@runfusion/fusion 0.53.1 → 0.54.0

package/dist/extension.js

@@ -1370,6 +1370,11 @@ var init_settings_schema = __esm({
       // coverage. Falls back to package/explicit command when no tests resolve.
       scopeVerificationToChangedFiles: true,
       ephemeralAgentsEnabled: true,
+      /*
+      FNXC:EphemeralAgentTaskCreation 2026-07-01-00:00:
+      Default-on so ephemeral task-worker agents keep the ability to open follow-up tasks via fn_task_create. Operators who want to confine task creation to humans/permanent agents flip this off.
+      */
+      ephemeralAgentsCanCreateTasks: true,
       agentProvisioning: {},
       sandboxProvisioning: {},
       defaultAgentPermissionPolicy: void 0,
@@ -51647,7 +51652,7 @@ function filterRepairOverlapIgnoredPaths(paths, ignorePaths) {
   if (ignorePaths.length === 0) return paths;
   return paths.filter((path6) => !ignorePaths.some((ignorePath) => repairIgnoredOverlapPath(path6, ignorePath)));
 }
-var serializeTaskAutoMerge, serializeTaskAutoMergeProvenance, TASK_COLUMN_DESCRIPTORS, TASK_COLUMN_DESCRIPTOR_BY_COLUMN, TASK_PERSIST_SQL_COLUMNS, TASK_UPSERT_SQL_ASSIGNMENTS, TASK_BRANCH_CONTEXT_METADATA_KEY, DEFAULT_TASK_ACTIVITY_LOG_ENTRY_LIMIT, DEFAULT_TASK_ACTIVITY_LOG_OUTCOME_LIMIT, taskActivityLogEntryLimit, taskActivityLogOutcomeLimit, ARCHIVE_AGENT_LOG_SNAPSHOT_LIMIT, ARCHIVE_AGENT_LOG_SNIPPET_LIMIT, RECONCILE_ORPHAN_TASK_DIR_MAX_AGE_MS, storeLog, coreLog, TaskHasDependentsError, TaskDeletedError, TombstonedTaskResurrectionError, TaskHasLineageChildrenError, InvalidFileScopeError, SELF_DEFEATING_OPERATION_VERBS, SelfDefeatingDependencyError, DependencyCycleError, MergeQueueTaskNotFoundError, MergeQueueInvalidColumnError, MergeQueueLeaseOwnershipError, InvalidMergeQueueLeaseDurationError, HandoffInvariantViolationError, TransitionRejectionError, WORKFLOW_MOVE_POLICY_TIMEOUT_MS, LEGACY_AUTO_MERGE_STAMP_MARKER_KEY, LEGACY_AUTO_MERGE_STAMP_MARKER_VERSION, TaskStore;
+var serializeTaskAutoMerge, serializeTaskAutoMergeProvenance, TASK_COLUMN_DESCRIPTORS, TASK_COLUMN_DESCRIPTOR_BY_COLUMN, TASK_PERSIST_SQL_COLUMNS, TASK_UPSERT_SQL_ASSIGNMENTS, TASK_BRANCH_CONTEXT_METADATA_KEY, DEFAULT_TASK_ACTIVITY_LOG_ENTRY_LIMIT, DEFAULT_TASK_ACTIVITY_LOG_OUTCOME_LIMIT, taskActivityLogEntryLimit, taskActivityLogOutcomeLimit, ARCHIVE_AGENT_LOG_SNAPSHOT_LIMIT, ARCHIVE_AGENT_LOG_SNIPPET_LIMIT, RECONCILE_ORPHAN_TASK_DIR_MAX_AGE_MS, storeLog, coreLog, TaskHasDependentsError, TaskSelfDeleteError, TaskDeletedError, TombstonedTaskResurrectionError, TaskHasLineageChildrenError, InvalidFileScopeError, SELF_DEFEATING_OPERATION_VERBS, SelfDefeatingDependencyError, DependencyCycleError, MergeQueueTaskNotFoundError, MergeQueueInvalidColumnError, MergeQueueLeaseOwnershipError, InvalidMergeQueueLeaseDurationError, HandoffInvariantViolationError, TransitionRejectionError, WORKFLOW_MOVE_POLICY_TIMEOUT_MS, LEGACY_AUTO_MERGE_STAMP_MARKER_KEY, LEGACY_AUTO_MERGE_STAMP_MARKER_VERSION, TaskStore;
 var init_store = __esm({
   "../core/src/store.ts"() {
     "use strict";
@@ -51899,6 +51904,15 @@ var init_store = __esm({
         this.dependentIds = dependentIds;
       }
     };
+    TaskSelfDeleteError = class extends Error {
+      taskId;
+      code = "TASK_SELF_DELETE";
+      constructor(taskId) {
+        super(`Task ${taskId} cannot delete itself`);
+        this.name = "TaskSelfDeleteError";
+        this.taskId = taskId;
+      }
+    };
     TaskDeletedError = class extends Error {
       constructor(taskId, deletedAt) {
         super(`Task ${taskId} is soft-deleted (deletedAt=${deletedAt}) and cannot be read or mutated`);
@@ -60173,6 +60187,9 @@ ${newTask.description}
        */
       async deleteTask(id, options) {
         const deletedTask = await this.withTaskLock(id, async () => {
+          if (options?.auditContext?.taskId === id) {
+            throw new TaskSelfDeleteError(id);
+          }
           this.flushAgentLogBuffer();
           const task = this.readTaskFromDb(id, { includeDeleted: true });
           if (!task) {
@@ -127577,6 +127594,17 @@ function createTaskCreateTool(store, provenance, options) {
     parameters: taskCreateParams,
     execute: async (_id, params) => {
       try {
+        if (options?.callerIsEphemeral) {
+          const settings = typeof store.getSettings === "function" ? await store.getSettings().catch(() => ({})) : {};
+          if (settings.ephemeralAgentsCanCreateTasks === false) {
+            const message = "Ephemeral task-worker agents are not allowed to create tasks (ephemeralAgentsCanCreateTasks is disabled for this project).";
+            return {
+              content: [{ type: "text", text: `ERROR: ${message}` }],
+              details: { error: message, rule: "ephemeral-agents-cannot-create-tasks" },
+              isError: true
+            };
+          }
+        }
         const workflowId = params.workflow_id?.trim() || void 0;
         const { task, wasDuplicate } = await createAgentTask(store, {
           description: params.description,
@@ -163461,25 +163489,91 @@ function buildReviewRequest(taskId, stepNumber, stepName, reviewType, promptCont
   );
   return parts.join("\n");
 }
-function extractVerdict(review) {
-  const jsonMatch = review.match(
-    /\{\s*"verdict"\s*:\s*"(APPROVE|REVISE|RETHINK)"\s*\}/i
+function proseSignalsClearApproval(rawOutput) {
+  const text = rawOutput.trim();
+  if (text.length === 0) return false;
+  const blockingSignal = new RegExp(
+    [
+      /\bREVIS(?:E|ED|ES|ING|ION|IONS)\b/,
+      /\bRETHINK\b/,
+      /\bREQUEST(?:ING|ED)?\s+(?:REVISION|CHANGES?)\b/,
+      /\bNEEDS?\s+(?:REVISION|CHANGES?|WORK|FIXE?S?)\b/,
+      /\bMUST\s+(?:BE\s+)?(?:FIX|CHANG|CORRECT|ADDRESS|RESOLV|UPDAT)\w*/,
+      /\bSHOULD\s+(?:BE\s+)?(?:FIX|CHANG|CORRECT|ADDRESS|RESOLV|UPDAT|REVIS)\w*/,
+      /\bPLEASE\s+(?:FIX|CHANG|CORRECT|ADDRESS|UPDAT|REVIS)\w*/,
+      /\bWANTS?\s+(?:\w+\s+){0,3}?(?:CHANG|FIX|CORRECT|ADDRESS|REVIS)\w*/,
+      /\bBEFORE\s+MERG\w*/,
+      /\bREJECT(?:ED|ING|S)?\b/,
+      /\bDISAPPROVE\b/
+    ].map((r) => r.source).join("|"),
+    "i"
   );
-  if (jsonMatch) {
