@runfusion/fusion 0.30.0 → 0.31.0

package/dist/extension.js

@@ -864,6 +864,7 @@ Your job: help users transform high-level goals into structured mission plans wi
 - Features should be specific and actionable
 - ALWAYS include verification/acceptance criteria at every level:
   - Milestone: "verification" field \u2014 how to confirm this phase is complete (e.g., "All API endpoints return correct responses, integration tests pass")
+  - Milestone: optional "acceptanceCriteria" field for explicit milestone-level completion bars (if omitted, acceptance can be auto-derived from child feature criteria/descriptions)
   - Slice: "verification" field \u2014 how to confirm this work unit is done (e.g., "Auth flow works end-to-end from signup through login")
   - Feature: "acceptanceCriteria" field \u2014 how to verify this specific deliverable (e.g., "JWT tokens expire after 1 hour and refresh correctly")
 - Suggest sensible defaults and push for specificity
@@ -877,7 +878,7 @@ For questions:
 {"type": "question", "data": {"id": "unique-id", "type": "text|single_select|multi_select|confirm", "question": "The question text", "description": "Helpful context", "options": [{"id": "opt1", "label": "Option 1", "description": "Details"}]}}
 
 For completion (when you have enough information):
-{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`
+{"type": "complete", "data": {"missionTitle": "Refined mission title", "missionDescription": "Comprehensive mission description based on the conversation", "milestones": [{"title": "Milestone title", "description": "What this phase achieves", "verification": "How to confirm this milestone is complete", "acceptanceCriteria": "Optional explicit milestone criteria (omit to auto-derive from features)", "slices": [{"title": "Slice title", "description": "What this work unit covers", "verification": "How to confirm this slice is done", "features": [{"title": "Feature title", "description": "What to build", "acceptanceCriteria": "How to verify this feature works"}]}]}]}}`
       },
       "ai-refine-system": {
         key: "ai-refine-system",
@@ -1449,7 +1450,7 @@ function validateMessageMetadata(metadata) {
     throw new Error("metadata.wakeRecipient must be a boolean");
   }
 }
-var THINKING_LEVELS, COLUMNS, DEFAULT_COLUMN, TASK_PRIORITIES, DEFAULT_TASK_PRIORITY, HIGH_FANOUT_BLOCKER_TODO_THRESHOLD, STALE_HIGH_FANOUT_BLOCKER_AGE_THRESHOLD_MS, EXECUTION_MODES, DEFAULT_EXECUTION_MODE, THEME_MODES, COLOR_THEMES, MERGE_STRATEGY_OVERLAP_BEHAVIORS, POST_MERGE_AUDIT_MODES, MERGE_AUDIT_AUTO_RECOVERY_MODES, AUTO_RECOVERY_MODES, NOTIFICATION_EVENTS, WORKFLOW_STEP_TEMPLATES, DOCUMENT_KEY_RE, REPO_OVERRIDE_RE, CheckoutConflictError, SHARED_STATE_SNAPSHOT_VERSION, COLUMN_LABELS, COLUMN_DESCRIPTIONS, VALID_TRANSITIONS, AGENT_VALID_TRANSITIONS, AGENT_PERMISSIONS, PERMANENT_AGENT_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_ACTION_CATEGORIES, AGENT_PROVISIONING_APPROVAL_MODES, AGENT_PERMISSION_POLICY_PRESET_IDS, APPROVAL_REQUEST_STATUSES, APPROVAL_REQUEST_AUDIT_EVENT_TYPES, LEGACY_AGENT_PERMISSION_POLICY_ACTION_CATEGORY_ALIASES, DEFAULT_HEARTBEAT_PROCEDURE_PATH, DASHBOARD_USER_ID, DASHBOARD_USER_ALIASES;
+var THINKING_LEVELS, COLUMNS, DEFAULT_COLUMN, TASK_PRIORITIES, DEFAULT_TASK_PRIORITY, HIGH_FANOUT_BLOCKER_TODO_THRESHOLD, STALE_HIGH_FANOUT_BLOCKER_AGE_THRESHOLD_MS, EXECUTION_MODES, DEFAULT_EXECUTION_MODE, THEME_MODES, COLOR_THEMES, MERGE_STRATEGY_OVERLAP_BEHAVIORS, POST_MERGE_AUDIT_MODES, MERGE_AUDIT_AUTO_RECOVERY_MODES, AUTO_RECOVERY_MODES, NOTIFICATION_EVENTS, WORKFLOW_STEP_TEMPLATES, DOCUMENT_KEY_RE, REPO_OVERRIDE_RE, CheckoutConflictError, SHARED_STATE_SNAPSHOT_VERSION, COLUMN_LABELS, COLUMN_DESCRIPTIONS, VALID_TRANSITIONS, AGENT_VALID_TRANSITIONS, AGENT_PERMISSIONS, PERMANENT_AGENT_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_ACTION_CATEGORIES, AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES, AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES, AGENT_PROVISIONING_APPROVAL_MODES, AGENT_PERMISSION_POLICY_PRESET_IDS, APPROVAL_REQUEST_STATUSES, APPROVAL_REQUEST_AUDIT_EVENT_TYPES, LEGACY_AGENT_PERMISSION_POLICY_ACTION_CATEGORY_ALIASES, DEFAULT_HEARTBEAT_PROCEDURE_PATH, DASHBOARD_USER_ID, DASHBOARD_USER_ALIASES;
 var init_types = __esm({
   "../core/src/types.ts"() {
     "use strict";
@@ -1883,6 +1884,36 @@ Do NOT spend time on nits when no real issues exist.`
       "network_api",
       "task_agent_mutation"
     ];
+    AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES = {
+      git_write: ["git commit", "git push", "git merge", "git branch -d", "git worktree add", "write", "edit"],
+      file_write_delete: ["write", "edit", "fn_task_attach"],
+      command_execution: ["bash (non-git)", "read", "find", "grep", "ls"],
+      network_api: ["fn_research_run (web/research)", "fn_web_fetch"],
+      task_agent_mutation: [
+        "fn_task_create",
+        "fn_delegate_task",
+        "fn_task_import_github",
+        "fn_task_import_github_issue",
+        "fn_spawn_agent",
+        "fn_update_agent_config",
+        "fn_update_identity"
+      ]
+    };
+    AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES = [
+      "fn_send_message",
+      "fn_post_room_message",
+      "fn_read_messages",
+      "fn_task_log",
+      "fn_task_done",
+      "fn_heartbeat_done",
+      "fn_task_document_write",
+      "fn_task_document_read",
+      "fn_memory_search",
+      "fn_memory_get",
+      "fn_memory_append",
+      "fn_read_evaluations",
+      "fn_reflect_on_performance"
+    ];
     AGENT_PROVISIONING_APPROVAL_MODES = ["always", "trusted-only", "never"];
     AGENT_PERMISSION_POLICY_PRESET_IDS = ["unrestricted", "approval-required", "locked-down", "custom"];
     APPROVAL_REQUEST_STATUSES = ["pending", "approved", "denied", "completed"];
@@ -3725,7 +3756,7 @@ var init_db = __esm({
     DEFAULT_SQLITE_BUSY_TIMEOUT_MS = 5e3;
     DEFAULT_SQLITE_LOCK_RECOVERY_WINDOW_MS = 1e3;
     DEFAULT_SQLITE_LOCK_RECOVERY_DELAY_MS = 50;
-    SCHEMA_VERSION = 79;
+    SCHEMA_VERSION = 81;
     SCHEMA_SQL = `
 -- Tasks table with JSON columns for nested data
 CREATE TABLE IF NOT EXISTS tasks (
@@ -3780,6 +3811,8 @@ CREATE TABLE IF NOT EXISTS tasks (
   createdAt TEXT NOT NULL,
   updatedAt TEXT NOT NULL,
   columnMovedAt TEXT,
+  firstExecutionAt TEXT,
+  cumulativeActiveMs INTEGER,
   executionStartedAt TEXT,
   executionCompletedAt TEXT,
   -- JSON columns for nested arrays/objects
@@ -4247,6 +4280,7 @@ CREATE TABLE IF NOT EXISTS milestones (
   orderIndex INTEGER NOT NULL,
   interviewState TEXT NOT NULL,
   dependencies TEXT DEFAULT '[]',
+  acceptanceCriteria TEXT,
   createdAt TEXT NOT NULL,
   updatedAt TEXT NOT NULL,
   FOREIGN KEY (missionId) REFERENCES missions(id) ON DELETE CASCADE
@@ -6367,6 +6401,25 @@ This means a caller passed a .fusion directory where a project root was expected
             this.addColumnIfMissing("tasks", "overlapBlockedBy", "TEXT");
           });
         }
+        if (version < 80) {
+          this.applyMigration(80, () => {
+            this.addColumnIfMissing("milestones", "acceptanceCriteria", "TEXT");
+          });
+        }
+        if (version < 81) {
+          this.applyMigration(81, () => {
+            this.addColumnIfMissing("tasks", "firstExecutionAt", "TEXT");
+            this.addColumnIfMissing("tasks", "cumulativeActiveMs", "INTEGER");
+            if (this.hasColumn("tasks", "executionStartedAt")) {
+              this.db.prepare(
+                `UPDATE tasks
+               SET firstExecutionAt = executionStartedAt
+               WHERE firstExecutionAt IS NULL
+                 AND executionStartedAt IS NOT NULL`
+              ).run();
+            }
+          });
+        }
       }
       /**
        * Run a single migration step inside a transaction and bump the version.
