@runfusion/fusion 0.76.0-beta.1 → 0.76.0-beta.3

package/dist/child-process-worker.js

@@ -2145,6 +2145,8 @@ var init_settings_schema = __esm({
     DEFAULT_PROJECT_SETTINGS = {
       // FNXC:TaskRecommendations 2026-08-08-05:02: completion follows-ups stay bounded by default; 0 disables writing them.
       maxRecommendationsPerTask: 3,
+      // FNXC:TaskRecommendations 2026-08-13-03:56: surface completed-task proposals by default; operators can suppress the notice without suppressing capture.
+      recommendationMailboxNoticeEnabled: true,
       globalPause: false,
       globalPauseReason: void 0,
       defaultWorkflowId: void 0,
@@ -21717,9 +21719,14 @@ var init_project = __esm({
       // now keyed per-project on `project_id` (the effective PK). `id` is retained
       // for column-shape parity (always 1) but is no longer the PK and no longer
       // CHECK-constrained. Single-project / SQLite-parity callers leave project_id
-      // at its '' default (one row), preserving the pre-isolation behavior.
+      // through the database ownership trigger, preserving the pre-isolation behavior.
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 owns config's project_id default and leaves its catalog PK as (project_id).
+      Drizzle emits DEFAULT while the database GUC/trigger selects the effective ownership partition.
+      */
       id: integer("id").default(1),
-      projectId: text("project_id").notNull().default("").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`).primaryKey(),
       nextId: integer("next_id").default(1),
       nextWorkflowStepId: integer("next_workflow_step_id").default(1),
       // FNXC:SqliteFinalRemoval 2026-06-28:
@@ -22113,9 +22120,13 @@ var init_project = __esm({
     automations = projectSchema.table("automations", {
       /*
        * FNXC:AutomationIsolation 2026-07-13-22:37:
-       * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row. The empty default preserves an explicit partition for legacy and project-agnostic callers until startup stamps migrated rows.
+       * Automations are partitioned by the AsyncDataLayer's project ID because embedded PostgreSQL consolidates the per-project SQLite files into one table. The composite key deliberately permits the same automation ID in two projects without allowing either project's CRUD or cron-claim path to address the other row.
+       *
+       * FNXC:MultiProjectIsolation 2026-08-12-15:43:
+       * Migration 0006 owns the default through the database GUC/trigger; Drizzle emits DEFAULT
+       * without replacing the physical legacy fallback or the fail-closed bound writer contract.
        */
-      projectId: text("project_id").notNull().default(""),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       id: text("id").notNull(),
       name: text("name").notNull(),
       description: text("description"),
@@ -22414,7 +22425,8 @@ var init_project = __esm({
       index("idxTaskDocumentsTaskId").on(t.taskId)
     ]);
     artifacts = projectSchema.table("artifacts", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       type: text("type").notNull(),
       title: text("title").notNull(),
       description: text("description"),
@@ -22429,7 +22441,8 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
-      foreignKey({ columns: [t.taskId], foreignColumns: [tasks.id] }).onDelete("cascade"),
+      primaryKey({ columns: [t.projectId, t.id] }),
+      foreignKey({ name: "artifacts_task_id_fkey", columns: [t.projectId, t.taskId], foreignColumns: [tasks.projectId, tasks.id] }).onDelete("cascade"),
       index("idxArtifactsTaskId").on(t.taskId),
       index("idxArtifactsAuthorId").on(t.authorId),
       index("idxArtifactsType").on(t.type),
@@ -22619,7 +22632,8 @@ var init_project = __esm({
       index("idxEvalRunEventsRunIdSeq").on(t.runId, t.seq)
     ]);
     secrets = projectSchema.table("secrets", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       key: text("key").notNull(),
       valueCiphertext: bytea("value_ciphertext").notNull(),
       nonce: bytea("nonce").notNull(),
@@ -22632,7 +22646,8 @@ var init_project = __esm({
       lastReadAt: text("last_read_at"),
       lastReadBy: text("last_read_by")
     }, (t) => [
-      unique("secrets_key_unique").on(t.key),
+      primaryKey({ columns: [t.projectId, t.id] }),
+      unique("secrets_key_unique").on(t.projectId, t.key),
       check("secrets_access_policy_check", sql`${t.accessPolicy} IN ('auto', 'prompt', 'deny')`),
       check("secrets_env_exportable_check", sql`${t.envExportable} IN (0, 1)`)
     ]);
@@ -22674,10 +22689,11 @@ var init_project = __esm({
       updatedAt: text("updated_at").notNull()
     }, (t) => [primaryKey({ columns: [t.projectId, t.id] })]);
     branchGroups = projectSchema.table("branch_groups", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       sourceType: text("source_type").notNull(),
       sourceId: text("source_id").notNull(),
-      branchName: text("branch_name").notNull().unique(),
+      branchName: text("branch_name").notNull(),
       worktreePath: text("worktree_path"),
       autoMerge: integer("auto_merge").notNull().default(0),
       prState: text("pr_state").notNull().default("none"),
@@ -22693,6 +22709,8 @@ var init_project = __esm({
       updatedAt: bigint("updated_at", { mode: "number" }).notNull(),
       closedAt: bigint("closed_at", { mode: "number" })
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
+      unique("branch_groups_branch_name_key").on(t.projectId, t.branchName),
       check("branch_groups_source_type_check", sql`${t.sourceType} IN ('mission','planning','new-task')`),
       check("branch_groups_pr_state_check", sql`${t.prState} IN ('none','open','merged','closed')`),
       check("branch_groups_status_check", sql`${t.status} IN ('open','finalized','abandoned')`),
@@ -23094,12 +23112,14 @@ var init_project = __esm({
       index("idxUsageEventsKindTs").on(t.kind, t.ts)
     ]);
     pluginActivations = projectSchema.table("plugin_activations", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
       pluginId: text("plugin_id").notNull(),
       source: text("source").notNull(),
       pluginVersion: text("plugin_version"),
       activatedAt: text("activated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxPluginActivationsActivatedAt").on(t.activatedAt),
       index("idxPluginActivationsPluginId").on(t.pluginId)
     ]);
@@ -23124,8 +23144,13 @@ var init_project = __esm({
       index("idxKnowledgePagesUpdatedAt").on(t.updatedAt)
     ]);
     deployments = projectSchema.table("deployments", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-      projectId: text("project_id").notNull().default(""),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 rebuilt deployments_pkey as (project_id, id). Drizzle emits DEFAULT while the
+      database GUC/trigger keeps ownership stamping and the physical legacy fallback authoritative.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       deploymentId: text("deployment_id").notNull(),
       service: text("service"),
       environment: text("environment"),
@@ -23136,6 +23161,7 @@ var init_project = __esm({
       meta: jsonb("meta"),
       createdAt: text("created_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id], name: "deployments_pkey" }),
       uniqueIndex("idxDeploymentsProjectDeploymentId").on(t.projectId, t.deploymentId),
       index("idxDeploymentsProjectDeployedAt").on(t.projectId, t.deployedAt),
       index("idxDeploymentsDeployedAt").on(t.deployedAt),
@@ -23143,7 +23169,12 @@ var init_project = __esm({
     ]);
     githubCheckStates = projectSchema.table("github_check_states", {
       id: integer("id").generatedAlwaysAsIdentity().notNull(),
-      projectId: text("project_id").notNull().default(""),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0048 post-dated 0006, so FN-9004 reconciles its physical default to the ownership
+      expression. Drizzle emits DEFAULT while the database GUC/trigger remains the stamping authority.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       repo: text("repo").notNull(),
       headSha: text("head_sha").notNull(),
       checkName: text("check_name").notNull(),
@@ -23163,9 +23194,14 @@ var init_project = __esm({
       index("idxGithubCheckStatesProjectReceived").on(t.projectId, t.receivedAt)
     ]);
     incidents = projectSchema.table("incidents", {
-      id: integer("id").generatedAlwaysAsIdentity().primaryKey(),
-      projectId: text("project_id").notNull().default(""),
-      incidentId: text("incident_id").notNull().unique(),
+      id: integer("id").generatedAlwaysAsIdentity().notNull(),
+      /*
+      FNXC:MultiProjectIsolation 2026-08-12-15:43:
+      Migration 0006 rebuilt incident keys with project_id first. Drizzle emits DEFAULT while the
+      database GUC/trigger retains ownership stamping and its physical legacy fallback.
+      */
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      incidentId: text("incident_id").notNull(),
       groupingKey: text("grouping_key").notNull(),
       title: text("title").notNull(),
       severity: text("severity"),
@@ -23179,6 +23215,8 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id], name: "incidents_pkey" }),
+      unique("incidents_incident_id_key").on(t.projectId, t.incidentId),
       index("idxIncidentsProjectOpenedAt").on(t.projectId, t.openedAt),
       index("idxIncidentsProjectStatus").on(t.projectId, t.status),
       index("idxIncidentsGroupingKey").on(t.groupingKey),
@@ -23233,12 +23271,14 @@ var init_project = __esm({
       content: text("content").notNull(),
       type: text("type").notNull(),
       read: integer("read").default(0),
+      archived: integer("archived").default(0),
       metadata: jsonb("metadata"),
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
       primaryKey({ columns: [t.projectId, t.id] }),
       index("idxMessagesTo").on(t.toId, t.toType, t.read),
+      index("idxMessagesToArchived").on(t.toId, t.toType, t.archived),
       index("idxMessagesFrom").on(t.fromId, t.fromType),
       index("idxMessagesCreatedAt").on(t.createdAt)
     ]);
@@ -23339,7 +23379,8 @@ var init_project = __esm({
       index("idx_cli_sessions_project_state").on(t.projectId, t.agentState)
     ]);
     chatMessages = projectSchema.table("chat_messages", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       sessionId: text("session_id").notNull(),
       role: text("role").notNull(),
       content: text("content").notNull(),
@@ -23348,6 +23389,7 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       attachments: jsonb("attachments")
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxChatMessagesSessionId").on(t.sessionId),
       index("idxChatMessagesCreatedAt").on(t.createdAt)
     ]);
@@ -23373,7 +23415,8 @@ var init_project = __esm({
       index("idxChatTokenUsageCreatedAt").on(t.createdAt)
     ]);
     runAuditEvents = projectSchema.table("run_audit_events", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       timestamp: text("timestamp").notNull(),
       taskId: text("task_id"),
       agentId: text("agent_id").notNull(),
@@ -23383,6 +23426,7 @@ var init_project = __esm({
       target: text("target").notNull(),
       metadata: jsonb("metadata")
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxRunAuditEventsRunIdTimestamp").on(t.runId, t.timestamp),
       index("idxRunAuditEventsTaskIdTimestamp").on(t.taskId, t.timestamp),
       index("idxRunAuditEventsTimestamp").on(t.timestamp)
@@ -23483,13 +23527,14 @@ var init_project = __esm({
       index("idxMissionLineageStopsMissionId").on(t.projectId, t.missionId)
     ]);
     verificationCache = projectSchema.table("verification_cache", {
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
       treeSha: text("tree_sha").notNull(),
       testCommand: text("test_command").notNull().default(""),
       buildCommand: text("build_command").notNull().default(""),
       recordedAt: text("recorded_at").notNull(),
       taskId: text("task_id")
     }, (t) => [
-      primaryKey({ columns: [t.treeSha, t.testCommand, t.buildCommand] }),
+      primaryKey({ columns: [t.projectId, t.treeSha, t.testCommand, t.buildCommand] }),
       index("idxVerificationCacheRecordedAt").on(t.recordedAt)
     ]);
     importTranslationCache = projectSchema.table("import_translation_cache", {
@@ -23522,7 +23567,8 @@ var init_project = __esm({
       index("idxImportTranslationCacheRecordedAt").on(t.recordedAt)
     ]);
     approvalRequests = projectSchema.table("approval_requests", {
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       status: text("status").notNull(),
       requesterActorId: text("requester_actor_id").notNull(),
       requesterActorType: text("requester_actor_type").notNull(),
@@ -23541,13 +23587,14 @@ var init_project = __esm({
       createdAt: text("created_at").notNull(),
       updatedAt: text("updated_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxApprovalRequestsStatusCreatedAt").on(t.status, t.createdAt),
       index("idxApprovalRequestsRequesterCreatedAt").on(t.requesterActorId, t.createdAt),
       index("idxApprovalRequestsTaskCreatedAt").on(t.taskId, t.createdAt)
     ]);
     approvalRequestAuditEvents = projectSchema.table("approval_request_audit_events", {
-      projectId: text("project_id").notNull().default(""),
-      id: text("id").primaryKey(),
+      projectId: text("project_id").notNull().default(sql`current_setting('fusion.project_id', true)`),
+      id: text("id").notNull(),
       requestId: text("request_id").notNull(),
       eventType: text("event_type").notNull(),
       actorId: text("actor_id").notNull(),
@@ -23556,6 +23603,7 @@ var init_project = __esm({
       note: text("note"),
       createdAt: text("created_at").notNull()
     }, (t) => [
+      primaryKey({ columns: [t.projectId, t.id] }),
       index("idxApprovalRequestAuditRequestCreatedAt").on(t.requestId, t.createdAt, t.id),
       index("idxApprovalRequestAuditProjectCreatedAt").on(t.projectId, t.createdAt)
     ]);
@@ -27045,6 +27093,27 @@ var init_grok_provider = __esm({
       apiKey: "$GROK_API_KEY",
       api: "openai-completions",
       models: [
+        /*
+        FNXC:ModelRegistry 2026-08-12-20:17:
+        FN-9008 requires Grok 4.6 to be selectable in every model area. Keep it in this shared
+        catalog because pi's registerProvider() replaces provider model lists wholesale, while every
+        Fusion host seeds and re-merges this export. xAI's model docs verify grok-4.6, its 500k-token
+        context window, and configurable reasoning; max output and per-model image input remain
+        upstream-pending-verification, so retain the conservative text-only and 65536-token defaults.
