@yemi33/minions 0.1.2082 → 0.1.2083

package/dashboard/js/qa.js

@@ -504,6 +504,7 @@ function qaOpenRunAgent(workItemId, agentId) {
       loadQaTargets();
       loadQaRunbooks();
       loadQaRunners();
+      loadQaProjectsSelect();
       loadQaSessions();
       _startQaSessionsPoll();
       _startQaRunsPoll();
@@ -594,6 +595,38 @@ async function loadQaRunners() {
   }
 }
 
+// W-mpq6xqzj000606d0 — Populate the multi-select projects dropdown on the
+// QA Session form. Prefers the in-memory `cmdProjects` cache (populated by
+// /api/status renders), falling back to a direct /api/status fetch when the
+// QA page is opened in isolation before any other page has loaded.
+async function loadQaProjectsSelect() {
+  const sel = document.getElementById('qa-session-projects');
+  if (!sel) return;
+  let projects = [];
+  try {
+    if (typeof cmdProjects !== 'undefined' && Array.isArray(cmdProjects) && cmdProjects.length > 0) {
+      projects = cmdProjects.slice();
+    } else {
+      const res = await fetch('/api/status');
+      const json = res.ok ? await res.json() : {};
+      if (Array.isArray(json && json.projects)) {
+        projects = json.projects.map(p => ({ name: p.name, description: p.description || '' }));
+      }
+    }
+  } catch { projects = []; }
+  // Preserve current selection across re-renders.
+  const previouslySelected = new Set(Array.from(sel.selectedOptions || []).map(o => o.value));
+  while (sel.firstChild) sel.removeChild(sel.firstChild);
+  for (const p of projects) {
+    if (!p || !p.name) continue;
+    const opt = document.createElement('option');
+    opt.value = p.name;
+    opt.textContent = p.name;
+    if (previouslySelected.has(p.name)) opt.selected = true;
+    sel.appendChild(opt);
+  }
+}
+
 async function loadQaSessions() {
   const root = document.getElementById('qa-sessions-content');
   if (!root) return;
@@ -773,7 +806,13 @@ async function qaSubmitSessionForm() {
   const flowsRaw = (document.getElementById('qa-session-flows') || {}).value || '';
   const mode = (document.getElementById('qa-session-mode') || {}).value || 'confirm';
   const runner = (document.getElementById('qa-session-runner') || {}).value || '';
-  const project = (document.getElementById('qa-session-project') || {}).value || '';
+  // W-mpq6xqzj000606d0 — Multi-select projects dropdown. First selected =
+  // primary (drives DRAFT/EXECUTE); rest = co-services (dev-up only).
+  // Empty selection = central (no project).
+  const projectsSel = document.getElementById('qa-session-projects');
+  const projects = projectsSel
+    ? Array.from(projectsSel.selectedOptions || []).map(o => o.value).filter(Boolean)
+    : [];
   const capture = {
     video: !!(document.getElementById('qa-session-capture-video') || {}).checked,
     screenshots: !!(document.getElementById('qa-session-capture-screenshots') || {}).checked,
@@ -781,7 +820,7 @@ async function qaSubmitSessionForm() {
   };
   const body = { target, flowsRaw, mode, capture };
   if (runner) body.runner = runner;
-  if (project) body.project = project;
+  if (projects.length > 0) body.projects = projects;
 
   try {
     const res = await fetch('/api/qa/session', {

package/dashboard/js/settings.js

@@ -69,19 +69,19 @@ async function openSettings() {
   const agentRows = Object.entries(agents).map(function([id, a]) {
     return '<tr>' +
       '<td style="font-weight:600">' + escHtml(a.emoji || '') + ' ' + escHtml(a.name || id) + '</td>' +
-      '<td><input data-agent="' + escHtml(id) + '" data-field="role" value="' + escHtml(a.role || '') + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:11px"></td>' +
-      '<td><input data-agent="' + escHtml(id) + '" data-field="skills" value="' + escHtml((a.skills || []).join(', ')) + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:11px"></td>' +
+      '<td><input data-agent="' + escHtml(id) + '" data-field="role" value="' + escHtml(a.role || '') + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-base)"></td>' +
+      '<td><input data-agent="' + escHtml(id) + '" data-field="skills" value="' + escHtml((a.skills || []).join(', ')) + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-base)"></td>' +
       '<td data-runtime-cli="' + escHtml(id) + '" style="min-width:110px">' +
         // Initial loading placeholder — initRuntimeFleetUI() replaces this with a
         // <select> populated from /api/runtimes once the registry resolves.
-        '<input value="' + escHtml(a.cli || '') + '" placeholder="' + escHtml(fleetCliLabel) + ' (fleet)" disabled style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:11px">' +
+        '<input value="' + escHtml(a.cli || '') + '" placeholder="' + escHtml(fleetCliLabel) + ' (fleet)" disabled style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:var(--text-base)">' +
       '</td>' +
       '<td data-runtime-model="' + escHtml(id) + '" style="min-width:140px">' +
         // Loading placeholder — initRuntimeFleetUI() replaces this with a
         // <select> populated from /api/runtimes/<resolved-cli>/models.
-        '<input value="' + escHtml(a.model || '') + '" placeholder="' + escHtml(fleetModelLabel) + ' (fleet)" disabled style="width:120px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:11px">' +
+        '<input value="' + escHtml(a.model || '') + '" placeholder="' + escHtml(fleetModelLabel) + ' (fleet)" disabled style="width:120px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:var(--text-base)">' +
       '</td>' +
-      '<td><input data-agent="' + escHtml(id) + '" data-field="monthlyBudgetUsd" value="' + escHtml(a.monthlyBudgetUsd != null ? String(a.monthlyBudgetUsd) : '') + '" placeholder="unlimited" style="width:70px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:11px;text-align:right"></td>' +
+      '<td><input data-agent="' + escHtml(id) + '" data-field="monthlyBudgetUsd" value="' + escHtml(a.monthlyBudgetUsd != null ? String(a.monthlyBudgetUsd) : '') + '" placeholder="unlimited" style="width:70px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-base);text-align:right"></td>' +
     '</tr>';
   }).join('');
 
