@runfusion/fusion 0.75.1-beta.0 → 0.75.1-beta.2

package/dist/bin.js

@@ -1183,6 +1183,9 @@ function isFusionSiblingBranch(branch) {
 function resolveEffectiveAutoMerge(task, settings) {
   return task.autoMerge ?? settings.autoMerge;
 }
+function hasUserAutoMergeHold(task) {
+  return task.autoMerge === false && task.autoMergeProvenance === "user";
+}
 function allowsAutoMergeProcessing(task, settings) {
   return (settings.autoMerge !== false || task.autoMerge === true) && !taskHasManualOpenPullRequest(task);
 }
@@ -10048,6 +10051,7 @@ function validateForeach(node, topLevelNodeIds, columnIds) {
     );
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "foreach" || inner.kind === "loop") {
       throw new WorkflowIrError(
         `foreach node '${node.id}' template may not contain nested loop/foreach ('${inner.id}')`
@@ -10166,6 +10170,7 @@ function validateLoop(node, topLevelNodeIds, columnIds) {
     );
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "loop" || inner.kind === "foreach") {
       throw new WorkflowIrError(
         `loop node '${node.id}' template may not contain nested loop/foreach ('${inner.id}')`
@@ -10259,6 +10264,7 @@ function validateOptionalGroup(node, topLevelNodeIds, columnIds) {
     throw new WorkflowIrError(`optional-group node '${node.id}' template has duplicate node ids`);
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "loop" || inner.kind === "foreach" || inner.kind === "optional-group") {
       throw new WorkflowIrError(
         `optional-group node '${node.id}' template may not contain nested loop/foreach/optional-group ('${inner.id}')`
@@ -10930,6 +10936,19 @@ function validateColumnRecovery(column) {
     );
   }
 }
+function validateReviewKind(node, placement) {
+  const value = node.config?.reviewKind;
+  if (value === void 0) return;
+  if (value !== "plan" && value !== "code") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has invalid reviewKind '${String(value)}'; expected 'plan' or 'code'`);
+  }
+  if (placement === "nested") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has reviewKind in an unsupported nested template placement`);
+  }
+  if (node.kind !== "prompt" && node.kind !== "gate" && node.kind !== "script" && node.kind !== "optional-group") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has reviewKind on unsupported node kind '${node.kind}'`);
+  }
+}
 function validateV2(ir2) {
   validateColumns(ir2);
   for (const [index3, column] of ir2.columns.entries()) {
@@ -10952,6 +10971,7 @@ function validateV2(ir2) {
   }
   const nodesById = new Map(ir2.nodes.map((n) => [n.id, n]));
   for (const node of ir2.nodes) {
+    validateReviewKind(node, "top-level");
     validateExtensionMetadata(`Workflow node '${node.id}'`, node.extensions);
     if (node.column !== void 0 && !columnIds.has(node.column)) {
       throw new WorkflowIrError(
@@ -13415,6 +13435,7 @@ function codeReviewOptionalGroupNode(column, options = {}) {
     column,
     config: {
       name: CODE_REVIEW_NAME,
+      reviewKind: "code",
       // Default-ON: runs for every coding task by default, but operators can toggle it
       // off per task (remove `code-review` from enabledWorkflowSteps).
       defaultOn: options.defaultOn ?? true,
@@ -13560,6 +13581,7 @@ function planReviewOptionalGroupNode(column, options = {}) {
     ...column ? { column } : {},
     config: {
       name: PLAN_REVIEW_NAME,
+      reviewKind: "plan",
       defaultOn: options.defaultOn ?? true,
       /*
        * FNXC:WorkflowRemediation 2026-06-29-12:14:
@@ -63404,7 +63426,7 @@ function rowToTask(row) {
     executionStartBranch: row.executionStartBranch || void 0,
     branch: row.branch || void 0,
     autoMerge: row.autoMerge === null ? void 0 : row.autoMerge === 1,
-    autoMergeProvenance: row.autoMergeProvenance === "user" || row.autoMergeProvenance === "legacy-stamp" ? row.autoMergeProvenance : void 0,
+    autoMergeProvenance: row.autoMergeProvenance === "user" || row.autoMergeProvenance === "mission" || row.autoMergeProvenance === "legacy-stamp" ? row.autoMergeProvenance : void 0,
     baseCommitSha: row.baseCommitSha || void 0,
     scopeOverride: row.scopeOverride ? true : void 0,
     scopeOverrideReason: row.scopeOverrideReason || void 0,
@@ -72920,10 +72942,10 @@ ${feature.acceptanceCriteria}`);
               Apply the selected Missions header workflow atomically during TaskStore.createTask so newly triaged features land in the intended workflow lane. Duplicate-guard reuses skip this create path, preserving existing duplicate tasks without workflow mutation.
               */
               /*
-              FNXC:MissionAutoMerge 2026-07-18-12:00:
-              An autoMerge:false mission stamps each newly triaged task so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override.
+              FNXC:MissionAutoMerge 2026-08-05-22:50:
+              An autoMerge:false mission stamps each newly triaged task as mission policy so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override; policy must not impersonate an operator manual-hold choice.
               */
-              ...mission?.autoMerge === false ? { autoMerge: false } : {},
+              ...mission?.autoMerge === false ? { autoMerge: false, autoMergeProvenance: "mission" } : {},
               // FNXC:MissionTaskPrefix 2026-07-26-12:00: thread the mission's optional taskPrefix into TaskCreateInput for distributed id minting.
               ...mission?.taskPrefix ? { taskPrefix: mission.taskPrefix } : {},
               ...branchOptions?.workflowId !== void 0 ? { workflowId: branchOptions.workflowId } : {}
@@ -76101,10 +76123,10 @@ ${feature.acceptanceCriteria}`);
                 }
               } : {},
               /*
-              FNXC:MissionAutoMerge 2026-07-18-12:00:
-              An autoMerge:false mission stamps each newly triaged task so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override.
+              FNXC:MissionAutoMerge 2026-08-05-22:50:
+              An autoMerge:false mission stamps each newly triaged task as mission policy so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override; policy must not impersonate an operator manual-hold choice.
               */
-              ...mission?.autoMerge === false ? { autoMerge: false } : {},
+              ...mission?.autoMerge === false ? { autoMerge: false, autoMergeProvenance: "mission" } : {},
               // FNXC:MissionTaskPrefix 2026-07-26-12:00: thread the mission's optional taskPrefix into TaskCreateInput so the distributed allocator mints ERR-N (etc.) instead of the project prefix.
               ...mission?.taskPrefix ? { taskPrefix: mission.taskPrefix } : {},
               ...branchOptions?.workflowId !== void 0 ? { workflowId: branchOptions.workflowId } : {}
@@ -86455,7 +86477,9 @@ async function _createTaskInternalBackendImpl(store, input, title2, resolvedWork
     sourceMetadata: withTaskBranchContextInSourceMetadata(input.source?.sourceMetadata, input.branchContext),
     branchContext: input.branchContext,
     autoMerge: input.autoMerge,
-    autoMergeProvenance: input.autoMerge === void 0 ? void 0 : "user",
+    // FNXC:SharedBranchMemberHold 2026-08-05-22:50: trusted mission creation
+    // preserves policy provenance; operator/API create requests retain user provenance.
+    autoMergeProvenance: input.autoMerge === void 0 ? void 0 : input.autoMergeProvenance ?? "user",
     // FNXC:CodingIdeasWorkflow 2026-07-05-19:45: land the task in its
     // workflow's manual intake column (e.g. Coding (Ideas) → "ideas") when
     // no explicit column is given (main FN-7591 parity).
@@ -127160,6 +127184,36 @@ var init_async_knowledge = __esm({
 });
 
 // ../core/src/workflows/workflow-step-results.ts
+function normalizeWorkflowReviewFindings(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const normalized = [];
+  const usedIds = /* @__PURE__ */ new Set();
+  for (const candidate of raw) {
+    if (normalized.length >= MAX_WORKFLOW_REVIEW_FINDINGS || !candidate || typeof candidate !== "object") continue;
+    const value = candidate;
+    const title2 = boundedTrimmedString(value.title, MAX_FINDING_TITLE_LENGTH);
+    const body = boundedTrimmedString(value.body, MAX_FINDING_BODY_LENGTH);
+    if (!title2 || !body) continue;
+    const baseId = boundedTrimmedString(value.id, MAX_FINDING_ID_LENGTH) || `finding-${normalized.length + 1}`;
+    let id = baseId;
+    let suffix = 2;
+    while (usedIds.has(id)) id = `${baseId.slice(0, Math.max(1, MAX_FINDING_ID_LENGTH - String(suffix).length - 1))}-${suffix++}`;
+    usedIds.add(id);
+    const filePath = boundedTrimmedString(value.filePath, MAX_FINDING_PATH_LENGTH);
+    const line2 = typeof value.line === "number" && Number.isFinite(value.line) && value.line > 0 ? Math.floor(value.line) : void 0;
+    const severity = isWorkflowReviewFindingSeverity(value.severity) ? value.severity : void 0;
+    normalized.push({ id, title: title2, body, ...filePath ? { filePath } : {}, ...line2 ? { line: line2 } : {}, ...severity ? { severity } : {} });
+  }
+  return normalized.length > 0 ? normalized : void 0;
+}
+function boundedTrimmedString(value, maxLength) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed && trimmed.length <= maxLength ? trimmed : void 0;
+}
+function isWorkflowReviewFindingSeverity(value) {
+  return typeof value === "string" && WORKFLOW_REVIEW_FINDING_SEVERITIES.includes(value);
+}
 function isTerminalFailure(result2) {
   return TERMINAL_FAILURE_STATUSES.has(result2.status);
 }
@@ -127225,10 +127279,16 @@ function makeReviewLeaseRecord(args) {
     leaseOwner: args.owner
   };
 }
-var MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS, TERMINAL_FAILURE_STATUSES, PLAN_REVIEW_LEASE_STALENESS_MS, TERMINAL_STEP_STATUSES;
+var WORKFLOW_REVIEW_FINDING_SEVERITIES, MAX_WORKFLOW_REVIEW_FINDINGS, MAX_FINDING_ID_LENGTH, MAX_FINDING_TITLE_LENGTH, MAX_FINDING_BODY_LENGTH, MAX_FINDING_PATH_LENGTH, MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS, TERMINAL_FAILURE_STATUSES, PLAN_REVIEW_LEASE_STALENESS_MS, TERMINAL_STEP_STATUSES;
 var init_workflow_step_results = __esm({
   "../core/src/workflows/workflow-step-results.ts"() {
     "use strict";
+    WORKFLOW_REVIEW_FINDING_SEVERITIES = ["low", "medium", "high", "critical"];
+    MAX_WORKFLOW_REVIEW_FINDINGS = 20;
+    MAX_FINDING_ID_LENGTH = 128;
+    MAX_FINDING_TITLE_LENGTH = 240;
+    MAX_FINDING_BODY_LENGTH = 4e3;
+    MAX_FINDING_PATH_LENGTH = 1e3;
     MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS = 5;
     TERMINAL_FAILURE_STATUSES = /* @__PURE__ */ new Set([
       "failed",
@@ -127297,6 +127357,7 @@ var init_task_timing = __esm({
 });
 
 // ../core/src/session-identity-registry.ts
+import { AsyncLocalStorage } from "node:async_hooks";
 import { resolve as resolve21 } from "node:path";
 import { realpathSync as realpathSync5 } from "node:fs";
 function getRegistry() {
@@ -127308,6 +127369,16 @@ function getRegistry() {
   }
   return registry3;
 }
+function getActiveInvocationStorage() {
+  const holder = globalThis;
+  const existing = holder[ACTIVE_INVOCATION_KEY];
+  if (existing instanceof AsyncLocalStorage) {
+    return existing;
+  }
+  const storage = new AsyncLocalStorage();
+  holder[ACTIVE_INVOCATION_KEY] = storage;
+  return storage;
+}
 function canonicalizeCwd(cwd) {
   const resolved = resolve21(cwd);
   try {
@@ -127335,8 +127406,13 @@ function registerFusionSessionIdentity(cwd, identity) {
   };
 }
 function resolveFusionSessionPrincipal(cwd) {
+  const canonicalCwd = canonicalizeCwd(cwd);
+  const activeInvocation = getActiveInvocationStorage().getStore();
+  if (activeInvocation?.cwdKeys.has(canonicalCwd)) {
+    return { kind: "agent", identity: activeInvocation.identity };
+  }
   const registry3 = getRegistry();
-  const list = registry3.get(canonicalizeCwd(cwd));
+  const list = registry3.get(canonicalCwd);
   if (!list || list.length === 0) {
     return { kind: "operator" };
   }
@@ -127345,14 +127421,24 @@ function resolveFusionSessionPrincipal(cwd) {
   }
   return { kind: "ambiguous", identities: [...list] };
 }
+function runWithFusionSessionIdentity(cwdKeys, identity, callback) {
+  const invocation = {
+    identity: { ...identity, registeredAt: Date.now() },
+    cwdKeys: new Set(cwdKeys.map(canonicalizeCwd))
+  };
+  return getActiveInvocationStorage().run(invocation, callback);
+}
 function __clearFusionSessionIdentityRegistryForTests() {
-  globalThis[REGISTRY_KEY] = /* @__PURE__ */ new Map();
+  const holder = globalThis;
+  holder[REGISTRY_KEY] = /* @__PURE__ */ new Map();
+  holder[ACTIVE_INVOCATION_KEY] = new AsyncLocalStorage();
 }
-var REGISTRY_KEY;
+var REGISTRY_KEY, ACTIVE_INVOCATION_KEY;
 var init_session_identity_registry = __esm({
   "../core/src/session-identity-registry.ts"() {
     "use strict";
     REGISTRY_KEY = "__FUSION_SESSION_IDENTITY_REGISTRY_V1__";
+    ACTIVE_INVOCATION_KEY = "__FUSION_SESSION_IDENTITY_ACTIVE_INVOCATION_V1__";
   }
 });
 
