@runfusion/fusion 0.75.1-beta.0 → 0.75.1-beta.2

package/dist/child-process-worker.js

@@ -1181,6 +1181,9 @@ function isFusionSiblingBranch(branch) {
 function resolveEffectiveAutoMerge(task, settings) {
   return task.autoMerge ?? settings.autoMerge;
 }
+function hasUserAutoMergeHold(task) {
+  return task.autoMerge === false && task.autoMergeProvenance === "user";
+}
 function allowsAutoMergeProcessing(task, settings) {
   return (settings.autoMerge !== false || task.autoMerge === true) && !taskHasManualOpenPullRequest(task);
 }
@@ -10046,6 +10049,7 @@ function validateForeach(node, topLevelNodeIds, columnIds) {
     );
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "foreach" || inner.kind === "loop") {
       throw new WorkflowIrError(
         `foreach node '${node.id}' template may not contain nested loop/foreach ('${inner.id}')`
@@ -10164,6 +10168,7 @@ function validateLoop(node, topLevelNodeIds, columnIds) {
     );
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "loop" || inner.kind === "foreach") {
       throw new WorkflowIrError(
         `loop node '${node.id}' template may not contain nested loop/foreach ('${inner.id}')`
@@ -10257,6 +10262,7 @@ function validateOptionalGroup(node, topLevelNodeIds, columnIds) {
     throw new WorkflowIrError(`optional-group node '${node.id}' template has duplicate node ids`);
   }
   for (const inner of templateNodes) {
+    validateReviewKind(inner, "nested");
     if (inner.kind === "loop" || inner.kind === "foreach" || inner.kind === "optional-group") {
       throw new WorkflowIrError(
         `optional-group node '${node.id}' template may not contain nested loop/foreach/optional-group ('${inner.id}')`
@@ -10928,6 +10934,19 @@ function validateColumnRecovery(column) {
     );
   }
 }
+function validateReviewKind(node, placement) {
+  const value = node.config?.reviewKind;
+  if (value === void 0) return;
+  if (value !== "plan" && value !== "code") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has invalid reviewKind '${String(value)}'; expected 'plan' or 'code'`);
+  }
+  if (placement === "nested") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has reviewKind in an unsupported nested template placement`);
+  }
+  if (node.kind !== "prompt" && node.kind !== "gate" && node.kind !== "script" && node.kind !== "optional-group") {
+    throw new WorkflowIrError(`Workflow node '${node.id}' has reviewKind on unsupported node kind '${node.kind}'`);
+  }
+}
 function validateV2(ir2) {
   validateColumns(ir2);
   for (const [index2, column] of ir2.columns.entries()) {
@@ -10950,6 +10969,7 @@ function validateV2(ir2) {
   }
   const nodesById = new Map(ir2.nodes.map((n) => [n.id, n]));
   for (const node of ir2.nodes) {
+    validateReviewKind(node, "top-level");
     validateExtensionMetadata(`Workflow node '${node.id}'`, node.extensions);
     if (node.column !== void 0 && !columnIds.has(node.column)) {
       throw new WorkflowIrError(
@@ -13413,6 +13433,7 @@ function codeReviewOptionalGroupNode(column, options = {}) {
     column,
     config: {
       name: CODE_REVIEW_NAME,
+      reviewKind: "code",
       // Default-ON: runs for every coding task by default, but operators can toggle it
       // off per task (remove `code-review` from enabledWorkflowSteps).
       defaultOn: options.defaultOn ?? true,
@@ -13558,6 +13579,7 @@ function planReviewOptionalGroupNode(column, options = {}) {
     ...column ? { column } : {},
     config: {
       name: PLAN_REVIEW_NAME,
+      reviewKind: "plan",
       defaultOn: options.defaultOn ?? true,
       /*
        * FNXC:WorkflowRemediation 2026-06-29-12:14:
@@ -63402,7 +63424,7 @@ function rowToTask(row) {
     executionStartBranch: row.executionStartBranch || void 0,
     branch: row.branch || void 0,
     autoMerge: row.autoMerge === null ? void 0 : row.autoMerge === 1,
-    autoMergeProvenance: row.autoMergeProvenance === "user" || row.autoMergeProvenance === "legacy-stamp" ? row.autoMergeProvenance : void 0,
+    autoMergeProvenance: row.autoMergeProvenance === "user" || row.autoMergeProvenance === "mission" || row.autoMergeProvenance === "legacy-stamp" ? row.autoMergeProvenance : void 0,
     baseCommitSha: row.baseCommitSha || void 0,
     scopeOverride: row.scopeOverride ? true : void 0,
     scopeOverrideReason: row.scopeOverrideReason || void 0,
@@ -72918,10 +72940,10 @@ ${feature.acceptanceCriteria}`);
               Apply the selected Missions header workflow atomically during TaskStore.createTask so newly triaged features land in the intended workflow lane. Duplicate-guard reuses skip this create path, preserving existing duplicate tasks without workflow mutation.
               */
               /*
-              FNXC:MissionAutoMerge 2026-07-18-12:00:
-              An autoMerge:false mission stamps each newly triaged task so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override.
+              FNXC:MissionAutoMerge 2026-08-05-22:50:
+              An autoMerge:false mission stamps each newly triaged task as mission policy so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override; policy must not impersonate an operator manual-hold choice.
               */
-              ...mission?.autoMerge === false ? { autoMerge: false } : {},
+              ...mission?.autoMerge === false ? { autoMerge: false, autoMergeProvenance: "mission" } : {},
               // FNXC:MissionTaskPrefix 2026-07-26-12:00: thread the mission's optional taskPrefix into TaskCreateInput for distributed id minting.
               ...mission?.taskPrefix ? { taskPrefix: mission.taskPrefix } : {},
               ...branchOptions?.workflowId !== void 0 ? { workflowId: branchOptions.workflowId } : {}
@@ -76099,10 +76121,10 @@ ${feature.acceptanceCriteria}`);
                 }
               } : {},
               /*
-              FNXC:MissionAutoMerge 2026-07-18-12:00:
-              An autoMerge:false mission stamps each newly triaged task so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override.
+              FNXC:MissionAutoMerge 2026-08-05-22:50:
+              An autoMerge:false mission stamps each newly triaged task as mission policy so its shared branch produces one PR instead of per-task auto-merges. Duplicate reuse intentionally bypasses this create-only override; policy must not impersonate an operator manual-hold choice.
               */
-              ...mission?.autoMerge === false ? { autoMerge: false } : {},
+              ...mission?.autoMerge === false ? { autoMerge: false, autoMergeProvenance: "mission" } : {},
               // FNXC:MissionTaskPrefix 2026-07-26-12:00: thread the mission's optional taskPrefix into TaskCreateInput so the distributed allocator mints ERR-N (etc.) instead of the project prefix.
               ...mission?.taskPrefix ? { taskPrefix: mission.taskPrefix } : {},
               ...branchOptions?.workflowId !== void 0 ? { workflowId: branchOptions.workflowId } : {}
@@ -86453,7 +86475,9 @@ async function _createTaskInternalBackendImpl(store, input, title, resolvedWorkf
     sourceMetadata: withTaskBranchContextInSourceMetadata(input.source?.sourceMetadata, input.branchContext),
     branchContext: input.branchContext,
     autoMerge: input.autoMerge,
-    autoMergeProvenance: input.autoMerge === void 0 ? void 0 : "user",
+    // FNXC:SharedBranchMemberHold 2026-08-05-22:50: trusted mission creation
+    // preserves policy provenance; operator/API create requests retain user provenance.
+    autoMergeProvenance: input.autoMerge === void 0 ? void 0 : input.autoMergeProvenance ?? "user",
     // FNXC:CodingIdeasWorkflow 2026-07-05-19:45: land the task in its
     // workflow's manual intake column (e.g. Coding (Ideas) → "ideas") when
     // no explicit column is given (main FN-7591 parity).
