@shepai/cli 1.116.3 → 1.117.0-pr367.ca5b6ac

package/dist/packages/core/src/domain/lifecycle-gates.d.ts

@@ -11,6 +11,9 @@ import { SdlcLifecycle } from './generated/output.js';
  *
  * A parent whose lifecycle is a member of this set satisfies Gate 1:
  * directly-blocked children may transition from Blocked to Started.
+ *
+ * Note: Pending is intentionally excluded — pending features are
+ * user-deferred and cannot unblock child features.
  */
 export declare const POST_IMPLEMENTATION: Set<SdlcLifecycle>;
 //# sourceMappingURL=lifecycle-gates.d.ts.map

package/dist/packages/core/src/domain/lifecycle-gates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle-gates.d.ts","sourceRoot":"","sources":["../../../../../packages/core/src/domain/lifecycle-gates.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,oBAI9B,CAAC"}
+{"version":3,"file":"lifecycle-gates.d.ts","sourceRoot":"","sources":["../../../../../packages/core/src/domain/lifecycle-gates.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,oBAI9B,CAAC"}

package/dist/packages/core/src/domain/lifecycle-gates.js

@@ -11,6 +11,9 @@ import { SdlcLifecycle } from './generated/output.js';
  *
  * A parent whose lifecycle is a member of this set satisfies Gate 1:
  * directly-blocked children may transition from Blocked to Started.
+ *
+ * Note: Pending is intentionally excluded — pending features are
+ * user-deferred and cannot unblock child features.
  */
 export const POST_IMPLEMENTATION = new Set([
     SdlcLifecycle.Implementation,

package/dist/packages/core/src/infrastructure/di/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/di/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAmHrC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,SAAS,CAAC,CA6TrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/di/container.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAwHrC;;;;;;GAMG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,SAAS,CAAC,CA+UrE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/packages/core/src/infrastructure/di/container.js

@@ -27,6 +27,8 @@ import { JsonDrivenIdeLauncherService } from '../services/ide-launchers/json-dri
 import { DaemonPidService } from '../services/daemon/daemon-pid.service.js';
 import { DeploymentService } from '../services/deployment/deployment.service.js';
 import { AttachmentStorageService } from '../services/attachment-storage.service.js';
+import { CloudflareTunnelService } from '../services/tunnel/cloudflare-tunnel.service.js';
+import { GitHubWebhookService } from '../services/webhook/github-webhook.service.js';
 import { AgentExecutorFactory } from '../services/agents/common/agent-executor-factory.service.js';
 import { AgentExecutorProvider } from '../services/agents/common/agent-executor-provider.service.js';
 import { StructuredAgentCallerService } from '../services/agents/common/structured-agent-caller.service.js';
@@ -64,6 +66,7 @@ import { ListFeaturesUseCase } from '../../application/use-cases/features/list-f
 import { ShowFeatureUseCase } from '../../application/use-cases/features/show-feature.use-case.js';
 import { DeleteFeatureUseCase } from '../../application/use-cases/features/delete-feature.use-case.js';
 import { ResumeFeatureUseCase } from '../../application/use-cases/features/resume-feature.use-case.js';
+import { StartFeatureUseCase } from '../../application/use-cases/features/start-feature.use-case.js';
 import { GetFeatureArtifactUseCase } from '../../application/use-cases/features/get-feature-artifact.use-case.js';
 import { GetResearchArtifactUseCase } from '../../application/use-cases/features/get-research-artifact.use-case.js';
 import { GetPlanArtifactUseCase } from '../../application/use-cases/features/get-plan-artifact.use-case.js';
@@ -169,6 +172,18 @@ export async function initializeContainer() {
     container.register('AttachmentStorageService', { useToken: AttachmentStorageService });
     const deploymentService = new DeploymentService();
     container.registerInstance('IDeploymentService', deploymentService);
+    // Register tunnel and webhook services
+    container.register('ITunnelService', {
+        useFactory: () => new CloudflareTunnelService(),
+    });
+    container.register('IWebhookService', {
+        useFactory: (c) => {
+            const featureRepo = c.resolve('IFeatureRepository');
+            const gitPrService = c.resolve('IGitPrService');
+            const notifService = c.resolve('INotificationService');
+            return new GitHubWebhookService(featureRepo, gitPrService, notifService, execFn);
+        },
+    });
     // Register agent infrastructure
     container.register('IAgentRunRepository', {
         useFactory: (c) => {
@@ -276,6 +291,7 @@ export async function initializeContainer() {
     container.registerSingleton(ShowFeatureUseCase);
     container.registerSingleton(DeleteFeatureUseCase);
     container.registerSingleton(ResumeFeatureUseCase);
+    container.registerSingleton(StartFeatureUseCase);
     container.registerSingleton(GetFeatureArtifactUseCase);
     container.registerSingleton(GetResearchArtifactUseCase);
     container.registerSingleton(GetPlanArtifactUseCase);
@@ -323,6 +339,9 @@ export async function initializeContainer() {
     container.register('ResumeFeatureUseCase', {
         useFactory: (c) => c.resolve(ResumeFeatureUseCase),
     });
+    container.register('StartFeatureUseCase', {
+        useFactory: (c) => c.resolve(StartFeatureUseCase),
+    });
     container.register('ApproveAgentRunUseCase', {
         useFactory: (c) => c.resolve(ApproveAgentRunUseCase),
     });