@@ -10609,6 +10662,21 @@ var init_db_migrate = __esm({
 
 // ../core/src/mission-store.ts
 import { EventEmitter as EventEmitter4 } from "node:events";
+function deriveMilestoneAcceptanceCriteriaFromFeatures(features) {
+  const lines = features.map((feature) => {
+    const acceptance = feature.acceptanceCriteria?.trim();
+    const description = feature.description?.trim();
+    const text = acceptance && acceptance.length > 0 ? acceptance : description && description.length > 0 ? description : void 0;
+    if (!text) {
+      return void 0;
+    }
+    return `- ${feature.title}: ${text}`;
+  }).filter((line) => Boolean(line));
+  if (lines.length === 0) {
+    return void 0;
+  }
+  return lines.join("\n");
+}
 var DEFAULT_IMPLEMENTATION_RETRY_BUDGET, MissionStore;
 var init_mission_store = __esm({
   "../core/src/mission-store.ts"() {
@@ -10670,6 +10738,7 @@ var init_mission_store = __esm({
           dependencies: fromJson(row.dependencies) || [],
           planningNotes: row.planningNotes || void 0,
           verification: row.verification || void 0,
+          acceptanceCriteria: row.acceptanceCriteria || void 0,
           validationState: row.validationState || "not_started",
           createdAt: row.createdAt,
           updatedAt: row.updatedAt
@@ -11382,13 +11451,14 @@ var init_mission_store = __esm({
           dependencies: input.dependencies || [],
           planningNotes: input.planningNotes,
           verification: input.verification,
+          acceptanceCriteria: input.acceptanceCriteria,
           validationState: "not_started",
           createdAt: now,
           updatedAt: now
         };
         this.db.prepare(`
-      INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, validationState, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, acceptanceCriteria, validationState, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `).run(
           milestone.id,
           milestone.missionId,
@@ -11400,6 +11470,7 @@ var init_mission_store = __esm({
           toJson(milestone.dependencies),
           milestone.planningNotes ?? null,
           milestone.verification ?? null,
+          milestone.acceptanceCriteria ?? null,
           milestone.validationState,
           milestone.createdAt,
           milestone.updatedAt
@@ -11463,6 +11534,7 @@ var init_mission_store = __esm({
         dependencies = ?,
         planningNotes = ?,
         verification = ?,
+        acceptanceCriteria = ?,
         validationState = ?,
         updatedAt = ?
       WHERE id = ?
@@ -11475,6 +11547,7 @@ var init_mission_store = __esm({
           toJson(updated.dependencies),
           updated.planningNotes ?? null,
           updated.verification ?? null,
+          updated.acceptanceCriteria ?? null,
           updated.validationState || "not_started",
           updated.updatedAt,
           updated.id
@@ -11538,6 +11611,21 @@ var init_mission_store = __esm({
       updateMilestoneInterviewState(id, state) {
         return this.updateMilestone(id, { interviewState: state });
       }
+      applyDerivedMilestoneAcceptanceCriteria(milestoneId) {
+        const milestone = this.getMilestone(milestoneId);
+        if (!milestone) {
+          throw new Error(`Milestone ${milestoneId} not found`);
+        }
+        if (milestone.acceptanceCriteria?.trim()) {
+          return milestone;
+        }
+        const features = this.listSlices(milestoneId).flatMap((slice) => this.listFeatures(slice.id));
+        const derivedAcceptanceCriteria = deriveMilestoneAcceptanceCriteriaFromFeatures(features);
+        if (!derivedAcceptanceCriteria) {
+          return milestone;
+        }
+        return this.updateMilestone(milestoneId, { acceptanceCriteria: derivedAcceptanceCriteria });
+      }
       // ── Slice Operations ───────────────────────────────────────────────
       /**
        * Add a slice to a milestone.
@@ -11809,6 +11897,7 @@ var init_mission_store = __esm({
         this.db.bumpLastModified();
         this.emit("feature:created", feature);
         this.recomputeSliceStatus(sliceId);
+        this.applyDerivedMilestoneAcceptanceCriteria(slice.milestoneId);
         return feature;
       }
       /**
@@ -13178,11 +13267,11 @@ ${feature.acceptanceCriteria}`);
           applied++;
         }
         for (const milestone of snapshot.payload.milestones) {
-          this.db.prepare(`INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, validationState, createdAt, updatedAt)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+          this.db.prepare(`INSERT INTO milestones (id, missionId, title, description, status, orderIndex, interviewState, dependencies, planningNotes, verification, acceptanceCriteria, validationState, createdAt, updatedAt)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
         ON CONFLICT(id) DO UPDATE SET title=excluded.title, description=excluded.description, status=excluded.status, orderIndex=excluded.orderIndex,
           interviewState=excluded.interviewState, dependencies=excluded.dependencies, planningNotes=excluded.planningNotes, verification=excluded.verification,
-          validationState=excluded.validationState, updatedAt=excluded.updatedAt`).run(
+          acceptanceCriteria=excluded.acceptanceCriteria, validationState=excluded.validationState, updatedAt=excluded.updatedAt`).run(
             milestone.id,
             milestone.missionId,
             milestone.title,
@@ -13193,6 +13282,7 @@ ${feature.acceptanceCriteria}`);
             toJsonNullable(milestone.dependencies),
             milestone.planningNotes ?? null,
             milestone.verification ?? null,
+            milestone.acceptanceCriteria ?? null,
             milestone.validationState ?? null,
             milestone.createdAt,
             milestone.updatedAt
@@ -37224,6 +37314,8 @@ var init_store = __esm({
           createdAt: row.createdAt,
           updatedAt: row.updatedAt,
           columnMovedAt: row.columnMovedAt || void 0,
+          firstExecutionAt: row.firstExecutionAt || void 0,
+          cumulativeActiveMs: row.cumulativeActiveMs ?? void 0,
           executionStartedAt: row.executionStartedAt || void 0,
           executionCompletedAt: row.executionCompletedAt || void 0,
           dependencies: fromJson(row.dependencies) || [],
@@ -37351,6 +37443,8 @@ var init_store = __esm({
           createdAt: entry.createdAt,
           updatedAt: entry.updatedAt,
           columnMovedAt: entry.columnMovedAt,
+          firstExecutionAt: entry.firstExecutionAt,
+          cumulativeActiveMs: entry.cumulativeActiveMs,
           executionStartedAt: entry.executionStartedAt,
           executionCompletedAt: entry.executionCompletedAt,
           modelPresetId: entry.modelPresetId,
@@ -37458,6 +37552,8 @@ ${recentText}` : void 0
           createdAt: task.createdAt,
           updatedAt: task.updatedAt,
           columnMovedAt: task.columnMovedAt,
+          firstExecutionAt: task.firstExecutionAt,
+          cumulativeActiveMs: task.cumulativeActiveMs,
           executionStartedAt: task.executionStartedAt,
           executionCompletedAt: task.executionCompletedAt,
           archivedAt,
@@ -37575,6 +37671,8 @@ ${recentText}` : void 0
           "createdAt",
           "updatedAt",
           "columnMovedAt",
+          "firstExecutionAt",
+          "cumulativeActiveMs",
           "executionStartedAt",
           "executionCompletedAt",
           "dependencies",
@@ -37711,6 +37809,8 @@ ${outcome}`;
           "createdAt",
           "updatedAt",
           "columnMovedAt",