@@ -127158,6 +127182,36 @@ var init_async_knowledge = __esm({
 });
 
 // ../core/src/workflows/workflow-step-results.ts
+function normalizeWorkflowReviewFindings(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const normalized = [];
+  const usedIds = /* @__PURE__ */ new Set();
+  for (const candidate of raw) {
+    if (normalized.length >= MAX_WORKFLOW_REVIEW_FINDINGS || !candidate || typeof candidate !== "object") continue;
+    const value = candidate;
+    const title = boundedTrimmedString(value.title, MAX_FINDING_TITLE_LENGTH);
+    const body = boundedTrimmedString(value.body, MAX_FINDING_BODY_LENGTH);
+    if (!title || !body) continue;
+    const baseId = boundedTrimmedString(value.id, MAX_FINDING_ID_LENGTH) || `finding-${normalized.length + 1}`;
+    let id = baseId;
+    let suffix = 2;
+    while (usedIds.has(id)) id = `${baseId.slice(0, Math.max(1, MAX_FINDING_ID_LENGTH - String(suffix).length - 1))}-${suffix++}`;
+    usedIds.add(id);
+    const filePath = boundedTrimmedString(value.filePath, MAX_FINDING_PATH_LENGTH);
+    const line2 = typeof value.line === "number" && Number.isFinite(value.line) && value.line > 0 ? Math.floor(value.line) : void 0;
+    const severity = isWorkflowReviewFindingSeverity(value.severity) ? value.severity : void 0;
+    normalized.push({ id, title, body, ...filePath ? { filePath } : {}, ...line2 ? { line: line2 } : {}, ...severity ? { severity } : {} });
+  }
+  return normalized.length > 0 ? normalized : void 0;
+}
+function boundedTrimmedString(value, maxLength) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return trimmed && trimmed.length <= maxLength ? trimmed : void 0;
+}
+function isWorkflowReviewFindingSeverity(value) {
+  return typeof value === "string" && WORKFLOW_REVIEW_FINDING_SEVERITIES.includes(value);
+}
 function isTerminalFailure(result) {
   return TERMINAL_FAILURE_STATUSES.has(result.status);
 }
@@ -127223,10 +127277,16 @@ function makeReviewLeaseRecord(args) {
     leaseOwner: args.owner
   };
 }
-var MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS, TERMINAL_FAILURE_STATUSES, PLAN_REVIEW_LEASE_STALENESS_MS, TERMINAL_STEP_STATUSES;
+var WORKFLOW_REVIEW_FINDING_SEVERITIES, MAX_WORKFLOW_REVIEW_FINDINGS, MAX_FINDING_ID_LENGTH, MAX_FINDING_TITLE_LENGTH, MAX_FINDING_BODY_LENGTH, MAX_FINDING_PATH_LENGTH, MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS, TERMINAL_FAILURE_STATUSES, PLAN_REVIEW_LEASE_STALENESS_MS, TERMINAL_STEP_STATUSES;
 var init_workflow_step_results = __esm({
   "../core/src/workflows/workflow-step-results.ts"() {
     "use strict";
+    WORKFLOW_REVIEW_FINDING_SEVERITIES = ["low", "medium", "high", "critical"];
+    MAX_WORKFLOW_REVIEW_FINDINGS = 20;
+    MAX_FINDING_ID_LENGTH = 128;
+    MAX_FINDING_TITLE_LENGTH = 240;
+    MAX_FINDING_BODY_LENGTH = 4e3;
+    MAX_FINDING_PATH_LENGTH = 1e3;
     MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS = 5;
     TERMINAL_FAILURE_STATUSES = /* @__PURE__ */ new Set([
       "failed",
@@ -127295,6 +127355,7 @@ var init_task_timing = __esm({
 });
 
 // ../core/src/session-identity-registry.ts
+import { AsyncLocalStorage } from "node:async_hooks";
 import { resolve as resolve21 } from "node:path";
 import { realpathSync as realpathSync5 } from "node:fs";
 function getRegistry() {
@@ -127306,6 +127367,16 @@ function getRegistry() {
   }
   return registry3;
 }
+function getActiveInvocationStorage() {
+  const holder = globalThis;
+  const existing = holder[ACTIVE_INVOCATION_KEY];
+  if (existing instanceof AsyncLocalStorage) {
+    return existing;
+  }
+  const storage = new AsyncLocalStorage();
+  holder[ACTIVE_INVOCATION_KEY] = storage;
+  return storage;
+}
 function canonicalizeCwd(cwd) {
   const resolved = resolve21(cwd);
   try {
@@ -127333,8 +127404,13 @@ function registerFusionSessionIdentity(cwd, identity) {
   };
 }
 function resolveFusionSessionPrincipal(cwd) {
+  const canonicalCwd = canonicalizeCwd(cwd);
+  const activeInvocation = getActiveInvocationStorage().getStore();
+  if (activeInvocation?.cwdKeys.has(canonicalCwd)) {
+    return { kind: "agent", identity: activeInvocation.identity };
+  }
   const registry3 = getRegistry();
-  const list = registry3.get(canonicalizeCwd(cwd));
+  const list = registry3.get(canonicalCwd);
   if (!list || list.length === 0) {
     return { kind: "operator" };
   }
@@ -127343,14 +127419,24 @@ function resolveFusionSessionPrincipal(cwd) {
   }
   return { kind: "ambiguous", identities: [...list] };
 }
+function runWithFusionSessionIdentity(cwdKeys, identity, callback) {
+  const invocation = {
+    identity: { ...identity, registeredAt: Date.now() },
+    cwdKeys: new Set(cwdKeys.map(canonicalizeCwd))
+  };
+  return getActiveInvocationStorage().run(invocation, callback);
+}
 function __clearFusionSessionIdentityRegistryForTests() {
-  globalThis[REGISTRY_KEY] = /* @__PURE__ */ new Map();
+  const holder = globalThis;
+  holder[REGISTRY_KEY] = /* @__PURE__ */ new Map();
+  holder[ACTIVE_INVOCATION_KEY] = new AsyncLocalStorage();
 }
-var REGISTRY_KEY;
+var REGISTRY_KEY, ACTIVE_INVOCATION_KEY;
 var init_session_identity_registry = __esm({
   "../core/src/session-identity-registry.ts"() {
     "use strict";
     REGISTRY_KEY = "__FUSION_SESSION_IDENTITY_REGISTRY_V1__";
+    ACTIVE_INVOCATION_KEY = "__FUSION_SESSION_IDENTITY_ACTIVE_INVOCATION_V1__";
   }
 });
 
@@ -127713,6 +127799,7 @@ __export(src_exports, {
   MAX_TITLE_LENGTH: () => MAX_TITLE_LENGTH,
   MAX_TITLE_SUMMARIZE_INPUT_LENGTH: () => MAX_TITLE_SUMMARIZE_INPUT_LENGTH,
   MAX_WORKFLOW_ICON_LENGTH: () => MAX_WORKFLOW_ICON_LENGTH,
+  MAX_WORKFLOW_REVIEW_FINDINGS: () => MAX_WORKFLOW_REVIEW_FINDINGS,
   MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS: () => MAX_WORKFLOW_STEP_PRIOR_ATTEMPTS,
   MEMORY_AUDIT_PATH: () => MEMORY_AUDIT_PATH,
   MEMORY_BACKEND_SETTINGS_KEYS: () => MEMORY_BACKEND_SETTINGS_KEYS,
@@ -127914,6 +128001,7 @@ __export(src_exports, {
   WAKE_DELTA_ASSIGNED_TASKS_CAP: () => WAKE_DELTA_ASSIGNED_TASKS_CAP,
   WEDGE_RENOTIFY_COOLDOWN_MS: () => WEDGE_RENOTIFY_COOLDOWN_MS,
   WORKFLOW_EXTENSION_SCHEMA_VERSION: () => WORKFLOW_EXTENSION_SCHEMA_VERSION,
+  WORKFLOW_REVIEW_FINDING_SEVERITIES: () => WORKFLOW_REVIEW_FINDING_SEVERITIES,
   WORKFLOW_SETTING_REJECTION_CODES: () => WORKFLOW_SETTING_REJECTION_CODES,
   WORKFLOW_SETTING_TYPES: () => WORKFLOW_SETTING_TYPES,
   WORKFLOW_WORK_ITEM_KINDS: () => WORKFLOW_WORK_ITEM_KINDS,
@@ -128319,6 +128407,7 @@ __export(src_exports, {
   hasRoleOverrides: () => hasRoleOverrides,
   hasSyncPassphraseConfigured: () => hasSyncPassphraseConfigured,
