@yemi33/minions 0.1.2447 → 0.1.2449

package/dashboard/js/settings.js

@@ -191,6 +191,29 @@ async function openSettings() {
           settingsField('CC Turn Timeout', 'set-ccTurnTimeoutMs', (e.ccTurnTimeoutMs || 300000) / 1000, 's', 'Per-turn no-progress watchdog for CC + doc-chat. Resets on every liveness signal (token chunk, tool call, tool update) so an actively-streaming turn — long shell command, deep search, sub-agent loop — survives indefinitely up to the outer 1h hard ceiling. Only true silence past this window fires event: error with code: cc-turn-timeout, stops the spinner, and offers Retry. Clamped to 10–3600 s.', '0.001') +
         '</div>' +
       '</details>' +
+      // Cloud dispatch (Agency / Copilot cloud) — the fleet-wide default
+      // provider for work items that declare `meta.executionSurface: "cloud"`.
+      // Collapsed by default: this is opt-in, and a fleet with no cloud
+      // provider configured behaves exactly as it always has.
+      '<details id="set-cloud-dispatch-details"' + (e.cloudProvider ? ' open' : '') + ' style="margin-top:8px;border-top:1px solid var(--border);padding-top:8px">' +
+        '<summary style="cursor:pointer;font-size:var(--text-base);color:var(--text);user-select:none">Cloud dispatch ' +
+          '<span style="font-size:var(--text-sm);color:var(--muted)">(hand a work item to a remote coding agent)</span>' +
+        '</summary>' +
+        '<div style="display:grid;grid-template-columns:1fr;gap:8px;margin-top:8px">' +
+          '<div data-search="cloud provider agency remote coding agent dispatch">' +
+            '<label style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:2px">Default Cloud Provider</label>' +
+            // Populated from /api/cloud-providers on open, and DISABLED with an
+            // explanatory hint when the registry is empty. The server validates
+            // against the same registry regardless — this is an affordance, not
+            // the gate — but a free-text input whose every non-empty value the
+            // server rejects is a control that cannot do what it advertises.
+            '<select id="set-cloudProvider" style="width:100%;padding:4px 6px;background:var(--surface);border:1px solid var(--border);border-radius:4px;color:var(--text);font-size:var(--text-md)">' +
+              '<option value="">Loading…</option>' +
+            '</select>' +
+            '<div id="set-cloudProvider-hint" style="font-size:var(--text-sm);color:var(--muted);margin-top:1px">Fleet-wide default for work items declaring <code>meta.executionSurface: "cloud"</code> — Minions investigates locally, renders the scoped dispatch instructions, and hands them to a REMOTE coding agent that authors its own PR. Overridden by <code>project.cloudProvider</code>, then <code>meta.cloudProvider</code>. Only PR-producing types (implement, fix, test, docs) may declare the cloud surface.</div>' +
+          '</div>' +
+        '</div>' +
+      '</details>' +
     '</div>' +
     '<h4>Agents</h4>' +
     '<div style="font-size:var(--text-sm);color:var(--muted);margin-bottom:6px">CLI / Model placeholders show the fleet default each agent will inherit. Pick a value to pin per-agent; clear to re-inherit. Per-agent monthly budget overrides the fleet ceiling.</div>' +
@@ -199,14 +222,45 @@ async function openSettings() {
       agentRows +
     '</table>';
 
-  const paneAutoFix =
-    '<h3>Auto-fix &amp; Review Loop</h3>' +
-    '<div class="settings-pane-sub">Everything in this pane is <strong>automatic</strong>. Each tile below enables or disables one automatic PR-triggered dispatch trigger (build failure, merge conflict, review verdict, human comment) — the section framing carries the "auto", so the tiles just name the cause. All require the matching provider polling (Polling tab). The <em>Pause ALL</em> kill-switch below inerts every trigger at once. Non-dispatch knobs (auto-merge, auto-vote, plan/decompose defaults) moved to the new <strong>PR Lifecycle</strong> and <strong>Workflow Defaults</strong> panes.</div>' +
+  // W-ms4o7y1g007jdb2d — merged "Plan & PR Workflow" pane. Collapses the former
+  // sibling panes 'Auto-fix & Review Loop', 'PR Lifecycle', and 'Workflow
+  // Defaults' into ONE tab with three in-order subsections — (1) Plan,
+  // (2) PR creation, (3) Monitor. Every set-* id is preserved verbatim so the
+  // save/collect handler and the cross-tab settings search are untouched.