@@ -127715,6 +127801,7 @@ __export(src_exports, {
   MAX_TITLE_LENGTH: () => MAX_TITLE_LENGTH,
   MAX_TITLE_SUMMARIZE_INPUT_LENGTH: () => MAX_TITLE_SUMMARIZE_INPUT_LENGTH,
   MAX_WORKFLOW_ICON_LENGTH: () => MAX_WORKFLOW_ICON_LENGTH,
+  MAX_WORKFLOW_REVIEW_FINDINGS: () => MAX_WORKFLOW_REVIEW_FINDINGS,
   MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS: () => MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS,
   MEMORY_AUDIT_PATH: () => MEMORY_AUDIT_PATH,
   MEMORY_BACKEND_SETTINGS_KEYS: () => MEMORY_BACKEND_SETTINGS_KEYS,
@@ -127916,6 +128003,7 @@ __export(src_exports, {
   WAKE_DELTA_ASSIGNED_TASKS_CAP: () => WAKE_DELTA_ASSIGNED_TASKS_CAP,
   WEDGE_RENOTIFY_COOLDOWN_MS: () => WEDGE_RENOTIFY_COOLDOWN_MS,
   WORKFLOW_EXTENSION_SCHEMA_VERSION: () => WORKFLOW_EXTENSION_SCHEMA_VERSION,
+  WORKFLOW_REVIEW_FINDING_SEVERITIES: () => WORKFLOW_REVIEW_FINDING_SEVERITIES,
   WORKFLOW_SETTING_REJECTION_CODES: () => WORKFLOW_SETTING_REJECTION_CODES,
   WORKFLOW_SETTING_TYPES: () => WORKFLOW_SETTING_TYPES,
   WORKFLOW_WORK_ITEM_KINDS: () => WORKFLOW_WORK_ITEM_KINDS,
@@ -128321,6 +128409,7 @@ __export(src_exports, {
   hasRoleOverrides: () => hasRoleOverrides,
   hasSyncPassphraseConfigured: () => hasSyncPassphraseConfigured,
   hasTitleIdDrift: () => hasTitleIdDrift,
+  hasUserAutoMergeHold: () => hasUserAutoMergeHold,
   hashWorkflowIr: () => hashWorkflowIr,
   healSchemaDrift: () => healSchemaDrift,
   importMcpServersJson: () => importMcpServersJson,
@@ -128443,6 +128532,7 @@ __export(src_exports, {
   isWipColumn: () => isWipColumn,
   isWipColumnRole: () => isWipColumnRole,
   isWorkflowOptionalGroupEnabled: () => isWorkflowOptionalGroupEnabled,
+  isWorkflowReviewFindingSeverity: () => isWorkflowReviewFindingSeverity,
   isWorkspaceTask: () => isWorkspaceTask,
   layoutForIr: () => layoutForIr,
   listActiveAiSessions: () => listActiveAiSessions,
@@ -128516,6 +128606,7 @@ __export(src_exports, {
   normalizeValidationDiagnostics: () => normalizeValidationDiagnostics,
   normalizeWorkflowIcon: () => normalizeWorkflowIcon,
   normalizeWorkflowPromptOverrides: () => normalizeWorkflowPromptOverrides,
+  normalizeWorkflowReviewFindings: () => normalizeWorkflowReviewFindings,
   notifyOperatorOfNonOperatorDelete: () => notifyOperatorOfNonOperatorDelete,
   overseerAdviceSeverityRank: () => overseerAdviceSeverityRank,
   parseAgentManifest: () => parseAgentManifest,
@@ -128779,6 +128870,7 @@ __export(src_exports, {
   runMemoryBackupCommand: () => runMemoryBackupCommand,
   runReconciliationAbort: () => runReconciliationAbort,
   runScheduledEvalBatch: () => runScheduledEvalBatch,
+  runWithFusionSessionIdentity: () => runWithFusionSessionIdentity,
   sanitizeBranchSegment: () => sanitizeBranchSegment,
   sanitizeCliAgentSettings: () => sanitizeCliAgentSettings,
   sanitizeCliAgentsSettings: () => sanitizeCliAgentsSettings,
@@ -158170,6 +158262,7 @@ import { existsSync as existsSync43, readFileSync as readFileSync15, realpathSyn
 import { exec as exec2, execFile as execFile7 } from "node:child_process";
 import { promisify as promisify6 } from "node:util";
 import { createRequire as createRequire5 } from "node:module";
+import { randomUUID as randomUUID43 } from "node:crypto";
 import { basename as basename13, dirname as dirname21, join as join56, relative as relative6, isAbsolute as isAbsolute8, resolve as resolve24 } from "node:path";
 import {
   createAgentSession,
@@ -159880,7 +159973,8 @@ async function createFnAgent2(options) {
     });
   };
   const sessionIdentity = (() => {
-    const principalAgentId = options.actionGateContext?.agentId ?? options.permanentAgentGating?.requester?.actorId ?? "engine-session";
+    const namedAgentId = options.actionGateContext?.agentId ?? options.permanentAgentGating?.requester?.actorId;
+    const principalAgentId = namedAgentId ?? `engine-session-${randomUUID43()}`;
     const principalAgentName = options.actionGateContext?.agentName ?? options.permanentAgentGating?.requester?.actorName;
     return {
       agentId: principalAgentId,
@@ -159892,6 +159986,14 @@ async function createFnAgent2(options) {
   const sessionIdentityKeys = [...new Set([options.cwd, resolvedProjectRoot].filter((key) => Boolean(key)))];
   const attachSessionIdentity = (session) => {
     const identityDisposers = sessionIdentityKeys.map((key) => registerFusionSessionIdentity(key, sessionIdentity));
+    const sessionInvocations = session;
+    const wrapInvocation = (methodName) => {
+      const original = sessionInvocations[methodName];
+      if (typeof original !== "function") return;
+      sessionInvocations[methodName] = (...args) => runWithFusionSessionIdentity(sessionIdentityKeys, sessionIdentity, () => original.apply(session, args));
+    };
+    wrapInvocation("prompt");
+    wrapInvocation("promptWithFallback");
     const disposeBeforeIdentity = typeof session.dispose === "function" ? session.dispose.bind(session) : () => void 0;
     session.dispose = async () => {
       for (const disposeIdentity of identityDisposers) {
@@ -168091,10 +168193,11 @@ function createMergeAttemptHandler(deps) {
     );
   };
 }
-function createMergeGateHandler() {
+function createMergeGateHandler(deps = {}) {
   return async (_node, ctx) => {
     const settingsAutoMerge = ctx.settings?.autoMerge;
-    const autoMerge = ctx.task.autoMerge !== false && settingsAutoMerge !== false;
+    const settings = { autoMerge: settingsAutoMerge ?? true };
+    const autoMerge = !hasUserAutoMergeHold(ctx.task) && (await deps.isLiveSharedBranchMember?.(ctx.task, settings) === true || ctx.task.autoMerge !== false && settings.autoMerge !== false);
     return {
       outcome: "success",
       value: autoMerge ? "auto-on" : "auto-off"
@@ -168104,6 +168207,7 @@ function createMergeGateHandler() {
 var init_merge_runner = __esm({
   "../engine/src/workflow-node-runners/merge-runner.ts"() {
     "use strict";
+    init_src2();
     init_workflow_merge_nodes();
   }
 });
@@ -168447,7 +168551,7 @@ function createDefaultNodeHandlers(seams, runCustomNode, deps) {
     "parse-steps": parseSteps,
     code: createCodeNodeHandler(deps?.runCode),
     notify: createNotifyHandler(deps?.notifyDispatch),
-    "merge-gate": createMergeGateHandler(),
+    "merge-gate": createMergeGateHandler({ isLiveSharedBranchMember: deps?.isLiveSharedBranchMember }),
     "merge-attempt": createMergeAttemptHandler({
       primitives: deps?.primitives,
       seams,
@@ -168845,7 +168949,7 @@ var init_code_node_runner = __esm({
 // ../engine/src/agent-tools.ts
 import { appendFile as appendFile3, mkdir as mkdir26, readFile as readFile32, readdir as readdir9, realpath, stat as stat9, writeFile as writeFile24 } from "node:fs/promises";
 import { existsSync as existsSync50 } from "node:fs";
-import { createHash as createHash19, randomUUID as randomUUID43 } from "node:crypto";
+import { createHash as createHash19, randomUUID as randomUUID44 } from "node:crypto";
 import { tmpdir as tmpdir5 } from "node:os";
 import { extname as extname3, isAbsolute as isAbsolute12, join as join62, relative as relative11, resolve as resolve33, sep as sep9 } from "node:path";
 import { Type as Type2 } from "@earendil-works/pi-ai";
@@ -169491,7 +169595,7 @@ function createTaskCreateTool(store, provenance, options) {
               toType: "user",
               type: "agent-to-user",
               content: `Task proposal awaiting validation: ${title2}`,
-              metadata: { kind: "task-proposal", proposalStatus: "pending", proposalIdempotencyKey: randomUUID43(), taskId: options.sourceTaskId, proposedTask: { title: title2, description: params.description, priority: params.priority, workflowId: params.workflow_id, dependencies: params.dependencies } }
+              metadata: { kind: "task-proposal", proposalStatus: "pending", proposalIdempotencyKey: randomUUID44(), taskId: options.sourceTaskId, proposedTask: { title: title2, description: params.description, priority: params.priority, workflowId: params.workflow_id, dependencies: params.dependencies } }
             });
             return { content: [{ type: "text", text: "Task proposal submitted to the operator for validation; no task was created." }], details: { proposed: true } };
           }
@@ -173916,37 +174020,6 @@ var init_effective_settings = __esm({
   }
 });
 
-// ../engine/src/errors/transient-merge-error-classifier.ts
-function classifyTransientMergeError(error3) {
-  if (!error3) return null;
-  if (/lease-handoff-failed[^a-z]+target-not-queued/i.test(error3)) {
-    return "lease-handoff-target-not-queued";
-  }
-  if (/\bACP turn failed\b/i.test(error3) || /\bacp rpc code -32(?:603|00[0-3])\b/i.test(error3)) {
-    return "ai-provider-turn-failure";
-  }
-  if (/\bspawn(?:\s+\S+)?\s+ENO(?:TDIR|ENT)\b/i.test(error3)) {
-    return "process-spawn-failure";
-  }
-  if (/\bis not a working tree\b/i.test(error3)) {
-    return "process-spawn-failure";
-  }
-  const sameSha = error3.match(/advanced concurrently \(expected ([0-9a-f]{7,40}),\s+observed ([0-9a-f]{7,40})\)/i);
-  if (sameSha && sameSha[1].toLowerCase() === sameSha[2].toLowerCase()) {
-    return "spurious-concurrent-advance-same-sha";
-  }
-  if (isTransientError(error3)) {
-    return "network-transport-failure";
-  }
-  return null;
-}
-var init_transient_merge_error_classifier = __esm({
-  "../engine/src/errors/transient-merge-error-classifier.ts"() {
-    "use strict";
-    init_transient_error_patterns();
-  }
-});
-
 // ../engine/src/notification/ntfy-provider.ts
 function resolveParticipantLabel(metadata, kind) {
   const nameKey = kind === "from" ? "fromName" : "toName";
@@ -174420,7 +174493,50 @@ var init_webhook_provider = __esm({
   }
 });
 