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.d.ts

@@ -52,6 +52,13 @@ export interface SettingsRow {
     ci_max_fix_attempts: number | null;
     ci_watch_timeout_ms: number | null;
     ci_log_max_chars: number | null;
+    stage_timeout_analyze_ms: number | null;
+    stage_timeout_requirements_ms: number | null;
+    stage_timeout_research_ms: number | null;
+    stage_timeout_plan_ms: number | null;
+    stage_timeout_implement_ms: number | null;
+    stage_timeout_merge_ms: number | null;
+    analyze_repo_timeout_analyze_ms: number | null;
     onboarding_complete: number;
     approval_gate_allow_prd: number;
     approval_gate_allow_plan: number;

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAOvE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAE1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAInB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAG7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,iCAAiC,EAAE,MAAM,CAAC;IAG1C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,mBAAmB,EAAE,MAAM,CAAC;IAG5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,mCAAmC,EAAE,MAAM,CAAC;IAG5C,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IAGjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,WAAW,CA+E1D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAoFvD"}
+{"version":3,"file":"settings.mapper.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wCAAwC,CAAC;AAOvE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAE1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAInB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAG7B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IAGtB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;IAClC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,0BAA0B,EAAE,MAAM,CAAC;IACnC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4BAA4B,EAAE,MAAM,CAAC;IAGrC,iCAAiC,EAAE,MAAM,CAAC;IAG1C,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGhC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,+BAA+B,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/C,mBAAmB,EAAE,MAAM,CAAC;IAG5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,mCAAmC,EAAE,MAAM,CAAC;IAG5C,wBAAwB,EAAE,MAAM,CAAC;IACjC,wBAAwB,EAAE,MAAM,CAAC;IAGjC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,WAAW,CA0F1D;AAsCD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,QAAQ,CAsFvD"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/mappers/settings.mapper.js

