@runfusion/fusion 0.76.0-beta.1 → 0.76.0-beta.3

package/dist/bin.js

@@ -2184,6 +2184,8 @@ var init_settings_schema = __esm({
     DEFAULT_PROJECT_SETTINGS = {
       // FNXC:TaskRecommendations 2026-08-08-05:02: completion follows-ups stay bounded by default; 0 disables writing them.
       maxRecommendationsPerTask: 3,
+      // FNXC:TaskRecommendations 2026-08-13-03:56: surface completed-task proposals by default; operators can suppress the notice without suppressing capture.
+      recommendationMailboxNoticeEnabled: true,
       globalPause: false,
       globalPauseReason: void 0,
       defaultWorkflowId: void 0,
@@ -21756,9 +21758,14 @@ var init_project = __esm({
       // now keyed per-project on `project_id` (the effective PK). `id` is retained
       // for column-shape parity (always 1) but is no longer the PK and no longer
       // CHECK-constrained. Single-project / SQLite-parity callers leave project_id
-      // at its '' default (one row), preserving the pre-isolation behavior.
+      // through the database ownership trigger, preserving the pre-isolation behavior.
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 owns config's project_id default and leaves its catalog PK as (project_id).
+      Drizzle emits DEFAULT while the database GUC/trigger selects the effective ownership partition.
+      */
       id: integer("id").default(1),
-      projectId: text("project_id").notNull().default("").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`).primaryKey(),
       nextId: integer("next_id").default(1),
       nextWorkflowStepId: integer("next_workflow_step_id").default(1),
       // FNXC:SqliteFinalRemoval 2026-06-28:
@@ -22152,9 +22159,13 @@ var init_project = __esm({
     automations = projectSchema.table("automations", {
       /*
        * FNXC:AutomationIsolation 2026-07-13-22:37:
-       * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row. The empty default preserves an explicit partition for legacy and project-agnostic callers until startup stamps migrated rows.
+       * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row.
+       *
+       * FNXC:MultiProjectIsolation 2026-08-12-15:43:
+       * Migration 0006 owns the default through the database GUC/trigger; Drizzle emits DEFAULT
+       * without replacing the physical legacy fallback or the fail-closed bound writer contract.
        */
-      projectId: text("project_id").notNull().default(""),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       id: text("id").notNull(),
       name: text("name").notNull(),
       description: text("description"),
@@ -22453,7 +22464,8 @@ var init_project = __esm({
       index("idxTaskDocumentsTaskId").on(t.taskId)
     ]);
     artifacts = projectSchema.table("artifacts", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       type: text("type").notNull(),
       title: text("title").notNull(),
       description: text("description"),
@@ -22468,7 +22480,8 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
-      foreignKey({ columns: [t.taskId], foreignColumns: [tasks.id] }).onDelete("cascade"),
+      primaryKey({ columns: [t.projectId, t.id] }),
+      foreignKey({ name: "artifacts_task_id_fkey", columns: [t.projectId, t.taskId], foreignColumns: [tasks.projectId, tasks.id] }).onDelete("cascade"),
       index("idxArtifactsTaskId").on(t.taskId),
       index("idxArtifactsAuthorId").on(t.authorId),
       index("idxArtifactsType").on(t.type),
@@ -22658,7 +22671,8 @@ var init_project = __esm({
       index("idxEvalRunEventsRunIdSeq").on(t.runId, t.seq)
     ]);
     secrets = projectSchema.table("secrets", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       key: text("key").notNull(),
       valueCiphertext: bytea("value_ciphertext").notNull(),
       nonce: bytea("nonce").notNull(),
@@ -22671,7 +22685,8 @@ var init_project = __esm({
       lastReadAt: text("last_read_at"),
       lastReadBy: text("last_read_by")
     }, (t) => [
-      unique("secrets_key_unique").on(t.key),
+      primaryKey({ columns: [t.projectId, t.id] }),
+      unique("secrets_key_unique").on(t.projectId, t.key),
       check("secrets_access_policy_check", sql`${t.accessPolicy} IN ('auto', 'prompt', 'deny')`),
       check("secrets_env_exportable_check", sql`${t.envExportable} IN (0, 1)`)
     ]);
@@ -22713,10 +22728,11 @@ var init_project = __esm({
       updatedAt: text("updated_at").notNull()
     }, (t) => [primaryKey({ columns: [t.projectId, t.id] })]);
     branchGroups = projectSchema.table("branch_groups", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       sourceType: text("source_type").notNull(),
       sourceId: text("source_id").notNull(),
-      branchName: text("branch_name").notNull().unique(),
+      branchName: text("branch_name").notNull(),
       worktreePath: text("worktree_path"),
       autoMerge: integer("auto_merge").notNull().default(0),
       prState: text("pr_state").notNull().default("none"),
@@ -22732,6 +22748,8 @@ var init_project = __esm({
       updatedAt: bigint("updated_at", { mode: "number" }).notNull(),
       closedAt: bigint("closed_at", { mode: "number" })
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
+      unique("branch_groups_branch_name_key").on(t.projectId, t.branchName),
       check("branch_groups_source_type_check", sql`${t.sourceType} IN ('mission','planning','new-task')`),
       check("branch_groups_pr_state_check", sql`${t.prState} IN ('none','open','merged','closed')`),
       check("branch_groups_status_check", sql`${t.status} IN ('open','finalized','abandoned')`),
@@ -23133,12 +23151,14 @@ var init_project = __esm({
       index("idxUsageEventsKindTs").on(t.kind, t.ts)
     ]);
     pluginActivations = projectSchema.table("plugin_activations", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
       pluginId: text("plugin_id").notNull(),
       source: text("source").notNull(),
       pluginVersion: text("plugin_version"),
       activatedAt: text("activated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxPluginActivationsActivatedAt").on(t.activatedAt),
       index("idxPluginActivationsPluginId").on(t.pluginId)
     ]);
@@ -23163,8 +23183,13 @@ var init_project = __esm({
       index("idxKnowledgePagesUpdatedAt").on(t.updatedAt)
     ]);
     deployments = projectSchema.table("deployments", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-      projectId: text("project_id").notNull().default(""),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 rebuilt deployments_pkey as (project_id, id). Drizzle emits DEFAULT while the
+      database GUC/trigger keeps ownership stamping and the physical legacy fallback authoritative.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       deploymentId: text("deployment_id").notNull(),
       service: text("service"),
       environment: text("environment"),
@@ -23175,6 +23200,7 @@ var init_project = __esm({
       meta: jsonb("meta"),
       createdAt: text("created_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id], name: "deployments_pkey" }),
       uniqueIndex("idxDeploymentsProjectDeploymentId").on(t.projectId, t.deploymentId),
       index("idxDeploymentsProjectDeployedAt").on(t.projectId, t.deployedAt),
       index("idxDeploymentsDeployedAt").on(t.deployedAt),
@@ -23182,7 +23208,12 @@ var init_project = __esm({
     ]);
     githubCheckStates = projectSchema.table("github_check_states", {
       id: integer("id").generatedAlwaysAsIdentity().notNull(),
-      projectId: text("project_id").notNull().default(""),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0048 post-dated 0006, so FN-9004 reconciles its physical default to the ownership
+      expression. Drizzle emits DEFAULT while the database GUC/trigger remains the stamping authority.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       repo: text("repo").notNull(),
       headSha: text("head_sha").notNull(),
       checkName: text("check_name").notNull(),
@@ -23202,9 +23233,14 @@ var init_project = __esm({
       index("idxGithubCheckStatesProjectReceived").on(t.projectId, t.receivedAt)
     ]);
     incidents = projectSchema.table("incidents", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-      projectId: text("project_id").notNull().default(""),
-      incidentId: text("incident_id").notNull().unique(),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 rebuilt incident keys with project_id first. Drizzle emits DEFAULT while the
+      database GUC/trigger retains ownership stamping and its physical legacy fallback.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      incidentId: text("incident_id").notNull(),
       groupingKey: text("grouping_key").notNull(),
       title: text("title").notNull(),
       severity: text("severity"),
@@ -23218,6 +23254,8 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id], name: "incidents_pkey" }),
+      unique("incidents_incident_id_key").on(t.projectId, t.incidentId),
       index("idxIncidentsProjectOpenedAt").on(t.projectId, t.openedAt),
       index("idxIncidentsProjectStatus").on(t.projectId, t.status),
       index("idxIncidentsGroupingKey").on(t.groupingKey),
@@ -23272,12 +23310,14 @@ var init_project = __esm({
       content: text("content").notNull(),
       type: text("type").notNull(),
       read: integer("read").default(0),
+      archived: integer("archived").default(0),
       metadata: jsonb("metadata"),
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
       primaryKey({ columns: [t.projectId, t.id] }),
       index("idxMessagesTo").on(t.toId, t.toType, t.read),
+      index("idxMessagesToArchived").on(t.toId, t.toType, t.archived),
       index("idxMessagesFrom").on(t.fromId, t.fromType),
       index("idxMessagesCreatedAt").on(t.createdAt)
     ]);
@@ -23378,7 +23418,8 @@ var init_project = __esm({
       index("idx_cli_sessions_project_state").on(t.projectId, t.agentState)
     ]);
     chatMessages = projectSchema.table("chat_messages", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       sessionId: text("session_id").notNull(),
       role: text("role").notNull(),
       content: text("content").notNull(),
@@ -23387,6 +23428,7 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       attachments: jsonb("attachments")
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxChatMessagesSessionId").on(t.sessionId),
       index("idxChatMessagesCreatedAt").on(t.createdAt)
     ]);
@@ -23412,7 +23454,8 @@ var init_project = __esm({
       index("idxChatTokenUsageCreatedAt").on(t.createdAt)
     ]);
     runAuditEvents = projectSchema.table("run_audit_events", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       timestamp: text("timestamp").notNull(),
       taskId: text("task_id"),
       agentId: text("agent_id").notNull(),
@@ -23422,6 +23465,7 @@ var init_project = __esm({
       target: text("target").notNull(),
       metadata: jsonb("metadata")
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxRunAuditEventsRunIdTimestamp").on(t.runId, t.timestamp),
       index("idxRunAuditEventsTaskIdTimestamp").on(t.taskId, t.timestamp),
       index("idxRunAuditEventsTimestamp").on(t.timestamp)
@@ -23522,13 +23566,14 @@ var init_project = __esm({
       index("idxMissionLineageStopsMissionId").on(t.projectId, t.missionId)
     ]);
     verificationCache = projectSchema.table("verification_cache", {
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       treeSha: text("tree_sha").notNull(),
       testCommand: text("test_command").notNull().default(""),
       buildCommand: text("build_command").notNull().default(""),
       recordedAt: text("recorded_at").notNull(),
       taskId: text("task_id")
     }, (t) => [
-      primaryKey({ columns: [t.treeSha, t.testCommand, t.buildCommand] }),
+      primaryKey({ columns: [t.projectId, t.treeSha, t.testCommand, t.buildCommand] }),
       index("idxVerificationCacheRecordedAt").on(t.recordedAt)
     ]);
     importTranslationCache = projectSchema.table("import_translation_cache", {
@@ -23561,7 +23606,8 @@ var init_project = __esm({
       index("idxImportTranslationCacheRecordedAt").on(t.recordedAt)
     ]);
     approvalRequests = projectSchema.table("approval_requests", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       status: text("status").notNull(),
       requesterActorId: text("requester_actor_id").notNull(),
       requesterActorType: text("requester_actor_type").notNull(),
@@ -23580,13 +23626,14 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxApprovalRequestsStatusCreatedAt").on(t.status, t.createdAt),
       index("idxApprovalRequestsRequesterCreatedAt").on(t.requesterActorId, t.createdAt),
       index("idxApprovalRequestsTaskCreatedAt").on(t.taskId, t.createdAt)
     ]);
     approvalRequestAuditEvents = projectSchema.table("approval_request_audit_events", {
-      projectId: text("project_id").notNull().default(""),
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       requestId: text("request_id").notNull(),
       eventType: text("event_type").notNull(),
       actorId: text("actor_id").notNull(),
@@ -23595,6 +23642,7 @@ var init_project = __esm({
       note: text("note"),
       createdAt: text("created_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxApprovalRequestAuditRequestCreatedAt").on(t.requestId, t.createdAt, t.id),
       index("idxApprovalRequestAuditProjectCreatedAt").on(t.projectId, t.createdAt)
     ]);
@@ -27084,6 +27132,27 @@ var init_grok_provider = __esm({
       apiKey: "$GROK_API_KEY",
       api: "openai-completions",
       models: [
+        /*
+        FNXC:ModelRegistry 2026-08-12-20:17:
+        FN-9008 requires Grok 4.6 to be selectable in every model area. Keep it in this shared
+        catalog because pi's registerProvider() replaces provider model lists wholesale, while every
+        Fusion host seeds and re-merges this export. xAI's model docs verify grok-4.6, its 500k-token
+        context window, and configurable reasoning; max output and per-model image input remain
+        upstream-pending-verification, so retain the conservative text-only and 65536-token defaults.
+        Source: https://docs.x.ai/developers/models
+        */
+        {
+          id: "grok-4.6",
+          name: "Grok 4.6",
+          reasoning: true,
+          input: ["text"],
+          cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+          contextWindow: 5e5,
+          maxTokens: 65536,
+          compat: {
+            supportsDeveloperRole: false
+          }
+        },
         {
           id: "grok-4.5",
           name: "Grok 4.5",
@@ -35042,6 +35111,7 @@ function rowToMessage(row) {
     content: row.content,
     type: row.type,
     read: (row.read ?? 0) === 1,
+    archived: (row.archived ?? 0) === 1,
     metadata: row.metadata ?? void 0,
     createdAt: row.createdAt,
     updatedAt: row.updatedAt
@@ -35053,6 +35123,11 @@ function participantIdsForLookup(ownerId, ownerType) {
   }
   return [ownerId];
 }
+function archivedCondition(archived) {
+  if (archived === true) return eq(project_exports.messages.archived, 1);
+  if (archived === false) return or(eq(project_exports.messages.archived, 0), sql`${project_exports.messages.archived} IS NULL`);
+  return or(eq(project_exports.messages.archived, 0), sql`${project_exports.messages.archived} IS NULL`);
+}
 async function sendMessage(handle, message) {
   const sanitizedContent = sanitizeTextValue(message.content);
   const sanitizedMetadata = sanitizeJsonbValue(message.metadata);
@@ -35065,6 +35140,7 @@ async function sendMessage(handle, message) {
     content: sanitizedContent,
     type: message.type,
     read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0,
     metadata: sanitizedMetadata,
     createdAt: message.createdAt,
     updatedAt: message.updatedAt
@@ -35073,7 +35149,8 @@ async function sendMessage(handle, message) {
     ...message,
     content: sanitizedContent,
     metadata: sanitizedMetadata,
-    read: message.read ? 1 : 0
+    read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0
   });
 }
 async function sendMessageOnce(handle, message) {
@@ -35086,6 +35163,7 @@ async function sendMessageOnce(handle, message) {
     content: message.content,
     type: message.type,
     read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0,
     metadata: message.metadata,
     createdAt: message.createdAt,
     updatedAt: message.updatedAt
@@ -35137,6 +35215,7 @@ async function queryMessagesByParticipant(handle, direction, ownerId, ownerType,
   if (filter2?.read !== void 0) {
     conditions.push(eq(project_exports.messages.read, filter2.read ? 1 : 0));
   }
+  conditions.push(archivedCondition(filter2?.archived));
   const limit2 = filter2?.limit ?? 100;
   const offset = filter2?.offset ?? 0;
   const rows = await handle.select(messageColumns).from(project_exports.messages).where(and(...conditions)).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id)).limit(limit2).offset(offset);
@@ -35150,6 +35229,13 @@ async function markMessageAsRead(handle, messageId) {
   await handle.update(project_exports.messages).set({ read: 1, updatedAt: now }).where(eq(project_exports.messages.id, messageId));
   return await getMessage(handle, messageId);
 }
+async function setMessageArchived(handle, id, archived) {
+  const existing = await getMessage(handle, id);
+  if (!existing) return null;
+  if (existing.archived === archived) return existing;
+  const rows = await handle.update(project_exports.messages).set({ archived: archived ? 1 : 0, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.messages.id, id)).returning(messageColumns);
+  return rows[0] ? rowToMessage(rows[0]) : null;
+}
 async function markAllMessagesAsRead(handle, ownerId, ownerType) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const participantIds = participantIdsForLookup(ownerId, ownerType);
@@ -35157,7 +35243,8 @@ async function markAllMessagesAsRead(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   const count2 = countRows[0]?.count ?? 0;
@@ -35165,7 +35252,8 @@ async function markAllMessagesAsRead(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   return count2;
@@ -35187,19 +35275,22 @@ async function getConversation(handle, participantA, participantB, options) {
   const aIds = participantIdsForLookup(participantA.id, participantA.type);
   const bIds = participantIdsForLookup(participantB.id, participantB.type);
   const rows = await handle.select(messageColumns).from(project_exports.messages).where(
-    or(
-      and(
-        inArray(project_exports.messages.fromId, aIds),
-        eq(project_exports.messages.fromType, participantA.type),
-        inArray(project_exports.messages.toId, bIds),
-        eq(project_exports.messages.toType, participantB.type)
+    and(
+      or(
+        and(
+          inArray(project_exports.messages.fromId, aIds),
+          eq(project_exports.messages.fromType, participantA.type),
+          inArray(project_exports.messages.toId, bIds),
+          eq(project_exports.messages.toType, participantB.type)
+        ),
+        and(
+          inArray(project_exports.messages.fromId, bIds),
+          eq(project_exports.messages.fromType, participantB.type),
+          inArray(project_exports.messages.toId, aIds),
+          eq(project_exports.messages.toType, participantA.type)
+        )
       ),
-      and(
-        inArray(project_exports.messages.fromId, bIds),
-        eq(project_exports.messages.fromType, participantB.type),
-        inArray(project_exports.messages.toId, aIds),
-        eq(project_exports.messages.toType, participantA.type)
-      )
+      archivedCondition(options?.archived)
     )
   ).orderBy(desc(project_exports.messages.createdAt)).limit(limit2);
   return rows.reverse().map((row) => rowToMessage(row));
@@ -35210,14 +35301,16 @@ async function getMailbox(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   const unreadCount = unreadRows[0]?.count ?? 0;
   const lastRows = await handle.select(messageColumns).from(project_exports.messages).where(
     and(
       inArray(project_exports.messages.toId, participantIds),
-      eq(project_exports.messages.toType, ownerType)
+      eq(project_exports.messages.toType, ownerType),
+      archivedCondition()
     )
   ).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id)).limit(1);
   return {
@@ -35227,15 +35320,16 @@ async function getMailbox(handle, ownerId, ownerType) {
     lastMessage: lastRows[0] ? rowToMessage(lastRows[0]) : void 0
   };
 }
-async function getAllAgentToAgentMessages(handle) {
-  const rows = await handle.select(messageColumns).from(project_exports.messages).where(eq(project_exports.messages.type, "agent-to-agent")).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id));
+async function getAllAgentToAgentMessages(handle, filter2) {
+  const rows = await handle.select(messageColumns).from(project_exports.messages).where(and(eq(project_exports.messages.type, "agent-to-agent"), archivedCondition(filter2?.archived))).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id));
   return rows.map((row) => rowToMessage(row));
 }
 async function getUnreadAgentToAgentCount(handle) {
   const rows = await handle.select({ count: sql`count(*)::int` }).from(project_exports.messages).where(
     and(
       eq(project_exports.messages.type, "agent-to-agent"),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   return rows[0]?.count ?? 0;
@@ -35257,6 +35351,7 @@ var init_async_message_store = __esm({
       content: project_exports.messages.content,
       type: project_exports.messages.type,
       read: project_exports.messages.read,
+      archived: project_exports.messages.archived,
       metadata: project_exports.messages.metadata,
       createdAt: project_exports.messages.createdAt,
       updatedAt: project_exports.messages.updatedAt
@@ -35442,12 +35537,12 @@ var init_message_store = __esm({
         }
         const sqliteDb = this.db;
         this.stmtInsert = sqliteDb.prepare(`
-      INSERT INTO messages (id, fromId, fromType, toId, toType, content, type, read, metadata, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT INTO messages (id, fromId, fromType, toId, toType, content, type, read, archived, metadata, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         this.stmtInsertOnce = sqliteDb.prepare(`
-      INSERT OR IGNORE INTO messages (id, fromId, fromType, toId, toType, content, type, read, metadata, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT OR IGNORE INTO messages (id, fromId, fromType, toId, toType, content, type, read, archived, metadata, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         this.stmtGetById = sqliteDb.prepare(`
       SELECT * FROM messages WHERE id = ?
@@ -35485,6 +35580,7 @@ var init_message_store = __esm({
           content: row.content,
           type: row.type,
           read: row.read === 1,
+          archived: (row.archived ?? 0) === 1,
           metadata: fromJson(row.metadata),
           createdAt: row.createdAt,
           updatedAt: row.updatedAt
@@ -35518,6 +35614,7 @@ var init_message_store = __esm({
           content: sanitizeTextValue(input.content),
           type: input.type,
           read: false,
+          archived: false,
           metadata: sanitizeJsonbValue(input.metadata),
           createdAt: now,
           updatedAt: now
@@ -35533,6 +35630,7 @@ var init_message_store = __esm({
             content: message.content,
             type: message.type,
             read: message.read,
+            archived: message.archived,
             metadata: message.metadata ?? null,
             createdAt: message.createdAt,
             updatedAt: message.updatedAt
@@ -35547,6 +35645,7 @@ var init_message_store = __esm({
             message.content,
             message.type,
             message.read ? 1 : 0,
+            message.archived ? 1 : 0,
             toJsonNullable(message.metadata),
             message.createdAt,
             message.updatedAt
@@ -35605,6 +35704,7 @@ var init_message_store = __esm({
           content: sanitizeTextValue(input.content),
           type: input.type,
           read: false,
+          archived: false,
           metadata: sanitizeJsonbValue(input.metadata),
           createdAt: now,
           updatedAt: now
@@ -35625,6 +35725,7 @@ var init_message_store = __esm({
             message.content,
             message.type,
             0,
+            0,
             toJsonNullable(message.metadata),
             message.createdAt,
             message.updatedAt
@@ -35756,6 +35857,7 @@ var init_message_store = __esm({
           whereClauses.push("read = ?");
           params.push(filter2.read ? 1 : 0);
         }
+        whereClauses.push(filter2?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)");
         const whereSql = whereClauses.join(" AND ");
         const limit2 = filter2?.limit ?? 100;
         const offset = filter2?.offset ?? 0;
@@ -35806,15 +35908,39 @@ var init_message_store = __esm({
         const participantIds = this.getParticipantIdsForLookup(ownerId, ownerType);