+          "firstExecutionAt",
+          "cumulativeActiveMs",
           "executionStartedAt",
           "executionCompletedAt",
           "dependencies",
@@ -37836,6 +37936,8 @@ ${outcome}`;
           task.createdAt,
           task.updatedAt,
           task.columnMovedAt ?? null,
+          task.firstExecutionAt ?? null,
+          task.cumulativeActiveMs ?? null,
           task.executionStartedAt ?? null,
           task.executionCompletedAt ?? null,
           toJson(task.dependencies || []),
@@ -37900,7 +38002,7 @@ ${outcome}`;
         workflowStepRetries, stuckKillCount, postReviewFixCount, recoveryRetryCount, taskDoneRetryCount, verificationFailureCount, mergeConflictBounceCount, mergeAuditBounceCount, branchConflictRecoveryCount, reviewerContextRetryCount, reviewerFallbackRetryCount, nextRecoveryAt, error,
         summary, thinkingLevel, executionMode, tokenUsageInputTokens, tokenUsageOutputTokens, tokenUsageCachedTokens,
         tokenUsageCacheWriteTokens, tokenUsageTotalTokens, tokenUsageFirstUsedAt, tokenUsageLastUsedAt, tokenBudgetSoftAlertedAt, tokenBudgetHardAlertedAt, tokenBudgetOverride, createdAt, updatedAt, columnMovedAt,
-        executionStartedAt, executionCompletedAt,
+        firstExecutionAt, cumulativeActiveMs, executionStartedAt, executionCompletedAt,
         dependencies, steps, log, attachments, steeringComments,
         comments, review, reviewState, workflowStepResults, prInfo, issueInfo, githubTracking,
         sourceIssueProvider, sourceIssueRepository, sourceIssueExternalIssueId, sourceIssueNumber, sourceIssueUrl,
@@ -37924,7 +38026,7 @@ ${outcome}`;
         workflowStepRetries, stuckKillCount, postReviewFixCount, recoveryRetryCount, taskDoneRetryCount, verificationFailureCount, mergeConflictBounceCount, mergeAuditBounceCount, branchConflictRecoveryCount, reviewerContextRetryCount, reviewerFallbackRetryCount, nextRecoveryAt, error,
         summary, thinkingLevel, executionMode, tokenUsageInputTokens, tokenUsageOutputTokens, tokenUsageCachedTokens,
         tokenUsageCacheWriteTokens, tokenUsageTotalTokens, tokenUsageFirstUsedAt, tokenUsageLastUsedAt, tokenBudgetSoftAlertedAt, tokenBudgetHardAlertedAt, tokenBudgetOverride, createdAt, updatedAt, columnMovedAt,
-        executionStartedAt, executionCompletedAt,
+        firstExecutionAt, cumulativeActiveMs, executionStartedAt, executionCompletedAt,
         dependencies, steps, log, attachments, steeringComments,
         comments, review, reviewState, workflowStepResults, prInfo, issueInfo, githubTracking,
         sourceIssueProvider, sourceIssueRepository, sourceIssueExternalIssueId, sourceIssueNumber, sourceIssueUrl,
@@ -37986,6 +38088,8 @@ ${outcome}`;
         createdAt = excluded.createdAt,
         updatedAt = excluded.updatedAt,
         columnMovedAt = excluded.columnMovedAt,
+        firstExecutionAt = excluded.firstExecutionAt,
+        cumulativeActiveMs = excluded.cumulativeActiveMs,
         executionStartedAt = excluded.executionStartedAt,
         executionCompletedAt = excluded.executionCompletedAt,
         dependencies = excluded.dependencies,
@@ -39643,10 +39747,20 @@ ${newTask.description}
           task.column = toColumn;
           task.columnMovedAt = (/* @__PURE__ */ new Date()).toISOString();
           task.updatedAt = task.columnMovedAt;
-          if (toColumn === "in-progress" && !task.executionStartedAt) {
-            task.executionStartedAt = task.columnMovedAt;
+          if (fromColumn === "in-progress" && toColumn !== "in-progress") {
+            const segmentStartMs = Date.parse(task.executionStartedAt ?? task.columnMovedAt);
+            const segmentEndMs = Date.parse(task.columnMovedAt);
+            const segmentDeltaMs = Number.isFinite(segmentStartMs) && Number.isFinite(segmentEndMs) ? Math.max(0, segmentEndMs - segmentStartMs) : 0;
+            task.cumulativeActiveMs = Math.max(0, task.cumulativeActiveMs ?? 0) + segmentDeltaMs;
           }
           if (toColumn === "in-progress") {
+            task.cumulativeActiveMs ??= 0;
+            if (!task.firstExecutionAt) {
+              task.firstExecutionAt = task.columnMovedAt;
+            }
+            if (!task.executionStartedAt) {
+              task.executionStartedAt = task.columnMovedAt;
+            }
             task.userPaused = void 0;
           }
           if (toColumn === "done" && !task.executionCompletedAt) {
@@ -40088,6 +40202,16 @@ ${newTask.description}
           } else if (updates.sessionFile !== void 0) {
             task.sessionFile = updates.sessionFile;
           }
+          if (updates.firstExecutionAt === null) {
+            task.firstExecutionAt = void 0;
+          } else if (updates.firstExecutionAt !== void 0) {
+            task.firstExecutionAt = updates.firstExecutionAt;
+          }
+          if (updates.cumulativeActiveMs === null) {
+            task.cumulativeActiveMs = void 0;
+          } else if (updates.cumulativeActiveMs !== void 0) {
+            task.cumulativeActiveMs = updates.cumulativeActiveMs;
+          }
           if (updates.executionStartedAt === null) {
             task.executionStartedAt = void 0;
           } else if (updates.executionStartedAt !== void 0) {
@@ -40219,6 +40343,7 @@ ${newTask.description}
           }
           if (!paused) {
             task.pausedByAgentId = void 0;
+            task.userPaused = void 0;
           }
           if (task.column === "in-progress" || task.column === "in-review") {
             task.status = paused ? "paused" : void 0;
@@ -60257,13 +60382,15 @@ var init_chat_store = __esm({
           whereClauses.push("createdAt < ?");
           params.push(filter.before);
         }
+        const order = filter?.order === "desc" ? "DESC" : "ASC";
         const rows = this.db.prepare(`
       SELECT * FROM chat_room_messages
       WHERE ${whereClauses.join(" AND ")}
-      ORDER BY createdAt ASC
+      ORDER BY createdAt ${order}
       LIMIT ? OFFSET ?
     `).all(...params, filter?.limit ?? 100, filter?.offset ?? 0);
-        return rows.map((row) => this.rowToRoomMessage(row));
+        const normalizedRows = filter?.order === "desc" ? [...rows].reverse() : rows;
+        return normalizedRows.map((row) => this.rowToRoomMessage(row));
       }
       listRoomMessagesSince(roomId, sinceIso, options) {
         const whereClauses = ["roomId = ?", "createdAt > ?"];
@@ -60544,6 +60671,8 @@ var src_exports = {};
 __export(src_exports, {
   AGENT_PERMISSIONS: () => AGENT_PERMISSIONS,
   AGENT_PERMISSION_POLICY_ACTION_CATEGORIES: () => AGENT_PERMISSION_POLICY_ACTION_CATEGORIES,
+  AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES: () => AGENT_PERMISSION_POLICY_CATEGORY_TOOL_EXAMPLES,
+  AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES: () => AGENT_PERMISSION_POLICY_EXEMPT_TOOL_EXAMPLES,
   AGENT_PERMISSION_POLICY_PRESET_IDS: () => AGENT_PERMISSION_POLICY_PRESET_IDS,
   AGENT_PROVISIONING_APPROVAL_MODES: () => AGENT_PROVISIONING_APPROVAL_MODES,
   AGENT_VALID_TRANSITIONS: () => AGENT_VALID_TRANSITIONS,
@@ -61604,6 +61733,7 @@ var init_gating_classifications = __esm({
       "fn_slice_activate",
       "fn_feature_link_task",
       "fn_feature_update",
+      "fn_milestone_update",
       "fn_agent_stop",
       "fn_agent_start"
     ];
@@ -61624,9 +61754,15 @@ var init_gating_classifications = __esm({
     NETWORK_API_TOOLS = /* @__PURE__ */ new Set([
       "fn_research_run",
       "fn_research_cancel",
-      "fn_research_retry"
+      "fn_research_retry",
+      "fn_web_fetch"
+      // FN-4603: outbound HTTP fetch should be network-classified.