@@ -64,6 +64,15 @@ export function toDatabase(settings) {
         ci_max_fix_attempts: settings.workflow.ciMaxFixAttempts ?? null,
         ci_watch_timeout_ms: settings.workflow.ciWatchTimeoutMs ?? null,
         ci_log_max_chars: settings.workflow.ciLogMaxChars ?? null,
+        // WorkflowConfig per-stage timeouts (optional number → INTEGER | null)
+        stage_timeout_analyze_ms: settings.workflow.stageTimeouts?.analyzeMs ?? null,
+        stage_timeout_requirements_ms: settings.workflow.stageTimeouts?.requirementsMs ?? null,
+        stage_timeout_research_ms: settings.workflow.stageTimeouts?.researchMs ?? null,
+        stage_timeout_plan_ms: settings.workflow.stageTimeouts?.planMs ?? null,
+        stage_timeout_implement_ms: settings.workflow.stageTimeouts?.implementMs ?? null,
+        stage_timeout_merge_ms: settings.workflow.stageTimeouts?.mergeMs ?? null,
+        // WorkflowConfig analyze-repo timeouts (optional number → INTEGER | null)
+        analyze_repo_timeout_analyze_ms: settings.workflow.analyzeRepoTimeouts?.analyzeMs ?? null,
         // WorkflowConfig evidence settings (boolean → INTEGER)
         workflow_enable_evidence: settings.workflow.enableEvidence ? 1 : 0,
         workflow_commit_evidence: settings.workflow.commitEvidence ? 1 : 0,
@@ -83,6 +92,39 @@ export function toDatabase(settings) {
         feature_flag_debug: settings.featureFlags?.debug ? 1 : 0,
     };
 }
+/**
+ * Build the stageTimeouts spread from DB row columns.
+ * Returns `{ stageTimeouts: { ... } }` when at least one column is non-null,
+ * or an empty object `{}` when all are null (so the field stays undefined).
+ */
+function buildStageTimeoutsFromRow(row) {
+    const entries = [];
+    if (row.stage_timeout_analyze_ms !== null)
+        entries.push(['analyzeMs', row.stage_timeout_analyze_ms]);
+    if (row.stage_timeout_requirements_ms !== null)
+        entries.push(['requirementsMs', row.stage_timeout_requirements_ms]);
+    if (row.stage_timeout_research_ms !== null)
+        entries.push(['researchMs', row.stage_timeout_research_ms]);
+    if (row.stage_timeout_plan_ms !== null)
+        entries.push(['planMs', row.stage_timeout_plan_ms]);
+    if (row.stage_timeout_implement_ms !== null)
+        entries.push(['implementMs', row.stage_timeout_implement_ms]);
+    if (row.stage_timeout_merge_ms !== null)
+        entries.push(['mergeMs', row.stage_timeout_merge_ms]);
+    if (entries.length === 0)
+        return {};
+    return { stageTimeouts: Object.fromEntries(entries) };
+}
+/**
+ * Build the analyzeRepoTimeouts spread from DB row columns.
+ * Returns `{ analyzeRepoTimeouts: { ... } }` when the column is non-null,
+ * or an empty object `{}` when null (so the field stays undefined).
+ */
+function buildAnalyzeRepoTimeoutsFromRow(row) {
+    if (row.analyze_repo_timeout_analyze_ms === null)
+        return {};
+    return { analyzeRepoTimeouts: { analyzeMs: row.analyze_repo_timeout_analyze_ms } };
+}
 /**
  * Maps database row to Settings domain object.
  * Reconstructs nested objects and converts types from SQL.
@@ -153,6 +195,8 @@ export function fromDatabase(row) {
             ...(row.ci_max_fix_attempts !== null && { ciMaxFixAttempts: row.ci_max_fix_attempts }),
             ...(row.ci_watch_timeout_ms !== null && { ciWatchTimeoutMs: row.ci_watch_timeout_ms }),
             ...(row.ci_log_max_chars !== null && { ciLogMaxChars: row.ci_log_max_chars }),
+            ...buildStageTimeoutsFromRow(row),
+            ...buildAnalyzeRepoTimeoutsFromRow(row),
             enableEvidence: row.workflow_enable_evidence === 1,
             commitEvidence: row.workflow_commit_evidence === 1,
         },

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/035-add-stage-timeout-ms.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Migration 035: Add per-stage timeout columns to settings table.
+ *
+ * Replaces the single stage_timeout_ms column with individual per-stage
+ * timeout columns. Each is a nullable INTEGER (milliseconds). When NULL,
+ * the application falls back to the hardcoded default of 600_000 ms
+ * (10 minutes).
+ *
+ * Columns added:
+ *  - stage_timeout_analyze_ms
+ *  - stage_timeout_requirements_ms
+ *  - stage_timeout_research_ms
+ *  - stage_timeout_plan_ms
+ *  - stage_timeout_implement_ms
+ *  - stage_timeout_merge_ms
+ *  - analyze_repo_timeout_analyze_ms
+ */
+import type { MigrationParams } from 'umzug';
+import type Database from 'better-sqlite3';
+export declare function up({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+export declare function down({ context: db }: MigrationParams<Database.Database>): Promise<void>;
+//# sourceMappingURL=035-add-stage-timeout-ms.d.ts.map

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/035-add-stage-timeout-ms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"035-add-stage-timeout-ms.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations/035-add-stage-timeout-ms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAY3C,wBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAuB3F;AAED,wBAAsB,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7F"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations/035-add-stage-timeout-ms.js