         const toIdPredicate = participantIds.length === 1 ? "toId = ?" : `toId IN (${participantIds.map(() => "?").join(", ")})`;
         const unreadRow = this.db.prepare(`
-      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get(...participantIds, ownerType);
         const count2 = unreadRow?.count ?? 0;
         this.db.prepare(`
-      UPDATE messages SET read = 1, updatedAt = ? WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      UPDATE messages SET read = 1, updatedAt = ? WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).run(now, ...participantIds, ownerType);
         this.db.bumpLastModified();
         return count2;
       }
+      /** Archive a message without destroying its correspondence history. */
+      async archiveMessage(id) {
+        return this.setMessageArchived(id, true);
+      }
+      /** Restore a previously archived message to default mailbox lists. */
+      async unarchiveMessage(id) {
+        return this.setMessageArchived(id, false);
+      }
+      async setMessageArchived(id, archived) {
+        if (this.asyncLayer) {
+          const updated2 = await setMessageArchived(this.asyncLayer.db, id, archived);
+          if (!updated2) throw new Error(`Message ${id} not found`);
+          this.emit(archived ? "message:archived" : "message:unarchived", updated2);
+          return updated2;
+        }
+        const existing = await this.getMessage(id);
+        if (!existing) throw new Error(`Message ${id} not found`);
+        if (existing.archived === archived) return existing;
+        this.db.prepare("UPDATE messages SET archived = ?, updatedAt = ? WHERE id = ?").run(archived ? 1 : 0, (/* @__PURE__ */ new Date()).toISOString(), id);
+        this.db.bumpLastModified();
+        const updated = await this.getMessage(id);
+        this.emit(archived ? "message:archived" : "message:unarchived", updated);
+        return updated;
+      }
       /**
        * Delete a message by ID.
        * @param id - The message ID
@@ -35905,7 +36031,7 @@ var init_message_store = __esm({
         (${participantAFromPredicate} AND fromType = ? AND ${participantBToPredicate} AND toType = ?)
         OR
         (${participantBFromPredicate} AND fromType = ? AND ${participantAToPredicate} AND toType = ?)
-      )
+      ) AND ${options?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)"}
       ORDER BY createdAt DESC
       LIMIT ?
     `).all(
@@ -35940,11 +36066,11 @@ var init_message_store = __esm({
         const participantIds = this.getParticipantIdsForLookup(ownerId, ownerType);
         const toIdPredicate = participantIds.length === 1 ? "toId = ?" : `toId IN (${participantIds.map(() => "?").join(", ")})`;
         const unreadRow = this.db.prepare(`
-      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get(...participantIds, ownerType);
         const unreadCount = unreadRow?.count ?? 0;
         const lastRow = this.db.prepare(`
-      SELECT * FROM messages WHERE ${toIdPredicate} AND toType = ? ORDER BY createdAt DESC, rowid DESC LIMIT 1
+      SELECT * FROM messages WHERE ${toIdPredicate} AND toType = ? AND (archived = 0 OR archived IS NULL) ORDER BY createdAt DESC, rowid DESC LIMIT 1
     `).get(...participantIds, ownerType);
         const lastMessage = lastRow ? this.rowToMessage(lastRow) : void 0;
         return {
@@ -35958,13 +36084,13 @@ var init_message_store = __esm({
        * Get all agent-to-agent messages across all agents.
        * @returns Array of messages (newest first)
        */
-      async getAllAgentToAgentMessages() {
+      async getAllAgentToAgentMessages(filter2) {
         if (this.asyncLayer) {
-          return getAllAgentToAgentMessages(this.asyncLayer.db);
+          return getAllAgentToAgentMessages(this.asyncLayer.db, filter2);
         }
         const rows = this.db.prepare(`
       SELECT * FROM messages
-      WHERE type = ?
+      WHERE type = ? AND ${filter2?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)"}
       ORDER BY createdAt DESC, rowid DESC
     `).all("agent-to-agent");
         return rows.map((row) => this.rowToMessage(row));
@@ -35978,7 +36104,7 @@ var init_message_store = __esm({
         }
         const row = this.db.prepare(`
       SELECT COUNT(*) as count FROM messages
-      WHERE type = ? AND read = 0
+      WHERE type = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get("agent-to-agent");
         return row?.count ?? 0;
       }
@@ -36077,6 +36203,7 @@ async function createApprovalRequest(layer, input) {
   };
   await layer.transactionImmediate(async (tx) => {
     await tx.insert(project_exports.approvalRequests).values({
+      ...layer.projectId?.trim() ? { projectId: layer.projectId } : {},
       id: request3.id,
       status: request3.status,
       requesterActorId: request3.requester.actorId,
@@ -36100,12 +36227,12 @@ async function createApprovalRequest(layer, input) {
   });
   return request3;
 }
-async function getApprovalRequest(handle, id) {
-  const rows = await handle.select().from(project_exports.approvalRequests).where(eq(project_exports.approvalRequests.id, id));
+async function getApprovalRequest(handle, id, projectId2) {
+  const rows = await handle.select().from(project_exports.approvalRequests).where(and(eq(project_exports.approvalRequests.id, id), projectScopeFor(project_exports.approvalRequests.projectId, projectId2)));
   return rows[0] ? rowToRequest(rows[0]) : null;
 }
-async function listApprovalRequests(handle, input = {}) {
-  const conditions = [];
+async function listApprovalRequests(handle, input = {}, projectId2) {
+  const conditions = [projectScopeFor(project_exports.approvalRequests.projectId, projectId2)];
   if (input.status) conditions.push(eq(project_exports.approvalRequests.status, input.status));
   if (input.requesterActorId) conditions.push(eq(project_exports.approvalRequests.requesterActorId, input.requesterActorId));
   if (input.taskId) conditions.push(eq(project_exports.approvalRequests.taskId, input.taskId));
@@ -36119,7 +36246,7 @@ async function listApprovalRequests(handle, input = {}) {
 async function decideApprovalRequest(layer, requestId, status, input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getApprovalRequest(tx, requestId);
+    const existing = await getApprovalRequest(tx, requestId, layer.projectId);
     if (!existing) throw new Error(`Approval request ${requestId} not found`);
     if (!isValidApprovalRequestTransition(existing.status, status)) {
       throw new Error(`Invalid approval request transition: ${existing.status} -> ${status}`);
@@ -36130,23 +36257,24 @@ async function decideApprovalRequest(layer, requestId, status, input) {
     const updatedRows = await tx.update(project_exports.approvalRequests).set({ status, decidedAt: now, updatedAt: now }).where(
       and(
         eq(project_exports.approvalRequests.id, requestId),
-        eq(project_exports.approvalRequests.status, existing.status)
+        eq(project_exports.approvalRequests.status, existing.status),
+        projectScopeFor(project_exports.approvalRequests.projectId, layer.projectId)
       )
     ).returning({ id: project_exports.approvalRequests.id });
     if (updatedRows.length === 0) {
-      const raced = await getApprovalRequest(tx, requestId);
+      const raced = await getApprovalRequest(tx, requestId, layer.projectId);
       throw new Error(
         `Invalid approval request transition: ${raced?.status ?? existing.status} -> ${status}`
       );
     }
     await appendAuditEvent(tx, layer.projectId ?? "", requestId, status, input.actor, now, input.note);
-    return await getApprovalRequest(tx, requestId);
+    return await getApprovalRequest(tx, requestId, layer.projectId);
   });
 }
 async function markApprovalRequestCompleted(layer, requestId, input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getApprovalRequest(tx, requestId);
+    const existing = await getApprovalRequest(tx, requestId, layer.projectId);
     if (!existing) throw new Error(`Approval request ${requestId} not found`);
     if (!isValidApprovalRequestTransition(existing.status, "completed")) {
       throw new Error(`Invalid approval request transition: ${existing.status} -> completed`);
@@ -36160,21 +36288,22 @@ async function markApprovalRequestCompleted(layer, requestId, input) {
     const updatedRows = await tx.update(project_exports.approvalRequests).set({ status: "completed", completedAt: now, updatedAt: now }).where(
       and(
         eq(project_exports.approvalRequests.id, requestId),
-        eq(project_exports.approvalRequests.status, existing.status)
+        eq(project_exports.approvalRequests.status, existing.status),
+        projectScopeFor(project_exports.approvalRequests.projectId, layer.projectId)
       )
     ).returning({ id: project_exports.approvalRequests.id });
     if (updatedRows.length === 0) {
-      const raced = await getApprovalRequest(tx, requestId);
+      const raced = await getApprovalRequest(tx, requestId, layer.projectId);
       throw new Error(
         `Invalid approval request transition: ${raced?.status ?? existing.status} -> completed`
       );
     }
     await appendAuditEvent(tx, layer.projectId ?? "", requestId, "completed", input.actor, now, input.note);
-    return await getApprovalRequest(tx, requestId);
+    return await getApprovalRequest(tx, requestId, layer.projectId);
   });
 }
-async function getApprovalAuditHistory(handle, requestId) {
-  const rows = await handle.select().from(project_exports.approvalRequestAuditEvents).where(eq(project_exports.approvalRequestAuditEvents.requestId, requestId)).orderBy(
+async function getApprovalAuditHistory(handle, requestId, projectId2) {
+  const rows = await handle.select().from(project_exports.approvalRequestAuditEvents).where(and(eq(project_exports.approvalRequestAuditEvents.requestId, requestId), projectScopeFor(project_exports.approvalRequestAuditEvents.projectId, projectId2))).orderBy(
     sql`${project_exports.approvalRequestAuditEvents.createdAt} ASC, ${project_exports.approvalRequestAuditEvents.id} ASC`
   );
   return rows.map((row) => rowToAuditEvent(row));
@@ -36184,6 +36313,7 @@ var init_async_approval_request_store = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_agents();
     init_types();
   }
@@ -36197,6 +36327,7 @@ var init_approval_request_store = __esm({
     "use strict";
     init_drizzle_orm();
     init_db2();
+    init_data_layer();
     init_async_approval_request_store();
     init_schema2();
     init_async_agent_activity();
@@ -36325,23 +36456,26 @@ var init_approval_request_store = __esm({
         return created;
       }
       async get(id) {
-        return getApprovalRequest(this.asyncLayer.db, id);
+        return getApprovalRequest(this.asyncLayer.db, id, this.asyncLayer.projectId);
       }
       async list(input = {}) {
-        return listApprovalRequests(this.asyncLayer.db, input);
+        return listApprovalRequests(this.asyncLayer.db, input, this.asyncLayer.projectId);
       }
       async getPendingCountsByActor() {
         const table = project_exports.approvalRequests;
         const rows = await this.asyncLayer.db.select({
           actorId: table.requesterActorId,
           requestCount: count()
-        }).from(table).where(eq(table.status, "pending")).groupBy(table.requesterActorId);
+        }).from(table).where(and(eq(table.status, "pending"), projectScopeFor(table.projectId, this.asyncLayer.projectId))).groupBy(table.requesterActorId);
         return new Map(rows.map((row) => [row.actorId, Number(row.requestCount)]));
       }
       async findLatestByDedupeKey(input) {
         if (this.backendMode) {
           const table = project_exports.approvalRequests;
-          const conditions = [eq(table.requesterActorId, input.requesterActorId)];
+          const conditions = [
+            eq(table.requesterActorId, input.requesterActorId),
+            projectScopeFor(table.projectId, this.asyncLayer.projectId)
+          ];
           if (input.taskId !== void 0) {
             conditions.push(eq(table.taskId, input.taskId));
           }
@@ -36380,7 +36514,7 @@ var init_approval_request_store = __esm({
         return markApprovalRequestCompleted(this.asyncLayer, requestId, input);
       }
       async getAuditHistory(requestId) {
-        return getApprovalAuditHistory(this.asyncLayer.db, requestId);
+        return getApprovalAuditHistory(this.asyncLayer.db, requestId, this.asyncLayer.projectId);
       }
     };
   }
@@ -40566,6 +40700,8 @@ async function applySchemaBaseline(db, options = {}) {
     const agentRatingProjectIsolationAlreadyApplied = applied.includes(AGENT_RATING_PROJECT_ISOLATION_VERSION);
     const agentRatingsProjectPartitionAlreadyApplied = applied.includes(AGENT_RATINGS_PROJECT_PARTITION_VERSION);
     const projectOwnershipDeclarationDriftAlreadyApplied = applied.includes(PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION);
+    const projectOwnershipDefaultReconciliationAlreadyApplied = applied.includes(PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION);
+    const messageArchiveSchemaAlreadyApplied = applied.includes(MESSAGE_ARCHIVE_SCHEMA_VERSION);
     assertBinaryNotOlderThanDatabase(applied);
     let schemaChanged = false;
     if (!baselineAlreadyApplied) {
@@ -41049,17 +41185,29 @@ async function applySchemaBaseline(db, options = {}) {
       await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION}) ON CONFLICT (version) DO NOTHING`);
       schemaChanged = true;
     }
+    if (!projectOwnershipDefaultReconciliationAlreadyApplied) {
+      const migrationSql = await readFile4(PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH, "utf8");
+      await tx.execute(sql.raw(migrationSql));
+      await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION}) ON CONFLICT (version) DO NOTHING`);
+      schemaChanged = true;
+    }
+    if (!messageArchiveSchemaAlreadyApplied) {
+      const migrationSql = await readFile4(MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH, "utf8");
+      await tx.execute(sql.raw(migrationSql));
+      await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${MESSAGE_ARCHIVE_SCHEMA_VERSION}) ON CONFLICT (version) DO NOTHING`);
+      schemaChanged = true;
+    }
     return { applied: schemaChanged, pluginHooksRun: pluginHooks.length };
   });
 }
-var SCHEMA_BASELINE_VERSION, TASK_DECLARED_SYMBOLS_VERSION, INITIAL_SCHEMA_VERSION, AUTOMATION_ISOLATION_SCHEMA_VERSION, ANALYTICS_ISOLATION_SCHEMA_VERSION, MONITOR_APPROVAL_ISOLATION_SCHEMA_VERSION, LEGACY_CUTOVER_PRESERVATION_SCHEMA_VERSION, MULTI_PROJECT_CUTOVER_SCHEMA_VERSION, PROJECT_OWNERSHIP_SCHEMA_VERSION, SQLITE_SCHEMA_PARITY_VERSION, SESSION_ADVISOR_ENABLED_SCHEMA_VERSION, MISSION_FIX_IDEMPOTENCY_VERSION, IMPORT_TRANSLATION_CACHE_VERSION, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_VERSION, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_VERSION, OWNER_PROJECT_ID_SPLIT_VERSION, CHAT_SESSION_PINS_VERSION, EXECUTOR_TOOL_FAILURE_RETRY_VERSION, EXECUTOR_ESCALATION_ATTEMPT_VERSION, GLOBAL_ROUTINES_SCHEMA_VERSION, TASK_MERGER_MODEL_LANE_VERSION, BULK_COMPLETION_REFUSAL_AT_VERSION, TASK_PROPOSAL_CLAIM_VERSION, CONFIGURATION_REVISIONS_VERSION, IDEATION_SCHEMA_VERSION, RESEARCH_FEATURE_PROVENANCE_VERSION, TASK_VERIFICATION_REQUEST_VERSION, SYMBOL_LOCKS_SCHEMA_VERSION, BIGINT_COUNTERS_VERSION, PLANNING_ACTIVE_TIMING_VERSION, SQLITE_MIGRATION_RUNTIME_READ_VERSION, WORKFLOW_TASK_CONTINUATIONS_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_VERSION, TASK_WEDGE_NOTIFICATION_VERSION, MILESTONE_ASSERTION_PROVENANCE_VERSION, MISSION_LINEAGE_STOP_VERSION, CHAT_SESSION_TAGS_VERSION, DROP_GLOBAL_CONCURRENCY_VERSION, MISSION_TASK_PREFIX_VERSION, CREDENTIAL_INSTANCE_SELECTION_VERSION, TASK_LIFECYCLE_OUTBOX_VERSION, TASK_LIFECYCLE_CONSUMERS_VERSION, VALIDATOR_INPUT_FINGERPRINT_VERSION, UNPLANNED_EXECUTION_BLOCK_DEDUPE_VERSION, QUEUED_EPISODE_SIGNATURE_VERSION, MULTI_ROLE_WORKFLOW_AGENTS_VERSION, WORKFLOW_PRINCIPAL_FENCE_VERSION, TASK_RECOMMENDATIONS_VERSION, GITHUB_CHECK_STATES_VERSION, AGENT_ACTIVITY_EVENTS_VERSION, SPEC_LOCK_DRIFT_REPORT_VERSION, SPEC_LOCK_SOURCE_REVISION_BIGINT_VERSION, MEMORY_RECALL_RECORDS_VERSION, MISSION_FEATURE_SPEC_ALIGNMENT_VERSION, AGENT_RATING_PROJECT_ISOLATION_VERSION, AGENT_RATINGS_PROJECT_PARTITION_VERSION, PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION, StaleBinarySchemaError, MIGRATION_BOOKKEEPING_TABLE, LEGACY_ADOPTION_DRAINED_MARKER, __dirname, MIGRATIONS_DIR, BASELINE_MIGRATION_PATH, AUTOMATION_ISOLATION_MIGRATION_PATH, ANALYTICS_ISOLATION_MIGRATION_PATH, MONITOR_APPROVAL_ISOLATION_MIGRATION_PATH, LEGACY_CUTOVER_PRESERVATION_MIGRATION_PATH, MULTI_PROJECT_CUTOVER_MIGRATION_PATH, PROJECT_OWNERSHIP_MIGRATION_PATH, SQLITE_SCHEMA_PARITY_MIGRATION_PATH, SESSION_ADVISOR_ENABLED_MIGRATION_PATH, MISSION_FIX_IDEMPOTENCY_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_MIGRATION_PATH, OWNER_PROJECT_ID_SPLIT_MIGRATION_PATH, CHAT_SESSION_PINS_MIGRATION_PATH, EXECUTOR_TOOL_FAILURE_RETRY_MIGRATION_PATH, EXECUTOR_ESCALATION_ATTEMPT_MIGRATION_PATH, GLOBAL_ROUTINES_MIGRATION_PATH, TASK_MERGER_MODEL_LANE_MIGRATION_PATH, BULK_COMPLETION_REFUSAL_AT_MIGRATION_PATH, TASK_PROPOSAL_CLAIM_MIGRATION_PATH, CONFIGURATION_REVISIONS_MIGRATION_PATH, IDEATION_MIGRATION_PATH, RESEARCH_FEATURE_PROVENANCE_MIGRATION_PATH, TASK_VERIFICATION_REQUEST_MIGRATION_PATH, SYMBOL_LOCKS_MIGRATION_PATH, BIGINT_COUNTERS_MIGRATION_PATH, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_VERSION, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_MIGRATION_PATH, PLANNING_ACTIVE_TIMING_MIGRATION_PATH, TASK_DECLARED_SYMBOLS_MIGRATION_PATH, SQLITE_MIGRATION_RUNTIME_READ_PATH, WORKFLOW_TASK_CONTINUATIONS_PATH, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_PATH, TASK_WEDGE_NOTIFICATION_MIGRATION_PATH, MILESTONE_ASSERTION_PROVENANCE_MIGRATION_PATH, MISSION_LINEAGE_STOP_MIGRATION_PATH, CHAT_SESSION_TAGS_MIGRATION_PATH, DROP_GLOBAL_CONCURRENCY_MIGRATION_PATH, MISSION_TASK_PREFIX_MIGRATION_PATH, CREDENTIAL_INSTANCE_SELECTION_MIGRATION_PATH, TASK_LIFECYCLE_OUTBOX_MIGRATION_PATH, TASK_LIFECYCLE_CONSUMERS_MIGRATION_PATH, VALIDATOR_INPUT_FINGERPRINT_MIGRATION_PATH, UNPLANNED_EXECUTION_BLOCK_DEDUPE_MIGRATION_PATH, QUEUED_EPISODE_SIGNATURE_MIGRATION_PATH, MULTI_ROLE_WORKFLOW_AGENTS_MIGRATION_PATH, WORKFLOW_PRINCIPAL_FENCE_MIGRATION_PATH, TASK_RECOMMENDATIONS_MIGRATION_PATH, GITHUB_CHECK_STATES_MIGRATION_PATH, AGENT_ACTIVITY_EVENTS_MIGRATION_PATH, SPEC_LOCK_DRIFT_REPORT_MIGRATION_PATH, SPEC_LOCK_SOURCE_REVISION_BIGINT_MIGRATION_PATH, MEMORY_RECALL_RECORDS_MIGRATION_PATH, MISSION_FEATURE_SPEC_ALIGNMENT_MIGRATION_PATH, AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH, AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH, PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH;
+var SCHEMA_BASELINE_VERSION, TASK_DECLARED_SYMBOLS_VERSION, INITIAL_SCHEMA_VERSION, AUTOMATION_ISOLATION_SCHEMA_VERSION, ANALYTICS_ISOLATION_SCHEMA_VERSION, MONITOR_APPROVAL_ISOLATION_SCHEMA_VERSION, LEGACY_CUTOVER_PRESERVATION_SCHEMA_VERSION, MULTI_PROJECT_CUTOVER_SCHEMA_VERSION, PROJECT_OWNERSHIP_SCHEMA_VERSION, SQLITE_SCHEMA_PARITY_VERSION, SESSION_ADVISOR_ENABLED_SCHEMA_VERSION, MISSION_FIX_IDEMPOTENCY_VERSION, IMPORT_TRANSLATION_CACHE_VERSION, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_VERSION, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_VERSION, OWNER_PROJECT_ID_SPLIT_VERSION, CHAT_SESSION_PINS_VERSION, EXECUTOR_TOOL_FAILURE_RETRY_VERSION, EXECUTOR_ESCALATION_ATTEMPT_VERSION, GLOBAL_ROUTINES_SCHEMA_VERSION, TASK_MERGER_MODEL_LANE_VERSION, BULK_COMPLETION_REFUSAL_AT_VERSION, TASK_PROPOSAL_CLAIM_VERSION, CONFIGURATION_REVISIONS_VERSION, IDEATION_SCHEMA_VERSION, RESEARCH_FEATURE_PROVENANCE_VERSION, TASK_VERIFICATION_REQUEST_VERSION, SYMBOL_LOCKS_SCHEMA_VERSION, BIGINT_COUNTERS_VERSION, PLANNING_ACTIVE_TIMING_VERSION, SQLITE_MIGRATION_RUNTIME_READ_VERSION, WORKFLOW_TASK_CONTINUATIONS_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_VERSION, TASK_WEDGE_NOTIFICATION_VERSION, MILESTONE_ASSERTION_PROVENANCE_VERSION, MISSION_LINEAGE_STOP_VERSION, CHAT_SESSION_TAGS_VERSION, DROP_GLOBAL_CONCURRENCY_VERSION, MISSION_TASK_PREFIX_VERSION, CREDENTIAL_INSTANCE_SELECTION_VERSION, TASK_LIFECYCLE_OUTBOX_VERSION, TASK_LIFECYCLE_CONSUMERS_VERSION, VALIDATOR_INPUT_FINGERPRINT_VERSION, UNPLANNED_EXECUTION_BLOCK_DEDUPE_VERSION, QUEUED_EPISODE_SIGNATURE_VERSION, MULTI_ROLE_WORKFLOW_AGENTS_VERSION, WORKFLOW_PRINCIPAL_FENCE_VERSION, TASK_RECOMMENDATIONS_VERSION, GITHUB_CHECK_STATES_VERSION, AGENT_ACTIVITY_EVENTS_VERSION, SPEC_LOCK_DRIFT_REPORT_VERSION, SPEC_LOCK_SOURCE_REVISION_BIGINT_VERSION, MEMORY_RECALL_RECORDS_VERSION, MISSION_FEATURE_SPEC_ALIGNMENT_VERSION, AGENT_RATING_PROJECT_ISOLATION_VERSION, AGENT_RATINGS_PROJECT_PARTITION_VERSION, PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION, PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION, MESSAGE_ARCHIVE_SCHEMA_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION, StaleBinarySchemaError, MIGRATION_BOOKKEEPING_TABLE, LEGACY_ADOPTION_DRAINED_MARKER, __dirname, MIGRATIONS_DIR, BASELINE_MIGRATION_PATH, AUTOMATION_ISOLATION_MIGRATION_PATH, ANALYTICS_ISOLATION_MIGRATION_PATH, MONITOR_APPROVAL_ISOLATION_MIGRATION_PATH, LEGACY_CUTOVER_PRESERVATION_MIGRATION_PATH, MULTI_PROJECT_CUTOVER_MIGRATION_PATH, PROJECT_OWNERSHIP_MIGRATION_PATH, SQLITE_SCHEMA_PARITY_MIGRATION_PATH, SESSION_ADVISOR_ENABLED_MIGRATION_PATH, MISSION_FIX_IDEMPOTENCY_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_MIGRATION_PATH, OWNER_PROJECT_ID_SPLIT_MIGRATION_PATH, CHAT_SESSION_PINS_MIGRATION_PATH, EXECUTOR_TOOL_FAILURE_RETRY_MIGRATION_PATH, EXECUTOR_ESCALATION_ATTEMPT_MIGRATION_PATH, GLOBAL_ROUTINES_MIGRATION_PATH, TASK_MERGER_MODEL_LANE_MIGRATION_PATH, BULK_COMPLETION_REFUSAL_AT_MIGRATION_PATH, TASK_PROPOSAL_CLAIM_MIGRATION_PATH, CONFIGURATION_REVISIONS_MIGRATION_PATH, IDEATION_MIGRATION_PATH, RESEARCH_FEATURE_PROVENANCE_MIGRATION_PATH, TASK_VERIFICATION_REQUEST_MIGRATION_PATH, SYMBOL_LOCKS_MIGRATION_PATH, BIGINT_COUNTERS_MIGRATION_PATH, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_VERSION, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_MIGRATION_PATH, PLANNING_ACTIVE_TIMING_MIGRATION_PATH, TASK_DECLARED_SYMBOLS_MIGRATION_PATH, SQLITE_MIGRATION_RUNTIME_READ_PATH, WORKFLOW_TASK_CONTINUATIONS_PATH, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_PATH, TASK_WEDGE_NOTIFICATION_MIGRATION_PATH, MILESTONE_ASSERTION_PROVENANCE_MIGRATION_PATH, MISSION_LINEAGE_STOP_MIGRATION_PATH, CHAT_SESSION_TAGS_MIGRATION_PATH, DROP_GLOBAL_CONCURRENCY_MIGRATION_PATH, MISSION_TASK_PREFIX_MIGRATION_PATH, CREDENTIAL_INSTANCE_SELECTION_MIGRATION_PATH, TASK_LIFECYCLE_OUTBOX_MIGRATION_PATH, TASK_LIFECYCLE_CONSUMERS_MIGRATION_PATH, VALIDATOR_INPUT_FINGERPRINT_MIGRATION_PATH, UNPLANNED_EXECUTION_BLOCK_DEDUPE_MIGRATION_PATH, QUEUED_EPISODE_SIGNATURE_MIGRATION_PATH, MULTI_ROLE_WORKFLOW_AGENTS_MIGRATION_PATH, WORKFLOW_PRINCIPAL_FENCE_MIGRATION_PATH, TASK_RECOMMENDATIONS_MIGRATION_PATH, GITHUB_CHECK_STATES_MIGRATION_PATH, AGENT_ACTIVITY_EVENTS_MIGRATION_PATH, SPEC_LOCK_DRIFT_REPORT_MIGRATION_PATH, SPEC_LOCK_SOURCE_REVISION_BIGINT_MIGRATION_PATH, MEMORY_RECALL_RECORDS_MIGRATION_PATH, MISSION_FEATURE_SPEC_ALIGNMENT_MIGRATION_PATH, AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH, AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH, PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH, PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH, MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH;
 var init_schema_applier = __esm({
   "../core/src/postgres/schema-applier.ts"() {
     "use strict";
     init_drizzle_orm();
     init_plugin_schema_hook();
     init_advisory_locks();
-    SCHEMA_BASELINE_VERSION = "0056";
+    SCHEMA_BASELINE_VERSION = "0058";
     TASK_DECLARED_SYMBOLS_VERSION = "0028";
     INITIAL_SCHEMA_VERSION = "0000";
     AUTOMATION_ISOLATION_SCHEMA_VERSION = "0001";
@@ -41116,6 +41264,8 @@ var init_schema_applier = __esm({
     AGENT_RATING_PROJECT_ISOLATION_VERSION = "0054";
     AGENT_RATINGS_PROJECT_PARTITION_VERSION = "0055";
     PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION = "0056";
+    PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION = "0057";
+    MESSAGE_ARCHIVE_SCHEMA_VERSION = "0058";
     LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION = "fusion_mark_legacy_adoption_drained";
     StaleBinarySchemaError = class extends Error {
       constructor(databaseVersion, binaryVersion) {
@@ -41252,6 +41402,8 @@ var init_schema_applier = __esm({
     AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0054_fn_8957_agent_rating_project_isolation.sql");
     AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0055_fn_8988_agent_ratings_project_partition.sql");
     PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0056_fn_8997_project_ownership_declaration_drift.sql");
+    PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0057_fn_9004_project_ownership_default_reconciliation.sql");
+    MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0058_fn_9014_message_archive.sql");
   }
 });
 