+    ]);
+    ACTION_GATE_NETWORK_API_TOOLS = /* @__PURE__ */ new Set([
+      "fn_research_run",
+      "fn_web_fetch"
+      // FN-4603: honor network_api approval policy for web fetches.
     ]);
-    ACTION_GATE_NETWORK_API_TOOLS = /* @__PURE__ */ new Set(["fn_research_run"]);
     READONLY_FN_TOOLS = /* @__PURE__ */ new Set([
       "fn_task_list",
       "fn_task_show",
@@ -83430,6 +83566,91 @@ var init_auto_recovery = __esm({
   }
 });
 
+// ../engine/src/restart-recovery-coordinator.ts
+function hasStepProgress(task) {
+  const steps = Array.isArray(task.steps) ? task.steps : [];
+  return steps.some((step) => step.status === "done" || step.status === "in-progress" || step.status === "skipped");
+}
+function isNoTaskDoneFailure(task) {
+  return task.status === "failed" && typeof task.error === "string" && task.error.toLowerCase().includes("without calling fn_task_done");
+}
+function findMissingWorktreeSessionPrefix(error) {
+  for (const prefix of MISSING_WORKTREE_SESSION_PREFIXES) {
+    if (error.includes(prefix)) {
+      return prefix;
+    }
+  }
+  return null;
+}
+function isMissingWorktreeSessionStartFailure(error) {
+  if (typeof error !== "string") {
+    return false;
+  }
+  return findMissingWorktreeSessionPrefix(error) !== null;
+}
+function extractMissingWorktreePathFromSessionStartFailure(error) {
+  if (typeof error !== "string") return null;
+  const prefix = findMissingWorktreeSessionPrefix(error);
+  if (!prefix) return null;
+  const idx = error.indexOf(prefix);
+  const pathPart = error.slice(idx + prefix.length).trim();
+  return pathPart.length > 0 ? pathPart : null;
+}
+function isRecoverableMissingWorktreeReviewFailure(task) {
+  return task.column === "in-review" && !task.paused && task.status === "failed" && isMissingWorktreeSessionStartFailure(task.error) && hasStepProgress(task);
+}
+var log14, MISSING_WORKTREE_SESSION_PREFIXES, RestartRecoveryCoordinator;
+var init_restart_recovery_coordinator = __esm({
+  "../engine/src/restart-recovery-coordinator.ts"() {
+    "use strict";
+    init_logger2();
+    log14 = createLogger2("restart-recovery");
+    MISSING_WORKTREE_SESSION_PREFIXES = [
+      "Refusing to start coding agent in missing worktree:",
+      "Refusing to start coding agent in incomplete worktree:",
+      "Refusing to start coding agent in unregistered git worktree:"
+    ];
+    RestartRecoveryCoordinator = class {
+      constructor(store, executor) {
+        this.store = store;
+        this.executor = executor;
+      }
+      async recoverInterruptedRuns() {
+        const allInProgress = await this.store.listTasks({ slim: true, column: "in-progress" });
+        const candidates = allInProgress.filter((task) => task.column === "in-progress" && !task.paused);
+        if (candidates.length === 0) return;
+        let requeued = 0;
+        for (const task of candidates) {
+          if (!this.mustSafeRetry(task)) continue;
+          await this.safeRequeue(task);
+          requeued++;
+        }
+        if (requeued > 0) {
+          log14.log(`Restart recovery requeued ${requeued} interrupted task(s) for safe retry`);
+        }
+        await this.executor.resumeOrphaned();
+      }
+      mustSafeRetry(task) {
+        return isNoTaskDoneFailure(task) && !hasStepProgress(task);
+      }
+      async safeRequeue(task) {
+        await this.store.updateTask(task.id, {
+          status: "stuck-killed",
+          worktree: null,
+          branch: null,
+          sessionFile: null,
+          error: null
+        });
+        await this.store.logEntry(
+          task.id,
+          "Restart recovery: interrupted run had no step progress and no fn_task_done \u2014 requeued to todo for safe retry"
+        );
+        await this.store.moveTask(task.id, "todo");
+      }
+    };
+  }
+});
+
 // ../engine/src/auto-recovery-handlers/branch-worktree.ts
 import { exec as exec9 } from "node:child_process";
 import { existsSync as existsSync32 } from "node:fs";
@@ -84603,6 +84824,7 @@ var init_executor = __esm({
     init_prompt_layers();
     init_run_audit();
     init_auto_recovery();
+    init_restart_recovery_coordinator();
     init_branch_worktree();
     init_contamination();
     init_file_scope();
@@ -87286,7 +87508,22 @@ ${summary}`,
                 this.options.onComplete?.(task);
               } else {
                 let taskDoneSessionRetries = 0;
+                let retryAbortedDueToReclaim = false;
                 while (!taskDone && taskDoneSessionRetries < MAX_TASK_DONE_SESSION_RETRIES) {
+                  const liveTask = await this.store.getTask(task.id);
+                  const hasExplicitWorktreeBinding = typeof liveTask.worktree === "string" || liveTask.worktree === null;
+                  const hasExplicitBranchBinding = typeof liveTask.branch === "string" || liveTask.branch === null;
+                  const worktreeContractIntact = liveTask.column === "in-progress" && !liveTask.paused && (!hasExplicitWorktreeBinding || liveTask.worktree === worktreePath) && (!hasExplicitBranchBinding || typeof liveTask.branch === "string" && liveTask.branch.length > 0);
+                  if (!worktreeContractIntact) {
+                    const reclaimMessage = `${task.id}: worktree/branch reclaimed during no-fn_task_done retry \u2014 aborting retry and requeueing`;
+                    executorLog.log(reclaimMessage);
+                    await this.store.logEntry(task.id, reclaimMessage, void 0, this.currentRunContext);
+                    this.activeSessions.delete(task.id);
+                    this.tokenUsageBaselines.delete(task.id);
+                    session.dispose();
+                    retryAbortedDueToReclaim = true;
+                    break;
+                  }
                   taskDoneSessionRetries++;
                   executorLog.log(
                     `\u26A0 ${task.id} finished without fn_task_done \u2014 retrying with new session (${taskDoneSessionRetries}/${MAX_TASK_DONE_SESSION_RETRIES})`
@@ -87313,88 +87550,112 @@ ${summary}`,
                   this.activeSessions.delete(task.id);
                   this.tokenUsageBaselines.delete(task.id);
                   session.dispose();
-                  const { session: retrySession, sessionFile: retrySessionFile } = await createResolvedAgentSession({
-                    sessionPurpose: "executor",
-                    runtimeHint: executorRuntimeHint,
-                    pluginRunner: this.options.pluginRunner,
-                    cwd: worktreePath,
-                    systemPrompt: executorSystemPromptFinal,
-                    systemPromptLayers: executorLayers,
-                    tools: "coding",
-                    customTools,
-                    onText: agentLogger.onText,
-                    onThinking: agentLogger.onThinking,
-                    onToolStart: agentLogger.onToolStart,
-                    onToolEnd: agentLogger.onToolEnd,
-                    defaultProvider: executorProvider,
-                    defaultModelId: executorModelId,
-                    fallbackProvider: executorFallbackProvider,
-                    fallbackModelId: executorFallbackModelId,
-                    defaultThinkingLevel: executorThinkingLevel,
-                    sessionManager: SessionManager2.create(worktreePath),
-                    taskEnv,
-                    // Skill selection: use assigned agent skills if available, otherwise role fallback
-                    ...skillContext.skillSelectionContext ? { skillSelection: skillContext.skillSelectionContext } : {},
-                    actionGateContext: this.buildActionGateContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy),
-                    permanentAgentGating: this.buildPermanentAgentGatingContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy)
-                  });
-                  if (retrySessionFile) {
-                    this.store.updateTask(task.id, { sessionFile: retrySessionFile }).catch((err) => {
-                      const msg = err instanceof Error ? err.message : String(err);
-                      executorLog.warn(`${task.id} failed to persist retry sessionFile: ${msg}`);
+                  let retrySession = null;
+                  try {
+                    const createdRetrySession = await createResolvedAgentSession({