@@ -96,50 +96,50 @@ async function openSettings() {
     '<div id="set-runtime-section" style="border:1px solid var(--border);border-radius:6px;padding:10px 12px;margin-bottom:16px">' +
       '<div style="display:grid;grid-template-columns:1fr 2fr;gap:8px;margin-bottom:8px">' +
         '<div data-search="default cli fleet runtime">' +
-          '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Default CLI</label>' +
-          '<select id="set-defaultCli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
+          '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Default CLI</label>' +
+          '<select id="set-defaultCli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
             '<option value="">Loading…</option>' +
           '</select>' +
-          '<div style="font-size:9px;color:var(--muted);margin-top:1px">Fleet-wide runtime — registered adapters from <code>/api/runtimes</code></div>' +
+          '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Fleet-wide runtime — registered adapters from <code>/api/runtimes</code></div>' +
         '</div>' +
         '<div data-search="default model fleet">' +
-          '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Default Model</label>' +
-          '<div id="set-defaultModel-wrap"><input id="set-defaultModel" value="' + escHtml(e.defaultModel || '') + '" placeholder="Default (CLI chooses)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px"></div>' +
-          '<div style="font-size:9px;color:var(--muted);margin-top:1px">Empty = let the runtime pick its own default</div>' +
+          '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Default Model</label>' +
+          '<div id="set-defaultModel-wrap"><input id="set-defaultModel" value="' + escHtml(e.defaultModel || '') + '" placeholder="Default (CLI chooses)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)"></div>' +
+          '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Empty = let the runtime pick its own default</div>' +
         '</div>' +
       '</div>' +
       // CC overrides — collapsed by default
       '<details id="set-cc-overrides-details"' + ((e.ccCli || e.ccModel) ? ' open' : '') + ' style="margin-top:8px;border-top:1px solid var(--border);padding-top:8px">' +
-        '<summary style="cursor:pointer;font-size:11px;color:var(--text);user-select:none">Customize CC separately ' +
-          '<span style="font-size:9px;color:var(--muted)">(Command Center + doc-chat use the fleet defaults unless overridden)</span>' +
+        '<summary style="cursor:pointer;font-size:var(--text-base);color:var(--text);user-select:none">Customize CC separately ' +
+          '<span style="font-size:var(--text-xs);color:var(--muted)">(Command Center + doc-chat use the fleet defaults unless overridden)</span>' +
         '</summary>' +
         '<div style="display:grid;grid-template-columns:1fr 2fr 1fr;gap:8px;margin-top:8px">' +
           '<div data-search="cc cli command center runtime">' +
-            '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">CC CLI</label>' +
-            '<select id="set-ccCli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
+            '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">CC CLI</label>' +
+            '<select id="set-ccCli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
               '<option value="">Loading…</option>' +
             '</select>' +
-            '<div style="font-size:9px;color:var(--muted);margin-top:1px">Empty = inherit Default CLI</div>' +
+            '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Empty = inherit Default CLI</div>' +
           '</div>' +
           '<div data-search="cc model command center">' +
-            '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">CC Model</label>' +
+            '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">CC Model</label>' +
             // Wrap the input in a dedicated container so loadModelsForRuntime
             // (which does `wrap.innerHTML = …` on the input's parent) only
             // swaps THIS element. Without the wrap it would wipe the label
             // and the hint below, breaking vertical alignment with the
             // sibling CC CLI / Effort columns.
-            '<div id="set-ccModel-wrap"><input id="set-ccModel" value="' + escHtml(e.ccModel || '') + '" placeholder="(inherits Default Model)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px"></div>' +
-            '<div style="font-size:9px;color:var(--muted);margin-top:1px">Empty = inherit Default Model</div>' +
+            '<div id="set-ccModel-wrap"><input id="set-ccModel" value="' + escHtml(e.ccModel || '') + '" placeholder="(inherits Default Model)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)"></div>' +
+            '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Empty = inherit Default Model</div>' +
           '</div>' +
           '<div data-search="cc effort reasoning">' +
-            '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Effort</label>' +
-            '<select id="set-ccEffort" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
+            '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Effort</label>' +
+            '<select id="set-ccEffort" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
               '<option value=""' + (!e.ccEffort ? ' selected' : '') + '>Default</option>' +
               '<option value="low"' + (e.ccEffort === 'low' ? ' selected' : '') + '>Low</option>' +
               '<option value="medium"' + (e.ccEffort === 'medium' ? ' selected' : '') + '>Medium</option>' +
               '<option value="high"' + (e.ccEffort === 'high' ? ' selected' : '') + '>High</option>' +
             '</select>' +
-            '<div style="font-size:9px;color:var(--muted);margin-top:1px">CC reasoning depth</div>' +
+            '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">CC reasoning depth</div>' +
           '</div>' +
         '</div>' +
         // W-mpmwxni2000c25c7-d — per-turn watchdog. Surfaced under CC overrides
@@ -150,8 +150,8 @@ async function openSettings() {
       '</details>' +
     '</div>' +
     '<h4>Agents</h4>' +
-    '<div style="font-size:10px;color:var(--muted);margin-bottom:6px">CLI / Model placeholders show the fleet default each agent will inherit. Pick a value to pin per-agent; clear to re-inherit. Per-agent monthly budget overrides the fleet ceiling.</div>' +
-    '<table style="width:100%;border-collapse:collapse;margin-bottom:16px;font-size:11px">' +
+    '<div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:6px">CLI / Model placeholders show the fleet default each agent will inherit. Pick a value to pin per-agent; clear to re-inherit. Per-agent monthly budget overrides the fleet ceiling.</div>' +
+    '<table style="width:100%;border-collapse:collapse;margin-bottom:16px;font-size:var(--text-base)">' +
       '<tr style="text-align:left;color:var(--muted)"><th style="padding:4px">Agent</th><th style="padding:4px">Role</th><th style="padding:4px">Skills</th><th style="padding:4px">CLI</th><th style="padding:4px">Model</th><th style="padding:4px">Budget $/mo</th></tr>' +
       agentRows +
     '</table>';
@@ -187,8 +187,8 @@ async function openSettings() {
     '<div class="settings-pane-sub">Dashboard-wide visual preferences. Persisted in browser localStorage + server-side settings so they survive a reload from a cold cache.</div>' +
     '<div class="settings-grid-2">' +
       '<div data-search="font size scale appearance dashboard">' +
-        '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Font Size</label>' +
-        '<select id="set-fontSize" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
+        '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Font Size</label>' +
+        '<select id="set-fontSize" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
           (function() {
             var current = (e.fontSize || 'small');
             var opts = [['small', 'Small (current default)'], ['medium', 'Medium'], ['large', 'Large'], ['xlarge', 'Extra Large']];
@@ -197,7 +197,7 @@ async function openSettings() {
             }).join('');
           })() +
         '</select>' +
-        '<div style="font-size:9px;color:var(--muted);margin-top:1px">Scales the whole dashboard. Persisted in browser + server.</div>' +
+        '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Scales the whole dashboard. Persisted in browser + server.</div>' +
       '</div>' +
     '</div>';
 
@@ -216,23 +216,23 @@ async function openSettings() {
     var mismatch = !!(liveProj && liveProj.branchMismatch);
     var localBranch = (liveProj && liveProj.gitBranch) || '';
     var driftNote = mismatch
-      ? '<div style="font-size:10px;color:var(--yellow);margin-top:4px">⚠ Configured main (<code>' + escHtml(p.mainBranch || '') + '</code>) differs from origin/HEAD (<code>' + escHtml(remoteDefault) + '</code>) — config is likely stale.</div>'
+      ? '<div style="font-size:var(--text-sm);color:var(--yellow);margin-top:4px">⚠ Configured main (<code>' + escHtml(p.mainBranch || '') + '</code>) differs from origin/HEAD (<code>' + escHtml(remoteDefault) + '</code>) — config is likely stale.</div>'
       : '';
     var pathRow = p.localPath
-      ? '<div style="font-size:10px;color:var(--muted);margin-bottom:6px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace">' + escHtml(p.localPath) + '</div>'
+      ? '<div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:6px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace">' + escHtml(p.localPath) + '</div>'
       : '';
     var branchGrid = '<div style="display:grid;grid-template-columns:1fr 1fr;gap:8px;margin-bottom:6px">' +
       settingsField('Configured main branch', 'set-mainBranch-' + p.name, p.mainBranch || '', '', 'Used by branch-naming + dependency-merge to identify mainline. Empty = auto-detect from origin/HEAD.') +
       '<div>' +
-        '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Remote default <span style="opacity:0.6">(read-only)</span></label>' +
-        '<input id="set-remoteDefaultBranch-' + p.name + '" value="' + escHtml(remoteDefault || '(unset)') + '" readonly style="width:100%;padding:4px 6px;background:var(--surface2);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:12px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace">' +
-        '<div style="font-size:9px;color:var(--muted);margin-top:1px">Parsed from <code>git symbolic-ref refs/remotes/origin/HEAD</code>' + (localBranch ? '. Local HEAD: <code>' + escHtml(localBranch) + '</code>' : '') + '.</div>' +
+        '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Remote default <span style="opacity:0.6">(read-only)</span></label>' +
+        '<input id="set-remoteDefaultBranch-' + p.name + '" value="' + escHtml(remoteDefault || '(unset)') + '" readonly style="width:100%;padding:4px 6px;background:var(--surface2);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:var(--text-md);font-family:ui-monospace,SFMono-Regular,Menlo,monospace">' +
+        '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">Parsed from <code>git symbolic-ref refs/remotes/origin/HEAD</code>' + (localBranch ? '. Local HEAD: <code>' + escHtml(localBranch) + '</code>' : '') + '.</div>' +
       '</div>' +
     '</div>';
     return '<div data-settings-project="' + escHtml(p.name) + '" data-search="project ' + escHtml(p.name.toLowerCase()) + '" style="border:1px solid var(--border);border-radius:6px;padding:10px 12px;margin-bottom:12px">' +
       '<div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:8px">' +
-        '<div style="font-size:12px;font-weight:600">' + escHtml(p.name) + '</div>' +
-        '<button onclick="MinionsSettings.removeProject(\'' + escHtml(p.name) + '\')" style="font-size:9px;padding:2px 8px;background:transparent;color:var(--red);border:1px solid var(--red);border-radius:3px;cursor:pointer">Remove</button>' +
+        '<div style="font-size:var(--text-md);font-weight:600">' + escHtml(p.name) + '</div>' +
+        '<button onclick="MinionsSettings.removeProject(\'' + escHtml(p.name) + '\')" style="font-size:var(--text-xs);padding:2px 8px;background:transparent;color:var(--red);border:1px solid var(--red);border-radius:3px;cursor:pointer">Remove</button>' +
       '</div>' +
       pathRow +
       branchGrid +
@@ -300,8 +300,8 @@ async function openSettings() {
     '</div>' +
     '<div class="settings-grid-2">' +
       '<div data-search="copilot stream mode incremental batched">' +
-        '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">Copilot stream</label>' +
-        '<select id="set-copilotStreamMode" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
+        '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Copilot stream</label>' +
+        '<select id="set-copilotStreamMode" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
           '<option value="on"' + ((e.copilotStreamMode || 'on') === 'on' ? ' selected' : '') + '>on (incremental)</option>' +
           '<option value="off"' + (e.copilotStreamMode === 'off' ? ' selected' : '') + '>off (batched)</option>' +
         '</select>' +
@@ -321,7 +321,7 @@ async function openSettings() {
     '<div style="display:grid;grid-template-columns:1fr;gap:8px;margin-top:12px">' +
       settingsField('Allowed Tools', 'set-allowedTools', c.allowedTools || '', '', 'Claude allow-list passed through for compatibility; runtime bypass flags are adapter-owned.') +
     '</div>' +
-    '<div data-search="permission bypass dangerously-skip-permissions autopilot allow-all" style="font-size:10px;color:var(--muted);margin-top:12px;padding:6px 8px;border:1px solid var(--border);border-radius:4px;background:var(--surface-subtle, rgba(130,160,210,0.08))">' +
+    '<div data-search="permission bypass dangerously-skip-permissions autopilot allow-all" style="font-size:var(--text-sm);color:var(--muted);margin-top:12px;padding:6px 8px;border:1px solid var(--border);border-radius:4px;background:var(--surface-subtle, rgba(130,160,210,0.08))">' +
       'Permission bypass is runtime-owned: Claude agents use <code>--dangerously-skip-permissions</code>; Copilot agents use <code>--autopilot --allow-all --no-ask-user</code>. There is no dashboard permission-mode setting.' +
     '</div>';
 