@@ -0,0 +1,53 @@
+/**
+ * Migration 035: Add per-stage timeout columns to settings table.
+ *
+ * Replaces the single stage_timeout_ms column with individual per-stage
+ * timeout columns. Each is a nullable INTEGER (milliseconds). When NULL,
+ * the application falls back to the hardcoded default of 600_000 ms
+ * (10 minutes).
+ *
+ * Columns added:
+ *  - stage_timeout_analyze_ms
+ *  - stage_timeout_requirements_ms
+ *  - stage_timeout_research_ms
+ *  - stage_timeout_plan_ms
+ *  - stage_timeout_implement_ms
+ *  - stage_timeout_merge_ms
+ *  - analyze_repo_timeout_analyze_ms
+ */
+const STAGE_COLUMNS = [
+    'stage_timeout_analyze_ms',
+    'stage_timeout_requirements_ms',
+    'stage_timeout_research_ms',
+    'stage_timeout_plan_ms',
+    'stage_timeout_implement_ms',
+    'stage_timeout_merge_ms',
+    'analyze_repo_timeout_analyze_ms',
+];
+export async function up({ context: db }) {
+    const columns = db.pragma('table_info(settings)');
+    const existingNames = new Set(columns.map((c) => c.name));
+    for (const col of STAGE_COLUMNS) {
+        if (!existingNames.has(col)) {
+            db.exec(`ALTER TABLE settings ADD COLUMN ${col} INTEGER`);
+        }
+    }
+    // Migrate existing stage_timeout_ms value to all per-stage columns
+    if (existingNames.has('stage_timeout_ms')) {
+        db.exec(`
+      UPDATE settings SET
+        stage_timeout_analyze_ms = COALESCE(stage_timeout_analyze_ms, stage_timeout_ms),
+        stage_timeout_requirements_ms = COALESCE(stage_timeout_requirements_ms, stage_timeout_ms),
+        stage_timeout_research_ms = COALESCE(stage_timeout_research_ms, stage_timeout_ms),
+        stage_timeout_plan_ms = COALESCE(stage_timeout_plan_ms, stage_timeout_ms),
+        stage_timeout_implement_ms = COALESCE(stage_timeout_implement_ms, stage_timeout_ms),
+        stage_timeout_merge_ms = COALESCE(stage_timeout_merge_ms, stage_timeout_ms)
+      WHERE stage_timeout_ms IS NOT NULL
+    `);
+    }
+}
+export async function down({ context: db }) {
+    // SQLite does not support DROP COLUMN before 3.35.0; the columns are
+    // nullable and ignored when absent, so this is a no-op.
+    void db;
+}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAwFxC;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9E"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/persistence/sqlite/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAOH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAoGxC;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9E"}

package/dist/packages/core/src/infrastructure/persistence/sqlite/migrations.js

@@ -11,7 +11,7 @@
  */
 import { readdirSync } from 'node:fs';
 import { dirname, join } from 'node:path';
-import { pathToFileURL } from 'node:url';
+import { fileURLToPath, pathToFileURL } from 'node:url';
 import { Umzug } from 'umzug';
 import { SQLiteMigrationStorage } from './sqlite-migration-storage.js';
 import { LEGACY_MIGRATIONS, LEGACY_MIGRATION_NAMES } from './legacy-migrations.js';
@@ -27,7 +27,7 @@ export const LATEST_SCHEMA_VERSION = 34;
 function getMigrationsDir() {
     // import.meta.url is available in ESM; fallback to __dirname for CJS
     // The migrations/ directory is a sibling of this file
-    return join(dirname(new URL(import.meta.url).pathname), 'migrations');
+    return join(dirname(fileURLToPath(import.meta.url)), 'migrations');
 }
 /**
  * Discovers new migration files (035+) in the migrations/ directory.
@@ -41,9 +41,18 @@ function getMigrationsDir() {
 async function discoverNewMigrations(migrationsDir) {
     let files;
     try {
-        files = readdirSync(migrationsDir)
-            .filter((f) => f.endsWith('.js') && !f.endsWith('.d.js'))
-            .sort();
+        const allFiles = readdirSync(migrationsDir);
+        // Accept .js (compiled) and .ts (dev via tsx) but exclude .d.ts declaration files
+        const candidates = allFiles.filter((f) => (f.endsWith('.js') || f.endsWith('.ts')) && !f.endsWith('.d.ts') && !f.endsWith('.d.js'));
+        // Deduplicate: if both .ts and .js exist for the same migration, prefer .js
+        const byName = new Map();
+        for (const f of candidates) {
+            const base = f.replace(/\.(js|ts)$/, '');
+            if (!byName.has(base) || f.endsWith('.js')) {
+                byName.set(base, f);
+            }
+        }
+        files = [...byName.values()].sort();
     }
     catch {
         // Directory doesn't exist or is unreadable — no new migrations
@@ -52,7 +61,7 @@ async function discoverNewMigrations(migrationsDir) {
     const migrations = [];
     for (const file of files) {
         const filePath = join(migrationsDir, file);
-        const name = file.replace(/\.js$/, '');
+        const name = file.replace(/\.(js|ts)$/, '');
         const mod = (await import(pathToFileURL(filePath).href));
         migrations.push({
             name,

