@runfusion/fusion 0.77.0-beta.8 → 0.77.0-beta.9

package/dist/migrations/0066_chat_session_memory_focus.sql

@@ -0,0 +1,20 @@
+-- FNXC:MemoryFocus 2026-08-13-15:57:
+-- RUFU-068: per-conversation read-time memory FOCUS/TOPIC layer over the
+-- per-project Stash scope (ported from clean-rebase's 0049_chat_session_memory_focus.sql
+-- and renumbered to 0060). Adds chat_sessions.memory_focus so the active topic
+-- persists across reconnects and scopes fn_memory_search + proactive recall to a
+-- working topic within the project. NULL/empty ('' normalized to NULL) means the
+-- conversation inherits the whole-project scope. This column is a read-time focus
+-- filter only — capture stays write-anywhere and cross-project isolation is
+-- untouched (Stash owner_user_id SQL scope is orthogonal).
+-- Sequence provenance (migration is 0066): it started at 0059, moved to 0060 when
+-- origin/main concurrently landed FN-9037's 0059_fn_9037_tasks_source_agent_index.sql
+-- (2026-08-14), to 0061 on 2026-08-15 (FN-9059's workspace coordination leases own
+-- 0060), and the upstream 2026-08-20 batch (FN-066..FN-094) claiming 0061-0064
+-- pinned it at 0065 (the next free sequence above SCHEMA_BASELINE_VERSION "0064").
+-- Renumbered to 0066 on 2026-08-23 (rebase onto origin/main 3f448f7292): upstream's
+-- FN-149 shipped 0065_fn_149_review_convergence_stage.sql, claiming 0065 canonically.
+-- Upstream's 0065 is already released, so this migration takes the next free sequence.
+-- Production ledgers that applied the memory-focus SQL under the old row "0065"
+-- (v17-era) need a one-time 0065->0066 ledger remap before first 0066-ceiling boot.
+ALTER TABLE IF EXISTS project.chat_sessions ADD COLUMN IF NOT EXISTS memory_focus text;

package/dist/migrations/0067_fn_179_session_contention_wait_state.sql

@@ -0,0 +1,3 @@
+-- FNXC:WorkspaceContention 2026-08-24-03:34: Persist the bounded scheduling wait at 0067 because released chat memory focus owns 0066; restart cannot reset a live-holder budget or leave an unowned badge.
+ALTER TABLE project.tasks ADD COLUMN IF NOT EXISTS session_contention_hold_count integer DEFAULT 0;
+ALTER TABLE project.tasks ADD COLUMN IF NOT EXISTS session_contention_wait_reason text;

package/dist/pi-claude-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusion/pi-claude-cli",
-  "version": "0.77.0-beta.8",
+  "version": "0.77.0-beta.9",
   "type": "module",
   "private": true,
   "main": "index.ts",

package/dist/plugin-sdk/index.d.ts

@@ -607,6 +607,8 @@ interface TaskRow {
     postReviewFixCount: number | null;
     planReviewReplanCount: number | null;
     recoveryRetryCount: number | null;
+    sessionContentionHoldCount: number | null;
+    sessionContentionWaitReason: string | null;
     taskDoneRetryCount: number | null;
     bulkCompletionRefusalAt: string | null;
     workflowIrPin: string | null;
@@ -3503,6 +3505,15 @@ type AuthMaterialSnapshot = SharedSnapshotEnvelope<{
     providerAuth?: Record<string, ProviderAuthEntry>;
 }>;
 
+type IntegrationBranchSource = "configured" | "origin-head" | "well-known-local" | "current-head" | "sole-local" | "remote-tracking";
+interface IntegrationBranchReconciliation {
+    repoRelPath: string;
+    branch: string;
+    source: IntegrationBranchSource | "fallback";
+    action: "existing" | "created-from-remote" | "created-from-head" | "unavailable";
+    reason?: string;
+}
+
 type GitRepositoryEnsureOutcome = "existing" | "initialized";
 interface GitRepositoryCommandResult {
     stdout: string;
@@ -3517,6 +3528,11 @@ interface EnsureGitRepositoryOptions {
     runner?: GitRepositoryCommandRunner;
     timeoutMs?: number;
 }
+interface ProjectGitReadiness {
+    outcome: GitRepositoryEnsureOutcome;
+    integrationBranches: IntegrationBranchReconciliation[];
+}
+declare function ensureProjectGitReadiness(projectPath: string, options?: EnsureGitRepositoryOptions): Promise<ProjectGitReadiness>;
 declare function ensureGitRepositoryForProjectPath(projectPath: string, options?: EnsureGitRepositoryOptions): Promise<GitRepositoryEnsureOutcome>;
 