@@ -355,16 +355,16 @@ async function openSettings() {
     '<h3>Feature Flags</h3>' +
     '<div class="settings-pane-sub">In-progress UX or behavior gates. Toggles persist immediately. Registry: <code>engine/features.js</code>. Env override: <code>MINIONS_FEATURE_&lt;NAME&gt;=1</code>.</div>' +
     '<details id="settings-features-details" open style="border:1px solid var(--border);border-radius:6px;padding:12px">' +
-      '<summary style="cursor:pointer;font-size:12px;color:var(--text);user-select:none;margin-bottom:8px">Show experimental flags ' +
-        '<span style="font-size:10px;color:var(--muted)">(' + featuresList.length + ' registered)</span>' +
+      '<summary style="cursor:pointer;font-size:var(--text-md);color:var(--text);user-select:none;margin-bottom:8px">Show experimental flags ' +
+        '<span style="font-size:var(--text-sm);color:var(--muted)">(' + featuresList.length + ' registered)</span>' +
       '</summary>' +
       (featuresList.length === 0
-        ? '<div style="font-size:11px;color:var(--muted);padding:12px;border:1px dashed var(--border);border-radius:4px;text-align:center">No experimental features registered. Add entries to <code>engine/features.js</code> to gate new work.</div>'
+        ? '<div style="font-size:var(--text-base);color:var(--muted);padding:12px;border:1px dashed var(--border);border-radius:4px;text-align:center">No experimental features registered. Add entries to <code>engine/features.js</code> to gate new work.</div>'
         : '<div style="display:flex;flex-direction:column;gap:8px">' +
           featuresList.map(function(f) {
             const checked = f.enabled ? ' checked' : '';
             const expiredBadge = f.expired
-              ? ' <span style="font-size:9px;padding:1px 5px;background:rgba(220,80,80,0.15);color:var(--red);border-radius:3px;margin-left:4px">EXPIRED</span>'
+              ? ' <span style="font-size:var(--text-xs);padding:1px 5px;background:rgba(220,80,80,0.15);color:var(--red);border-radius:3px;margin-left:4px">EXPIRED</span>'
               : '';
             const meta = [];
             if (f.addedIn) meta.push('added in ' + escHtml(f.addedIn));
@@ -374,9 +374,9 @@ async function openSettings() {
             return '<label data-feature-id="' + escHtml(f.id) + '" data-search="' + escHtml(searchText) + '" style="display:flex;align-items:flex-start;gap:8px;padding:8px;border:1px solid var(--border);border-radius:4px;cursor:pointer">' +
               '<input type="checkbox" data-feature-toggle="' + escHtml(f.id) + '"' + checked + ' style="margin-top:3px;cursor:pointer">' +
               '<div style="flex:1">' +
-                '<div style="font-size:11px;font-weight:600;color:var(--text)">' + escHtml(f.id) + expiredBadge + '</div>' +
-                (f.description ? '<div style="font-size:10px;color:var(--muted);margin-top:2px">' + escHtml(f.description) + '</div>' : '') +
-                '<div style="font-size:9px;color:var(--muted);margin-top:3px">' + meta.join(' · ') + '</div>' +
+                '<div style="font-size:var(--text-base);font-weight:600;color:var(--text)">' + escHtml(f.id) + expiredBadge + '</div>' +
+                (f.description ? '<div style="font-size:var(--text-sm);color:var(--muted);margin-top:2px">' + escHtml(f.description) + '</div>' : '') +
+                '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:3px">' + meta.join(' · ') + '</div>' +
               '</div>' +
             '</label>';
           }).join('') +
@@ -388,7 +388,7 @@ async function openSettings() {
     '<div class="settings-pane-sub">Routing table + low-level engine knobs that most operators never touch. Change with care.</div>' +
     '<h4>Routing Table</h4>' +
     '<div data-search="routing table playbook agent assignment" style="margin-bottom:16px">' +
-      '<textarea id="set-routing" rows="10" style="width:100%;padding:8px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-family:monospace;font-size:11px;resize:vertical">' + escHtml(data.routing || '') + '</textarea>' +
+      '<textarea id="set-routing" rows="10" style="width:100%;padding:8px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-family:monospace;font-size:var(--text-base);resize:vertical">' + escHtml(data.routing || '') + '</textarea>' +
     '</div>' +
     '<h4>Inbox &amp; Status Retention</h4>' +
     '<div class="settings-grid-2">' +
@@ -457,7 +457,7 @@ async function openSettings() {
         '<nav class="settings-rail-nav" id="settings-rail-nav">' + railHtml + '</nav>' +
       '</aside>' +
       '<div class="settings-content" id="settings-content">' +
-        '<div id="settings-status" style="font-size:11px;min-height:16px;margin-bottom:8px"></div>' +
+        '<div id="settings-status" style="font-size:var(--text-base);min-height:16px;margin-bottom:8px"></div>' +
         panesHtml +
       '</div>' +
     '</div>';
@@ -588,7 +588,7 @@ async function initRuntimeFleetUI(engineCfg, agentsCfg) {
     const current = agent.cli || '';
     // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: agentId, runtime names)
     cell.innerHTML =
-      '<select data-agent="' + escHtml(agentId) + '" data-field="cli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:11px">' +
+      '<select data-agent="' + escHtml(agentId) + '" data-field="cli" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-base)">' +
         '<option value=""' + (!current ? ' selected' : '') + '>(fleet default)</option>' +
         names.map(n =>
           '<option value="' + escHtml(n) + '"' + (n === current ? ' selected' : '') + '>' + escHtml(n) + '</option>'
@@ -647,7 +647,7 @@ async function loadModelsForRuntime(runtimeName, inputId, currentValue) {
   const token = _nextModelLoadToken('runtime', inputId);
   if (!runtimeName) {
     // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: currentValue; inputId is an internal fixed DOM id)
-    wrap.innerHTML = '<input id="' + inputId + '" value="' + escHtml(currentValue || '') + '" placeholder="(no runtime selected)" disabled style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:12px">';
+    wrap.innerHTML = '<input id="' + inputId + '" value="' + escHtml(currentValue || '') + '" placeholder="(no runtime selected)" disabled style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--muted);font-size:var(--text-md)">';
     return;
   }
   let payload = { models: null };
@@ -662,7 +662,7 @@ async function loadModelsForRuntime(runtimeName, inputId, currentValue) {
     // Free-text fallback — let the user type anything (custom Anthropic /
     // OpenAI model IDs, future models, etc.).
     // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: currentValue; inputId is an internal fixed DOM id)
-    wrap.innerHTML = '<input id="' + inputId + '" value="' + escHtml(currentValue || '') + '" placeholder="Default (CLI chooses)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">';
+    wrap.innerHTML = '<input id="' + inputId + '" value="' + escHtml(currentValue || '') + '" placeholder="Default (CLI chooses)" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">';
     return;
   }
   // Dropdown. The first option submits empty string → "Default (CLI chooses)".
@@ -679,7 +679,7 @@ async function loadModelsForRuntime(runtimeName, inputId, currentValue) {
     opts += '<option value="' + escHtml(currentValue) + '" selected>' + escHtml(currentValue) + ' (custom)</option>';
   }
   // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: model id, model label, currentValue; inputId is an internal fixed DOM id)
-  wrap.innerHTML = '<select id="' + inputId + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' + opts + '</select>';
+  wrap.innerHTML = '<select id="' + inputId + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' + opts + '</select>';
 }
 