+        Source: https://docs.x.ai/developers/models
+        */
+        {
+          id: "grok-4.6",
+          name: "Grok 4.6",
+          reasoning: true,
+          input: ["text"],
+          cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+          contextWindow: 5e5,
+          maxTokens: 65536,
+          compat: {
+            supportsDeveloperRole: false
+          }
+        },
         {
           id: "grok-4.5",
           name: "Grok 4.5",
@@ -35003,6 +35072,7 @@ function rowToMessage(row) {
     content: row.content,
     type: row.type,
     read: (row.read ?? 0) === 1,
+    archived: (row.archived ?? 0) === 1,
     metadata: row.metadata ?? void 0,
     createdAt: row.createdAt,
     updatedAt: row.updatedAt
@@ -35014,6 +35084,11 @@ function participantIdsForLookup(ownerId, ownerType) {
   }
   return [ownerId];
 }
+function archivedCondition(archived) {
+  if (archived === true) return eq(project_exports.messages.archived, 1);
+  if (archived === false) return or(eq(project_exports.messages.archived, 0), sql`${project_exports.messages.archived} IS NULL`);
+  return or(eq(project_exports.messages.archived, 0), sql`${project_exports.messages.archived} IS NULL`);
+}
 async function sendMessage(handle, message) {
   const sanitizedContent = sanitizeTextValue(message.content);
   const sanitizedMetadata = sanitizeJsonbValue(message.metadata);
@@ -35026,6 +35101,7 @@ async function sendMessage(handle, message) {
     content: sanitizedContent,
     type: message.type,
     read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0,
     metadata: sanitizedMetadata,
     createdAt: message.createdAt,
     updatedAt: message.updatedAt
@@ -35034,7 +35110,8 @@ async function sendMessage(handle, message) {
     ...message,
     content: sanitizedContent,
     metadata: sanitizedMetadata,
-    read: message.read ? 1 : 0
+    read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0
   });
 }
 async function sendMessageOnce(handle, message) {
@@ -35047,6 +35124,7 @@ async function sendMessageOnce(handle, message) {
     content: message.content,
     type: message.type,
     read: message.read ? 1 : 0,
+    archived: message.archived ? 1 : 0,
     metadata: message.metadata,
     createdAt: message.createdAt,
     updatedAt: message.updatedAt
@@ -35098,6 +35176,7 @@ async function queryMessagesByParticipant(handle, direction, ownerId, ownerType,
   if (filter?.read !== void 0) {
     conditions.push(eq(project_exports.messages.read, filter.read ? 1 : 0));
   }
+  conditions.push(archivedCondition(filter?.archived));
   const limit = filter?.limit ?? 100;
   const offset = filter?.offset ?? 0;
   const rows = await handle.select(messageColumns).from(project_exports.messages).where(and(...conditions)).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id)).limit(limit).offset(offset);
@@ -35111,6 +35190,13 @@ async function markMessageAsRead(handle, messageId) {
   await handle.update(project_exports.messages).set({ read: 1, updatedAt: now }).where(eq(project_exports.messages.id, messageId));
   return await getMessage(handle, messageId);
 }
+async function setMessageArchived(handle, id, archived) {
+  const existing = await getMessage(handle, id);
+  if (!existing) return null;
+  if (existing.archived === archived) return existing;
+  const rows = await handle.update(project_exports.messages).set({ archived: archived ? 1 : 0, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.messages.id, id)).returning(messageColumns);
+  return rows[0] ? rowToMessage(rows[0]) : null;
+}
 async function markAllMessagesAsRead(handle, ownerId, ownerType) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const participantIds = participantIdsForLookup(ownerId, ownerType);
@@ -35118,7 +35204,8 @@ async function markAllMessagesAsRead(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   const count2 = countRows[0]?.count ?? 0;
@@ -35126,7 +35213,8 @@ async function markAllMessagesAsRead(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   return count2;
@@ -35148,19 +35236,22 @@ async function getConversation(handle, participantA, participantB, options) {
   const aIds = participantIdsForLookup(participantA.id, participantA.type);
   const bIds = participantIdsForLookup(participantB.id, participantB.type);
   const rows = await handle.select(messageColumns).from(project_exports.messages).where(
-    or(
-      and(
-        inArray(project_exports.messages.fromId, aIds),
-        eq(project_exports.messages.fromType, participantA.type),
-        inArray(project_exports.messages.toId, bIds),
-        eq(project_exports.messages.toType, participantB.type)
+    and(
+      or(
+        and(
+          inArray(project_exports.messages.fromId, aIds),
+          eq(project_exports.messages.fromType, participantA.type),
+          inArray(project_exports.messages.toId, bIds),
+          eq(project_exports.messages.toType, participantB.type)
+        ),
+        and(
+          inArray(project_exports.messages.fromId, bIds),
+          eq(project_exports.messages.fromType, participantB.type),
+          inArray(project_exports.messages.toId, aIds),
+          eq(project_exports.messages.toType, participantA.type)
+        )
       ),
-      and(
-        inArray(project_exports.messages.fromId, bIds),
-        eq(project_exports.messages.fromType, participantB.type),
-        inArray(project_exports.messages.toId, aIds),
-        eq(project_exports.messages.toType, participantA.type)
-      )
+      archivedCondition(options?.archived)
     )
   ).orderBy(desc(project_exports.messages.createdAt)).limit(limit);
   return rows.reverse().map((row) => rowToMessage(row));
@@ -35171,14 +35262,16 @@ async function getMailbox(handle, ownerId, ownerType) {
     and(
       inArray(project_exports.messages.toId, participantIds),
       eq(project_exports.messages.toType, ownerType),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   const unreadCount = unreadRows[0]?.count ?? 0;
   const lastRows = await handle.select(messageColumns).from(project_exports.messages).where(
     and(
       inArray(project_exports.messages.toId, participantIds),
-      eq(project_exports.messages.toType, ownerType)
+      eq(project_exports.messages.toType, ownerType),
+      archivedCondition()
     )
   ).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id)).limit(1);
   return {
@@ -35188,15 +35281,16 @@ async function getMailbox(handle, ownerId, ownerType) {
     lastMessage: lastRows[0] ? rowToMessage(lastRows[0]) : void 0
   };
 }
-async function getAllAgentToAgentMessages(handle) {
-  const rows = await handle.select(messageColumns).from(project_exports.messages).where(eq(project_exports.messages.type, "agent-to-agent")).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id));
+async function getAllAgentToAgentMessages(handle, filter) {
+  const rows = await handle.select(messageColumns).from(project_exports.messages).where(and(eq(project_exports.messages.type, "agent-to-agent"), archivedCondition(filter?.archived))).orderBy(desc(project_exports.messages.createdAt), desc(project_exports.messages.id));
   return rows.map((row) => rowToMessage(row));
 }
 async function getUnreadAgentToAgentCount(handle) {
   const rows = await handle.select({ count: sql`count(*)::int` }).from(project_exports.messages).where(
     and(
       eq(project_exports.messages.type, "agent-to-agent"),
-      eq(project_exports.messages.read, 0)
+      eq(project_exports.messages.read, 0),
+      archivedCondition()
     )
   );
   return rows[0]?.count ?? 0;
@@ -35218,6 +35312,7 @@ var init_async_message_store = __esm({
       content: project_exports.messages.content,
       type: project_exports.messages.type,
       read: project_exports.messages.read,
+      archived: project_exports.messages.archived,
       metadata: project_exports.messages.metadata,
       createdAt: project_exports.messages.createdAt,
       updatedAt: project_exports.messages.updatedAt
@@ -35403,12 +35498,12 @@ var init_message_store = __esm({
         }
         const sqliteDb = this.db;
         this.stmtInsert = sqliteDb.prepare(`
-      INSERT INTO messages (id, fromId, fromType, toId, toType, content, type, read, metadata, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT INTO messages (id, fromId, fromType, toId, toType, content, type, read, archived, metadata, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         this.stmtInsertOnce = sqliteDb.prepare(`
-      INSERT OR IGNORE INTO messages (id, fromId, fromType, toId, toType, content, type, read, metadata, createdAt, updatedAt)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      INSERT OR IGNORE INTO messages (id, fromId, fromType, toId, toType, content, type, read, archived, metadata, createdAt, updatedAt)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         this.stmtGetById = sqliteDb.prepare(`
       SELECT * FROM messages WHERE id = ?
@@ -35446,6 +35541,7 @@ var init_message_store = __esm({
           content: row.content,
           type: row.type,
           read: row.read === 1,
+          archived: (row.archived ?? 0) === 1,
           metadata: fromJson(row.metadata),
           createdAt: row.createdAt,
           updatedAt: row.updatedAt
@@ -35479,6 +35575,7 @@ var init_message_store = __esm({
           content: sanitizeTextValue(input.content),
           type: input.type,
           read: false,
+          archived: false,
           metadata: sanitizeJsonbValue(input.metadata),
           createdAt: now,
           updatedAt: now
@@ -35494,6 +35591,7 @@ var init_message_store = __esm({
             content: message.content,
             type: message.type,
             read: message.read,
+            archived: message.archived,
             metadata: message.metadata ?? null,
             createdAt: message.createdAt,
             updatedAt: message.updatedAt
@@ -35508,6 +35606,7 @@ var init_message_store = __esm({
             message.content,
             message.type,
             message.read ? 1 : 0,
+            message.archived ? 1 : 0,
             toJsonNullable(message.metadata),
             message.createdAt,
             message.updatedAt
@@ -35566,6 +35665,7 @@ var init_message_store = __esm({
           content: sanitizeTextValue(input.content),
           type: input.type,
           read: false,
+          archived: false,
           metadata: sanitizeJsonbValue(input.metadata),
           createdAt: now,
           updatedAt: now
@@ -35586,6 +35686,7 @@ var init_message_store = __esm({
             message.content,
             message.type,
             0,
+            0,
             toJsonNullable(message.metadata),
             message.createdAt,
             message.updatedAt
@@ -35717,6 +35818,7 @@ var init_message_store = __esm({
           whereClauses.push("read = ?");
           params.push(filter.read ? 1 : 0);
         }
+        whereClauses.push(filter?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)");
         const whereSql = whereClauses.join(" AND ");
         const limit = filter?.limit ?? 100;
         const offset = filter?.offset ?? 0;
@@ -35767,15 +35869,39 @@ var init_message_store = __esm({
         const participantIds = this.getParticipantIdsForLookup(ownerId, ownerType);
         const toIdPredicate = participantIds.length === 1 ? "toId = ?" : `toId IN (${participantIds.map(() => "?").join(", ")})`;
         const unreadRow = this.db.prepare(`
-      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get(...participantIds, ownerType);
         const count2 = unreadRow?.count ?? 0;
         this.db.prepare(`
-      UPDATE messages SET read = 1, updatedAt = ? WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      UPDATE messages SET read = 1, updatedAt = ? WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).run(now, ...participantIds, ownerType);
         this.db.bumpLastModified();
         return count2;
       }
+      /** Archive a message without destroying its correspondence history. */
+      async archiveMessage(id) {
+        return this.setMessageArchived(id, true);
+      }
+      /** Restore a previously archived message to default mailbox lists. */
+      async unarchiveMessage(id) {
+        return this.setMessageArchived(id, false);
+      }
+      async setMessageArchived(id, archived) {
+        if (this.asyncLayer) {
+          const updated2 = await setMessageArchived(this.asyncLayer.db, id, archived);
+          if (!updated2) throw new Error(`Message ${id} not found`);
+          this.emit(archived ? "message:archived" : "message:unarchived", updated2);
+          return updated2;
+        }
+        const existing = await this.getMessage(id);
+        if (!existing) throw new Error(`Message ${id} not found`);
+        if (existing.archived === archived) return existing;
+        this.db.prepare("UPDATE messages SET archived = ?, updatedAt = ? WHERE id = ?").run(archived ? 1 : 0, (/* @__PURE__ */ new Date()).toISOString(), id);
+        this.db.bumpLastModified();
+        const updated = await this.getMessage(id);
+        this.emit(archived ? "message:archived" : "message:unarchived", updated);
+        return updated;
+      }
       /**
        * Delete a message by ID.
        * @param id - The message ID
@@ -35866,7 +35992,7 @@ var init_message_store = __esm({
         (${participantAFromPredicate} AND fromType = ? AND ${participantBToPredicate} AND toType = ?)
         OR
         (${participantBFromPredicate} AND fromType = ? AND ${participantAToPredicate} AND toType = ?)
-      )
+      ) AND ${options?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)"}
       ORDER BY createdAt DESC
       LIMIT ?
     `).all(
@@ -35901,11 +36027,11 @@ var init_message_store = __esm({
         const participantIds = this.getParticipantIdsForLookup(ownerId, ownerType);
         const toIdPredicate = participantIds.length === 1 ? "toId = ?" : `toId IN (${participantIds.map(() => "?").join(", ")})`;
         const unreadRow = this.db.prepare(`
-      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0
+      SELECT COUNT(*) as count FROM messages WHERE ${toIdPredicate} AND toType = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get(...participantIds, ownerType);
         const unreadCount = unreadRow?.count ?? 0;
         const lastRow = this.db.prepare(`
-      SELECT * FROM messages WHERE ${toIdPredicate} AND toType = ? ORDER BY createdAt DESC, rowid DESC LIMIT 1
+      SELECT * FROM messages WHERE ${toIdPredicate} AND toType = ? AND (archived = 0 OR archived IS NULL) ORDER BY createdAt DESC, rowid DESC LIMIT 1
     `).get(...participantIds, ownerType);
         const lastMessage = lastRow ? this.rowToMessage(lastRow) : void 0;
         return {
@@ -35919,13 +36045,13 @@ var init_message_store = __esm({
        * Get all agent-to-agent messages across all agents.
        * @returns Array of messages (newest first)
        */
-      async getAllAgentToAgentMessages() {
+      async getAllAgentToAgentMessages(filter) {
         if (this.asyncLayer) {
-          return getAllAgentToAgentMessages(this.asyncLayer.db);
+          return getAllAgentToAgentMessages(this.asyncLayer.db, filter);
         }
         const rows = this.db.prepare(`
       SELECT * FROM messages
-      WHERE type = ?
+      WHERE type = ? AND ${filter?.archived === true ? "archived = 1" : "(archived = 0 OR archived IS NULL)"}
       ORDER BY createdAt DESC, rowid DESC
     `).all("agent-to-agent");
         return rows.map((row) => this.rowToMessage(row));
@@ -35939,7 +36065,7 @@ var init_message_store = __esm({
         }
         const row = this.db.prepare(`
       SELECT COUNT(*) as count FROM messages
-      WHERE type = ? AND read = 0
+      WHERE type = ? AND read = 0 AND (archived = 0 OR archived IS NULL)
     `).get("agent-to-agent");
         return row?.count ?? 0;
       }
@@ -36038,6 +36164,7 @@ async function createApprovalRequest(layer, input) {
   };
   await layer.transactionImmediate(async (tx) => {
     await tx.insert(project_exports.approvalRequests).values({
+      ...layer.projectId?.trim() ? { projectId: layer.projectId } : {},
       id: request.id,
       status: request.status,
       requesterActorId: request.requester.actorId,
@@ -36061,12 +36188,12 @@ async function createApprovalRequest(layer, input) {
   });
   return request;
 }
-async function getApprovalRequest(handle, id) {
-  const rows = await handle.select().from(project_exports.approvalRequests).where(eq(project_exports.approvalRequests.id, id));