@@ -68607,20 +68759,32 @@ async function replaceActiveTaskWorkflowContinuation(layer, input) {
     return upsertWorkflowWorkItem(layer, input, tx);
   }));
 }
-async function seedStrandedPlanReviewContinuation(layer, input) {
+async function seedStrandedPlanReviewContinuation(layer, input, options = {}) {
   return layer.transactionImmediate(async (tx) => withTaskWorkflowSerialization(tx, layer.projectId, input.taskId, async () => {
     const active2 = await tx.select({ id: project_exports.workflowWorkItems.id }).from(project_exports.workflowWorkItems).where(and(
       projectScopeFor(project_exports.workflowWorkItems.projectId, layer.projectId),
       eq(project_exports.workflowWorkItems.taskId, input.taskId),
       inArray(project_exports.workflowWorkItems.state, [...ACTIVE_WORKFLOW_WORK_ITEM_STATES])
     ));
-    if (active2.length > 0) return { seeded: false, reason: "active-continuation" };
+    const blocking = options.retirePredecessorId ? active2.filter((row) => row.id !== options.retirePredecessorId) : active2;
+    if (blocking.length > 0) return { seeded: false, reason: "active-continuation" };
     const taskRows = await tx.select({ workflowStepResults: project_exports.tasks.workflowStepResults }).from(project_exports.tasks).where(and(
       projectScopeFor(project_exports.tasks.projectId, layer.projectId),
       eq(project_exports.tasks.id, input.taskId)
     )).limit(1);
     const results = taskRows[0]?.workflowStepResults;
     if (results?.some(isPlanReviewSatisfied)) return { seeded: false, reason: "plan-review-passed" };
+    if (options.retirePredecessorId) {
+      const predRows = await tx.select().from(project_exports.workflowWorkItems).where(and(
+        projectScopeFor(project_exports.workflowWorkItems.projectId, layer.projectId),
+        eq(project_exports.workflowWorkItems.id, options.retirePredecessorId),
+        eq(project_exports.workflowWorkItems.taskId, input.taskId)
+      )).limit(1);
+      const pred = predRows[0];
+      if (pred && !isTerminalWorkflowWorkItemState(normalizeWorkflowWorkItemState(pred.state))) {
+        await transitionWorkflowWorkItem(layer, pred.id, "succeeded", { leaseOwner: null, leaseExpiresAt: null, lastError: null }, tx);
+      }
+    }
     const item = await upsertWorkflowWorkItem(layer, input, tx);
     return { seeded: true, workItemId: item.id };
   }));
@@ -68784,8 +68948,10 @@ function safeJsonParse(value2) {
     return null;
   }
 }
-async function queryRunAuditEvents(db, filter2 = {}) {
-  const conditions = [];
+async function queryRunAuditEvents(db, filter2 = {}, projectId2) {
+  const conditions = [projectScopeFor(project_exports.runAuditEvents.projectId, projectId2)].filter(
+    (condition) => condition !== void 0
+  );
   if (filter2.runId) {
     conditions.push(eq(project_exports.runAuditEvents.runId, filter2.runId));
   }
@@ -68931,6 +69097,7 @@ var init_async_audit = __esm({
     init_drizzle_orm();
     init_schema2();
     init_data_layer();
+    init_data_layer();
     LEGACY_REVIEW_LANES3 = ["in-review"];
     LEGACY_COMPLETE_LANES = ["done"];
   }
@@ -69320,7 +69487,10 @@ async function insertArtifactRow(layer, input, stored, archivedColumns) {
       createdAt: now,
       updatedAt: now
     });
-    const rows = await tx.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.id, id)).limit(1);
+    const rows = await tx.select().from(project_exports.artifacts).where(and(
+      eq(project_exports.artifacts.id, id),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    )).limit(1);
     const row = rows[0];
     if (!row) throw new Error(`Failed to register artifact ${id}`);
     return rowToArtifact2(row);
@@ -69328,7 +69498,7 @@ async function insertArtifactRow(layer, input, stored, archivedColumns) {
 }
 async function updateArtifactRow(layer, id, updates, archivedColumns) {
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getArtifact(tx, id);
+    const existing = await getArtifact(tx, id, layer.projectId);
     if (!existing) {
       throw new Error(`Artifact ${id} not found`);
     }
@@ -69348,29 +69518,38 @@ async function updateArtifactRow(layer, id, updates, archivedColumns) {
       description: updates.description !== void 0 ? updates.description : existing.description ?? null,
       content: updates.content !== void 0 ? updates.content : existing.content ?? null,
       updatedAt: now
-    }).where(eq(project_exports.artifacts.id, id));
-    const updated = await getArtifact(tx, id);
+    }).where(and(
+      eq(project_exports.artifacts.id, id),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    ));
+    const updated = await getArtifact(tx, id, layer.projectId);
     if (!updated) {
       throw new Error(`Failed to update artifact ${id}`);
     }
     return updated;
   });
 }
-async function getArtifact(db, id) {
-  const rows = await db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.id, id)).limit(1);
+async function getArtifact(db, id, projectId2) {
+  const rows = await db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.id, id),
+    projectScopeFor(project_exports.artifacts.projectId, projectId2)
+  )).limit(1);
   const row = rows[0];
   return row ? rowToArtifact2(row) : null;
 }
 async function getArtifacts(db, taskId, projectId2, archivedColumns) {
   const column = await getLiveTaskColumn(db, taskId, projectId2, archivedColumns);
   if (column === null || column === "archived") return [];
-  const rows = await db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.taskId, taskId)).orderBy(desc(project_exports.artifacts.createdAt));
+  const rows = await db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.taskId, taskId),
+    projectScopeFor(project_exports.artifacts.projectId, projectId2)
+  )).orderBy(desc(project_exports.artifacts.createdAt));
   return rows.map((row) => rowToArtifact2(row));
 }
-async function listArtifacts(db, options) {
+async function listArtifacts(db, options, projectId2) {
   const limit2 = Math.min(Math.max(1, options?.limit ?? 200), 1e3);
   const offset = Math.max(0, options?.offset ?? 0);
-  const conditions = [];
+  const conditions = [projectScopeFor(project_exports.artifacts.projectId, projectId2)];
   if (options?.type) {
     conditions.push(eq(project_exports.artifacts.type, options.type));
   }
@@ -69409,7 +69588,10 @@ async function listArtifacts(db, options) {
     taskColumn: project_exports.tasks.column
   }).from(project_exports.artifacts).leftJoin(
     project_exports.tasks,
-    eq(project_exports.artifacts.taskId, project_exports.tasks.id)
+    and(
+      eq(project_exports.artifacts.taskId, project_exports.tasks.id),
+      eq(project_exports.artifacts.projectId, project_exports.tasks.projectId)
+    )
   ).where(and(...conditions)).orderBy(desc(project_exports.artifacts.createdAt)).limit(limit2).offset(offset);
   return rows.map((row) => {
     const artifact = rowToArtifact2(row);
@@ -70574,7 +70756,7 @@ function rowToBranchGroup2(row) {
     closedAt: row.closedAt ?? void 0
   };
 }
-async function createBranchGroup(db, input) {
+async function createBranchGroup(db, input, projectId2) {
   validateBranchGroupBranchName(input.branchName);
   const now = Date.now();
   const id = generateBranchGroupId2();
@@ -70593,44 +70775,52 @@ async function createBranchGroup(db, input) {
     updatedAt: now,
     closedAt: input.closedAt ?? null
   });
-  const created = await getBranchGroup(db, id);
+  const created = await getBranchGroup(db, id, projectId2);
   if (!created) throw new Error(`Failed to read branch group ${id} after create`);
   return created;
 }
-async function getBranchGroup(db, id) {
-  const rows = await db.select().from(project_exports.branchGroups).where(eq(project_exports.branchGroups.id, id)).limit(1);
+async function getBranchGroup(db, id, projectId2) {
+  const rows = await db.select().from(project_exports.branchGroups).where(and(
+    eq(project_exports.branchGroups.id, id),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  )).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function getBranchGroupBySource(db, sourceType, sourceId) {
+async function getBranchGroupBySource(db, sourceType, sourceId, projectId2) {
   const rows = await db.select().from(project_exports.branchGroups).where(
     and(
       eq(project_exports.branchGroups.sourceType, sourceType),
-      eq(project_exports.branchGroups.sourceId, sourceId)
+      eq(project_exports.branchGroups.sourceId, sourceId),
+      projectScopeFor(project_exports.branchGroups.projectId, projectId2)
     )
   ).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function getBranchGroupByBranchName(db, branchName) {
-  const rows = await db.select().from(project_exports.branchGroups).where(eq(project_exports.branchGroups.branchName, branchName)).orderBy(sql`${project_exports.branchGroups.createdAt} DESC`).limit(1);
+async function getBranchGroupByBranchName(db, branchName, projectId2) {
+  const rows = await db.select().from(project_exports.branchGroups).where(and(
+    eq(project_exports.branchGroups.branchName, branchName),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  )).orderBy(sql`${project_exports.branchGroups.createdAt} DESC`).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function ensureBranchGroupForSource(db, sourceType, sourceId, init) {
-  const existing = await getBranchGroupBySource(db, sourceType, sourceId);
+async function ensureBranchGroupForSource(db, sourceType, sourceId, init, projectId2) {
+  const existing = await getBranchGroupBySource(db, sourceType, sourceId, projectId2);
   if (existing) return existing;
-  const existingByBranch = await getBranchGroupByBranchName(db, init.branchName);
+  const existingByBranch = await getBranchGroupByBranchName(db, init.branchName, projectId2);
   if (existingByBranch) return existingByBranch;
-  return createBranchGroup(db, { sourceType, sourceId, ...init });
+  return createBranchGroup(db, { sourceType, sourceId, ...init }, projectId2);
 }
-async function listBranchGroups(db, options) {
-  const query = db.select().from(project_exports.branchGroups).orderBy(asc(project_exports.branchGroups.createdAt));
-  const rows = options?.status ? await query.where(eq(project_exports.branchGroups.status, options.status)) : await query;
+async function listBranchGroups(db, options, projectId2) {
+  const conditions = [projectScopeFor(project_exports.branchGroups.projectId, projectId2)];
+  if (options?.status) conditions.push(eq(project_exports.branchGroups.status, options.status));
+  const rows = await db.select().from(project_exports.branchGroups).where(and(...conditions)).orderBy(asc(project_exports.branchGroups.createdAt));
   return rows.map((row) => rowToBranchGroup2(row));
 }
-async function updateBranchGroup(db, id, patch) {
-  const current = await getBranchGroup(db, id);
+async function updateBranchGroup(db, id, patch, projectId2) {
+  const current = await getBranchGroup(db, id, projectId2);
   if (!current) throw new Error(`Branch group ${id} not found`);
   if (patch.branchName !== void 0) {
     validateBranchGroupBranchName(patch.branchName);
@@ -70649,8 +70839,11 @@ async function updateBranchGroup(db, id, patch) {
     status: nextStatus,
     updatedAt: now,
     closedAt: nextClosedAt
-  }).where(eq(project_exports.branchGroups.id, id));
-  const updated = await getBranchGroup(db, id);
+  }).where(and(
+    eq(project_exports.branchGroups.id, id),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  ));
+  const updated = await getBranchGroup(db, id, projectId2);
   if (!updated) throw new Error(`Branch group ${id} disappeared after update`);
   return updated;
 }
@@ -70807,6 +71000,7 @@ var init_async_branch_groups = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_branch_assignment();
   }
 });
@@ -80620,6 +80814,9 @@ import { randomUUID as randomUUID21 } from "node:crypto";
 function tableForScope(scope) {
   return scope === "project" ? project_exports.secrets : central_exports.secretsGlobal;
 }
+function scopeForSecretTable(scope, table, projectId2) {
+  return scope === "project" ? projectScopeFor(table.projectId, projectId2) : void 0;
+}
 function isAccessPolicy(value2) {
   return value2 === "auto" || value2 === "prompt" || value2 === "deny";
 }
@@ -80642,23 +80839,23 @@ function rowToRecord2(row, scope) {
     lastReadBy: row.lastReadBy
   };
 }
-async function getSecretMetadata(handle, id, scope) {
+async function getSecretMetadata(handle, id, scope, projectId2) {
   const table = tableForScope(scope);
-  const rows = await handle.select(metadataColumns(table)).from(table).where(eq(table.id, id)).limit(1);
+  const rows = await handle.select(metadataColumns(table)).from(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2))).limit(1);
   const row = rows[0];
   return row ? rowToRecord2(row, scope) : null;
 }
-async function listSecrets(handle, scope) {
+async function listSecrets(handle, scope, projectId2) {
   if (scope) {
     const table = tableForScope(scope);
-    const rows = await handle.select(metadataColumns(table)).from(table).orderBy(asc(sql`lower(${table.key})`));
+    const rows = await handle.select(metadataColumns(table)).from(table).where(scopeForSecretTable(scope, table, projectId2)).orderBy(asc(sql`lower(${table.key})`));
     return rows.map((row) => rowToRecord2(row, scope));
   }
-  const project = await listSecrets(handle, "project");
-  const global2 = await listSecrets(handle, "global");
+  const project = await listSecrets(handle, "project", projectId2);
+  const global2 = await listSecrets(handle, "global", projectId2);
   return [...project, ...global2];
 }
-async function createSecret(handle, cipher, input) {
+async function createSecret(handle, cipher, input, projectId2) {
   const key = input.key.trim();
   if (!key) {
     throw new SecretsStoreError({ code: "invalid-key", message: "Secret key is required" });
@@ -80672,6 +80869,7 @@ async function createSecret(handle, cipher, input) {
   const table = tableForScope(input.scope);
   try {
     await handle.insert(table).values({
+      ...input.scope === "project" && projectId2?.trim() ? { projectId: projectId2 } : {},
       id,
       key,
       valueCiphertext: encrypted.ciphertext,
@@ -80691,14 +80889,14 @@ async function createSecret(handle, cipher, input) {
     }
     throw error3;
   }
-  const created = await getSecretMetadata(handle, id, input.scope);
+  const created = await getSecretMetadata(handle, id, input.scope, projectId2);
   if (!created) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret insert succeeded but row could not be read back" });
   }
   return created;
 }
-async function updateSecret(handle, cipher, id, scope, patch) {
-  const existing = await getSecretMetadata(handle, id, scope);
+async function updateSecret(handle, cipher, id, scope, patch, projectId2) {
+  const existing = await getSecretMetadata(handle, id, scope, projectId2);
   if (!existing) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
   }
@@ -80732,34 +80930,34 @@ async function updateSecret(handle, cipher, id, scope, patch) {
     updates.nonce = encrypted.nonce;
   }
   try {
-    await handle.update(table).set(updates).where(eq(table.id, id));
+    await handle.update(table).set(updates).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
   } catch (error3) {
     if (isPostgresUniqueError(error3)) {
       throw new SecretsStoreError({ code: "duplicate-key", message: "Secret key already exists" });
     }
     throw error3;
   }
-  const updated = await getSecretMetadata(handle, id, scope);
+  const updated = await getSecretMetadata(handle, id, scope, projectId2);
   if (!updated) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret update succeeded but row could not be read back" });
   }
   return updated;
 }
-async function deleteSecret(handle, id, scope) {
-  const existing = await getSecretMetadata(handle, id, scope);
+async function deleteSecret(handle, id, scope, projectId2) {
+  const existing = await getSecretMetadata(handle, id, scope, projectId2);
   if (!existing) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
   }
   const table = tableForScope(scope);
-  await handle.delete(table).where(eq(table.id, id));
+  await handle.delete(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
 }
-async function revealSecret(handle, cipher, id, scope, reader) {
+async function revealSecret(handle, cipher, id, scope, reader, projectId2) {
   const table = tableForScope(scope);
   const rows = await handle.select({
     ...metadataColumns(table),
     valueCiphertext: table.valueCiphertext,
     nonce: table.nonce
-  }).from(table).where(eq(table.id, id)).limit(1);
+  }).from(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2))).limit(1);
   const row = rows[0];
   if (!row) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
@@ -80778,7 +80976,7 @@ async function revealSecret(handle, cipher, id, scope, reader) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const lastReadBy = reader.userId ?? reader.agentId ?? null;
-  await handle.update(table).set({ lastReadAt: now, lastReadBy, updatedAt: now }).where(eq(table.id, id));
+  await handle.update(table).set({ lastReadAt: now, lastReadBy, updatedAt: now }).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
   return { key: row.key, plaintextValue };
 }
 var severityAuditLog10, SecretsStoreError, metadataColumns;
@@ -80789,6 +80987,7 @@ var init_async_secrets_store = __esm({
     init_drizzle_orm();
     init_postgres_errors();
     init_schema2();
+    init_data_layer();
     init_secrets_crypto();
     severityAuditLog10 = createLogger("core-async-secrets-store");
     SecretsStoreError = class extends Error {
@@ -80884,7 +81083,7 @@ var init_secrets_store = __esm({
         };
       }
       async listSecrets(scope) {
-        return listSecrets(this.asyncLayer.db, scope);
+        return listSecrets(this.asyncLayer.db, scope, this.asyncLayer.projectId);
       }
       async listEnvExportable(opts) {
         const keyPrefix = opts?.keyPrefix;
@@ -80927,7 +81126,7 @@ var init_secrets_store = __esm({
         return [...exported.values()];
       }
       async getSecretMetadata(id, scope) {
-        return getSecretMetadata(this.asyncLayer.db, id, scope);
+        return getSecretMetadata(this.asyncLayer.db, id, scope, this.asyncLayer.projectId);
       }
       async createSecret(input) {
         const key = input.key.trim();
@@ -80937,12 +81136,12 @@ var init_secrets_store = __esm({
         if (input.accessPolicy && !isAccessPolicy2(input.accessPolicy)) {
           throw new SecretsStoreError2({ code: "invalid-policy", message: "Invalid access policy" });
         }
-        const created = await createSecret(this.asyncLayer.db, this.cipher, input);
+        const created = await createSecret(this.asyncLayer.db, this.cipher, input, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:create", scope: input.scope, secretId: created.id, key: created.key });
         return created;
       }
       async updateSecret(id, scope, patch) {
-        const updated = await updateSecret(this.asyncLayer.db, this.cipher, id, scope, patch);
+        const updated = await updateSecret(this.asyncLayer.db, this.cipher, id, scope, patch, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:update", scope, secretId: updated.id, key: updated.key });
         return updated;
       }
@@ -80951,12 +81150,12 @@ var init_secrets_store = __esm({
         if (!existing) {
           throw new SecretsStoreError2({ code: "not-found", message: "Secret not found" });
         }
-        await deleteSecret(this.asyncLayer.db, id, scope);
+        await deleteSecret(this.asyncLayer.db, id, scope, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:delete", scope, secretId: id, key: existing.key });
         return;
       }
       async revealSecret(id, scope, reader) {
-        const revealed = await revealSecret(this.asyncLayer.db, this.cipher, id, scope, reader);
+        const revealed = await revealSecret(this.asyncLayer.db, this.cipher, id, scope, reader, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:read", scope, secretId: id, key: revealed.key, actor: reader });
         return revealed;
       }
@@ -82057,6 +82256,7 @@ async function getVerificationCacheHitImpl(store, treeSha, testCommand, buildCom
   const normalizedBuild = buildCommand2 ?? "";
   const table = project_exports.verificationCache;
   const rows = await store.asyncLayer.db.select({ recordedAt: table.recordedAt, taskId: table.taskId }).from(table).where(and(
+    projectScopeFor(table.projectId, store.asyncLayer.projectId),
     eq(table.treeSha, treeSha),
     eq(table.testCommand, normalizedTest),
     eq(table.buildCommand, normalizedBuild)
@@ -82799,7 +82999,7 @@ async function invokeTaskCreatedHookImpl(store, task) {
 }
 async function createBranchGroupImpl(store, input) {
   const layer = store.asyncLayer;
-  return createBranchGroup(layer.db, input);
+  return createBranchGroup(layer.db, input, layer.projectId);
 }
 var init_task_id_integrity2 = __esm({
   "../core/src/task-store/task-id-integrity.ts"() {
@@ -82884,22 +83084,23 @@ import { readFile as readFile7, writeFile as writeFile5 } from "node:fs/promises
 import { join as join23 } from "node:path";
 async function getBranchGroupImpl(store, id) {
   const layer = store.asyncLayer;
-  return getBranchGroup(layer.db, id);
+  return getBranchGroup(layer.db, id, layer.projectId);
 }
 async function getBranchGroupBySourceImpl(store, sourceType, sourceId) {
   const layer = store.asyncLayer;
-  return getBranchGroupBySource(layer.db, sourceType, sourceId);
+  return getBranchGroupBySource(layer.db, sourceType, sourceId, layer.projectId);
 }
 async function getBranchGroupByBranchNameImpl(store, branchName) {
   const layer = store.asyncLayer;
-  return getBranchGroupByBranchName(layer.db, branchName);
+  return getBranchGroupByBranchName(layer.db, branchName, layer.projectId);
 }
 async function ensureBranchGroupForSourceImpl(store, sourceType, sourceId, init) {
-  return ensureBranchGroupForSource(store.asyncLayer.db, sourceType, sourceId, init);
+  const layer = store.asyncLayer;
+  return ensureBranchGroupForSource(layer.db, sourceType, sourceId, init, layer.projectId);
 }
 async function listBranchGroupsImpl(store, options) {
   const layer = store.asyncLayer;
-  return listBranchGroups(layer.db, options);
+  return listBranchGroups(layer.db, options, layer.projectId);
 }
 async function listTasksByBranchGroupImpl(store, groupId) {
   const tasks2 = await store.listTasks({ includeArchived: true, slim: false });
@@ -84441,7 +84642,7 @@ function insertArtifactRowImpl(store, input, id, now, stored) {
 }
 async function getArtifactImpl(store, id) {
   const layer = store.asyncLayer;
-  return getArtifact(layer.db, id);
+  return getArtifact(layer.db, id, layer.projectId);
 }
 async function updateArtifactImpl(store, id, updates) {
   const layer = store.asyncLayer;
@@ -89310,6 +89511,7 @@ var init_async_archive_lineage = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_async_persistence();
     init_async_lifecycle();
     init_lineage_approval_invalidation();
@@ -92777,7 +92979,7 @@ async function _maybeAutoArchiveSameAgentDuplicateBackendImpl(store, task, input
 }
 async function updateBranchGroupImpl(store, id, patch) {
   const layer = store.asyncLayer;
-  return updateBranchGroup(layer.db, id, patch);
+  return updateBranchGroup(layer.db, id, patch, layer.projectId);
 }
 async function updatePrEntityImpl(store, id, patch) {
   const layer = store.asyncLayer;
@@ -93287,13 +93489,19 @@ async function deleteAttachmentArtifactRows(store, taskId, filename) {
   const linkedArtifactIds = artifacts2.filter((artifact) => artifact.metadata?.source === "attachment" && artifact.metadata.attachmentFilename === filename).map((artifact) => artifact.id);
   if (linkedArtifactIds.length === 0) return;
   for (const artifactId of linkedArtifactIds) {
-    await layer.db.delete(project_exports.artifacts).where(eq(project_exports.artifacts.id, artifactId));
+    await layer.db.delete(project_exports.artifacts).where(and(
+      eq(project_exports.artifacts.id, artifactId),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    ));
   }
   return;
 }
 async function getArtifactsForAttachmentCleanup(store, taskId) {
   const layer = store.asyncLayer;
-  const rows = await layer.db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.taskId, taskId));
+  const rows = await layer.db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.taskId, taskId),
+    projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+  ));
   return rows;
 }
 async function deleteAttachmentImpl(store, id, filename) {
@@ -95709,7 +95917,7 @@ function clearLinkedAgentTaskIdsImpl(store, taskId, updatedAt = (/* @__PURE__ */
     `).run(updatedAt, updatedAt, taskId);
 }
 async function listArtifactsImpl(store, options) {
-  return listArtifacts(store.asyncLayer.db, options);
+  return listArtifacts(store.asyncLayer.db, options, store.asyncLayer.projectId);
 }
 async function rehomeOccupantImpl(store, taskId, targetColumn, reason, metadata) {
   let current;
@@ -96954,8 +97162,8 @@ async function upsertWorkflowWorkItemImpl(store, input, tx) {
 async function replaceActiveTaskWorkflowContinuationImpl(store, input) {
   return replaceActiveTaskWorkflowContinuation(store.asyncLayer, input);
 }
-async function seedStrandedPlanReviewContinuationImpl(store, input) {
-  return seedStrandedPlanReviewContinuation(store.asyncLayer, input);
+async function seedStrandedPlanReviewContinuationImpl(store, input, options = {}) {
+  return seedStrandedPlanReviewContinuation(store.asyncLayer, input, options);
 }
 async function transitionWorkflowWorkItemImpl(store, id, state, patch = {}, tx) {
   return transitionWorkflowWorkItem(store.asyncLayer, id, state, patch, tx);
@@ -101098,6 +101306,37 @@ async function getTaskVerificationRequestAsyncImpl(store, taskId) {
   const row = rows[0];
   return row ? { taskId: row.taskId, requestId: row.requestId, status: row.status, profile: row.profile, command: row.command, scope: row.scope, requestedBy: row.requestedBy, requestedAt: row.requestedAt, ...row.startedAt ? { startedAt: row.startedAt } : {}, ...row.completedAt ? { completedAt: row.completedAt } : {}, ...row.result ? { result: row.result } : {}, ...row.rejectionReason ? { rejectionReason: row.rejectionReason } : {} } : null;
 }
+async function listTaskRecommendationsImpl(store, options) {
+  const layer = store.asyncLayer;
+  const completeColumns = options?.completeColumns ?? await resolveProjectColumnsForRoles(store, ["complete"]);
+  const rawLimit = options?.limit;
+  const rawOffset = options?.offset;
+  const limit2 = typeof rawLimit === "number" && Number.isFinite(rawLimit) ? Math.min(200, Math.max(1, Math.trunc(rawLimit))) : 50;
+  const offset = typeof rawOffset === "number" && Number.isFinite(rawOffset) ? Math.max(0, Math.trunc(rawOffset)) : 0;
+  const columns = [...completeColumns];
+  if (columns.length === 0) return { items: [], rowOffset: offset, rowLimit: limit2, returnedRowCount: 0, totalRowCount: 0, hasMore: false };
+  const filter2 = and(
+    taskProjectScope(layer),
+    isNull(project_exports.tasks.deletedAt),
+    inArray(project_exports.tasks.column, columns),
+    isNotNull(project_exports.tasks.recommendations),
+    sql`jsonb_array_length(${project_exports.tasks.recommendations}) > 0`
+  );
+  const [countRows, rows] = await Promise.all([
+    layer.db.select({ count: sql`count(*)` }).from(project_exports.tasks).where(filter2),
+    layer.db.select({ id: project_exports.tasks.id, title: project_exports.tasks.title, column: project_exports.tasks.column, updatedAt: project_exports.tasks.updatedAt, recommendations: project_exports.tasks.recommendations }).from(project_exports.tasks).where(filter2).orderBy(desc(project_exports.tasks.updatedAt), desc(project_exports.tasks.id)).limit(limit2).offset(offset)
+  ]);
+  const items = [];
+  for (const row of rows) {
+    if (!Array.isArray(row.recommendations) || row.recommendations.length === 0) continue;
+    for (const recommendation of row.recommendations) {
+      items.push({ taskId: row.id, taskTitle: row.title ?? void 0, taskColumn: row.column, updatedAt: row.updatedAt, recommendation });
+    }
+  }
+  const totalRowCount = Number(countRows[0]?.count ?? 0);
+  const returnedRowCount = rows.length;
+  return { items, rowOffset: offset, rowLimit: limit2, returnedRowCount, totalRowCount, hasMore: offset + returnedRowCount < totalRowCount };
+}
 var LEGACY_REVIEW_LANES5, LEGACY_ARCHIVE_LANES2;
 var init_reads = __esm({
   "../core/src/task-store/reads.ts"() {
@@ -101120,6 +101359,7 @@ var init_reads = __esm({
     init_retry_summary();
     init_errors3();
     init_project_lane_vocabulary();
+    init_data_layer();
     init_async_persistence();
     init_async_search();
     init_async_archive_db();
@@ -103226,6 +103466,9 @@ var init_store = __esm({
       async clearWorkflowRunStepInstancesAsync(taskId, keepRunId) {
         return clearWorkflowRunStepInstancesAsyncImpl(this, taskId, keepRunId);
       }
+      async listTaskRecommendations(options) {
+        return listTaskRecommendationsImpl(this, options);
+      }
       async listTasksForGithubTrackingReconcile(options) {
         return listTasksForGithubTrackingReconcileImpl(this, options);
       }
@@ -103952,8 +104195,8 @@ var init_store = __esm({
       async replaceActiveTaskWorkflowContinuation(input) {
         return replaceActiveTaskWorkflowContinuationImpl(this, input);
       }
-      async seedStrandedPlanReviewContinuation(input) {
-        return seedStrandedPlanReviewContinuationImpl(this, input);
+      async seedStrandedPlanReviewContinuation(input, options = {}) {
+        return seedStrandedPlanReviewContinuationImpl(this, input, options);
       }
       async transitionWorkflowWorkItem(id, state, patch = {}, tx) {
         return transitionWorkflowWorkItemImpl(this, id, state, patch, tx);
@@ -104036,7 +104279,11 @@ var init_store = __esm({
       /** PostgreSQL-authoritative audit reader; sync fallback remains for test doubles. */
       async getRunAuditEventsAsync(options = {}) {
         if (this.asyncLayer) {
-          const events = await queryRunAuditEvents(this.asyncLayer.db, options);
+          const events = await queryRunAuditEvents(
+            this.asyncLayer.db,
+            options,
+            this.asyncLayer.projectId
+          );
           return events.map((event) => ({
             ...event,
             taskId: event.taskId ?? void 0,
@@ -107614,7 +107861,9 @@ function rangeWhere(query) {
 async function aggregatePluginActivations(dbOrLayer, query = {}) {
   if ("ping" in dbOrLayer) {
     const layer = dbOrLayer;
-    const conditions = [];
+    const conditions = [projectScopeFor(project_exports.pluginActivations.projectId, layer.projectId)].filter(
+      (condition) => condition !== void 0
+    );
     if (query.from !== void 0) conditions.push(gte(project_exports.pluginActivations.activatedAt, query.from));
     if (query.to !== void 0) conditions.push(lte(project_exports.pluginActivations.activatedAt, query.to));
     const where2 = conditions.length > 0 ? and(...conditions) : void 0;
@@ -107653,6 +107902,7 @@ async function aggregatePluginActivations(dbOrLayer, query = {}) {
 var init_plugin_activation_analytics = __esm({
   "../core/src/plugins/plugin-activation-analytics.ts"() {
     "use strict";
+    init_data_layer();
     init_drizzle_orm();
     init_schema2();
   }
@@ -130650,6 +130900,18 @@ function rowToMessage2(row) {
     createdAt: row.createdAt
   };
 }
+function chatMessageProjectConditions(handle, projectId2) {
+  const messageScope = projectScopeFor(project_exports.chatMessages.projectId, projectId2);
+  const sessionScope = projectScopeFor(project_exports.chatSessions.projectId, projectId2);
+  if (!messageScope || !sessionScope) return [];
+  return [
+    messageScope,
+    exists(handle.select({ id: project_exports.chatSessions.id }).from(project_exports.chatSessions).where(and(
+      eq(project_exports.chatSessions.id, project_exports.chatMessages.sessionId),
+      sessionScope
+    )))
+  ];
+}
 function rowToRoom(row) {
   return {
     id: row.id,
@@ -130821,7 +131083,7 @@ async function replaceChatSessionTags(layer, sessionId, projectId2, tagIds) {
     return attachTags(tx, session);
   });
 }
-async function addChatMessage(handle, message) {
+async function addChatMessage(handle, message, projectId2) {
   const sanitizedAttachments = message.attachments === void 0 ? void 0 : sanitizeJsonbValue(message.attachments);
   const sanitized = {
     ...message,
@@ -130840,15 +131102,24 @@ async function addChatMessage(handle, message) {
     attachments: sanitizedAttachments ?? null,
     createdAt: sanitized.createdAt
   });
-  await handle.update(project_exports.chatSessions).set({ updatedAt: sanitized.createdAt }).where(eq(project_exports.chatSessions.id, sanitized.sessionId));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: sanitized.createdAt }).where(and(
+    eq(project_exports.chatSessions.id, sanitized.sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return sanitized;
 }
-async function getChatMessage(handle, id) {
-  const rows = await handle.select().from(project_exports.chatMessages).where(eq(project_exports.chatMessages.id, id));
+async function getChatMessage(handle, id, projectId2) {
+  const rows = await handle.select().from(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.id, id),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
   return rows[0] ? rowToMessage2(rows[0]) : void 0;
 }
-async function getChatMessages(handle, sessionId, filter2) {
-  const conditions = [eq(project_exports.chatMessages.sessionId, sessionId)];
+async function getChatMessages(handle, sessionId, filter2, projectId2) {
+  const conditions = [
+    eq(project_exports.chatMessages.sessionId, sessionId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ];
   if (filter2?.before) {
     conditions.push(lte(project_exports.chatMessages.createdAt, filter2.before));
   }
@@ -130858,9 +131129,12 @@ async function getChatMessages(handle, sessionId, filter2) {
   const rows = await handle.select().from(project_exports.chatMessages).where(and(...conditions)).orderBy(filter2?.order === "desc" ? desc(orderCol) : asc(orderCol)).limit(limit2).offset(offset);
   return rows.map(rowToMessage2);
 }
-async function getLastMessageForSessions(handle, sessionIds) {
+async function getLastMessageForSessions(handle, sessionIds, projectId2) {
   if (sessionIds.length === 0) return /* @__PURE__ */ new Map();
-  const rows = await handle.select().from(project_exports.chatMessages).where(inArray(project_exports.chatMessages.sessionId, sessionIds)).orderBy(
+  const rows = await handle.select().from(project_exports.chatMessages).where(and(
+    inArray(project_exports.chatMessages.sessionId, sessionIds),
+    ...chatMessageProjectConditions(handle, projectId2)
+  )).orderBy(
     desc(project_exports.chatMessages.createdAt),
     desc(project_exports.chatMessages.id)
   );
@@ -131026,8 +131300,8 @@ async function setInFlightGeneration(handle, id, inFlightGeneration) {
   await handle.update(project_exports.chatSessions).set({ inFlightGeneration: sanitizedInFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
   return getChatSession(handle, id);
 }
-async function addChatMessageAttachment(handle, sessionId, messageId, attachment) {
-  const message = await getChatMessage(handle, messageId);
+async function addChatMessageAttachment(handle, sessionId, messageId, attachment, projectId2) {
+  const message = await getChatMessage(handle, messageId, projectId2);
   if (!message || message.sessionId !== sessionId) {
     throw new Error(`Message ${messageId} not found in session ${sessionId}`);
   }
@@ -131035,25 +131309,35 @@ async function addChatMessageAttachment(handle, sessionId, messageId, attachment
     ...message.attachments ?? [],
     attachment
   ]);
-  await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatMessages.id, messageId));
-  const updated = await getChatMessage(handle, messageId);
+  await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(and(
+    eq(project_exports.chatMessages.id, messageId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  const updated = await getChatMessage(handle, messageId, projectId2);
   if (!updated) throw new Error(`Failed to update message ${messageId}`);
   return updated;
 }
-async function deleteChatMessage(handle, id) {
-  const existing = await getChatMessage(handle, id);
+async function deleteChatMessage(handle, id, projectId2) {
+  const existing = await getChatMessage(handle, id, projectId2);
   if (!existing) return false;
-  await handle.delete(project_exports.chatMessages).where(eq(project_exports.chatMessages.id, id));
-  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatSessions.id, existing.sessionId));
+  await handle.delete(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.id, id),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and(
+    eq(project_exports.chatSessions.id, existing.sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return true;
 }
-async function searchChatSessionsByMessageContent(handle, query, sessionIds) {
+async function searchChatSessionsByMessageContent(handle, query, sessionIds, projectId2) {
   const trimmed = query.trim();
   if (!trimmed || sessionIds.length === 0) return /* @__PURE__ */ new Map();
   const escaped = trimmed.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
   const rows = await handle.select().from(project_exports.chatMessages).where(and(
     inArray(project_exports.chatMessages.sessionId, sessionIds),
-    ilike(project_exports.chatMessages.content, `%${escaped}%`)
+    ilike(project_exports.chatMessages.content, `%${escaped}%`),
+    ...chatMessageProjectConditions(handle, projectId2)
   )).orderBy(
     desc(project_exports.chatMessages.createdAt),
     desc(project_exports.chatMessages.id)
@@ -131067,13 +131351,16 @@ async function searchChatSessionsByMessageContent(handle, query, sessionIds) {
   }
   return result2;
 }
-async function deleteChatMessagesFrom(handle, sessionId, fromMessageId) {
-  const orderedRows = await handle.select().from(project_exports.chatMessages).where(eq(project_exports.chatMessages.sessionId, sessionId)).orderBy(
+async function deleteChatMessagesFrom(handle, sessionId, fromMessageId, projectId2) {
+  const orderedRows = await handle.select().from(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.sessionId, sessionId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  )).orderBy(
     asc(project_exports.chatMessages.createdAt),
     asc(project_exports.chatMessages.id)
   );
   const ordered2 = orderedRows.map(rowToMessage2);
-  const target = await getChatMessage(handle, fromMessageId);
+  const target = await getChatMessage(handle, fromMessageId, projectId2);
   if (!target || target.sessionId !== sessionId) {
     return { deletedIds: [], retained: ordered2 };
   }
@@ -131086,19 +131373,28 @@ async function deleteChatMessagesFrom(handle, sessionId, fromMessageId) {
   if (deletedIds.length === 0) {
     return { deletedIds: [], retained };
   }
-  await handle.delete(project_exports.chatMessages).where(inArray(project_exports.chatMessages.id, deletedIds));
-  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatSessions.id, sessionId));
+  await handle.delete(project_exports.chatMessages).where(and(
+    inArray(project_exports.chatMessages.id, deletedIds),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and(
+    eq(project_exports.chatSessions.id, sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return { deletedIds, retained };
 }
-async function updateChatMessageMetadata(handle, messageId, metadata, options) {
-  const existing = await getChatMessage(handle, messageId);
+async function updateChatMessageMetadata(handle, messageId, metadata, options, projectId2) {
+  const existing = await getChatMessage(handle, messageId, projectId2);
   if (!existing) {
     throw new Error(`Message ${messageId} not found`);
   }
   const merge2 = options?.merge !== false;
   const nextMetadata = metadata === null ? merge2 ? existing.metadata : null : merge2 ? { ...existing.metadata ?? {}, ...metadata } : metadata;
-  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(eq(project_exports.chatMessages.id, messageId));
-  const updated = await getChatMessage(handle, messageId);
+  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(and(
+    eq(project_exports.chatMessages.id, messageId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  const updated = await getChatMessage(handle, messageId, projectId2);
   if (!updated) {
     throw new Error(`Failed to update message ${messageId}`);
   }
@@ -131480,7 +131776,7 @@ var init_chat_store = __esm({
           attachments: input.attachments,
           createdAt: now
         };
-        const created = await addChatMessage(this.asyncLayer.db, message);
+        const created = await addChatMessage(this.asyncLayer.db, message, this.asyncLayer.projectId);
         this.emit("chat:message:added", created);
         return created;
       }
@@ -131488,7 +131784,7 @@ var init_chat_store = __esm({
        * Append a file attachment metadata record to an existing message.
        */
       async addMessageAttachment(sessionId, messageId, attachment) {
-        const updated = await addChatMessageAttachment(this.asyncLayer.db, sessionId, messageId, attachment);
+        const updated = await addChatMessageAttachment(this.asyncLayer.db, sessionId, messageId, attachment, this.asyncLayer.projectId);
         this.emit("chat:message:updated", updated);
         return updated;
       }
@@ -131500,7 +131796,7 @@ var init_chat_store = __esm({
        * @returns Array of messages ordered by createdAt ASC (default) or DESC
        */
       async getMessages(sessionId, filter2) {
-        return getChatMessages(this.asyncLayer.db, sessionId, filter2);
+        return getChatMessages(this.asyncLayer.db, sessionId, filter2, this.asyncLayer.projectId);
       }
       /**
        * Get a message by ID.
@@ -131509,7 +131805,7 @@ var init_chat_store = __esm({
        * @returns The message, or undefined if not found
        */
       async getMessage(id) {
-        return getChatMessage(this.asyncLayer.db, id);
+        return getChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
       }
       /**
        * Get the latest message for each session in the provided list.
@@ -131519,10 +131815,10 @@ var init_chat_store = __esm({
        * @returns Map of sessionId -> latest ChatMessage for that session
        */
       async getLastMessageForSessions(sessionIds) {
-        return getLastMessageForSessions(this.asyncLayer.db, sessionIds);
+        return getLastMessageForSessions(this.asyncLayer.db, sessionIds, this.asyncLayer.projectId);
       }
       async hasMessages(sessionId) {
-        return (await getChatMessages(this.asyncLayer.db, sessionId, { limit: 1 })).length > 0;
+        return (await getChatMessages(this.asyncLayer.db, sessionId, { limit: 1 }, this.asyncLayer.projectId)).length > 0;
       }
       /**
        * Search sessions by message content (not just title/agentId).
@@ -131550,7 +131846,7 @@ var init_chat_store = __esm({
         if (!trimmed || !sessionIds || sessionIds.length === 0) {
           return /* @__PURE__ */ new Map();
         }
-        return searchChatSessionsByMessageContent(this.asyncLayer.db, trimmed, sessionIds);
+        return searchChatSessionsByMessageContent(this.asyncLayer.db, trimmed, sessionIds, this.asyncLayer.projectId);
       }
       /**
        * Delete a message by ID.
@@ -131559,9 +131855,9 @@ var init_chat_store = __esm({
        * @returns true if deleted, false if not found
        */
       async deleteMessage(id) {
-        const existing = await getChatMessage(this.asyncLayer.db, id);
+        const existing = await getChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
         if (!existing) return false;
-        const deleted = await deleteChatMessage(this.asyncLayer.db, id);
+        const deleted = await deleteChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
         if (deleted) {
           this.emit("chat:message:deleted", id);
           const updatedSession = await this.getSession(existing.sessionId);
@@ -131584,7 +131880,7 @@ var init_chat_store = __esm({
        * @returns deletedIds (in ASC order) and retained messages (pre-edit history, ASC order)
        */
       async deleteMessagesFrom(sessionId, fromMessageId) {
-        const result2 = await deleteChatMessagesFrom(this.asyncLayer.db, sessionId, fromMessageId);
+        const result2 = await deleteChatMessagesFrom(this.asyncLayer.db, sessionId, fromMessageId, this.asyncLayer.projectId);
         if (result2.deletedIds.length > 0) {
           for (const id of result2.deletedIds) {
             this.emit("chat:message:deleted", id);
@@ -131602,7 +131898,7 @@ var init_chat_store = __esm({
        * is what lets a later edit rewind losslessly via SessionManager.branch()/resetLeaf().
        */
       async updateMessageMetadata(messageId, metadata, options) {
-        const updated = await updateChatMessageMetadata(this.asyncLayer.db, messageId, metadata, options);
+        const updated = await updateChatMessageMetadata(this.asyncLayer.db, messageId, metadata, options, this.asyncLayer.projectId);
         this.emit("chat:message:updated", updated);
         return updated;
       }
@@ -133038,6 +133334,77 @@ var init_task_timing = __esm({
   }
 });
 