 type RunningAgentCountSource = (projectIds: readonly string[]) => Promise<Record<string, number>> | Record<string, number>;
@@ -3585,9 +3601,11 @@ interface EnsureProjectForPathResult {
     reattached: boolean;
     outcome: "existing" | "reattached" | "registered";
     gitRepository?: GitRepositoryEnsureOutcome;
+    integrationBranches?: IntegrationBranchReconciliation[];
 }
 interface CentralCoreOptions {
     ensureGitRepositoryForProjectPath?: typeof ensureGitRepositoryForProjectPath;
+    ensureProjectGitReadiness?: typeof ensureProjectGitReadiness;
     asyncLayer?: AsyncDataLayer;
 }
 declare class CentralCore extends EventEmitter<CentralCoreEvents> {
@@ -3597,7 +3615,7 @@ declare class CentralCore extends EventEmitter<CentralCoreEvents> {
     private nodeDiscovery;
     private discoveryConfig;
     private readonly discoveredNodes;
-    private readonly ensureGitRepositoryForProjectPath;
+    private readonly ensureProjectGitReadiness;
     private ownedBackendShutdown;
     private ownedBackendReleaseConnections;
     private initializationPromise;
@@ -4326,6 +4344,16 @@ declare function reclaimWorkspaceLeaseAsync(store: TaskStore, input: {
     outcome: WorkspaceLeaseReclaimOutcome;
 }>;
 
+interface AppendRemediationStepsOptions {
+    wave?: number;
+}
+interface AppendRemediationStepsResult {
+    task: Task;
+    appended: TaskStep[];
+    appendedCount: number;
+    wave: number;
+}
+
 declare const TASK_DELETE_CALLER_KINDS: readonly ["operator-ui", "operator-cli", "agent-tool", "engine", "api-unattributed"];
 type TaskDeleteCallerKind = (typeof TASK_DELETE_CALLER_KINDS)[number];
 interface TaskDeleteAuditContext {
@@ -4960,6 +4988,7 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
     private pluginPostgresSchemaExecutor;
     private handoffMergeQueueFailureInjectorForTesting;
     get backendMode(): boolean;
+    getProjectId(): string | null;
     watcher: FSWatcher | null;
     taskCache: Map<string, Task>;
     readonly laneCache: TaskLaneCache;
@@ -5152,7 +5181,7 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
         leaseKey: string;
         owner: WorkspaceLeaseOwner;
         fenceToken: bigint;
-    }): Promise<"unknown" | "superseded" | "missing" | "valid">;
+    }): Promise<"unknown" | "missing" | "superseded" | "valid">;
     recordWorkspaceLeaseFenceRef(input: {
         handle: WorkspaceLeaseHandle;
         fenceRefName: string;
@@ -5592,6 +5621,8 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
         postReviewFixCount?: number | null;
         planReviewReplanCount?: number | null;
         recoveryRetryCount?: number | null;
+        sessionContentionHoldCount?: number | null;
+        sessionContentionWaitReason?: string | null;
         taskDoneRetryCount?: number | null;
         bulkCompletionRefusalAt?: string | null;
         workflowIrPin?: string | null;
@@ -5711,6 +5742,7 @@ declare class TaskStore extends EventEmitter<TaskStoreEvents> {
     claimNextToolFailureRetry(taskId: string, expectedCursor: number, maxRetries: number): Promise<ToolFailureRetryClaim>;
     markToolFailureRetryExhaustedAudit(taskId: string): Promise<boolean>;
     updateTaskAtomic(id: string, updater: (current: Task) => Parameters<TaskStore["updateTask"]>[1] | null | undefined | Promise<Parameters<TaskStore["updateTask"]>[1] | null | undefined>, runContext?: RunMutationContext): Promise<Task>;
+    appendRemediationSteps(taskId: string, steps: readonly TaskStep[], options?: AppendRemediationStepsOptions): Promise<AppendRemediationStepsResult>;
     dismissAiMergeReviewFinding(taskId: string, findingId: string, reason: string, actor?: string): Promise<Task>;
     linkTaskRecommendation(id: string, recommendationId: string, createdTaskId: string, completeColumns?: ReadonlySet<string>): Promise<Task>;
     normalizeWorkspaceTaskWorktreeMetadata(id: string): Promise<Task>;
@@ -6966,6 +6998,16 @@ type StepStatus = "pending" | "in-progress" | "done" | "skipped";
 interface TaskStep {
     name: string;
     status: StepStatus;
+    remediation?: {
+        wave: number;
+        gate: string;
+        gateStepId: string;
+        findingId?: string;
+        filePath?: string;
+        line?: number;
+        detail?: string;
+        declaredFiles?: string[];
+    };
     dependsOn?: number[];
 }
 interface RunMutationContext {
@@ -7808,6 +7850,8 @@ interface Task {
     postReviewFixCount?: number;
     planReviewReplanCount?: number;
     recoveryRetryCount?: number;
+    sessionContentionHoldCount?: number;
+    sessionContentionWaitReason?: string;
     taskDoneRetryCount?: number;
     bulkCompletionRefusalAt?: string;
     workflowIrPin?: string;
@@ -8210,6 +8254,7 @@ interface GlobalSettings {
     defaultProjectId?: string;
     setupComplete?: boolean;
     cliOnboardingCompletedAt?: string;
+    githubStarPromptDismissedAt?: string;
     favoriteProviders?: string[];
     favoriteModels?: string[];
     openrouterModelSync?: boolean;
@@ -8244,7 +8289,6 @@ interface GlobalSettings {
     autoUpdateAndRestart?: boolean;
     autoUpdateEnabled?: boolean;
     autoRestartAfterUpdate?: boolean;
-    autoReloadOnVersionChange?: boolean;
     modelOnboardingComplete?: boolean;
     useClaudeCli?: boolean;
     useDroidCli?: boolean;
@@ -8690,6 +8734,12 @@ interface ProjectSettings {
     insightExtractionMinIntervalMs?: number;
     memoryEnabled?: boolean;
     memoryBackendType?: string;
+    stashUrl?: string;
+    stashApiKey?: string;
+    stashVectorSearch?: boolean;
+    executorSessionCaptureEnabled?: boolean;
+    executorSessionCaptureMaxEvents?: number;
+    executorSessionCaptureIncludeStatus?: boolean;
     memoryAutoSummarizeEnabled?: boolean;
     memoryAutoSummarizeThresholdChars?: number;
     memoryAutoSummarizeSchedule?: string;