+// ../engine/src/errors/transient-merge-error-classifier.ts
+function classifyTransientMergeError(error3) {
+  if (!error3) return null;
+  if (/lease-handoff-failed[^a-z]+target-not-queued/i.test(error3)) {
+    return "lease-handoff-target-not-queued";
+  }
+  if (/\bACP turn failed\b/i.test(error3) || /\bacp rpc code -32(?:603|00[0-3])\b/i.test(error3)) {
+    return "ai-provider-turn-failure";
+  }
+  if (/\bspawn(?:\s+\S+)?\s+ENO(?:TDIR|ENT)\b/i.test(error3)) {
+    return "process-spawn-failure";
+  }
+  if (/\bis not a working tree\b/i.test(error3)) {
+    return "process-spawn-failure";
+  }
+  const sameSha = error3.match(/advanced concurrently \(expected ([0-9a-f]{7,40}),\s+observed ([0-9a-f]{7,40})\)/i);
+  if (sameSha && sameSha[1].toLowerCase() === sameSha[2].toLowerCase()) {
+    return "spurious-concurrent-advance-same-sha";
+  }
+  if (isTransientError(error3)) {
+    return "network-transport-failure";
+  }
+  return null;
+}
+function hasTransientMergeRecoveryOwner(task) {
+  return classifyTransientMergeError(task.error) !== null && typeof task.mergeTransientRetryCount === "number" && Number.isInteger(task.mergeTransientRetryCount) && task.mergeTransientRetryCount >= 0 && task.mergeTransientRetryCount < MAX_AUTO_MERGE_TRANSIENT_RETRIES;
+}
+var MAX_AUTO_MERGE_TRANSIENT_RETRIES;
+var init_transient_merge_error_classifier = __esm({
+  "../engine/src/errors/transient-merge-error-classifier.ts"() {
+    "use strict";
+    init_transient_error_patterns();
+    MAX_AUTO_MERGE_TRANSIENT_RETRIES = 5;
+  }
+});
+
 // ../engine/src/notification/task-wedge-notification.ts
+function describeTaskRecoveryOwner(task) {
+  if (hasTransientMergeRecoveryOwner(task)) return { kind: "transient-merge-retry" };
+  if (typeof task.recoveryRetryCount === "number" && Number.isInteger(task.recoveryRetryCount) && task.recoveryRetryCount >= 0 && typeof task.nextRecoveryAt === "string" && Number.isFinite(Date.parse(task.nextRecoveryAt))) {
+    return { kind: "scheduled-recovery" };
+  }
+  return null;
+}
 function describeSelfHealingNoActionWedge(task, stage, metadata) {
   const description = SELF_HEALING_NO_ACTIONS[stage];
   if (!description || task.userPaused || task.paused || task.autoMerge === false) return null;
@@ -174478,6 +174594,7 @@ function describeTaskWedge(task) {
   if (/merge.*(?:blocked|verification|gate)|(?:verification|gate).*(?:failed|exhaust)/i.test(error3)) {
     return { reasonKey: "merge-blocked", reason: "Merge verification cannot progress without operator action.", action: "Fix the failing verification, then retry the task." };
   }
+  if (describeTaskRecoveryOwner(task)) return null;
   if (!error3 && (task.mergeRetries ?? 0) < 3) return null;
   return {
     reasonKey: "terminal-failed",
@@ -174489,6 +174606,7 @@ var SELF_HEALING_NO_ACTIONS;
 var init_task_wedge_notification = __esm({
   "../engine/src/notification/task-wedge-notification.ts"() {
     "use strict";
+    init_transient_merge_error_classifier();
     SELF_HEALING_NO_ACTIONS = {
       "reclaim-pr-conflict": {
         reason: "Self-healing could not reclaim a stalled pull-request conflict.",
@@ -174554,7 +174672,6 @@ var init_notification_service = __esm({
     init_src2();
     init_notifier();
     init_logger3();
-    init_transient_merge_error_classifier();
     init_ntfy_provider();
     init_webhook_provider();
     init_task_wedge_notification();
@@ -174780,10 +174897,10 @@ var init_notification_service = __esm({
         }
       }
       handleTaskUpdated = (task, meta2) => {
-        const transientFailure = task.status === "failed" ? classifyTransientMergeError(task.error) : null;
-        const wedge = transientFailure ? null : describeTaskWedge(task);
+        const recoveryOwner = task.status === "failed" ? describeTaskRecoveryOwner(task) : null;
+        const wedge = describeTaskWedge(task);
         if (wedge) this.cancelPendingFailureNotification(task.id, "classified-terminal-wedge");
-        if (!transientFailure) void this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, wedge));
+        void this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, wedge));
         void this.maybeSuppressTransientFailedNotification(task, `status=${task.status ?? "undefined"}`);
         if (task.status === "awaiting-approval") {
           void this.writeAwaitingApprovalMailboxMessage(task);
@@ -174794,17 +174911,12 @@ var init_notification_service = __esm({
         if (!this.notificationsEnabled) {
           return;
         }
-        if (task.status === "failed" && !wedge) {
-          const transientClass = classifyTransientMergeError(task.error);
-          if (transientClass) {
-            this.failureNotificationSuppressedCount += 1;
-            schedulerLog.debug(
-              `[notify] ${task.id} transient merge failure (${transientClass}) \u2014 suppressed notification (self-heal in flight)`
-            );
-            return;
-          }
+        if (task.status === "failed" && recoveryOwner) {
+          this.failureNotificationSuppressedCount += 1;
+          schedulerLog.debug(`[notify] ${task.id} recovery-owned failure \u2014 suppressed notification`);
+        } else if (task.status === "failed" && !wedge) {
           if (this.failureNotificationMode === "all") {
-            this.maybeNotify(task.id, "failed", this.createTaskPayload(task, "failed"));
+            void this.maybeNotifyImmediateFailure(task);
           } else {
             this.scheduleFailureNotification(task);
           }
@@ -174891,7 +175003,17 @@ var init_notification_service = __esm({
         await this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, descriptor));
       }
       async maybeNotifyTaskWedge(task, suppliedDescriptor) {
-        const descriptor = suppliedDescriptor ?? describeTaskWedge(task);
+        const liveTask = this.store.getTask ? await this.store.getTask(task.id) ?? task : task;
+        const recoveryOwner = describeTaskRecoveryOwner(liveTask);
+        if (recoveryOwner) {
+          if (this.activeWedgeReasons.has(task.id) || liveTask.wedgeNotification?.status === "active") {
+            this.activeWedgeReasons.delete(task.id);
+            await this.store.claimTaskWedgeNotificationEpisode?.(task.id, null);
+          }
+          return;
+        }
+        const descriptor = suppliedDescriptor ?? describeTaskWedge(liveTask);
+        task = liveTask;
         let episode;
         if (!descriptor) {
           const isActiveSelfHealingNoAction = task.wedgeNotification?.status === "active" && task.wedgeNotification.reasonKey.startsWith("self-healing-no-action:");
@@ -175258,6 +175380,14 @@ var init_notification_service = __esm({
         this.failureNotificationDelayMs = typeof settings.failureNotificationDelayMs === "number" && settings.failureNotificationDelayMs >= 0 ? settings.failureNotificationDelayMs : this.failedNotificationGraceMs;
         this.failureNotificationMode = settings.failureNotificationMode ?? "sticky-only";
       }
+      async maybeNotifyImmediateFailure(task) {
+        const liveTask = this.store.getTask ? await this.store.getTask(task.id) ?? task : task;
+        if (liveTask.status !== "failed" || describeTaskRecoveryOwner(liveTask) || describeTaskWedge(liveTask)) {
+          this.failureNotificationSuppressedCount += 1;
+          return;
+        }
+        this.maybeNotify(liveTask.id, "failed", this.createTaskPayload(liveTask, "failed"));
+      }
       scheduleFailureNotification(task) {
         if (this.pendingFailureNotifications.has(task.id)) {
           return;
@@ -175314,12 +175444,9 @@ var init_notification_service = __esm({
           schedulerLog.debug(`[notify] ${taskId} no longer failed at dispatch time \u2014 suppressed notification`);
           return;
         }
-        const transientClassAtDispatch = classifyTransientMergeError(task.error);
-        if (transientClassAtDispatch) {
+        if (describeTaskRecoveryOwner(task)) {
           this.failureNotificationSuppressedCount += 1;
-          schedulerLog.debug(
-            `[notify] ${taskId} transient merge failure (${transientClassAtDispatch}) at dispatch time \u2014 suppressed notification (self-heal in flight)`
-          );
+          schedulerLog.debug(`[notify] ${taskId} recovery-owned failure at dispatch time \u2014 suppressed notification`);
           return;
         }
         if (describeTaskWedge(task)) {
@@ -186974,10 +187101,21 @@ var init_scheduler = __esm({
               const unmetDeps = getUnmetSchedulingDependencies(task, tasks2, schedulingDependencyOptions);
               if (unmetDeps.length > 0) {
                 const normalizedUnmetDeps = [...new Set(unmetDeps)].sort();
+                let activeOverlapBlockedBy = null;
+                if (activeScopes.size > 0) {
+                  try {
+                    const taskScope = await getFilteredFileScope(task.id);
+                    if (taskScope.length > 0 && !isCoordinationOnlyTask(task, taskScope)) {
+                      activeOverlapBlockedBy = Array.from(activeScopes.entries()).sort(([aId], [bId]) => aId.localeCompare(bId)).find(([, activeScope]) => this.pathsOverlap(taskScope, activeScope))?.[0] ?? null;
+                    }
+                  } catch (error3) {
+                    schedulerLog.warn(`Failed to refresh file-scope overlap blocker for dependency-blocked task ${task.id}`, error3);
+                  }
+                }
                 await this.transitionQueuedEpisode(task, {
                   signature: `dependency:${normalizedUnmetDeps.join(",")}`,
                   blockedBy: unmetDeps[0] ?? null,
-                  overlapBlockedBy: task.overlapBlockedBy ?? null,
+                  overlapBlockedBy: activeOverlapBlockedBy,
                   action: `queued \u2014 unmet dependencies: ${unmetDeps.join(", ")}`
                 });
                 this.options.onBlocked?.(task, unmetDeps);
@@ -203034,16 +203172,29 @@ var init_self_healing = __esm({
           activeWork: await this.resolveActiveWorkColumnsFor(taskId, cache7)
         };
       }
-      classifyPausedAbortWorkflowRecovery(task, settings, isExecuting, columns) {
+      /*
+      FNXC:SharedBranchMemberHold 2026-08-05-23:35:
+      Pause-abort recovery must resolve the same live intermediate-group predicate as
+      merge admission. Shared metadata alone is stale after group closure or a
+      default-branch collision, so it cannot suppress that task's standalone hold.
+      */
+      async isLiveSharedMemberIntegration(task, settings) {
+        const groupId = task.branchContext?.groupId?.trim();
+        const group = groupId ? await this.store.getBranchGroup?.(groupId) : null;
+        const defaultBranch = await resolveIntegrationBranch(this.options.rootDir, settings);
+        return isLiveSharedBranchGroupMemberIntegration(task, group, defaultBranch);
+      }
+      async classifyPausedAbortWorkflowRecovery(task, settings, isExecuting, columns) {
         const isPausedAbortPark = task.status === "failed" && typeof task.error === "string" && task.error.includes(PAUSE_ABORT_PARK_OPERATOR_MARKER) && task.error.includes(PAUSE_ABORT_PARK_ERROR_MARKER);
         if (!isPausedAbortPark) return { kind: "no-action", reason: "not-pause-abort" };
         if (task.paused || task.userPaused || isExecuting) return { kind: "no-action", reason: "unsafe-or-not-routable" };
         const errorText = typeof task.error === "string" ? task.error.toLowerCase() : "";
         const isTerminalMergePark = errorText.includes("conflict") || errorText.includes("contamination") || errorText.includes("foreign") || errorText.includes("retry-exhausted") || errorText.includes("retries exhausted") || errorText.includes("max retries");
         const completedSteps = task.steps.length > 0 && task.steps.every((step) => step.status === "done" || step.status === "skipped");
-        const sharedBranchMember = isSharedBranchGroupMemberIntegration(task);
-        const hasReviewProgress = columns.review.has(task.column) && allowsAutoMergeProcessing(task, settings) && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
-        const hasManualMergeHoldProgress = columns.review.has(task.column) && (!allowsAutoMergeProcessing(task, settings) || resolveEffectiveAutoMerge(task, settings) === false) && !sharedBranchMember && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
+        const liveSharedBranchMember = await this.isLiveSharedMemberIntegration(task, settings);
+        const autoMergeProcessing = allowsAutoMergeProcessing(task, settings) || liveSharedBranchMember;
+        const hasReviewProgress = columns.review.has(task.column) && autoMergeProcessing && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
+        const hasManualMergeHoldProgress = columns.review.has(task.column) && (hasUserAutoMergeHold(task) || !allowsAutoMergeProcessing(task, settings) || resolveEffectiveAutoMerge(task, settings) === false) && (!liveSharedBranchMember || hasUserAutoMergeHold(task)) && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
         if (hasManualMergeHoldProgress) {
           return { kind: "work-item-resume", reason: "pause-abort-manual-merge-hold" };
         }
@@ -208711,8 +208862,23 @@ var init_self_healing = __esm({
             return own.length > 0 ? new Set(own) : /* @__PURE__ */ new Set(["in-review"]);
           };
           const executingIds = this.options.getExecutingTaskIds?.() ?? /* @__PURE__ */ new Set();
+          const canRecoverMergeableReviewTask = async (task) => {
+            if (hasUserAutoMergeHold(task)) return false;
+            const groupId = task.branchContext?.groupId?.trim();
+            const branchGroup = groupId ? await this.store.getBranchGroup(groupId) : null;
+            const projectDefaultBranch = await resolveIntegrationBranch(this.options.rootDir, settings);
+            if (isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch)) {
+              return true;
+            }
+            return allowsAutoMergeProcessing(task, settings) && resolveEffectiveAutoMerge(task, settings) !== false;
+          };
+          const mergeAdmission = await Promise.all(tasks2.map(async (task) => [
+            task.id,
+            await canRecoverMergeableReviewTask(task)
+          ]));
+          const mergeAdmissionByTaskId = new Map(mergeAdmission);
           const mergeable = tasks2.filter(
-            (t) => allowsAutoMergeProcessing(t, settings) && !t.paused && !executingIds.has(t.id) && t.status !== "failed" && // Exclude transient merge statuses. Active merges should be left alone;
+            (t) => mergeAdmissionByTaskId.get(t.id) === true && !t.paused && !executingIds.has(t.id) && t.status !== "failed" && // Exclude transient merge statuses. Active merges should be left alone;
             // stale ones are handled by recoverStaleMergingStatus().
             t.status !== "merging" && t.status !== "merging-pr" && // FNXC:Workspace 2026-06-22-09:30 (Phase D U1, KTD1 — admit workspace tasks):
             // A workspace task has task.worktree===null (its worktrees live per-repo in
@@ -211759,7 +211925,7 @@ var init_self_healing = __esm({
           for (const t of tasks2) {
             if (!this.isPauseAbortParkCandidate(t)) continue;
             const columns = await this.resolvePauseAbortColumnsFor(t.id, columnCache);
-            if (this.classifyPausedAbortWorkflowRecovery(t, settings, executingIds.has(t.id), columns).kind !== "no-action") {
+            if ((await this.classifyPausedAbortWorkflowRecovery(t, settings, executingIds.has(t.id), columns)).kind !== "no-action") {
               parked.push(t);
             }
           }
@@ -211776,7 +211942,7 @@ var init_self_healing = __esm({
                 continue;
               }
               const freshColumns = await this.resolvePauseAbortColumnsFor(fresh.id, columnCache);
-              const route = this.classifyPausedAbortWorkflowRecovery(fresh, settings, latestExecutingIds.has(fresh.id), freshColumns);
+              const route = await this.classifyPausedAbortWorkflowRecovery(fresh, settings, latestExecutingIds.has(fresh.id), freshColumns);
               if (route.kind === "no-action") {
                 continue;
               }
@@ -218779,7 +218945,7 @@ function recoverPassedPlanReviewFromLatestLog(task) {