-    reviewerLog.log(`Verdict extracted via JSON block: ${jsonMatch[1].toUpperCase()}`);
-    return jsonMatch[1].toUpperCase();
+  const negatedApproval = /\b(?:not|no|never|cannot|can['’]?t|don['’]?t|doesn['’]?t|won['’]?t|without)\s+approv/i;
+  if (blockingSignal.test(text) || negatedApproval.test(text)) return false;
+  const approvalSignal = /\b(?:approv(?:e|ed|es|ing|al)|approve[_\s]with[_\s]notes|looks?\s+good|lgtm|ship\s+it|no\s+(?:blocking\s+)?(?:issues|concerns|problems|objections)|passes?\s+(?:the\s+)?review|all\s+good|acceptable|good\s+to\s+(?:go|merge)|out\s+of\s+scope)\b/i;
+  return approvalSignal.test(text);
+}
+function extractJsonObjectCandidates(text) {
+  const out = [];
+  const starts = [];
+  let inString = false;
+  let escaped = false;
+  for (let i = 0; i < text.length; i += 1) {
+    const ch = text[i];
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (ch === "\\") escaped = true;
+      else if (ch === '"') inString = false;
+      continue;
+    }
+    if (ch === '"') inString = true;
+    else if (ch === "{") starts.push(i);
+    else if (ch === "}") {
+      const start = starts.pop();
+      if (start !== void 0 && starts.length === 0) out.push(text.slice(start, i + 1));
+    }
   }
+  return out;
+}
+function classifyReviewVerdictToken(raw) {
+  const v2 = raw.trim().toUpperCase();
+  if (v2.startsWith("APPROVE") || v2.startsWith("APPROVAL")) return "APPROVE";
+  if (v2.startsWith("REVISE") || v2.startsWith("REQUEST_REVISION") || v2.startsWith("REJECT")) return "REVISE";
+  if (v2.startsWith("RETHINK")) return "RETHINK";
+  return null;
+}
+function extractVerdict(review) {
   const headingMatch = review.match(
-    /^[>\s]*(?:###?\s*|[*_]{1,2})Verdict[:\s]*[*_]{0,2}\s*(APPROVE|REVISE|RETHINK)\b/im
+    /^[>\s]*(?:###?\s*|[*_]{1,2})Verdict[:\s]*[*_]{0,2}\s*([A-Za-z_]+)/im
   );
   if (headingMatch) {
-    return headingMatch[1].toUpperCase();
+    const classified = classifyReviewVerdictToken(headingMatch[1]);
+    if (classified) return classified;
   }
   const lineFallback = review.match(
-    /^[>\s]*(?:verdict|decision)\s*[-:]\s*(APPROVE|REVISE|RETHINK)\b/im
+    /^[>\s]*(?:verdict|decision)\s*[-:]\s*([A-Za-z_]+)/im
   );
   if (lineFallback) {
-    return lineFallback[1].toUpperCase();
+    const classified = classifyReviewVerdictToken(lineFallback[1]);
+    if (classified) return classified;
+  }
+  const jsonCandidates = extractJsonObjectCandidates(review);
+  for (let i = jsonCandidates.length - 1; i >= 0; i -= 1) {
+    try {
+      const parsed = JSON.parse(jsonCandidates[i]);
+      if (typeof parsed?.verdict === "string") {
+        const classified = classifyReviewVerdictToken(parsed.verdict);
+        if (classified) {
+          reviewerLog.log(`Verdict extracted via JSON payload: ${classified}`);
+          return classified;
+        }
+      }
+    } catch {
+    }
+  }
+  if (proseSignalsClearApproval(review)) {
+    reviewerLog.log(`Verdict extracted via lenient prose approval (${review.length} chars) \u2192 APPROVE`);
+    return "APPROVE";
   }
   reviewerLog.warn(`Could not extract verdict from review (${review.length} chars). Returning UNAVAILABLE.`);
   return "UNAVAILABLE";
@@ -172652,18 +172746,21 @@ function parseWorkflowStepVerdict(rawOutput) {
   for (const match of fencedMatches) {
     candidates.push(match[1].trim());
   }
-  const jsonObjectMatches = trimmed.match(/\{[\s\S]*\}/g);
-  if (jsonObjectMatches) {
-    candidates.push(...jsonObjectMatches.map((value) => value.trim()));
-  }
+  candidates.push(...extractJsonObjectCandidates(trimmed));
   for (let i = candidates.length - 1; i >= 0; i -= 1) {
     try {
       const parsed = JSON.parse(candidates[i]);
-      if (!parsed || typeof parsed.verdict !== "string" || !WORKFLOW_STEP_VERDICTS.has(parsed.verdict)) {
-        continue;
-      }
+      if (!parsed || typeof parsed.verdict !== "string") continue;
+      const token = parsed.verdict.trim().toUpperCase();
+      let verdict = null;
+      if (token.startsWith("APPROVE") || token.startsWith("APPROVAL")) {
+        verdict = token.includes("NOTE") ? "APPROVE_WITH_NOTES" : "APPROVE";
+      } else if (token.startsWith("REVISE") || token.startsWith("REQUEST_REVISION") || token.startsWith("REJECT")) {
+        verdict = "REVISE";
+      }
+      if (!verdict) continue;
       return {
-        verdict: parsed.verdict,
+        verdict,
         notes: typeof parsed.notes === "string" ? parsed.notes : ""
       };
     } catch {
@@ -172684,7 +172781,7 @@ function inferWorkflowStepVerdictFromProse(rawOutput) {
       notes: ""
     };
   }
-  if (/\b(approve|approved|looks good|no issues|out of scope)\b/i.test(trimmed)) {
+  if (proseSignalsClearApproval(trimmed)) {
     return { verdict: "APPROVE", notes: "" };
   }
   return null;
@@ -172931,6 +173028,11 @@ Please adjust your approach based on this feedback.`;
 function hasNonTerminalWorkflowSteps(task) {
   return task.steps.length > 0 && task.steps.some((step) => step.status !== "done" && step.status !== "skipped");
 }
+function clearTerminalWorkflowStepFailures(results) {
+  const current = results ?? [];
+  const kept = current.filter((result) => result.status !== "failed" && result.status !== "advisory_failure");
+  return kept.length === current.length ? current : kept;
+}
 function workflowStepResultPassed(task, workflowStepId) {
   const results = task?.workflowStepResults ?? [];
   return results.some(
@@ -173031,7 +173133,7 @@ function detectReviewHandoffIntent(commentText) {
   ];
   return handoffPhrases.some((phrase) => text.includes(phrase));
 }
-var execAsync32, AGENT_BROWSER_NAVIGATION_SKILL_ID, yieldEventLoop3, tokenCacheMetricsLog, OPTIONAL_STEP_REVISION_KEY_MARKER2, STEP_STATUSES, MAX_WORKFLOW_STEP_RETRIES, MAX_TASK_DONE_SESSION_RETRIES, MAX_TASK_DONE_REQUEUE_RETRIES, MAX_TRANSIENT_GRAPH_RESUME_RETRIES, TRANSIENT_GRAPH_RESUME_RETRY_BACKOFF_MS, COMPLETED_TASK_WATCHDOG_MS, WORKFLOW_RERUN_WATCHDOG_MS, LOOP_COMPACTION_TIMEOUT_MS, TASK_DONE_REFUSAL_SUFFIX, TRANSIENT_WORKTREE_TASK_JSON_ENOENT_PATTERN, DISSENT_PATTERNS, WORKFLOW_SCRIPT_OUTPUT_MAX_CHARS, NonRetryableWorktreeError, taskUpdateParams, taskAddDepParams, spawnAgentParams, FUSION_WORKFLOW_STEP_CONVENTIONS_PREAMBLE, WORKFLOW_STEP_VERDICTS, reviewStepParams, EXECUTOR_SYSTEM_PROMPT, TaskExecutor;