package/dist/plugin-sdk/index.js

@@ -5850,6 +5850,8 @@ var tasks = projectSchema.table("tasks", {
   executeRequeueLoopCount: integer("execute_requeue_loop_count").default(0),
   executeRequeueLoopSignature: text("execute_requeue_loop_signature"),
   recoveryRetryCount: integer("recovery_retry_count"),
+  sessionContentionHoldCount: integer("session_contention_hold_count").default(0),
+  sessionContentionWaitReason: text("session_contention_wait_reason"),
   taskDoneRetryCount: integer("task_done_retry_count").default(0),
   // FNXC:Lifecycle 2026-07-16-21:40: FN-8141 skip-bypass taint marker (nullable ISO timestamp).
   bulkCompletionRefusalAt: text("bulk_completion_refusal_at"),
@@ -7772,6 +7774,12 @@ var chatSessions = projectSchema.table("chat_sessions", {
   // FNXC:ChatPinned 2026-07-16-12:00: nullable timestamp persists the active
   // Direct-session pin; the ChatStore enforces the per-scope max-three invariant.
   pinnedAt: text("pinned_at"),
+  // FNXC:MemoryFocus 2026-08-13-15:57: per-conversation read-time memory FOCUS/TOPIC
+  // (migration 0059). NULL/empty ('' normalized to NULL) means the conversation
+  // inherits the whole-project scope; otherwise it scopes fn_memory_search +
+  // proactive recall to this topic. It is a read-time filter only — Stash capture
+  // stays write-anywhere across every conversation.
+  memoryFocus: text("memory_focus"),
   cliSessionFile: text("cli_session_file"),
   inFlightGeneration: jsonb("in_flight_generation"),
   cliExecutorAdapterId: text("cli_executor_adapter_id")
@@ -8210,7 +8218,33 @@ var projectTableNames = [
   land report the previous test's successor as the busy holder), and health compaction skipped them.
   */
   "workspace_coordination_leases",
-  "workspace_land_intents"
+  "workspace_land_intents",
+  /*
+  FNXC:PgTableRegistry 2026-08-23-16:05:
+  Second occurrence of the FN-9059 omission above, found by a leaking `current_plan_evidence` row:
+  a task's plan-evidence version counter continued across tests (a fresh KB-002 started at v2), so
+  `task-dependency-mutation.pg` asserted version 2 and read 3 in a whole-file run while passing in
+  isolation. Every table declared with `projectSchema.table(...)` must be registered here — the
+  harness reset and health compaction both drive off this list, and an unregistered table is simply
+  never cleaned. `project-table-registry.test.ts` now fails when the two drift apart.
+  */
+  "chat_session_tags",
+  "chat_tags",
+  "configuration_revisions",
+  "current_plan_evidence",
+  "mission_lineage_stops",
+  "spec_drift_reports",
+  "spec_locks",
+  "symbol_locks",
+  "task_lifecycle_consumer_cursors",
+  "task_lifecycle_consumer_dead_letters",
+  "task_lifecycle_consumer_receipts",
+  "task_lifecycle_consumer_registrations",
+  "task_lifecycle_event_seq",
+  "task_lifecycle_events",
+  "task_verification_requests",
+  "unplanned_execution_blocks",
+  "workflow_agent_capacity_leases"
 ];
 