 /**
@@ -693,7 +693,7 @@ async function loadModelsForAgent(agentId, runtimeName, currentValue) {
   const cell = document.querySelector('[data-runtime-model="' + agentId + '"]');
   if (!cell) return;
   const baseAttrs = 'data-agent="' + escHtml(agentId) + '" data-field="model"';
-  const baseStyle = 'width:120px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:11px';
+  const baseStyle = 'width:120px;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-base)';
   const token = _nextModelLoadToken('agent', agentId);
   if (!runtimeName) {
     // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: agentId, currentValue)
@@ -735,17 +735,17 @@ function settingsToggle(label, id, checked, hint) {
   const searchKey = (String(label || '') + ' ' + String(hint || '')).toLowerCase().replace(/"/g, '');
   return '<div class="settings-row" data-search="' + escHtml(searchKey) + '" style="display:flex;align-items:center;gap:8px;padding:4px 0">' +
     '<input type="checkbox" id="' + id + '"' + (checked ? ' checked' : '') + ' style="accent-color:var(--blue);width:16px;height:16px;cursor:pointer">' +
-    '<label for="' + id + '" style="font-size:12px;color:var(--text);cursor:pointer">' + escHtml(label) + '</label>' +
-    (hint ? '<span style="font-size:9px;color:var(--muted)">' + escHtml(hint) + '</span>' : '') +
+    '<label for="' + id + '" style="font-size:var(--text-md);color:var(--text);cursor:pointer">' + escHtml(label) + '</label>' +
+    (hint ? '<span style="font-size:var(--text-xs);color:var(--muted)">' + escHtml(hint) + '</span>' : '') +
   '</div>';
 }
 
 function settingsField(label, id, value, unit, hint) {
   const searchKey = (String(label || '') + ' ' + String(hint || '') + ' ' + String(unit || '')).toLowerCase().replace(/"/g, '');
   return '<div class="settings-row" data-search="' + escHtml(searchKey) + '">' +
-    '<label style="font-size:10px;color:var(--muted);display:block;margin-bottom:2px">' + escHtml(label) + (unit ? ' <span style="opacity:0.6">(' + escHtml(unit) + ')</span>' : '') + '</label>' +
-    '<input id="' + id + '" value="' + escHtml(String(value)) + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:12px">' +
-    (hint ? '<div style="font-size:9px;color:var(--muted);margin-top:1px">' + escHtml(hint) + '</div>' : '') +
+    '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">' + escHtml(label) + (unit ? ' <span style="opacity:0.6">(' + escHtml(unit) + ')</span>' : '') + '</label>' +
+    '<input id="' + id + '" value="' + escHtml(String(value)) + '" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
+    (hint ? '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:1px">' + escHtml(hint) + '</div>' : '') +
   '</div>';
 }
 

package/dashboard/js/state.js

@@ -43,7 +43,7 @@ let currentPage = getPageFromUrl();
 // _stopMeetingPoll, _stopQaRunsPoll all clearInterval on a nullable handle;
 // closeDetail / closeManagedLog short-circuit when no panel/stream is open.
 const PAGE_LAZY_LOADERS = {
-  qa: ['loadQaTargets', 'loadQaRunbooks', 'loadQaRunners', 'loadQaSessions', '_startQaSessionsPoll', '_startQaRunsPoll'],
+  qa: ['loadQaTargets', 'loadQaRunbooks', 'loadQaRunners', 'loadQaProjectsSelect', 'loadQaSessions', '_startQaSessionsPoll', '_startQaRunsPoll'],
   plans: ['refreshPlans'],
   inbox: ['refreshKnowledgeBase'],
 };

package/dashboard/pages/qa.html

@@ -17,8 +17,9 @@
                 </select>
               </div>
               <div>
-                <label class="qa-form-label" for="qa-session-project">Project</label>
-                <input id="qa-session-project" type="text" class="qa-form-input" placeholder="(blank = central)">
+                <label class="qa-form-label" for="qa-session-projects">Projects</label>
+                <select id="qa-session-projects" class="qa-form-input" multiple size="3"></select>
+                <p class="empty" style="margin-top:4px;font-size:0.85em">Hold Ctrl/Cmd to select multiple. First selected = primary (drives DRAFT/EXECUTE). Others = co-services (dev-up only). Leave empty = central.</p>
               </div>
             </div>
             <div class="qa-form-row qa-session-target-fields">

package/dashboard.js

@@ -10273,13 +10273,31 @@ What would you like to discuss or change? When you're happy, say "approve" and I
     return { wiPath: target.wiPath, project: target.project ? target.project.name : null };
   }
 
+  // W-mpq6xqzj000606d0 — Multi-project resolver. Walks each requested project
+  // through resolveWorkItemsCreateTarget, returning either the full list of
+  // {wiPath, project} entries (with the first treated as primary) or
+  // { error } on the first failure. Accepts the canonical `projects: string[]`
+  // and falls back to the legacy single `project` string.
+  function _qaSessionsResolveTargets(body) {
+    const list = Array.isArray(body && body.projects) && body.projects.length > 0
+      ? body.projects.slice()
+      : [body && body.project ? body.project : ''];
+    const resolved = [];
+    for (const name of list) {
+      const t = _qaSessionsResolveTarget(name);
+      if (t.error) return { error: `project "${name || '(central)'}": ${t.error}` };
+      resolved.push(t);
+    }
+    return { targets: resolved };
+  }
+
   async function handleQaSessionCreate(req, res) {
     try {
       const body = await readBody(req);
       // Validate first so a bad spec returns 400 BEFORE we touch state. The
       // body shape is identical to qaSessions.validateSpec — target, flowsRaw,
-      // mode, capture, runner, project, createdBy — so we forward it
-      // verbatim.
+      // mode, capture, runner, project | projects, createdBy — so we forward
+      // it verbatim.
       const qaSessions = require('./engine/qa-sessions');
       const v = qaSessions.validateSpec(body);
       if (!v.ok) return jsonReply(res, 400, { error: 'invalid spec', details: v.errors }, req);
@@ -10294,8 +10312,11 @@ What would you like to discuss or change? When you're happy, say "approve" and I
         createSpec.createdBy = originAgent;
       }
 
-      const resolved = _qaSessionsResolveTarget(createSpec.project);
-      if (resolved.error) return jsonReply(res, 400, { error: resolved.error }, req);
+      // W-mpq6xqzj000606d0 — Resolve EACH project (multi-project fan-out)
+      // before persisting the session, so a single bad project rejects the
+      // whole submit instead of leaving an orphan session in PENDING.
+      const resolution = _qaSessionsResolveTargets(createSpec);
+      if (resolution.error) return jsonReply(res, 400, { error: resolution.error }, req);
 
       let session;
       try { session = qaSessions.createSession(createSpec); }
@@ -10304,8 +10325,7 @@ What would you like to discuss or change? When you're happy, say "approve" and I
       let setupWiId = null;
       try {
         setupWiId = qaSessions.queueSetup(session.id, {
-          wiPath: resolved.wiPath,
-          project: resolved.project,
+          resolvedTargets: resolution.targets.map(t => ({ project: t.project, wiPath: t.wiPath })),
         });
       } catch (e) {
         // queueSetup throws when pending→spawning is rejected (createSession
@@ -10324,6 +10344,7 @@ What would you like to discuss or change? When you're happy, say "approve" and I
         state: 'spawning',
         setupWorkItemId: setupWiId,
         managedSpawnName: session.managedSpawnName,
+        projects: resolution.targets.map(t => t.project),
       }, req);
     } catch (e) {
       return jsonReply(res, 500, { error: e.message }, req);

package/docs/qa-runbook-lifecycle.md

@@ -138,6 +138,26 @@ routing default):
    the session `spawning → drafting`. First-health failure → `failed` with
    `failure_class: qa-session-setup-failed`.
 
+   **Multi-project fan-out (W-mpq6xqzj000606d0):** when `spec.projects`
+   contains more than one project name, SETUP is fanned out — one work item
+   per project, queued in parallel into each project's own
+   `work-items.json`. The first project (`spec.projects[0]`) is the
+   **primary** (`meta.qaSession.primary === true`); the rest are
+   **co-services** (`primary === false`). Each WI's
+   `meta.qaSession.coServices` lists the co-service project names (only the
+   primary carries the full list; co-services see `[]`) and
+   `meta.qaSession.primaryProject` carries the canonical primary name.
+   The primary keeps the unsuffixed managed-spawn name; each co-service
+   gets `qa-session-<sessionId>-<project>`. The session tracks per-project
+   completion in `session.setupStatus[<project>]: { state, wiId, error,
+   completedAt }`, where `state ∈ {pending, success, failed}`. **All**
+   projects must succeed before `spawning → drafting`; any failure flips
+   the session to `failed` with `failure_class: qa-session-setup-failed`
+   and a JSON-encoded per-project error array in `session.error`. DRAFT
+   queues on `session.primaryWiPath` (stamped at queueSetup time).
+   Single-project sessions skip `setupStatus` entirely (fast path uses
+   `session.state` directly).
+
 2. **DRAFT** (`playbooks/qa-session-draft.md`) reads the live spawn
    metadata via `/api/managed-processes/by-name/qa-session-<id>`, calls the
    resolved runner's `generateBrief({target, flowsRaw, capture})` hook, and
@@ -168,7 +188,7 @@ Documented in `dashboard.js`; routes are visible at `GET /api/routes`.
 