+var execAsync32, AGENT_BROWSER_NAVIGATION_SKILL_ID, yieldEventLoop3, tokenCacheMetricsLog, OPTIONAL_STEP_REVISION_KEY_MARKER2, STEP_STATUSES, MAX_WORKFLOW_STEP_RETRIES, MAX_TASK_DONE_SESSION_RETRIES, MAX_TASK_DONE_REQUEUE_RETRIES, MAX_TRANSIENT_GRAPH_RESUME_RETRIES, TRANSIENT_GRAPH_RESUME_RETRY_BACKOFF_MS, COMPLETED_TASK_WATCHDOG_MS, WORKFLOW_RERUN_WATCHDOG_MS, LOOP_COMPACTION_TIMEOUT_MS, TASK_DONE_REFUSAL_SUFFIX, TRANSIENT_WORKTREE_TASK_JSON_ENOENT_PATTERN, DISSENT_PATTERNS, WORKFLOW_SCRIPT_OUTPUT_MAX_CHARS, NonRetryableWorktreeError, taskUpdateParams, taskAddDepParams, spawnAgentParams, FUSION_WORKFLOW_STEP_CONVENTIONS_PREAMBLE, reviewStepParams, EXECUTOR_SYSTEM_PROMPT, TaskExecutor;
 var init_executor = __esm({
   "../engine/src/executor.ts"() {
     "use strict";
@@ -173191,7 +173293,6 @@ You are running as a Fusion autonomous workflow step \u2014 NOT an interactive C
 3. Dispatching a \`ce-<persona>\` subagent: do NOT use a raw \`Task ce-*(...)\` call. Instead, read the persona definition from \`$FUSION_CE_AGENTS_DIR/<persona>.md\`, strip its YAML frontmatter, and pass the remaining body as the \`systemPromptOverride\` argument to the \`fn_spawn_agent\` tool. Resolve the path strictly inside \`$FUSION_CE_AGENTS_DIR\` \u2014 reject any \`<persona>\` containing \`/\` or \`..\` (path traversal), and skip a def whose body is empty or implausibly large. If \`fn_spawn_agent\` is not available (a readonly step), do the persona's work inline yourself instead of spawning.
 
 `;
-    WORKFLOW_STEP_VERDICTS = /* @__PURE__ */ new Set(["APPROVE", "APPROVE_WITH_NOTES", "REVISE"]);
     reviewStepParams = Type6.Object({
       step: Type6.Number({ description: "Step number to review (0-indexed; matches the `### Step N:` numbers in PROMPT.md \u2014 Step 0 is Preflight)." }),
       type: Type6.Union(
@@ -174904,6 +175005,18 @@ The tool prevents your session from being killed by the inactivity watchdog duri
        *   this as a successful retry, since the original bounce may itself be
        *   stuck.
        */
+      /*
+      FNXC:ReviewLeniency 2026-07-02-02:10:
+      Clear prior terminal failure results (failed/advisory_failure — incl. optional gate nodes like code-review) so a retry starts clean. Call this ONLY once the task has left the mergeable in-review column (i.e. it is in `todo`): clearing while still in-review drops the merge blocker during the rerun-bounce window and could let a concurrent auto-merge sweep merge an empty-`steps` graph-native task with its gate failure unaddressed. `moveTask(in-review→todo)` already clears ALL results (applyReopenFieldClears), so this is chiefly for the in-progress→todo bounce path where the move does not. Passed/skipped/pending evidence is kept.
+      */
+      async clearTerminalStepFailuresForRetry(taskId) {
+        const live = await this.store.getTask(taskId).catch(() => null);
+        if (!live) return;
+        const cleared = clearTerminalWorkflowStepFailures(live.workflowStepResults);
+        if (cleared !== live.workflowStepResults) {
+          await this.store.updateTask(taskId, { workflowStepResults: cleared }, this.getRunContextFor(taskId));
+        }
+      }
       async performWorkflowRerunBounce(taskId, worktreePath, preserveResumeState = true) {
         const pauseLabel = await this.getExecutionPauseLabel();
         if (pauseLabel) {
@@ -174943,6 +175056,7 @@ The tool prevents your session from being killed by the inactivity watchdog duri
               executorLog.log(`${taskId}: workflow rerun parked in todo \u2014 ${pauseLabelAfterTodo} became active during bounce`);
               return "deferred-paused";
             }
+            await this.clearTerminalStepFailuresForRetry(taskId);
             await this.store.moveTask(taskId, "in-progress");
             return "bounced";
           }
@@ -174953,6 +175067,7 @@ The tool prevents your session from being killed by the inactivity watchdog duri
               executorLog.log(`${taskId}: workflow rerun parked in todo \u2014 ${pauseLabelBeforeResume} became active before resume`);
               return "deferred-paused";
             }
+            await this.clearTerminalStepFailuresForRetry(taskId);
             await this.store.moveTask(taskId, "in-progress");
             return "bounced";
           }
@@ -177870,9 +177985,10 @@ ${prompt}`;
         if (cfg.summaryTarget === "task" && typeof stepOutput === "string" && stepOutput.trim()) {
           contextPatch.summary = stepOutput.trim();
         }
-        const advisoryFailureValue = outcome.malformed ? "advisory_failure" : "failed";
+        const malformed = outcome.malformed === true;
+        const advisoryFailureValue = malformed ? "advisory_failure" : "failed";
         return {
-          outcome: outcome.success || !blocking ? "success" : "failure",
+          outcome: outcome.success || !blocking || malformed ? "success" : "failure",
           value: verdict ?? (outcome.success ? "passed" : advisoryFailureValue),
           ...Object.keys(contextPatch).length > 0 ? { contextPatch } : {}
         };
@@ -178037,6 +178153,29 @@ ${prompt}`;
         if (MERGE_REGION_KINDS.has(failedNode)) return true;
         return failedNode === "merge-manual-hold" || failedNode === "merge-retry";
       }
+      /*
+      FNXC:WorkflowRemediation 2026-07-01-23:40:
+      A live agent session surface for a task proves the work is still executing, independent of the persisted column/pause/status row that handleGraphFailure re-fetches. This mirrors clearPhantomExecutorBinding's `hasLiveSessionSurface` (FN-6736) but deliberately EXCLUDES `this.executing` and graph-routing membership: those are still set for the graph run that is currently ending (graphRouting is cleared in maybeExecuteWorkflowGraph's finally, AFTER handleGraphFailure returns), so including them would report every ending run as "still executing" and suppress all failures. Only a registered coding/step/CLI session surface means a SEPARATE, live agent is working the task.