+async function getApprovalRequest(handle, id, projectId2) {
+  const rows = await handle.select().from(project_exports.approvalRequests).where(and(eq(project_exports.approvalRequests.id, id), projectScopeFor(project_exports.approvalRequests.projectId, projectId2)));
   return rows[0] ? rowToRequest(rows[0]) : null;
 }
-async function listApprovalRequests(handle, input = {}) {
-  const conditions = [];
+async function listApprovalRequests(handle, input = {}, projectId2) {
+  const conditions = [projectScopeFor(project_exports.approvalRequests.projectId, projectId2)];
   if (input.status) conditions.push(eq(project_exports.approvalRequests.status, input.status));
   if (input.requesterActorId) conditions.push(eq(project_exports.approvalRequests.requesterActorId, input.requesterActorId));
   if (input.taskId) conditions.push(eq(project_exports.approvalRequests.taskId, input.taskId));
@@ -36080,7 +36207,7 @@ async function listApprovalRequests(handle, input = {}) {
 async function decideApprovalRequest(layer, requestId, status, input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getApprovalRequest(tx, requestId);
+    const existing = await getApprovalRequest(tx, requestId, layer.projectId);
     if (!existing) throw new Error(`Approval request ${requestId} not found`);
     if (!isValidApprovalRequestTransition(existing.status, status)) {
       throw new Error(`Invalid approval request transition: ${existing.status} -> ${status}`);
@@ -36091,23 +36218,24 @@ async function decideApprovalRequest(layer, requestId, status, input) {
     const updatedRows = await tx.update(project_exports.approvalRequests).set({ status, decidedAt: now, updatedAt: now }).where(
       and(
         eq(project_exports.approvalRequests.id, requestId),
-        eq(project_exports.approvalRequests.status, existing.status)
+        eq(project_exports.approvalRequests.status, existing.status),
+        projectScopeFor(project_exports.approvalRequests.projectId, layer.projectId)
       )
     ).returning({ id: project_exports.approvalRequests.id });
     if (updatedRows.length === 0) {
-      const raced = await getApprovalRequest(tx, requestId);
+      const raced = await getApprovalRequest(tx, requestId, layer.projectId);
       throw new Error(
         `Invalid approval request transition: ${raced?.status ?? existing.status} -> ${status}`
       );
     }
     await appendAuditEvent(tx, layer.projectId ?? "", requestId, status, input.actor, now, input.note);
-    return await getApprovalRequest(tx, requestId);
+    return await getApprovalRequest(tx, requestId, layer.projectId);
   });
 }
 async function markApprovalRequestCompleted(layer, requestId, input) {
   const now = (/* @__PURE__ */ new Date()).toISOString();
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getApprovalRequest(tx, requestId);
+    const existing = await getApprovalRequest(tx, requestId, layer.projectId);
     if (!existing) throw new Error(`Approval request ${requestId} not found`);
     if (!isValidApprovalRequestTransition(existing.status, "completed")) {
       throw new Error(`Invalid approval request transition: ${existing.status} -> completed`);
@@ -36121,21 +36249,22 @@ async function markApprovalRequestCompleted(layer, requestId, input) {
     const updatedRows = await tx.update(project_exports.approvalRequests).set({ status: "completed", completedAt: now, updatedAt: now }).where(
       and(
         eq(project_exports.approvalRequests.id, requestId),
-        eq(project_exports.approvalRequests.status, existing.status)
+        eq(project_exports.approvalRequests.status, existing.status),
+        projectScopeFor(project_exports.approvalRequests.projectId, layer.projectId)
       )
     ).returning({ id: project_exports.approvalRequests.id });
     if (updatedRows.length === 0) {
-      const raced = await getApprovalRequest(tx, requestId);
+      const raced = await getApprovalRequest(tx, requestId, layer.projectId);
       throw new Error(
         `Invalid approval request transition: ${raced?.status ?? existing.status} -> completed`
       );
     }
     await appendAuditEvent(tx, layer.projectId ?? "", requestId, "completed", input.actor, now, input.note);
-    return await getApprovalRequest(tx, requestId);
+    return await getApprovalRequest(tx, requestId, layer.projectId);
   });
 }
-async function getApprovalAuditHistory(handle, requestId) {
-  const rows = await handle.select().from(project_exports.approvalRequestAuditEvents).where(eq(project_exports.approvalRequestAuditEvents.requestId, requestId)).orderBy(
+async function getApprovalAuditHistory(handle, requestId, projectId2) {
+  const rows = await handle.select().from(project_exports.approvalRequestAuditEvents).where(and(eq(project_exports.approvalRequestAuditEvents.requestId, requestId), projectScopeFor(project_exports.approvalRequestAuditEvents.projectId, projectId2))).orderBy(
     sql`${project_exports.approvalRequestAuditEvents.createdAt} ASC, ${project_exports.approvalRequestAuditEvents.id} ASC`
   );
   return rows.map((row) => rowToAuditEvent(row));
@@ -36145,6 +36274,7 @@ var init_async_approval_request_store = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_agents();
     init_types();
   }
@@ -36158,6 +36288,7 @@ var init_approval_request_store = __esm({
     "use strict";
     init_drizzle_orm();
     init_db2();
+    init_data_layer();
     init_async_approval_request_store();
     init_schema2();
     init_async_agent_activity();
@@ -36286,23 +36417,26 @@ var init_approval_request_store = __esm({
         return created;
       }
       async get(id) {
-        return getApprovalRequest(this.asyncLayer.db, id);
+        return getApprovalRequest(this.asyncLayer.db, id, this.asyncLayer.projectId);
       }
       async list(input = {}) {
-        return listApprovalRequests(this.asyncLayer.db, input);
+        return listApprovalRequests(this.asyncLayer.db, input, this.asyncLayer.projectId);
       }
       async getPendingCountsByActor() {
         const table = project_exports.approvalRequests;
         const rows = await this.asyncLayer.db.select({
           actorId: table.requesterActorId,
           requestCount: count()
-        }).from(table).where(eq(table.status, "pending")).groupBy(table.requesterActorId);
+        }).from(table).where(and(eq(table.status, "pending"), projectScopeFor(table.projectId, this.asyncLayer.projectId))).groupBy(table.requesterActorId);
         return new Map(rows.map((row) => [row.actorId, Number(row.requestCount)]));
       }
       async findLatestByDedupeKey(input) {
         if (this.backendMode) {
           const table = project_exports.approvalRequests;
-          const conditions = [eq(table.requesterActorId, input.requesterActorId)];
+          const conditions = [
+            eq(table.requesterActorId, input.requesterActorId),
+            projectScopeFor(table.projectId, this.asyncLayer.projectId)
+          ];
           if (input.taskId !== void 0) {
             conditions.push(eq(table.taskId, input.taskId));
           }
@@ -36341,7 +36475,7 @@ var init_approval_request_store = __esm({
         return markApprovalRequestCompleted(this.asyncLayer, requestId, input);
       }
       async getAuditHistory(requestId) {
-        return getApprovalAuditHistory(this.asyncLayer.db, requestId);
+        return getApprovalAuditHistory(this.asyncLayer.db, requestId, this.asyncLayer.projectId);
       }
     };
   }
@@ -40527,6 +40661,8 @@ async function applySchemaBaseline(db, options = {}) {
     const agentRatingProjectIsolationAlreadyApplied = applied.includes(AGENT_RATING_PROJECT_ISOLATION_VERSION);
     const agentRatingsProjectPartitionAlreadyApplied = applied.includes(AGENT_RATINGS_PROJECT_PARTITION_VERSION);
     const projectOwnershipDeclarationDriftAlreadyApplied = applied.includes(PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION);
+    const projectOwnershipDefaultReconciliationAlreadyApplied = applied.includes(PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION);
+    const messageArchiveSchemaAlreadyApplied = applied.includes(MESSAGE_ARCHIVE_SCHEMA_VERSION);
     assertBinaryNotOlderThanDatabase(applied);
     let schemaChanged = false;
     if (!baselineAlreadyApplied) {
@@ -41010,17 +41146,29 @@ async function applySchemaBaseline(db, options = {}) {
       await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION}) ON CONFLICT (version) DO NOTHING`);
       schemaChanged = true;
     }
+    if (!projectOwnershipDefaultReconciliationAlreadyApplied) {
+      const migrationSql = await readFile4(PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH, "utf8");
+      await tx.execute(sql.raw(migrationSql));
+      await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION}) ON CONFLICT (version) DO NOTHING`);
+      schemaChanged = true;
+    }
+    if (!messageArchiveSchemaAlreadyApplied) {
+      const migrationSql = await readFile4(MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH, "utf8");
+      await tx.execute(sql.raw(migrationSql));
+      await tx.execute(sql`INSERT INTO public.${sql.identifier(MIGRATION_BOOKKEEPING_TABLE)} (version) VALUES (${MESSAGE_ARCHIVE_SCHEMA_VERSION}) ON CONFLICT (version) DO NOTHING`);
+      schemaChanged = true;
+    }
     return { applied: schemaChanged, pluginHooksRun: pluginHooks.length };
   });
 }
-var SCHEMA_BASELINE_VERSION, TASK_DECLARED_SYMBOLS_VERSION, INITIAL_SCHEMA_VERSION, AUTOMATION_ISOLATION_SCHEMA_VERSION, ANALYTICS_ISOLATION_SCHEMA_VERSION, MONITOR_APPROVAL_ISOLATION_SCHEMA_VERSION, LEGACY_CUTOVER_PRESERVATION_SCHEMA_VERSION, MULTI_PROJECT_CUTOVER_SCHEMA_VERSION, PROJECT_OWNERSHIP_SCHEMA_VERSION, SQLITE_SCHEMA_PARITY_VERSION, SESSION_ADVISOR_ENABLED_SCHEMA_VERSION, MISSION_FIX_IDEMPOTENCY_VERSION, IMPORT_TRANSLATION_CACHE_VERSION, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_VERSION, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_VERSION, OWNER_PROJECT_ID_SPLIT_VERSION, CHAT_SESSION_PINS_VERSION, EXECUTOR_TOOL_FAILURE_RETRY_VERSION, EXECUTOR_ESCALATION_ATTEMPT_VERSION, GLOBAL_ROUTINES_SCHEMA_VERSION, TASK_MERGER_MODEL_LANE_VERSION, BULK_COMPLETION_REFUSAL_AT_VERSION, TASK_PROPOSAL_CLAIM_VERSION, CONFIGURATION_REVISIONS_VERSION, IDEATION_SCHEMA_VERSION, RESEARCH_FEATURE_PROVENANCE_VERSION, TASK_VERIFICATION_REQUEST_VERSION, SYMBOL_LOCKS_SCHEMA_VERSION, BIGINT_COUNTERS_VERSION, PLANNING_ACTIVE_TIMING_VERSION, SQLITE_MIGRATION_RUNTIME_READ_VERSION, WORKFLOW_TASK_CONTINUATIONS_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_VERSION, TASK_WEDGE_NOTIFICATION_VERSION, MILESTONE_ASSERTION_PROVENANCE_VERSION, MISSION_LINEAGE_STOP_VERSION, CHAT_SESSION_TAGS_VERSION, DROP_GLOBAL_CONCURRENCY_VERSION, MISSION_TASK_PREFIX_VERSION, CREDENTIAL_INSTANCE_SELECTION_VERSION, TASK_LIFECYCLE_OUTBOX_VERSION, TASK_LIFECYCLE_CONSUMERS_VERSION, VALIDATOR_INPUT_FINGERPRINT_VERSION, UNPLANNED_EXECUTION_BLOCK_DEDUPE_VERSION, QUEUED_EPISODE_SIGNATURE_VERSION, MULTI_ROLE_WORKFLOW_AGENTS_VERSION, WORKFLOW_PRINCIPAL_FENCE_VERSION, TASK_RECOMMENDATIONS_VERSION, GITHUB_CHECK_STATES_VERSION, AGENT_ACTIVITY_EVENTS_VERSION, SPEC_LOCK_DRIFT_REPORT_VERSION, SPEC_LOCK_SOURCE_REVISION_BIGINT_VERSION, MEMORY_RECALL_RECORDS_VERSION, MISSION_FEATURE_SPEC_ALIGNMENT_VERSION, AGENT_RATING_PROJECT_ISOLATION_VERSION, AGENT_RATINGS_PROJECT_PARTITION_VERSION, PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION, StaleBinarySchemaError, MIGRATION_BOOKKEEPING_TABLE, LEGACY_ADOPTION_DRAINED_MARKER, __dirname, MIGRATIONS_DIR, BASELINE_MIGRATION_PATH, AUTOMATION_ISOLATION_MIGRATION_PATH, ANALYTICS_ISOLATION_MIGRATION_PATH, MONITOR_APPROVAL_ISOLATION_MIGRATION_PATH, LEGACY_CUTOVER_PRESERVATION_MIGRATION_PATH, MULTI_PROJECT_CUTOVER_MIGRATION_PATH, PROJECT_OWNERSHIP_MIGRATION_PATH, SQLITE_SCHEMA_PARITY_MIGRATION_PATH, SESSION_ADVISOR_ENABLED_MIGRATION_PATH, MISSION_FIX_IDEMPOTENCY_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_MIGRATION_PATH, OWNER_PROJECT_ID_SPLIT_MIGRATION_PATH, CHAT_SESSION_PINS_MIGRATION_PATH, EXECUTOR_TOOL_FAILURE_RETRY_MIGRATION_PATH, EXECUTOR_ESCALATION_ATTEMPT_MIGRATION_PATH, GLOBAL_ROUTINES_MIGRATION_PATH, TASK_MERGER_MODEL_LANE_MIGRATION_PATH, BULK_COMPLETION_REFUSAL_AT_MIGRATION_PATH, TASK_PROPOSAL_CLAIM_MIGRATION_PATH, CONFIGURATION_REVISIONS_MIGRATION_PATH, IDEATION_MIGRATION_PATH, RESEARCH_FEATURE_PROVENANCE_MIGRATION_PATH, TASK_VERIFICATION_REQUEST_MIGRATION_PATH, SYMBOL_LOCKS_MIGRATION_PATH, BIGINT_COUNTERS_MIGRATION_PATH, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_VERSION, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_MIGRATION_PATH, PLANNING_ACTIVE_TIMING_MIGRATION_PATH, TASK_DECLARED_SYMBOLS_MIGRATION_PATH, SQLITE_MIGRATION_RUNTIME_READ_PATH, WORKFLOW_TASK_CONTINUATIONS_PATH, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_PATH, TASK_WEDGE_NOTIFICATION_MIGRATION_PATH, MILESTONE_ASSERTION_PROVENANCE_MIGRATION_PATH, MISSION_LINEAGE_STOP_MIGRATION_PATH, CHAT_SESSION_TAGS_MIGRATION_PATH, DROP_GLOBAL_CONCURRENCY_MIGRATION_PATH, MISSION_TASK_PREFIX_MIGRATION_PATH, CREDENTIAL_INSTANCE_SELECTION_MIGRATION_PATH, TASK_LIFECYCLE_OUTBOX_MIGRATION_PATH, TASK_LIFECYCLE_CONSUMERS_MIGRATION_PATH, VALIDATOR_INPUT_FINGERPRINT_MIGRATION_PATH, UNPLANNED_EXECUTION_BLOCK_DEDUPE_MIGRATION_PATH, QUEUED_EPISODE_SIGNATURE_MIGRATION_PATH, MULTI_ROLE_WORKFLOW_AGENTS_MIGRATION_PATH, WORKFLOW_PRINCIPAL_FENCE_MIGRATION_PATH, TASK_RECOMMENDATIONS_MIGRATION_PATH, GITHUB_CHECK_STATES_MIGRATION_PATH, AGENT_ACTIVITY_EVENTS_MIGRATION_PATH, SPEC_LOCK_DRIFT_REPORT_MIGRATION_PATH, SPEC_LOCK_SOURCE_REVISION_BIGINT_MIGRATION_PATH, MEMORY_RECALL_RECORDS_MIGRATION_PATH, MISSION_FEATURE_SPEC_ALIGNMENT_MIGRATION_PATH, AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH, AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH, PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH;
+var SCHEMA_BASELINE_VERSION, TASK_DECLARED_SYMBOLS_VERSION, INITIAL_SCHEMA_VERSION, AUTOMATION_ISOLATION_SCHEMA_VERSION, ANALYTICS_ISOLATION_SCHEMA_VERSION, MONITOR_APPROVAL_ISOLATION_SCHEMA_VERSION, LEGACY_CUTOVER_PRESERVATION_SCHEMA_VERSION, MULTI_PROJECT_CUTOVER_SCHEMA_VERSION, PROJECT_OWNERSHIP_SCHEMA_VERSION, SQLITE_SCHEMA_PARITY_VERSION, SESSION_ADVISOR_ENABLED_SCHEMA_VERSION, MISSION_FIX_IDEMPOTENCY_VERSION, IMPORT_TRANSLATION_CACHE_VERSION, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_VERSION, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_VERSION, OWNER_PROJECT_ID_SPLIT_VERSION, CHAT_SESSION_PINS_VERSION, EXECUTOR_TOOL_FAILURE_RETRY_VERSION, EXECUTOR_ESCALATION_ATTEMPT_VERSION, GLOBAL_ROUTINES_SCHEMA_VERSION, TASK_MERGER_MODEL_LANE_VERSION, BULK_COMPLETION_REFUSAL_AT_VERSION, TASK_PROPOSAL_CLAIM_VERSION, CONFIGURATION_REVISIONS_VERSION, IDEATION_SCHEMA_VERSION, RESEARCH_FEATURE_PROVENANCE_VERSION, TASK_VERIFICATION_REQUEST_VERSION, SYMBOL_LOCKS_SCHEMA_VERSION, BIGINT_COUNTERS_VERSION, PLANNING_ACTIVE_TIMING_VERSION, SQLITE_MIGRATION_RUNTIME_READ_VERSION, WORKFLOW_TASK_CONTINUATIONS_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_VERSION, TASK_WEDGE_NOTIFICATION_VERSION, MILESTONE_ASSERTION_PROVENANCE_VERSION, MISSION_LINEAGE_STOP_VERSION, CHAT_SESSION_TAGS_VERSION, DROP_GLOBAL_CONCURRENCY_VERSION, MISSION_TASK_PREFIX_VERSION, CREDENTIAL_INSTANCE_SELECTION_VERSION, TASK_LIFECYCLE_OUTBOX_VERSION, TASK_LIFECYCLE_CONSUMERS_VERSION, VALIDATOR_INPUT_FINGERPRINT_VERSION, UNPLANNED_EXECUTION_BLOCK_DEDUPE_VERSION, QUEUED_EPISODE_SIGNATURE_VERSION, MULTI_ROLE_WORKFLOW_AGENTS_VERSION, WORKFLOW_PRINCIPAL_FENCE_VERSION, TASK_RECOMMENDATIONS_VERSION, GITHUB_CHECK_STATES_VERSION, AGENT_ACTIVITY_EVENTS_VERSION, SPEC_LOCK_DRIFT_REPORT_VERSION, SPEC_LOCK_SOURCE_REVISION_BIGINT_VERSION, MEMORY_RECALL_RECORDS_VERSION, MISSION_FEATURE_SPEC_ALIGNMENT_VERSION, AGENT_RATING_PROJECT_ISOLATION_VERSION, AGENT_RATINGS_PROJECT_PARTITION_VERSION, PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION, PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION, MESSAGE_ARCHIVE_SCHEMA_VERSION, LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION, StaleBinarySchemaError, MIGRATION_BOOKKEEPING_TABLE, LEGACY_ADOPTION_DRAINED_MARKER, __dirname, MIGRATIONS_DIR, BASELINE_MIGRATION_PATH, AUTOMATION_ISOLATION_MIGRATION_PATH, ANALYTICS_ISOLATION_MIGRATION_PATH, MONITOR_APPROVAL_ISOLATION_MIGRATION_PATH, LEGACY_CUTOVER_PRESERVATION_MIGRATION_PATH, MULTI_PROJECT_CUTOVER_MIGRATION_PATH, PROJECT_OWNERSHIP_MIGRATION_PATH, SQLITE_SCHEMA_PARITY_MIGRATION_PATH, SESSION_ADVISOR_ENABLED_MIGRATION_PATH, MISSION_FIX_IDEMPOTENCY_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_SCOPE_FIX_MIGRATION_PATH, IMPORT_TRANSLATION_CACHE_LEGACY_PARTITION_BACKFILL_MIGRATION_PATH, OWNER_PROJECT_ID_SPLIT_MIGRATION_PATH, CHAT_SESSION_PINS_MIGRATION_PATH, EXECUTOR_TOOL_FAILURE_RETRY_MIGRATION_PATH, EXECUTOR_ESCALATION_ATTEMPT_MIGRATION_PATH, GLOBAL_ROUTINES_MIGRATION_PATH, TASK_MERGER_MODEL_LANE_MIGRATION_PATH, BULK_COMPLETION_REFUSAL_AT_MIGRATION_PATH, TASK_PROPOSAL_CLAIM_MIGRATION_PATH, CONFIGURATION_REVISIONS_MIGRATION_PATH, IDEATION_MIGRATION_PATH, RESEARCH_FEATURE_PROVENANCE_MIGRATION_PATH, TASK_VERIFICATION_REQUEST_MIGRATION_PATH, SYMBOL_LOCKS_MIGRATION_PATH, BIGINT_COUNTERS_MIGRATION_PATH, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_VERSION, WORKFLOW_IR_PIN_AND_LEGACY_ADOPTION_MIGRATION_PATH, PLANNING_ACTIVE_TIMING_MIGRATION_PATH, TASK_DECLARED_SYMBOLS_MIGRATION_PATH, SQLITE_MIGRATION_RUNTIME_READ_PATH, WORKFLOW_TASK_CONTINUATIONS_PATH, LEGACY_ADOPTION_DRAINED_MARKER_RUNTIME_GRANTS_PATH, TASK_WEDGE_NOTIFICATION_MIGRATION_PATH, MILESTONE_ASSERTION_PROVENANCE_MIGRATION_PATH, MISSION_LINEAGE_STOP_MIGRATION_PATH, CHAT_SESSION_TAGS_MIGRATION_PATH, DROP_GLOBAL_CONCURRENCY_MIGRATION_PATH, MISSION_TASK_PREFIX_MIGRATION_PATH, CREDENTIAL_INSTANCE_SELECTION_MIGRATION_PATH, TASK_LIFECYCLE_OUTBOX_MIGRATION_PATH, TASK_LIFECYCLE_CONSUMERS_MIGRATION_PATH, VALIDATOR_INPUT_FINGERPRINT_MIGRATION_PATH, UNPLANNED_EXECUTION_BLOCK_DEDUPE_MIGRATION_PATH, QUEUED_EPISODE_SIGNATURE_MIGRATION_PATH, MULTI_ROLE_WORKFLOW_AGENTS_MIGRATION_PATH, WORKFLOW_PRINCIPAL_FENCE_MIGRATION_PATH, TASK_RECOMMENDATIONS_MIGRATION_PATH, GITHUB_CHECK_STATES_MIGRATION_PATH, AGENT_ACTIVITY_EVENTS_MIGRATION_PATH, SPEC_LOCK_DRIFT_REPORT_MIGRATION_PATH, SPEC_LOCK_SOURCE_REVISION_BIGINT_MIGRATION_PATH, MEMORY_RECALL_RECORDS_MIGRATION_PATH, MISSION_FEATURE_SPEC_ALIGNMENT_MIGRATION_PATH, AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH, AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH, PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH, PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH, MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH;