+// ../core/src/task-recommendation-notice.ts
+import { createHash as createHash20 } from "node:crypto";
+function registerTaskRecommendationNoticeMailbox(store, mailbox) {
+  mailboxes2.set(store, mailbox);
+  return () => {
+    if (mailboxes2.get(store) === mailbox) mailboxes2.delete(store);
+  };
+}
+function getTaskRecommendationNoticeMailbox(store) {
+  return mailboxes2.get(store);
+}
+function buildTaskRecommendationNoticeContent(task, recommendations) {
+  const title2 = task.title?.trim();
+  const heading = title2 ? `## Recommendations from ${task.id} \u2014 ${title2}` : `## Recommendations from ${task.id}`;
+  return [
+    heading,
+    "",
+    "These are optional, non-blocking out-of-scope proposals that were **not** executed.",
+    "",
+    ...recommendations.map((recommendation) => `- **${recommendation.title}** \u2014 \`${recommendation.category}\`: ${recommendation.description}`),
+    "",
+    `Open ${task.id}'s **Recommendations** tab to review them. **Create task** files one through normal guarded intake.`
+  ].join("\n");
+}
+function buildTaskRecommendationNoticeIdempotencyKey(taskId, recommendations) {
+  const ids = recommendations.map(({ id }) => id).sort().join("\n");
+  const digest = createHash20("sha256").update(ids, "utf8").digest("hex").slice(0, 16);
+  return `task-recommendation-notice:${taskId}:${digest}`;
+}
+async function notifyOperatorOfTaskRecommendations(store, task, recommendations, settings) {
+  try {
+    if (settings.recommendationMailboxNoticeEnabled === false || !recommendations?.length) return false;
+    const mailbox = mailboxes2.get(store);
+    if (!mailbox) return false;
+    await mailbox.sendMessageOnce(
+      {
+        fromId: "system",
+        fromType: "system",
+        toId: DASHBOARD_USER_ID,
+        toType: "user",
+        type: "system",
+        content: buildTaskRecommendationNoticeContent(task, recommendations),
+        metadata: {
+          kind: "task-recommendation-notice",
+          taskId: task.id,
+          recommendationCount: recommendations.length,
+          recommendationIds: recommendations.map(({ id }) => id),
+          categories: recommendations.map(({ category }) => category)
+        }
+      },
+      buildTaskRecommendationNoticeIdempotencyKey(task.id, recommendations)
+    );
+    return true;
+  } catch (error3) {
+    noticeLog2.warn(
+      `Operator recommendation notice failed for ${task.id}: ${error3 instanceof Error ? error3.message : String(error3)}`
+    );
+    return false;
+  }
+}
+var noticeLog2, mailboxes2;
+var init_task_recommendation_notice = __esm({
+  "../core/src/task-recommendation-notice.ts"() {
+    "use strict";
+    init_logger();
+    init_types();
+    noticeLog2 = createLogger("task-recommendation-notice");
+    mailboxes2 = /* @__PURE__ */ new WeakMap();
+  }
+});
+
 // ../core/src/session-identity-registry.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 import { resolve as resolve24 } from "node:path";
@@ -133887,6 +134254,8 @@ __export(src_exports, {
   buildTaskDeleteNoticeContent: () => buildTaskDeleteNoticeContent,
   buildTaskDeleteNoticeIdempotencyKey: () => buildTaskDeleteNoticeIdempotencyKey,
   buildTaskLineageTrailer: () => buildTaskLineageTrailer,
+  buildTaskRecommendationNoticeContent: () => buildTaskRecommendationNoticeContent,
+  buildTaskRecommendationNoticeIdempotencyKey: () => buildTaskRecommendationNoticeIdempotencyKey,
   buildToolOutputTruncationMarker: () => buildToolOutputTruncationMarker,
   buildTriageHeartbeatGuidance: () => buildTriageHeartbeatGuidance,
   buildTriageMemoryInstructions: () => buildTriageMemoryInstructions,
@@ -134217,6 +134586,7 @@ __export(src_exports, {
   getTaskMergeBlocker: () => getTaskMergeBlocker,
   getTaskMoveDisposer: () => getTaskMoveDisposer,
   getTaskPriorityRank: () => getTaskPriorityRank,
+  getTaskRecommendationNoticeMailbox: () => getTaskRecommendationNoticeMailbox,
   getTemplatesForRole: () => getTemplatesForRole,
   getTotalAgentActiveMs: () => getTotalAgentActiveMs,
   getTrait: () => getTrait,
@@ -134467,6 +134837,7 @@ __export(src_exports, {
   normalizeWorkflowPromptOverrides: () => normalizeWorkflowPromptOverrides,
   normalizeWorkflowReviewFindings: () => normalizeWorkflowReviewFindings,
   notifyOperatorOfNonOperatorDelete: () => notifyOperatorOfNonOperatorDelete,
+  notifyOperatorOfTaskRecommendations: () => notifyOperatorOfTaskRecommendations,
   overseerAdviceSeverityRank: () => overseerAdviceSeverityRank,
   parseAgentManifest: () => parseAgentManifest,
   parseCompanyArchive: () => parseCompanyArchive,
@@ -134576,6 +134947,7 @@ __export(src_exports, {
   registerStepParser: () => registerStepParser,
   registerTaskDeleteNoticeMailbox: () => registerTaskDeleteNoticeMailbox,
   registerTaskMoveDisposer: () => registerTaskMoveDisposer,
+  registerTaskRecommendationNoticeMailbox: () => registerTaskRecommendationNoticeMailbox,
   registerTraitHookImpl: () => registerTraitHookImpl,
   rekeyFallbackProjectPartition: () => rekeyFallbackProjectPartition,
   releaseEmbeddedRuntimeLease: () => releaseEmbeddedRuntimeLease,
@@ -135203,6 +135575,7 @@ var init_src2 = __esm({
     init_task_document_concurrency();
     init_task_delete_attribution();
     init_task_delete_notice();
+    init_task_recommendation_notice();
     init_session_identity_registry();
     init_task_lifecycle_event_retention();
     init_task_lifecycle_consumer_identity();
@@ -136040,7 +136413,7 @@ var init_logger3 = __esm({
 });
 