   hasTitleIdDrift: () => hasTitleIdDrift,
+  hasUserAutoMergeHold: () => hasUserAutoMergeHold,
   hashWorkflowIr: () => hashWorkflowIr,
   healSchemaDrift: () => healSchemaDrift,
   importMcpServersJson: () => importMcpServersJson,
@@ -128441,6 +128530,7 @@ __export(src_exports, {
   isWipColumn: () => isWipColumn,
   isWipColumnRole: () => isWipColumnRole,
   isWorkflowOptionalGroupEnabled: () => isWorkflowOptionalGroupEnabled,
+  isWorkflowReviewFindingSeverity: () => isWorkflowReviewFindingSeverity,
   isWorkspaceTask: () => isWorkspaceTask,
   layoutForIr: () => layoutForIr,
   listActiveAiSessions: () => listActiveAiSessions,
@@ -128514,6 +128604,7 @@ __export(src_exports, {
   normalizeValidationDiagnostics: () => normalizeValidationDiagnostics,
   normalizeWorkflowIcon: () => normalizeWorkflowIcon,
   normalizeWorkflowPromptOverrides: () => normalizeWorkflowPromptOverrides,
+  normalizeWorkflowReviewFindings: () => normalizeWorkflowReviewFindings,
   notifyOperatorOfNonOperatorDelete: () => notifyOperatorOfNonOperatorDelete,
   overseerAdviceSeverityRank: () => overseerAdviceSeverityRank,
   parseAgentManifest: () => parseAgentManifest,
@@ -128777,6 +128868,7 @@ __export(src_exports, {
   runMemoryBackupCommand: () => runMemoryBackupCommand,
   runReconciliationAbort: () => runReconciliationAbort,
   runScheduledEvalBatch: () => runScheduledEvalBatch,
+  runWithFusionSessionIdentity: () => runWithFusionSessionIdentity,
   sanitizeBranchSegment: () => sanitizeBranchSegment,
   sanitizeCliAgentSettings: () => sanitizeCliAgentSettings,
   sanitizeCliAgentsSettings: () => sanitizeCliAgentsSettings,
@@ -158175,6 +158267,7 @@ import { existsSync as existsSync49, readFileSync as readFileSync16, realpathSyn
 import { exec as exec11, execFile as execFile9 } from "node:child_process";
 import { promisify as promisify15 } from "node:util";
 import { createRequire as createRequire5 } from "node:module";
+import { randomUUID as randomUUID42 } from "node:crypto";
 import { basename as basename16, dirname as dirname24, join as join59, relative as relative8, isAbsolute as isAbsolute10, resolve as resolve30 } from "node:path";
 import {
   createAgentSession,
@@ -159879,7 +159972,8 @@ async function createFnAgent2(options) {
     });
   };
   const sessionIdentity = (() => {
-    const principalAgentId = options.actionGateContext?.agentId ?? options.permanentAgentGating?.requester?.actorId ?? "engine-session";
+    const namedAgentId = options.actionGateContext?.agentId ?? options.permanentAgentGating?.requester?.actorId;
+    const principalAgentId = namedAgentId ?? `engine-session-${randomUUID42()}`;
     const principalAgentName = options.actionGateContext?.agentName ?? options.permanentAgentGating?.requester?.actorName;
     return {
       agentId: principalAgentId,
@@ -159891,6 +159985,14 @@ async function createFnAgent2(options) {
   const sessionIdentityKeys = [...new Set([options.cwd, resolvedProjectRoot].filter((key) => Boolean(key)))];
   const attachSessionIdentity = (session) => {
     const identityDisposers = sessionIdentityKeys.map((key) => registerFusionSessionIdentity(key, sessionIdentity));
+    const sessionInvocations = session;
+    const wrapInvocation = (methodName) => {
+      const original = sessionInvocations[methodName];
+      if (typeof original !== "function") return;
+      sessionInvocations[methodName] = (...args) => runWithFusionSessionIdentity(sessionIdentityKeys, sessionIdentity, () => original.apply(session, args));
+    };
+    wrapInvocation("prompt");
+    wrapInvocation("promptWithFallback");
     const disposeBeforeIdentity = typeof session.dispose === "function" ? session.dispose.bind(session) : () => void 0;
     session.dispose = async () => {
       for (const disposeIdentity of identityDisposers) {
@@ -162686,10 +162788,11 @@ function createMergeAttemptHandler(deps) {
     );
   };
 }
-function createMergeGateHandler() {
+function createMergeGateHandler(deps = {}) {
   return async (_node, ctx) => {
     const settingsAutoMerge = ctx.settings?.autoMerge;
-    const autoMerge = ctx.task.autoMerge !== false && settingsAutoMerge !== false;
+    const settings = { autoMerge: settingsAutoMerge ?? true };
+    const autoMerge = !hasUserAutoMergeHold(ctx.task) && (await deps.isLiveSharedBranchMember?.(ctx.task, settings) === true || ctx.task.autoMerge !== false && settings.autoMerge !== false);
     return {
       outcome: "success",
       value: autoMerge ? "auto-on" : "auto-off"
@@ -162699,6 +162802,7 @@ function createMergeGateHandler() {
 var init_merge_runner = __esm({
   "../engine/src/workflow-node-runners/merge-runner.ts"() {
     "use strict";
+    init_src2();
     init_workflow_merge_nodes();
   }
 });
@@ -163042,7 +163146,7 @@ function createDefaultNodeHandlers(seams, runCustomNode, deps) {
     "parse-steps": parseSteps,
     code: createCodeNodeHandler(deps?.runCode),
     notify: createNotifyHandler(deps?.notifyDispatch),
-    "merge-gate": createMergeGateHandler(),
+    "merge-gate": createMergeGateHandler({ isLiveSharedBranchMember: deps?.isLiveSharedBranchMember }),
     "merge-attempt": createMergeAttemptHandler({
       primitives: deps?.primitives,
       seams,
@@ -164660,37 +164764,6 @@ var init_code_node_runner = __esm({
   }
 });
 
-// ../engine/src/errors/transient-merge-error-classifier.ts
-function classifyTransientMergeError(error2) {
-  if (!error2) return null;
-  if (/lease-handoff-failed[^a-z]+target-not-queued/i.test(error2)) {
-    return "lease-handoff-target-not-queued";
-  }
-  if (/\bACP turn failed\b/i.test(error2) || /\bacp rpc code -32(?:603|00[0-3])\b/i.test(error2)) {
-    return "ai-provider-turn-failure";
-  }
-  if (/\bspawn(?:\s+\S+)?\s+ENO(?:TDIR|ENT)\b/i.test(error2)) {
-    return "process-spawn-failure";
-  }
-  if (/\bis not a working tree\b/i.test(error2)) {
-    return "process-spawn-failure";
-  }
-  const sameSha = error2.match(/advanced concurrently \(expected ([0-9a-f]{7,40}),\s+observed ([0-9a-f]{7,40})\)/i);
-  if (sameSha && sameSha[1].toLowerCase() === sameSha[2].toLowerCase()) {
-    return "spurious-concurrent-advance-same-sha";
-  }
-  if (isTransientError(error2)) {
-    return "network-transport-failure";
-  }
-  return null;
-}
-var init_transient_merge_error_classifier = __esm({
-  "../engine/src/errors/transient-merge-error-classifier.ts"() {
-    "use strict";
-    init_transient_error_patterns();
-  }
-});
-
 // ../engine/src/notification/ntfy-provider.ts
 function resolveParticipantLabel(metadata, kind) {
   const nameKey = kind === "from" ? "fromName" : "toName";