 var init_schema_applier = __esm({
   "../core/src/postgres/schema-applier.ts"() {
     "use strict";
     init_drizzle_orm();
     init_plugin_schema_hook();
     init_advisory_locks();
-    SCHEMA_BASELINE_VERSION = "0056";
+    SCHEMA_BASELINE_VERSION = "0058";
     TASK_DECLARED_SYMBOLS_VERSION = "0028";
     INITIAL_SCHEMA_VERSION = "0000";
     AUTOMATION_ISOLATION_SCHEMA_VERSION = "0001";
@@ -41077,6 +41225,8 @@ var init_schema_applier = __esm({
     AGENT_RATING_PROJECT_ISOLATION_VERSION = "0054";
     AGENT_RATINGS_PROJECT_PARTITION_VERSION = "0055";
     PROJECT_OWNERSHIP_DECLARATION_DRIFT_VERSION = "0056";
+    PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_VERSION = "0057";
+    MESSAGE_ARCHIVE_SCHEMA_VERSION = "0058";
     LEGACY_ADOPTION_DRAINED_MARKER_FUNCTION = "fusion_mark_legacy_adoption_drained";
     StaleBinarySchemaError = class extends Error {
       constructor(databaseVersion, binaryVersion) {
@@ -41213,6 +41363,8 @@ var init_schema_applier = __esm({
     AGENT_RATING_PROJECT_ISOLATION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0054_fn_8957_agent_rating_project_isolation.sql");
     AGENT_RATINGS_PROJECT_PARTITION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0055_fn_8988_agent_ratings_project_partition.sql");
     PROJECT_OWNERSHIP_DECLARATION_DRIFT_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0056_fn_8997_project_ownership_declaration_drift.sql");
+    PROJECT_OWNERSHIP_DEFAULT_RECONCILIATION_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0057_fn_9004_project_ownership_default_reconciliation.sql");
+    MESSAGE_ARCHIVE_SCHEMA_MIGRATION_PATH = join8(MIGRATIONS_DIR, "0058_fn_9014_message_archive.sql");
   }
 });
 
@@ -68568,20 +68720,32 @@ async function replaceActiveTaskWorkflowContinuation(layer, input) {
     return upsertWorkflowWorkItem(layer, input, tx);
   }));
 }
-async function seedStrandedPlanReviewContinuation(layer, input) {
+async function seedStrandedPlanReviewContinuation(layer, input, options = {}) {
   return layer.transactionImmediate(async (tx) => withTaskWorkflowSerialization(tx, layer.projectId, input.taskId, async () => {
     const active2 = await tx.select({ id: project_exports.workflowWorkItems.id }).from(project_exports.workflowWorkItems).where(and(
       projectScopeFor(project_exports.workflowWorkItems.projectId, layer.projectId),
       eq(project_exports.workflowWorkItems.taskId, input.taskId),
       inArray(project_exports.workflowWorkItems.state, [...ACTIVE_WORKFLOW_WORK_ITEM_STATES])
     ));
-    if (active2.length > 0) return { seeded: false, reason: "active-continuation" };
+    const blocking = options.retirePredecessorId ? active2.filter((row) => row.id !== options.retirePredecessorId) : active2;
+    if (blocking.length > 0) return { seeded: false, reason: "active-continuation" };
     const taskRows = await tx.select({ workflowStepResults: project_exports.tasks.workflowStepResults }).from(project_exports.tasks).where(and(
       projectScopeFor(project_exports.tasks.projectId, layer.projectId),
       eq(project_exports.tasks.id, input.taskId)
     )).limit(1);
     const results = taskRows[0]?.workflowStepResults;
     if (results?.some(isPlanReviewSatisfied)) return { seeded: false, reason: "plan-review-passed" };
+    if (options.retirePredecessorId) {
+      const predRows = await tx.select().from(project_exports.workflowWorkItems).where(and(
+        projectScopeFor(project_exports.workflowWorkItems.projectId, layer.projectId),
+        eq(project_exports.workflowWorkItems.id, options.retirePredecessorId),
+        eq(project_exports.workflowWorkItems.taskId, input.taskId)
+      )).limit(1);
+      const pred = predRows[0];
+      if (pred && !isTerminalWorkflowWorkItemState(normalizeWorkflowWorkItemState(pred.state))) {
+        await transitionWorkflowWorkItem(layer, pred.id, "succeeded", { leaseOwner: null, leaseExpiresAt: null, lastError: null }, tx);
+      }
+    }
     const item = await upsertWorkflowWorkItem(layer, input, tx);
     return { seeded: true, workItemId: item.id };
   }));
@@ -68745,8 +68909,10 @@ function safeJsonParse(value) {
     return null;
   }
 }
-async function queryRunAuditEvents(db, filter = {}) {
-  const conditions = [];
+async function queryRunAuditEvents(db, filter = {}, projectId2) {
+  const conditions = [projectScopeFor(project_exports.runAuditEvents.projectId, projectId2)].filter(
+    (condition) => condition !== void 0
+  );
   if (filter.runId) {
     conditions.push(eq(project_exports.runAuditEvents.runId, filter.runId));
   }
@@ -68892,6 +69058,7 @@ var init_async_audit = __esm({
     init_drizzle_orm();
     init_schema2();
     init_data_layer();
+    init_data_layer();
     LEGACY_REVIEW_LANES3 = ["in-review"];
     LEGACY_COMPLETE_LANES = ["done"];
   }
@@ -69281,7 +69448,10 @@ async function insertArtifactRow(layer, input, stored, archivedColumns) {
       createdAt: now,
       updatedAt: now
     });
-    const rows = await tx.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.id, id)).limit(1);
+    const rows = await tx.select().from(project_exports.artifacts).where(and(
+      eq(project_exports.artifacts.id, id),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    )).limit(1);
     const row = rows[0];
     if (!row) throw new Error(`Failed to register artifact ${id}`);
     return rowToArtifact2(row);
@@ -69289,7 +69459,7 @@ async function insertArtifactRow(layer, input, stored, archivedColumns) {
 }
 async function updateArtifactRow(layer, id, updates, archivedColumns) {
   return layer.transactionImmediate(async (tx) => {
-    const existing = await getArtifact(tx, id);
+    const existing = await getArtifact(tx, id, layer.projectId);
     if (!existing) {
       throw new Error(`Artifact ${id} not found`);
     }
@@ -69309,29 +69479,38 @@ async function updateArtifactRow(layer, id, updates, archivedColumns) {
       description: updates.description !== void 0 ? updates.description : existing.description ?? null,
       content: updates.content !== void 0 ? updates.content : existing.content ?? null,
       updatedAt: now
-    }).where(eq(project_exports.artifacts.id, id));
-    const updated = await getArtifact(tx, id);
+    }).where(and(
+      eq(project_exports.artifacts.id, id),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    ));
+    const updated = await getArtifact(tx, id, layer.projectId);
     if (!updated) {
       throw new Error(`Failed to update artifact ${id}`);
     }
     return updated;
   });
 }
-async function getArtifact(db, id) {
-  const rows = await db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.id, id)).limit(1);
+async function getArtifact(db, id, projectId2) {
+  const rows = await db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.id, id),
+    projectScopeFor(project_exports.artifacts.projectId, projectId2)
+  )).limit(1);
   const row = rows[0];
   return row ? rowToArtifact2(row) : null;
 }
 async function getArtifacts(db, taskId, projectId2, archivedColumns) {
   const column = await getLiveTaskColumn(db, taskId, projectId2, archivedColumns);
   if (column === null || column === "archived") return [];
-  const rows = await db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.taskId, taskId)).orderBy(desc(project_exports.artifacts.createdAt));
+  const rows = await db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.taskId, taskId),
+    projectScopeFor(project_exports.artifacts.projectId, projectId2)
+  )).orderBy(desc(project_exports.artifacts.createdAt));
   return rows.map((row) => rowToArtifact2(row));
 }
-async function listArtifacts(db, options) {
+async function listArtifacts(db, options, projectId2) {
   const limit = Math.min(Math.max(1, options?.limit ?? 200), 1e3);
   const offset = Math.max(0, options?.offset ?? 0);
-  const conditions = [];
+  const conditions = [projectScopeFor(project_exports.artifacts.projectId, projectId2)];
   if (options?.type) {
     conditions.push(eq(project_exports.artifacts.type, options.type));
   }
@@ -69370,7 +69549,10 @@ async function listArtifacts(db, options) {
     taskColumn: project_exports.tasks.column
   }).from(project_exports.artifacts).leftJoin(
     project_exports.tasks,
-    eq(project_exports.artifacts.taskId, project_exports.tasks.id)
+    and(
+      eq(project_exports.artifacts.taskId, project_exports.tasks.id),
+      eq(project_exports.artifacts.projectId, project_exports.tasks.projectId)
+    )
   ).where(and(...conditions)).orderBy(desc(project_exports.artifacts.createdAt)).limit(limit).offset(offset);
   return rows.map((row) => {
     const artifact = rowToArtifact2(row);
@@ -70535,7 +70717,7 @@ function rowToBranchGroup2(row) {
     closedAt: row.closedAt ?? void 0
   };
 }
-async function createBranchGroup(db, input) {
+async function createBranchGroup(db, input, projectId2) {
   validateBranchGroupBranchName(input.branchName);
   const now = Date.now();
   const id = generateBranchGroupId2();
@@ -70554,44 +70736,52 @@ async function createBranchGroup(db, input) {
     updatedAt: now,
     closedAt: input.closedAt ?? null
   });
-  const created = await getBranchGroup(db, id);
+  const created = await getBranchGroup(db, id, projectId2);
   if (!created) throw new Error(`Failed to read branch group ${id} after create`);
   return created;
 }
-async function getBranchGroup(db, id) {
-  const rows = await db.select().from(project_exports.branchGroups).where(eq(project_exports.branchGroups.id, id)).limit(1);
+async function getBranchGroup(db, id, projectId2) {
+  const rows = await db.select().from(project_exports.branchGroups).where(and(
+    eq(project_exports.branchGroups.id, id),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  )).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function getBranchGroupBySource(db, sourceType, sourceId) {
+async function getBranchGroupBySource(db, sourceType, sourceId, projectId2) {
   const rows = await db.select().from(project_exports.branchGroups).where(
     and(
       eq(project_exports.branchGroups.sourceType, sourceType),
-      eq(project_exports.branchGroups.sourceId, sourceId)
+      eq(project_exports.branchGroups.sourceId, sourceId),
+      projectScopeFor(project_exports.branchGroups.projectId, projectId2)
     )
   ).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function getBranchGroupByBranchName(db, branchName) {
-  const rows = await db.select().from(project_exports.branchGroups).where(eq(project_exports.branchGroups.branchName, branchName)).orderBy(sql`${project_exports.branchGroups.createdAt} DESC`).limit(1);
+async function getBranchGroupByBranchName(db, branchName, projectId2) {
+  const rows = await db.select().from(project_exports.branchGroups).where(and(
+    eq(project_exports.branchGroups.branchName, branchName),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  )).orderBy(sql`${project_exports.branchGroups.createdAt} DESC`).limit(1);
   const row = rows[0];
   return row ? rowToBranchGroup2(row) : null;
 }
-async function ensureBranchGroupForSource(db, sourceType, sourceId, init) {
-  const existing = await getBranchGroupBySource(db, sourceType, sourceId);
+async function ensureBranchGroupForSource(db, sourceType, sourceId, init, projectId2) {
+  const existing = await getBranchGroupBySource(db, sourceType, sourceId, projectId2);
   if (existing) return existing;
-  const existingByBranch = await getBranchGroupByBranchName(db, init.branchName);
+  const existingByBranch = await getBranchGroupByBranchName(db, init.branchName, projectId2);
   if (existingByBranch) return existingByBranch;
-  return createBranchGroup(db, { sourceType, sourceId, ...init });
+  return createBranchGroup(db, { sourceType, sourceId, ...init }, projectId2);
 }
-async function listBranchGroups(db, options) {
-  const query = db.select().from(project_exports.branchGroups).orderBy(asc(project_exports.branchGroups.createdAt));
-  const rows = options?.status ? await query.where(eq(project_exports.branchGroups.status, options.status)) : await query;
+async function listBranchGroups(db, options, projectId2) {
+  const conditions = [projectScopeFor(project_exports.branchGroups.projectId, projectId2)];
+  if (options?.status) conditions.push(eq(project_exports.branchGroups.status, options.status));
+  const rows = await db.select().from(project_exports.branchGroups).where(and(...conditions)).orderBy(asc(project_exports.branchGroups.createdAt));
   return rows.map((row) => rowToBranchGroup2(row));
 }
-async function updateBranchGroup(db, id, patch) {
-  const current = await getBranchGroup(db, id);
+async function updateBranchGroup(db, id, patch, projectId2) {
+  const current = await getBranchGroup(db, id, projectId2);
   if (!current) throw new Error(`Branch group ${id} not found`);
   if (patch.branchName !== void 0) {
     validateBranchGroupBranchName(patch.branchName);
@@ -70610,8 +70800,11 @@ async function updateBranchGroup(db, id, patch) {
     status: nextStatus,
     updatedAt: now,
     closedAt: nextClosedAt
-  }).where(eq(project_exports.branchGroups.id, id));
-  const updated = await getBranchGroup(db, id);
+  }).where(and(
+    eq(project_exports.branchGroups.id, id),
+    projectScopeFor(project_exports.branchGroups.projectId, projectId2)
+  ));
+  const updated = await getBranchGroup(db, id, projectId2);
   if (!updated) throw new Error(`Branch group ${id} disappeared after update`);
   return updated;
 }
@@ -70768,6 +70961,7 @@ var init_async_branch_groups = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_branch_assignment();
   }
 });
@@ -80581,6 +80775,9 @@ import { randomUUID as randomUUID21 } from "node:crypto";
 function tableForScope(scope) {
   return scope === "project" ? project_exports.secrets : central_exports.secretsGlobal;
 }
+function scopeForSecretTable(scope, table, projectId2) {
+  return scope === "project" ? projectScopeFor(table.projectId, projectId2) : void 0;
+}
 function isAccessPolicy(value) {
   return value === "auto" || value === "prompt" || value === "deny";
 }
@@ -80603,23 +80800,23 @@ function rowToRecord2(row, scope) {
     lastReadBy: row.lastReadBy
   };
 }
-async function getSecretMetadata(handle, id, scope) {
+async function getSecretMetadata(handle, id, scope, projectId2) {
   const table = tableForScope(scope);
-  const rows = await handle.select(metadataColumns(table)).from(table).where(eq(table.id, id)).limit(1);
+  const rows = await handle.select(metadataColumns(table)).from(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2))).limit(1);