+  const panePlanPrWorkflow =
+    '<h3>Plan &amp; PR Workflow</h3>' +
+    '<div class="settings-pane-sub">Everything here is <strong>automatic</strong> — each tile toggles one behavior in the plan→PR→monitor flow. Read top to bottom: what happens when a <strong>plan</strong> lands, what Minions does when it <strong>opens a PR</strong>, and how it <strong>monitors</strong> the PR watch→react loop afterward. Click a tile to enable/disable; enabled tiles are highlighted.</div>' +
+
+    // ── (1) PLAN ──
+    '<div class="settings-section-head"><span class="settings-section-num">1</span><span class="settings-section-title">Plan</span></div>' +
+    '<div class="settings-pane-sub">What happens automatically as a plan moves from draft → work items → archive.</div>' +
+    '<div class="settings-tile-grid" style="margin-bottom:20px">' +
+      settingsTile('Auto-approve Plans', 'set-autoApprovePlans', !!e.autoApprovePlans, 'PRDs are approved automatically without human review.', '✅', 'auto-approve plans') +
+      settingsTile('Auto-decompose', 'set-autoDecompose', e.autoDecompose !== false, 'Large implement items are auto-split into sub-tasks.', '🧩', 'auto-decompose large items') +
+      settingsTile('Auto-archive Plans', 'set-autoArchive', !!e.autoArchive, 'Automatically archive plans after verify completes (off = manual archive via dashboard).', '📦', 'auto-archive plans') +
+      settingsTile('Auto-QA verified PRDs', 'set-autoQaCompletedPrds', !!e.autoQaCompletedPrds, 'Opt-in: once a PRD\'s verify work item(s) complete SUCCESSFULLY and the canonical prd/guides/verify-*.md exists, automatically start a PRD-driven QA Session (mode "auto", so SETUP → DRAFT → EXECUTE runs without approval) through the same path as POST /api/qa/from-prd. Cross-repo plans wait for every per-project verify to succeed and launch ONE session. Failed/cancelled verification never launches QA. OFF (default) = today\'s behavior; the manual "QA this PRD" action is unaffected either way.', '🧪', 'auto qa verified completed prds qa session from prd') +
+    '</div>' +
+
+    // ── (2) PR CREATION ──
+    '<div class="settings-section-head"><span class="settings-section-num">2</span><span class="settings-section-title">PR Create</span></div>' +
+    '<div class="settings-pane-sub">What Minions does when it opens a PR. The Draft ⇄ Publish switch sets the fleet-wide default.</div>' +
+    '<div class="settings-stack" style="margin-bottom:12px">' +
+      settingsDraftPublishToggle('set-createPrsAsDraft', !!e.createPrsAsDraft, 'Create PRs as', 'Sets the fleet-wide default for how Minions-created PRs open. Draft = GitHub `gh pr create --draft`; ADO `az repos pr create --draft true`. Publish (default) opens PRs ready-for-review as today. Aggregate/E2E verify PRs already open as draft regardless of this flag.') +
+    '</div>' +
+    '<div class="settings-tile-grid" style="margin-bottom:20px">' +
+      settingsTile('Harnesses in PR body', 'set-includeHarnessSectionInPrBody', e.includeHarnessSectionInPrBody !== false, 'When ON (default), Minions-authored PRs get a fenced "Repo harnesses used" section listing the harness assets in effect for the dispatch\'s runtime + project — runtime, injected CLAUDE.md files, AGENTS.md discovery, MCP servers, and skills. Pure reporting from the same read-only source as `minions doctor --harness`; it does not change harness propagation. OFF suppresses the section.', '🧰', 'surface repo harnesses in pr body') +