@@ -165164,7 +165237,50 @@ var init_webhook_provider = __esm({
   }
 });
 
+// ../engine/src/errors/transient-merge-error-classifier.ts
+function classifyTransientMergeError(error2) {
+  if (!error2) return null;
+  if (/lease-handoff-failed[^a-z]+target-not-queued/i.test(error2)) {
+    return "lease-handoff-target-not-queued";
+  }
+  if (/\bACP turn failed\b/i.test(error2) || /\bacp rpc code -32(?:603|00[0-3])\b/i.test(error2)) {
+    return "ai-provider-turn-failure";
+  }
+  if (/\bspawn(?:\s+\S+)?\s+ENO(?:TDIR|ENT)\b/i.test(error2)) {
+    return "process-spawn-failure";
+  }
+  if (/\bis not a working tree\b/i.test(error2)) {
+    return "process-spawn-failure";
+  }
+  const sameSha = error2.match(/advanced concurrently \(expected ([0-9a-f]{7,40}),\s+observed ([0-9a-f]{7,40})\)/i);
+  if (sameSha && sameSha[1].toLowerCase() === sameSha[2].toLowerCase()) {
+    return "spurious-concurrent-advance-same-sha";
+  }
+  if (isTransientError(error2)) {
+    return "network-transport-failure";
+  }
+  return null;
+}
+function hasTransientMergeRecoveryOwner(task) {
+  return classifyTransientMergeError(task.error) !== null && typeof task.mergeTransientRetryCount === "number" && Number.isInteger(task.mergeTransientRetryCount) && task.mergeTransientRetryCount >= 0 && task.mergeTransientRetryCount < MAX_AUTO_MERGE_TRANSIENT_RETRIES;
+}
+var MAX_AUTO_MERGE_TRANSIENT_RETRIES;
+var init_transient_merge_error_classifier = __esm({
+  "../engine/src/errors/transient-merge-error-classifier.ts"() {
+    "use strict";
+    init_transient_error_patterns();
+    MAX_AUTO_MERGE_TRANSIENT_RETRIES = 5;
+  }
+});
+
 // ../engine/src/notification/task-wedge-notification.ts
+function describeTaskRecoveryOwner(task) {
+  if (hasTransientMergeRecoveryOwner(task)) return { kind: "transient-merge-retry" };
+  if (typeof task.recoveryRetryCount === "number" && Number.isInteger(task.recoveryRetryCount) && task.recoveryRetryCount >= 0 && typeof task.nextRecoveryAt === "string" && Number.isFinite(Date.parse(task.nextRecoveryAt))) {
+    return { kind: "scheduled-recovery" };
+  }
+  return null;
+}
 function describeSelfHealingNoActionWedge(task, stage, metadata) {
   const description = SELF_HEALING_NO_ACTIONS[stage];
   if (!description || task.userPaused || task.paused || task.autoMerge === false) return null;
@@ -165222,6 +165338,7 @@ function describeTaskWedge(task) {
   if (/merge.*(?:blocked|verification|gate)|(?:verification|gate).*(?:failed|exhaust)/i.test(error2)) {
     return { reasonKey: "merge-blocked", reason: "Merge verification cannot progress without operator action.", action: "Fix the failing verification, then retry the task." };
   }
+  if (describeTaskRecoveryOwner(task)) return null;
   if (!error2 && (task.mergeRetries ?? 0) < 3) return null;
   return {
     reasonKey: "terminal-failed",
@@ -165233,6 +165350,7 @@ var SELF_HEALING_NO_ACTIONS;
 var init_task_wedge_notification = __esm({
   "../engine/src/notification/task-wedge-notification.ts"() {
     "use strict";
+    init_transient_merge_error_classifier();
     SELF_HEALING_NO_ACTIONS = {
       "reclaim-pr-conflict": {
         reason: "Self-healing could not reclaim a stalled pull-request conflict.",
@@ -165298,7 +165416,6 @@ var init_notification_service = __esm({
     init_src2();
     init_notifier();
     init_logger();
-    init_transient_merge_error_classifier();
     init_ntfy_provider();
     init_webhook_provider();
     init_task_wedge_notification();
@@ -165524,10 +165641,10 @@ var init_notification_service = __esm({
         }
       }
       handleTaskUpdated = (task, meta2) => {
-        const transientFailure = task.status === "failed" ? classifyTransientMergeError(task.error) : null;
-        const wedge = transientFailure ? null : describeTaskWedge(task);
+        const recoveryOwner = task.status === "failed" ? describeTaskRecoveryOwner(task) : null;
+        const wedge = describeTaskWedge(task);
         if (wedge) this.cancelPendingFailureNotification(task.id, "classified-terminal-wedge");
-        if (!transientFailure) void this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, wedge));
+        void this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, wedge));
         void this.maybeSuppressTransientFailedNotification(task, `status=${task.status ?? "undefined"}`);
         if (task.status === "awaiting-approval") {
           void this.writeAwaitingApprovalMailboxMessage(task);
@@ -165538,17 +165655,12 @@ var init_notification_service = __esm({
         if (!this.notificationsEnabled) {
           return;
         }
-        if (task.status === "failed" && !wedge) {
-          const transientClass = classifyTransientMergeError(task.error);
-          if (transientClass) {
-            this.failureNotificationSuppressedCount += 1;
-            schedulerLog.debug(
-              `[notify] ${task.id} transient merge failure (${transientClass}) \u2014 suppressed notification (self-heal in flight)`
-            );
-            return;
-          }
+        if (task.status === "failed" && recoveryOwner) {
+          this.failureNotificationSuppressedCount += 1;
+          schedulerLog.debug(`[notify] ${task.id} recovery-owned failure \u2014 suppressed notification`);
+        } else if (task.status === "failed" && !wedge) {
           if (this.failureNotificationMode === "all") {
-            this.maybeNotify(task.id, "failed", this.createTaskPayload(task, "failed"));
+            void this.maybeNotifyImmediateFailure(task);
           } else {
             this.scheduleFailureNotification(task);
           }
@@ -165635,7 +165747,17 @@ var init_notification_service = __esm({
         await this.enqueueWedgeHandling(task.id, () => this.maybeNotifyTaskWedge(task, descriptor));
       }
       async maybeNotifyTaskWedge(task, suppliedDescriptor) {
-        const descriptor = suppliedDescriptor ?? describeTaskWedge(task);
+        const liveTask = this.store.getTask ? await this.store.getTask(task.id) ?? task : task;
+        const recoveryOwner = describeTaskRecoveryOwner(liveTask);
+        if (recoveryOwner) {
+          if (this.activeWedgeReasons.has(task.id) || liveTask.wedgeNotification?.status === "active") {
+            this.activeWedgeReasons.delete(task.id);
+            await this.store.claimTaskWedgeNotificationEpisode?.(task.id, null);
+          }
+          return;
+        }
+        const descriptor = suppliedDescriptor ?? describeTaskWedge(liveTask);
+        task = liveTask;
         let episode;
         if (!descriptor) {