 // ../core/src/postgres/schema/central.ts
@@ -8981,6 +9015,7 @@ var DEFAULT_GLOBAL_SETTINGS = {
   defaultProjectId: void 0,
   setupComplete: void 0,
   cliOnboardingCompletedAt: void 0,
+  githubStarPromptDismissedAt: void 0,
   favoriteProviders: void 0,
   favoriteModels: void 0,
   openrouterModelSync: true,
@@ -9010,7 +9045,10 @@ var DEFAULT_GLOBAL_SETTINGS = {
   /* FNXC:UpdateAutomation 2026-08-21-02:48: Keep these schema keys unset because defaults merge into effective settings and `undefined` is distinct from explicit false. */
   autoUpdateEnabled: void 0,
   autoRestartAfterUpdate: void 0,
-  autoReloadOnVersionChange: true,
+  /*
+  FNXC:VersionAutoReload 2026-08-23-04:03:
+  Version-change reload is mandatory, so its key is retired. Older persisted values are ignored because GLOBAL_SETTINGS_KEYS derives from this object and rejects unknown keys before save patches.
+  */
   githubTrackingDefaultRepo: void 0,
   reportRoadmapDedupeEnabled: void 0,
   reportRoadmapLabel: void 0,
@@ -9605,6 +9643,40 @@ var DEFAULT_PROJECT_SETTINGS = {
   taskEvaluationRetention: void 0,
   memoryEnabled: true,
   memoryBackendType: "qmd",
+  // FNXC:StashConfig 2026-08-13-16:35: (RUFU-068) Optional per-project Stash LCM
+  // memory backend config. stashUrl points at the operator's Stash server
+  // (default http://127.0.0.1:3457). stashApiKey is an override for hard
+  // isolation (separate Stash instance/account); the PRIMARY API key lives in
+  // the global secrets store ("stash-api-key") and is NEVER committed. Project
+  // value wins over global. TencentDB's URL setting is intentionally NOT ported.
+  stashUrl: "",
+  stashApiKey: "",
+  /*
+  FNXC:Rufu126VectorSearch 2026-08-19-10:50:
+  RUFU-126 (D3): opt-in vector (semantic) recall for the Stash memory backend.
+  Default OFF — zero behavior change until the operator enables it (this is a
+  prototype; rejected alternative was automatic capability detection, which
+  would change default behavior and pay a per-process 404 round-trip against
+  unpatched servers). When true, multi-word (≥2 tokens) recall queries try the
+  Stash GET /api/v1/me/sessions/events/semantic-search endpoint first and fall
+  back byte-identically to the RUFU-121 keyword path on any vector failure
+  (see memory-backend-stash.ts search() + docs/research/stash-vector-search-evaluation.md
+  for D1–D5). Schema-only, consistent with stashUrl/stashApiKey (no UI row).
+  */
+  stashVectorSearch: false,
+  /*
+  FNXC:StashSessionCapture 2026-08-19-04:37:
+  (RUFU-122) Task-terminal transcript upload defaults. All are inert unless
+  memoryBackendType === "stash". executorSessionCaptureEnabled gates ONLY the
+  transcript upload (the RUFU-068 terminal anchor event still fires when it is
+  off) and defaults ON. executorSessionCaptureMaxEvents caps transcript events
+  per task; the engine keeps the most recent N (default 20000).
+  executorSessionCaptureIncludeStatus is the schema-only "keep a setting" for
+  uploading `status` log entries (default off; no UI row).
+  */
+  executorSessionCaptureEnabled: true,
+  executorSessionCaptureMaxEvents: 2e4,
+  executorSessionCaptureIncludeStatus: false,
   memoryAutoSummarizeEnabled: false,
   memoryAutoSummarizeThresholdChars: 5e4,
   memoryAutoSummarizeSchedule: "0 3 * * *",