     completedAt: latest.timestamp
   };
 }
-var PLAN_REVIEW_PROVIDER_FAILURE_HOLD_VALUE, PLAN_REVIEW_LEASE_HELD_VALUE, SESSION_CONTENTION_HOLD_VALUE, WORKFLOW_INTERRUPTED_NODE_ID_CONTEXT_KEY, WORKFLOW_INTERRUPTED_NODE_ABORT_KIND_CONTEXT_KEY, WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY, WORKFLOW_NODE_ENGINE_PAUSE_ABORT_KIND, WORKFLOW_DRIFT_PARK_CONTEXT_KEY, WorkflowGraphSuspended, MERGE_REGION_KINDS, WorkflowGraphExecutor;
+var PLAN_REVIEW_PROVIDER_FAILURE_HOLD_VALUE, PLAN_REVIEW_LEASE_HELD_VALUE, SESSION_CONTENTION_HOLD_VALUE, WORKFLOW_INTERRUPTED_NODE_ID_CONTEXT_KEY, WORKFLOW_INTERRUPTED_NODE_ABORT_KIND_CONTEXT_KEY, WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY, WORKFLOW_REVIEW_KIND_CONTEXT_KEY, WORKFLOW_NODE_ENGINE_PAUSE_ABORT_KIND, WORKFLOW_DRIFT_PARK_CONTEXT_KEY, WorkflowGraphSuspended, MERGE_REGION_KINDS, WorkflowGraphExecutor;
 var init_workflow_graph_executor = __esm({
   "../engine/src/workflows/workflow-graph-executor.ts"() {
     "use strict";
@@ -218799,6 +218965,7 @@ var init_workflow_graph_executor = __esm({
     WORKFLOW_INTERRUPTED_NODE_ID_CONTEXT_KEY = "workflow:interruptedNodeId";
     WORKFLOW_INTERRUPTED_NODE_ABORT_KIND_CONTEXT_KEY = "workflow:interruptedNodeAbortKind";
     WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY = "workflow:optionalGroupActive";
+    WORKFLOW_REVIEW_KIND_CONTEXT_KEY = "workflow:reviewKind";
     WORKFLOW_NODE_ENGINE_PAUSE_ABORT_KIND = "engine-pause";
     WORKFLOW_DRIFT_PARK_CONTEXT_KEY = "workflow:driftPark";
     WorkflowGraphSuspended = class extends Error {
@@ -218826,7 +218993,8 @@ var init_workflow_graph_executor = __esm({
             parseSteps: deps.parseStepsDeps,
             runCode: deps.runCode,
             notifyDispatch: deps.notifyDispatch,
-            prNodes: deps.prNodes
+            prNodes: deps.prNodes,
+            isLiveSharedBranchMember: deps.isLiveSharedBranchMember
           }),
           ...deps.runnerRegistry?.toHandlers() ?? {},
           ...deps.handlers ?? {}
@@ -219047,6 +219215,7 @@ var init_workflow_graph_executor = __esm({
               phase: stepPhase,
               status: "pending",
               source: "optional-group",
+              ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
               startedAt: stepStartedAt,
               // U3/KTD-4: stamp the lease owner so a concurrent/crashed re-entry
               // adopts this pending gate instead of dispatching a second reviewer.
@@ -219066,7 +219235,8 @@ var init_workflow_graph_executor = __esm({
               runTemplateNode: (tNode, sig, contextOverride) => {
                 const optionalGroupContext = {
                   ...contextOverride ?? context,
-                  [WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY]: node.id
+                  [WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY]: node.id,
+                  ...this.workflowReviewKind(node) ? { [WORKFLOW_REVIEW_KIND_CONTEXT_KEY]: this.workflowReviewKind(node) } : {}
                 };
                 return this.executeNodeWithRetries(tNode, task, settings, optionalGroupContext, ir2, sig, false);
               },
@@ -219084,6 +219254,7 @@ var init_workflow_graph_executor = __esm({
             const exitContextPatch = exitResult?.contextPatch;
             let stepOutput = typeof exitContextPatch?.output === "string" ? exitContextPatch.output : void 0;
             const stepNotes = typeof exitContextPatch?.notes === "string" ? exitContextPatch.notes : void 0;
+            const stepFindings = this.workflowReviewKind(node) && Array.isArray(exitContextPatch?.findings) ? exitContextPatch.findings : void 0;
             if (stepStatus === "failed" && !verdict && stepOutput === void 0 && stepNotes === void 0) {
               const lastVisited = groupResult.visitedNodeIds[groupResult.visitedNodeIds.length - 1];
               const templateNodeId = lastVisited?.includes("::") ? lastVisited.slice(lastVisited.indexOf("::") + 2) : void 0;
@@ -219101,9 +219272,11 @@ var init_workflow_graph_executor = __esm({
               phase: stepPhase,
               source: "optional-group",
               status: stepStatus,
+              ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
               ...verdict ? { verdict } : {},
               ...stepOutput !== void 0 ? { output: stepOutput } : {},
               ...stepNotes !== void 0 ? { notes: stepNotes } : {},
+              ...stepFindings?.length ? { findings: stepFindings } : {},
               startedAt: stepStartedAt,
               completedAt: (/* @__PURE__ */ new Date()).toISOString()
             });
@@ -219563,9 +219736,15 @@ var init_workflow_graph_executor = __esm({
         }
         return failureResult;
       }
+      /** FNXC:WorkflowReviewKind 2026-08-05-02:31: Persist only the declared closed
+       * marker; execution never derives review semantics from a label, verdict, or gate mode. */
+      workflowReviewKind(node) {
+        return node.config?.reviewKind === "plan" || node.config?.reviewKind === "code" ? node.config.reviewKind : void 0;
+      }
       shouldRecordNodeProgress(node) {
         const skillName = typeof node.config?.skillName === "string" ? node.config.skillName.trim() : "";
-        return skillName.length > 0 && (node.kind === "prompt" || node.kind === "gate");
+        const markedReview = this.workflowReviewKind(node) !== void 0;
+        return markedReview && (node.kind === "prompt" || node.kind === "gate" || node.kind === "script") || skillName.length > 0 && (node.kind === "prompt" || node.kind === "gate");
       }
       workflowNodeProgressName(node) {
         const configuredName = typeof node.config?.name === "string" ? node.config.name.trim() : "";
@@ -219579,6 +219758,7 @@ var init_workflow_graph_executor = __esm({
           phase: node.config?.phase === "post-merge" ? "post-merge" : "pre-merge",
           source: "node",
           status: "pending",
+          ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
           startedAt
         };
         await this.recordOptionalGroupStepResult(taskId, result2);
@@ -219589,6 +219769,7 @@ var init_workflow_graph_executor = __esm({
         const contextPatch = nodeResult.contextPatch ?? {};
         let output = typeof contextPatch.output === "string" ? contextPatch.output : void 0;
         const notes = typeof contextPatch.notes === "string" ? contextPatch.notes : void 0;
+        const findings = this.workflowReviewKind(node) && Array.isArray(contextPatch.findings) ? contextPatch.findings : void 0;
         if (status === "failed" && output === void 0 && notes === void 0) {
           output = this.synthesizeNonVerdictFailureOutput({
             stepLabel: this.workflowNodeProgressName(node),
@@ -219603,8 +219784,10 @@ var init_workflow_graph_executor = __esm({
           phase: started?.phase ?? (node.config?.phase === "post-merge" ? "post-merge" : "pre-merge"),
           source: "node",
           status,
+          ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
           ...output !== void 0 ? { output } : {},
           ...notes !== void 0 ? { notes } : {},
+          ...findings?.length ? { findings } : {},
           startedAt: started?.startedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
           completedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
@@ -220047,6 +220230,10 @@ var init_workflow_graph_task_runner = __esm({
             runCode: this.deps.runCode,
             notifyDispatch: this.deps.notifyDispatch,
             prNodes: this.deps.prNodes,
+            // FNXC:SharedBranchMemberHold 2026-08-06-00:24: carry the executor's
+            // live group resolver into the graph merge gate; omitting it turns
+            // mission-policy members into manual holds before integration.
+            isLiveSharedBranchMember: this.deps.isLiveSharedBranchMember,
             /*
             FNXC:WorkflowResume 2026-06-29-08:49:
             Production graph runs must fetch live task steps during foreach replay. The runner is the workflow boundary that has store access, so it supplies the fresh projection seam instead of making executor self-healing guess after a stale step node fails.
@@ -224885,9 +225072,11 @@ function parseWorkflowStepVerdict(rawOutput) {
         verdict = "REVISE";
       }
       if (!verdict) continue;
+      const findings = normalizeWorkflowReviewFindings(parsed.findings);
       return {
         verdict,
-        notes: typeof parsed.notes === "string" ? parsed.notes : ""
+        notes: typeof parsed.notes === "string" ? parsed.notes : "",
+        ...findings ? { findings } : {}
       };
     } catch {
     }
@@ -224919,7 +225108,8 @@ function parseWorkflowStepOutput(rawOutput, options = {}) {
     return {
       output: parsed.notes || "",
       verdict: parsed.verdict,
-      notes: parsed.notes
+      notes: parsed.notes,
+      ...parsed.findings ? { findings: parsed.findings } : {}
     };
   }
   const inferred = inferWorkflowStepVerdictFromProse(trimmed);
@@ -228156,6 +228346,7 @@ ${feedback}`,
         if (info.phase !== "pre-merge") return false;
         if (info.status !== "advisory_failure" && info.status !== "failed") return false;
         const liveTask = await this.store.getTask(taskId).catch(() => fallbackTask);
+        if (hasUserAutoMergeHold(liveTask)) return false;
         const missingArtifactKeys = parseRequiredArtifactMissingValue(info.failureValue);
         if (missingArtifactKeys) {
           await this.recoverMissingRequiredArtifacts(liveTask, missingArtifactKeys, {
@@ -228412,6 +228603,7 @@ ${info.feedback}`, revisionKey),
        */
       async recoverFailedPreMergeWorkflowStep(task) {
         try {
+          if (hasUserAutoMergeHold(task)) return false;
           const failed = (task.workflowStepResults ?? []).filter((r) => (r.phase || "pre-merge") === "pre-merge" && r.status === "failed").sort((a, b3) => {
             const aTs = Date.parse(a.completedAt || a.startedAt || "");
             const bTs = Date.parse(b3.completedAt || b3.startedAt || "");
@@ -228938,6 +229130,7 @@ ${info.feedback}`, revisionKey),
               getTask: (taskId) => this.store.getTask(taskId)
             },
             runId: resolvedRunId,
+            isLiveSharedBranchMember: (nodeTask) => this.isLiveSharedBranchGroupMember(nodeTask),
             primitives: this.createAuthoritativeWorkflowPrimitives(settings),
             seams: this.createAuthoritativeWorkflowSeams(settings),
             prepareNodeExecution: (node, nodeTask, requirement) => this.prepareGraphNodeExecution(node, nodeTask, settings, requirement),
@@ -231180,6 +231373,7 @@ ${info.feedback}`, revisionKey),
           return this.runCliAgentNode(node, await this.store.getTask(live.id), cfg);
         }
         const optionalGroupId = typeof graphContext?.[WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY] === "string" ? graphContext[WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY] : void 0;
+        const declaredReviewKind = cfg.reviewKind === "plan" || cfg.reviewKind === "code" ? cfg.reviewKind : graphContext?.[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] === "plan" || graphContext?.[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] === "code" ? graphContext[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] : void 0;
         const isCompletionSummaryNode2 = cfg.summaryTarget === "task" || node.id === "completion-summary";
         if (live.executionMode === "fast" && !isCompletionSummaryNode2 && !optionalGroupId && !cfg.seam && (node.kind === "prompt" || node.kind === "script" || node.kind === "gate")) {
           executorLog.debug(`${live.id}: fast mode \u2014 skipping custom graph node '${node.id}'`);
@@ -231328,6 +231522,9 @@ ${prompt}`;
         if (optionalGroupId) {
           step.optionalGroupId = optionalGroupId;
         }
+        if (declaredReviewKind) {
+          step.reviewKind = declaredReviewKind;
+        }
         if (cfg.reviewCanFixInline === true) {
           step.reviewCanFixInline = true;
         }
@@ -231340,7 +231537,11 @@ ${prompt}`;
           executorLog.debug(`${live.id}: graph node '${node.id}' runtime env injected (${injected.pathEntryCount} PATH entries, ${injected.injectedKeyCount} env keys)`);
         }
         const unattended = this.graphUnattendedRuns.has(live.id);
-        const outcome = mode === "script" ? await this.executeScriptWorkflowStep(live, step, worktreePath, settings, nodeEnv) : await this.executeWorkflowStep(live, step, worktreePath, settings, nodeEnv, { unattended });
+        let outcome = mode === "script" ? await this.executeScriptWorkflowStep(live, step, worktreePath, settings, nodeEnv) : await this.executeWorkflowStep(live, step, worktreePath, settings, nodeEnv, { unattended });
+        if (declaredReviewKind && typeof outcome.output === "string") {
+          const parsedReviewOutput = parseWorkflowStepOutput(outcome.output, { requireVerdict: false });
+          if (parsedReviewOutput.findings?.length) outcome = { ...outcome, findings: parsedReviewOutput.findings };
+        }
         const awaitQuestion = parseAwaitInputSentinel(outcome.output);
         if (awaitQuestion) {
           await this.store.logEntry(
@@ -231363,6 +231564,8 @@ ${prompt}`;
         const contextPatch = {};
         if (typeof stepOutput === "string") contextPatch.output = stepOutput;
         if (typeof stepNotes === "string" && stepNotes) contextPatch.notes = stepNotes;
+        const stepFindings = outcome.findings;
+        if (stepFindings?.length) contextPatch.findings = stepFindings;
         if (cfg.summaryTarget === "task" && typeof stepOutput === "string" && stepOutput.trim()) {
           contextPatch.summary = stepOutput.trim();
         }
@@ -231869,6 +232072,7 @@ Graph value: ${failureValue}` : ""}`, budget.key),
         } catch {
           return false;
         }
+        if (hasUserAutoMergeHold(live)) return false;
         const sharedBranchMember = await this.isLiveSharedBranchGroupMember(live);
         if (!sharedBranchMember && !allowsAutoMergeProcessing(live, settings)) return false;
         if (!sharedBranchMember && resolveEffectiveAutoMerge(live, settings) === false) return false;
@@ -231930,8 +232134,8 @@ Graph value: ${failureValue}` : ""}`, budget.key),
         } catch {
           return false;
         }
-        if (await this.isLiveSharedBranchGroupMember(live)) return false;
-        return !allowsAutoMergeProcessing(live, settings) || resolveEffectiveAutoMerge(live, settings) === false;
+        if (await this.isLiveSharedBranchGroupMember(live) && !hasUserAutoMergeHold(live)) return false;
+        return hasUserAutoMergeHold(live) || !allowsAutoMergeProcessing(live, settings) || resolveEffectiveAutoMerge(live, settings) === false;
       }
       async handleStaleInReviewPlanPauseAbortReplay(live, result2, abortProvenance, pausedAborted, userCanceled, resumeLanesMemo) {
         if (!pausedAborted) return false;
@@ -232095,9 +232299,9 @@ Graph value: ${failureValue}` : ""}`, budget.key),
           if (settings.globalPause === true) return false;
         }
         if (live.column === resumeLanes.review) {
-          if (live.autoMerge === false) return false;
           if (!settings) return false;
           const sharedBranchMember = await this.isLiveSharedBranchGroupMember(live);
+          if (hasUserAutoMergeHold(live) || live.autoMerge === false && !sharedBranchMember) return false;
           if (!sharedBranchMember && !allowsAutoMergeProcessing(live, settings)) return false;
           if (live.mergeDetails?.mergeConfirmed === true) return false;
         }
@@ -237865,13 +238069,14 @@ CRITICAL SCOPING RULES \u2014 read before doing anything else:
         const isSkillStep = typeof workflowStep.skillName === "string" && workflowStep.skillName.trim().length > 0;
         const isSummaryProjectionStep = workflowStep.summaryTarget === "task";
         const requireVerdict = !isSummaryProjectionStep && (workflowStep.gateMode === "gate" || !isSkillStep);
+        const reviewFindingsContract = workflowStepMetadata.reviewKind === "plan" || workflowStepMetadata.reviewKind === "code";
         const verdictBlock = requireVerdict ? `
 