 | Method | Path                                       | Behavior                                                                                                                  |
 |--------|--------------------------------------------|---------------------------------------------------------------------------------------------------------------------------|
-| POST   | `/api/qa/session`                          | Create session; validates spec, calls `createSession` + `queueSetup` (`pending → spawning`). Returns `sessionId`, `setupWorkItemId`, `managedSpawnName`. |
+| POST   | `/api/qa/session`                          | Create session; validates spec, calls `createSession` + `queueSetup` (`pending → spawning`). Body accepts `project: string` (single) OR `projects: string[]` (multi, ≤5; first is primary, rest are co-services). Returns `sessionId`, `setupWorkItemId` (primary's WI), `managedSpawnName`, and (multi only) `projects: string[]`. |
 | GET    | `/api/qa/sessions`                         | List sessions newest-first. Optional `?limit=N` and `?state=pending\|spawning\|drafting\|awaiting-approval\|executing\|done\|failed\|killed`. |
 | GET    | `/api/qa/sessions/<id>`                    | Fetch a single session record by id.                                                                                      |
 | POST   | `/api/qa/sessions/<id>/approve`            | `awaiting-approval → executing`. Server-side creates the linked `qa-runs` record (synthetic `runbookId='qa-session-<id>'`), queues EXECUTE WI, stamps `qaRunId` on the session. |

package/engine/features.js

@@ -51,14 +51,19 @@ const FEATURES = {
   // is the canonical predicate every dashboard.js call site uses. Explicit
   // `engine.ccUseWorkerPool` true/false in config wins ONLY when CC runtime
   // is copilot; otherwise the helper forces `false`. PR #2492 flipped the
-  // copilot default ON; see that PR for the cold-spawn measurements.
+  // copilot resolver default ON; W-mpqf3ybq000455f2 flipped this registry
+  // default ON to match the resolved behavior (so the Settings/`/api/features`
+  // surface reports the same default the runtime actually uses). The pool
+  // has been stable since PR #2492's cold-spawn measurements; opt-out via
+  // `config.features.ccUseWorkerPool: false` or `engine.ccUseWorkerPool: false`
+  // still works.
   //
   // `requiredCcRuntime: 'copilot'` here is a UX hint — the Settings panel
   // greys out the toggle when the resolved CC runtime mismatches so users
   // see the constraint instead of toggling a no-op.
   'ccUseWorkerPool': {
     description: 'Route Command Center / doc-chat through a persistent `copilot --acp` worker per tab instead of spawning a fresh CLI per turn (~14s cold-start savings). Copilot-only — has no effect when the CC runtime is Claude.',
-    default: false,
+    default: true,
     addedIn: '0.1.1916',
     requiredCcRuntime: 'copilot',
   },

package/engine/playbook.js

@@ -325,6 +325,14 @@ const PLAYBOOK_OPTIONAL_VARS = new Set([
   'runner_brief',          // generateBrief() output — used by qa-session-draft
   'runner_execute_brief',  // executeBrief() output — used by qa-session-execute
   'test_file',             // session.testFile — set after DRAFT, used by EXECUTE
+  // W-mpq6xqzj000606d0 — Multi-project QA Session fan-out. SETUP playbook
+  // gets one work item per project; these vars distinguish the "primary"
+  // (which owns DRAFT/EXECUTE handoff and the canonical managed-spawn name)
+  // from N "co-service" WIs (which just declare their own managed-spawn and
+  // exit). Optional because single-project sessions never set them.
+  'role',                  // 'primary' | 'co-service'
+  'primary_project',       // canonical primary project name; empty on single-project sessions
+  'co_services_json',      // JSON-encoded co-service project names (e.g. ["api","worker"]); empty when none
 ]);
 
 const PLAYBOOK_REQUIRED_VARS = {

package/engine/qa-sessions.js

@@ -138,6 +138,11 @@ const LIMITS = {
   targetFieldMax: 500,
   projectMax: 64,
   summaryMax: 2000,
+  // W-mpq6xqzj000606d0 — multi-project QA Session: cap on co-services per
+  // session. Each entry is a separate SETUP WI fan-out, so the cap doubles as
+  // a guardrail against an operator queueing dozens of parallel dev-up
+  // services from a single form submit.
+  projectsMax: 5,
 };
 
 // Mirrors engine/qa-runbooks.js _isSafeId — kebab-case ≤64 chars, no leading/
@@ -286,6 +291,37 @@ function validateSpec(spec) {
     }
   }
 
+  // W-mpq6xqzj000606d0 — multi-project mode. `spec.projects` is the canonical
+  // field; `spec.project` (legacy single-string) is still accepted above and
+  // normalized into `projects` by createSession. Both may legitimately be
+  // empty/null = "central work-items target", but if BOTH are supplied they
+  // must agree (the dashboard back-compat wrapper sends just one). We don't
+  // hard-fail on duplication here — createSession picks projects[] first.
+  if (spec.projects !== undefined && spec.projects !== null) {
+    if (!Array.isArray(spec.projects)) {
+      errors.push('projects must be an array of strings when present');
+    } else if (spec.projects.length > LIMITS.projectsMax) {
+      errors.push(`projects exceeds ${LIMITS.projectsMax} entries`);
+    } else {
+      const seen = new Set();
+      for (const p of spec.projects) {
+        if (typeof p !== 'string' || p.length === 0) {
+          errors.push('projects entries must be non-empty strings');
+          break;
+        }
+        if (p.length > LIMITS.projectMax) {
+          errors.push(`projects entry exceeds ${LIMITS.projectMax} chars`);
+          break;
+        }
+        if (seen.has(p)) {
+          errors.push(`projects contains duplicate entry: ${p}`);
+          break;
+        }
+        seen.add(p);
+      }
+    }
+  }
+
   return { ok: errors.length === 0, errors };
 }
 
@@ -318,6 +354,19 @@ function createSession(spec) {
     throw err;
   }
 
+  // W-mpq6xqzj000606d0 — normalize legacy `project` and new `projects` into a
+  // single canonical `projects: string[] | null` (null = central). When both
+  // are present, `projects` wins. Empty string in legacy `project` is treated
+  // as central (matches the dashboard input convention).
+  let projects = null;
+  if (Array.isArray(spec.projects) && spec.projects.length > 0) {
+    projects = spec.projects.slice();
+  } else if (typeof spec.project === 'string' && spec.project.length > 0) {
+    projects = [spec.project];
+  }
+  const primaryProject = projects && projects.length > 0 ? projects[0] : null;
+  const coServices = projects && projects.length > 1 ? projects.slice(1) : [];
+
   const id = 'qas-' + uid();
   const now = ts();
   const session = {
@@ -333,8 +382,25 @@ function createSession(spec) {
         logs: !!(spec.capture && spec.capture.logs),
       },
       runner: spec.runner || null,
-      project: spec.project || null,
+      // Canonical multi-project field. `project` (legacy single-string) is
+      // mirrored for back-compat readers (qa.js card render, /api/status,
+      // older lifecycle hooks); new code keys off `projects`.
+      projects,
+      project: primaryProject,
     },
+    // W-mpq6xqzj000606d0 — denormalized fast-path fields used by the dispatch
+    // chain (queueSetup / handleSetupComplete) without re-deriving from
+    // spec.projects on every call.
+    primaryProject,
+    coServices,
+    // Per-project SETUP completion map. Only populated when projects.length >
+    // 1 (multi-project fan-out). Single-project sessions skip this map and
+    // use session.state directly.
+    setupStatus: null,
+    // primaryWiPath is stamped at queueSetup time so handleSetupComplete can
+    // queue DRAFT on the right work-items file without re-resolving the
+    // project through dashboard config.
+    primaryWiPath: null,
     // Per-phase WI links — back-filled by setSessionWorkItem when the
     // dashboard endpoint or lifecycle hook queues the next phase.
     workItems: { setup: null, draft: null, execute: null },
@@ -492,7 +558,10 @@ function transitionSession(id, toState, patch = {}) {
     if (patch && typeof patch === 'object' && !Array.isArray(patch)) {
       // Whitelist mutable fields to keep transitionSession from rewriting
       // immutable spec/createdAt fields by mistake.
-      for (const field of ['summary', 'error', 'failureClass', 'testFile', 'qaRunId', 'managedSpawnHealth']) {
+      // W-mpq6xqzj000606d0 — added `setupStatus` and `primaryWiPath` so the
+      // multi-project fan-in handler can stamp per-project completion state
+      // through the same locked path used by every other mutation.
+      for (const field of ['summary', 'error', 'failureClass', 'testFile', 'qaRunId', 'managedSpawnHealth', 'setupStatus', 'primaryWiPath']) {
         if (Object.prototype.hasOwnProperty.call(patch, field)) {
           session[field] = patch[field];
         }
@@ -524,8 +593,24 @@ function markKilled(id, patch) { return transitionSession(id, QA_SESSION_STATE.K
 // pulling dispatch into the unit test path. They're also called by the
 // lifecycle chain helpers below to queue the next phase.
 