+      */
+      hasLiveTaskSessionSurface(taskId) {
+        return this.activeSessions.has(taskId) || this.activeStepExecutors.has(taskId) || this.activeWorkflowStepSessions.has(taskId) || this.activeCliTaskSessions.has(taskId);
+      }
+      /*
+      FNXC:WorkflowRemediation 2026-07-01-23:40:
+      A `pre-merge-remediation` / `plan-replan` node (e.g. `code-review-remediation`) is a FIRE-AND-FORGET async scheduler, not a terminal work node: its job is to hand off an implementation fix (sendTaskBackForFix re-dispatches the coding session) and stop traversal. These nodes carry only a `success` rework edge back to their gate and NO `failure` out-edge, so when their schedule call cannot re-arm (missing rehydrated failureContext after a restart → `missing-remediation-context`, `remediation-not-scheduled`, or an exhausted rework budget) the failure bubbles out as the terminal graph outcome and handleGraphFailure would stamp `status:"failed"` — even while a previously-scheduled fix/reviewer session is still live. Classify these nodes so that terminal sink can preserve a still-executing task instead of flagging a spurious failure. Detection prefers the resolved IR `workflowAction` (covers custom workflows), with a node-id fallback for the built-in ids when the IR cannot be resolved.
+      */
+      async isRemediationGraphNode(taskId, failedNode) {
+        if (!failedNode) return false;
+        try {
+          const ir2 = await resolveWorkflowIrForTask(this.store, taskId);
+          const node = ir2?.nodes?.find((n) => n.id === failedNode);
+          const action = node?.config?.workflowAction;
+          if (action === "pre-merge-remediation" || action === "plan-replan") return true;
+          if (node) return false;
+        } catch {
+        }
+        return failedNode === "code-review-remediation" || failedNode === "browser-verification-remediation" || failedNode === "plan-replan";
+      }
       isTerminalMergeGraphFailureValue(value) {
         if (!value) return false;
         const normalized = value.toLowerCase();
@@ -178546,6 +178685,13 @@ ${prompt}`;
               return;
             }
           }
+          if (this.hasLiveTaskSessionSurface(task.id) && await this.isRemediationGraphNode(task.id, failedNode)) {
+            const benignMessage = `Workflow graph ended at remediation node '${failedNode ?? "unknown"}' while a live agent session is still executing \u2014 not flagging as failed; live session preserved`;
+            executorLog.warn(`${task.id}: ${benignMessage}`);
+            await this.store.logEntry(task.id, benignMessage, void 0, this.getRunContextFor(task.id));
+            await this.persistTokenUsage(task.id);
+            return;
+          }
           const message = `Workflow graph terminated with failure at node '${failedNode ?? "unknown"}'`;
           executorLog.warn(`${task.id}: ${message}`);
           await this.store.logEntry(task.id, message, void 0, this.getRunContextFor(task.id));
@@ -178579,6 +178725,7 @@ ${prompt}`;
             recoveryRehome: true
           });
         }
+        await this.clearTerminalStepFailuresForRetry(live.id);
         await this.persistTokenUsage(live.id);
         return true;
       }
@@ -178755,6 +178902,41 @@ ${prompt}`;
         executorLog.log(`${liveTask.id}: executor dispatch blocked by unmet dependencies: ${unmetDeps.join(", ")}`);
         return true;
       }
+      /*
+        FNXC:EphemeralAgents 2026-07-01-00:00:
+        `ephemeralAgentsEnabled: false` means "never spawn short-lived executor-FN-XXXX workers; only permanent agents run work" (see types.ts ephemeralAgentsEnabled). The legacy spawn refusal lives in EphemeralWorkerManager.onTaskStart (ephemeral-worker-manager.ts), but that runs as a fire-and-forget bookkeeping callback AFTER execution has already begun, so it cannot stop a run. The workflow-engine dispatch paths (maybeExecuteWorkflowGraph, workflowAuthoritativeDispatch, maybeDispatchWorkflowWorkEngine) execute tasks in-process without ever consulting the toggle. Any task that reaches execute() without a permanent assignment via a non-scheduler path (resume-after-restart, heartbeat re-entry, mission/autopilot, work-engine claim) therefore ran despite the operator disabling ephemeral agents.
+      
+        This guard is the executor's last line of defense, mirroring the scheduler cutover gate (scheduler.ts:2464) and the spawn refusal (ephemeral-worker-manager.ts:132). It runs once at the top of the outer dispatch — before all three workflow paths — so a single check covers every workflow dispatch entry point. A task explicitly assigned to a permanent (non-ephemeral) agent is exactly how ephemeral-off mode is meant to run, so those are allowed through; everything else is re-queued for the scheduler to auto-assign a permanent agent or hold.