package/dist/packages/core/src/infrastructure/repositories/sqlite-settings.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite-settings.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-settings.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE;;;GAGG;AACH,qBACa,wBAAyB,YAAW,mBAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA2DnD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgBtC;;;;;OAKG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAqEhD"}
+{"version":3,"file":"sqlite-settings.repository.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/src/infrastructure/repositories/sqlite-settings.repository.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACxH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAOjE;;;GAGG;AACH,qBACa,wBAAyB,YAAW,mBAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAmEnD;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAgBtC;;;;;OAKG;IACG,MAAM,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CA4EhD"}

package/dist/packages/core/src/infrastructure/repositories/sqlite-settings.repository.js

@@ -57,6 +57,10 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         notif_evt_pr_blocked, notif_evt_merge_review_ready,
         workflow_open_pr_on_impl_complete,
         ci_max_fix_attempts, ci_watch_timeout_ms, ci_log_max_chars,
+        stage_timeout_analyze_ms, stage_timeout_requirements_ms,
+        stage_timeout_research_ms, stage_timeout_plan_ms,
+        stage_timeout_implement_ms, stage_timeout_merge_ms,
+        analyze_repo_timeout_analyze_ms,
         onboarding_complete,
         approval_gate_allow_prd, approval_gate_allow_plan,
         approval_gate_allow_merge, approval_gate_push_on_impl_complete,
@@ -77,6 +81,10 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         @notif_evt_pr_blocked, @notif_evt_merge_review_ready,
         @workflow_open_pr_on_impl_complete,
         @ci_max_fix_attempts, @ci_watch_timeout_ms, @ci_log_max_chars,
+        @stage_timeout_analyze_ms, @stage_timeout_requirements_ms,
+        @stage_timeout_research_ms, @stage_timeout_plan_ms,
+        @stage_timeout_implement_ms, @stage_timeout_merge_ms,
+        @analyze_repo_timeout_analyze_ms,
         @onboarding_complete,
         @approval_gate_allow_prd, @approval_gate_allow_plan,
         @approval_gate_allow_merge, @approval_gate_push_on_impl_complete,
@@ -156,6 +164,13 @@ let SQLiteSettingsRepository = class SQLiteSettingsRepository {
         ci_max_fix_attempts = @ci_max_fix_attempts,
         ci_watch_timeout_ms = @ci_watch_timeout_ms,
         ci_log_max_chars = @ci_log_max_chars,
+        stage_timeout_analyze_ms = @stage_timeout_analyze_ms,
+        stage_timeout_requirements_ms = @stage_timeout_requirements_ms,
+        stage_timeout_research_ms = @stage_timeout_research_ms,
+        stage_timeout_plan_ms = @stage_timeout_plan_ms,
+        stage_timeout_implement_ms = @stage_timeout_implement_ms,
+        stage_timeout_merge_ms = @stage_timeout_merge_ms,
+        analyze_repo_timeout_analyze_ms = @analyze_repo_timeout_analyze_ms,
         onboarding_complete = @onboarding_complete,
         approval_gate_allow_prd = @approval_gate_allow_prd,
         approval_gate_allow_plan = @approval_gate_allow_plan,