-function _baseWorkItem(session, phase, { title, description, project }) {
+function _baseWorkItem(session, phase, { title, description, project, primary, coServices, primaryProject }) {
   const wiId = 'W-' + uid();
+  // W-mpq6xqzj000606d0 — multi-project fan-out: SETUP work items carry
+  // `primary: boolean` + `coServices: string[]` + `primaryProject: string` on
+  // meta.qaSession. Single-project sessions default to primary=true /
+  // coServices=[] so existing single-target prompts render unchanged.
+  // DRAFT/EXECUTE always omit these (primary-only) — pass `primary:
+  // undefined` to keep meta clean.
+  const qaMeta = {
+    target: session.spec.target,
+    flowsRaw: session.spec.flowsRaw,
+    mode: session.spec.mode,
+    capture: session.spec.capture,
+    runner: session.spec.runner,
+  };
+  if (primary !== undefined) qaMeta.primary = !!primary;
+  if (Array.isArray(coServices)) qaMeta.coServices = coServices.slice();
+  if (primaryProject) qaMeta.primaryProject = String(primaryProject);
   const wi = {
     id: wiId,
     title,
@@ -543,13 +628,7 @@ function _baseWorkItem(session, phase, { title, description, project }) {
     meta: {
       sessionId: session.id,
       sessionPhase: phase,
-      qaSession: {
-        target: session.spec.target,
-        flowsRaw: session.spec.flowsRaw,
-        mode: session.spec.mode,
-        capture: session.spec.capture,
-        runner: session.spec.runner,
-      },
+      qaSession: qaMeta,
       playbook: 'qa-session-' + phase,
     },
   };
@@ -562,21 +641,34 @@ function _baseWorkItem(session, phase, { title, description, project }) {
  * Build the SETUP work item. The agent resolves the target, sets up a
  * worktree, and writes a managed-spawn.json sidecar. Engine then spawns the
  * service and the healthcheck gate drives the next transition.
+ *
+ * W-mpq6xqzj000606d0 — When the session has multiple projects (fan-out),
+ * `primary` distinguishes the orchestrator WI (true; carries the full
+ * coServices list) from each co-service WI (false; coServices === []). The
+ * session's DRAFT phase keys off the primary's wiPath.
  */
-function buildSetupWorkItem(session, { project } = {}) {
+function buildSetupWorkItem(session, { project, primary, coServices, primaryProject } = {}) {
+  const isPrimary = primary === undefined ? true : !!primary;
+  const co = Array.isArray(coServices) ? coServices.slice() : [];
   return _baseWorkItem(session, SESSION_PHASE.SETUP, {
-    title: `QA Session SETUP: ${_summarizeTarget(session.spec.target)}`,
+    title: `QA Session SETUP: ${_summarizeTarget(session.spec.target)}${isPrimary && co.length ? ` (primary +${co.length} co-services)` : (!isPrimary ? ' (co-service)' : '')}`,
     description: [
       `QA Session ${session.id} — SETUP phase.`,
       '',
       `Target: ${JSON.stringify(session.spec.target)}`,
       `Flows: ${session.spec.flowsRaw}`,
+      isPrimary
+        ? (co.length ? `Role: PRIMARY (co-services: ${co.join(', ')})` : 'Role: PRIMARY (single-project session)')
+        : 'Role: CO-SERVICE (dev-up only; primary owns the test orchestration)',
       '',
       'Resolve the target to a worktree, inspect the codebase for the dev-up command,',
-      `and write \`agents/<your-id>/managed-spawn.json\` with name=\`${session.managedSpawnName}\`.`,
+      `and write \`agents/<your-id>/managed-spawn.json\` with name=\`${session.managedSpawnName}${isPrimary ? '' : '-' + project}\`.`,
       'See `playbooks/qa-session-setup.md` for the full contract.',
     ].join('\n'),
     project,
+    primary: isPrimary,
+    coServices: co,
+    primaryProject: primaryProject || (isPrimary ? project : undefined),
   });
 }
 
@@ -661,6 +753,23 @@ function _summarizeTarget(target) {
   }
 }
 
+/**
+ * W-mpq6xqzj000606d0 — Back-compat shim: return the canonical projects[]
+ * array for a session, regardless of whether the record was written under
+ * the legacy single-`project` schema or the new `projects[]` schema. Returns
+ * `[]` for "central" sessions (no project) so callers can simply check
+ * `length > 1` for multi-project mode.
+ */
+function _resolveSessionProjects(session) {
+  if (!session || typeof session !== 'object') return [];
+  const fromArr = session.spec && Array.isArray(session.spec.projects) ? session.spec.projects : null;
+  if (fromArr && fromArr.length > 0) return fromArr.slice();
+  const fromStr = session.spec && typeof session.spec.project === 'string' && session.spec.project.length > 0
+    ? session.spec.project
+    : null;
+  return fromStr ? [fromStr] : [];
+}
+
 // ── Cross-WI dispatch chain helpers ─────────────────────────────────────────
 //
 // These are the integration entry points the lifecycle hook + dashboard
@@ -693,26 +802,113 @@ function _queueWorkItem(wi, wiPath) {
 
 /**
  * Called by the POST /api/qa/session handler immediately after createSession.
- * Validates pending → spawning, queues the SETUP WI, returns the queued WI id.
+ * Validates pending → spawning, queues the SETUP WI(s), returns the queued
+ * primary WI id (back-compat).
+ *
+ * W-mpq6xqzj000606d0 — multi-project fan-out. Two calling shapes are
+ * accepted:
+ *   1. Legacy single-target: `{ wiPath, project }` (project may be null for
+ *      central). Builds and queues one SETUP WI exactly like before.
+ *   2. Multi-target: `{ resolvedTargets: [{ project, wiPath }, ...] }`. The
+ *      FIRST entry is treated as the primary (drives DRAFT/EXECUTE later);
+ *      the rest are co-services. One SETUP WI is queued per entry, and
+ *      `session.setupStatus` is initialized with a `pending` entry per
+ *      project so handleSetupComplete can fan-in.
  *
  * @param {string} sessionId
  * @param {object} opts
- * @param {string} opts.wiPath - resolved work-items path (central or per-project)
- * @param {string} [opts.project] - project name (set on the WI)
+ * @param {string} [opts.wiPath]            - legacy single-target wiPath
+ * @param {string} [opts.project]           - legacy single-target project name
+ * @param {Array<{project:?string, wiPath:string}>} [opts.resolvedTargets]
+ * @returns {string} the queued PRIMARY SETUP WI id
  */
-function queueSetup(sessionId, { wiPath, project } = {}) {
-  if (!_isNonEmptyString(wiPath)) throw new Error('qa-sessions: queueSetup requires wiPath');
+function queueSetup(sessionId, opts = {}) {
+  let targets = Array.isArray(opts.resolvedTargets) ? opts.resolvedTargets.slice() : null;
+  if (!targets || targets.length === 0) {
+    if (!_isNonEmptyString(opts.wiPath)) {
+      throw new Error('qa-sessions: queueSetup requires wiPath or resolvedTargets');
+    }
+    targets = [{ project: opts.project || null, wiPath: opts.wiPath }];
+  }
+  // Defensive: each target needs a wiPath. project may be null for central.
+  for (const t of targets) {
+    if (!t || !_isNonEmptyString(t.wiPath)) {
+      throw new Error('qa-sessions: queueSetup target missing wiPath');
+    }
+  }
+  if (targets.length > LIMITS.projectsMax) {
+    throw new Error(`qa-sessions: queueSetup target count exceeds ${LIMITS.projectsMax}`);
+  }
+
   const session = getSession(sessionId);
   if (!session) throw new Error('qa-sessions: session not found: ' + sessionId);
+
+  const primaryTarget = targets[0];
+  const coServiceProjects = targets.slice(1).map(t => t.project || null).filter(Boolean);
+  const isMulti = targets.length > 1;
+
+  // Initialize setupStatus + primaryWiPath BEFORE transitioning so the
+  // fan-in handler sees the full project list even on a racing completion.
+  // Single-project sessions skip the map to keep blast radius minimal.
+  const setupStatusPatch = isMulti
+    ? targets.reduce((acc, t) => {
+        const key = t.project || '__central__';
+        acc[key] = { state: 'pending', wiId: null, error: null, completedAt: null };
+        return acc;
+      }, {})
+    : null;
+
   // transitionSession enforces pending → spawning. If the session is already
   // past pending (createSession + queueSetup called twice), the throw bubbles
   // up to the dashboard handler and surfaces as a 409 — better than silently
   // double-queueing.
-  markSpawning(sessionId);
-  const wi = buildSetupWorkItem(session, { project: project || session.spec.project || null });
-  _queueWorkItem(wi, wiPath);
-  setSessionWorkItem(sessionId, SESSION_PHASE.SETUP, wi.id);
-  return wi.id;
+  markSpawning(sessionId, {
+    setupStatus: setupStatusPatch,
+    primaryWiPath: primaryTarget.wiPath,
+  });
+
+  // Build + queue one WI per target. Primary is index 0; coServices is the
+  // full list of OTHER project names. Each SETUP WI gets its own meta so
+  // the agent prompt clearly states its role.
+  let primaryWiId = null;
+  const builtWiIds = {};
+  for (let i = 0; i < targets.length; i++) {
+    const t = targets[i];
+    const isPrimary = i === 0;
+    const wi = buildSetupWorkItem(session, {
+      project: t.project || null,
+      primary: isPrimary,
+      coServices: isPrimary ? coServiceProjects : [],
+      primaryProject: primaryTarget.project || null,
+    });
+    _queueWorkItem(wi, t.wiPath);
+    builtWiIds[t.project || '__central__'] = wi.id;
+    if (isPrimary) primaryWiId = wi.id;
+  }
+  // Stamp the primary WI id into workItems.setup (back-compat: dashboard
+  // cards index off this single field).
+  setSessionWorkItem(sessionId, SESSION_PHASE.SETUP, primaryWiId);
+
+  // Back-fill each per-project setupStatus entry with its wiId for multi-
+  // project sessions.
+  if (isMulti) {
+    const updated = getSession(sessionId);
+    const nextStatus = { ...(updated.setupStatus || setupStatusPatch) };
+    for (const [key, wiId] of Object.entries(builtWiIds)) {
+      if (nextStatus[key]) nextStatus[key] = { ...nextStatus[key], wiId };
+    }
+    mutateJsonFileLocked(qaSessionsPath(), (sessions) => {
+      if (!Array.isArray(sessions)) sessions = [];
+      const s = sessions.find(x => x && x.id === sessionId);
+      if (s) {
+        s.setupStatus = nextStatus;
+        s.updatedAt = ts();
+      }
+      return sessions;
+    }, { defaultValue: [] });
+  }
+
+  return primaryWiId;
 }
 