@@ -13941,10 +14013,59 @@ var DEFAULT_TRIAGE_PROMPT = BUILTIN_AGENT_PROMPTS.find((prompt) => prompt.id ===
 var DEFAULT_TRIAGE_FAST_PROMPT = BUILTIN_AGENT_PROMPTS.find((prompt) => prompt.id === "default-triage-fast")?.prompt ?? "";
 var DEFAULT_REVIEWER_PROMPT = BUILTIN_AGENT_PROMPTS.find((prompt) => prompt.role === "reviewer")?.prompt ?? "";
 var DEFAULT_MERGER_PROMPT = BUILTIN_AGENT_PROMPTS.find((prompt) => prompt.role === "merger")?.prompt ?? "";
+var REVIEW_GATE_STEP_TEMPLATE_START = "### Step {N-1}: Testing & Verification";
+var REVIEW_GATE_STEP_TEMPLATE_END = "## Documentation Requirements";
+var REVIEW_GATED_STEP_CONTRACT = `## Review-gated step contract (OVERRIDES the step template above)
+
+This workflow runs testing, verification, documentation, and delivery as REVIEW-COLUMN GATES after
+implementation. They are not task steps here.
+
+- Do NOT emit a "Testing & Verification" step.
+- Do NOT emit a "Documentation & Delivery" step.
+- Emit implementation steps only, ending with the last implementation step.
+- Per-step verification bullets stay: each implementation step still runs its own targeted tests.
+
+`;
+function applyReviewGatedStepContract(prompt) {
+  const start = prompt.indexOf(REVIEW_GATE_STEP_TEMPLATE_START);
+  const end = prompt.indexOf(REVIEW_GATE_STEP_TEMPLATE_END);
+  if (start < 0 || end < 0 || end <= start) {
+    return `${prompt}
+
+${REVIEW_GATED_STEP_CONTRACT}`;
+  }
+  return `${prompt.slice(0, start)}${REVIEW_GATED_STEP_CONTRACT}${prompt.slice(end)}`;
+}
+var DOCUMENTATION_STEP_TEMPLATE_START = "### Step {N}: Documentation & Delivery";
+var DOCUMENTATION_STEP_TEMPLATE_END = "## Documentation Requirements";
+var NO_DOCUMENTATION_STEP_CONTRACT = `## Documentation is not a step (OVERRIDES the step template above)
+
+Do NOT emit a "Documentation & Delivery" step. "Testing & Verification" is the LAST step.
+
+- **Repository documentation is implementation work.** When a change makes an existing doc wrong,
+  update that doc inside the step that made the change, so it is reviewed together with the code.
+  Never plan it as its own step, and never gate completion on it when the change documents nothing.
+- **Fusion-side delivery is not yours to plan.** The card summary, the delivery note, artifact
+  registration, and out-of-scope follow-up tasks are produced by a review-column milestone after the
+  review passes. Do not emit steps or checklist items for any of them.
+
+`;
+function stripDocumentationDeliveryStep(prompt) {
+  const start = prompt.indexOf(DOCUMENTATION_STEP_TEMPLATE_START);
+  const end = prompt.indexOf(DOCUMENTATION_STEP_TEMPLATE_END);
+  if (start < 0 || end < 0 || end <= start) {
+    return `${prompt}
+
+${NO_DOCUMENTATION_STEP_CONTRACT}`;
+  }
+  return `${prompt.slice(0, start)}${NO_DOCUMENTATION_STEP_CONTRACT}${prompt.slice(end)}`;
+}
 var BUILTIN_SEAM_PROMPTS = {
   execute: DEFAULT_EXECUTOR_PROMPT,
   planning: DEFAULT_TRIAGE_PROMPT,
   "planning-fast": DEFAULT_TRIAGE_FAST_PROMPT,
+  /* Review-gated tasks keep test and delivery work in review-column gates. */
+  "planning-implementation-only": applyReviewGatedStepContract(DEFAULT_TRIAGE_PROMPT),
   "step-execute": DEFAULT_EXECUTOR_PROMPT,
   review: DEFAULT_REVIEWER_PROMPT,
   merge: DEFAULT_MERGER_PROMPT
@@ -14212,6 +14333,7 @@ function postMergeVerificationOptionalGroupNode(column = "done") {
 }
 