package/dist/packages/core/src/infrastructure/services/agents/analyze-repo/analyze-repository-graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyze-repository-graph.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/analyze-repo/analyze-repository-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAGpG;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;EAIjC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,OAAO,sBAAsB,CAAC,KAAK,CAAC;AAyB7E;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,cAAc,EACxB,YAAY,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAQnC"}
+{"version":3,"file":"analyze-repository-graph.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/analyze-repo/analyze-repository-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACpG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAkBpG;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;EAIjC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,OAAO,sBAAsB,CAAC,KAAK,CAAC;AA0B7E;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,cAAc,EACxB,YAAY,CAAC,EAAE,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAQnC"}

package/dist/packages/core/src/infrastructure/services/agents/analyze-repo/analyze-repository-graph.js

@@ -1,5 +1,19 @@
 import { Annotation, StateGraph, START, END } from '@langchain/langgraph';
 import { buildAnalyzePrompt } from './prompts/analyze-repository.prompt.js';
+import { hasSettings, getSettings } from '../../../services/settings.service.js';
+/** Default timeout for analyze-repo agent (10 minutes) — prevents infinite hangs. */
+const DEFAULT_ANALYZE_REPO_TIMEOUT_MS = 600_000;
+/**
+ * Resolve the timeout for the analyze-repository agent.
+ * Reads from settings (workflow.analyzeRepoTimeouts.analyzeMs),
+ * falling back to DEFAULT_ANALYZE_REPO_TIMEOUT_MS when not configured.
+ */
+function getAnalyzeRepoTimeoutMs() {
+    if (!hasSettings())
+        return DEFAULT_ANALYZE_REPO_TIMEOUT_MS;
+    const timeouts = getSettings().workflow?.analyzeRepoTimeouts;
+    return timeouts?.analyzeMs ?? DEFAULT_ANALYZE_REPO_TIMEOUT_MS;
+}
 /**
  * State annotation for the analyze-repository graph.
  *
@@ -23,6 +37,7 @@ function createAnalyzeNode(executor) {
         const prompt = buildAnalyzePrompt(state.repositoryPath);
         const result = await executor.execute(prompt, {
             cwd: state.repositoryPath,
+            timeout: getAnalyzeRepoTimeoutMs(),
         });
         return {
             analysisMarkdown: result.result,

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/node-helpers.d.ts

@@ -23,10 +23,20 @@ export type NodeLogger = ReturnType<typeof createNodeLogger>;
  * Safely read a file from the spec directory. Returns empty string if file doesn't exist.
  */
 export declare function readSpecFile(specDir: string, filename: string): string;
+/**
+ * Resolve the timeout for a specific stage.
+ * Reads per-stage timeout from settings (workflow.stageTimeouts.<stage>Ms),
+ * falling back to DEFAULT_STAGE_TIMEOUT_MS when not configured.
+ */
+export declare function getStageTimeoutMs(nodeName: string): number;
 /**
  * Build executor options with cwd. Each node gets a clean agent context.
+ * The timeout is resolved per-stage from settings (workflow.stageTimeouts)
+ * with a fallback to DEFAULT_STAGE_TIMEOUT_MS (10 min).
+ *
+ * When no `nodeName` is provided, the current node from state is used.
  */
-export declare function buildExecutorOptions(state: FeatureAgentState, overrides?: Partial<Pick<AgentExecutionOptions, 'timeout'>>): AgentExecutionOptions;
+export declare function buildExecutorOptions(state: FeatureAgentState, overrides?: Partial<Pick<AgentExecutionOptions, 'timeout'>>, nodeName?: string): AgentExecutionOptions;
 /**
  * Parse YAML with automatic sanitization of common AI-generated issues.
  * First attempts normal parsing; on failure, sanitizes unquoted braces