+                      sessionPurpose: "executor",
+                      runtimeHint: executorRuntimeHint,
+                      pluginRunner: this.options.pluginRunner,
+                      cwd: worktreePath,
+                      systemPrompt: executorSystemPromptFinal,
+                      systemPromptLayers: executorLayers,
+                      tools: "coding",
+                      customTools,
+                      onText: agentLogger.onText,
+                      onThinking: agentLogger.onThinking,
+                      onToolStart: agentLogger.onToolStart,
+                      onToolEnd: agentLogger.onToolEnd,
+                      defaultProvider: executorProvider,
+                      defaultModelId: executorModelId,
+                      fallbackProvider: executorFallbackProvider,
+                      fallbackModelId: executorFallbackModelId,
+                      defaultThinkingLevel: executorThinkingLevel,
+                      sessionManager: SessionManager2.create(worktreePath),
+                      taskEnv,
+                      // Skill selection: use assigned agent skills if available, otherwise role fallback
+                      ...skillContext.skillSelectionContext ? { skillSelection: skillContext.skillSelectionContext } : {},
+                      actionGateContext: this.buildActionGateContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy),
+                      permanentAgentGating: this.buildPermanentAgentGatingContext(task.id, assignedAgent, settings.defaultAgentPermissionPolicy)
                     });
+                    retrySession = createdRetrySession.session;
+                    if (createdRetrySession.sessionFile) {
+                      this.store.updateTask(task.id, { sessionFile: createdRetrySession.sessionFile }).catch((err) => {
+                        const msg = err instanceof Error ? err.message : String(err);
+                        executorLog.warn(`${task.id} failed to persist retry sessionFile: ${msg}`);
+                      });
+                    }
+                    session = retrySession;
+                    sessionRef.current = retrySession;
+                    this.activeSessions.set(task.id, {
+                      session: retrySession,
+                      seenSteeringIds,
+                      lastResolvedModelProvider: executorProvider,
+                      lastResolvedModelId: executorModelId,
+                      lastTaskModelProvider: detail.modelProvider,
+                      lastTaskModelId: detail.modelId,
+                      lastAssignedAgentId: detail.assignedAgentId ?? null
+                    });
+                    stuckDetector?.trackTask(task.id, retrySession);
+                    let retryPrompt;
+                    if (pseudoPause.kind !== "none") {
+                      const shortMatch = (pseudoPause.matched ?? "").slice(0, 120);
+                      retryPrompt = [
+                        `Your previous turn ended with a pseudo-pause: "${shortMatch}". This is forbidden.`,
+                        "",
+                        "Turn-ending rules you violated:",
+                        "- You MUST NOT end a turn by asking the user a question, summarizing progress, or requesting permission to continue.",
+                        "- Phrases like 'If you want, I can continue', 'Should I proceed?', 'Let me know if...' are FORBIDDEN turn-endings.",
+                        "- The user is not watching this conversation. Questions written as prose are ignored.",
+                        "- If you genuinely cannot proceed, call fn_task_done with a clear explanation \u2014 never write the blocker as plain prose.",
+                        "",
+                        "What you must do now:",
+                        "1. Review the PROMPT.md steps and identify the next pending step.",
+                        "2. Do the work for that step immediately \u2014 call fn_task_update, write code, run tests.",
+                        "3. Continue until all steps are done, then call fn_task_done.",
+                        "Do NOT ask for permission. Do NOT write a summary. Just call a tool and keep working.",
+                        "",
+                        "Original task:",
+                        buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
+                      ].join("\n");
+                    } else {
+                      retryPrompt = [
+                        "Your previous session ended without calling the fn_task_done tool.",
+                        "The task may already be complete \u2014 review the current state of the worktree and either:",
+                        "1. If the work is done, call fn_task_done with a summary of what was accomplished.",
+                        "2. If there is remaining work, finish it and then call fn_task_done.",
+                        "",
+                        "Original task:",
+                        buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
+                      ].join("\n");
+                    }
+                    stuckDetector?.recordActivity(task.id);
+                    await promptWithFallback(retrySession, retryPrompt);
+                    checkSessionError(retrySession);
+                    await accumulateSessionTokenUsage(this.store, task.id, retrySession, {
+                      agentId: task.assignedAgentId ?? void 0,
+                      role: "executor"
+                    });
+                  } catch (retryError) {
+                    const retryErrorText = retryError instanceof Error ? retryError.message : String(retryError);
+                    if (!isMissingWorktreeSessionStartFailure(retryErrorText)) {
+                      throw retryError;
+                    }
+                    const recoveredPath = extractMissingWorktreePathFromSessionStartFailure(retryErrorText) ?? worktreePath;
+                    const reclaimMessage = `${task.id}: no-fn_task_done retry hit missing worktree session-start failure (${recoveredPath}) \u2014 clearing stale metadata and requeueing`;
+                    executorLog.log(reclaimMessage);
+                    await this.store.logEntry(task.id, reclaimMessage, void 0, this.currentRunContext);
+                    await this.store.updateTask(task.id, {
+                      sessionFile: null,
+                      worktree: null,
+                      branch: null,
+                      baseCommitSha: null
+                    });
+                    this.activeSessions.delete(task.id);
+                    this.tokenUsageBaselines.delete(task.id);
+                    retrySession?.dispose();
+                    retryAbortedDueToReclaim = true;
+                    break;
                   }
-                  session = retrySession;
-                  sessionRef.current = retrySession;
-                  this.activeSessions.set(task.id, {
-                    session: retrySession,
-                    seenSteeringIds,
-                    lastResolvedModelProvider: executorProvider,
-                    lastResolvedModelId: executorModelId,
-                    lastTaskModelProvider: detail.modelProvider,
-                    lastTaskModelId: detail.modelId,
-                    lastAssignedAgentId: detail.assignedAgentId ?? null
-                  });
-                  stuckDetector?.trackTask(task.id, retrySession);
-                  let retryPrompt;
-                  if (pseudoPause.kind !== "none") {
-                    const shortMatch = (pseudoPause.matched ?? "").slice(0, 120);
-                    retryPrompt = [
-                      `Your previous turn ended with a pseudo-pause: "${shortMatch}". This is forbidden.`,
-                      "",
-                      "Turn-ending rules you violated:",
-                      "- You MUST NOT end a turn by asking the user a question, summarizing progress, or requesting permission to continue.",
-                      "- Phrases like 'If you want, I can continue', 'Should I proceed?', 'Let me know if...' are FORBIDDEN turn-endings.",
-                      "- The user is not watching this conversation. Questions written as prose are ignored.",
-                      "- If you genuinely cannot proceed, call fn_task_done with a clear explanation \u2014 never write the blocker as plain prose.",