   const row = rows[0];
   return row ? rowToRecord2(row, scope) : null;
 }
-async function listSecrets(handle, scope) {
+async function listSecrets(handle, scope, projectId2) {
   if (scope) {
     const table = tableForScope(scope);
-    const rows = await handle.select(metadataColumns(table)).from(table).orderBy(asc(sql`lower(${table.key})`));
+    const rows = await handle.select(metadataColumns(table)).from(table).where(scopeForSecretTable(scope, table, projectId2)).orderBy(asc(sql`lower(${table.key})`));
     return rows.map((row) => rowToRecord2(row, scope));
   }
-  const project = await listSecrets(handle, "project");
-  const global2 = await listSecrets(handle, "global");
+  const project = await listSecrets(handle, "project", projectId2);
+  const global2 = await listSecrets(handle, "global", projectId2);
   return [...project, ...global2];
 }
-async function createSecret(handle, cipher, input) {
+async function createSecret(handle, cipher, input, projectId2) {
   const key = input.key.trim();
   if (!key) {
     throw new SecretsStoreError({ code: "invalid-key", message: "Secret key is required" });
@@ -80633,6 +80830,7 @@ async function createSecret(handle, cipher, input) {
   const table = tableForScope(input.scope);
   try {
     await handle.insert(table).values({
+      ...input.scope === "project" && projectId2?.trim() ? { projectId: projectId2 } : {},
       id,
       key,
       valueCiphertext: encrypted.ciphertext,
@@ -80652,14 +80850,14 @@ async function createSecret(handle, cipher, input) {
     }
     throw error2;
   }
-  const created = await getSecretMetadata(handle, id, input.scope);
+  const created = await getSecretMetadata(handle, id, input.scope, projectId2);
   if (!created) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret insert succeeded but row could not be read back" });
   }
   return created;
 }
-async function updateSecret(handle, cipher, id, scope, patch) {
-  const existing = await getSecretMetadata(handle, id, scope);
+async function updateSecret(handle, cipher, id, scope, patch, projectId2) {
+  const existing = await getSecretMetadata(handle, id, scope, projectId2);
   if (!existing) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
   }
@@ -80693,34 +80891,34 @@ async function updateSecret(handle, cipher, id, scope, patch) {
     updates.nonce = encrypted.nonce;
   }
   try {
-    await handle.update(table).set(updates).where(eq(table.id, id));
+    await handle.update(table).set(updates).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
   } catch (error2) {
     if (isPostgresUniqueError(error2)) {
       throw new SecretsStoreError({ code: "duplicate-key", message: "Secret key already exists" });
     }
     throw error2;
   }
-  const updated = await getSecretMetadata(handle, id, scope);
+  const updated = await getSecretMetadata(handle, id, scope, projectId2);
   if (!updated) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret update succeeded but row could not be read back" });
   }
   return updated;
 }
-async function deleteSecret(handle, id, scope) {
-  const existing = await getSecretMetadata(handle, id, scope);
+async function deleteSecret(handle, id, scope, projectId2) {
+  const existing = await getSecretMetadata(handle, id, scope, projectId2);
   if (!existing) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
   }
   const table = tableForScope(scope);
-  await handle.delete(table).where(eq(table.id, id));
+  await handle.delete(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
 }
-async function revealSecret(handle, cipher, id, scope, reader) {
+async function revealSecret(handle, cipher, id, scope, reader, projectId2) {
   const table = tableForScope(scope);
   const rows = await handle.select({
     ...metadataColumns(table),
     valueCiphertext: table.valueCiphertext,
     nonce: table.nonce
-  }).from(table).where(eq(table.id, id)).limit(1);
+  }).from(table).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2))).limit(1);
   const row = rows[0];
   if (!row) {
     throw new SecretsStoreError({ code: "not-found", message: "Secret not found" });
@@ -80739,7 +80937,7 @@ async function revealSecret(handle, cipher, id, scope, reader) {
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const lastReadBy = reader.userId ?? reader.agentId ?? null;
-  await handle.update(table).set({ lastReadAt: now, lastReadBy, updatedAt: now }).where(eq(table.id, id));
+  await handle.update(table).set({ lastReadAt: now, lastReadBy, updatedAt: now }).where(and(eq(table.id, id), scopeForSecretTable(scope, table, projectId2)));
   return { key: row.key, plaintextValue };
 }
 var severityAuditLog10, SecretsStoreError, metadataColumns;
@@ -80750,6 +80948,7 @@ var init_async_secrets_store = __esm({
     init_drizzle_orm();
     init_postgres_errors();
     init_schema2();
+    init_data_layer();
     init_secrets_crypto();
     severityAuditLog10 = createLogger2("core-async-secrets-store");
     SecretsStoreError = class extends Error {
@@ -80845,7 +81044,7 @@ var init_secrets_store = __esm({
         };
       }
       async listSecrets(scope) {
-        return listSecrets(this.asyncLayer.db, scope);
+        return listSecrets(this.asyncLayer.db, scope, this.asyncLayer.projectId);
       }
       async listEnvExportable(opts) {
         const keyPrefix = opts?.keyPrefix;
@@ -80888,7 +81087,7 @@ var init_secrets_store = __esm({
         return [...exported.values()];
       }
       async getSecretMetadata(id, scope) {
-        return getSecretMetadata(this.asyncLayer.db, id, scope);
+        return getSecretMetadata(this.asyncLayer.db, id, scope, this.asyncLayer.projectId);
       }
       async createSecret(input) {
         const key = input.key.trim();
@@ -80898,12 +81097,12 @@ var init_secrets_store = __esm({
         if (input.accessPolicy && !isAccessPolicy2(input.accessPolicy)) {
           throw new SecretsStoreError2({ code: "invalid-policy", message: "Invalid access policy" });
         }
-        const created = await createSecret(this.asyncLayer.db, this.cipher, input);
+        const created = await createSecret(this.asyncLayer.db, this.cipher, input, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:create", scope: input.scope, secretId: created.id, key: created.key });
         return created;
       }
       async updateSecret(id, scope, patch) {
-        const updated = await updateSecret(this.asyncLayer.db, this.cipher, id, scope, patch);
+        const updated = await updateSecret(this.asyncLayer.db, this.cipher, id, scope, patch, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:update", scope, secretId: updated.id, key: updated.key });
         return updated;
       }
@@ -80912,12 +81111,12 @@ var init_secrets_store = __esm({
         if (!existing) {
           throw new SecretsStoreError2({ code: "not-found", message: "Secret not found" });
         }
-        await deleteSecret(this.asyncLayer.db, id, scope);
+        await deleteSecret(this.asyncLayer.db, id, scope, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:delete", scope, secretId: id, key: existing.key });
         return;
       }
       async revealSecret(id, scope, reader) {
-        const revealed = await revealSecret(this.asyncLayer.db, this.cipher, id, scope, reader);
+        const revealed = await revealSecret(this.asyncLayer.db, this.cipher, id, scope, reader, this.asyncLayer.projectId);
         this.emitAudit({ mutationType: "secret:read", scope, secretId: id, key: revealed.key, actor: reader });
         return revealed;
       }
@@ -82018,6 +82217,7 @@ async function getVerificationCacheHitImpl(store, treeSha, testCommand, buildCom
   const normalizedBuild = buildCommand2 ?? "";
   const table = project_exports.verificationCache;
   const rows = await store.asyncLayer.db.select({ recordedAt: table.recordedAt, taskId: table.taskId }).from(table).where(and(
+    projectScopeFor(table.projectId, store.asyncLayer.projectId),
     eq(table.treeSha, treeSha),
     eq(table.testCommand, normalizedTest),
     eq(table.buildCommand, normalizedBuild)
@@ -82760,7 +82960,7 @@ async function invokeTaskCreatedHookImpl(store, task) {
 }
 async function createBranchGroupImpl(store, input) {
   const layer = store.asyncLayer;
-  return createBranchGroup(layer.db, input);
+  return createBranchGroup(layer.db, input, layer.projectId);
 }
 var init_task_id_integrity2 = __esm({
   "../core/src/task-store/task-id-integrity.ts"() {
@@ -82845,22 +83045,23 @@ import { readFile as readFile7, writeFile as writeFile5 } from "node:fs/promises
 import { join as join23 } from "node:path";
 async function getBranchGroupImpl(store, id) {
   const layer = store.asyncLayer;
-  return getBranchGroup(layer.db, id);
+  return getBranchGroup(layer.db, id, layer.projectId);
 }
 async function getBranchGroupBySourceImpl(store, sourceType, sourceId) {
   const layer = store.asyncLayer;
-  return getBranchGroupBySource(layer.db, sourceType, sourceId);
+  return getBranchGroupBySource(layer.db, sourceType, sourceId, layer.projectId);
 }
 async function getBranchGroupByBranchNameImpl(store, branchName) {
   const layer = store.asyncLayer;
-  return getBranchGroupByBranchName(layer.db, branchName);
+  return getBranchGroupByBranchName(layer.db, branchName, layer.projectId);
 }
 async function ensureBranchGroupForSourceImpl(store, sourceType, sourceId, init) {
-  return ensureBranchGroupForSource(store.asyncLayer.db, sourceType, sourceId, init);
+  const layer = store.asyncLayer;
+  return ensureBranchGroupForSource(layer.db, sourceType, sourceId, init, layer.projectId);
 }
 async function listBranchGroupsImpl(store, options) {
   const layer = store.asyncLayer;
-  return listBranchGroups(layer.db, options);
+  return listBranchGroups(layer.db, options, layer.projectId);
 }
 async function listTasksByBranchGroupImpl(store, groupId) {
   const tasks2 = await store.listTasks({ includeArchived: true, slim: false });
@@ -84402,7 +84603,7 @@ function insertArtifactRowImpl(store, input, id, now, stored) {
 }
 async function getArtifactImpl(store, id) {
   const layer = store.asyncLayer;
-  return getArtifact(layer.db, id);
+  return getArtifact(layer.db, id, layer.projectId);
 }
 async function updateArtifactImpl(store, id, updates) {
   const layer = store.asyncLayer;
@@ -89271,6 +89472,7 @@ var init_async_archive_lineage = __esm({
     "use strict";
     init_drizzle_orm();
     init_schema2();
+    init_data_layer();
     init_async_persistence();
     init_async_lifecycle();
     init_lineage_approval_invalidation();
@@ -92738,7 +92940,7 @@ async function _maybeAutoArchiveSameAgentDuplicateBackendImpl(store, task, input
 }
 async function updateBranchGroupImpl(store, id, patch) {
   const layer = store.asyncLayer;
-  return updateBranchGroup(layer.db, id, patch);
+  return updateBranchGroup(layer.db, id, patch, layer.projectId);
 }
 async function updatePrEntityImpl(store, id, patch) {
   const layer = store.asyncLayer;
@@ -93248,13 +93450,19 @@ async function deleteAttachmentArtifactRows(store, taskId, filename) {
   const linkedArtifactIds = artifacts2.filter((artifact) => artifact.metadata?.source === "attachment" && artifact.metadata.attachmentFilename === filename).map((artifact) => artifact.id);
   if (linkedArtifactIds.length === 0) return;
   for (const artifactId of linkedArtifactIds) {
-    await layer.db.delete(project_exports.artifacts).where(eq(project_exports.artifacts.id, artifactId));
+    await layer.db.delete(project_exports.artifacts).where(and(
+      eq(project_exports.artifacts.id, artifactId),
+      projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+    ));
   }
   return;
 }
 async function getArtifactsForAttachmentCleanup(store, taskId) {
   const layer = store.asyncLayer;
-  const rows = await layer.db.select().from(project_exports.artifacts).where(eq(project_exports.artifacts.taskId, taskId));
+  const rows = await layer.db.select().from(project_exports.artifacts).where(and(
+    eq(project_exports.artifacts.taskId, taskId),
+    projectScopeFor(project_exports.artifacts.projectId, layer.projectId)
+  ));
   return rows;
 }
 async function deleteAttachmentImpl(store, id, filename) {
@@ -95670,7 +95878,7 @@ function clearLinkedAgentTaskIdsImpl(store, taskId, updatedAt = (/* @__PURE__ */
     `).run(updatedAt, updatedAt, taskId);
 }
 async function listArtifactsImpl(store, options) {
-  return listArtifacts(store.asyncLayer.db, options);
+  return listArtifacts(store.asyncLayer.db, options, store.asyncLayer.projectId);
 }
 async function rehomeOccupantImpl(store, taskId, targetColumn, reason, metadata) {
   let current;
@@ -96915,8 +97123,8 @@ async function upsertWorkflowWorkItemImpl(store, input, tx) {
 async function replaceActiveTaskWorkflowContinuationImpl(store, input) {
   return replaceActiveTaskWorkflowContinuation(store.asyncLayer, input);
 }
-async function seedStrandedPlanReviewContinuationImpl(store, input) {
-  return seedStrandedPlanReviewContinuation(store.asyncLayer, input);
+async function seedStrandedPlanReviewContinuationImpl(store, input, options = {}) {
+  return seedStrandedPlanReviewContinuation(store.asyncLayer, input, options);
 }
 async function transitionWorkflowWorkItemImpl(store, id, state, patch = {}, tx) {
   return transitionWorkflowWorkItem(store.asyncLayer, id, state, patch, tx);
@@ -101059,6 +101267,37 @@ async function getTaskVerificationRequestAsyncImpl(store, taskId) {
   const row = rows[0];
   return row ? { taskId: row.taskId, requestId: row.requestId, status: row.status, profile: row.profile, command: row.command, scope: row.scope, requestedBy: row.requestedBy, requestedAt: row.requestedAt, ...row.startedAt ? { startedAt: row.startedAt } : {}, ...row.completedAt ? { completedAt: row.completedAt } : {}, ...row.result ? { result: row.result } : {}, ...row.rejectionReason ? { rejectionReason: row.rejectionReason } : {} } : null;
 }
+async function listTaskRecommendationsImpl(store, options) {
+  const layer = store.asyncLayer;
+  const completeColumns = options?.completeColumns ?? await resolveProjectColumnsForRoles(store, ["complete"]);
+  const rawLimit = options?.limit;
+  const rawOffset = options?.offset;
+  const limit = typeof rawLimit === "number" && Number.isFinite(rawLimit) ? Math.min(200, Math.max(1, Math.trunc(rawLimit))) : 50;
+  const offset = typeof rawOffset === "number" && Number.isFinite(rawOffset) ? Math.max(0, Math.trunc(rawOffset)) : 0;
+  const columns = [...completeColumns];
+  if (columns.length === 0) return { items: [], rowOffset: offset, rowLimit: limit, returnedRowCount: 0, totalRowCount: 0, hasMore: false };
+  const filter = and(
+    taskProjectScope(layer),
+    isNull(project_exports.tasks.deletedAt),
+    inArray(project_exports.tasks.column, columns),
+    isNotNull(project_exports.tasks.recommendations),
+    sql`jsonb_array_length(${project_exports.tasks.recommendations}) > 0`
+  );
+  const [countRows, rows] = await Promise.all([
+    layer.db.select({ count: sql`count(*)` }).from(project_exports.tasks).where(filter),
+    layer.db.select({ id: project_exports.tasks.id, title: project_exports.tasks.title, column: project_exports.tasks.column, updatedAt: project_exports.tasks.updatedAt, recommendations: project_exports.tasks.recommendations }).from(project_exports.tasks).where(filter).orderBy(desc(project_exports.tasks.updatedAt), desc(project_exports.tasks.id)).limit(limit).offset(offset)
+  ]);
+  const items = [];
+  for (const row of rows) {
+    if (!Array.isArray(row.recommendations) || row.recommendations.length === 0) continue;
+    for (const recommendation of row.recommendations) {
+      items.push({ taskId: row.id, taskTitle: row.title ?? void 0, taskColumn: row.column, updatedAt: row.updatedAt, recommendation });
+    }
+  }
+  const totalRowCount = Number(countRows[0]?.count ?? 0);
+  const returnedRowCount = rows.length;
+  return { items, rowOffset: offset, rowLimit: limit, returnedRowCount, totalRowCount, hasMore: offset + returnedRowCount < totalRowCount };
+}
 var LEGACY_REVIEW_LANES5, LEGACY_ARCHIVE_LANES2;
 var init_reads = __esm({
   "../core/src/task-store/reads.ts"() {
@@ -101081,6 +101320,7 @@ var init_reads = __esm({
     init_retry_summary();
     init_errors3();
     init_project_lane_vocabulary();
+    init_data_layer();
     init_async_persistence();
     init_async_search();
     init_async_archive_db();
@@ -103187,6 +103427,9 @@ var init_store = __esm({
       async clearWorkflowRunStepInstancesAsync(taskId, keepRunId) {