           const isActiveSelfHealingNoAction = task.wedgeNotification?.status === "active" && task.wedgeNotification.reasonKey.startsWith("self-healing-no-action:");
@@ -166002,6 +166124,14 @@ var init_notification_service = __esm({
         this.failureNotificationDelayMs = typeof settings.failureNotificationDelayMs === "number" && settings.failureNotificationDelayMs >= 0 ? settings.failureNotificationDelayMs : this.failedNotificationGraceMs;
         this.failureNotificationMode = settings.failureNotificationMode ?? "sticky-only";
       }
+      async maybeNotifyImmediateFailure(task) {
+        const liveTask = this.store.getTask ? await this.store.getTask(task.id) ?? task : task;
+        if (liveTask.status !== "failed" || describeTaskRecoveryOwner(liveTask) || describeTaskWedge(liveTask)) {
+          this.failureNotificationSuppressedCount += 1;
+          return;
+        }
+        this.maybeNotify(liveTask.id, "failed", this.createTaskPayload(liveTask, "failed"));
+      }
       scheduleFailureNotification(task) {
         if (this.pendingFailureNotifications.has(task.id)) {
           return;
@@ -166058,12 +166188,9 @@ var init_notification_service = __esm({
           schedulerLog.debug(`[notify] ${taskId} no longer failed at dispatch time \u2014 suppressed notification`);
           return;
         }
-        const transientClassAtDispatch = classifyTransientMergeError(task.error);
-        if (transientClassAtDispatch) {
+        if (describeTaskRecoveryOwner(task)) {
           this.failureNotificationSuppressedCount += 1;
-          schedulerLog.debug(
-            `[notify] ${taskId} transient merge failure (${transientClassAtDispatch}) at dispatch time \u2014 suppressed notification (self-heal in flight)`
-          );
+          schedulerLog.debug(`[notify] ${taskId} recovery-owned failure at dispatch time \u2014 suppressed notification`);
           return;
         }
         if (describeTaskWedge(task)) {
@@ -169630,7 +169757,7 @@ var init_goal_anchoring_audit = __esm({
 // ../engine/src/agent-tools.ts
 import { appendFile as appendFile3, mkdir as mkdir26, readFile as readFile34, readdir as readdir9, realpath, stat as stat9, writeFile as writeFile24 } from "node:fs/promises";
 import { existsSync as existsSync52 } from "node:fs";
-import { createHash as createHash19, randomUUID as randomUUID42 } from "node:crypto";
+import { createHash as createHash19, randomUUID as randomUUID43 } from "node:crypto";
 import { tmpdir as tmpdir6 } from "node:os";
 import { extname as extname3, isAbsolute as isAbsolute13, join as join64, relative as relative11, resolve as resolve33, sep as sep9 } from "node:path";
 import { Type as Type2 } from "@earendil-works/pi-ai";
@@ -170276,7 +170403,7 @@ function createTaskCreateTool(store, provenance, options) {
               toType: "user",
               type: "agent-to-user",
               content: `Task proposal awaiting validation: ${title}`,
-              metadata: { kind: "task-proposal", proposalStatus: "pending", proposalIdempotencyKey: randomUUID42(), taskId: options.sourceTaskId, proposedTask: { title, description: params.description, priority: params.priority, workflowId: params.workflow_id, dependencies: params.dependencies } }
+              metadata: { kind: "task-proposal", proposalStatus: "pending", proposalIdempotencyKey: randomUUID43(), taskId: options.sourceTaskId, proposedTask: { title, description: params.description, priority: params.priority, workflowId: params.workflow_id, dependencies: params.dependencies } }
             });
             return { content: [{ type: "text", text: "Task proposal submitted to the operator for validation; no task was created." }], details: { proposed: true } };
           }
@@ -192043,10 +192170,21 @@ var Scheduler = class {
           const unmetDeps = getUnmetSchedulingDependencies(task, tasks2, schedulingDependencyOptions);
           if (unmetDeps.length > 0) {
             const normalizedUnmetDeps = [...new Set(unmetDeps)].sort();
+            let activeOverlapBlockedBy = null;
+            if (activeScopes.size > 0) {
+              try {
+                const taskScope = await getFilteredFileScope(task.id);
+                if (taskScope.length > 0 && !isCoordinationOnlyTask(task, taskScope)) {
+                  activeOverlapBlockedBy = Array.from(activeScopes.entries()).sort(([aId], [bId]) => aId.localeCompare(bId)).find(([, activeScope]) => this.pathsOverlap(taskScope, activeScope))?.[0] ?? null;
+                }
+              } catch (error2) {
+                schedulerLog.warn(`Failed to refresh file-scope overlap blocker for dependency-blocked task ${task.id}`, error2);
+              }
+            }
             await this.transitionQueuedEpisode(task, {
               signature: `dependency:${normalizedUnmetDeps.join(",")}`,
               blockedBy: unmetDeps[0] ?? null,
-              overlapBlockedBy: task.overlapBlockedBy ?? null,
+              overlapBlockedBy: activeOverlapBlockedBy,
               action: `queued \u2014 unmet dependencies: ${unmetDeps.join(", ")}`
             });
             this.options.onBlocked?.(task, unmetDeps);
@@ -194569,6 +194707,7 @@ var SESSION_CONTENTION_HOLD_VALUE = "session-contention-hold";
 var WORKFLOW_INTERRUPTED_NODE_ID_CONTEXT_KEY = "workflow:interruptedNodeId";
 var WORKFLOW_INTERRUPTED_NODE_ABORT_KIND_CONTEXT_KEY = "workflow:interruptedNodeAbortKind";
 var WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY = "workflow:optionalGroupActive";
+var WORKFLOW_REVIEW_KIND_CONTEXT_KEY = "workflow:reviewKind";
 var WORKFLOW_NODE_ENGINE_PAUSE_ABORT_KIND = "engine-pause";
 var WORKFLOW_DRIFT_PARK_CONTEXT_KEY = "workflow:driftPark";
 var WorkflowGraphSuspended = class extends Error {
@@ -194672,7 +194811,8 @@ var WorkflowGraphExecutor = class {
         parseSteps: deps.parseStepsDeps,
         runCode: deps.runCode,
         notifyDispatch: deps.notifyDispatch,
-        prNodes: deps.prNodes
+        prNodes: deps.prNodes,
+        isLiveSharedBranchMember: deps.isLiveSharedBranchMember
       }),
       ...deps.runnerRegistry?.toHandlers() ?? {},
       ...deps.handlers ?? {}
@@ -194893,6 +195033,7 @@ var WorkflowGraphExecutor = class {
           phase: stepPhase,
           status: "pending",
           source: "optional-group",
+          ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
           startedAt: stepStartedAt,
           // U3/KTD-4: stamp the lease owner so a concurrent/crashed re-entry
           // adopts this pending gate instead of dispatching a second reviewer.