 // ../core/src/workflows/builtin-plan-review-group.ts
+var IMPLEMENTATION_ONLY_STEPS_CRITERION = "\n\n## Review-gated implementation steps\nREVISE when the proposed task-step list includes testing, verification, documentation, or delivery work. Those are review-column gates in this workflow, not implementation steps.";
 var PLAN_REVIEW_GROUP_ID = "plan-review";
 var PLAN_REVIEW_STEP_NODE_ID = "plan-review-step";
 var PLAN_REVIEW_NAME = "Plan Review";
@@ -14253,6 +14375,10 @@ function planReviewOptionalGroupNode(column, options = {}) {
     toolMode: "readonly",
     gateMode: "gate"
   };
+  if (options.requireImplementationOnlySteps === true) {
+    promptConfig.prompt = `${PLAN_REVIEW_PROMPT}${IMPLEMENTATION_ONLY_STEPS_CRITERION}`;
+    promptConfig.requireImplementationOnlySteps = true;
+  }
   if (options.requireExternalIntegrationEvidence === true) {
     promptConfig.requireExternalIntegrationEvidence = true;
   }
@@ -14293,6 +14419,7 @@ function planReviewOptionalGroupNode(column, options = {}) {
 var PLAN_REPLAN_NODE_ID = "plan-replan";
 var BROWSER_VERIFICATION_REMEDIATION_NODE_ID = "browser-verification-remediation";
 var CODE_REVIEW_REMEDIATION_NODE_ID = "code-review-remediation";
+var REVIEW_GATED_CODE_REVIEW_REMEDIATION_NODE_ID = "code-review-remediation-steps";
 function planReplanNode(column = "triage") {
   return {
     id: PLAN_REPLAN_NODE_ID,
@@ -14319,6 +14446,14 @@ function browserVerificationRemediationNode(column = "in-progress") {
     }
   };
 }
+function codeReviewRemediationStepsNode(column = "in-progress") {
+  return {
+    id: REVIEW_GATED_CODE_REVIEW_REMEDIATION_NODE_ID,
+    kind: "prompt",
+    column,
+    config: { name: "Code review remediation", workflowAction: "review-remediation-steps", forWorkflowStepId: "code-review", toolMode: "readonly" }
+  };
+}
 function codeReviewRemediationNode(column = "in-progress") {
   return {
     id: CODE_REVIEW_REMEDIATION_NODE_ID,
@@ -14967,6 +15102,147 @@ var RAW_BUILTIN_CODING_IDEAS_WORKFLOW_IR = (() => {
 })();
 var BUILTIN_CODING_IDEAS_WORKFLOW_IR = parseWorkflowIr(RAW_BUILTIN_CODING_IDEAS_WORKFLOW_IR);
 