 // ../engine/src/agents/agent-logger.ts
-import { createHash as createHash20 } from "node:crypto";
+import { createHash as createHash21 } from "node:crypto";
 function truncateToolResultDetail(value2) {
   if (value2.length <= TOOL_RESULT_DETAIL_LIMIT) return value2;
   return `${value2.slice(0, TOOL_RESULT_DETAIL_LIMIT)}${TOOL_RESULT_DETAIL_TRUNCATION_NOTICE}`;
@@ -136129,7 +136502,7 @@ function summarizeToolArgs(name2, args) {
     const json2 = JSON.stringify(args);
     if (!json2 || json2 === "{}" || json2 === "[]") return void 0;
     if (json2.length <= STRUCTURED_ARG_SUMMARY_MAX) return json2;
-    const hash3 = createHash20("sha256").update(json2).digest("hex").slice(0, STRUCTURED_ARG_HASH_HEX_LEN);
+    const hash3 = createHash21("sha256").update(json2).digest("hex").slice(0, STRUCTURED_ARG_HASH_HEX_LEN);
     const suffix = `\u2026#${hash3}`;
     const keep = Math.max(0, STRUCTURED_ARG_SUMMARY_MAX - suffix.length);
     return `${json2.slice(0, keep)}${suffix}`;
@@ -136817,7 +137190,13 @@ var init_gating_classifications = __esm({
       "fn_post_room_message",
       "fn_update_identity",
       "fn_reflect_on_performance",
-      "fn_read_evaluations"
+      /*
+      FNXC:ToolGovernance 2026-08-12-22:11:
+      fn_agent_read_evaluations is a subtree-scoped read. Authorization is enforced by
+      the extension tool's getChainOfCommand boundary, not by this action classifier.
+      */
+      "fn_read_evaluations",
+      "fn_agent_read_evaluations"
     ]);
     COORDINATION_EXEMPT_TOOLS = [
       "read",
@@ -136877,6 +137256,8 @@ var init_gating_classifications = __esm({
       "fn_post_room_message",
       "fn_memory_append",
       "fn_read_evaluations",
+      // FNXC:ToolGovernance 2026-08-12-22:11: The manager read is subtree-authorized in extension.ts; follow-up remains absent so it falls back to task_agent_mutation policy.
+      "fn_agent_read_evaluations",
       "fn_update_identity",
       "fn_reflect_on_performance"
     ];
@@ -136901,7 +137282,7 @@ var init_gating_classifications = __esm({
 });
 