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/node-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-helpers.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/nodes/node-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,+DAA+D,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUrD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;IAE7C,4DAA4D;gBAChD,IAAI;kBAGF,MAAM,GAAG,IAAI;mBAIZ,MAAM,GAAG,IAAI;EAK/B;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMtE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,iBAAiB,EACxB,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,GAC1D,qBAAqB,CAQvB;AAeD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAQ3F;AAMD,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,mBAAmB,GAAG,eAAe,GAAG,SAAS,CAAC;AAMhG;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CAKjE;AAED,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,qBAAqB,EAC9B,SAAS,CAAC,EAAE,YAAY,GACvB,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAW5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAqB5F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAOhG;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAwB1F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAa5F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,MAAM,CAiCT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAa3E;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,KAAK,MAAM,GACjE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAqHnE"}
+{"version":3,"file":"node-helpers.d.ts","sourceRoot":"","sources":["../../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/nodes/node-helpers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,+DAA+D,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUrD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM;IAE7C,4DAA4D;gBAChD,IAAI;kBAGF,MAAM,GAAG,IAAI;mBAIZ,MAAM,GAAG,IAAI;EAK/B;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMtE;AAoBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAO1D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,iBAAiB,EACxB,SAAS,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC,EAC3D,QAAQ,CAAC,EAAE,MAAM,GAChB,qBAAqB,CAUvB;AAeD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,CAQ3F;AAMD,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG,mBAAmB,GAAG,eAAe,GAAG,SAAS,CAAC;AAMhG;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CAKjE;AAED,MAAM,WAAW,YAAY;IAC3B,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,qBAAqB,EAC9B,SAAS,CAAC,EAAE,YAAY,GACvB,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAW5D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAqB5F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAOhG;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAwB1F;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAa5F;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,MAAM,CAiCT;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAa3E;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,cAAc,EACxB,WAAW,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,KAAK,MAAM,GACjE,CAAC,KAAK,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAqHnE"}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/node-helpers.js

@@ -8,6 +8,7 @@ import yaml from 'js-yaml';
 import { readFileSync, writeFileSync, renameSync, unlinkSync } from 'node:fs';
 import { join } from 'node:path';
 import { interrupt, isGraphBubbleUp } from '@langchain/langgraph';
+import { hasSettings, getSettings } from '../../../../services/settings.service.js';
 import { reportNodeStart } from '../heartbeat.js';
 import { recordPhaseStart, recordPhaseEnd, recordApprovalWaitStart, } from '../phase-timing-context.js';
 import { updateNodeLifecycle } from '../lifecycle-context.js';
@@ -44,14 +45,52 @@ export function readSpecFile(specDir, filename) {
         return '';
     }
 }
+/** Default timeout per agent call (30 minutes) — prevents infinite hangs. */
+const DEFAULT_STAGE_TIMEOUT_MS = 1_800_000;
+/**
+ * Map from node name to the corresponding StageTimeouts field.
+ * `fast-implement` reuses the implement timeout; `evidence` also reuses implement.
+ */
+const STAGE_TIMEOUT_KEY = {
+    analyze: 'analyzeMs',
+    requirements: 'requirementsMs',
+    research: 'researchMs',
+    plan: 'planMs',
+    implement: 'implementMs',
+    'fast-implement': 'implementMs',
+    evidence: 'implementMs',
+    merge: 'mergeMs',
+};
+/**
+ * Resolve the timeout for a specific stage.
+ * Reads per-stage timeout from settings (workflow.stageTimeouts.<stage>Ms),
+ * falling back to DEFAULT_STAGE_TIMEOUT_MS when not configured.
+ */
+export function getStageTimeoutMs(nodeName) {
+    if (!hasSettings())
+        return DEFAULT_STAGE_TIMEOUT_MS;
+    const timeouts = getSettings().workflow?.stageTimeouts;
+    if (!timeouts)
+        return DEFAULT_STAGE_TIMEOUT_MS;
+    const key = STAGE_TIMEOUT_KEY[nodeName];
+    if (!key)
+        return DEFAULT_STAGE_TIMEOUT_MS;
+    return timeouts[key] ?? DEFAULT_STAGE_TIMEOUT_MS;
+}
 /**
  * Build executor options with cwd. Each node gets a clean agent context.
+ * The timeout is resolved per-stage from settings (workflow.stageTimeouts)
+ * with a fallback to DEFAULT_STAGE_TIMEOUT_MS (10 min).
+ *
+ * When no `nodeName` is provided, the current node from state is used.
  */
-export function buildExecutorOptions(state, overrides) {
+export function buildExecutorOptions(state, overrides, nodeName) {
+    const stage = nodeName ?? state.currentNode ?? '';
+    const stageTimeout = getStageTimeoutMs(stage);
     return {
         cwd: state.worktreePath || state.repositoryPath,
         maxTurns: 5000,
-        timeout: 1_800_000, // 30 minutes per agent call — prevents infinite hangs
+        timeout: stageTimeout,
         ...(state.model ? { model: state.model } : {}),
         ...overrides,
     };
@@ -373,7 +412,7 @@ export function executeNode(nodeName, executor, buildPrompt) {
         try {
             const resumePrefix = buildResumeContext(state.resumeReason);
             const prompt = resumePrefix + buildPrompt(state, log);
-            const options = buildExecutorOptions(state);
+            const options = buildExecutorOptions(state, undefined, nodeName);
             log.info(`Executing agent at cwd=${options.cwd}`);
             log.info(`Prompt length: ${prompt.length} chars`);
             const result = await executor.execute(prompt, options);