+      settingsTile('Auto-apply review vote', 'set-autoApplyReviewVote', !!e.autoApplyReviewVote, 'When ON, Minions review verdicts (APPROVE / REQUEST_CHANGES) automatically flip the platform vote on ADO/GitHub. When OFF (default), verdicts are informational only and the human casts the final vote.', '🗳️', 'auto-apply review vote to pr') +
+      settingsTile('Auto-complete PRs', 'set-autoCompletePrs', !!e.autoCompletePrs, 'Auto-merge PRs when builds pass and review is approved (opt-in). Independent of the per-cause auto-fix gates above.', '🎯', 'auto-complete prs auto-merge') +
+    '</div>' +
+
+    // ── (3) MONITOR ──
+    '<div class="settings-section-head"><span class="settings-section-num">3</span><span class="settings-section-title">Monitor</span></div>' +
+    '<div class="settings-pane-sub">The PR watch→react loop. Everything here is <strong>automatic</strong>. The <em>Pause ALL</em> kill-switch inerts every per-cause trigger at once; all PR triggers also require the matching provider polling (Polling tab).</div>' +
     '<div class="settings-stack" style="margin-bottom:16px">' +
       settingsToggle('🛑 Pause ALL PR auto-fix dispatches', 'set-autoFixPaused', !!e.autoFixPaused, 'Halts every PR-triggered dispatch (review, re-review, build-failure fix, review-feedback fix, human-comment fix, merge-conflict fix) on the next tick. In-flight agents keep running. Reversible without restart. Per-cause tiles below are inert while this is set.') +
     '</div>' +
-    '<div class="settings-pane-sub" style="margin-bottom:8px">Per-cause triggers — each tile automatically dispatches an agent for one PR signal (it names the exact discoverFromPrs site it gates). Enabled tiles are highlighted; disabled tiles are dimmed. When <em>Pause ALL</em> is ON every tile is inert; when it is OFF, each tile decides independently whether its site fires.</div>' +
-    '<div class="settings-tile-grid" style="margin-bottom:16px">' +
+    '<div class="settings-pane-sub" style="margin-bottom:8px">Per-cause triggers — each tile automatically dispatches an agent for one PR signal. Enabled tiles are highlighted; disabled tiles are dimmed. When <em>Pause ALL</em> is ON every tile is inert.</div>' +
+    '<div class="settings-tile-grid" style="margin-bottom:20px">' +
       settingsTile('Fix Builds', 'set-autoFixBuilds', e.autoFixBuilds !== false, 'Shared dispatch gate: auto-fix agent when a PR build fails; also requires that PR provider polling is enabled', '🔨', 'auto-fix builds') +
       settingsTile('Conflicts', 'set-autoFixConflicts', e.autoFixConflicts !== false, 'Shared dispatch gate: auto-fix agent when a PR merge conflict is detected; also requires that PR provider polling is enabled', '🔀', 'auto-fix conflicts') +
       settingsTile('Review PRs', 'set-autoReviewPrs', e.autoReviewPrs !== false, 'Shared dispatch gate: review agent for newly opened agent PRs; also requires that PR provider polling is enabled', '🔍', 'auto-review prs') +
@@ -214,46 +268,15 @@ async function openSettings() {
       settingsTile('Review Feedback', 'set-autoFixReviewFeedback', e.autoFixReviewFeedback !== false, 'Shared dispatch gate: fix agent for minions changes-requested verdicts; also requires that PR provider polling is enabled', '✍️', 'auto-fix review feedback') +