 /**
@@ -721,36 +917,113 @@ function queueSetup(sessionId, { wiPath, project } = {}) {
  * marking the dispatch successful), so we advance to drafting and queue the
  * DRAFT WI. On failure we record the failureClass and mark the session failed.
  *
+ * W-mpq6xqzj000606d0 — fan-in for multi-project sessions. When
+ * `session.setupStatus` is populated (length > 1 targets queued), each
+ * completion updates one entry. The session only advances to drafting once
+ * ALL entries are `success`. Any failure marks the entire session failed
+ * with a per-project error map encoded into session.error.
+ *
  * @param {string} sessionId
  * @param {object} opts
  * @param {boolean} opts.success
- * @param {string}  [opts.wiPath] - required when success=true
- * @param {string}  [opts.project]
+ * @param {string}  [opts.wiPath]      - required when success=true (single-project) OR for the PRIMARY target on multi-project DRAFT queueing
+ * @param {string}  [opts.project]     - which project the completing WI was for (multi-project routing key)
  * @param {string}  [opts.failureClass]
  * @param {string}  [opts.reason]
- * @returns {string|null} the queued DRAFT WI id on success, null on failure
+ * @returns {string|null} the queued DRAFT WI id on success (single OR last-to-complete in multi), null otherwise
  */
 function handleSetupComplete(sessionId, opts = {}) {
   const session = getSession(sessionId);
   if (!session) throw new Error('qa-sessions: session not found: ' + sessionId);
-  if (opts.success) {
-    if (!_isNonEmptyString(opts.wiPath)) {
-      throw new Error('qa-sessions: handleSetupComplete success requires wiPath');
+
+  const isMulti = session.setupStatus && typeof session.setupStatus === 'object'
+    && Object.keys(session.setupStatus).length > 1;
+
+  // ── Single-project fast path: original behavior, untouched semantics ──
+  if (!isMulti) {
+    if (opts.success) {
+      if (!_isNonEmptyString(opts.wiPath)) {
+        throw new Error('qa-sessions: handleSetupComplete success requires wiPath');
+      }
+      markDrafting(sessionId, { managedSpawnHealth: 'healthy' });
+      const updated = getSession(sessionId);
+      const wi = buildDraftWorkItem(updated, { project: opts.project || updated.spec.project || null });
+      _queueWorkItem(wi, opts.wiPath);
+      setSessionWorkItem(sessionId, SESSION_PHASE.DRAFT, wi.id);
+      return wi.id;
     }
-    markDrafting(sessionId, { managedSpawnHealth: 'healthy' });
-    // Re-read to pick up the state change for the DRAFT WI builder.
-    const updated = getSession(sessionId);
-    const wi = buildDraftWorkItem(updated, { project: opts.project || updated.spec.project || null });
-    _queueWorkItem(wi, opts.wiPath);
-    setSessionWorkItem(sessionId, SESSION_PHASE.DRAFT, wi.id);
-    return wi.id;
+    markFailed(sessionId, {
+      failureClass: opts.failureClass || 'qa-session-setup-failed',
+      error: opts.reason || null,
+      summary: opts.reason || 'SETUP phase failed',
+    });
+    return null;
   }
-  markFailed(sessionId, {
-    failureClass: opts.failureClass || 'qa-session-setup-failed',
-    error: opts.reason || null,
-    summary: opts.reason || 'SETUP phase failed',
-  });
-  return null;
+
+  // ── Multi-project fan-in path ─────────────────────────────────────────
+  const project = opts.project || null;
+  const key = project || '__central__';
+
+  // Update this project's entry under lock. Capture the merged map so we
+  // can decide on a transition without re-reading.
+  let mergedStatus = null;
+  mutateJsonFileLocked(qaSessionsPath(), (sessions) => {
+    if (!Array.isArray(sessions)) sessions = [];
+    const s = sessions.find(x => x && x.id === sessionId);
+    if (!s || !s.setupStatus) return sessions;
+    if (!s.setupStatus[key]) {
+      // Unknown project — log via error rather than crashing the lifecycle
+      // hook. Treat as if the WI for that project failed so the session
+      // doesn't stall waiting for an entry that will never arrive.
+      s.setupStatus[key] = { state: 'pending', wiId: null, error: null, completedAt: null };
+    }
+    s.setupStatus[key] = {
+      ...s.setupStatus[key],
+      state: opts.success ? 'success' : 'failed',
+      error: opts.success ? null : (opts.reason || opts.failureClass || 'unknown'),
+      completedAt: ts(),
+    };
+    s.updatedAt = ts();
+    mergedStatus = JSON.parse(JSON.stringify(s.setupStatus));
+    return sessions;
+  }, { defaultValue: [] });
+
+  if (!mergedStatus) return null;
+
+  const entries = Object.entries(mergedStatus);
+  const stillPending = entries.some(([, v]) => v.state === 'pending');
+  const anyFailed = entries.some(([, v]) => v.state === 'failed');
+
+  if (stillPending) {
+    // Wait for sibling WIs to report in. No state transition yet.
+    return null;
+  }
+
+  if (anyFailed) {
+    const errors = entries
+      .filter(([, v]) => v.state === 'failed')
+      .map(([k, v]) => ({ project: k === '__central__' ? null : k, reason: v.error }));
+    markFailed(sessionId, {
+      failureClass: 'qa-session-setup-failed',
+      error: JSON.stringify(errors),
+      summary: `SETUP phase failed for ${errors.length}/${entries.length} project(s)`,
+    });
+    return null;
+  }
+
+  // All success → advance to drafting and queue DRAFT on the PRIMARY's
+  // wiPath (captured at queueSetup time).
+  const fresh = getSession(sessionId);
+  const draftWiPath = fresh && fresh.primaryWiPath;
+  if (!_isNonEmptyString(draftWiPath)) {
+    throw new Error('qa-sessions: handleSetupComplete multi-project missing session.primaryWiPath');
+  }
+  markDrafting(sessionId, { managedSpawnHealth: 'healthy' });
+  const updated = getSession(sessionId);
+  const wi = buildDraftWorkItem(updated, { project: updated.primaryProject || updated.spec.project || null });
+  _queueWorkItem(wi, draftWiPath);
+  setSessionWorkItem(sessionId, SESSION_PHASE.DRAFT, wi.id);
+  return wi.id;
 }
 