+        */
+      async blockOuterDispatchWhenEphemeralDisabled(task) {
+        const settings = await this.store.getSettings();
+        if (settings.ephemeralAgentsEnabled !== false) return false;
+        const assignedId = task.assignedAgentId?.trim();
+        if (assignedId) {
+          if (!this.options.agentStore) return false;
+          const agent = await this.options.agentStore.getAgent(assignedId).catch(() => null);
+          if (agent && !isEphemeralAgent(agent)) return false;
+        }
+        const liveTask = await this.store.getTask(task.id).catch(() => null) ?? task;
+        if (liveTask.column !== "todo") {
+          await this.store.moveTask(liveTask.id, "todo", {
+            preserveProgress: true,
+            preserveWorktree: true,
+            preserveResumeState: true,
+            moveSource: "engine",
+            recoveryRehome: true
+          });
+        }
+        await this.store.updateTask(liveTask.id, { status: "queued" }, this.getRunContextFor(liveTask.id));
+        await this.store.logEntry(
+          liveTask.id,
+          "queued \u2014 ephemeral agents disabled; no permanent executor assigned",
+          "Executor pre-dispatch ephemeral gate blocked workflow/authoritative execution.",
+          this.getRunContextFor(liveTask.id)
+        );
+        executorLog.log(`${liveTask.id}: executor dispatch blocked \u2014 ephemeralAgentsEnabled=false and no permanent agent assigned`);
+        return true;
+      }
       async execute(task) {
         this.completionFinalizedTaskIds.delete(task.id);
         await this.clearStalePauseAbortBeforeDispatch(task);
@@ -178764,6 +178946,7 @@ ${prompt}`;
             return;
           }
           if (await this.blockOuterDispatchWhenDependenciesUnmet(task)) return;
+          if (await this.blockOuterDispatchWhenEphemeralDisabled(task)) return;
           const graphOwned = await this.maybeExecuteWorkflowGraph(task);
           if (graphOwned) return;
           const authoritativeOwned = await this.options.workflowAuthoritativeDispatch?.(task);
@@ -179629,7 +179812,7 @@ ${summary}`,
           const customTools = [
             this.createTaskUpdateTool(task.id, codeReviewVerdicts, sessionRef, stepCheckpoints, stuckDetector),
             this.createTaskLogTool(task.id),
-            this.createTaskCreateTool(),
+            this.createTaskCreateTool(!identityAgent || isEphemeralAgent(identityAgent)),
             this.createTaskAddDepTool(task.id),
             this.createTaskDoneTool(task.id, worktreePath, detail.prompt ?? "", codeReviewVerdicts, () => {
               taskDone = true;
@@ -181193,8 +181376,12 @@ ${summary}`,
       createTaskLogTool(taskId) {
         return createTaskLogTool(this.store, taskId);
       }
-      createTaskCreateTool() {
-        return createTaskCreateTool(this.store, { sourceType: "api" }, { rootDir: this.rootDir });
+      /*
+      FNXC:EphemeralAgentTaskCreation 2026-07-01-00:00:
+      A task-execution session is an ephemeral worker when no permanent identity agent governs it (default executor-FN-XXXX worker) or the governing agent is itself ephemeral. Pass that through so fn_task_create honors the project `ephemeralAgentsCanCreateTasks` toggle; permanent-agent sessions are never gated.
+      */
+      createTaskCreateTool(callerIsEphemeral) {
+        return createTaskCreateTool(this.store, { sourceType: "api" }, { rootDir: this.rootDir, callerIsEphemeral });
       }
       createTaskDocumentWriteTool(taskId) {
         return createTaskDocumentWriteTool(this.store, taskId);
@@ -183332,7 +183519,7 @@ Review the work done in this worktree and evaluate it against the criteria in yo
             if (parsed.malformed) {
               await this.store.logEntry(
                 task.id,
-                `[pre-merge] Workflow step '${workflowStep.name}' produced malformed output \u2014 blocking gate success`
+                `[pre-merge] Workflow step '${workflowStep.name}' produced malformed output (no parseable verdict) \u2014 recorded as non-blocking advisory`
               );
               if (workflowStep.requiresBrowser === true) {
                 await logBrowserVerificationActivity(`[browser-verification] finished browser verification for task ${task.id}: malformed output`);
@@ -183382,16 +183569,18 @@ Review the work done in this worktree and evaluate it against the criteria in yo
           }
         };
         const primaryOutcome = await runOnce(primaryProvider, primaryModelId, "primary");
-        if (!primaryOutcome.timedOut) return primaryOutcome;
+        const primaryMalformed = primaryOutcome.malformed === true;
+        if (!primaryOutcome.timedOut && !primaryMalformed) return primaryOutcome;
         if (!fallback) {
-          executorLog.warn(`${task.id}: workflow step '${workflowStep.name}' timed out and no fallback model is configured`);
+          const reason = primaryOutcome.timedOut ? "timed out" : "produced malformed output";
+          executorLog.warn(`${task.id}: workflow step '${workflowStep.name}' ${reason} and no fallback model is configured`);
           await this.store.logEntry(
             task.id,
-            `Workflow step '${workflowStep.name}' timed out \u2014 no fallback model configured (set settings.validatorFallbackProvider/Id or fallbackProvider/Id)`
+            `Workflow step '${workflowStep.name}' ${reason} \u2014 no fallback model configured (set settings.validatorFallbackProvider/Id or fallbackProvider/Id)`
           );
           return primaryOutcome;
         }
-        executorLog.log(`${task.id}: retrying workflow step '${workflowStep.name}' with fallback ${fallback.provider}/${fallback.modelId} (label=${fallback.label})`);
+        executorLog.log(`${task.id}: retrying workflow step '${workflowStep.name}' with fallback ${fallback.provider}/${fallback.modelId} (label=${fallback.label}) after primary ${primaryOutcome.timedOut ? "timeout" : "malformed output"}`);
         return runOnce(fallback.provider, fallback.modelId, "fallback");
       }
       MAX_WORKTREE_RETRIES = 3;
@@ -226037,7 +226226,7 @@ var init_src8 = __esm({
   }
 });
 
-// ../../plugins/fusion-plugin-paperclip-runtime/dist/paperclip-client.js
+// ../../plugins/fusion-plugin-paperclip-runtime/src/paperclip-client.ts
 function normalizeApiUrl(url2) {
   return url2.replace(/\/+$/, "");
 }
@@ -226065,19 +226254,18 @@ async function parseJsonBody(response) {
   try {
     return { value: JSON.parse(raw), raw };
   } catch {
-    throw new Error(`Paperclip API ${response.status} ${response.statusText}: invalid JSON response body`);
+    throw new Error(
+      `Paperclip API ${response.status} ${response.statusText}: invalid JSON response body`
+    );
   }
 }
 function toErrorMessage2(status, statusText, body, raw) {
   if (body && typeof body === "object") {
     const b2 = body;
-    if (typeof b2.error === "string")
-      return b2.error;
-    if (typeof b2.message === "string")
-      return b2.message;
+    if (typeof b2.error === "string") return b2.error;
+    if (typeof b2.message === "string") return b2.message;
   }
-  if (raw.trim() !== "")
-    return raw.slice(0, 200).trim();
+  if (raw.trim() !== "") return raw.slice(0, 200).trim();
   return `${status} ${statusText}`.trim();
 }
 async function request(apiUrl, path6, options) {