+// ../core/src/workflows/builtin-documentation-delivery-group.ts
+var DOCUMENTATION_DELIVERY_GROUP_ID = "documentation-delivery";
+var DOCUMENTATION_DELIVERY_PROMPT = `Report on the accepted implementation exactly once, for the operator who reads this card later.
+
+You have NO writer. This session can read, search and list \u2014 nothing else. Everything durable you
+produce is the text you output here. Do not call a tool to save it, do not claim you saved anything,
+and do not modify repository files: the code has already been reviewed and must not change now.
+
+## 1. The card summary (always)
+
+Open with 2-4 sentences of plain prose an operator can read to know what shipped and why. Mention
+user-visible behaviour or important files when they matter, and how it was verified. No headings, no
+bullet lists, no process narration, no verdict. This text becomes the task's summary.
+
+## 2. Follow-up proposals (only when they genuinely exist)
+
+If the work surfaced worthwhile follow-up ideas OUTSIDE this task's scope, end your output with one
+fenced JSON block, and nothing after it:
+
+\`\`\`json
+{"recommendations":[{"id":"stable-slug","title":"short title","description":"what to do and why","category":"improvement"}]}
+\`\`\`
+
+- \`category\` is one of: improvement, feature, bug, other.
+- Each \`id\` must be unique and stable.
+- These are PROPOSALS for a human, not work orders and not tasks: an operator decides which become
+  tasks. You cannot create tasks and must not try.
+- Ground every entry in something you actually saw. Omit the block entirely rather than invent work,
+  restate this task, or pad the list. Fewer, real proposals are the correct answer.
+- Never put commands, shell syntax, credentials or secrets in a proposal.
+
+You cannot block this card and you have no verdict to give. If something is missing or you could not
+determine it, say so plainly in the summary and finish.`;
+function documentationDeliveryOptionalGroupNode(column) {
+  return {
+    id: DOCUMENTATION_DELIVERY_GROUP_ID,
+    kind: "optional-group",
+    column,
+    config: {
+      name: "Documentation",
+      defaultOn: true,
+      /*
+      FNXC:ReportingOnlyGroup 2026-08-26-06:56:
+      Documentation ONLY documents. `gateMode: "advisory"` on the inner node was not enough and the
+      gap was measured on a real card: its REVISE recorded `advisory_failure`, which held the merge
+      door ("no current approval") AND bounced the card to implementation with no work to do, where
+      it re-ran Code Review against an unchanged tree and merged on the second pass by luck.
+      `reportingOnly` states the contract once: no approval to withhold, no remediation to request.
+      */
+      reportingOnly: true,
+      template: {
+        nodes: [{
+          id: "documentation-delivery-step",
+          kind: "prompt",
+          config: {
+            name: "Documentation",
+            prompt: DOCUMENTATION_DELIVERY_PROMPT,
+            toolMode: "readonly",
+            gateMode: "advisory",
+            workflowAction: "documentation-delivery",
+            /* The two projection contracts that give a writer-less node durable output. */
+            summaryTarget: "task",
+            recommendationsTarget: "task"
+          }
+        }],
+        edges: []
+      }
+    }
+  };
+}
+
+// ../core/src/workflows/builtin-coding-ideas-v2-workflow-ir.ts
+var clone = (ir) => JSON.parse(JSON.stringify(ir));
+var RAW_BUILTIN_CODING_IDEAS_V2_WORKFLOW_IR = (() => {
+  const ir = clone(BUILTIN_CODING_IDEAS_WORKFLOW_IR);
+  ir.name = "builtin-coding-ideas-v2";
+  const plan = ir.nodes.find((node) => node.id === "plan");
+  if (!plan?.config) throw new Error("coding-ideas-v2 requires the inherited planning node");
+  plan.config.prompt = stripDocumentationDeliveryStep(String(plan.config.prompt ?? ""));
+  const parse = ir.nodes.find((node) => node.id === "parse");
+  if (parse) parse.config = { ...parse.config, implementationOnlySteps: true, preserveRemediationSteps: true };
+  const codeReviewRemediation = ir.nodes.find((node) => node.id === "code-review-remediation");
+  if (codeReviewRemediation) {
+    codeReviewRemediation.config = {
+      ...codeReviewRemediation.config,
+      ...codeReviewRemediationStepsNode().config,
+      name: "Code Review Remediation"
+    };
+  }
+  const codeReviewIndex = ir.nodes.findIndex((node) => node.id === "code-review");
+  if (codeReviewIndex < 0) throw new Error("coding-ideas-v2 requires the inherited code-review gate");
+  const codeReviewStep = ir.nodes[codeReviewIndex]?.config?.template?.nodes?.find((node) => node.id === "code-review-step");
+  if (!codeReviewStep?.config) throw new Error("coding-ideas-v2 requires the inherited code-review-step template node");
+  codeReviewStep.config.prompt = `${String(codeReviewStep.config.prompt ?? "")}
+
+## Step 0: Judge the TESTS before you judge the code
+
+You cannot run anything: this session is read-only, \`bash\` is denied and no verification tool is
+available to you. Do not claim you ran lint, tests or a build, and do not ask for a command to be