 /**
@@ -1005,4 +1278,5 @@ module.exports = {
   summarizeSessionsForStatus,
   // Internals (exposed for tests)
   _isSafeSessionId,
+  _resolveSessionProjects,
 };

package/engine.js

@@ -5200,6 +5200,23 @@ function renderProjectWorkItemPromptForAgent(item, workType, agentId, config, pr
           .join(',')
       : '',
     session_mode: (item.meta && item.meta.qaSession && item.meta.qaSession.mode) || '',
+    // W-mpq6xqzj000606d0 — Multi-project QA Session fan-out vars. SETUP fan-out
+    // queues one WI per project with meta.qaSession.primary boolean +
+    // coServices array (set by qa-sessions._baseWorkItem). Surface them here as
+    // template vars so the SETUP playbook can branch on {{role}} and so the
+    // primary's prompt sees the canonical primary_project + co_services_json
+    // it needs to poll each co-service's managed-spawn health before
+    // finalizing. Single-project sessions never set qaSession.primary, so all
+    // three vars resolve to empty strings (filtered via PLAYBOOK_OPTIONAL_VARS).
+    role: (item.meta && item.meta.qaSession && typeof item.meta.qaSession.primary === 'boolean'
+      ? (item.meta.qaSession.primary ? 'primary' : 'co-service')
+      : ''),
+    primary_project: (item.meta && item.meta.qaSession && item.meta.qaSession.primaryProject)
+      ? String(item.meta.qaSession.primaryProject)
+      : '',
+    co_services_json: (item.meta && item.meta.qaSession && Array.isArray(item.meta.qaSession.coServices)
+      ? JSON.stringify(item.meta.qaSession.coServices)
+      : ''),
     // P-f9a2e1b4 — Runner adapter briefs. The DRAFT playbook consumes
     // {{runner_brief}} (runner.generateBrief() output); EXECUTE consumes
     // {{runner_execute_brief}} (runner.executeBrief() output) plus

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.2082",
+  "version": "0.1.2083",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"

package/playbooks/qa-session-setup.md

@@ -24,9 +24,41 @@ A user asked Minions to QA the following target and flows:
 - **Runner hint (optional explicit runner):** `{{runner_hint}}`
 - **Capture:** `{{capture}}`
 - **Mode:** `{{session_mode}}`
+- **Role (multi-project fan-out):** `{{role}}` *(empty = single-project session, behave as if `primary`)*
+- **Primary project (multi-project fan-out):** `{{primary_project}}`
+- **Co-services JSON (multi-project fan-out):** `{{co_services_json}}`
 
 {{additional_context}}
 
+## Multi-project fan-out (W-mpq6xqzj000606d0)
+
+When the user picks **multiple projects** from the QA Session form, the engine
+queues one SETUP work item **per project** in parallel. Each WI sees the same
+target/flows/managed_spawn_name, but with a different `{{role}}` value:
+
+- **`{{role}} == "primary"`** *(or empty for single-project sessions)*: you are
+  the orchestrator. You own the canonical `{{managed_spawn_name}}` (no suffix)
+  and your work item's wiPath is the one that gets the DRAFT phase queued
+  on it once **all** SETUP WIs succeed. If `{{co_services_json}}` is non-empty
+  (e.g. `["api","worker"]`), the DRAFT and EXECUTE agents will poll each of
+  those co-services' managed-spawn health (name = `{{managed_spawn_name}}-<project>`)
+  via `/api/managed-processes/by-name` before treating the system as ready.
+- **`{{role}} == "co-service"`**: you are a supporting service (DB, API,
+  worker, etc.). Your managed-spawn `name` MUST be `{{managed_spawn_name}}-<your-project>`
+  (the engine appends `-<project>` automatically when computing the spec name).
+  You do **not** write tests, do not queue DRAFT — just stand up your service,
+  declare its healthcheck, and exit clean. The primary's DRAFT/EXECUTE will
+  reach you over the network (use a deterministic port; document it in
+  `managed-spawn.json` `ports[]`).
+
+Any co-service SETUP that fails (sidecar invalid, healthcheck miss, build
+error) **fails the entire session** with `failure_class: 'qa-session-setup-failed'`
+and a per-project error JSON in `session.error`. The primary's WI does NOT
+get the DRAFT phase queued in that case.
+
+For single-project sessions (`{{co_services_json}}` empty or `[]`), ignore
+this section — the original single-WI flow applies unchanged.
+
 ## What "qa-session-setup" means
 
 A `qa-session-setup` task is the **first** of three chained work items the

package/prompts/cc-system.md

@@ -186,25 +186,33 @@ When the user describes a UI/E2E flow they want validated against a *live, runni
 - `mode` — `"confirm"` (default — pauses at `awaiting-approval` so the user can review the drafted test before EXECUTE fires) or `"auto"` (chains straight from DRAFT to EXECUTE). Pick `"confirm"` unless the user said "just run it" / "no review needed" / "auto".
 - `capture` — optional `{ video?: bool, screenshots?: bool, logs?: bool }`. Default is everything false. Set what the user asked for.
 - `runner` — optional kebab-case name to force a specific runner (`"playwright"`, `"maestro"`, or a plugin). Omit to let the engine auto-detect (Maestro wins when the project has `.maestro/`; Playwright is the safe default).
-- `project` — REQUIRED when multiple projects are configured (mirrors `/api/work-items`). Omit for the central path.
+- `project` — REQUIRED (legacy single-project form) when multiple projects are configured (mirrors `/api/work-items`). Omit for the central path. **Multi-project form (W-mpq6xqzj000606d0):** pass `projects: string[]` (≤5) instead of `project` to QA across multiple services in parallel. The first entry is the **primary** (owns DRAFT/EXECUTE and the canonical managed-spawn name); the rest are **co-services** (each gets a SETUP work item that stands up its dev-up command, named `qa-session-<id>-<project>`). All co-services must pass first-healthcheck before DRAFT fires; any failure fails the whole session. Use this when the user says "QA the api+worker against PR #X" or "smoke test the full stack on `develop`".
 
-**Worked example — PR target, confirm mode (default):**
+**Worked example — PR target, confirm mode (default), single project:**
 ```
 curl -s -X POST http://localhost:{{dashboard_port}}/api/qa/session \
   -H 'Content-Type: application/json' \
   -H 'X-CC-Turn-Id: {{cc_turn_id}}' \
-  -d '{"target":{"kind":"pr","prId":"github:yemi33/MyApp#1234"},"flowsRaw":"Open the homepage, click Login, enter test@example.com / hunter2, and verify the dashboard renders with the user'\''s name in the header.","mode":"confirm","capture":{"screenshots":true,"logs":true},"project":"MyApp"}'
+  -d '{"target":{"kind":"pr","prId":"github:yemi33/MyApp#1234"},"flowsRaw":"Open the homepage, click Login, enter test@example.com / hunter2, and verify the dashboard renders with the user'\''s name in the header.","mode":"confirm","capture":{"screenshots":true,"logs":true},"projects":["MyApp"]}'
 ```
 
-**Worked example — current worktree, auto mode, video capture:**
+**Worked example — current worktree, auto mode, video capture, single project:**
 ```
 curl -s -X POST http://localhost:{{dashboard_port}}/api/qa/session \
   -H 'Content-Type: application/json' \
   -H 'X-CC-Turn-Id: {{cc_turn_id}}' \
-  -d '{"target":{"kind":"current"},"flowsRaw":"Add three items to the cart, go to checkout, complete the payment form with the Stripe test card, and verify the success page.","mode":"auto","capture":{"video":true,"screenshots":true},"project":"MyApp"}'
+  -d '{"target":{"kind":"current"},"flowsRaw":"Add three items to the cart, go to checkout, complete the payment form with the Stripe test card, and verify the success page.","mode":"auto","capture":{"video":true,"screenshots":true},"projects":["MyApp"]}'
 ```
 
-**Response:** `{ sessionId, state: "spawning", setupWorkItemId, managedSpawnName }`. Tell the user the session id so they can watch it at `/qa` and steer it via the `/approve` (run the drafted test), `/edit` (re-draft with feedback), `/dismiss` (accept the draft without running), `/cancel` (give up), or `/kill` (cancel + tear down the managed-spawn) endpoints listed in `GET /api/routes`.
+**Worked example — multi-project fan-out (primary + 2 co-services):**
+```
+curl -s -X POST http://localhost:{{dashboard_port}}/api/qa/session \
+  -H 'Content-Type: application/json' \
+  -H 'X-CC-Turn-Id: {{cc_turn_id}}' \
+  -d '{"target":{"kind":"branch","branch":"develop"},"flowsRaw":"Place an order on the storefront and verify it shows up in the admin panel within 5 seconds.","mode":"confirm","capture":{"video":true,"logs":true},"projects":["storefront","api","worker"]}'
+```
+
+**Response:** `{ sessionId, state: "spawning", setupWorkItemId, managedSpawnName, projects? }`. `setupWorkItemId` is the **primary's** WI id; `projects` is the canonical array (single-project sessions omit it). Tell the user the session id so they can watch it at `/qa` and steer it via the `/approve` (run the drafted test), `/edit` (re-draft with feedback), `/dismiss` (accept the draft without running), `/cancel` (give up), or `/kill` (cancel + tear down the managed-spawn) endpoints listed in `GET /api/routes`.
 
 **Do not also dispatch a `/api/work-items` `implement` or `test` for the same QA request.** The QA Session pipeline owns its own SETUP → DRAFT → EXECUTE work items end-to-end; firing a parallel work-item is the same double-dispatch class that the "Never both" rule above forbids. If the user asks for both a QA pass AND a code change, do them as two separate, sequential calls — QA Session for the behavioural check, work-item for the fix.