 ## Feedback Format
 
 When your review is complete, your final line MUST be a single JSON object (no markdown fences):
 
-{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"..."}
+${reviewFindingsContract ? '{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"...","findings":[{"id":"stable-id","title":"concise issue","body":"actionable detail","filePath":"optional/path","line":1,"severity":"low|medium|high|critical"}]}' : '{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"..."}'}
 
 Rules:
 - Output exactly one trailing JSON object and stop.
@@ -238181,7 +238386,8 @@ ${detectedQuestion}
                 revisionRequested,
                 output: parsed.output,
                 verdict: parsed.verdict,
-                notes: parsed.notes
+                notes: parsed.notes,
+                ...parsed.findings ? { findings: parsed.findings } : {}
               };
             }
             if (parsed.malformed) {
@@ -249170,7 +249376,7 @@ var init_metric_parser = __esm({
 });
 
 // ../engine/src/eval/experiment-executor.ts
-import { randomUUID as randomUUID44 } from "node:crypto";
+import { randomUUID as randomUUID45 } from "node:crypto";
 var ExperimentMaxIterationsError, ExperimentGitNotConfiguredError, ExperimentExecutor;
 var init_experiment_executor = __esm({
   "../engine/src/eval/experiment-executor.ts"() {
@@ -249238,7 +249444,7 @@ var init_experiment_executor = __esm({
         }
         await this.semaphore.acquire();
         const controller = new AbortController();
-        const runHandle = randomUUID44();
+        const runHandle = randomUUID45();
         if (opts?.abortSignal) {
           opts.abortSignal.addEventListener("abort", () => controller.abort(), { once: true });
         }
@@ -258245,6 +258451,7 @@ var init_in_process_runtime = __esm({
             }
           }
           const prNodeGithubOps = this.config.prNodeGithubOps;
+          const secretsStore = await this.taskStore.getSecretsStore();
           const executorOptions = {
             /*
             FNXC:PlanReviewLease 2026-07-26-21:12:
@@ -258260,6 +258467,7 @@ var init_in_process_runtime = __esm({
             cliAgentRuntime: this.cliAgentRuntime?.bundle,
             pluginRunner: this.pluginRunner,
             messageStore: this.messageStore,
+            secretsStore,
             missionStore,
             reflectionService,
             // PR-entity nodes (U3): assemble the handler deps from the CLI-injected
@@ -258361,6 +258569,7 @@ var init_in_process_runtime = __esm({
               reflectionService,
               selfImproveService,
               credentialRotator: this.credentialRotator,
+              secretsStore,
               snapshotManager: autoClaimSnapshotManager,
               onMissed: (agentId, reason) => {
                 runtimeLog.warn(`Agent ${agentId} missed heartbeat: ${reason}`);
@@ -262222,7 +262431,21 @@ var init_project_engine = __esm({
       Cleared on the first non-busy outcome (success path resets it).
       */
       workspaceBusyReenqueues = /* @__PURE__ */ new Map();
+      workspaceBusyReenqueueTimers = /* @__PURE__ */ new Set();
       static WORKSPACE_BUSY_MAX_REENQUEUES = 10;
+      /*
+      FNXC:WorkspaceMergeDispatch 2026-08-05-23:56:
+      Workspace lease-contention retries are engine-owned lifecycle work, not detached callbacks.
+      Track only these busy re-enqueue timers so stop() can cancel them and tests can measure the
+      capped workspace ladder without confusing it with merge-body or maintenance timers.
+      */
+      scheduleWorkspaceBusyReenqueue(taskId, delayMs) {
+        const timer2 = setTimeout(() => {
+          this.workspaceBusyReenqueueTimers.delete(timer2);
+          if (!this.shuttingDown) this.internalEnqueueMerge(taskId);
+        }, delayMs);
+        this.workspaceBusyReenqueueTimers.add(timer2);
+      }
       /**
        * Pending manual merge resolvers — keyed by taskId.
        * When `onMerge` is called, the task is enqueued like auto-merge but a
@@ -262283,7 +262506,7 @@ var init_project_engine = __esm({
        *
        *  Readable (not private) so tests derive the cap from this single source of truth rather
        *  than hardcoding it — the FN-8004 bump broke two suites that had baked in the old `3`. */
-      static MAX_AUTO_MERGE_TRANSIENT_RETRIES = 5;
+      static MAX_AUTO_MERGE_TRANSIENT_RETRIES = MAX_AUTO_MERGE_TRANSIENT_RETRIES;
       static MERGE_REQUEST_RETRY_EXHAUSTED_AGE_MS = 30 * 60 * 1e3;
       /** Cap on outer in-review→in-progress bounces caused by deterministic
        *  verification failures during auto-merge. After this many failed merges
@@ -262757,6 +262980,10 @@ ${detail}`);
           clearInterval(this.mergeActiveReconcileTimer);
           this.mergeActiveReconcileTimer = null;
         }
+        for (const timer2 of this.workspaceBusyReenqueueTimers) {
+          clearTimeout(timer2);
+        }
+        this.workspaceBusyReenqueueTimers.clear();
         for (const [taskId, deferred] of this.capacityDeferredMerges) {
           clearTimeout(deferred.timer);
           for (const resolver of deferred.resolvers) {
@@ -264056,16 +264283,15 @@ ${detail}`);
        * older low-priority task would start before a later urgent one.
        */
       async allowInReviewMergeProcessing(task, settings, store = this.runtime.getTaskStore()) {
-        if (allowsAutoMergeProcessing(task, settings)) {
-          return true;
-        }
+        if (hasUserAutoMergeHold(task)) return false;
         const groupId = task.branchContext?.groupId?.trim();
         const branchGroup = groupId ? await store.getBranchGroup?.(groupId) : null;
-        if (!branchGroup || branchGroup.status !== "open" || !branchGroup.branchName.trim()) {
-          return false;
-        }
         const projectDefaultBranch = await resolveIntegrationBranch(this.config.workingDirectory, settings);
-        return isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch);
+        if (isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch)) {
+          return true;
+        }
+        if (task.autoMerge === false && groupId) return false;
+        return allowsAutoMergeProcessing(task, settings);
       }
       async emitLegacyAutoMergeStampAdvisory(store) {
         if (this.legacyAutoMergeStampAdvisoryEmitted) {
@@ -265018,9 +265244,7 @@ ${detail}`);
                   runtimeLog.log(
                     `Workspace land busy re-enqueue ${busyCount + 1}/${_ProjectEngine.WORKSPACE_BUSY_MAX_REENQUEUES} for ${taskId} in ${delayMs / 1e3}s (no mergeRetry consumed \u2014 pure lease contention)`
                   );
-                  setTimeout(() => {
-                    if (!this.shuttingDown) this.internalEnqueueMerge(taskId);
-                  }, delayMs);
+                  this.scheduleWorkspaceBusyReenqueue(taskId, delayMs);
                 } else {
                   this.workspaceBusyReenqueues.delete(taskId);
                   await store.updateTask(taskId, { status: "failed", error: errorMsg }).catch(() => void 0);
@@ -268658,7 +268882,7 @@ __export(planning_exports, {
   updatePlanningSessionTitle: () => updatePlanningSessionTitle,
   validateSession: () => validateSession
 });
-import { randomUUID as randomUUID45 } from "node:crypto";
+import { randomUUID as randomUUID46 } from "node:crypto";
 import { EventEmitter as EventEmitter34 } from "node:events";
 async function createPlanningRuntimeSession(options) {
   const { pluginRunner, runtimeHint, settings, ...runtimeOptions } = options ?? {};
@@ -269122,7 +269346,7 @@ async function createSession(ip, initialPlan, store, rootDir, promptOverrides, p
   if (!store) {
     throw new Error("store is required for AI-powered planning sessions");
   }
-  const sessionId = randomUUID45();
+  const sessionId = randomUUID46();
   const session = {
     id: sessionId,
     ip,
@@ -269337,7 +269561,7 @@ async function createDraftSession(ip, initialPlan, _rootDir, modelProvider, mode
       `Rate limit exceeded. Maximum ${MAX_SESSIONS_PER_IP_PER_HOUR} planning sessions per hour. Reset at ${resetTime?.toISOString() || "unknown"}`
     );
   }
-  const sessionId = randomUUID45();
+  const sessionId = randomUUID46();
   const title2 = DRAFT_PLACEHOLDER_TITLE;
   const hasModelOverride = Boolean(modelProvider && modelId);
   const session = {
@@ -269513,7 +269737,7 @@ async function createSessionWithAgent(ip, initialPlan, rootDir, store, modelProv
       `Rate limit exceeded. Maximum ${MAX_SESSIONS_PER_IP_PER_HOUR} planning sessions per hour. Reset at ${resetTime?.toISOString() || "unknown"}`
     );
   }
-  const sessionId = randomUUID45();
+  const sessionId = randomUUID46();
   const session = {
     id: sessionId,
     ip,
@@ -270023,7 +270247,7 @@ function normalizePlanningQuestion(input, userInput = "") {
   const type = source.type === "multi_select" || source.type === "single_select" ? source.type : "single_select";
   const question = typeof source.question === "string" && source.question.trim() ? source.question.trim() : fallback2.question;
   const normalized = {
-    id: typeof source.id === "string" && source.id.trim() ? source.id : randomUUID45(),
+    id: typeof source.id === "string" && source.id.trim() ? source.id : randomUUID46(),
     type,
     question,
     ...typeof source.description === "string" && source.description.trim() ? { description: source.description.trim() } : {}
@@ -270049,7 +270273,7 @@ function normalizePlanningQuestion(input, userInput = "") {
 }
 function coerceQuestionResponse(response, session) {
   if (response.type === "question") return normalizePlanningQuestion(response.data, session.initialPlan);
-  return normalizePlanningQuestion({ id: randomUUID45(), type: "single_select", question: planningFallbackCopy(session.initialPlan).question }, session.initialPlan);
+  return normalizePlanningQuestion({ id: randomUUID46(), type: "single_select", question: planningFallbackCopy(session.initialPlan).question }, session.initialPlan);
 }
 async function validateSession(sessionId) {
   const session = await getSession(sessionId);
@@ -270991,7 +271215,7 @@ async function createTaskFromPlanSession(sessionId, store, options) {
       throw new InvalidSessionStateError("PLANNING_CREATED_TASK_MISSING");
     }
   }
-  const claimOwnerToken = randomUUID45();
+  const claimOwnerToken = randomUUID46();
   let claimed = await claimPlanningTaskCreation(sessionId, claimOwnerToken, (/* @__PURE__ */ new Date()).toISOString(), claimEpoch);
   if (!claimed) {
     session = await getDurablePlanningSession(sessionId).catch(() => void 0) ?? session;
@@ -271660,7 +271884,7 @@ __export(subtask_breakdown_exports, {
   stopSubtaskGeneration: () => stopSubtaskGeneration,
   subtaskStreamManager: () => subtaskStreamManager
 });
-import { randomUUID as randomUUID46 } from "node:crypto";
+import { randomUUID as randomUUID47 } from "node:crypto";
 import { EventEmitter as EventEmitter35 } from "node:events";
 function __getSubtaskBreakdownDiagnostics() {
   return diagnostics3;
@@ -271835,7 +272059,7 @@ async function decomposeForTriage(description, rootDir, promptOverrides, store)
   }
 }
 async function createSubtaskSession(initialDescription, store, rootDir, promptOverrides, projectId) {
-  const sessionId = randomUUID46();
+  const sessionId = randomUUID47();
   const session = {
     sessionId,
     projectId,
@@ -272272,7 +272496,7 @@ __export(mission_interview_exports, {
   stopMissionInterviewGeneration: () => stopMissionInterviewGeneration,
   submitMissionInterviewResponse: () => submitMissionInterviewResponse
 });
-import { randomUUID as randomUUID47 } from "node:crypto";
+import { randomUUID as randomUUID48 } from "node:crypto";
 import { EventEmitter as EventEmitter36 } from "node:events";
 function __getMissionInterviewDiagnostics() {
   return diagnostics4;
@@ -273015,7 +273239,7 @@ async function createMissionInterviewSession(ip, missionTitle, rootDir, store, p
       `Rate limit exceeded. Maximum ${MAX_SESSIONS_PER_IP_PER_HOUR2} sessions per hour. Reset at ${resetTime?.toISOString() || "unknown"}`
     );
   }
-  const sessionId = randomUUID47();
+  const sessionId = randomUUID48();
   const session = {
     id: sessionId,
     ip,
@@ -273478,7 +273702,7 @@ __export(milestone_slice_interview_exports, {
   stopMilestoneSliceInterviewGeneration: () => stopMilestoneSliceInterviewGeneration,
   submitTargetInterviewResponse: () => submitTargetInterviewResponse
 });
-import { randomUUID as randomUUID48 } from "node:crypto";
+import { randomUUID as randomUUID49 } from "node:crypto";
 import { EventEmitter as EventEmitter37 } from "node:events";
 function parseTargetInterviewResponseImpl(text3) {
   const candidate = extractJsonCandidate3(text3);
@@ -274107,7 +274331,7 @@ async function createTargetInterviewSession(ip, targetType, targetId, targetTitl
       `Rate limit exceeded. Maximum ${MAX_SESSIONS_PER_IP_PER_HOUR3} sessions per hour. Reset at ${resetTime?.toISOString() || "unknown"}`
     );
   }
-  const sessionId = randomUUID48();
+  const sessionId = randomUUID49();
   const session = {
     id: sessionId,
     ip,
@@ -292714,10 +292938,32 @@ function parseTaskReviewVerdict(value) {
       return void 0;
   }
 }
-function isCurrentWorkflowReviewResult(result2) {
-  return CURRENT_WORKFLOW_REVIEW_STEP_IDS.has(result2.workflowStepId) && CURRENT_WORKFLOW_REVIEW_STATUSES.has(result2.status) && result2.verdict !== void 0 && result2.supersededAt === void 0 && result2.bypassedBy === void 0 && result2.bypassedAt === void 0 && result2.bypassReason === void 0 && result2.bypassedFromStatus === void 0 && result2.bypassedFromVerdict === void 0;
+function hasCurrentWorkflowReviewIdentity(result2) {
+  return result2.supersededAt === void 0 && result2.supersededReason === void 0 && result2.bypassedBy === void 0 && result2.bypassedAt === void 0 && result2.bypassReason === void 0 && result2.bypassedFromStatus === void 0 && result2.bypassedFromVerdict === void 0;
+}
+function isCurrentMarkedWorkflowReviewResult(result2) {
+  return CURRENT_WORKFLOW_REVIEW_STATUSES.has(result2.status) && hasCurrentWorkflowReviewIdentity(result2) && Boolean(result2.output?.trim() || result2.notes?.trim()) && (result2.reviewKind === "plan" || result2.reviewKind === "code") && (result2.source === "node" || result2.source === "optional-group");
+}
+async function getDeclaredTopLevelReviewResultSources(task, store) {
+  const resolved = await resolveWorkflowIrForTaskWithProvenance(store, task.id);
+  if (resolved.source !== "selection") return /* @__PURE__ */ new Map();
+  return new Map(resolved.ir.nodes.flatMap((node) => {
+    if (node.kind === "optional-group") return [[node.id, "optional-group"]];
+    if (node.kind === "prompt" || node.kind === "gate" || node.kind === "script") return [[node.id, "node"]];
+    return [];
+  }));
 }
-function buildWorkflowReviewItemId(task, result2) {
+function isCurrentLegacyWorkflowReviewResult(result2) {
+  return CURRENT_WORKFLOW_REVIEW_STEP_IDS.has(result2.workflowStepId) && result2.reviewKind === void 0 && LEGACY_WORKFLOW_REVIEW_STATUSES.has(result2.status) && result2.verdict !== void 0 && hasCurrentWorkflowReviewIdentity(result2);
+}
+function getWorkflowReviewKind(result2, declaredTopLevelReviewResultSources) {
+  if (isCurrentMarkedWorkflowReviewResult(result2) && declaredTopLevelReviewResultSources.get(result2.workflowStepId) === result2.source) return result2.reviewKind;
+  if (isCurrentLegacyWorkflowReviewResult(result2)) {
+    return result2.workflowStepId === "plan-review" ? "plan" : "code";
+  }
+  return void 0;
+}
+function buildWorkflowReviewItemId(task, result2, findingId) {
   const identity = JSON.stringify({
     taskId: task.id,
     workflowStepId: result2.workflowStepId,
@@ -292725,22 +292971,44 @@ function buildWorkflowReviewItemId(task, result2) {
     phase: result2.phase,
     status: result2.status,
     verdict: result2.verdict,
+    reviewKind: result2.reviewKind,
     completedAt: result2.completedAt,
     startedAt: result2.startedAt,
     output: result2.output,
-    notes: result2.notes
+    notes: result2.notes,
+    findingId
   });
   return `workflow-review-${createHash29("sha256").update(identity).digest("hex").slice(0, 24)}`;
 }
-function buildWorkflowReviewItems(task) {
-  return (task.workflowStepResults ?? []).filter(isCurrentWorkflowReviewResult).map((result2) => {
-    const reviewType = result2.workflowStepId === "plan-review" ? "plan" : "code";
-    const body = result2.output?.trim() || result2.notes?.trim() || "No written feedback was provided by this review step.";
+async function buildWorkflowReviewItems(task, store) {
+  const declaredTopLevelReviewResultSources = await getDeclaredTopLevelReviewResultSources(task, store);
+  return (task.workflowStepResults ?? []).flatMap((result2) => {
+    const reviewType = getWorkflowReviewKind(result2, declaredTopLevelReviewResultSources);
+    if (!reviewType) return [];
     const timestamp2 = result2.completedAt ?? result2.startedAt ?? task.updatedAt ?? task.createdAt;
-    return {
+    if (result2.findings?.length) {
+      return result2.findings.map((finding) => ({
+        itemId: buildWorkflowReviewItemId(task, result2, finding.id),
+        sourceMode: "reviewer-agent",
+        title: finding.title,
+        body: finding.body,
+        author: "reviewer-agent",
+        createdAt: timestamp2,
+        updatedAt: timestamp2,
+        ...finding.filePath ? { filePath: finding.filePath } : {},
+        ...finding.line ? { line: finding.line } : {},
+        ...finding.severity ? { severity: finding.severity } : {},
+        reviewState: result2.verdict,
+        verdict: result2.verdict,
+        reviewType,
+        progressStatus: null
+      }));
+    }
+    const body = result2.output?.trim() || result2.notes?.trim() || "No written feedback was provided by this review step.";
+    return [{
       itemId: buildWorkflowReviewItemId(task, result2),
       sourceMode: "reviewer-agent",
-      title: `${result2.workflowStepName || result2.workflowStepId} ${result2.verdict}`,
+      title: `${result2.workflowStepName || result2.workflowStepId} ${result2.verdict ?? result2.status}`,
       body,
       author: "reviewer-agent",
       createdAt: timestamp2,
@@ -292749,7 +293017,7 @@ function buildWorkflowReviewItems(task) {
       verdict: result2.verdict,
       reviewType,
       progressStatus: null
-    };
+    }];
   }).sort((a, b3) => Date.parse(b3.createdAt ?? "") - Date.parse(a.createdAt ?? "") || a.itemId.localeCompare(b3.itemId));
 }
 function buildDirectReviewSummary(items) {
@@ -292757,7 +293025,7 @@ function buildDirectReviewSummary(items) {
   return latest ? { summary: latest.title, verdict: latest.verdict } : null;
 }
 async function buildDirectTaskReviewData(task, store) {
-  const structuredItems = buildWorkflowReviewItems(task);
+  const structuredItems = await buildWorkflowReviewItems(task, store);
   if (structuredItems.length > 0) {
     return {
       mode: "reviewer-agent",
@@ -293207,6 +293475,7 @@ function registerTaskWorkflowRoutes(ctx, deps) {
         reviewLevel,
         executionMode,
         autoMerge,
+        autoMergeProvenance,
         priority,
         source,
         branch,
@@ -293256,6 +293525,9 @@ function registerTaskWorkflowRoutes(ctx, deps) {
       if (autoMerge !== void 0 && typeof autoMerge !== "boolean") {
         throw badRequest("autoMerge must be a boolean");
       }
+      if (autoMergeProvenance !== void 0) {
+        throw badRequest("autoMergeProvenance is server-managed");
+      }
       if (priority !== void 0 && priority !== null && !isTaskPriority(priority)) {
         throw badRequest(`priority must be one of: ${TASK_PRIORITIES.join(", ")}`);
       }
@@ -294821,6 +295093,17 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       rethrowTaskApiError(err, req.params.id, "Failed to read task verification status");
     }
   });
+  router.get("/tasks/:id/prompt", async (req, res) => {
+    try {
+      const { store: scopedStore } = await getProjectContext2(req);
+      const task = await scopedStore.getTask(req.params.id);
+      res.json(task.prompt === void 0 ? { id: task.id } : { id: task.id, prompt: task.prompt });
+    } catch (err) {
+      if (err instanceof ApiError) throw err;
+      if (isTaskLookupMiss(err)) throw notFound(`Task ${req.params.id} not found`);
+      rethrowAsApiError8(err, "Internal server error");
+    }
+  });
   router.get("/tasks/:id", async (req, res) => {
     try {
       const { store: scopedStore, engine } = await getProjectContext2(req);
@@ -295943,6 +296226,9 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       if (hasBodyField("autoMerge") && autoMerge !== void 0 && autoMerge !== null && typeof autoMerge !== "boolean") {
         throw new Error("autoMerge must be a boolean");
       }
+      if (hasBodyField("autoMergeProvenance")) {
+        throw badRequest("autoMergeProvenance is server-managed");
+      }
       let validatedSourceIssue;
       if (hasBodyField("sourceIssue")) {
         if (sourceIssue === null) {
@@ -296164,7 +296450,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
       if (dependencies !== void 0) updates.dependencies = dependencies;
       if (enabledWorkflowSteps !== void 0) updates.enabledWorkflowSteps = enabledWorkflowSteps;
       if (hasBodyField("noCommitsExpected")) updates.noCommitsExpected = noCommitsExpected;
-      if (hasBodyField("autoMerge")) updates.autoMerge = autoMerge === null ? void 0 : autoMerge;
+      if (hasBodyField("autoMerge")) updates.autoMerge = autoMerge;
       if (hasBodyField("modelProvider")) updates.modelProvider = validatedModelProvider;
       if (hasBodyField("modelId")) updates.modelId = validatedModelId;
       if (hasBodyField("validatorModelProvider")) updates.validatorModelProvider = validatedValidatorModelProvider;
@@ -296466,6 +296752,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
         updatedAt: item.updatedAt ?? void 0,
         path: item.filePath,
         line: item.line,
+        severity: item.severity,
         threadId: item.threadId,
         htmlUrl: item.url,
         state: item.reviewState ?? void 0,
@@ -296508,6 +296795,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
           author: item.author.login,
           filePath: item.path,
           lineNumber: item.line,
+          severity: item.severity,
           threadId: item.threadId,
           url: item.htmlUrl
         };
@@ -296543,6 +296831,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
               authorLogin: item.author,
               filePath: item.filePath,
               lineNumber: item.lineNumber,
+              severity: item.severity,
               threadId: item.threadId,
               url: item.url
             },
@@ -296835,7 +297124,7 @@ See \`GET /api/tasks/${task.id}/diff\` for the landed diff being reverted.
     }
   });
 }
-var severityAuditLog33, AWAITING_PLANNING_ENRICH_LIMIT, LEGACY_WIP_LANES3, LEGACY_ARCHIVE_LANES5, REVIEW_BLOCK_RE, REVIEW_VERDICT_RE, REVIEW_STEP_RE, DUPLICATE_STOPWORDS, ARTIFACT_TYPES, ADDRESS_PR_FEEDBACK_PROMPT, __fingerprintCreateLocksForTests, RESET_TASK_FIELDS, RESET_DRIFT_CORRECTION_FIELDS, CURRENT_WORKFLOW_REVIEW_STEP_IDS, CURRENT_WORKFLOW_REVIEW_STATUSES;
+var severityAuditLog33, AWAITING_PLANNING_ENRICH_LIMIT, LEGACY_WIP_LANES3, LEGACY_ARCHIVE_LANES5, REVIEW_BLOCK_RE, REVIEW_VERDICT_RE, REVIEW_STEP_RE, DUPLICATE_STOPWORDS, ARTIFACT_TYPES, ADDRESS_PR_FEEDBACK_PROMPT, __fingerprintCreateLocksForTests, RESET_TASK_FIELDS, RESET_DRIFT_CORRECTION_FIELDS, CURRENT_WORKFLOW_REVIEW_STEP_IDS, CURRENT_WORKFLOW_REVIEW_STATUSES, LEGACY_WORKFLOW_REVIEW_STATUSES;
 var init_register_task_workflow_routes = __esm({
   "../dashboard/src/routes/register-task-workflow-routes.ts"() {
     "use strict";
@@ -296898,7 +297187,8 @@ var init_register_task_workflow_routes = __esm({
       sessionFile: null
     };
     CURRENT_WORKFLOW_REVIEW_STEP_IDS = /* @__PURE__ */ new Set(["code-review", "plan-review"]);
-    CURRENT_WORKFLOW_REVIEW_STATUSES = /* @__PURE__ */ new Set(["passed", "failed", "advisory_failure"]);
+    CURRENT_WORKFLOW_REVIEW_STATUSES = /* @__PURE__ */ new Set(["passed", "failed"]);
+    LEGACY_WORKFLOW_REVIEW_STATUSES = /* @__PURE__ */ new Set(["passed", "failed", "advisory_failure"]);
   }
 });
 