@@ -194912,7 +195053,8 @@ var WorkflowGraphExecutor = class {
           runTemplateNode: (tNode, sig, contextOverride) => {
             const optionalGroupContext = {
               ...contextOverride ?? context,
-              [WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY]: node.id
+              [WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY]: node.id,
+              ...this.workflowReviewKind(node) ? { [WORKFLOW_REVIEW_KIND_CONTEXT_KEY]: this.workflowReviewKind(node) } : {}
             };
             return this.executeNodeWithRetries(tNode, task, settings, optionalGroupContext, ir2, sig, false);
           },
@@ -194930,6 +195072,7 @@ var WorkflowGraphExecutor = class {
         const exitContextPatch = exitResult?.contextPatch;
         let stepOutput = typeof exitContextPatch?.output === "string" ? exitContextPatch.output : void 0;
         const stepNotes = typeof exitContextPatch?.notes === "string" ? exitContextPatch.notes : void 0;
+        const stepFindings = this.workflowReviewKind(node) && Array.isArray(exitContextPatch?.findings) ? exitContextPatch.findings : void 0;
         if (stepStatus === "failed" && !verdict && stepOutput === void 0 && stepNotes === void 0) {
           const lastVisited = groupResult.visitedNodeIds[groupResult.visitedNodeIds.length - 1];
           const templateNodeId = lastVisited?.includes("::") ? lastVisited.slice(lastVisited.indexOf("::") + 2) : void 0;
@@ -194947,9 +195090,11 @@ var WorkflowGraphExecutor = class {
           phase: stepPhase,
           source: "optional-group",
           status: stepStatus,
+          ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
           ...verdict ? { verdict } : {},
           ...stepOutput !== void 0 ? { output: stepOutput } : {},
           ...stepNotes !== void 0 ? { notes: stepNotes } : {},
+          ...stepFindings?.length ? { findings: stepFindings } : {},
           startedAt: stepStartedAt,
           completedAt: (/* @__PURE__ */ new Date()).toISOString()
         });
@@ -195409,9 +195554,15 @@ var WorkflowGraphExecutor = class {
     }
     return failureResult;
   }
+  /** FNXC:WorkflowReviewKind 2026-08-05-02:31: Persist only the declared closed
+   * marker; execution never derives review semantics from a label, verdict, or gate mode. */
+  workflowReviewKind(node) {
+    return node.config?.reviewKind === "plan" || node.config?.reviewKind === "code" ? node.config.reviewKind : void 0;
+  }
   shouldRecordNodeProgress(node) {
     const skillName = typeof node.config?.skillName === "string" ? node.config.skillName.trim() : "";
-    return skillName.length > 0 && (node.kind === "prompt" || node.kind === "gate");
+    const markedReview = this.workflowReviewKind(node) !== void 0;
+    return markedReview && (node.kind === "prompt" || node.kind === "gate" || node.kind === "script") || skillName.length > 0 && (node.kind === "prompt" || node.kind === "gate");
   }
   workflowNodeProgressName(node) {
     const configuredName = typeof node.config?.name === "string" ? node.config.name.trim() : "";
@@ -195425,6 +195576,7 @@ var WorkflowGraphExecutor = class {
       phase: node.config?.phase === "post-merge" ? "post-merge" : "pre-merge",
       source: "node",
       status: "pending",
+      ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
       startedAt
     };
     await this.recordOptionalGroupStepResult(taskId, result);
@@ -195435,6 +195587,7 @@ var WorkflowGraphExecutor = class {
     const contextPatch = nodeResult.contextPatch ?? {};
     let output = typeof contextPatch.output === "string" ? contextPatch.output : void 0;
     const notes = typeof contextPatch.notes === "string" ? contextPatch.notes : void 0;
+    const findings = this.workflowReviewKind(node) && Array.isArray(contextPatch.findings) ? contextPatch.findings : void 0;
     if (status === "failed" && output === void 0 && notes === void 0) {
       output = this.synthesizeNonVerdictFailureOutput({
         stepLabel: this.workflowNodeProgressName(node),
@@ -195449,8 +195602,10 @@ var WorkflowGraphExecutor = class {
       phase: started?.phase ?? (node.config?.phase === "post-merge" ? "post-merge" : "pre-merge"),
       source: "node",
       status,
+      ...this.workflowReviewKind(node) ? { reviewKind: this.workflowReviewKind(node) } : {},
       ...output !== void 0 ? { output } : {},
       ...notes !== void 0 ? { notes } : {},
+      ...findings?.length ? { findings } : {},
       startedAt: started?.startedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
       completedAt: (/* @__PURE__ */ new Date()).toISOString()
     });
@@ -195900,6 +196055,10 @@ var WorkflowGraphTaskRunner = class {
         runCode: this.deps.runCode,
         notifyDispatch: this.deps.notifyDispatch,
         prNodes: this.deps.prNodes,
+        // FNXC:SharedBranchMemberHold 2026-08-06-00:24: carry the executor's
+        // live group resolver into the graph merge gate; omitting it turns
+        // mission-policy members into manual holds before integration.
+        isLiveSharedBranchMember: this.deps.isLiveSharedBranchMember,
         /*
         FNXC:WorkflowResume 2026-06-29-08:49:
         Production graph runs must fetch live task steps during foreach replay. The runner is the workflow boundary that has store access, so it supplies the fresh projection seam instead of making executor self-healing guess after a stale step node fails.
@@ -207306,16 +207465,29 @@ var SelfHealingManager = class _SelfHealingManager extends SelfHealingGitEvidenc
       activeWork: await this.resolveActiveWorkColumnsFor(taskId, cache)
     };
   }
-  classifyPausedAbortWorkflowRecovery(task, settings, isExecuting, columns) {
+  /*
+  FNXC:SharedBranchMemberHold 2026-08-05-23:35:
+  Pause-abort recovery must resolve the same live intermediate-group predicate as
+  merge admission. Shared metadata alone is stale after group closure or a
+  default-branch collision, so it cannot suppress that task's standalone hold.
+  */
+  async isLiveSharedMemberIntegration(task, settings) {
+    const groupId = task.branchContext?.groupId?.trim();
+    const group = groupId ? await this.store.getBranchGroup?.(groupId) : null;
+    const defaultBranch = await resolveIntegrationBranch(this.options.rootDir, settings);
+    return isLiveSharedBranchGroupMemberIntegration(task, group, defaultBranch);
+  }
+  async classifyPausedAbortWorkflowRecovery(task, settings, isExecuting, columns) {
     const isPausedAbortPark = task.status === "failed" && typeof task.error === "string" && task.error.includes(PAUSE_ABORT_PARK_OPERATOR_MARKER) && task.error.includes(PAUSE_ABORT_PARK_ERROR_MARKER);
     if (!isPausedAbortPark) return { kind: "no-action", reason: "not-pause-abort" };
     if (task.paused || task.userPaused || isExecuting) return { kind: "no-action", reason: "unsafe-or-not-routable" };
     const errorText = typeof task.error === "string" ? task.error.toLowerCase() : "";
     const isTerminalMergePark = errorText.includes("conflict") || errorText.includes("contamination") || errorText.includes("foreign") || errorText.includes("retry-exhausted") || errorText.includes("retries exhausted") || errorText.includes("max retries");
     const completedSteps = task.steps.length > 0 && task.steps.every((step) => step.status === "done" || step.status === "skipped");
-    const sharedBranchMember = isSharedBranchGroupMemberIntegration(task);
-    const hasReviewProgress = columns.review.has(task.column) && allowsAutoMergeProcessing(task, settings) && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
-    const hasManualMergeHoldProgress = columns.review.has(task.column) && (!allowsAutoMergeProcessing(task, settings) || resolveEffectiveAutoMerge(task, settings) === false) && !sharedBranchMember && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
+    const liveSharedBranchMember = await this.isLiveSharedMemberIntegration(task, settings);
+    const autoMergeProcessing = allowsAutoMergeProcessing(task, settings) || liveSharedBranchMember;
+    const hasReviewProgress = columns.review.has(task.column) && autoMergeProcessing && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
+    const hasManualMergeHoldProgress = columns.review.has(task.column) && (hasUserAutoMergeHold(task) || !allowsAutoMergeProcessing(task, settings) || resolveEffectiveAutoMerge(task, settings) === false) && (!liveSharedBranchMember || hasUserAutoMergeHold(task)) && task.mergeDetails?.mergeConfirmed !== true && !isTerminalMergePark && completedSteps;
     if (hasManualMergeHoldProgress) {
       return { kind: "work-item-resume", reason: "pause-abort-manual-merge-hold" };
     }
@@ -212983,8 +213155,23 @@ var SelfHealingManager = class _SelfHealingManager extends SelfHealingGitEvidenc
         return own.length > 0 ? new Set(own) : /* @__PURE__ */ new Set(["in-review"]);
       };
       const executingIds = this.options.getExecutingTaskIds?.() ?? /* @__PURE__ */ new Set();
+      const canRecoverMergeableReviewTask = async (task) => {
+        if (hasUserAutoMergeHold(task)) return false;
+        const groupId = task.branchContext?.groupId?.trim();
+        const branchGroup = groupId ? await this.store.getBranchGroup(groupId) : null;
+        const projectDefaultBranch = await resolveIntegrationBranch(this.options.rootDir, settings);
+        if (isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch)) {
+          return true;
+        }
+        return allowsAutoMergeProcessing(task, settings) && resolveEffectiveAutoMerge(task, settings) !== false;
+      };
+      const mergeAdmission = await Promise.all(tasks2.map(async (task) => [
+        task.id,
+        await canRecoverMergeableReviewTask(task)
+      ]));
+      const mergeAdmissionByTaskId = new Map(mergeAdmission);
       const mergeable = tasks2.filter(
-        (t) => allowsAutoMergeProcessing(t, settings) && !t.paused && !executingIds.has(t.id) && t.status !== "failed" && // Exclude transient merge statuses. Active merges should be left alone;
+        (t) => mergeAdmissionByTaskId.get(t.id) === true && !t.paused && !executingIds.has(t.id) && t.status !== "failed" && // Exclude transient merge statuses. Active merges should be left alone;
         // stale ones are handled by recoverStaleMergingStatus().