         return clearWorkflowRunStepInstancesAsyncImpl(this, taskId, keepRunId);
       }
+      async listTaskRecommendations(options) {
+        return listTaskRecommendationsImpl(this, options);
+      }
       async listTasksForGithubTrackingReconcile(options) {
         return listTasksForGithubTrackingReconcileImpl(this, options);
       }
@@ -103913,8 +104156,8 @@ var init_store = __esm({
       async replaceActiveTaskWorkflowContinuation(input) {
         return replaceActiveTaskWorkflowContinuationImpl(this, input);
       }
-      async seedStrandedPlanReviewContinuation(input) {
-        return seedStrandedPlanReviewContinuationImpl(this, input);
+      async seedStrandedPlanReviewContinuation(input, options = {}) {
+        return seedStrandedPlanReviewContinuationImpl(this, input, options);
       }
       async transitionWorkflowWorkItem(id, state, patch = {}, tx) {
         return transitionWorkflowWorkItemImpl(this, id, state, patch, tx);
@@ -103997,7 +104240,11 @@ var init_store = __esm({
       /** PostgreSQL-authoritative audit reader; sync fallback remains for test doubles. */
       async getRunAuditEventsAsync(options = {}) {
         if (this.asyncLayer) {
-          const events = await queryRunAuditEvents(this.asyncLayer.db, options);
+          const events = await queryRunAuditEvents(
+            this.asyncLayer.db,
+            options,
+            this.asyncLayer.projectId
+          );
           return events.map((event) => ({
             ...event,
             taskId: event.taskId ?? void 0,
@@ -107575,7 +107822,9 @@ function rangeWhere(query) {
 async function aggregatePluginActivations(dbOrLayer, query = {}) {
   if ("ping" in dbOrLayer) {
     const layer = dbOrLayer;
-    const conditions = [];
+    const conditions = [projectScopeFor(project_exports.pluginActivations.projectId, layer.projectId)].filter(
+      (condition) => condition !== void 0
+    );
     if (query.from !== void 0) conditions.push(gte(project_exports.pluginActivations.activatedAt, query.from));
     if (query.to !== void 0) conditions.push(lte(project_exports.pluginActivations.activatedAt, query.to));
     const where2 = conditions.length > 0 ? and(...conditions) : void 0;
@@ -107614,6 +107863,7 @@ async function aggregatePluginActivations(dbOrLayer, query = {}) {
 var init_plugin_activation_analytics = __esm({
   "../core/src/plugins/plugin-activation-analytics.ts"() {
     "use strict";
+    init_data_layer();
     init_drizzle_orm();
     init_schema2();
   }
@@ -130611,6 +130861,18 @@ function rowToMessage2(row) {
     createdAt: row.createdAt
   };
 }
+function chatMessageProjectConditions(handle, projectId2) {
+  const messageScope = projectScopeFor(project_exports.chatMessages.projectId, projectId2);
+  const sessionScope = projectScopeFor(project_exports.chatSessions.projectId, projectId2);
+  if (!messageScope || !sessionScope) return [];
+  return [
+    messageScope,
+    exists(handle.select({ id: project_exports.chatSessions.id }).from(project_exports.chatSessions).where(and(
+      eq(project_exports.chatSessions.id, project_exports.chatMessages.sessionId),
+      sessionScope
+    )))
+  ];
+}
 function rowToRoom(row) {
   return {
     id: row.id,
@@ -130782,7 +131044,7 @@ async function replaceChatSessionTags(layer, sessionId, projectId2, tagIds) {
     return attachTags(tx, session);
   });
 }
-async function addChatMessage(handle, message) {
+async function addChatMessage(handle, message, projectId2) {
   const sanitizedAttachments = message.attachments === void 0 ? void 0 : sanitizeJsonbValue(message.attachments);
   const sanitized = {
     ...message,
@@ -130801,15 +131063,24 @@ async function addChatMessage(handle, message) {
     attachments: sanitizedAttachments ?? null,
     createdAt: sanitized.createdAt
   });
-  await handle.update(project_exports.chatSessions).set({ updatedAt: sanitized.createdAt }).where(eq(project_exports.chatSessions.id, sanitized.sessionId));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: sanitized.createdAt }).where(and(
+    eq(project_exports.chatSessions.id, sanitized.sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return sanitized;
 }
-async function getChatMessage(handle, id) {
-  const rows = await handle.select().from(project_exports.chatMessages).where(eq(project_exports.chatMessages.id, id));
+async function getChatMessage(handle, id, projectId2) {
+  const rows = await handle.select().from(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.id, id),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
   return rows[0] ? rowToMessage2(rows[0]) : void 0;
 }
-async function getChatMessages(handle, sessionId, filter) {
-  const conditions = [eq(project_exports.chatMessages.sessionId, sessionId)];
+async function getChatMessages(handle, sessionId, filter, projectId2) {
+  const conditions = [
+    eq(project_exports.chatMessages.sessionId, sessionId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ];
   if (filter?.before) {
     conditions.push(lte(project_exports.chatMessages.createdAt, filter.before));
   }
@@ -130819,9 +131090,12 @@ async function getChatMessages(handle, sessionId, filter) {
   const rows = await handle.select().from(project_exports.chatMessages).where(and(...conditions)).orderBy(filter?.order === "desc" ? desc(orderCol) : asc(orderCol)).limit(limit).offset(offset);
   return rows.map(rowToMessage2);
 }
-async function getLastMessageForSessions(handle, sessionIds) {
+async function getLastMessageForSessions(handle, sessionIds, projectId2) {
   if (sessionIds.length === 0) return /* @__PURE__ */ new Map();
-  const rows = await handle.select().from(project_exports.chatMessages).where(inArray(project_exports.chatMessages.sessionId, sessionIds)).orderBy(
+  const rows = await handle.select().from(project_exports.chatMessages).where(and(
+    inArray(project_exports.chatMessages.sessionId, sessionIds),
+    ...chatMessageProjectConditions(handle, projectId2)
+  )).orderBy(
     desc(project_exports.chatMessages.createdAt),
     desc(project_exports.chatMessages.id)
   );
@@ -130987,8 +131261,8 @@ async function setInFlightGeneration(handle, id, inFlightGeneration) {
   await handle.update(project_exports.chatSessions).set({ inFlightGeneration: sanitizedInFlightGeneration }).where(eq(project_exports.chatSessions.id, id));
   return getChatSession(handle, id);
 }
-async function addChatMessageAttachment(handle, sessionId, messageId, attachment) {
-  const message = await getChatMessage(handle, messageId);
+async function addChatMessageAttachment(handle, sessionId, messageId, attachment, projectId2) {
+  const message = await getChatMessage(handle, messageId, projectId2);
   if (!message || message.sessionId !== sessionId) {
     throw new Error(`Message ${messageId} not found in session ${sessionId}`);
   }
@@ -130996,25 +131270,35 @@ async function addChatMessageAttachment(handle, sessionId, messageId, attachment
     ...message.attachments ?? [],
     attachment
   ]);
-  await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(eq(project_exports.chatMessages.id, messageId));
-  const updated = await getChatMessage(handle, messageId);
+  await handle.update(project_exports.chatMessages).set({ attachments: updatedAttachments }).where(and(
+    eq(project_exports.chatMessages.id, messageId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  const updated = await getChatMessage(handle, messageId, projectId2);
   if (!updated) throw new Error(`Failed to update message ${messageId}`);
   return updated;
 }
-async function deleteChatMessage(handle, id) {
-  const existing = await getChatMessage(handle, id);
+async function deleteChatMessage(handle, id, projectId2) {
+  const existing = await getChatMessage(handle, id, projectId2);
   if (!existing) return false;
-  await handle.delete(project_exports.chatMessages).where(eq(project_exports.chatMessages.id, id));
-  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatSessions.id, existing.sessionId));
+  await handle.delete(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.id, id),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and(
+    eq(project_exports.chatSessions.id, existing.sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return true;
 }
-async function searchChatSessionsByMessageContent(handle, query, sessionIds) {
+async function searchChatSessionsByMessageContent(handle, query, sessionIds, projectId2) {
   const trimmed = query.trim();
   if (!trimmed || sessionIds.length === 0) return /* @__PURE__ */ new Map();
   const escaped = trimmed.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
   const rows = await handle.select().from(project_exports.chatMessages).where(and(
     inArray(project_exports.chatMessages.sessionId, sessionIds),
-    ilike(project_exports.chatMessages.content, `%${escaped}%`)
+    ilike(project_exports.chatMessages.content, `%${escaped}%`),
+    ...chatMessageProjectConditions(handle, projectId2)
   )).orderBy(
     desc(project_exports.chatMessages.createdAt),
     desc(project_exports.chatMessages.id)
@@ -131028,13 +131312,16 @@ async function searchChatSessionsByMessageContent(handle, query, sessionIds) {
   }
   return result;
 }
-async function deleteChatMessagesFrom(handle, sessionId, fromMessageId) {
-  const orderedRows = await handle.select().from(project_exports.chatMessages).where(eq(project_exports.chatMessages.sessionId, sessionId)).orderBy(
+async function deleteChatMessagesFrom(handle, sessionId, fromMessageId, projectId2) {
+  const orderedRows = await handle.select().from(project_exports.chatMessages).where(and(
+    eq(project_exports.chatMessages.sessionId, sessionId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  )).orderBy(
     asc(project_exports.chatMessages.createdAt),
     asc(project_exports.chatMessages.id)
   );
   const ordered2 = orderedRows.map(rowToMessage2);
-  const target = await getChatMessage(handle, fromMessageId);
+  const target = await getChatMessage(handle, fromMessageId, projectId2);
   if (!target || target.sessionId !== sessionId) {
     return { deletedIds: [], retained: ordered2 };
   }
@@ -131047,19 +131334,28 @@ async function deleteChatMessagesFrom(handle, sessionId, fromMessageId) {
   if (deletedIds.length === 0) {
     return { deletedIds: [], retained };
   }
-  await handle.delete(project_exports.chatMessages).where(inArray(project_exports.chatMessages.id, deletedIds));
-  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(eq(project_exports.chatSessions.id, sessionId));
+  await handle.delete(project_exports.chatMessages).where(and(
+    inArray(project_exports.chatMessages.id, deletedIds),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  await handle.update(project_exports.chatSessions).set({ updatedAt: (/* @__PURE__ */ new Date()).toISOString() }).where(and(
+    eq(project_exports.chatSessions.id, sessionId),
+    projectScopeFor(project_exports.chatSessions.projectId, projectId2)
+  ));
   return { deletedIds, retained };
 }
-async function updateChatMessageMetadata(handle, messageId, metadata, options) {
-  const existing = await getChatMessage(handle, messageId);
+async function updateChatMessageMetadata(handle, messageId, metadata, options, projectId2) {
+  const existing = await getChatMessage(handle, messageId, projectId2);
   if (!existing) {
     throw new Error(`Message ${messageId} not found`);
   }
   const merge2 = options?.merge !== false;
   const nextMetadata = metadata === null ? merge2 ? existing.metadata : null : merge2 ? { ...existing.metadata ?? {}, ...metadata } : metadata;
-  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(eq(project_exports.chatMessages.id, messageId));
-  const updated = await getChatMessage(handle, messageId);
+  await handle.update(project_exports.chatMessages).set({ metadata: sanitizeJsonbValue(nextMetadata) ?? null }).where(and(
+    eq(project_exports.chatMessages.id, messageId),
+    ...chatMessageProjectConditions(handle, projectId2)
+  ));
+  const updated = await getChatMessage(handle, messageId, projectId2);
   if (!updated) {
     throw new Error(`Failed to update message ${messageId}`);
   }
@@ -131441,7 +131737,7 @@ var init_chat_store = __esm({
           attachments: input.attachments,
           createdAt: now
         };
-        const created = await addChatMessage(this.asyncLayer.db, message);
+        const created = await addChatMessage(this.asyncLayer.db, message, this.asyncLayer.projectId);
         this.emit("chat:message:added", created);
         return created;
       }
@@ -131449,7 +131745,7 @@ var init_chat_store = __esm({
        * Append a file attachment metadata record to an existing message.
        */
       async addMessageAttachment(sessionId, messageId, attachment) {
-        const updated = await addChatMessageAttachment(this.asyncLayer.db, sessionId, messageId, attachment);
+        const updated = await addChatMessageAttachment(this.asyncLayer.db, sessionId, messageId, attachment, this.asyncLayer.projectId);
         this.emit("chat:message:updated", updated);
         return updated;
       }
@@ -131461,7 +131757,7 @@ var init_chat_store = __esm({
        * @returns Array of messages ordered by createdAt ASC (default) or DESC
        */
       async getMessages(sessionId, filter) {
-        return getChatMessages(this.asyncLayer.db, sessionId, filter);
+        return getChatMessages(this.asyncLayer.db, sessionId, filter, this.asyncLayer.projectId);
       }
       /**
        * Get a message by ID.
@@ -131470,7 +131766,7 @@ var init_chat_store = __esm({
        * @returns The message, or undefined if not found
        */
       async getMessage(id) {
-        return getChatMessage(this.asyncLayer.db, id);
+        return getChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
       }
       /**
        * Get the latest message for each session in the provided list.
@@ -131480,10 +131776,10 @@ var init_chat_store = __esm({
        * @returns Map of sessionId -> latest ChatMessage for that session
        */
       async getLastMessageForSessions(sessionIds) {
-        return getLastMessageForSessions(this.asyncLayer.db, sessionIds);
+        return getLastMessageForSessions(this.asyncLayer.db, sessionIds, this.asyncLayer.projectId);
       }
       async hasMessages(sessionId) {
-        return (await getChatMessages(this.asyncLayer.db, sessionId, { limit: 1 })).length > 0;
+        return (await getChatMessages(this.asyncLayer.db, sessionId, { limit: 1 }, this.asyncLayer.projectId)).length > 0;
       }
       /**
        * Search sessions by message content (not just title/agentId).
@@ -131511,7 +131807,7 @@ var init_chat_store = __esm({
         if (!trimmed || !sessionIds || sessionIds.length === 0) {
           return /* @__PURE__ */ new Map();
         }
-        return searchChatSessionsByMessageContent(this.asyncLayer.db, trimmed, sessionIds);
+        return searchChatSessionsByMessageContent(this.asyncLayer.db, trimmed, sessionIds, this.asyncLayer.projectId);
       }
       /**
        * Delete a message by ID.
@@ -131520,9 +131816,9 @@ var init_chat_store = __esm({
        * @returns true if deleted, false if not found
        */
       async deleteMessage(id) {
-        const existing = await getChatMessage(this.asyncLayer.db, id);
+        const existing = await getChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
         if (!existing) return false;
-        const deleted = await deleteChatMessage(this.asyncLayer.db, id);
+        const deleted = await deleteChatMessage(this.asyncLayer.db, id, this.asyncLayer.projectId);
         if (deleted) {
           this.emit("chat:message:deleted", id);
           const updatedSession = await this.getSession(existing.sessionId);
@@ -131545,7 +131841,7 @@ var init_chat_store = __esm({
        * @returns deletedIds (in ASC order) and retained messages (pre-edit history, ASC order)
        */
       async deleteMessagesFrom(sessionId, fromMessageId) {
-        const result = await deleteChatMessagesFrom(this.asyncLayer.db, sessionId, fromMessageId);
+        const result = await deleteChatMessagesFrom(this.asyncLayer.db, sessionId, fromMessageId, this.asyncLayer.projectId);
         if (result.deletedIds.length > 0) {
           for (const id of result.deletedIds) {
             this.emit("chat:message:deleted", id);
@@ -131563,7 +131859,7 @@ var init_chat_store = __esm({
        * is what lets a later edit rewind losslessly via SessionManager.branch()/resetLeaf().