@@ -226100,8 +226288,7 @@ async function request(apiUrl, path6, options) {
   if (!response.ok) {
     const msg = toErrorMessage2(response.status, response.statusText, value, raw);
     const full = `Paperclip API ${response.status} (${method} ${path6}): ${msg}`;
-    if (response.status === 409)
-      throw new ConflictError(full);
+    if (response.status === 409) throw new ConflictError(full);
     throw new Error(full);
   }
   return value;
@@ -226111,7 +226298,9 @@ function getSettingString(settings, key) {
   return typeof v2 === "string" && v2.trim() !== "" ? v2.trim() : void 0;
 }
 function resolvePaperclipConfig(settings) {
-  const apiUrl = normalizeApiUrl(getSettingString(settings, "apiUrl") ?? process.env.PAPERCLIP_API_URL?.trim() ?? "http://localhost:3100");
+  const apiUrl = normalizeApiUrl(
+    getSettingString(settings, "apiUrl") ?? process.env.PAPERCLIP_API_URL?.trim() ?? "http://localhost:3100"
+  );
   const apiKey = getSettingString(settings, "apiKey") ?? (process.env.PAPERCLIP_API_KEY?.trim() || void 0);
   const agentId = getSettingString(settings, "agentId") ?? process.env.PAPERCLIP_AGENT_ID?.trim() ?? void 0;
   const companyId = getSettingString(settings, "companyId") ?? process.env.PAPERCLIP_COMPANY_ID?.trim() ?? void 0;
@@ -226123,9 +226312,18 @@ function resolvePaperclipConfig(settings) {
   const parentIssueId = getSettingString(settings, "parentIssueId") ?? process.env.PAPERCLIP_PARENT_ISSUE_ID?.trim() ?? void 0;
   const projectId = getSettingString(settings, "projectId") ?? process.env.PAPERCLIP_PROJECT_ID?.trim() ?? void 0;
   const goalId = getSettingString(settings, "goalId") ?? process.env.PAPERCLIP_GOAL_ID?.trim() ?? void 0;
-  const runTimeoutMs = parseInt(getSettingString(settings, "runTimeoutMs") ?? process.env.PAPERCLIP_RUN_TIMEOUT_MS ?? "600000", 10);
-  const pollIntervalMs = parseInt(getSettingString(settings, "pollIntervalMs") ?? process.env.PAPERCLIP_POLL_INTERVAL_MS ?? "500", 10);
-  const pollIntervalMaxMs = parseInt(getSettingString(settings, "pollIntervalMaxMs") ?? process.env.PAPERCLIP_POLL_INTERVAL_MAX_MS ?? "2000", 10);
+  const runTimeoutMs = parseInt(
+    getSettingString(settings, "runTimeoutMs") ?? process.env.PAPERCLIP_RUN_TIMEOUT_MS ?? "600000",
+    10
+  );
+  const pollIntervalMs = parseInt(
+    getSettingString(settings, "pollIntervalMs") ?? process.env.PAPERCLIP_POLL_INTERVAL_MS ?? "500",
+    10
+  );
+  const pollIntervalMaxMs = parseInt(
+    getSettingString(settings, "pollIntervalMaxMs") ?? process.env.PAPERCLIP_POLL_INTERVAL_MAX_MS ?? "2000",
+    10
+  );
   return {
     apiUrl,
     apiKey,
@@ -226218,11 +226416,9 @@ async function getRunEvents(apiUrl, apiKey, runId, afterSeq, limit = 100) {
     apiKey,
     query
   });
-  if (Array.isArray(result))
-    return result;
+  if (Array.isArray(result)) return result;
   const r = result;
-  if (Array.isArray(r.events))
-    return r.events;
+  if (Array.isArray(r.events)) return r.events;
   return [];
 }
 async function probePaperclipConnection(opts) {
@@ -226300,7 +226496,9 @@ function stripAnsi2(str) {
 function remapSpawnError(err, bin) {
   const code = err?.code;
   if (code === "ENOENT") {
-    return new Error(`paperclipai binary not found at ${bin}; install via \`npm i -g paperclipai\``);
+    return new Error(
+      `paperclipai binary not found at ${bin}; install via \`npm i -g paperclipai\``
+    );
   }
   return err instanceof Error ? err : new Error(String(err));
 }
@@ -226336,8 +226534,7 @@ async function spawnPaperclipCliJson(args, opts) {
       const lines = chunk.toString("utf-8").split("\n");
       for (const line of lines) {
         const stripped = stripAnsi2(line).trim();
-        if (stripped)
-          stderrLines.push(stripped);
+        if (stripped) stderrLines.push(stripped);
       }
     });
     child.on("error", (err) => {
@@ -226346,12 +226543,17 @@ async function spawnPaperclipCliJson(args, opts) {
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      if (killed)
-        return;
-      const cleaned = stripAnsi2(Buffer.concat(stdoutChunks).toString("utf-8")).trim();
+      if (killed) return;
+      const cleaned = stripAnsi2(
+        Buffer.concat(stdoutChunks).toString("utf-8")
+      ).trim();
       if (code !== 0) {
         const lastErr = stderrLines.filter(Boolean).pop() ?? "";
-        reject(new Error(lastErr ? `${label} exited ${code}: ${lastErr}` : `${label} exited ${code}`));
+        reject(
+          new Error(
+            lastErr ? `${label} exited ${code}: ${lastErr}` : `${label} exited ${code}`
+          )
+        );
         return;
       }
       if (!cleaned) {
@@ -226361,7 +226563,9 @@ async function spawnPaperclipCliJson(args, opts) {
       try {
         resolve34(JSON.parse(cleaned));
       } catch {
-        reject(new Error(`${label} returned non-JSON output: ${cleaned.slice(0, 200)}`));
+        reject(
+          new Error(`${label} returned non-JSON output: ${cleaned.slice(0, 200)}`)
+        );
       }
     });
   });
@@ -226369,40 +226573,49 @@ async function spawnPaperclipCliJson(args, opts) {
 async function createIssueViaCli(opts) {
   const args = ["issue", "create", "--company-id", opts.companyId];
   args.push("--title", opts.body.title);
-  if (opts.body.description)
-    args.push("--description", opts.body.description);
-  if (opts.body.status)
-    args.push("--status", opts.body.status);
+  if (opts.body.description) args.push("--description", opts.body.description);
+  if (opts.body.status) args.push("--status", opts.body.status);
   if (opts.body.assigneeAgentId)
     args.push("--assignee-agent-id", opts.body.assigneeAgentId);
-  if (opts.body.parentId)
-    args.push("--parent-id", opts.body.parentId);
-  if (opts.body.projectId)
-    args.push("--project-id", opts.body.projectId);
-  if (opts.body.goalId)
-    args.push("--goal-id", opts.body.goalId);
+  if (opts.body.parentId) args.push("--parent-id", opts.body.parentId);
+  if (opts.body.projectId) args.push("--project-id", opts.body.projectId);
+  if (opts.body.goalId) args.push("--goal-id", opts.body.goalId);
   const raw = await spawnPaperclipCliJson(args, opts);
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-    throw new Error(`paperclipai issue create returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`);
+    throw new Error(
+      `paperclipai issue create returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`
+    );
   }
   return raw;
 }
 async function getIssueViaCli(opts) {
-  const raw = await spawnPaperclipCliJson(["issue", "get", opts.issueId], opts);
+  const raw = await spawnPaperclipCliJson(
+    ["issue", "get", opts.issueId],
+    opts
+  );
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-    throw new Error(`paperclipai issue get returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`);
+    throw new Error(
+      `paperclipai issue get returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`
+    );
   }
   return raw;
 }
 async function agentsMeViaCli(opts) {
-  const raw = await spawnPaperclipCliJson(["agent", "get", opts.agentId], opts);
+  const raw = await spawnPaperclipCliJson(
+    ["agent", "get", opts.agentId],
+    opts
+  );
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
-    throw new Error(`paperclipai agent get returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`);