 // ../engine/src/agents/agent-action-gate.ts
-import { createHash as createHash21 } from "node:crypto";
+import { createHash as createHash22 } from "node:crypto";
 function getExemptTools() {
   if (!_exemptTools) {
     _exemptTools = new Set(DEFAULT_EXEMPT_TOOLS);
@@ -136953,7 +137334,7 @@ function evaluateAgentActionGate(params) {
   if (params.toolName === "bash") {
     const command2 = extractShellCommand(args);
     const git7 = classifyGitCommand(command2);
-    resourceId = command2 ? `cmd:${createHash21("sha256").update(command2).digest("hex").slice(0, 16)}` : void 0;
+    resourceId = command2 ? `cmd:${createHash22("sha256").update(command2).digest("hex").slice(0, 16)}` : void 0;
     if (git7?.write) {
       category = "git_write";
       operation = git7.operation;
@@ -140485,11 +140866,11 @@ var init_planning_handoff_recovery = __esm({
 // ../engine/src/plan-review-continuation.ts
 async function seedPreReleasePlanReviewContinuation(store, task, ir2, options = {}) {
   const node = resolvePreReleasePlanReviewNode(ir2);
-  if (!node || node.column !== task.column) return { seeded: false };
+  if (!node || node.column !== task.column) return { seeded: false, reason: "no-pre-release-plan-review" };
   if (isTaskBlockedOnApproval(task)) return { seeded: false, reason: "awaiting-approval" };
   if (task.paused === true || task.userPaused === true) return { seeded: false, reason: "paused" };
   const items = await store.listWorkflowWorkItemsForTask(task.id);
-  const active2 = items.filter((item2) => ACTIVE_WORKFLOW_WORK_ITEM_STATES.includes(item2.state));
+  const active2 = items.filter((item2) => ACTIVE_WORKFLOW_WORK_ITEM_STATES.includes(item2.state) && item2.id !== options.retirePredecessorId);
   if (active2.length > 0) return { seeded: false, reason: "active-continuation" };
   const continuationSequence = items.length;
   const input = {
@@ -140505,6 +140886,9 @@ async function seedPreReleasePlanReviewContinuation(store, task, ir2, options =
     targetColumn: task.column,
     irHash: computeWorkflowIrPin(ir2, node.id).irHash
   };
+  if (options.retirePredecessorId) {
+    return store.seedStrandedPlanReviewContinuation(input, { retirePredecessorId: options.retirePredecessorId });
+  }
   if (options.atomic) return store.seedStrandedPlanReviewContinuation(input);
   const item = await store.replaceActiveTaskWorkflowContinuation(input);
   return { seeded: true, workItemId: item.id };
@@ -140519,7 +140903,7 @@ async function resumeApprovedPlanReviewHandoff(store, task, ir2) {
   if (seeded.seeded) return { resumed: true, reason: "seeded", workItemId: seeded.workItemId };
   return {
     resumed: false,
-    reason: seeded.reason ?? "not-plan-in-place"
+    reason: seeded.reason === void 0 || seeded.reason === "no-pre-release-plan-review" ? "not-plan-in-place" : seeded.reason
   };
 }
 function evaluateStrandedHoldContinuation(input) {
@@ -140557,7 +140941,7 @@ var init_plan_review_continuation = __esm({
 });
 
 // ../engine/src/execution/hold-release.ts
-import { createHash as createHash22 } from "node:crypto";
+import { createHash as createHash23 } from "node:crypto";
 import { readFile as readFile31 } from "node:fs/promises";
 function findColumn2(ir2, columnId) {
   if (ir2.version !== "v2") return void 0;
@@ -140595,9 +140979,9 @@ async function checkAndRecordUnplannedExecutionBlock(store, task, ir2) {
       promptContent = "";
     }
   }
-  const promptMarker = promptContent.length > 0 ? createHash22("sha256").update(promptContent).digest("hex") : "missing";
+  const promptMarker = promptContent.length > 0 ? createHash23("sha256").update(promptContent).digest("hex") : "missing";
   const dependencies = [...task.dependencies ?? []].sort();
-  const episode = createHash22("sha256").update(JSON.stringify({
+  const episode = createHash23("sha256").update(JSON.stringify({
     planReviewNode,
     promptMarker,
     dependencies,
@@ -170717,7 +171101,7 @@ ${getErrorStderr(error3) ?? ""}`;
 });
 