-                      "",
-                      "What you must do now:",
-                      "1. Review the PROMPT.md steps and identify the next pending step.",
-                      "2. Do the work for that step immediately \u2014 call fn_task_update, write code, run tests.",
-                      "3. Continue until all steps are done, then call fn_task_done.",
-                      "Do NOT ask for permission. Do NOT write a summary. Just call a tool and keep working.",
-                      "",
-                      "Original task:",
-                      buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
-                    ].join("\n");
-                  } else {
-                    retryPrompt = [
-                      "Your previous session ended without calling the fn_task_done tool.",
-                      "The task may already be complete \u2014 review the current state of the worktree and either:",
-                      "1. If the work is done, call fn_task_done with a summary of what was accomplished.",
-                      "2. If there is remaining work, finish it and then call fn_task_done.",
-                      "",
-                      "Original task:",
-                      buildExecutionPrompt(detail, this.rootDir, settings, worktreePath, this.options.pluginRunner)
-                    ].join("\n");
-                  }
-                  stuckDetector?.recordActivity(task.id);
-                  await promptWithFallback(retrySession, retryPrompt);
-                  checkSessionError(retrySession);
-                  await accumulateSessionTokenUsage(this.store, task.id, retrySession, {
-                    agentId: task.assignedAgentId ?? void 0,
-                    role: "executor"
-                  });
                   if (!taskDone) {
                     const implicitCheck = await this.store.getTask(task.id);
                     if (implicitCheck.steps.length > 0 && implicitCheck.steps.every((s) => s.status === "done" || s.status === "skipped")) {
@@ -87457,7 +87718,7 @@ ${summary}`,
                 } else {
                   const priorRequeues = task.taskDoneRetryCount ?? 0;
                   const nextRequeueCount = priorRequeues + 1;
-                  const errorMessage = `Agent finished without calling fn_task_done (after ${MAX_TASK_DONE_SESSION_RETRIES} retries)`;
+                  const errorMessage = retryAbortedDueToReclaim ? "Worktree/branch reclaimed during no-fn_task_done retry \u2014 requeueing" : `Agent finished without calling fn_task_done (after ${MAX_TASK_DONE_SESSION_RETRIES} retries)`;
                   if (priorRequeues < MAX_TASK_DONE_REQUEUE_RETRIES) {
                     await this.store.updateTask(task.id, {
                       status: "failed",
@@ -99783,7 +100044,7 @@ function extractJson(raw) {
   if (first >= 0 && last > first) return trimmed.slice(first, last + 1);
   return trimmed;
 }
-var log14, HybridEvaluatorService;
+var log15, HybridEvaluatorService;
 var init_evaluator = __esm({
   "../engine/src/evaluator.ts"() {
     "use strict";
@@ -99792,7 +100053,7 @@ var init_evaluator = __esm({
     init_eval_followups();
     init_pi();
     init_logger2();
-    log14 = createLogger2("evaluator");
+    log15 = createLogger2("evaluator");
     HybridEvaluatorService = class {
       constructor(deps) {
         this.deps = deps;
@@ -99884,7 +100145,7 @@ var init_evaluator = __esm({
           try {
             session.dispose();
           } catch (error) {
-            log14.warn(`Evaluator session disposal failed: ${error instanceof Error ? error.message : String(error)}`);
+            log15.warn(`Evaluator session disposal failed: ${error instanceof Error ? error.message : String(error)}`);
           }
         }
       }
@@ -100016,7 +100277,7 @@ function truncateOutput2(stdout, stderr) {
   }
   return combined;
 }
-var log15, FUSION_BINARY_TOKENS, SHELL_METACHARACTERS_REGEX, DEFAULT_TIMEOUT_MS8, MAX_BUFFER, MAX_OUTPUT_LENGTH, DEFAULT_POLL_INTERVAL_MS, MIN_POLL_INTERVAL_MS, CronRunner, AI_AUTOMATION_SYSTEM_PROMPT;
+var log16, FUSION_BINARY_TOKENS, SHELL_METACHARACTERS_REGEX, DEFAULT_TIMEOUT_MS8, MAX_BUFFER, MAX_OUTPUT_LENGTH, DEFAULT_POLL_INTERVAL_MS, MIN_POLL_INTERVAL_MS, CronRunner, AI_AUTOMATION_SYSTEM_PROMPT;
 var init_cron_runner = __esm({
   "../engine/src/cron-runner.ts"() {
     "use strict";
@@ -100025,7 +100286,7 @@ var init_cron_runner = __esm({
     init_shell_utils();
     init_pi();
     init_evaluator();
-    log15 = createLogger2("cron-runner");
+    log16 = createLogger2("cron-runner");
     FUSION_BINARY_TOKENS = /* @__PURE__ */ new Set([
       "fn",
       "fusion",
@@ -100066,7 +100327,7 @@ var init_cron_runner = __esm({
       start() {
         if (this.running) return;
         this.running = true;
-        log15.log(`Started (poll every ${this.pollIntervalMs / 1e3}s, scope: ${this.scope})`);
+        log16.log(`Started (poll every ${this.pollIntervalMs / 1e3}s, scope: ${this.scope})`);
         void this.tick();
         this.pollInterval = setInterval(() => {
           void this.tick();
@@ -100080,7 +100341,7 @@ var init_cron_runner = __esm({
           clearInterval(this.pollInterval);
           this.pollInterval = null;
         }
-        log15.log("Stopped");
+        log16.log("Stopped");
       }
       /**
        * Single poll cycle: find due schedules and execute them.
@@ -100104,29 +100365,29 @@ var init_cron_runner = __esm({
           const executedIds = /* @__PURE__ */ new Set();
           for (const schedule of dueSchedules) {
             if (this.inFlight.has(schedule.id)) {
-              log15.warn(`Skipping ${schedule.name} (${schedule.id}) \u2014 still running from previous tick`);
+              log16.warn(`Skipping ${schedule.name} (${schedule.id}) \u2014 still running from previous tick`);
               continue;
             }
             if (executedIds.has(schedule.id)) {
-              log15.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 already executed from another scope this tick`);
+              log16.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 already executed from another scope this tick`);
               continue;
             }
             executedIds.add(schedule.id);
             const scheduleScope = schedule.scope ?? "project";
             if (scheduleScope !== this.scope && this.scope !== "all") {
-              log15.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 belongs to ${scheduleScope} scope, not polling`);
+              log16.log(`Skipping ${schedule.name} (${schedule.id}) \u2014 belongs to ${scheduleScope} scope, not polling`);
               continue;
             }
-            log15.log(`Executing ${schedule.name} (${schedule.id}) [scope: ${scheduleScope}]`);
+            log16.log(`Executing ${schedule.name} (${schedule.id}) [scope: ${scheduleScope}]`);
             const currentSettings = await this.store.getSettings();
             if (currentSettings.globalPause || currentSettings.enginePaused) {
-              log15.log("Pause detected mid-tick \u2014 stopping schedule execution");
+              log16.log("Pause detected mid-tick \u2014 stopping schedule execution");
               break;
             }
             await this.executeSchedule(schedule);
           }
         } catch (err) {
-          log15.error(`Tick error: ${err.message}`);
+          log16.error(`Tick error: ${err.message}`);
         } finally {
           this.ticking = false;
         }
@@ -100156,13 +100417,13 @@ var init_cron_runner = __esm({
         try {
           await this.automationStore.recordRun(schedule.id, result);
         } catch (recordErr) {
-          log15.error(`Failed to record run for ${schedule.id}: ${recordErr.message}`);
+          log16.error(`Failed to record run for ${schedule.id}: ${recordErr.message}`);
         }
         if (this.onScheduleRunProcessed) {
           try {
             await this.onScheduleRunProcessed(schedule, result);
           } catch (callbackErr) {
-            log15.error(
+            log16.error(
               `Post-run callback failed for ${schedule.name} (${schedule.id}): ${callbackErr.message}`
             );
           }
@@ -100173,7 +100434,7 @@ var init_cron_runner = __esm({
        * Execute a legacy single-command schedule.