+run. The executor already wrote and ran the tests; your job is to rule on whether that work is
+sound.
+
+Read the test files in the diff and rule on FOUR things:
+
+1. **They exist.** A behavioural change with no test is a REVISE. Say which change is uncovered.
+2. **They are real tests.** Assertions executed by a test runner. A typecheck is not a test, a build
+   is not a test, and manual verification is not a test.
+3. **They assert BEHAVIOUR.** Never a comment, a date stamp, or prose lifted from source. Asserting
+   that a comment exists tests nothing a user or caller can observe. Code-construct guards
+   (call-site allowlists, architectural ratchets) are legitimate and stay.
+4. **They cover the INVARIANT, not just the reported case.** For a bug fix, a test that only
+   reproduces the single reported symptom is incomplete: require every known surface. If this task
+   CHANGED, GATED or REMOVED behaviour, the tests that encoded the OLD behaviour must have been
+   updated or deleted in the same change \u2014 they live outside the File Scope and targeted
+   verification will not have surfaced them.
+
+Then review the code itself for what tests do not catch: logic errors, broken edge cases, and
+unhandled failure modes.`;
+  ir.nodes.splice(codeReviewIndex + 1, 0, documentationDeliveryOptionalGroupNode("in-review"));
+  const summaryIndex = ir.nodes.findIndex((node) => node.id === "completion-summary");
+  if (summaryIndex >= 0) ir.nodes.splice(summaryIndex, 1);
+  ir.edges = ir.edges.filter((edge) => edge.from !== "completion-summary" && edge.to !== "completion-summary");
+  ir.edges = ir.edges.filter((edge) => !(edge.from === "code-review" && edge.to === "merge-gate"));
+  ir.edges.push(
+    { from: "steps", to: "code-review", condition: "success" },
+    { from: "code-review", to: "documentation-delivery", condition: "success" },
+    { from: "documentation-delivery", to: "merge-gate", condition: "success" },
+    /*
+    FNXC:CodingIdeasV2Workflow 2026-08-25-10:20:
+    Documentation is ADVISORY: it reports, it never vetoes. Its failure edge reaches the merge gate
+    exactly like its success edge, so a delivery note that could not be written cannot strand a
+    card whose code is already approved. Measured why: as a blocking gate it bounced a task whose
+    own plan said not to implement anything ("No task-specific implementation is present"), and the
+    card looped through the review lane every five minutes indefinitely.
+    */
+    { from: "documentation-delivery", to: "merge-gate", condition: "failure" }
+  );
+  return ir;
+})();
+var BUILTIN_CODING_IDEAS_V2_WORKFLOW_IR = parseWorkflowIr(RAW_BUILTIN_CODING_IDEAS_V2_WORKFLOW_IR);
+
 // ../core/src/workflows/builtin-brainstorming-workflow-ir.ts
 var APPROVAL_PHRASE = "looks good";
 var RAW_BUILTIN_BRAINSTORMING_WORKFLOW_IR = (() => {
@@ -15722,6 +15998,47 @@ var BUILTIN_WORKFLOWS = [
     createdAt: BUILTIN_TS,
     updatedAt: BUILTIN_TS
   },
+  /*
+   * FNXC:CodingIdeasV2Workflow 2026-08-26-05:56:
+   * Same Ideas board as builtin:coding-ideas, with one rule: in-review NEVER writes code.
+   * Implementation and its tests finish in `in-progress` — the executor's own final verification
+   * runs the project's configured test/build commands there, and a red result appends named fix
+   * steps rather than letting the card advance. `in-review` is then three read-only milestones:
+   * Code Review judges, Documentation reports, and the merge is the last thing that happens.
+   * The layout is ordered left-to-right in that same sequence so the editor's diagram reads the way
+   * the graph runs; nodes deleted from the graph must be deleted from this map too, or the editor
+   * keeps positioning ghosts.
+   */
+  {
+    id: "builtin:coding-ideas-v2",
+    name: "Coding (Ideas) V2",
+    description: "Capture-first coding pipeline with a read-only review lane: park ideas in a manual intake, plan, implement and test per step, then review, document, and merge.",
+    kind: "workflow",
+    ir: BUILTIN_CODING_IDEAS_V2_WORKFLOW_IR,
+    layout: {
+      start: { x: 60, y: 160 },
+      plan: { x: 230, y: 160 },
+      "plan-review": { x: 400, y: 160 },
+      "plan-replan": { x: 400, y: 320 },
+      "plan-review-no-op": { x: 570, y: 320 },
+      parse: { x: 570, y: 160 },
+      steps: { x: 740, y: 160 },
+      "review-pending-handoff": { x: 740, y: 320 },
+      "code-review": { x: 910, y: 160 },
+      "code-review-remediation": { x: 910, y: 320 },
+      "documentation-delivery": { x: 1080, y: 160 },
+      "merge-gate": { x: 1250, y: 160 },
+      "branch-group-member-integration": { x: 1420, y: 80 },
+      "branch-group-promotion": { x: 1590, y: 80 },
+      "merge-manual-hold": { x: 1420, y: 240 },
+      "merge-attempt": { x: 1760, y: 160 },
+      "merge-retry": { x: 1930, y: 80 },
+      "recovery-router": { x: 1930, y: 240 },
+      end: { x: 2100, y: 160 }
+    },
+    createdAt: BUILTIN_TS,
+    updatedAt: BUILTIN_TS
+  },
   {
     id: "builtin:legacy-coding",
     name: "Legacy coding",