 // ../engine/src/worktree/secrets-env-writer.ts
-import { createHash as createHash23 } from "node:crypto";
+import { createHash as createHash24 } from "node:crypto";
 import { execFile as execFile8 } from "node:child_process";
 import { promises as fs6 } from "node:fs";
 import path2 from "node:path";
@@ -170726,7 +171110,7 @@ function isValidFilename(filename) {
   return !!filename && !filename.includes("/") && !filename.includes("\\") && !filename.includes("..") && !filename.includes("\0") && filename !== FINGERPRINT_FILE;
 }
 function sha2562(content) {
-  return createHash23("sha256").update(Buffer.from(content, "utf8")).digest("hex");
+  return createHash24("sha256").update(Buffer.from(content, "utf8")).digest("hex");
 }
 function quote(value2) {
   return `"${value2.replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("\n", "\\n").replaceAll("\r", "\\r").replaceAll("	", "\\t")}"`;
@@ -178866,32 +179250,36 @@ var init_scheduler = __esm({
             const hierarchy = await missionStore.getMissionWithHierarchy(mission.id);
             if (!hierarchy) continue;
             for (const slice of hierarchy.milestones.flatMap((milestone) => milestone.slices).filter((slice2) => slice2.status === "active")) {
-              const superseded = await missionStore.reconcileSupersededGeneratedFixFeatures(slice.id);
-              fixed += superseded.supersededCount;
-              if (superseded.supersededCount > 0) {
-                const refreshed = await missionStore.getSlice(slice.id);
-                if (refreshed?.status === "complete") {
-                  await this.onSliceComplete(refreshed);
-                  continue;
+              try {
+                const superseded = await missionStore.reconcileSupersededGeneratedFixFeatures(slice.id);
+                fixed += superseded.supersededCount;
+                if (superseded.supersededCount > 0) {
+                  const refreshed = await missionStore.getSlice(slice.id);
+                  if (refreshed?.status === "complete") {
+                    await this.onSliceComplete(refreshed);
+                    continue;
+                  }
                 }
-              }
-              const listFeatures2 = missionStore.listFeatures;
-              const features = listFeatures2 ? await listFeatures2(slice.id) : slice.features;
-              const supersededFeatureIds = new Set(superseded.featureIds ?? []);
-              const autoTriage = mission.autopilotEnabled === true || mission.autoAdvance === true;
-              for (const feature of features) {
-                if (supersededFeatureIds.has(feature.id) || feature.taskId || !autoTriage || feature.status === "blocked") continue;
-                if (feature.status !== "defined" && this.isGeneratedFixFeature(feature)) {
-                  await missionStore.updateFeature(feature.id, { status: "blocked", loopState: "blocked", taskId: void 0 });
+                const listFeatures2 = missionStore.listFeatures;
+                const features = listFeatures2 ? await listFeatures2.call(missionStore, slice.id) : slice.features;
+                const supersededFeatureIds = new Set(superseded.featureIds ?? []);
+                const autoTriage = mission.autopilotEnabled === true || mission.autoAdvance === true;
+                for (const feature of features) {
+                  if (supersededFeatureIds.has(feature.id) || feature.taskId || !autoTriage || feature.status === "blocked") continue;
+                  if (feature.status !== "defined" && this.isGeneratedFixFeature(feature)) {
+                    await missionStore.updateFeature(feature.id, { status: "blocked", loopState: "blocked", taskId: void 0 });
+                    fixed++;
+                    continue;
+                  }
+                  if (feature.status !== "defined" && feature.status !== "triaged" && feature.status !== "in-progress") continue;
+                  const ready = feature.status === "defined" ? feature : await missionStore.updateFeature(feature.id, { status: "defined", loopState: "idle", taskId: void 0 });
+                  if (ready !== feature) fixed++;
+                  const triaged = await missionStore.triageFeature(ready.id);
                   fixed++;
-                  continue;
+                  if (triaged.taskId) await this.emitStrandedFeatureTriageAudit(mission.id, slice.id, triaged.id, triaged.taskId);
                 }
-                if (feature.status !== "defined" && feature.status !== "triaged" && feature.status !== "in-progress") continue;
-                const ready = feature.status === "defined" ? feature : await missionStore.updateFeature(feature.id, { status: "defined", loopState: "idle", taskId: void 0 });
-                if (ready !== feature) fixed++;
-                const triaged = await missionStore.triageFeature(ready.id);
-                fixed++;
-                if (triaged.taskId) await this.emitStrandedFeatureTriageAudit(mission.id, slice.id, triaged.id, triaged.taskId);
+              } catch (error3) {
+                schedulerLog.error(`Error during active mission recovery reconciliation for slice ${slice.id}:`, error3);
               }
             }
           }
@@ -179129,7 +179517,7 @@ var init_mission_feature_sync = __esm({
 // ../engine/src/agent-tools.ts
 import { appendFile as appendFile3, mkdir as mkdir28, readFile as readFile38, readdir as readdir11, realpath as realpath2, stat as stat11, writeFile as writeFile26 } from "node:fs/promises";
 import { existsSync as existsSync53 } from "node:fs";
-import { createHash as createHash24, randomUUID as randomUUID47 } from "node:crypto";
+import { createHash as createHash25, randomUUID as randomUUID47 } from "node:crypto";
 import { tmpdir as tmpdir5 } from "node:os";
 import { extname as extname4, isAbsolute as isAbsolute14, join as join66, relative as relative14, resolve as resolve38, sep as sep10 } from "node:path";
 import { Type as Type2 } from "@earendil-works/pi-ai";
@@ -179173,7 +179561,7 @@ async function readAgentMemoryWorkspaceLongTerm(rootDir, agentId) {
   }
 }
 function qmdAgentMemoryCollectionName2(rootDir, agentId) {
-  const hash3 = createHash24("sha1").update(`${rootDir}:${agentId}`).digest("hex").slice(0, 12);
+  const hash3 = createHash25("sha1").update(`${rootDir}:${agentId}`).digest("hex").slice(0, 12);
   return `fusion-agent-memory-${sanitizeAgentMemoryId(agentId).toLowerCase()}-${hash3}`;
 }
 function buildQmdAgentMemoryCollectionAddArgs(rootDir, agentId) {
@@ -190750,7 +191138,7 @@ var init_agent_heartbeat_error_recovery = __esm({
 
 // ../engine/src/agent-heartbeat.ts
 import { Type as Type3 } from "@earendil-works/pi-ai";
-import { createHash as createHash25 } from "node:crypto";
+import { createHash as createHash26 } from "node:crypto";
 async function resolveHeartbeatReboundColumn(taskStore, taskId) {
   try {
     return resolveReboundTarget(await resolveWorkflowIrForTask(taskStore, taskId)) ?? "todo";
@@ -190905,7 +191293,7 @@ function truncatePrompt(text3, maxChars) {
 ... (truncated, ${text3.length} chars)`;
 }
 function shortContentHash(value2) {
-  return createHash25("sha256").update(value2).digest("hex").slice(0, 8);
+  return createHash26("sha256").update(value2).digest("hex").slice(0, 8);
 }
 function buildIdentitySnapshot(args) {
   const { agent, resolvedInstructions, workspaceMemory } = args;
@@ -198794,7 +199182,7 @@ var init_verification_utils = __esm({
 
 // ../engine/src/merge/merge-dependency-sync.ts
 import { exec as exec25 } from "node:child_process";
-import { createHash as createHash26 } from "node:crypto";
+import { createHash as createHash27 } from "node:crypto";
 import { existsSync as existsSync56, readFileSync as readFileSync18, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join69 } from "node:path";
 import { promisify as promisify35 } from "node:util";
@@ -198821,7 +199209,7 @@ function computeLockfileHash(rootDir) {
     const p2 = join69(rootDir, name2);
     if (existsSync56(p2)) {
       try {
-        return createHash26("sha256").update(readFileSync18(p2)).digest("hex");
+        return createHash27("sha256").update(readFileSync18(p2)).digest("hex");
       } catch {
         return null;
       }
@@ -201363,7 +201751,7 @@ var init_mesh_lease_manager = __esm({
 });
 
 // ../engine/src/merge/merger-integration-worktree.ts
-import { createHash as createHash27 } from "node:crypto";
+import { createHash as createHash28 } from "node:crypto";
 import { exec as exec31, execFile as execFile22 } from "node:child_process";
 import { promisify as promisify45 } from "node:util";
 function quoteAutostashArg(value2) {
@@ -201486,7 +201874,7 @@ async function gitDirtyFingerprintLocal(rootDir) {
       )
     ]);
     if (!diffOut && !statusOut) return "";
-    return createHash27("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
+    return createHash28("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
   } catch {
     return "";
   }
@@ -202472,7 +202860,7 @@ import { execSync as execSync5, exec as exec33 } from "node:child_process";
 import * as childProcess4 from "node:child_process";
 import { promisify as promisify48 } from "node:util";
 import { existsSync as existsSync59, readFileSync as readFileSync21, writeFileSync as writeFileSync8, unlinkSync as unlinkSync3, renameSync as renameSync4 } from "node:fs";
-import { createHash as createHash28 } from "node:crypto";
+import { createHash as createHash29 } from "node:crypto";
 import { join as join73, resolve as resolve44 } from "node:path";
 import { hostname as hostname2 } from "node:os";
 import { Type as Type4 } from "typebox";
@@ -202720,7 +203108,7 @@ async function gitDirtyFingerprint(rootDir) {
       )
     ]);
     if (!diffOut && !statusOut) return "";
-    return createHash28("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
+    return createHash29("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
   } catch {
     return "";
   }
@@ -225143,7 +225531,7 @@ You are ${assignedAgent.name}${assignedAgent.title?.trim() ? `, ${assignedAgent.
                 }
                 return;
               }
-              const duplicateReport = { outcome: "parked" };
+              const duplicateReport = { outcome: "parked", planningWorkItemId };
               if (await this.tryFinalizeExplicitDuplicateMarker(task, written, settings, {
                 isReplan,
                 feedback
@@ -225162,6 +225550,7 @@ You are ${assignedAgent.name}${assignedAgent.title?.trim() ? `, ${assignedAgent.
                 isReplan,
                 feedback
               });
+              finalizeReport.planningWorkItemId = planningWorkItemId;
               this.options.onSpecifyComplete?.(task, finalizeReport);
             } finally {
               this.activeSessions.delete(task.id);
@@ -240733,6 +241122,38 @@ var init_execution_block_classifier = __esm({
   }
 });
 
+// ../engine/src/executor/completion-recommendation-notice.ts
+function dispatchAcceptedCompletionRecommendationNotice(args) {
+  if (!args.recommendations?.length) return;
+  const pending = (async () => {
+    const settings = args.settings ?? await args.store.getSettings();
+    const task = await args.store.getTask(args.taskId);
+    if (!task || task.deletedAt) return;
+    await notifyOperatorOfTaskRecommendations(
+      args.store,
+      { id: args.taskId, title: args.taskTitle ?? task.title },
+      args.recommendations,
+      settings
+    );
+  })();
+  pendingNotices.add(pending);
+  void pending.catch((error3) => {
+    args.log?.warn(
+      `Failed to dispatch recommendation mailbox notice for ${args.taskId}: ${error3 instanceof Error ? error3.message : String(error3)}`
+    );
+  }).finally(() => {
+    pendingNotices.delete(pending);
+  });
+}
+var pendingNotices;
+var init_completion_recommendation_notice = __esm({
+  "../engine/src/executor/completion-recommendation-notice.ts"() {
+    "use strict";
+    init_src2();
+    pendingNotices = /* @__PURE__ */ new Set();
+  }
+});
+
 // ../engine/src/executor/create-task-done-tool.ts
 import { Type as Type9 } from "@earendil-works/pi-ai";
 function createTaskDoneTool(deps, taskId, worktreePath, promptContent, codeReviewVerdicts, onDone, audit) {
@@ -241069,6 +241490,16 @@ ${rerunSuffix}`
         bulkCompletionRefusalAt: null
       });
       await store.logEntry(taskId, "Task marked done by agent", void 0, deps.getRunContextFor(taskId));
+      if (completionRecommendations !== void 0) {
+        dispatchAcceptedCompletionRecommendationNotice({
+          store,
+          taskId,
+          taskTitle: task.title,
+          recommendations: completionRecommendations,
+          settings,
+          log: executorLog
+        });
+      }
       const latestTask = await store.getTask(taskId);
       let latestColumn = latestTask.column;
       if (latestColumn === await resolveReboundColumnFor(store, taskId)) {
@@ -241107,6 +241538,7 @@ var init_create_task_done_tool = __esm({
     init_completion_predicates();
     init_task_done_refusal_handler();
     init_validate_completion_recommendations();
+    init_completion_recommendation_notice();
   }
 });
 
@@ -252433,6 +252865,16 @@ ${rerunSuffix}` });
     if (latestColumn === await resolveWipTargetForTask(deps.store, task.id) && !hardPauseActive && beforeWatchdog && !beforeWatchdog.deletedAt && !(rejectIfPaused && (beforeWatchdog.paused || beforeWatchdog.userPaused))) {
       deps.scheduleCompletedTaskWatchdog(task.id, "fn_task_done");
     }
+    if (recommendations !== void 0) {
+      dispatchAcceptedCompletionRecommendationNotice({
+        store: deps.store,
+        taskId: task.id,
+        taskTitle: task.title,
+        recommendations,
+        settings,
+        log: executorLog
+      });
+    }
     return { completed: true, hardPauseActive };
   } catch (error3) {
     await restoreNoCommitsExpected();
@@ -252491,6 +252933,7 @@ var init_plan_review_no_op = __esm({
     init_src2();
     init_logger3();
     init_lifecycle_columns();
+    init_completion_recommendation_notice();
   }
 });
 
@@ -255999,14 +256442,14 @@ ${stdout.trim()}`);
 
 // ../engine/src/missions/mission-execution-loop.ts
 import { EventEmitter as EventEmitter26 } from "node:events";
-import { createHash as createHash29 } from "node:crypto";
+import { createHash as createHash30 } from "node:crypto";
 import { exec as exec56 } from "node:child_process";
 import { promisify as promisify74 } from "node:util";
 function quoteShellArg7(value2) {
   return `'${value2.replace(/'/g, `'\\''`)}'`;
 }
 function fingerprintMissionValidationInput(landedSha, provider, modelId, systemPrompt, userPrompt) {
-  return createHash29("sha256").update(Buffer.from(JSON.stringify(["mission-validation-input-v1", landedSha, provider, modelId, systemPrompt, userPrompt]), "utf8")).digest("hex");
+  return createHash30("sha256").update(Buffer.from(JSON.stringify(["mission-validation-input-v1", landedSha, provider, modelId, systemPrompt, userPrompt]), "utf8")).digest("hex");
 }
 var execAsync53, loopLog, VALIDATION_TIMEOUT_MS, MAX_VALIDATION_RESPONSE_BYTES, MAX_VALIDATION_JSON_CANDIDATES, VALIDATION_FAILURE_BUDGET_PER_FINGERPRINT, MissionExecutionLoop;
 var init_mission_execution_loop = __esm({
@@ -267545,9 +267988,9 @@ var init_routine_scheduler = __esm({
 });
 
 // ../engine/src/healing/stuck-task-detector.ts
-import { createHash as createHash30 } from "node:crypto";
+import { createHash as createHash31 } from "node:crypto";
 function hashToolDetail(detail) {
-  return createHash30("sha256").update(detail).digest("hex").slice(0, TOOL_DETAIL_HASH_HEX_LEN);
+  return createHash31("sha256").update(detail).digest("hex").slice(0, TOOL_DETAIL_HASH_HEX_LEN);
 }
 function buildToolFingerprint(toolName, toolDetail) {
   const name2 = toolName.trim().toLowerCase() || "tool";
@@ -271125,7 +271568,7 @@ var init_node_dispatch_validation = __esm({
 });
 