+    throw new Error(
+      `paperclipai agent get returned unexpected payload: ${JSON.stringify(raw).slice(0, 200)}`
+    );
   }
   const id = typeof raw.id === "string" ? raw.id : void 0;
   const cId = typeof raw.companyId === "string" ? raw.companyId : void 0;
   if (!id || !cId) {
-    throw new Error("paperclipai agent get returned a response missing `id` or `companyId`");
+    throw new Error(
+      "paperclipai agent get returned a response missing `id` or `companyId`"
+    );
   }
   return {
     agentId: id,
@@ -226414,7 +226627,7 @@ async function agentsMeViaCli(opts) {
 }
 var ConflictError;
 var init_paperclip_client = __esm({
-  "../../plugins/fusion-plugin-paperclip-runtime/dist/paperclip-client.js"() {
+  "../../plugins/fusion-plugin-paperclip-runtime/src/paperclip-client.ts"() {
     "use strict";
     ConflictError = class extends Error {
       status = 409;
@@ -226426,7 +226639,7 @@ var init_paperclip_client = __esm({
   }
 });
 
-// ../../plugins/fusion-plugin-paperclip-runtime/dist/runtime-adapter.js
+// ../../plugins/fusion-plugin-paperclip-runtime/src/runtime-adapter.ts
 import { randomUUID as randomUUID27 } from "node:crypto";
 function sleep6(ms2) {
   return new Promise((resolve34) => setTimeout(resolve34, ms2));
@@ -226455,22 +226668,20 @@ function pickIssueId(issue2) {
   return issueId;
 }
 function normalizeMode3(mode) {
-  if (mode && VALID_MODES2.has(mode))
-    return mode;
+  if (mode && VALID_MODES2.has(mode)) return mode;
   return "rolling-issue";
 }
 function pickLatestVisibleComment(comments) {
   for (let i = comments.length - 1; i >= 0; i--) {
     const c = comments[i];
     const body = asString3(c.body)?.trim();
-    if (body)
-      return body;
+    if (body) return body;
   }
   return void 0;
 }
 var TERMINAL_RUN_STATUSES2, VALID_MODES2, PaperclipRuntimeAdapter;
 var init_runtime_adapter4 = __esm({
-  "../../plugins/fusion-plugin-paperclip-runtime/dist/runtime-adapter.js"() {
+  "../../plugins/fusion-plugin-paperclip-runtime/src/runtime-adapter.ts"() {
     "use strict";
     init_paperclip_client();
     TERMINAL_RUN_STATUSES2 = /* @__PURE__ */ new Set([
@@ -226490,7 +226701,9 @@ var init_runtime_adapter4 = __esm({
       config;
       logger;
       constructor(config2, logger3) {
-        const resolved = resolvePaperclipConfig(config2);
+        const resolved = resolvePaperclipConfig(
+          config2
+        );
         this.config = {
           ...resolved,
           mode: normalizeMode3(resolved.mode),
@@ -226506,13 +226719,17 @@ var init_runtime_adapter4 = __esm({
             configPath: this.config.cliConfigPath
           });
           if (!discovery.ok) {
-            throw new Error(`Paperclip CLI mode failed: ${discovery.reason} (Switch to API mode in settings if paperclipai isn't installed.)`);
+            throw new Error(
+              `Paperclip CLI mode failed: ${discovery.reason} (Switch to API mode in settings if paperclipai isn't installed.)`
+            );
           }
           effectiveApiUrl = discovery.apiUrl;
           if (!effectiveApiKey) {
             effectiveApiKey = discovery.apiKey;
           }
-          this.logger.info(`Paperclip CLI mode resolved apiUrl=${effectiveApiUrl} (deploymentMode=${discovery.deploymentMode ?? "unknown"})`);
+          this.logger.info(
+            `Paperclip CLI mode resolved apiUrl=${effectiveApiUrl} (deploymentMode=${discovery.deploymentMode ?? "unknown"})`
+          );
         }
         let agentId = this.config.agentId;
         let companyId = this.config.companyId;
@@ -226520,7 +226737,9 @@ var init_runtime_adapter4 = __esm({
           try {
             if (this.config.transport === "cli") {
               if (!agentId) {
-                throw new Error("agentId is required in Local CLI mode (paperclipai has no `agents/me` equivalent \u2014 pick an agent in settings)");
+                throw new Error(
+                  "agentId is required in Local CLI mode (paperclipai has no `agents/me` equivalent \u2014 pick an agent in settings)"
+                );
               }
               const me2 = await agentsMeViaCli({
                 agentId,
@@ -226535,11 +226754,15 @@ var init_runtime_adapter4 = __esm({
             }
           } catch (error2) {
             const reason = error2 instanceof Error ? error2.message : String(error2);
-            throw new Error(`Paperclip runtime could not derive agentId/companyId. Configure them explicitly or check the API key / CLI auth. Underlying error: ${reason}`);
+            throw new Error(
+              `Paperclip runtime could not derive agentId/companyId. Configure them explicitly or check the API key / CLI auth. Underlying error: ${reason}`
+            );
           }
         }
         if (!agentId || !companyId) {
-          throw new Error("Paperclip runtime is missing required config: agentId or companyId. Configure plugin settings (apiUrl, apiKey, agentId, companyId) or PAPERCLIP_* env vars.");
+          throw new Error(
+            "Paperclip runtime is missing required config: agentId or companyId. Configure plugin settings (apiUrl, apiKey, agentId, companyId) or PAPERCLIP_* env vars."
+          );
         }
         const session = {
           apiUrl: effectiveApiUrl,
@@ -226636,18 +226859,15 @@ var init_runtime_adapter4 = __esm({
             if (!finalText) {
               const comments = await getIssueComments(session.apiUrl, session.apiKey, issueId);
               const latest = pickLatestVisibleComment(comments);
-              if (latest)
-                finalText = latest;
+              if (latest) finalText = latest;
             }
           } catch (error2) {
             const reason = error2 instanceof Error ? error2.message : String(error2);
             this.logger.warn(`Paperclip post-run fetch failed: ${reason}`);
           }
         }
-        if (finalText)
-          session.onText?.(finalText);
-        if (stream.thinking)
-          session.onThinking?.(stream.thinking);
+        if (finalText) session.onText?.(finalText);
+        if (stream.thinking) session.onThinking?.(stream.thinking);
         const isError = stream.runStatus === "failed" || stream.runStatus === "timed_out";
         session.onToolEnd?.("paperclip.run", isError || stream.timedOutLocally, {
           runId,
@@ -226695,24 +226915,27 @@ var init_runtime_adapter4 = __esm({
         while (true) {
           let events = [];
           try {
-            events = await getRunEvents(session.apiUrl, session.apiKey, runId, afterSeq, 200);
+            events = await getRunEvents(
+              session.apiUrl,
+              session.apiKey,
+              runId,
+              afterSeq,
+              200
+            );
           } catch (error2) {
             const reason = error2 instanceof Error ? error2.message : String(error2);
             this.logger.warn(`Paperclip getRunEvents failed: ${reason}`);
           }
           for (const ev of events) {
-            if (typeof ev.seq === "number" && ev.seq > afterSeq)
-              afterSeq = ev.seq;
+            if (typeof ev.seq === "number" && ev.seq > afterSeq) afterSeq = ev.seq;
             const type = ev.type ?? "";
             const payload = ev.payload ?? {};