@@ -297758,7 +298048,7 @@ at this boundary regardless.`;
 });
 
 // ../dashboard/src/routes/register-planning-subtask-routes.ts
-import { randomUUID as randomUUID49 } from "node:crypto";
+import { randomUUID as randomUUID50 } from "node:crypto";
 async function acquirePlanningCreateLock(sessionId) {
   const previous = planningCreateLocks.get(sessionId);
   let releaseGate;
@@ -298739,7 +299029,7 @@ function registerPlanningSubtaskRoutes(ctx, deps) {
       }
       session = await getDurablePlanningSession2(sessionId) ?? session;
       if (await returnLinkedTask(session)) return;
-      const claimOwnerToken = randomUUID49();
+      const claimOwnerToken = randomUUID50();
       claimedOwnerToken = claimOwnerToken;
       claimedSessionId = sessionId;
       const claimStartedAt = (/* @__PURE__ */ new Date()).toISOString();
@@ -299915,7 +300205,7 @@ __export(chat_exports, {
   resolveFileReferences: () => resolveFileReferences
 });
 import { EventEmitter as EventEmitter40 } from "node:events";
-import { randomUUID as randomUUID50 } from "node:crypto";
+import { randomUUID as randomUUID51 } from "node:crypto";
 import { existsSync as existsSync71 } from "node:fs";
 import { join as join90, resolve as resolve48, relative as relative20 } from "node:path";
 import { SessionManager as SessionManager3 } from "@earendil-works/pi-coding-agent";
@@ -300127,7 +300417,7 @@ function createTaskVerificationTools(taskStore, actionGateContext) {
       const settings = await taskStore.getSettings();
       const command = profile === "verify:fast" ? "pnpm verify:fast" : typeof settings.testCommand === "string" ? settings.testCommand : "";
       if (!command) return { content: [{ type: "text", text: "ERROR: the selected verification profile is not configured." }], isError: true, details: {} };
-      const created = await taskStore.createTaskVerificationRequest({ taskId, requestId: randomUUID50(), profile, command, scope: "workspace", requestedBy: "chat" });
+      const created = await taskStore.createTaskVerificationRequest({ taskId, requestId: randomUUID51(), profile, command, scope: "workspace", requestedBy: "chat" });
       if (created.inFlightRequestId) return { content: [{ type: "text", text: `ERROR: verification request ${created.inFlightRequestId} is already in flight.` }], isError: true, details: created };
       return { content: [{ type: "text", text: `Queued verification request ${created.request.requestId} for ${taskId}.` }], details: created.request };
     }
@@ -302287,7 +302577,7 @@ var init_rate_limit = __esm({
 });
 
 // ../dashboard/src/routes/register-chat-routes.ts
-import { randomUUID as randomUUID51 } from "node:crypto";
+import { randomUUID as randomUUID52 } from "node:crypto";
 import { createReadStream as createReadStream2 } from "node:fs";
 import { mkdir as mkdir30, rm as rm16, writeFile as writeFile32 } from "node:fs/promises";
 import { basename as basename22, join as join91, resolve as resolve49 } from "node:path";
@@ -302346,7 +302636,7 @@ function registerChatRoutes(ctx, deps) {
     const filePath = join91(sessionDir, filename);
     await writeFile32(filePath, file.buffer);
     return {
-      id: `att-${randomUUID51().slice(0, 8)}`,
+      id: `att-${randomUUID52().slice(0, 8)}`,
       filename,
       originalName: file.originalname,
       mimeType: file.mimetype,
@@ -303113,7 +303403,7 @@ var init_register_chat_routes = __esm({
 });
 