         t.status !== "merging" && t.status !== "merging-pr" && // FNXC:Workspace 2026-06-22-09:30 (Phase D U1, KTD1 — admit workspace tasks):
         // A workspace task has task.worktree===null (its worktrees live per-repo in
@@ -216031,7 +216218,7 @@ var SelfHealingManager = class _SelfHealingManager extends SelfHealingGitEvidenc
       for (const t of tasks2) {
         if (!this.isPauseAbortParkCandidate(t)) continue;
         const columns = await this.resolvePauseAbortColumnsFor(t.id, columnCache);
-        if (this.classifyPausedAbortWorkflowRecovery(t, settings, executingIds.has(t.id), columns).kind !== "no-action") {
+        if ((await this.classifyPausedAbortWorkflowRecovery(t, settings, executingIds.has(t.id), columns)).kind !== "no-action") {
           parked.push(t);
         }
       }
@@ -216048,7 +216235,7 @@ var SelfHealingManager = class _SelfHealingManager extends SelfHealingGitEvidenc
             continue;
           }
           const freshColumns = await this.resolvePauseAbortColumnsFor(fresh.id, columnCache);
-          const route = this.classifyPausedAbortWorkflowRecovery(fresh, settings, latestExecutingIds.has(fresh.id), freshColumns);
+          const route = await this.classifyPausedAbortWorkflowRecovery(fresh, settings, latestExecutingIds.has(fresh.id), freshColumns);
           if (route.kind === "no-action") {
             continue;
           }
@@ -219935,9 +220122,11 @@ function parseWorkflowStepVerdict(rawOutput) {
         verdict = "REVISE";
       }
       if (!verdict) continue;
+      const findings = normalizeWorkflowReviewFindings(parsed.findings);
       return {
         verdict,
-        notes: typeof parsed.notes === "string" ? parsed.notes : ""
+        notes: typeof parsed.notes === "string" ? parsed.notes : "",
+        ...findings ? { findings } : {}
       };
     } catch {
     }
@@ -219969,7 +220158,8 @@ function parseWorkflowStepOutput(rawOutput, options = {}) {
     return {
       output: parsed.notes || "",
       verdict: parsed.verdict,
-      notes: parsed.notes
+      notes: parsed.notes,
+      ...parsed.findings ? { findings: parsed.findings } : {}
     };
   }
   const inferred = inferWorkflowStepVerdictFromProse(trimmed);
@@ -222770,6 +222960,7 @@ ${feedback}`,
     if (info.phase !== "pre-merge") return false;
     if (info.status !== "advisory_failure" && info.status !== "failed") return false;
     const liveTask = await this.store.getTask(taskId).catch(() => fallbackTask);
+    if (hasUserAutoMergeHold(liveTask)) return false;
     const missingArtifactKeys = parseRequiredArtifactMissingValue(info.failureValue);
     if (missingArtifactKeys) {
       await this.recoverMissingRequiredArtifacts(liveTask, missingArtifactKeys, {
@@ -223026,6 +223217,7 @@ ${info.feedback}`, revisionKey),
    */
   async recoverFailedPreMergeWorkflowStep(task) {
     try {
+      if (hasUserAutoMergeHold(task)) return false;
       const failed = (task.workflowStepResults ?? []).filter((r) => (r.phase || "pre-merge") === "pre-merge" && r.status === "failed").sort((a, b3) => {
         const aTs = Date.parse(a.completedAt || a.startedAt || "");
         const bTs = Date.parse(b3.completedAt || b3.startedAt || "");
@@ -223552,6 +223744,7 @@ ${info.feedback}`, revisionKey),
           getTask: (taskId) => this.store.getTask(taskId)
         },
         runId: resolvedRunId,
+        isLiveSharedBranchMember: (nodeTask) => this.isLiveSharedBranchGroupMember(nodeTask),
         primitives: this.createAuthoritativeWorkflowPrimitives(settings),
         seams: this.createAuthoritativeWorkflowSeams(settings),
         prepareNodeExecution: (node, nodeTask, requirement) => this.prepareGraphNodeExecution(node, nodeTask, settings, requirement),
@@ -225794,6 +225987,7 @@ ${info.feedback}`, revisionKey),
       return this.runCliAgentNode(node, await this.store.getTask(live.id), cfg);
     }
     const optionalGroupId = typeof graphContext?.[WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY] === "string" ? graphContext[WORKFLOW_OPTIONAL_GROUP_CONTEXT_KEY] : void 0;
+    const declaredReviewKind = cfg.reviewKind === "plan" || cfg.reviewKind === "code" ? cfg.reviewKind : graphContext?.[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] === "plan" || graphContext?.[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] === "code" ? graphContext[WORKFLOW_REVIEW_KIND_CONTEXT_KEY] : void 0;
     const isCompletionSummaryNode2 = cfg.summaryTarget === "task" || node.id === "completion-summary";
     if (live.executionMode === "fast" && !isCompletionSummaryNode2 && !optionalGroupId && !cfg.seam && (node.kind === "prompt" || node.kind === "script" || node.kind === "gate")) {
       executorLog.debug(`${live.id}: fast mode \u2014 skipping custom graph node '${node.id}'`);
@@ -225942,6 +226136,9 @@ ${prompt}`;
     if (optionalGroupId) {
       step.optionalGroupId = optionalGroupId;
     }
+    if (declaredReviewKind) {
+      step.reviewKind = declaredReviewKind;
+    }
     if (cfg.reviewCanFixInline === true) {
       step.reviewCanFixInline = true;
     }
@@ -225954,7 +226151,11 @@ ${prompt}`;
       executorLog.debug(`${live.id}: graph node '${node.id}' runtime env injected (${injected.pathEntryCount} PATH entries, ${injected.injectedKeyCount} env keys)`);
     }
     const unattended = this.graphUnattendedRuns.has(live.id);
-    const outcome = mode === "script" ? await this.executeScriptWorkflowStep(live, step, worktreePath, settings, nodeEnv) : await this.executeWorkflowStep(live, step, worktreePath, settings, nodeEnv, { unattended });
+    let outcome = mode === "script" ? await this.executeScriptWorkflowStep(live, step, worktreePath, settings, nodeEnv) : await this.executeWorkflowStep(live, step, worktreePath, settings, nodeEnv, { unattended });
+    if (declaredReviewKind && typeof outcome.output === "string") {
+      const parsedReviewOutput = parseWorkflowStepOutput(outcome.output, { requireVerdict: false });
+      if (parsedReviewOutput.findings?.length) outcome = { ...outcome, findings: parsedReviewOutput.findings };
+    }
     const awaitQuestion = parseAwaitInputSentinel(outcome.output);
     if (awaitQuestion) {
       await this.store.logEntry(
@@ -225977,6 +226178,8 @@ ${prompt}`;
     const contextPatch = {};
     if (typeof stepOutput === "string") contextPatch.output = stepOutput;
     if (typeof stepNotes === "string" && stepNotes) contextPatch.notes = stepNotes;
+    const stepFindings = outcome.findings;
+    if (stepFindings?.length) contextPatch.findings = stepFindings;
     if (cfg.summaryTarget === "task" && typeof stepOutput === "string" && stepOutput.trim()) {
       contextPatch.summary = stepOutput.trim();
     }
@@ -226483,6 +226686,7 @@ Graph value: ${failureValue}` : ""}`, budget.key),
     } catch {
       return false;
     }
+    if (hasUserAutoMergeHold(live)) return false;
     const sharedBranchMember = await this.isLiveSharedBranchGroupMember(live);
     if (!sharedBranchMember && !allowsAutoMergeProcessing(live, settings)) return false;
     if (!sharedBranchMember && resolveEffectiveAutoMerge(live, settings) === false) return false;
@@ -226544,8 +226748,8 @@ Graph value: ${failureValue}` : ""}`, budget.key),
     } catch {
       return false;
     }
-    if (await this.isLiveSharedBranchGroupMember(live)) return false;
-    return !allowsAutoMergeProcessing(live, settings) || resolveEffectiveAutoMerge(live, settings) === false;
+    if (await this.isLiveSharedBranchGroupMember(live) && !hasUserAutoMergeHold(live)) return false;
+    return hasUserAutoMergeHold(live) || !allowsAutoMergeProcessing(live, settings) || resolveEffectiveAutoMerge(live, settings) === false;
   }
   async handleStaleInReviewPlanPauseAbortReplay(live, result, abortProvenance, pausedAborted, userCanceled, resumeLanesMemo) {
     if (!pausedAborted) return false;
@@ -226709,9 +226913,9 @@ Graph value: ${failureValue}` : ""}`, budget.key),
       if (settings.globalPause === true) return false;
     }
     if (live.column === resumeLanes.review) {
-      if (live.autoMerge === false) return false;
       if (!settings) return false;
       const sharedBranchMember = await this.isLiveSharedBranchGroupMember(live);
+      if (hasUserAutoMergeHold(live) || live.autoMerge === false && !sharedBranchMember) return false;
       if (!sharedBranchMember && !allowsAutoMergeProcessing(live, settings)) return false;
       if (live.mergeDetails?.mergeConfirmed === true) return false;
     }
@@ -232479,13 +232683,14 @@ CRITICAL SCOPING RULES \u2014 read before doing anything else:
     const isSkillStep = typeof workflowStep.skillName === "string" && workflowStep.skillName.trim().length > 0;
     const isSummaryProjectionStep = workflowStep.summaryTarget === "task";
     const requireVerdict = !isSummaryProjectionStep && (workflowStep.gateMode === "gate" || !isSkillStep);
+    const reviewFindingsContract = workflowStepMetadata.reviewKind === "plan" || workflowStepMetadata.reviewKind === "code";
     const verdictBlock = requireVerdict ? `
 
 ## Feedback Format
 
 When your review is complete, your final line MUST be a single JSON object (no markdown fences):
 
-{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"..."}
+${reviewFindingsContract ? '{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"...","findings":[{"id":"stable-id","title":"concise issue","body":"actionable detail","filePath":"optional/path","line":1,"severity":"low|medium|high|critical"}]}' : '{"verdict":"APPROVE|APPROVE_WITH_NOTES|REVISE","notes":"..."}'}
 
 Rules:
 - Output exactly one trailing JSON object and stop.