 // ../engine/src/runtimes/in-process-runtime.ts
-import { createHash as createHash31 } from "node:crypto";
+import { createHash as createHash32 } from "node:crypto";
 import { EventEmitter as EventEmitter27 } from "node:events";
 import { setImmediate as setImmediateCb4 } from "node:timers";
 function createDiscoveryPluginLoaderOptions(scopedStore) {
@@ -271216,11 +271659,46 @@ async function reactToSpecificationComplete(deps) {
     return;
   }
   deps.log(`Specified ${deps.taskId} \u2192 todo`);
-  const live = await deps.getTask(deps.taskId);
-  if (!live || live.paused || live.userPaused) return;
-  const ir2 = await deps.resolveIr(live.id);
-  await deps.seed(live, ir2);
-  deps.kick();
+  const sleep10 = deps.sleep ?? ((ms2) => new Promise((resolve110) => setTimeout(resolve110, ms2)));
+  const QUIET_PARK_REASONS = /* @__PURE__ */ new Set([
+    "no-pre-release-plan-review",
+    "awaiting-approval",
+    "paused",
+    "plan-review-passed"
+  ]);
+  const RETRY_DELAYS_MS2 = [1e3, 5e3];
+  for (let attempt = 0; ; attempt++) {
+    let failure = null;
+    try {
+      const live = await deps.getTask(deps.taskId);
+      if (!live || live.paused || live.userPaused) return;
+      if (live.status === "needs-replan") {
+        deps.log(`Plan Review handoff for ${deps.taskId} not armed (needs-replan)`);
+        return;
+      }
+      const ir2 = await deps.resolveIr(live.id);
+      const result2 = await deps.seed(live, ir2);
+      if (result2.seeded) {
+        deps.kick();
+        return;
+      }
+      if (result2.reason && QUIET_PARK_REASONS.has(result2.reason)) {
+        deps.log(`Plan Review handoff for ${deps.taskId} not armed (${result2.reason})`);
+        return;
+      }
+      failure = result2.reason ?? "not-seeded";
+    } catch (error3) {
+      failure = error3 instanceof Error ? error3.message : String(error3);
+    }
+    if (attempt >= RETRY_DELAYS_MS2.length) {
+      deps.warn(
+        `Plan Review handoff for ${deps.taskId} failed after ${attempt + 1} attempts (${failure}) \u2014 stranded-continuation self-healing will recover it`
+      );
+      return;
+    }
+    deps.warn(`Plan Review handoff for ${deps.taskId} did not seed (${failure}) \u2014 retrying`);
+    await sleep10(RETRY_DELAYS_MS2[attempt]);
+  }
 }
 async function drainDuePlanningContinuations(deps) {
   const items = await deps.listDue();
@@ -271355,7 +271833,7 @@ function stableNotificationJson(value2) {
   return `{${fields.join(",")}}`;
 }
 function buildCliAgentNotificationDedupeKey(input) {
-  const notificationFingerprint = createHash31("sha256").update(stableNotificationJson(input.info.notification ?? null)).digest("hex").slice(0, 16);
+  const notificationFingerprint = createHash32("sha256").update(stableNotificationJson(input.info.notification ?? null)).digest("hex").slice(0, 16);
   const waitingEpoch = input.session?.updatedAt ?? "unknown-waiting-epoch";
   return [
     "cli-agent",
@@ -271510,6 +271988,8 @@ var init_in_process_runtime = __esm({
       messageStore;
       /** FNXC:TaskDeleteNotice 2026-07-26-16:10: identity-guarded teardown for the delete-notice mailbox seam. */
       unregisterTaskDeleteNoticeMailbox;
+      /** FNXC:TaskRecommendations 2026-08-13-03:56: identity-guarded teardown for the store-scoped recommendation notice seam. */
+      unregisterTaskRecommendationNoticeMailbox;
       chatStore;
       detachAgentLinkSync;
       /**
@@ -271568,7 +272048,8 @@ var init_in_process_runtime = __esm({
             createTaskStoreForBackend: createTaskStoreForBackend2,
             buildConsumerId: buildConsumerId2,
             createProjectScopedPluginMcpProvider: createProjectScopedPluginMcpProvider2,
-            registerTaskDeleteNoticeMailbox: registerTaskDeleteNoticeMailbox2
+            registerTaskDeleteNoticeMailbox: registerTaskDeleteNoticeMailbox2,
+            registerTaskRecommendationNoticeMailbox: registerTaskRecommendationNoticeMailbox2
           } = await Promise.resolve().then(() => (init_src2(), src_exports));
           if (this.config.externalTaskStore) {
             this.taskStore = this.config.externalTaskStore;
@@ -271627,6 +272108,10 @@ var init_in_process_runtime = __esm({
             this.taskStore,
             this.messageStore
           );
+          this.unregisterTaskRecommendationNoticeMailbox = registerTaskRecommendationNoticeMailbox2(
+            this.taskStore,
+            this.messageStore
+          );
           await yieldEventLoop4();
           const pluginLayer = this.taskStore.getAsyncLayer();
           if (!pluginLayer) {
@@ -272118,9 +272603,19 @@ var init_in_process_runtime = __esm({
                   outcome: report2.outcome,
                   getTask: (id) => Promise.resolve(this.taskStore.getTask(id)),
                   resolveIr: (id) => resolveWorkflowIrForTask(this.taskStore, id),
-                  seed: (task, ir2) => seedPreReleasePlanReviewContinuation(this.taskStore, task, ir2),
+                  /*
+                  FNXC:PlanningHandoffAtomicity 2026-08-13-03:49:
+                  The report carries the planning session's own durable work item id so the
+                  seeder can retire that exact predecessor row atomically with the successor
+                  install. Without it the seeder raced triage's finally-block terminal
+                  transition and bailed on its own caller (529 stranded cards in 18 days).
+                  */
+                  seed: (task, ir2) => seedPreReleasePlanReviewContinuation(this.taskStore, task, ir2, {
+                    retirePredecessorId: report2.planningWorkItemId
+                  }),
                   kick: () => this.kickWorkflowContinuationProcessor(),
-                  log: (message) => runtimeLog.log(message)
+                  log: (message) => runtimeLog.log(message),
+                  warn: (message) => runtimeLog.warn(message)
                 }).catch((error3) => {
                   runtimeLog.error(`Failed to start Todo plan review for ${t.id}:`, error3);
                 });
@@ -272408,6 +272903,8 @@ var init_in_process_runtime = __esm({
         this.backendShutdown = void 0;
         this.unregisterTaskDeleteNoticeMailbox?.();
         this.unregisterTaskDeleteNoticeMailbox = void 0;
+        this.unregisterTaskRecommendationNoticeMailbox?.();
+        this.unregisterTaskRecommendationNoticeMailbox = void 0;
         let stopError;
         try {
           if (this.workflowContinuationTimer) {
@@ -280201,9 +280698,9 @@ import { access as access10, unlink as unlink11, writeFile as writeFile33 } from
 import net2 from "node:net";
 import { platform as platform3, tmpdir as tmpdir12 } from "node:os";
 import { join as join91 } from "node:path";
-import { createHash as createHash32 } from "node:crypto";
+import { createHash as createHash33 } from "node:crypto";
 function projectHash(projectId2) {
-  return createHash32("sha1").update(projectId2).digest("hex").slice(0, 16);
+  return createHash33("sha1").update(projectId2).digest("hex").slice(0, 16);
 }
 function computeEngineSocketPath(projectId2) {
   const hash3 = projectHash(projectId2);
@@ -293422,6 +293919,13 @@ function sseDebug(message) {
   if (!isSseDebugEnabled()) return;
   sseLog.debug(message);
 }
+function resolveAgentActivityPollMs() {
+  const raw = process.env.FUSION_AGENT_ACTIVITY_POLL_MS?.trim();
+  if (!raw) return 2e3;
+  const parsed = Number(raw);
+  if (!Number.isFinite(parsed) || parsed <= 0) return 2e3;
+  return Math.max(10, Math.floor(parsed));
+}
 function normalizeSSEClientId(value2) {
   const raw = Array.isArray(value2) ? value2[0] : value2;
   if (typeof raw !== "string") return void 0;
@@ -293729,7 +294233,7 @@ data: ${JSON.stringify(payload)}
       }
       void drainAgentActivity();
     };
-    const agentActivityPoll = setInterval(onAgentActivityNudge, 2e3);
+    const agentActivityPoll = setInterval(onAgentActivityNudge, resolveAgentActivityPollMs());
     agentActivityPoll.unref?.();
     const onCreated = (task) => {
       send(`event: task:created
@@ -300006,9 +300510,9 @@ __export(import_translate_service_exports, {
   selectEligibleItems: () => selectEligibleItems,
   translateImportItems: () => translateImportItems
 });
-import { createHash as createHash33 } from "node:crypto";
+import { createHash as createHash34 } from "node:crypto";
 function hashSourceContent(title2, body) {
-  return createHash33("sha256").update(`${title2}\0${body}`).digest("hex");
+  return createHash34("sha256").update(`${title2}\0${body}`).digest("hex");
 }
 function resolveTargetLocale(settingsLocale, requestLocale, globalLanguage) {
   if (isLocale(settingsLocale)) return settingsLocale;
@@ -307010,7 +307514,7 @@ var init_auth_middleware = __esm({
 });
 
 // ../dashboard/src/routes/register-task-workflow-routes.ts
-import { createHash as createHash34 } from "node:crypto";
+import { createHash as createHash35 } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { readFile as readFile53, stat as stat13 } from "node:fs/promises";
 import { join as join96 } from "node:path";
@@ -307416,7 +307920,7 @@ function buildWorkflowReviewItemId(task, result2, findingId, resolution) {
     findingId,
     resolution
   });
-  return `workflow-review-${createHash34("sha256").update(identity).digest("hex").slice(0, 24)}`;
+  return `workflow-review-${createHash35("sha256").update(identity).digest("hex").slice(0, 24)}`;
 }
 async function buildWorkflowReviewItems(task, store) {
   const declaredTopLevelReviewResultSources = await getDeclaredTopLevelReviewResultSources(task, store);
@@ -307865,6 +308369,32 @@ function registerTaskWorkflowRoutes(ctx, deps) {
       rethrowAsApiError8(err);
     }
   });
+  router.get("/tasks/recommendations", async (req, res) => {
+    try {
+      const { store: scopedStore } = await getProjectContext2(req);
+      const parsePageNumber = (value2, name2) => {
+        if (value2 === void 0) return void 0;
+        if (typeof value2 !== "string" || value2.trim() === "" || !Number.isInteger(Number(value2)) || Number(value2) < 0) {
+          throw badRequest(`${name2} must be a non-negative integer`);
+        }
+        return Number(value2);
+      };
+      const requestedLimit = parsePageNumber(req.query.limit, "limit");
+      const offset = parsePageNumber(req.query.offset, "offset");
+      if (requestedLimit === 0) throw badRequest("limit must be a positive integer");
+      const limit2 = requestedLimit === void 0 ? void 0 : Math.min(200, requestedLimit);
+      let completeColumns;
+      try {
+        completeColumns = await resolveProjectColumnsForRoles(scopedStore, ["complete"]);
+      } catch {
+        completeColumns = /* @__PURE__ */ new Set(["done"]);
+      }
+      res.json(await scopedStore.listTaskRecommendations({ completeColumns, limit: limit2, offset }));
+    } catch (err) {
+      if (err instanceof ApiError) throw err;
+      rethrowAsApiError8(err);
+    }
+  });
   router.post("/tasks/duplicate-check", async (req, res) => {
     try {
       const { store: scopedStore } = await getProjectContext2(req);
@@ -326179,6 +326709,7 @@ function registerMessagingScriptRoutes(ctx) {
         limit: parseInt(req.query.limit) || 20,
         offset: parseInt(req.query.offset) || 0,
         read: req.query.unreadOnly === "true" ? false : void 0,
+        archived: req.query.archived === "true",
         type: req.query.type
       };
       const messages3 = await msgStore.getInbox(DASHBOARD_USER_ID, "user", filter2);
@@ -326197,6 +326728,7 @@ function registerMessagingScriptRoutes(ctx) {
       const filter2 = {
         limit: parseInt(req.query.limit) || 20,
         offset: parseInt(req.query.offset) || 0,
+        archived: req.query.archived === "true",
         type: req.query.type
       };
       const messages3 = await msgStore.getOutbox(DASHBOARD_USER_ID, "user", filter2);
@@ -326313,7 +326845,8 @@ function registerMessagingScriptRoutes(ctx) {
       const msgStore = await getMessageStore(req);
       const messages3 = await msgStore.getConversation(
         { id: DASHBOARD_USER_ID, type: "user" },
-        { id: participantId, type: participantType }
+        { id: participantId, type: participantType },
+        { archived: req.query.archived === "true" }
       );
       res.json(messages3);
     } catch (err) {
@@ -326405,6 +326938,26 @@ function registerMessagingScriptRoutes(ctx) {
       rethrowAsApiError8(err);
     }
   });
+  router.post("/messages/:id/archive", async (req, res) => {
+    try {
+      const message = await (await getMessageStore(req)).archiveMessage(req.params.id);
+      res.json(message);
+    } catch (err) {
+      if (err instanceof ApiError) throw err;
+      if ((err instanceof Error ? err.message : String(err)).includes("not found")) throw notFound(err instanceof Error ? err.message : String(err));
+      rethrowAsApiError8(err);
+    }
+  });
+  router.post("/messages/:id/unarchive", async (req, res) => {
+    try {
+      const message = await (await getMessageStore(req)).unarchiveMessage(req.params.id);
+      res.json(message);
+    } catch (err) {
+      if (err instanceof ApiError) throw err;
+      if ((err instanceof Error ? err.message : String(err)).includes("not found")) throw notFound(err instanceof Error ? err.message : String(err));
+      rethrowAsApiError8(err);
+    }
+  });
   router.post("/messages/:id/read", async (req, res) => {
     try {
       const msgStore = await getMessageStore(req);
@@ -326438,7 +326991,7 @@ function registerMessagingScriptRoutes(ctx) {
   router.get("/agents/mailbox/all", async (req, res) => {
     try {
       const msgStore = await getMessageStore(req);
-      const messages3 = await msgStore.getAllAgentToAgentMessages();
+      const messages3 = await msgStore.getAllAgentToAgentMessages({ archived: req.query.archived === "true" });
       const unreadCount = await msgStore.getUnreadAgentToAgentCount();
       res.json({ messages: messages3, total: messages3.length, unreadCount });
     } catch (err) {
@@ -326453,8 +327006,9 @@ function registerMessagingScriptRoutes(ctx) {
       const msgStore = await getMessageStore(req);
       const agentId = req.params.id;
       const mailbox = await msgStore.getMailbox(agentId, "agent");
-      const inbox = await msgStore.getInbox(agentId, "agent");
-      const outbox = await msgStore.getOutbox(agentId, "agent");
+      const archived = req.query.archived === "true";
+      const inbox = await msgStore.getInbox(agentId, "agent", { archived });
+      const outbox = await msgStore.getOutbox(agentId, "agent", { archived });
       res.json({ ...mailbox, messages: inbox, inbox, outbox });
     } catch (err) {
       if (err instanceof ApiError) {
@@ -357028,8 +357582,8 @@ var init_register_settings_sync_routes = __esm({
             exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
             version: 1
           };
-          const { createHash: createHash38 } = await import("node:crypto");
-          const checksum = createHash38("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
+          const { createHash: createHash39 } = await import("node:crypto");
+          const checksum = createHash39("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
           const localPeerInfo = await central.getLocalPeerInfo();
           await fetchFromRemoteNode(node, "/api/settings/sync-receive", {
             method: "POST",
@@ -357100,7 +357654,7 @@ var init_register_settings_sync_routes = __esm({
             });
             return;
           }
-          const { createHash: createHash38 } = await import("node:crypto");
+          const { createHash: createHash39 } = await import("node:crypto");
           const exportedAt = (/* @__PURE__ */ new Date()).toISOString();
           const payloadWithoutChecksum = {
             global: remoteSettings.global,
@@ -357109,7 +357663,7 @@ var init_register_settings_sync_routes = __esm({
             exportedAt,
             version: 1
           };
-          const checksum = createHash38("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
+          const checksum = createHash39("sha256").update(JSON.stringify(payloadWithoutChecksum)).digest("hex");
           const result2 = await central.applyRemoteSettings({
             ...payloadWithoutChecksum,
             checksum
@@ -383863,7 +384417,7 @@ var init_report_scrub = __esm({
 });
 
 // ../dashboard/src/report-pipeline.ts
-import { createHash as createHash35 } from "node:crypto";
+import { createHash as createHash36 } from "node:crypto";
 function resolveReportMode(actionType, settings) {
   return settings.reportModeByAction?.[actionType] ?? settings.reportMode ?? "draft-review";
 }
@@ -383979,7 +384533,7 @@ async function embedScreenshot(args) {
   try {
     const extension = EXT_BY_MIME[attachment.mimeType];
     if (!extension) return args.report;
-    const safeId2 = createHash35("sha256").update(`${args.report.sessionToken ?? ""}:${attachment.artifactId}`).digest("hex").slice(0, 32);
+    const safeId2 = createHash36("sha256").update(`${args.report.sessionToken ?? ""}:${attachment.artifactId}`).digest("hex").slice(0, 32);
     const path14 = `.fusion-reports/${safeId2}/screenshot.${extension}`;
     const uploaded = await args.client.uploadImageAsset({ owner: args.owner, repo: args.repo, path: path14, contentBase64: Buffer.from(attachment.bytes).toString("base64"), message: "chore: add Fusion report screenshot", mimeType: attachment.mimeType });
     const alt = markdownEscapeImageAlt(scrubReportText(attachment.filename, args.scrubContext) || "Report screenshot");
@@ -387093,7 +387647,7 @@ var init_types6 = __esm({
 });
 
 // ../dashboard/src/stt/model-manager.ts
-import { createHash as createHash36, randomUUID as randomUUID68 } from "node:crypto";
+import { createHash as createHash37, randomUUID as randomUUID68 } from "node:crypto";
 import { mkdir as mkdir40, open as open4, readFile as readFile63, readdir as readdir16, rename as rename12, rm as rm24, stat as stat18, writeFile as writeFile39 } from "node:fs/promises";
 import { join as join125, relative as relative26, resolve as resolve75, sep as sep20 } from "node:path";
 function parseSafeTarListing(listing) {
@@ -387182,7 +387736,7 @@ function createVoiceModelManager(options = {}) {
         if (!response.ok || !response.body) throw Object.assign(new Error("download failed"), { voiceReason: "network" });
         if (!current(g2, signal)) return state;
         const total = Number(response.headers.get("content-length")) || void 0;
-        const hash3 = createHash36("sha256");
+        const hash3 = createHash37("sha256");
         let bytes = 0;
         for await (const chunk of response.body) {
           if (!current(g2, signal)) return state;
@@ -400841,7 +401395,7 @@ data: ${JSON.stringify({ type: event.type, data: event.data })}
     const endIso = new Date(nowMs).toISOString();
     const auditFilter = { startTime: startIso, endTime: endIso, limit: 5e4 };
     const asyncLayer = scopedStore.getAsyncLayer();
-    const runAuditEventsPromise = asyncLayer ? queryRunAuditEvents(asyncLayer.db, auditFilter).then((events) => events.map((event) => ({
+    const runAuditEventsPromise = asyncLayer ? queryRunAuditEvents(asyncLayer.db, auditFilter, asyncLayer.projectId).then((events) => events.map((event) => ({
       ...event,
       domain: event.domain,
       mutationType: event.mutationType,
@@ -402428,7 +402982,7 @@ var init_extension = __esm({
 });
 
 // src/commands/task-lifecycle.ts
-import { createHash as createHash37 } from "node:crypto";
+import { createHash as createHash38 } from "node:crypto";
 import { exec as exec63 } from "node:child_process";
 import * as childProcess5 from "node:child_process";
 import { mkdir as mkdir43, realpath as realpath7, rm as rm25 } from "node:fs/promises";
@@ -402601,7 +403155,7 @@ async function refreshAutomatedPrHead(input) {
     await mkdir43(refreshWorktreesDir, { recursive: true });
     temporary = join135(
       refreshWorktreesDir,
-      `pr-refresh-${createHash37("sha256").update(input.headBranch).digest("hex").slice(0, 16)}`
+      `pr-refresh-${createHash38("sha256").update(input.headBranch).digest("hex").slice(0, 16)}`
     );
     const reservationDir = join135(root, ".fusion", "pr-refresh-reservations");
     await mkdir43(reservationDir, { recursive: true });