 // ../dashboard/src/routes/register-chat-room-routes.ts
-import { randomUUID as randomUUID52 } from "node:crypto";
+import { randomUUID as randomUUID53 } from "node:crypto";
 import { createReadStream as createReadStream3 } from "node:fs";
 import { mkdir as mkdir31, writeFile as writeFile33 } from "node:fs/promises";
 import { basename as basename23, join as join92, resolve as resolve50 } from "node:path";
@@ -303454,7 +303744,7 @@ function registerChatRoomRoutes(ctx, deps) {
       const filePath = join92(roomDir, filename);
       await writeFile33(filePath, file.buffer);
       const attachment = {
-        id: `att-${randomUUID52().slice(0, 8)}`,
+        id: `att-${randomUUID53().slice(0, 8)}`,
         filename,
         originalName: file.originalname,
         mimeType: file.mimetype,
@@ -309969,6 +310259,17 @@ function assertObject(value) {
     throw badRequest("body must be an object");
   }
 }
+function getExplicitProjectId(req, ctx) {
+  const projectId = ctx.getProjectIdFromRequest(req);
+  if (!projectId) throw badRequest("projectId is required");
+  return projectId;
+}
+async function getExplicitSecretsStore(req, ctx) {
+  const requestedProjectId = getExplicitProjectId(req, ctx);
+  const { store, projectId } = await ctx.getProjectContext(req);
+  if (projectId !== requestedProjectId) throw badRequest("project context does not match projectId");
+  return store.getSecretsStore();
+}
 function emitSecretsAudit(req, ctx, type, metadata) {
   const requestWithAuditor = req;
   if (requestWithAuditor.runAuditor?.filesystem) {
@@ -309984,11 +310285,10 @@ var init_register_secrets_routes = __esm({
     init_src2();
     init_api_error();
     registerSecretsRoutes = (ctx) => {
-      const { router, getProjectContext: getProjectContext2, rethrowAsApiError: rethrowAsApiError8 } = ctx;
+      const { router, rethrowAsApiError: rethrowAsApiError8 } = ctx;
       router.get("/secrets", async (req, res) => {
         try {
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const secrets2 = await secretsStore.listSecrets();
           const visibleSecrets = secrets2.filter(
             (secret) => !(secret.scope === "global" && secret.key === RESERVED_SYNC_PASSPHRASE_KEY)
@@ -310002,8 +310302,7 @@ var init_register_secrets_routes = __esm({
       });
       router.get("/secrets/sync-passphrase", async (req, res) => {
         try {
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const configured = await hasSyncPassphraseConfigured(secretsStore);
           res.json({ configured });
         } catch (err) {
@@ -310014,14 +310313,14 @@ var init_register_secrets_routes = __esm({
       });
       router.put("/secrets/sync-passphrase", async (req, res) => {
         try {
+          getExplicitProjectId(req, ctx);
           assertObject(req.body);
           const passphrase = req.body.passphrase;
           if (typeof passphrase !== "string" || passphrase.trim().length === 0) {
             res.status(400).json({ error: "invalid-passphrase" });
             return;
           }
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const hadConfiguredPassphrase = await hasSyncPassphraseConfigured(secretsStore);
           await setSyncPassphrase(secretsStore, passphrase);
           emitSecretsAudit(req, ctx, hadConfiguredPassphrase ? "secret:update" : "secret:create", {
@@ -310037,8 +310336,7 @@ var init_register_secrets_routes = __esm({
       });
       router.delete("/secrets/sync-passphrase", async (req, res) => {
         try {
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           await clearSyncPassphrase(secretsStore);
           emitSecretsAudit(req, ctx, "secret:delete", { key: RESERVED_SYNC_PASSPHRASE_KEY, scope: "global" });
           res.json({ success: true });
@@ -310050,6 +310348,7 @@ var init_register_secrets_routes = __esm({
       });
       router.post("/secrets", async (req, res) => {
         try {
+          getExplicitProjectId(req, ctx);
           assertObject(req.body);
           const { scope, key, value, description, accessPolicy, envExportable, envExportKey } = req.body;
           const parsedScope = parseScope(scope);
@@ -310066,8 +310365,7 @@ var init_register_secrets_routes = __esm({
             }
             parsedAccessPolicy = accessPolicy;
           }
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const secret = await secretsStore.createSecret({
             scope: parsedScope,
             key,
@@ -310086,6 +310384,7 @@ var init_register_secrets_routes = __esm({
       });
       router.patch("/secrets/:scope/:id", async (req, res) => {
         try {
+          getExplicitProjectId(req, ctx);
           const scope = parseScope(req.params.scope);
           const id = String(req.params.id ?? "").trim();
           if (!id) throw badRequest("id is required");
@@ -310129,8 +310428,7 @@ var init_register_secrets_routes = __esm({
               patch.plaintextValue = req.body.value;
             }
           }
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const secret = await secretsStore.updateSecret(id, scope, patch);
           res.json(secret);
         } catch (err) {
@@ -310141,11 +310439,11 @@ var init_register_secrets_routes = __esm({
       });
       router.delete("/secrets/:scope/:id", async (req, res) => {
         try {
+          getExplicitProjectId(req, ctx);
           const scope = parseScope(req.params.scope);
           const id = String(req.params.id ?? "").trim();
           if (!id) throw badRequest("id is required");
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           await secretsStore.deleteSecret(id, scope);
           res.status(204).send();
         } catch (err) {
@@ -310156,11 +310454,11 @@ var init_register_secrets_routes = __esm({
       });
       router.post("/secrets/:scope/:id/reveal", async (req, res) => {
         try {
+          getExplicitProjectId(req, ctx);
           const scope = parseScope(req.params.scope);
           const id = String(req.params.id ?? "").trim();
           if (!id) throw badRequest("id is required");
-          const { store: scopedStore } = await getProjectContext2(req);
-          const secretsStore = await scopedStore.getSecretsStore();
+          const secretsStore = await getExplicitSecretsStore(req, ctx);
           const secret = await secretsStore.revealSecret(id, scope, {
             userId: null
           });
@@ -311759,7 +312057,7 @@ var init_register_gitlab = __esm({
 
 // ../dashboard/src/terminal.ts
 import { spawn as spawn11 } from "node:child_process";
-import { randomUUID as randomUUID53 } from "node:crypto";
+import { randomUUID as randomUUID54 } from "node:crypto";
 import { EventEmitter as EventEmitter42 } from "node:events";
 function extractBaseCommand(command) {
   let trimmed = command.trim();
@@ -311919,7 +312217,7 @@ var init_terminal = __esm({
         if (!validation.valid) {
           return { sessionId: "", error: validation.error };
         }
-        const sessionId = randomUUID53();
+        const sessionId = randomUUID54();
         const childProcess6 = spawn11(command, [], {
           cwd,
           shell: true,
@@ -340729,7 +341027,7 @@ var init_register_node_routes = __esm({
 });
 
 // ../dashboard/src/routes/register-docker-node-routes.ts
-import { randomUUID as randomUUID54 } from "node:crypto";
+import { randomUUID as randomUUID55 } from "node:crypto";
 function sanitizeHostConfig(input) {
   const host = input ?? {};
   return {
@@ -341108,7 +341406,7 @@ var init_register_docker_node_routes = __esm({
             if (!managedNode) {
               throw notFound("Managed Docker node not found");
             }
-            const newKey = randomUUID54().replace(/-/g, "");
+            const newKey = randomUUID55().replace(/-/g, "");
             await central.updateManagedDockerNode(managedId, { apiKey: newKey });
             if (managedNode.nodeId) {
               await central.updateNode(managedNode.nodeId, { apiKey: newKey });
@@ -349976,7 +350274,7 @@ var init_register_agent_reflection_rating_routes = __esm({
 });
 
 // ../dashboard/src/agent-generation.ts
-import { randomUUID as randomUUID55 } from "node:crypto";
+import { randomUUID as randomUUID56 } from "node:crypto";
 async function initPromptCatalog() {
   if (promptCatalogReady) return;
   try {
@@ -350182,7 +350480,7 @@ async function startAgentGeneration(ip, roleDescription) {
       `Rate limit exceeded. Maximum ${MAX_SESSIONS_PER_IP_PER_HOUR4} generation sessions per hour. Reset at ${resetTime?.toISOString() || "unknown"}`
     );
   }
-  const sessionId = randomUUID55();
+  const sessionId = randomUUID56();
   const session = {
     id: sessionId,
     ip,
@@ -350381,7 +350679,7 @@ __export(agent_onboarding_exports, {
   startAgentOnboardingSession: () => startAgentOnboardingSession,
   stopAgentOnboardingGeneration: () => stopAgentOnboardingGeneration
 });
-import { randomUUID as randomUUID56 } from "node:crypto";
+import { randomUUID as randomUUID57 } from "node:crypto";
 import { EventEmitter as EventEmitter43 } from "node:events";
 function extractJsonCandidate6(text3) {
   const codeBlockMatch = text3.match(/```(?:json)?\s*([\s\S]*?)\s*```/);
@@ -350481,7 +350779,7 @@ Current agent configuration:
 ${currentConfigLines}`;
 }
 async function startAgentOnboardingSession(ip, initialContext, rootDir, modelProvider, modelId, promptOverrides, pluginRunner, store) {
-  const id = randomUUID56();
+  const id = randomUUID57();
   const mode = initialContext.mode ?? "create";
   const session = {
     id,
@@ -353263,7 +353561,7 @@ var init_src8 = __esm({
 
 // ../../plugins/fusion-plugin-openclaw-runtime/src/pi-module.ts
 import { spawn as spawn15 } from "node:child_process";
-import { randomUUID as randomUUID57 } from "node:crypto";
+import { randomUUID as randomUUID58 } from "node:crypto";
 import { readFile as readFile51 } from "node:fs/promises";
 function asString2(v2) {
   return typeof v2 === "string" && v2.trim() !== "" ? v2.trim() : void 0;
@@ -353323,7 +353621,7 @@ function extractStderrError(stderr, stdout) {
 }
 function createCliSession(opts) {
   return {
-    sessionId: randomUUID57(),
+    sessionId: randomUUID58(),
     agentId: opts.agentId ?? DEFAULT_AGENT_ID,
     systemPrompt: opts.systemPrompt,
     messages: [{ role: "developer", content: opts.systemPrompt }],
@@ -353518,7 +353816,7 @@ var init_mcp_config2 = __esm({
 });
 
 // ../../plugins/fusion-plugin-openclaw-runtime/src/runtime-adapter.ts
-import { randomUUID as randomUUID58 } from "node:crypto";
+import { randomUUID as randomUUID59 } from "node:crypto";
 var OpenClawRuntimeAdapter;
 var init_runtime_adapter2 = __esm({
   "../../plugins/fusion-plugin-openclaw-runtime/src/runtime-adapter.ts"() {
@@ -353541,8 +353839,8 @@ var init_runtime_adapter2 = __esm({
         let mcpProfile;
         let mcpConfigPath;
         if (toolDefs.length > 0) {
-          const bridge = writeOpenClawMcpBridgeFiles(toolDefs, randomUUID58());
-          mcpProfile = `fusion-${randomUUID58()}`;
+          const bridge = writeOpenClawMcpBridgeFiles(toolDefs, randomUUID59());
+          mcpProfile = `fusion-${randomUUID59()}`;
           mcpConfigPath = bridge.serverConfigPath;
           await configureOpenClawMcpServer({
             binaryPath: this.config.binaryPath,
@@ -357597,7 +357895,7 @@ import { existsSync as existsSync77, writeFileSync as writeFileSync15 } from "no
 import { tmpdir as tmpdir17 } from "node:os";
 import { dirname as dirname45, join as join104 } from "node:path";
 import { fileURLToPath as fileURLToPath11 } from "node:url";
-import { randomUUID as randomUUID59 } from "node:crypto";
+import { randomUUID as randomUUID60 } from "node:crypto";
 function toolsToMcpToolDefs2(tools) {
   if (!Array.isArray(tools)) return [];
   return tools.filter((tool) => tool && typeof tool.name === "string" && tool.name.trim().length > 0 && !BUILT_IN_TOOL_NAMES2.has(tool.name)).map((tool) => ({
@@ -357648,7 +357946,7 @@ async function startFusionToolBridge(tools) {
       byName.set(tool.name, tool);
     }
   }
-  const schemaPath = join104(tmpdir17(), `fusion-grok-mcp-schemas-${process.pid}-${randomUUID59()}.json`);
+  const schemaPath = join104(tmpdir17(), `fusion-grok-mcp-schemas-${process.pid}-${randomUUID60()}.json`);
   writeFileSync15(schemaPath, JSON.stringify(defs));
   const server = createServer2(async (req, res) => {
     if (req.method !== "POST" || req.url !== "/tool-call") {
@@ -357674,7 +357972,7 @@ async function startFusionToolBridge(tools) {
       return;
     }
     try {
-      const result2 = await tool.execute(`grok-mcp-${randomUUID59()}`, parsed.arguments ?? {}, void 0, void 0, void 0);
+      const result2 = await tool.execute(`grok-mcp-${randomUUID60()}`, parsed.arguments ?? {}, void 0, void 0, void 0);
       res.statusCode = 200;
       res.setHeader("content-type", "application/json");
       res.end(
@@ -359718,7 +360016,7 @@ import { existsSync as existsSync81, rmSync as rmSync13, writeFileSync as writeF
 import { tmpdir as tmpdir19 } from "node:os";
 import { dirname as dirname50, join as join109 } from "node:path";
 import { fileURLToPath as fileURLToPath15 } from "node:url";
-import { randomBytes as randomBytes8, randomUUID as randomUUID60 } from "node:crypto";
+import { randomBytes as randomBytes8, randomUUID as randomUUID61 } from "node:crypto";
 function toolsToMcpToolDefs3(tools) {
   if (!Array.isArray(tools)) return [];
   return tools.filter((tool) => tool && typeof tool.name === "string" && tool.name.trim().length > 0 && !BUILT_IN_TOOL_NAMES3.has(tool.name)).map((tool) => ({
@@ -359769,7 +360067,7 @@ async function startFusionToolBridge2(tools, options = {}) {
       byName.set(tool.name, tool);
     }
   }
-  const schemaPath = join109(tmpdir19(), `fusion-claude-mcp-schemas-${process.pid}-${randomUUID60()}.json`);
+  const schemaPath = join109(tmpdir19(), `fusion-claude-mcp-schemas-${process.pid}-${randomUUID61()}.json`);
   writeFileSync17(schemaPath, JSON.stringify(defs));
   const capabilityToken = randomBytes8(32).toString("base64url");
   const server = createServer3(async (req, res) => {
@@ -359834,7 +360132,7 @@ async function startFusionToolBridge2(tools, options = {}) {
       return;
     }
     try {
-      const result2 = await tool.execute(`claude-mcp-${randomUUID60()}`, parsed.arguments ?? {}, void 0, void 0, void 0);
+      const result2 = await tool.execute(`claude-mcp-${randomUUID61()}`, parsed.arguments ?? {}, void 0, void 0, void 0);
       res.statusCode = 200;
       res.setHeader("content-type", "application/json");
       res.end(
@@ -361911,7 +362209,7 @@ import { existsSync as existsSync83, unlinkSync as unlinkSync5, writeFileSync as
 import { tmpdir as tmpdir20 } from "node:os";
 import { dirname as dirname53, join as join112 } from "node:path";
 import { fileURLToPath as fileURLToPath17 } from "node:url";
-import { randomUUID as randomUUID61 } from "node:crypto";
+import { randomUUID as randomUUID62 } from "node:crypto";
 function toolsToMcpToolDefs4(tools) {
   if (!Array.isArray(tools)) return [];
   return tools.filter(
@@ -361968,7 +362266,7 @@ async function startFusionToolBridge3(tools) {
       byName.set(tool.name, tool);
     }
   }
-  const schemaPath = join112(tmpdir20(), `fusion-omp-mcp-schemas-${process.pid}-${randomUUID61()}.json`);
+  const schemaPath = join112(tmpdir20(), `fusion-omp-mcp-schemas-${process.pid}-${randomUUID62()}.json`);
   writeFileSync18(schemaPath, JSON.stringify(defs));
   const server = createServer4(async (req, res) => {
     if (req.method !== "POST" || req.url !== "/tool-call") {
@@ -361995,7 +362293,7 @@ async function startFusionToolBridge3(tools) {
     }
     try {
       const result2 = await tool.execute(
-        `omp-mcp-${randomUUID61()}`,
+        `omp-mcp-${randomUUID62()}`,
         parsed.arguments ?? {},
         void 0,
         void 0,
@@ -363091,7 +363389,7 @@ var init_paperclip_client = __esm({
 });
 