package/dist/packages/core/src/infrastructure/services/tunnel/cloudflare-tunnel.service.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Cloudflare Tunnel Service
+ *
+ * Manages a `cloudflared` quick-tunnel that exposes ONLY the webhook
+ * API routes to the public internet via a random *.trycloudflare.com
+ * subdomain.
+ *
+ * Uses the `cloudflared` npm package which handles binary installation
+ * and provides a typed Tunnel API — no need for the user to install
+ * cloudflared separately.
+ *
+ * Security: A lightweight proxy HTTP server is started on a random port
+ * that only forwards requests matching the allowed path prefix
+ * (/api/webhooks) to the main app. The tunnel connects to this proxy,
+ * not the main app server. All other paths return 404.
+ */
+import type { ITunnelService, TunnelUrlChangeHandler } from '../../../application/ports/output/services/tunnel-service.interface.js';
+export interface CloudflareTunnelDeps {
+    createTunnel: (origin: string) => TunnelLike | Promise<TunnelLike>;
+}
+export interface TunnelLike {
+    on(event: 'url', handler: (url: string) => void): void;
+    on(event: 'connected', handler: (connection: {
+        id: string;
+        ip: string;
+        location: string;
+    }) => void): void;
+    on(event: 'error', handler: (error: Error) => void): void;
+    on(event: 'exit', handler: (code: number | null, signal: string | null) => void): void;
+    once(event: string, handler: (...args: unknown[]) => void): void;
+    stop(): void;
+}
+export declare class CloudflareTunnelService implements ITunnelService {
+    private tunnel;
+    private proxyServer;
+    private publicUrl;
+    private readonly urlChangeHandlers;
+    private readonly deps;
+    constructor(deps?: Partial<CloudflareTunnelDeps>);
+    start(localPort: number): Promise<string>;
+    stop(): Promise<void>;
+    getPublicUrl(): string | null;
+    onUrlChange(handler: TunnelUrlChangeHandler): void;
+    isRunning(): boolean;
+    /**
+     * Start a lightweight HTTP proxy on a random port that only forwards
+     * requests with paths starting with ALLOWED_PATH_PREFIX to the main app.
+     * Everything else gets a 404.
+     */
+    private startProxyServer;
+    private stopProxyServer;
+    private stopTunnel;
+    private notifyUrlChange;
+}
+//# sourceMappingURL=cloudflare-tunnel.service.d.ts.map

package/dist/packages/core/src/infrastructure/services/tunnel/cloudflare-tunnel.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-tunnel.service.d.ts","sourceRoot":"","sources":["../../../../../../../packages/core/src/infrastructure/services/tunnel/cloudflare-tunnel.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACvB,MAAM,wEAAwE,CAAC;AAMhF,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACvD,EAAE,CACA,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,CAAC,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAC1E,IAAI,CAAC;IACR,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC;IACvF,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IACjE,IAAI,IAAI,IAAI,CAAC;CACd;AAWD,qBAAa,uBAAwB,YAAW,cAAc;IAC5D,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAgC;IAClE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;gBAEhC,IAAI,GAAE,OAAO,CAAC,oBAAoB,CAAM;IAI9C,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuEzC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B,YAAY,IAAI,MAAM,GAAG,IAAI;IAI7B,WAAW,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI;IAIlD,SAAS,IAAI,OAAO;IAIpB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IA0DxB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,eAAe;CAgBxB"}