        */
       async executeLegacyCommand(schedule, startedAt) {
-        log15.log(`Executing ${schedule.name} (${schedule.id}): ${schedule.command}`);
+        log16.log(`Executing ${schedule.name} (${schedule.id}): ${schedule.command}`);
         if (isInProcessBackupCommand(schedule.command)) {
           return this.executeBackupInProcess(schedule, startedAt);
         }
@@ -100191,7 +100452,7 @@ var init_cron_runner = __esm({
             shell: defaultShell
           });
           const output = truncateOutput2(stdout, stderr);
-          log15.log(`\u2713 ${schedule.name} completed (${output.length} bytes output)`);
+          log16.log(`\u2713 ${schedule.name} completed (${output.length} bytes output)`);
           return {
             success: true,
             output,
@@ -100203,7 +100464,7 @@ var init_cron_runner = __esm({
           const stderr = err.stderr ?? "";
           const output = truncateOutput2(stdout, stderr);
           const errorMessage = err.killed ? `Command timed out after ${(schedule.timeoutMs ?? DEFAULT_TIMEOUT_MS8) / 1e3}s` : err.message ?? String(err);
-          log15.warn(`\u2717 ${schedule.name} failed: ${errorMessage}`);
+          log16.warn(`\u2717 ${schedule.name} failed: ${errorMessage}`);
           return {
             success: false,
             output,
@@ -100221,9 +100482,9 @@ var init_cron_runner = __esm({
       async executeBackupInProcess(schedule, startedAt) {
         const action = await this.runBackupActionInProcess();
         if (action.success) {
-          log15.log(`\u2713 ${schedule.name} completed in-process`);
+          log16.log(`\u2713 ${schedule.name} completed in-process`);
         } else {
-          log15.warn(`\u2717 ${schedule.name} in-process backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
+          log16.warn(`\u2717 ${schedule.name} in-process backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
         }
         return {
           success: action.success,
@@ -100236,9 +100497,9 @@ var init_cron_runner = __esm({
       async executeMemoryBackupInProcess(schedule, startedAt) {
         const action = await this.runMemoryBackupActionInProcess();
         if (action.success) {
-          log15.log(`\u2713 ${schedule.name} completed in-process`);
+          log16.log(`\u2713 ${schedule.name} completed in-process`);
         } else {
-          log15.warn(`\u2717 ${schedule.name} in-process memory backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
+          log16.warn(`\u2717 ${schedule.name} in-process memory backup ${action.error ? `threw: ${action.error}` : `reported failure: ${action.output}`}`);
         }
         return {
           success: action.success,
@@ -100327,25 +100588,25 @@ var init_cron_runner = __esm({
        */
       async executeSteps(schedule, startedAt) {
         const steps = schedule.steps;
-        log15.log(`Executing ${schedule.name} (${schedule.id}): ${steps.length} steps`);
+        log16.log(`Executing ${schedule.name} (${schedule.id}): ${steps.length} steps`);
         const stepResults = [];
         let overallSuccess = true;
         let stoppedEarly = false;
         for (let i = 0; i < steps.length; i++) {
           const step = steps[i];
-          log15.log(`  Step ${i + 1}/${steps.length}: ${step.name} (${step.type})`);
+          log16.log(`  Step ${i + 1}/${steps.length}: ${step.name} (${step.type})`);
           const stepResult = await this.executeStep(schedule, step, i);
           stepResults.push(stepResult);
           if (!stepResult.success) {
             overallSuccess = false;
             if (!step.continueOnFailure) {
-              log15.warn(`  Step "${step.name}" failed \u2014 stopping execution`);
+              log16.warn(`  Step "${step.name}" failed \u2014 stopping execution`);
               stoppedEarly = true;
               break;
             }
-            log15.warn(`  Step "${step.name}" failed \u2014 continuing (continueOnFailure=true)`);
+            log16.warn(`  Step "${step.name}" failed \u2014 continuing (continueOnFailure=true)`);
           } else {
-            log15.log(`  \u2713 Step "${step.name}" completed`);
+            log16.log(`  \u2713 Step "${step.name}" completed`);
           }
         }
         const outputParts = [];
@@ -100358,7 +100619,7 @@ var init_cron_runner = __esm({
         const failedSteps = stepResults.filter((sr) => !sr.success);
         const error = failedSteps.length > 0 ? `${failedSteps.length} step(s) failed: ${failedSteps.map((s) => s.stepName).join(", ")}${stoppedEarly ? " (execution stopped)" : ""}` : void 0;
         const status = overallSuccess ? "\u2713" : "\u2717";
-        log15.log(`${status} ${schedule.name}: ${stepResults.length}/${steps.length} steps executed, ${failedSteps.length} failed`);
+        log16.log(`${status} ${schedule.name}: ${stepResults.length}/${steps.length} steps executed, ${failedSteps.length} failed`);
         return {
           success: overallSuccess,
           output,
@@ -100501,8 +100762,8 @@ var init_cron_runner = __esm({
         const modelProvider = step.modelProvider?.trim() || defaultModel.provider;
         const modelId = step.modelId?.trim() || defaultModel.modelId;
         const model = modelProvider && modelId ? `${modelProvider}/${modelId}` : "default";
-        log15.log(`    AI prompt step "${step.name}" using model: ${model}`);
-        log15.log(`    Prompt: ${step.prompt.slice(0, 100)}${step.prompt.length > 100 ? "\u2026" : ""}`);
+        log16.log(`    AI prompt step "${step.name}" using model: ${model}`);
+        log16.log(`    Prompt: ${step.prompt.slice(0, 100)}${step.prompt.length > 100 ? "\u2026" : ""}`);
         try {
           const resultPromise = this.aiPromptExecutor(step.prompt, modelProvider, modelId);
           const timeoutPromise = new Promise((_resolve, reject) => {
@@ -100511,7 +100772,7 @@ var init_cron_runner = __esm({
           const response = await Promise.race([resultPromise, timeoutPromise]);
           const responseText = String(response ?? "");
           const output = responseText.length > MAX_OUTPUT_LENGTH ? responseText.slice(0, MAX_OUTPUT_LENGTH) + "\n[output truncated]" : responseText;
-          log15.log(`    \u2713 AI prompt step "${step.name}" completed (${responseText.length} chars)`);
+          log16.log(`    \u2713 AI prompt step "${step.name}" completed (${responseText.length} chars)`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -100523,7 +100784,7 @@ var init_cron_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err.message ?? String(err);
-          log15.warn(`    \u2717 AI prompt step "${step.name}" failed: ${errorMessage}`);
+          log16.warn(`    \u2717 AI prompt step "${step.name}" failed: ${errorMessage}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -100567,7 +100828,7 @@ var init_cron_runner = __esm({
         try {
           const task = await this.store.createTask(taskInput);
           const output = `Created task ${task.id}: ${task.title || task.description.slice(0, 80)}`;
-          log15.log(`    \u2713 Create-task step "${step.name}" created task ${task.id}`);
+          log16.log(`    \u2713 Create-task step "${step.name}" created task ${task.id}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -100579,7 +100840,7 @@ var init_cron_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err.message ?? String(err);
-          log15.warn(`    \u2717 Create-task step "${step.name}" failed: ${errorMessage}`);
+          log16.warn(`    \u2717 Create-task step "${step.name}" failed: ${errorMessage}`);
           return {
             stepId: step.id,
             stepName: step.name,
@@ -100621,7 +100882,7 @@ function truncateOutput3(stdout, stderr) {
   }
   return output;
 }
-var import_cron_parser4, log16, execAsync12, DEFAULT_TIMEOUT_MS9, MAX_BUFFER2, MAX_OUTPUT_LENGTH2, MAX_CATCH_UP_INTERVALS, RoutineRunner;
+var import_cron_parser4, log17, execAsync12, DEFAULT_TIMEOUT_MS9, MAX_BUFFER2, MAX_OUTPUT_LENGTH2, MAX_CATCH_UP_INTERVALS, RoutineRunner;
 var init_routine_runner = __esm({
   "../engine/src/routine-runner.ts"() {
     "use strict";
@@ -100629,7 +100890,7 @@ var init_routine_runner = __esm({
     init_cron_runner();
     init_logger2();
     init_shell_utils();
-    log16 = createLogger2("routine-runner");
+    log17 = createLogger2("routine-runner");
     execAsync12 = promisify17(exec14);
     DEFAULT_TIMEOUT_MS9 = 5 * 60 * 1e3;
     MAX_BUFFER2 = 1024 * 1024;
@@ -100666,7 +100927,7 @@ var init_routine_runner = __esm({
         }
         const concurrency = routine.executionPolicy ?? "queue";
         if (concurrency === "reject" && this.inFlightExecutions.has(routineId)) {
-          log16.log(`Routine ${routineId} rejected \u2014 already running`);
+          log17.log(`Routine ${routineId} rejected \u2014 already running`);
           return {
             routineId,
             success: false,
@@ -100677,7 +100938,7 @@ var init_routine_runner = __esm({
           };
         }
         if (concurrency === "queue" && this.inFlightExecutions.has(routineId)) {
-          log16.log(`Routine ${routineId} queued \u2014 waiting for existing execution`);
+          log17.log(`Routine ${routineId} queued \u2014 waiting for existing execution`);
           const existingResult = await this.inFlightExecutions.get(routineId);