        */
       async updateMessageMetadata(messageId, metadata, options) {
-        const updated = await updateChatMessageMetadata(this.asyncLayer.db, messageId, metadata, options);
+        const updated = await updateChatMessageMetadata(this.asyncLayer.db, messageId, metadata, options, this.asyncLayer.projectId);
         this.emit("chat:message:updated", updated);
         return updated;
       }
@@ -132999,6 +133295,77 @@ var init_task_timing = __esm({
   }
 });
 
+// ../core/src/task-recommendation-notice.ts
+import { createHash as createHash20 } from "node:crypto";
+function registerTaskRecommendationNoticeMailbox(store, mailbox) {
+  mailboxes2.set(store, mailbox);
+  return () => {
+    if (mailboxes2.get(store) === mailbox) mailboxes2.delete(store);
+  };
+}
+function getTaskRecommendationNoticeMailbox(store) {
+  return mailboxes2.get(store);
+}
+function buildTaskRecommendationNoticeContent(task, recommendations) {
+  const title = task.title?.trim();
+  const heading = title ? `## Recommendations from ${task.id} \u2014 ${title}` : `## Recommendations from ${task.id}`;
+  return [
+    heading,
+    "",
+    "These are optional, non-blocking out-of-scope proposals that were **not** executed.",
+    "",
+    ...recommendations.map((recommendation) => `- **${recommendation.title}** \u2014 \`${recommendation.category}\`: ${recommendation.description}`),
+    "",
+    `Open ${task.id}'s **Recommendations** tab to review them. **Create task** files one through normal guarded intake.`
+  ].join("\n");
+}
+function buildTaskRecommendationNoticeIdempotencyKey(taskId, recommendations) {
+  const ids = recommendations.map(({ id }) => id).sort().join("\n");
+  const digest = createHash20("sha256").update(ids, "utf8").digest("hex").slice(0, 16);
+  return `task-recommendation-notice:${taskId}:${digest}`;
+}
+async function notifyOperatorOfTaskRecommendations(store, task, recommendations, settings) {
+  try {
+    if (settings.recommendationMailboxNoticeEnabled === false || !recommendations?.length) return false;
+    const mailbox = mailboxes2.get(store);
+    if (!mailbox) return false;
+    await mailbox.sendMessageOnce(
+      {
+        fromId: "system",
+        fromType: "system",
+        toId: DASHBOARD_USER_ID,
+        toType: "user",
+        type: "system",
+        content: buildTaskRecommendationNoticeContent(task, recommendations),
+        metadata: {
+          kind: "task-recommendation-notice",
+          taskId: task.id,
+          recommendationCount: recommendations.length,
+          recommendationIds: recommendations.map(({ id }) => id),
+          categories: recommendations.map(({ category }) => category)
+        }
+      },
+      buildTaskRecommendationNoticeIdempotencyKey(task.id, recommendations)
+    );
+    return true;
+  } catch (error2) {
+    noticeLog2.warn(
+      `Operator recommendation notice failed for ${task.id}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+    return false;
+  }
+}
+var noticeLog2, mailboxes2;
+var init_task_recommendation_notice = __esm({
+  "../core/src/task-recommendation-notice.ts"() {
+    "use strict";
+    init_logger2();
+    init_types();
+    noticeLog2 = createLogger2("task-recommendation-notice");
+    mailboxes2 = /* @__PURE__ */ new WeakMap();
+  }
+});
+
 // ../core/src/session-identity-registry.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 import { resolve as resolve23 } from "node:path";
@@ -133848,6 +134215,8 @@ __export(src_exports, {
   buildTaskDeleteNoticeContent: () => buildTaskDeleteNoticeContent,
   buildTaskDeleteNoticeIdempotencyKey: () => buildTaskDeleteNoticeIdempotencyKey,
   buildTaskLineageTrailer: () => buildTaskLineageTrailer,
+  buildTaskRecommendationNoticeContent: () => buildTaskRecommendationNoticeContent,
+  buildTaskRecommendationNoticeIdempotencyKey: () => buildTaskRecommendationNoticeIdempotencyKey,
   buildToolOutputTruncationMarker: () => buildToolOutputTruncationMarker,
   buildTriageHeartbeatGuidance: () => buildTriageHeartbeatGuidance,
   buildTriageMemoryInstructions: () => buildTriageMemoryInstructions,
@@ -134178,6 +134547,7 @@ __export(src_exports, {
   getTaskMergeBlocker: () => getTaskMergeBlocker,
   getTaskMoveDisposer: () => getTaskMoveDisposer,
   getTaskPriorityRank: () => getTaskPriorityRank,
+  getTaskRecommendationNoticeMailbox: () => getTaskRecommendationNoticeMailbox,
   getTemplatesForRole: () => getTemplatesForRole,
   getTotalAgentActiveMs: () => getTotalAgentActiveMs,
   getTrait: () => getTrait,
@@ -134428,6 +134798,7 @@ __export(src_exports, {
   normalizeWorkflowPromptOverrides: () => normalizeWorkflowPromptOverrides,
   normalizeWorkflowReviewFindings: () => normalizeWorkflowReviewFindings,
   notifyOperatorOfNonOperatorDelete: () => notifyOperatorOfNonOperatorDelete,
+  notifyOperatorOfTaskRecommendations: () => notifyOperatorOfTaskRecommendations,
   overseerAdviceSeverityRank: () => overseerAdviceSeverityRank,
   parseAgentManifest: () => parseAgentManifest,
   parseCompanyArchive: () => parseCompanyArchive,
@@ -134537,6 +134908,7 @@ __export(src_exports, {
   registerStepParser: () => registerStepParser,
   registerTaskDeleteNoticeMailbox: () => registerTaskDeleteNoticeMailbox,
   registerTaskMoveDisposer: () => registerTaskMoveDisposer,
+  registerTaskRecommendationNoticeMailbox: () => registerTaskRecommendationNoticeMailbox,
   registerTraitHookImpl: () => registerTraitHookImpl,
   rekeyFallbackProjectPartition: () => rekeyFallbackProjectPartition,
   releaseEmbeddedRuntimeLease: () => releaseEmbeddedRuntimeLease,
@@ -135164,6 +135536,7 @@ var init_src2 = __esm({
     init_task_document_concurrency();
     init_task_delete_attribution();
     init_task_delete_notice();
+    init_task_recommendation_notice();
     init_session_identity_registry();
     init_task_lifecycle_event_retention();
     init_task_lifecycle_consumer_identity();
@@ -138534,7 +138907,7 @@ ${getErrorStderr(error2) ?? ""}`;
 });
 
 // ../engine/src/worktree/secrets-env-writer.ts
-import { createHash as createHash20 } from "node:crypto";
+import { createHash as createHash21 } from "node:crypto";
 import { execFile as execFile7 } from "node:child_process";
 import { promises as fs5 } from "node:fs";
 import path2 from "node:path";
@@ -138543,7 +138916,7 @@ function isValidFilename(filename) {
   return !!filename && !filename.includes("/") && !filename.includes("\\") && !filename.includes("..") && !filename.includes("\0") && filename !== FINGERPRINT_FILE;
 }
 function sha2562(content) {
-  return createHash20("sha256").update(Buffer.from(content, "utf8")).digest("hex");
+  return createHash21("sha256").update(Buffer.from(content, "utf8")).digest("hex");
 }
 function quote(value) {
   return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"').replaceAll("\n", "\\n").replaceAll("\r", "\\r").replaceAll("	", "\\t")}"`;
@@ -141206,11 +141579,11 @@ var init_planning_handoff_recovery = __esm({
 // ../engine/src/plan-review-continuation.ts
 async function seedPreReleasePlanReviewContinuation(store, task, ir2, options = {}) {
   const node = resolvePreReleasePlanReviewNode(ir2);
-  if (!node || node.column !== task.column) return { seeded: false };
+  if (!node || node.column !== task.column) return { seeded: false, reason: "no-pre-release-plan-review" };
   if (isTaskBlockedOnApproval(task)) return { seeded: false, reason: "awaiting-approval" };
   if (task.paused === true || task.userPaused === true) return { seeded: false, reason: "paused" };
   const items = await store.listWorkflowWorkItemsForTask(task.id);
-  const active2 = items.filter((item2) => ACTIVE_WORKFLOW_WORK_ITEM_STATES.includes(item2.state));
+  const active2 = items.filter((item2) => ACTIVE_WORKFLOW_WORK_ITEM_STATES.includes(item2.state) && item2.id !== options.retirePredecessorId);
   if (active2.length > 0) return { seeded: false, reason: "active-continuation" };
   const continuationSequence = items.length;
   const input = {
@@ -141226,6 +141599,9 @@ async function seedPreReleasePlanReviewContinuation(store, task, ir2, options =
     targetColumn: task.column,
     irHash: computeWorkflowIrPin(ir2, node.id).irHash
   };
+  if (options.retirePredecessorId) {
+    return store.seedStrandedPlanReviewContinuation(input, { retirePredecessorId: options.retirePredecessorId });
+  }
   if (options.atomic) return store.seedStrandedPlanReviewContinuation(input);
   const item = await store.replaceActiveTaskWorkflowContinuation(input);
   return { seeded: true, workItemId: item.id };
@@ -141265,7 +141641,7 @@ var init_plan_review_continuation = __esm({
 });
 
 // ../engine/src/execution/hold-release.ts
-import { createHash as createHash21 } from "node:crypto";
+import { createHash as createHash22 } from "node:crypto";
 import { readFile as readFile33 } from "node:fs/promises";
 function findColumn2(ir2, columnId) {
   if (ir2.version !== "v2") return void 0;
@@ -141303,9 +141679,9 @@ async function checkAndRecordUnplannedExecutionBlock(store, task, ir2) {
       promptContent = "";
     }
   }
-  const promptMarker = promptContent.length > 0 ? createHash21("sha256").update(promptContent).digest("hex") : "missing";
+  const promptMarker = promptContent.length > 0 ? createHash22("sha256").update(promptContent).digest("hex") : "missing";
   const dependencies = [...task.dependencies ?? []].sort();
-  const episode = createHash21("sha256").update(JSON.stringify({
+  const episode = createHash22("sha256").update(JSON.stringify({
     planReviewNode,
     promptMarker,
     dependencies,
@@ -144276,32 +144652,36 @@ var init_scheduler = __esm({
             const hierarchy = await missionStore.getMissionWithHierarchy(mission.id);
             if (!hierarchy) continue;
             for (const slice of hierarchy.milestones.flatMap((milestone) => milestone.slices).filter((slice2) => slice2.status === "active")) {
-              const superseded = await missionStore.reconcileSupersededGeneratedFixFeatures(slice.id);
-              fixed += superseded.supersededCount;
-              if (superseded.supersededCount > 0) {
-                const refreshed = await missionStore.getSlice(slice.id);
-                if (refreshed?.status === "complete") {
-                  await this.onSliceComplete(refreshed);
-                  continue;
+              try {
+                const superseded = await missionStore.reconcileSupersededGeneratedFixFeatures(slice.id);
+                fixed += superseded.supersededCount;
+                if (superseded.supersededCount > 0) {
+                  const refreshed = await missionStore.getSlice(slice.id);
+                  if (refreshed?.status === "complete") {
+                    await this.onSliceComplete(refreshed);
+                    continue;
+                  }
                 }
-              }
-              const listFeatures2 = missionStore.listFeatures;
-              const features = listFeatures2 ? await listFeatures2(slice.id) : slice.features;
-              const supersededFeatureIds = new Set(superseded.featureIds ?? []);
-              const autoTriage = mission.autopilotEnabled === true || mission.autoAdvance === true;
-              for (const feature of features) {
-                if (supersededFeatureIds.has(feature.id) || feature.taskId || !autoTriage || feature.status === "blocked") continue;
-                if (feature.status !== "defined" && this.isGeneratedFixFeature(feature)) {
-                  await missionStore.updateFeature(feature.id, { status: "blocked", loopState: "blocked", taskId: void 0 });
+                const listFeatures2 = missionStore.listFeatures;
+                const features = listFeatures2 ? await listFeatures2.call(missionStore, slice.id) : slice.features;
+                const supersededFeatureIds = new Set(superseded.featureIds ?? []);
+                const autoTriage = mission.autopilotEnabled === true || mission.autoAdvance === true;
+                for (const feature of features) {
+                  if (supersededFeatureIds.has(feature.id) || feature.taskId || !autoTriage || feature.status === "blocked") continue;
+                  if (feature.status !== "defined" && this.isGeneratedFixFeature(feature)) {
+                    await missionStore.updateFeature(feature.id, { status: "blocked", loopState: "blocked", taskId: void 0 });
+                    fixed++;
+                    continue;
+                  }
+                  if (feature.status !== "defined" && feature.status !== "triaged" && feature.status !== "in-progress") continue;
+                  const ready = feature.status === "defined" ? feature : await missionStore.updateFeature(feature.id, { status: "defined", loopState: "idle", taskId: void 0 });
+                  if (ready !== feature) fixed++;
+                  const triaged = await missionStore.triageFeature(ready.id);
                   fixed++;
-                  continue;
+                  if (triaged.taskId) await this.emitStrandedFeatureTriageAudit(mission.id, slice.id, triaged.id, triaged.taskId);
                 }
-                if (feature.status !== "defined" && feature.status !== "triaged" && feature.status !== "in-progress") continue;
-                const ready = feature.status === "defined" ? feature : await missionStore.updateFeature(feature.id, { status: "defined", loopState: "idle", taskId: void 0 });
-                if (ready !== feature) fixed++;
-                const triaged = await missionStore.triageFeature(ready.id);
-                fixed++;
-                if (triaged.taskId) await this.emitStrandedFeatureTriageAudit(mission.id, slice.id, triaged.id, triaged.taskId);
+              } catch (error2) {
+                schedulerLog.error(`Error during active mission recovery reconciliation for slice ${slice.id}:`, error2);
               }
             }
           }
@@ -144342,7 +144722,7 @@ var init_scheduler = __esm({
 });
 
 // ../engine/src/agents/agent-logger.ts
-import { createHash as createHash22 } from "node:crypto";
+import { createHash as createHash23 } from "node:crypto";
 function truncateToolResultDetail(value) {
   if (value.length <= TOOL_RESULT_DETAIL_LIMIT) return value;
   return `${value.slice(0, TOOL_RESULT_DETAIL_LIMIT)}${TOOL_RESULT_DETAIL_TRUNCATION_NOTICE}`;
@@ -144431,7 +144811,7 @@ function summarizeToolArgs(name2, args) {
     const json2 = JSON.stringify(args);
     if (!json2 || json2 === "{}" || json2 === "[]") return void 0;
     if (json2.length <= STRUCTURED_ARG_SUMMARY_MAX) return json2;
-    const hash3 = createHash22("sha256").update(json2).digest("hex").slice(0, STRUCTURED_ARG_HASH_HEX_LEN);
+    const hash3 = createHash23("sha256").update(json2).digest("hex").slice(0, STRUCTURED_ARG_HASH_HEX_LEN);
     const suffix = `\u2026#${hash3}`;
     const keep = Math.max(0, STRUCTURED_ARG_SUMMARY_MAX - suffix.length);
     return `${json2.slice(0, keep)}${suffix}`;
@@ -148783,7 +149163,13 @@ var init_gating_classifications = __esm({
       "fn_post_room_message",
       "fn_update_identity",
       "fn_reflect_on_performance",
-      "fn_read_evaluations"
+      /*
+      FNXC:ToolGovernance 2026-08-12-22:11:
+      fn_agent_read_evaluations is a subtree-scoped read. Authorization is enforced by
+      the extension tool's getChainOfCommand boundary, not by this action classifier.
+      */
+      "fn_read_evaluations",
+      "fn_agent_read_evaluations"
     ]);
     COORDINATION_EXEMPT_TOOLS = [
       "read",
@@ -148843,6 +149229,8 @@ var init_gating_classifications = __esm({
       "fn_post_room_message",
       "fn_memory_append",
       "fn_read_evaluations",
+      // FNXC:ToolGovernance 2026-08-12-22:11: The manager read is subtree-authorized in extension.ts; follow-up remains absent so it falls back to task_agent_mutation policy.