             if (type === "heartbeat.run.status") {
               const next = asString3(payload.status);
-              if (next)
-                runStatus = next;
+              if (next) runStatus = next;
             } else if (type === "heartbeat.run.log") {
               const chunk = asString3(payload.chunk) ?? "";
-              if (!chunk)
-                continue;
+              if (!chunk) continue;
               if (payload.stream === "stdout") {
                 textBuf += chunk;
                 session.onText?.(chunk);
@@ -226724,11 +226947,12 @@ var init_runtime_adapter4 = __esm({
               }
             }
           }
-          if (TERMINAL_RUN_STATUSES2.has(runStatus))
-            break;
+          if (TERMINAL_RUN_STATUSES2.has(runStatus)) break;
           if (Date.now() - startedAt > session.runTimeoutMs) {
             timedOutLocally = true;
-            this.logger.warn(`Paperclip run ${runId} exceeded local runTimeoutMs=${session.runTimeoutMs}; abandoning poll. Run continues server-side.`);
+            this.logger.warn(
+              `Paperclip run ${runId} exceeded local runTimeoutMs=${session.runTimeoutMs}; abandoning poll. Run continues server-side.`
+            );
             break;
           }
           await sleep6(interval);
@@ -226740,17 +226964,20 @@ var init_runtime_adapter4 = __esm({
   }
 });
 
-// ../../plugins/fusion-plugin-paperclip-runtime/dist/index.js
+// ../../plugins/fusion-plugin-paperclip-runtime/src/index.ts
 function getSettingsConfig(settings) {
   return resolvePaperclipConfig(settings ?? {});
 }
 async function paperclipRuntimeFactory(ctx) {
   const config2 = getSettingsConfig(ctx.settings);
-  return new PaperclipRuntimeAdapter(config2, ctx.logger);
+  return new PaperclipRuntimeAdapter(
+    config2,
+    ctx.logger
+  );
 }
 var paperclipRuntime, plugin4;
-var init_dist = __esm({
-  "../../plugins/fusion-plugin-paperclip-runtime/dist/index.js"() {
+var init_src9 = __esm({
+  "../../plugins/fusion-plugin-paperclip-runtime/src/index.ts"() {
     "use strict";
     init_src5();
     init_paperclip_client();
@@ -226795,7 +227022,9 @@ var init_dist = __esm({
             });
             if (status.available) {
               const ident = status.identity;
-              ctx.logger.info(ident ? `Paperclip reachable as ${ident.agentName} (${ident.role ?? "agent"}) at ${ident.companyName ?? ident.companyId}` : `Paperclip reachable at ${config2.apiUrl}`);
+              ctx.logger.info(
+                ident ? `Paperclip reachable as ${ident.agentName} (${ident.role ?? "agent"}) at ${ident.companyName ?? ident.companyId}` : `Paperclip reachable at ${config2.apiUrl}`
+              );
             } else {
               ctx.logger.warn(`Paperclip probe failed: ${status.reason ?? "unknown"}`);
             }
@@ -226816,7 +227045,7 @@ var init_runtime_provider_probes = __esm({
     init_src6();
     init_src7();
     init_src8();
-    init_dist();
+    init_src9();
   }
 });
 
@@ -228649,7 +228878,7 @@ var init_server = __esm({
 
 // ../../plugins/fusion-plugin-roadmap/src/index.ts
 var plugin5;
-var init_src9 = __esm({
+var init_src10 = __esm({
   "../../plugins/fusion-plugin-roadmap/src/index.ts"() {
     "use strict";
     init_src5();
@@ -228686,7 +228915,7 @@ var init_roadmap_routes3 = __esm({
   "../dashboard/src/roadmap-routes.ts"() {
     "use strict";
     init_src();
-    init_src9();
+    init_src10();
     init_project_store_resolver();
   }
 });
@@ -229227,7 +229456,7 @@ var init_plugins = __esm({
 });
 
 // ../dashboard/src/index.ts
-var init_src10 = __esm({
+var init_src11 = __esm({
   "../dashboard/src/index.ts"() {
     "use strict";
     init_server2();
@@ -229570,7 +229799,7 @@ var init_pr = __esm({
     init_src();
     init_gh_cli();
     init_src4();
-    init_src10();
+    init_src11();
     init_project_context();
   }
 });
@@ -231091,7 +231320,7 @@ var init_task = __esm({
     init_src();
     init_src4();
     init_planning();
-    init_src10();
+    init_src11();
     init_gh_cli();
     init_project_context();
     init_node();
@@ -231246,7 +231475,7 @@ init_src();
 init_src();
 init_gh_cli();
 init_src4();
-init_src10();
+init_src11();
 import { Type as Type9 } from "typebox";
 import { StringEnum } from "@earendil-works/pi-ai";
 import { resolve as resolve33, basename as basename19, extname as extname3, join as join66 } from "node:path";
@@ -231365,6 +231594,19 @@ async function validateAssignableAgentId(cwd, agentId, task, override = false) {
   }
   return null;
 }
+async function isEphemeralCallerAgent(cwd, callerAgentId) {
+  if (!callerAgentId) return false;
+  try {
+    const { AgentStore: AgentStore2, isEphemeralAgent: isEphemeralAgent2 } = await Promise.resolve().then(() => (init_src(), src_exports));
+    const agentStore = new AgentStore2({ rootDir: getFusionDir(cwd) });
+    await agentStore.init();
+    const agent = await agentStore.resolveAgent(callerAgentId);
+    if (!agent) return false;
+    return isEphemeralAgent2(agent);
+  } catch {
+    return false;
+  }
+}
 function normalizeNullableStringInput(value) {
   if (value === void 0) {
     return void 0;
@@ -231732,6 +231974,16 @@ function kbExtension(pi2) {
     }),
     async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
       const store = await getStore2(ctx.cwd);
+      const fnCtx = ctx;
+      const projectSettingsForGate = await store.getSettings();
+      if (projectSettingsForGate.ephemeralAgentsCanCreateTasks === false && await isEphemeralCallerAgent(ctx.cwd ?? process.cwd(), fnCtx.agentId)) {
+        const error2 = "Ephemeral task-worker agents are not allowed to create tasks (ephemeralAgentsCanCreateTasks is disabled for this project).";
+        return {
+          content: [{ type: "text", text: `ERROR: ${error2}` }],
+          isError: true,
+          details: { error: error2, rule: "ephemeral-agents-cannot-create-tasks", callerAgentId: fnCtx.agentId }
+        };
+      }
       const normalizedAgentId = normalizeNullableStringInput(params.agentId);
       if (normalizedAgentId !== void 0 && normalizedAgentId !== null) {
         const candidateTask = { id: "<new>", column: "todo" };
@@ -231745,11 +231997,10 @@ function kbExtension(pi2) {
         }
       }
       try {
-        const projectSettings = await store.getSettings();
         const globalSettings = await store.getGlobalSettingsStore().getSettings();
         const resolvedTracking = resolveTaskGithubTracking(
           { githubTracking: void 0 },
-          projectSettings,
+          projectSettingsForGate,
           globalSettings
         );
         const workflowId = params.workflow_id?.trim() || void 0;
@@ -232330,11 +232581,13 @@ Path: .fusion/tasks/${params.id}/attachments/${attachment.filename}`
     }),
     async execute(_toolCallId, params, _signal, _onUpdate, ctx) {
       const store = await getStore2(ctx.cwd);
+      const callerTaskId = ctx.taskId;
       const task = await store.deleteTask(params.id, {
         allowResurrection: params.allowResurrection === true,
         auditContext: {
           agentId: "pi-extension",
-          runId: `synthetic-pi-delete-${params.id}-${Date.now()}`
+          runId: `synthetic-pi-delete-${params.id}-${Date.now()}`,
+          taskId: callerTaskId
         }
       });
       return {