
       if (!validateMissionId(missionId)) {
         throw badRequest("Invalid mission ID format");
       }
@@ -183332,10 +183530,12 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
       const validatedTitle = validateTitle(title);
       const validatedDescription = validateDescription2(description);
       const validatedDependencies = validateStringArray(dependencies, "dependencies");
+      const validatedAcceptanceCriteria = validateDescription2(acceptanceCriteria);
       const input = {
         title: validatedTitle,
         description: validatedDescription,
-        dependencies: validatedDependencies
+        dependencies: validatedDependencies,
+        acceptanceCriteria: validatedAcceptanceCriteria
       };
       const milestone = missionStore.addMilestone(missionId, input);
       res.status(201).json(milestone);
@@ -183384,7 +183584,7 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
     "/milestones/:milestoneId",
     catchTypedHandler(async (req, res) => {
       const { milestoneId } = req.params;
-      const { title, description, status, dependencies } = req.body;
+      const { title, description, status, dependencies, acceptanceCriteria } = req.body;
       if (!validateMilestoneId(milestoneId)) {
         throw badRequest("Invalid milestone ID format");
       }
@@ -183401,6 +183601,9 @@ function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExe
       if (dependencies !== void 0) {
         updates.dependencies = validateStringArray(dependencies, "dependencies");
       }
+      if (acceptanceCriteria !== void 0) {
+        updates.acceptanceCriteria = validateDescription2(acceptanceCriteria);
+      }
       if (Object.keys(updates).length === 0) {
         throw badRequest("No valid fields to update");
       }
@@ -198903,7 +199106,7 @@ function createServer(store, options) {
       if (engineManager) {
         const engine2 = engineManager.getEngine(projectId);
         scopedStore = engine2?.getTaskStore() ?? await getOrCreateProjectStore(projectId);
-        scopedChatStore = getOrCreateScopedChatStore(scopedStore);
+        scopedChatStore = getOrCreateScopedChatStore(scopedStore, engine2?.getChatStore?.());
         agentStore = engine2?.getAgentStore();
         messageStore = engine2?.getMessageStore();
         automationStore = engine2?.getAutomationStore();