+      "fn_agent_read_evaluations",
       "fn_update_identity",
       "fn_reflect_on_performance"
     ];
@@ -148867,7 +149255,7 @@ var init_gating_classifications = __esm({
 });
 
 // ../engine/src/agents/agent-action-gate.ts
-import { createHash as createHash23 } from "node:crypto";
+import { createHash as createHash24 } from "node:crypto";
 function getExemptTools() {
   if (!_exemptTools) {
     _exemptTools = new Set(DEFAULT_EXEMPT_TOOLS);
@@ -148901,7 +149289,7 @@ function evaluateAgentActionGate(params) {
   if (params.toolName === "bash") {
     const command = extractShellCommand(args);
     const git7 = classifyGitCommand(command);
-    resourceId = command ? `cmd:${createHash23("sha256").update(command).digest("hex").slice(0, 16)}` : void 0;
+    resourceId = command ? `cmd:${createHash24("sha256").update(command).digest("hex").slice(0, 16)}` : void 0;
     if (git7?.write) {
       category = "git_write";
       operation = git7.operation;
@@ -177423,7 +177811,7 @@ var init_code_node_runner = __esm({
 // ../engine/src/agent-tools.ts
 import { appendFile as appendFile3, mkdir as mkdir28, readFile as readFile38, readdir as readdir11, realpath as realpath2, stat as stat11, writeFile as writeFile26 } from "node:fs/promises";
 import { existsSync as existsSync52 } from "node:fs";
-import { createHash as createHash24, randomUUID as randomUUID46 } from "node:crypto";
+import { createHash as createHash25, randomUUID as randomUUID46 } from "node:crypto";
 import { tmpdir as tmpdir5 } from "node:os";
 import { extname as extname4, isAbsolute as isAbsolute14, join as join66, relative as relative14, resolve as resolve37, sep as sep10 } from "node:path";
 import { Type as Type2 } from "@earendil-works/pi-ai";
@@ -177467,7 +177855,7 @@ async function readAgentMemoryWorkspaceLongTerm(rootDir, agentId) {
   }
 }
 function qmdAgentMemoryCollectionName2(rootDir, agentId) {
-  const hash3 = createHash24("sha1").update(`${rootDir}:${agentId}`).digest("hex").slice(0, 12);
+  const hash3 = createHash25("sha1").update(`${rootDir}:${agentId}`).digest("hex").slice(0, 12);
   return `fusion-agent-memory-${sanitizeAgentMemoryId(agentId).toLowerCase()}-${hash3}`;
 }
 function buildQmdAgentMemoryCollectionAddArgs(rootDir, agentId) {
@@ -187582,7 +187970,7 @@ var init_verification_utils = __esm({
 
 // ../engine/src/merge/merge-dependency-sync.ts
 import { exec as exec25 } from "node:child_process";
-import { createHash as createHash26 } from "node:crypto";
+import { createHash as createHash27 } from "node:crypto";
 import { existsSync as existsSync54, readFileSync as readFileSync17, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join68 } from "node:path";
 import { promisify as promisify35 } from "node:util";
@@ -187609,7 +187997,7 @@ function computeLockfileHash(rootDir) {
     const p2 = join68(rootDir, name2);
     if (existsSync54(p2)) {
       try {
-        return createHash26("sha256").update(readFileSync17(p2)).digest("hex");
+        return createHash27("sha256").update(readFileSync17(p2)).digest("hex");
       } catch {
         return null;
       }
@@ -190146,7 +190534,7 @@ var init_mesh_lease_manager = __esm({
 });
 
 // ../engine/src/merge/merger-integration-worktree.ts
-import { createHash as createHash27 } from "node:crypto";
+import { createHash as createHash28 } from "node:crypto";
 import { exec as exec31, execFile as execFile22 } from "node:child_process";
 import { promisify as promisify45 } from "node:util";
 function quoteAutostashArg(value) {
@@ -190269,7 +190657,7 @@ async function gitDirtyFingerprintLocal(rootDir) {
       )
     ]);
     if (!diffOut && !statusOut) return "";
-    return createHash27("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
+    return createHash28("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
   } catch {
     return "";
   }
@@ -191255,7 +191643,7 @@ import { execSync as execSync5, exec as exec33 } from "node:child_process";
 import * as childProcess4 from "node:child_process";
 import { promisify as promisify48 } from "node:util";
 import { existsSync as existsSync57, readFileSync as readFileSync20, writeFileSync as writeFileSync8, unlinkSync as unlinkSync3, renameSync as renameSync4 } from "node:fs";
-import { createHash as createHash28 } from "node:crypto";
+import { createHash as createHash29 } from "node:crypto";
 import { join as join72, resolve as resolve43 } from "node:path";
 import { hostname as hostname2 } from "node:os";
 import { Type as Type4 } from "typebox";
@@ -191503,7 +191891,7 @@ async function gitDirtyFingerprint(rootDir) {
       )
     ]);
     if (!diffOut && !statusOut) return "";
-    return createHash28("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
+    return createHash29("sha256").update(diffOut).update("\0").update(statusOut).digest("hex");
   } catch {
     return "";
   }
@@ -200390,7 +200778,7 @@ import { promisify as promisify79 } from "node:util";
 // ../engine/src/runtimes/in-process-runtime.ts
 init_src2();
 init_scheduler();
-import { createHash as createHash31 } from "node:crypto";
+import { createHash as createHash32 } from "node:crypto";
 import { EventEmitter as EventEmitter27 } from "node:events";
 
 // ../engine/src/executor/public-reexports.ts
@@ -203117,7 +203505,7 @@ init_agent_tools();
 init_agent_logger();
 init_agent_usage_telemetry();
 import { Type as Type3 } from "@earendil-works/pi-ai";
-import { createHash as createHash25 } from "node:crypto";
+import { createHash as createHash26 } from "node:crypto";
 
 // ../engine/src/agents/approval-mail.ts
 init_src2();
@@ -204745,7 +205133,7 @@ function truncatePrompt(text2, maxChars) {
 ... (truncated, ${text2.length} chars)`;
 }
 function shortContentHash(value) {
-  return createHash25("sha256").update(value).digest("hex").slice(0, 8);
+  return createHash26("sha256").update(value).digest("hex").slice(0, 8);
 }
 function buildIdentitySnapshot(args) {
   const { agent, resolvedInstructions, workspaceMemory } = args;
@@ -233233,6 +233621,34 @@ init_effective_settings();
 init_run_audit();
 init_logger();
 init_lifecycle_columns();
+
+// ../engine/src/executor/completion-recommendation-notice.ts
+init_src2();
+var pendingNotices = /* @__PURE__ */ new Set();
+function dispatchAcceptedCompletionRecommendationNotice(args) {
+  if (!args.recommendations?.length) return;
+  const pending = (async () => {
+    const settings = args.settings ?? await args.store.getSettings();
+    const task = await args.store.getTask(args.taskId);
+    if (!task || task.deletedAt) return;
+    await notifyOperatorOfTaskRecommendations(
+      args.store,
+      { id: args.taskId, title: args.taskTitle ?? task.title },
+      args.recommendations,
+      settings
+    );
+  })();
+  pendingNotices.add(pending);
+  void pending.catch((error2) => {
+    args.log?.warn(
+      `Failed to dispatch recommendation mailbox notice for ${args.taskId}: ${error2 instanceof Error ? error2.message : String(error2)}`
+    );
+  }).finally(() => {
+    pendingNotices.delete(pending);
+  });
+}
+
+// ../engine/src/executor/create-task-done-tool.ts
 function createTaskDoneTool(deps, taskId, worktreePath, promptContent, codeReviewVerdicts, onDone, audit) {
   const store = deps.store;
   return {
@@ -233567,6 +233983,16 @@ ${rerunSuffix}`
         bulkCompletionRefusalAt: null
       });
       await store.logEntry(taskId, "Task marked done by agent", void 0, deps.getRunContextFor(taskId));
+      if (completionRecommendations !== void 0) {
+        dispatchAcceptedCompletionRecommendationNotice({
+          store,
+          taskId,
+          taskTitle: task.title,
+          recommendations: completionRecommendations,
+          settings,
+          log: executorLog
+        });
+      }
       const latestTask = await store.getTask(taskId);
       let latestColumn = latestTask.column;
       if (latestColumn === await resolveReboundColumnFor(store, taskId)) {
@@ -245399,6 +245825,16 @@ ${rerunSuffix}` });
     if (latestColumn === await resolveWipTargetForTask(deps.store, task.id) && !hardPauseActive && beforeWatchdog && !beforeWatchdog.deletedAt && !(rejectIfPaused && (beforeWatchdog.paused || beforeWatchdog.userPaused))) {
       deps.scheduleCompletedTaskWatchdog(task.id, "fn_task_done");
     }
+    if (recommendations !== void 0) {
+      dispatchAcceptedCompletionRecommendationNotice({
+        store: deps.store,
+        taskId: task.id,
+        taskTitle: task.title,
+        recommendations,
+        settings,
+        log: executorLog
+      });
+    }
     return { completed: true, hardPauseActive };
   } catch (error2) {
     await restoreNoCommitsExpected();
@@ -250612,7 +251048,7 @@ init_notifier();
 
 // ../engine/src/healing/stuck-task-detector.ts
 init_logger();
-import { createHash as createHash29 } from "node:crypto";
+import { createHash as createHash30 } from "node:crypto";
 var stuckLog = createLogger("stuck-detector");
 var LOOP_ACTIVITY_THRESHOLD = 60;
 var LOOP_IGNORED_STEP_MIN = 10;
@@ -250623,7 +251059,7 @@ var TOOL_DETAIL_HASH_HEX_LEN = 16;
 var NO_PROGRESS_CHURN_THRESHOLD = 25;
 var VERIFICATION_DEADLINE_GRACE_MS = 5e3;
 function hashToolDetail(detail) {
-  return createHash29("sha256").update(detail).digest("hex").slice(0, TOOL_DETAIL_HASH_HEX_LEN);
+  return createHash30("sha256").update(detail).digest("hex").slice(0, TOOL_DETAIL_HASH_HEX_LEN);
 }
 function buildToolFingerprint(toolName, toolDetail) {
   const name2 = toolName.trim().toLowerCase() || "tool";
@@ -253373,7 +253809,7 @@ var MissionAutopilot = class {
 // ../engine/src/missions/mission-execution-loop.ts
 init_src2();
 import { EventEmitter as EventEmitter26 } from "node:events";
-import { createHash as createHash30 } from "node:crypto";
+import { createHash as createHash31 } from "node:crypto";
 
 // ../engine/src/missions/mission-verification.ts
 init_sandbox();
@@ -253445,7 +253881,7 @@ var MAX_VALIDATION_RESPONSE_BYTES = 256 * 1024;
 var MAX_VALIDATION_JSON_CANDIDATES = 8;
 var VALIDATION_FAILURE_BUDGET_PER_FINGERPRINT = 3;
 function fingerprintMissionValidationInput(landedSha, provider, modelId, systemPrompt, userPrompt) {
-  return createHash30("sha256").update(Buffer.from(JSON.stringify(["mission-validation-input-v1", landedSha, provider, modelId, systemPrompt, userPrompt]), "utf8")).digest("hex");
+  return createHash31("sha256").update(Buffer.from(JSON.stringify(["mission-validation-input-v1", landedSha, provider, modelId, systemPrompt, userPrompt]), "utf8")).digest("hex");
 }
 var MissionExecutionLoop = class extends EventEmitter26 {
   running = false;
@@ -257161,7 +257597,7 @@ You are ${assignedAgent.name}${assignedAgent.title?.trim() ? `, ${assignedAgent.
             }
             return;
           }
-          const duplicateReport = { outcome: "parked" };
+          const duplicateReport = { outcome: "parked", planningWorkItemId };
           if (await this.tryFinalizeExplicitDuplicateMarker(task, written, settings, {
             isReplan,
             feedback
@@ -257180,6 +257616,7 @@ You are ${assignedAgent.name}${assignedAgent.title?.trim() ? `, ${assignedAgent.
             isReplan,
             feedback
           });
+          finalizeReport.planningWorkItemId = planningWorkItemId;
           this.options.onSpecifyComplete?.(task, finalizeReport);
         } finally {
           this.activeSessions.delete(task.id);
@@ -258754,11 +259191,46 @@ async function reactToSpecificationComplete(deps) {
     return;
   }
   deps.log(`Specified ${deps.taskId} \u2192 todo`);
-  const live = await deps.getTask(deps.taskId);
-  if (!live || live.paused || live.userPaused) return;
-  const ir2 = await deps.resolveIr(live.id);
-  await deps.seed(live, ir2);
-  deps.kick();
+  const sleep7 = deps.sleep ?? ((ms2) => new Promise((resolve47) => setTimeout(resolve47, ms2)));
+  const QUIET_PARK_REASONS = /* @__PURE__ */ new Set([
+    "no-pre-release-plan-review",
+    "awaiting-approval",
+    "paused",
+    "plan-review-passed"
+  ]);
+  const RETRY_DELAYS_MS2 = [1e3, 5e3];
+  for (let attempt = 0; ; attempt++) {
+    let failure = null;
+    try {
+      const live = await deps.getTask(deps.taskId);
+      if (!live || live.paused || live.userPaused) return;
+      if (live.status === "needs-replan") {
+        deps.log(`Plan Review handoff for ${deps.taskId} not armed (needs-replan)`);
+        return;
+      }
+      const ir2 = await deps.resolveIr(live.id);
+      const result = await deps.seed(live, ir2);
+      if (result.seeded) {
+        deps.kick();
+        return;
+      }
+      if (result.reason && QUIET_PARK_REASONS.has(result.reason)) {
+        deps.log(`Plan Review handoff for ${deps.taskId} not armed (${result.reason})`);
+        return;
+      }
+      failure = result.reason ?? "not-seeded";
+    } catch (error2) {
+      failure = error2 instanceof Error ? error2.message : String(error2);
+    }
+    if (attempt >= RETRY_DELAYS_MS2.length) {
+      deps.warn(
+        `Plan Review handoff for ${deps.taskId} failed after ${attempt + 1} attempts (${failure}) \u2014 stranded-continuation self-healing will recover it`
+      );
+      return;
+    }
+    deps.warn(`Plan Review handoff for ${deps.taskId} did not seed (${failure}) \u2014 retrying`);
+    await sleep7(RETRY_DELAYS_MS2[attempt]);
+  }
 }
 async function drainDuePlanningContinuations(deps) {
   const items = await deps.listDue();
@@ -258895,7 +259367,7 @@ function stableNotificationJson(value) {
   return `{${fields.join(",")}}`;
 }
 function buildCliAgentNotificationDedupeKey(input) {
-  const notificationFingerprint = createHash31("sha256").update(stableNotificationJson(input.info.notification ?? null)).digest("hex").slice(0, 16);
+  const notificationFingerprint = createHash32("sha256").update(stableNotificationJson(input.info.notification ?? null)).digest("hex").slice(0, 16);
   const waitingEpoch = input.session?.updatedAt ?? "unknown-waiting-epoch";
   return [
     "cli-agent",
@@ -259007,6 +259479,8 @@ var InProcessRuntime = class extends EventEmitter27 {
   messageStore;
   /** FNXC:TaskDeleteNotice 2026-07-26-16:10: identity-guarded teardown for the delete-notice mailbox seam. */
   unregisterTaskDeleteNoticeMailbox;
+  /** FNXC:TaskRecommendations 2026-08-13-03:56: identity-guarded teardown for the store-scoped recommendation notice seam. */
+  unregisterTaskRecommendationNoticeMailbox;
   chatStore;
   detachAgentLinkSync;
   /**
@@ -259065,7 +259539,8 @@ var InProcessRuntime = class extends EventEmitter27 {
         createTaskStoreForBackend: createTaskStoreForBackend2,
         buildConsumerId: buildConsumerId2,
         createProjectScopedPluginMcpProvider: createProjectScopedPluginMcpProvider2,
-        registerTaskDeleteNoticeMailbox: registerTaskDeleteNoticeMailbox2
+        registerTaskDeleteNoticeMailbox: registerTaskDeleteNoticeMailbox2,
+        registerTaskRecommendationNoticeMailbox: registerTaskRecommendationNoticeMailbox2
       } = await Promise.resolve().then(() => (init_src2(), src_exports));
       if (this.config.externalTaskStore) {
         this.taskStore = this.config.externalTaskStore;
@@ -259124,6 +259599,10 @@ var InProcessRuntime = class extends EventEmitter27 {
         this.taskStore,
         this.messageStore
       );
+      this.unregisterTaskRecommendationNoticeMailbox = registerTaskRecommendationNoticeMailbox2(
+        this.taskStore,
+        this.messageStore
+      );
       await yieldEventLoop4();
       const pluginLayer = this.taskStore.getAsyncLayer();
       if (!pluginLayer) {
@@ -259615,9 +260094,19 @@ var InProcessRuntime = class extends EventEmitter27 {
               outcome: report2.outcome,
               getTask: (id) => Promise.resolve(this.taskStore.getTask(id)),
               resolveIr: (id) => resolveWorkflowIrForTask(this.taskStore, id),
-              seed: (task, ir2) => seedPreReleasePlanReviewContinuation(this.taskStore, task, ir2),
+              /*
+              FNXC:PlanningHandoffAtomicity 2026-08-13-03:49:
+              The report carries the planning session's own durable work item id so the
+              seeder can retire that exact predecessor row atomically with the successor
+              install. Without it the seeder raced triage's finally-block terminal
+              transition and bailed on its own caller (529 stranded cards in 18 days).
+              */
+              seed: (task, ir2) => seedPreReleasePlanReviewContinuation(this.taskStore, task, ir2, {
+                retirePredecessorId: report2.planningWorkItemId
+              }),
               kick: () => this.kickWorkflowContinuationProcessor(),
-              log: (message) => runtimeLog.log(message)
+              log: (message) => runtimeLog.log(message),
+              warn: (message) => runtimeLog.warn(message)
             }).catch((error2) => {
               runtimeLog.error(`Failed to start Todo plan review for ${t.id}:`, error2);
             });
@@ -259905,6 +260394,8 @@ var InProcessRuntime = class extends EventEmitter27 {
     this.backendShutdown = void 0;
     this.unregisterTaskDeleteNoticeMailbox?.();
     this.unregisterTaskDeleteNoticeMailbox = void 0;
+    this.unregisterTaskRecommendationNoticeMailbox?.();
+    this.unregisterTaskRecommendationNoticeMailbox = void 0;
     let stopError;
     try {
       if (this.workflowContinuationTimer) {