 // ../../plugins/fusion-plugin-paperclip-runtime/src/runtime-adapter.ts
-import { randomUUID as randomUUID62 } from "node:crypto";
+import { randomUUID as randomUUID63 } from "node:crypto";
 function sleep7(ms2) {
   return new Promise((resolve104) => setTimeout(resolve104, ms2));
 }
@@ -363220,7 +363518,7 @@ var init_runtime_adapter10 = __esm({
           apiKey: effectiveApiKey,
           agentId,
           companyId,
-          sessionId: randomUUID62(),
+          sessionId: randomUUID63(),
           systemPrompt: options.systemPrompt,
           cwd: options.cwd,
           mode: normalizeMode3(this.config.mode),
@@ -366720,7 +367018,7 @@ var init_command_center_csv = __esm({
 });
 
 // ../dashboard/src/monitor-store.ts
-import { randomUUID as randomUUID63 } from "node:crypto";
+import { randomUUID as randomUUID64 } from "node:crypto";
 function monitorProjectId(layer) {
   if (!layer.projectId) {
     throw new Error("PostgreSQL monitor writes require asyncLayer.projectId");
@@ -366752,7 +367050,7 @@ async function recordDeployment(db, input) {
     return recordDeploymentAsync(layer.db, input, monitorProjectId(layer));
   }
   const sqliteDb = db;
-  const deploymentId = input.deploymentId?.trim() || `dep-${randomUUID63()}`;
+  const deploymentId = input.deploymentId?.trim() || `dep-${randomUUID64()}`;
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const deployedAt = input.deployedAt ?? now;
   const meta2 = input.meta ? JSON.stringify(input.meta) : null;
@@ -366818,7 +367116,7 @@ async function ingestIncidentSignal(db, input) {
     const updated = getIncident(sqliteDb, existing.incidentId);
     return { incident: updated ?? existing, created: false };
   }
-  const incidentId = `inc-${randomUUID63()}`;
+  const incidentId = `inc-${randomUUID64()}`;
   const meta2 = {
     ...input.meta ?? {},
     [OCCURRENCES_META_KEY2]: 1,
@@ -371419,7 +371717,7 @@ var init_types6 = __esm({
 });
 
 // ../dashboard/src/stt/model-manager.ts
-import { createHash as createHash31, randomUUID as randomUUID64 } from "node:crypto";
+import { createHash as createHash31, randomUUID as randomUUID65 } from "node:crypto";
 import { mkdir as mkdir38, open as open4, readFile as readFile56, readdir as readdir14, rename as rename10, rm as rm21, stat as stat16, writeFile as writeFile37 } from "node:fs/promises";
 import { join as join118, relative as relative22, resolve as resolve68, sep as sep18 } from "node:path";
 function parseSafeTarListing(listing) {
@@ -371500,8 +371798,8 @@ function createVoiceModelManager(options = {}) {
       if (!current(g2, signal)) return state;
       await mkdir38(cacheDir(), { recursive: true });
       if (!current(g2, signal)) return state;
-      partial2 = join118(cacheDir(), `.partial-${g2}-${randomUUID64()}`);
-      staging = join118(cacheDir(), `.staging-${g2}-${randomUUID64()}`);
+      partial2 = join118(cacheDir(), `.partial-${g2}-${randomUUID65()}`);
+      staging = join118(cacheDir(), `.staging-${g2}-${randomUUID65()}`);
       const file = await open4(partial2, "wx");
       try {
         const response = await (options.fetch ?? globalThis.fetch)(asset.url, { signal });
@@ -371549,7 +371847,7 @@ function createVoiceModelManager(options = {}) {
       await writeFile37(join118(staging, "manifest.json"), JSON.stringify({ filename: asset.filename, sha256: asset.sha256, installedAt: (/* @__PURE__ */ new Date()).toISOString(), expectedFiles: asset.expectedFiles }));
       await options.beforePromote?.(signal);
       if (!current(g2, signal)) return state;
-      const backup = join118(cacheDir(), `.backup-${g2}-${randomUUID64()}`);
+      const backup = join118(cacheDir(), `.backup-${g2}-${randomUUID65()}`);
       let movedPrevious = false;
       try {
         try {
@@ -371770,7 +372068,7 @@ var init_parakeet_service = __esm({
 });
 
 // ../dashboard/src/routes/register-voice-routes.ts
-import { randomUUID as randomUUID65 } from "node:crypto";
+import { randomUUID as randomUUID66 } from "node:crypto";
 import express from "express";
 async function settingsFor(ctx, req) {
   const scoped = await ctx.getScopedStore(req);
@@ -371849,7 +372147,7 @@ function createRegisterVoiceRoutes(deps = {}) {
           recognizer.close();
           return error2(res, 409, { error: "unavailable", reason: "model-removed" });
         }
-        const id = randomUUID65();
+        const id = randomUUID66();
         const now = Date.now();
         sessions7.set(id, { projectId, recognizer, next: 0, bytes: 0, last: now, expires: now + 3e5 });
         res.status(201).json({ sessionId: id, expiresAt: new Date(now + 3e5).toISOString(), modelId: model.id, language: language.language });
@@ -372320,7 +372618,7 @@ var init_fn_binary_local_install = __esm({
 });
 
 // ../dashboard/src/routes/register-system-routes.ts
-import { randomUUID as randomUUID66 } from "node:crypto";
+import { randomUUID as randomUUID67 } from "node:crypto";
 import { existsSync as existsSync87 } from "node:fs";
 import { join as join120 } from "node:path";
 function rejectCrossOrigin(req, res) {
@@ -372517,7 +372815,7 @@ function registerSystemRoutes(ctx, deps) {
       throw new ApiError(409, `Build script missing: ${scriptPath}`);
     }
     const job = {
-      id: randomUUID66(),
+      id: randomUUID67(),
       kind: "rebuild",
       scope,
       restartAfter,
@@ -372807,7 +373105,7 @@ function registerSystemRoutes(ctx, deps) {
       throw new ApiError(409, `A ${activeJob.kind}/${activeJob.scope} job is already running`);
     }
     const job = {
-      id: randomUUID66(),
+      id: randomUUID67(),
       kind,
       scope,
       restartAfter,
@@ -373095,7 +373393,7 @@ var init_cli_agent_settings = __esm({
 
 // ../dashboard/src/mission-routes.ts
 import { Router as Router5 } from "express";
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 function resolveMissionInterviewThinkingLevel(settings, thinkingLevel) {
   return resolvePlanningThinkingLevel(settings, thinkingLevel);
 }
@@ -373279,7 +373577,7 @@ function replayBufferedSSE(res, bufferedEvents) {
 }
 function createMissionRouter(store, missionAutopilot, aiSessionStore, missionExecutionLoop, engineManager, pluginRunner, options) {
   const router = Router5();
-  const requestContext = new AsyncLocalStorage();
+  const requestContext = new AsyncLocalStorage2();
   function getScopedStore2() {
     return requestContext.getStore() ?? store;
   }
@@ -375790,11 +376088,11 @@ var init_mission_routes = __esm({
 });
 
 // ../dashboard/src/ideation-routes.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
 import { Router as Router6 } from "express";
 function createIdeationRouter(store, options) {
   const router = Router6();
-  const requestContext = new AsyncLocalStorage2();
+  const requestContext = new AsyncLocalStorage3();
   const ideation = () => (requestContext.getStore() ?? store).getIdeationStore();
   router.use(async (req, _res, next) => {
     try {
@@ -375978,7 +376276,7 @@ var init_insight_run_sweeper = __esm({
 
 // ../dashboard/src/insights-routes.ts
 import { Router as Router7 } from "express";
-import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
 function rethrowAsApiError4(error3, fallbackMessage = "Internal server error") {
   if (error3 instanceof ApiError) throw error3;
   if (error3 instanceof Error) throw new ApiError(500, error3.message);
@@ -376122,7 +376420,7 @@ function toInsightTitle(content) {
 }
 function createInsightsRouter(store, options) {
   const router = Router7();
-  const requestContext = new AsyncLocalStorage3();
+  const requestContext = new AsyncLocalStorage4();
   let rootInsightStore;
   if (typeof store.getInsightStore === "function") {
     try {
@@ -376626,7 +376924,7 @@ var init_insights_routes = __esm({
 
 // ../dashboard/src/evals-routes.ts
 import { Router as Router8 } from "express";
-import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
 function rethrowAsApiError5(error3, fallbackMessage = "Internal server error") {
   if (error3 instanceof ApiError) throw error3;
   if (error3 instanceof Error) throw new ApiError(500, error3.message);
@@ -376653,7 +376951,7 @@ function normalizeEvalText(result2) {
 }
 function createEvalsRouter(store, options) {
   const router = Router8();
-  const requestContext = new AsyncLocalStorage4();
+  const requestContext = new AsyncLocalStorage5();
   router.use((req, _res, next) => {
     getScopedStore(req, store, options).then((scopedStore) => requestContext.run(scopedStore, () => next())).catch((err) => {
       try {
@@ -376737,7 +377035,7 @@ var init_evals_routes = __esm({
 
 // ../dashboard/src/research-routes.ts
 import { Router as Router9 } from "express";
-import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
 function rethrowAsApiError6(error3, fallback2 = "Internal server error") {
   if (error3 instanceof ApiError) throw error3;
   if (error3 instanceof ResearchLifecycleError) {
@@ -376829,7 +377127,7 @@ async function addFindingAttachment(scopedStore, taskId, filename, markdown) {
 }
 function createResearchRouter(store, options) {
   const router = Router9();
-  const requestContext = new AsyncLocalStorage5();
+  const requestContext = new AsyncLocalStorage6();
   router.use((req, _res, next) => {
     getScopedStore(req, store, options).then((scopedStore) => requestContext.run(scopedStore, () => next())).catch((error3) => {
       try {
@@ -377332,7 +377630,7 @@ var init_experiment_routes = __esm({
 
 // ../dashboard/src/goals-routes.ts
 import { Router as Router11 } from "express";
-import { AsyncLocalStorage as AsyncLocalStorage6 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage7 } from "node:async_hooks";
 function getGoalStore(store) {
   return store.getGoalStore();
 }
@@ -377388,7 +377686,7 @@ function rethrowGoalCapError(error3) {
 }
 function createGoalsRouter(store, options) {
   const router = Router11();
-  const requestContext = new AsyncLocalStorage6();
+  const requestContext = new AsyncLocalStorage7();
   function getScopedStore2() {
     return requestContext.getStore() ?? store;
   }
@@ -384061,7 +384359,7 @@ var init_provider_health_monitor = __esm({
 
 // ../dashboard/src/server.ts
 import express3 from "express";
-import { randomUUID as randomUUID67 } from "node:crypto";
+import { randomUUID as randomUUID68 } from "node:crypto";
 import { join as join125, dirname as dirname57 } from "node:path";
 import { existsSync as existsSync89, readFileSync as readFileSync32, statSync as statSync16 } from "node:fs";
 import { fileURLToPath as fileURLToPath18 } from "node:url";
@@ -385526,7 +385824,7 @@ function setupBadgeWebSocket(app, server, store, options) {
   const dashboardApp = app;
   const wsManager = new WebSocketManager();
   const badgeSnapshots = /* @__PURE__ */ new Map();
-  const serverId = randomUUID67();
+  const serverId = randomUUID68();
   const badgePubSub = options?.badgePubSub ?? createBadgePubSub({ sourceId: serverId });
   void badgePubSub.start();
   const scopedStores = /* @__PURE__ */ new Map();
@@ -385668,7 +385966,7 @@ function setupBadgeWebSocket(app, server, store, options) {
     const url2 = new URL(req.url || "", `http://${req.headers.host}`);
     const projectId = url2.searchParams.get("projectId") ?? "default";
     void ensureScopedListeners(projectId);
-    wsManager.addClient(ws2, randomUUID67(), projectId);
+    wsManager.addClient(ws2, randomUUID68(), projectId);
   });
   server.once("close", async () => {
     for (const cleanup of scopedCleanups.values()) {
@@ -386500,7 +386798,7 @@ import { Type as Type9 } from "typebox";
 import { StringEnum } from "@earendil-works/pi-ai";
 import { resolve as resolve75, relative as relative25, isAbsolute as isAbsolute33, sep as sep22, basename as basename36, extname as extname5, join as join127 } from "node:path";
 import { existsSync as existsSync90 } from "node:fs";
-import { AsyncLocalStorage as AsyncLocalStorage7 } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage8 } from "node:async_hooks";
 function resolveProjectRoot2(cwd) {
   const worktreeProjectRoot = typeof getProjectRootFromWorktree === "function" ? getProjectRootFromWorktree(cwd) : null;
   if (typeof getProjectRootFromWorktree !== "function" && !warnedMissingProjectRootResolver) {
@@ -386566,7 +386864,7 @@ var init_extension = __esm({
     storeCache2 = extensionStoreState.cache;
     storeBootInflight = extensionStoreState.bootInflight;
     storeBootFailureCooldown = extensionStoreState.bootFailureCooldown;
-    extensionToolSignal = new AsyncLocalStorage7();
+    extensionToolSignal = new AsyncLocalStorage8();
   }
 });
 
@@ -396969,6 +397267,7 @@ var init_dev_source_restart = __esm({
 var dashboard_exports = {};
 __export(dashboard_exports, {
   StreamedLogBuffer: () => StreamedLogBuffer,
+  buildUiOnlyHeartbeatMonitorOptions: () => buildUiOnlyHeartbeatMonitorOptions,
   classifyDashboardFatalExit: () => classifyDashboardFatalExit,
   countActiveTasks: () => countActiveTasks,
   hasLiveSupervisingParent: () => hasLiveSupervisingParent,
@@ -396997,6 +397296,15 @@ async function countActiveTasks(store, tasks2) {
   }
   return active;
 }
+function buildUiOnlyHeartbeatMonitorOptions(input) {
+  return {
+    store: input.agentStore,
+    agentStore: input.agentStore,
+    taskStore: input.taskStore,
+    rootDir: input.rootDir,
+    secretsStore: input.secretsStore
+  };
+}
 function formatRuntimeContext(context) {
   if (context === void 0) {
     return "";
@@ -398481,11 +398789,14 @@ async function runDashboard(port, opts = {}) {
       logSink.warn(`Failed to initialize mesh networking: ${message}`, "dashboard");
     }
     try {
+      const secretsStore = await store.getSecretsStore();
       heartbeatMonitorImpl = new HeartbeatMonitor({
-        store: agentStore,
-        agentStore,
-        taskStore: store,
-        rootDir: cwd,
+        ...buildUiOnlyHeartbeatMonitorOptions({
+          agentStore,
+          taskStore: store,
+          rootDir: cwd,
+          secretsStore
+        }),
         onMissed: (agentId, reason) => {
           logSink.warn(`Agent ${agentId} missed heartbeat: ${reason}`, "engine");
         },