@@ -232795,7 +233000,8 @@ ${detectedQuestion}
             revisionRequested,
             output: parsed.output,
             verdict: parsed.verdict,
-            notes: parsed.notes
+            notes: parsed.notes,
+            ...parsed.findings ? { findings: parsed.findings } : {}
           };
         }
         if (parsed.malformed) {
@@ -247766,6 +247972,7 @@ var InProcessRuntime = class extends EventEmitter27 {
         }
       }
       const prNodeGithubOps = this.config.prNodeGithubOps;
+      const secretsStore = await this.taskStore.getSecretsStore();
       const executorOptions = {
         /*
         FNXC:PlanReviewLease 2026-07-26-21:12:
@@ -247781,6 +247988,7 @@ var InProcessRuntime = class extends EventEmitter27 {
         cliAgentRuntime: this.cliAgentRuntime?.bundle,
         pluginRunner: this.pluginRunner,
         messageStore: this.messageStore,
+        secretsStore,
         missionStore,
         reflectionService,
         // PR-entity nodes (U3): assemble the handler deps from the CLI-injected
@@ -247882,6 +248090,7 @@ var InProcessRuntime = class extends EventEmitter27 {
           reflectionService,
           selfImproveService,
           credentialRotator: this.credentialRotator,
+          secretsStore,
           snapshotManager: autoClaimSnapshotManager,
           onMissed: (agentId, reason) => {
             runtimeLog.warn(`Agent ${agentId} missed heartbeat: ${reason}`);
@@ -254921,7 +255130,21 @@ var ProjectEngine = class _ProjectEngine {
   Cleared on the first non-busy outcome (success path resets it).
   */
   workspaceBusyReenqueues = /* @__PURE__ */ new Map();
+  workspaceBusyReenqueueTimers = /* @__PURE__ */ new Set();
   static WORKSPACE_BUSY_MAX_REENQUEUES = 10;
+  /*
+  FNXC:WorkspaceMergeDispatch 2026-08-05-23:56:
+  Workspace lease-contention retries are engine-owned lifecycle work, not detached callbacks.
+  Track only these busy re-enqueue timers so stop() can cancel them and tests can measure the
+  capped workspace ladder without confusing it with merge-body or maintenance timers.
+  */
+  scheduleWorkspaceBusyReenqueue(taskId, delayMs) {
+    const timer2 = setTimeout(() => {
+      this.workspaceBusyReenqueueTimers.delete(timer2);
+      if (!this.shuttingDown) this.internalEnqueueMerge(taskId);
+    }, delayMs);
+    this.workspaceBusyReenqueueTimers.add(timer2);
+  }
   /**
    * Pending manual merge resolvers — keyed by taskId.
    * When `onMerge` is called, the task is enqueued like auto-merge but a
@@ -254982,7 +255205,7 @@ var ProjectEngine = class _ProjectEngine {
    *
    *  Readable (not private) so tests derive the cap from this single source of truth rather
    *  than hardcoding it — the FN-8004 bump broke two suites that had baked in the old `3`. */
-  static MAX_AUTO_MERGE_TRANSIENT_RETRIES = 5;
+  static MAX_AUTO_MERGE_TRANSIENT_RETRIES = MAX_AUTO_MERGE_TRANSIENT_RETRIES;
   static MERGE_REQUEST_RETRY_EXHAUSTED_AGE_MS = 30 * 60 * 1e3;
   /** Cap on outer in-review→in-progress bounces caused by deterministic
    *  verification failures during auto-merge. After this many failed merges
@@ -255456,6 +255679,10 @@ ${detail}`);
       clearInterval(this.mergeActiveReconcileTimer);
       this.mergeActiveReconcileTimer = null;
     }
+    for (const timer2 of this.workspaceBusyReenqueueTimers) {
+      clearTimeout(timer2);
+    }
+    this.workspaceBusyReenqueueTimers.clear();
     for (const [taskId, deferred] of this.capacityDeferredMerges) {
       clearTimeout(deferred.timer);
       for (const resolver of deferred.resolvers) {
@@ -256755,16 +256982,15 @@ ${detail}`);
    * older low-priority task would start before a later urgent one.
    */
   async allowInReviewMergeProcessing(task, settings, store = this.runtime.getTaskStore()) {
-    if (allowsAutoMergeProcessing(task, settings)) {
-      return true;
-    }
+    if (hasUserAutoMergeHold(task)) return false;
     const groupId = task.branchContext?.groupId?.trim();
     const branchGroup = groupId ? await store.getBranchGroup?.(groupId) : null;
-    if (!branchGroup || branchGroup.status !== "open" || !branchGroup.branchName.trim()) {
-      return false;
-    }
     const projectDefaultBranch = await resolveIntegrationBranch(this.config.workingDirectory, settings);
-    return isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch);
+    if (isLiveSharedBranchGroupMemberIntegration(task, branchGroup, projectDefaultBranch)) {
+      return true;
+    }
+    if (task.autoMerge === false && groupId) return false;
+    return allowsAutoMergeProcessing(task, settings);
   }
   async emitLegacyAutoMergeStampAdvisory(store) {
     if (this.legacyAutoMergeStampAdvisoryEmitted) {
@@ -257717,9 +257943,7 @@ ${detail}`);
               runtimeLog.log(
                 `Workspace land busy re-enqueue ${busyCount + 1}/${_ProjectEngine.WORKSPACE_BUSY_MAX_REENQUEUES} for ${taskId} in ${delayMs / 1e3}s (no mergeRetry consumed \u2014 pure lease contention)`
               );
-              setTimeout(() => {
-                if (!this.shuttingDown) this.internalEnqueueMerge(taskId);
-              }, delayMs);
+              this.scheduleWorkspaceBusyReenqueue(taskId, delayMs);
             } else {
               this.workspaceBusyReenqueues.delete(taskId);
               await store.updateTask(taskId, { status: "failed", error: errorMsg }).catch(() => void 0);