           if (existingResult) {
             await existingResult;
@@ -100725,7 +100986,7 @@ var init_routine_runner = __esm({
           };
         } catch (err) {
           const errorMessage = err instanceof Error ? err.message : String(err);
-          log16.error(`Routine ${routineId} execution failed: ${errorMessage}`);
+          log17.error(`Routine ${routineId} execution failed: ${errorMessage}`);
           try {
             await this.options.routineStore.completeRoutineExecution(routineId, {
               completedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -100733,7 +100994,7 @@ var init_routine_runner = __esm({
               error: errorMessage
             });
           } catch (persistError) {
-            log16.error(`[${routineId}] Failed to persist error state: ${persistError}`);
+            log17.error(`[${routineId}] Failed to persist error state: ${persistError}`);
           }
           return {
             routineId,
@@ -100995,7 +101256,7 @@ var init_routine_runner = __esm({
           if (missedIntervals.length === 0) {
             return;
           }
-          log16.log(`[${routine.id}] Running ${missedIntervals.length} catch-up executions`);
+          log17.log(`[${routine.id}] Running ${missedIntervals.length} catch-up executions`);
           for (const missedInterval of missedIntervals) {
             try {
               await this.executeRoutine(routine.id, "cron", {
@@ -101003,11 +101264,11 @@ var init_routine_runner = __esm({
                 missedInterval: missedInterval.toISOString()
               });
             } catch (err) {
-              log16.error(`[${routine.id}] Catch-up execution failed: ${err}`);
+              log17.error(`[${routine.id}] Catch-up execution failed: ${err}`);
             }
           }
         } catch (err) {
-          log16.error(`[${routine.id}] Error calculating catch-up intervals: ${err}`);
+          log17.error(`[${routine.id}] Error calculating catch-up intervals: ${err}`);
         }
       }
       /**
@@ -101593,91 +101854,6 @@ var init_stuck_task_detector = __esm({
   }
 });
 
-// ../engine/src/restart-recovery-coordinator.ts
-function hasStepProgress(task) {
-  const steps = Array.isArray(task.steps) ? task.steps : [];
-  return steps.some((step) => step.status === "done" || step.status === "in-progress" || step.status === "skipped");
-}
-function isNoTaskDoneFailure(task) {
-  return task.status === "failed" && typeof task.error === "string" && task.error.toLowerCase().includes("without calling fn_task_done");
-}
-function findMissingWorktreeSessionPrefix(error) {
-  for (const prefix of MISSING_WORKTREE_SESSION_PREFIXES) {
-    if (error.includes(prefix)) {
-      return prefix;
-    }
-  }
-  return null;
-}
-function isMissingWorktreeSessionStartFailure(error) {
-  if (typeof error !== "string") {
-    return false;
-  }
-  return findMissingWorktreeSessionPrefix(error) !== null;
-}
-function extractMissingWorktreePathFromSessionStartFailure(error) {
-  if (typeof error !== "string") return null;
-  const prefix = findMissingWorktreeSessionPrefix(error);
-  if (!prefix) return null;
-  const idx = error.indexOf(prefix);
-  const pathPart = error.slice(idx + prefix.length).trim();
-  return pathPart.length > 0 ? pathPart : null;
-}
-function isRecoverableMissingWorktreeReviewFailure(task) {
-  return task.column === "in-review" && !task.paused && task.status === "failed" && isMissingWorktreeSessionStartFailure(task.error) && hasStepProgress(task);
-}
-var log17, MISSING_WORKTREE_SESSION_PREFIXES, RestartRecoveryCoordinator;
-var init_restart_recovery_coordinator = __esm({
-  "../engine/src/restart-recovery-coordinator.ts"() {
-    "use strict";
-    init_logger2();
-    log17 = createLogger2("restart-recovery");
-    MISSING_WORKTREE_SESSION_PREFIXES = [
-      "Refusing to start coding agent in missing worktree:",
-      "Refusing to start coding agent in incomplete worktree:",
-      "Refusing to start coding agent in unregistered git worktree:"
-    ];
-    RestartRecoveryCoordinator = class {
-      constructor(store, executor) {
-        this.store = store;
-        this.executor = executor;
-      }
-      async recoverInterruptedRuns() {
-        const allInProgress = await this.store.listTasks({ slim: true, column: "in-progress" });
-        const candidates = allInProgress.filter((task) => task.column === "in-progress" && !task.paused);
-        if (candidates.length === 0) return;
-        let requeued = 0;
-        for (const task of candidates) {
-          if (!this.mustSafeRetry(task)) continue;
-          await this.safeRequeue(task);
-          requeued++;
-        }
-        if (requeued > 0) {
-          log17.log(`Restart recovery requeued ${requeued} interrupted task(s) for safe retry`);
-        }
-        await this.executor.resumeOrphaned();
-      }
-      mustSafeRetry(task) {
-        return isNoTaskDoneFailure(task) && !hasStepProgress(task);
-      }
-      async safeRequeue(task) {
-        await this.store.updateTask(task.id, {
-          status: "stuck-killed",
-          worktree: null,
-          branch: null,
-          sessionFile: null,
-          error: null
-        });
-        await this.store.logEntry(
-          task.id,
-          "Restart recovery: interrupted run had no step progress and no fn_task_done \u2014 requeued to todo for safe retry"
-        );
-        await this.store.moveTask(task.id, "todo");
-      }
-    };
-  }
-});
-
 // ../engine/src/self-healing.ts
 import { exec as exec15, execSync as execSync4 } from "node:child_process";
 import { promisify as promisify18 } from "node:util";
@@ -107455,6 +107631,13 @@ var init_in_process_runtime = __esm({
       getMessageStore() {
         return this.messageStore;
       }
+      /**
+       * Get the ChatStore instance (if initialized).
+       * Returns undefined before start() or if initialization fails.
+       */
+      getChatStore() {
+        return this.chatStore;
+      }
       /**
        * Get the project's Scheduler instance.
        * @throws Error if runtime has not been started
@@ -110428,6 +110611,10 @@ ${detail}`
       getMessageStore() {
         return this.runtime.getMessageStore();
       }
+      /** Get the ChatStore (if initialized). Returns undefined before start(). */
+      getChatStore() {
+        return this.runtime.getChatStore();
+      }
       attachChatStore(chatStore) {
         this.notificationService?.attachChatStore(chatStore);
       }
@@ -134270,6 +134457,71 @@ Status: ${updated.status}`
       };
     }
   });
+  pi.registerTool({
+    name: "fn_milestone_update",
+    label: "fn: Update Milestone",
+    description: "Update an existing milestone's title, description, or acceptance criteria (the structured pass/fail bar, distinct from verification's free-form how-to-confirm notes). Partial patches leave untouched fields intact.",
+    promptSnippet: "Update an existing mission milestone",
+    promptGuidelines: [
+      "Use to revise milestone details without re-creating it",
+      "Mission linkage and ordering are preserved",
+      "Provide only the fields you want to change"
+    ],
+    parameters: Type8.Object({
+      id: Type8.String({ description: "Milestone ID to update (e.g., MS-001)" }),
+      title: Type8.Optional(Type8.String({ description: "Updated milestone title" })),
+      description: Type8.Optional(Type8.String({ description: "Updated milestone description" })),
+      acceptanceCriteria: Type8.Optional(
+        Type8.String({ description: "Updated acceptance criteria for completing the milestone" })
+      )
+    }),
+    async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
+      const store = await getStore2(ctx.cwd);
+      const missionStore = store.getMissionStore();
+      const existingMilestone = missionStore.getMilestone(params.id);
+      if (!existingMilestone) {
+        return {
+          content: [{ type: "text", text: `Milestone ${params.id} not found` }],
+          isError: true,
+          details: { error: "Milestone not found" }
+        };
+      }
+      const updates = {};
+      if ("title" in params) {
+        updates.title = params.title?.trim();
+      }
+      if ("description" in params) {
+        updates.description = params.description?.trim();
+      }
+      if ("acceptanceCriteria" in params) {
+        updates.acceptanceCriteria = params.acceptanceCriteria?.trim();
+      }
+      if (Object.keys(updates).length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No fields to update (provide at least one of: title, description, acceptanceCriteria)"
+            }
+          ],
+          isError: true,
+          details: { error: "No fields to update" }
+        };
+      }
+      const milestone = missionStore.updateMilestone(params.id, updates);
+      return {
+        content: [{ type: "text", text: `Updated ${milestone.id}: "${milestone.title}"` }],
+        details: {
+          milestoneId: milestone.id,
+          missionId: milestone.missionId,
+          title: milestone.title,
+          description: milestone.description,
+          acceptanceCriteria: milestone.acceptanceCriteria,
+          status: milestone.status
+        }
+      };
+    }
+  });
   pi.registerTool({
     name: "fn_agent_stop",
     label: "fn: Stop Agent",