       settingsTile('Address Human Comments', 'set-autoFixHumanComments', e.autoFixHumanComments !== false, 'Shared dispatch gate: fix agent for actionable human PR comments; also requires that PR provider polling is enabled', '💬', 'auto-fix human comments') +
     '</div>' +
-    '<div class="settings-stack" style="margin-bottom:16px">' +
-      settingsToggle('Eval Loop', 'set-evalLoop', e.evalLoop !== false, 'Gates the review→fix iteration loop only (first review, re-review, review-feedback fix). Does NOT gate build-failure, merge-conflict, or human-comment fixes. Use the emergency stop above to halt everything.') +
-      settingsToggle('Pre-dispatch Eval (cheap LLM gate)', 'set-enablePreDispatchEval', e.enablePreDispatchEval !== false, 'P-d2a9f6e5: cheap LLM gate that screens work items for clear/actionable/testable criteria BEFORE queueing the agent. Catches noop dispatches authored from impossible/ambiguous WIs. Fail-open on any validator error.') +
-      settingsToggle('Pre-dispatch Eval: skip PRD-sourced items', 'set-preDispatchEvalSkipPrdSourced', e.preDispatchEvalSkipPrdSourced !== false, 'W-mq9acoo800177bcb: short-circuit the validator for items materialized from an approved/active PRD — plan-to-prd already LLM-vets them. Reduces queue-time on an N-item approved PRD from ~N×25s to nearly instant. OFF = always re-validate even PRD-sourced items.') +
+    '<div class="settings-pane-sub" style="margin-bottom:8px">Review→fix loop gating — the cheap-LLM screens that decide whether the review/fix loop runs at all.</div>' +
+    '<div class="settings-tile-grid" style="margin-bottom:12px">' +
+      settingsTile('Eval Loop', 'set-evalLoop', e.evalLoop !== false, 'Gates the review→fix iteration loop only (first review, re-review, review-feedback fix). Does NOT gate build-failure, merge-conflict, or human-comment fixes. Use the emergency stop above to halt everything.', '🔁', 'eval loop review fix iteration') +
+      settingsTile('Pre-dispatch Eval', 'set-enablePreDispatchEval', e.enablePreDispatchEval !== false, 'P-d2a9f6e5: cheap LLM gate that screens work items for clear/actionable/testable criteria BEFORE queueing the agent. Catches noop dispatches authored from impossible/ambiguous WIs. Fail-open on any validator error.', '🧪', 'pre-dispatch eval cheap llm gate') +
+      settingsTile('Skip PRD-sourced', 'set-preDispatchEvalSkipPrdSourced', e.preDispatchEvalSkipPrdSourced !== false, 'W-mq9acoo800177bcb: short-circuit the validator for items materialized from an approved/active PRD — plan-to-prd already LLM-vets them. Reduces queue-time on an N-item approved PRD from ~N×25s to nearly instant. OFF = always re-validate even PRD-sourced items.', '⏭️', 'pre-dispatch eval skip prd sourced items') +
     '</div>' +
-    '<div class="settings-grid-2">' +
+    '<div class="settings-grid-2" style="margin-bottom:20px">' +
       settingsField('Eval Max Cost', 'set-evalMaxCost', e.evalMaxCost === null || e.evalMaxCost === undefined ? '' : e.evalMaxCost, '$', 'USD ceiling per work item across all eval iterations (blank = no limit)') +
       settingsField('Pre-dispatch Eval Concurrency', 'set-preDispatchEvalConcurrency', e.preDispatchEvalConcurrency || 6, '', 'W-mq9acoo800177bcb: max parallel pre-dispatch validator calls per discovery tick. Default 6. Clamped to [1, 20]. Raises throughput when multiple PRDs queue at once; lower if the LLM provider throttles. 1 = sequential (pre-fix behavior).') +
-    '</div>' +
-    '<div style="margin-top:12px;padding:6px 8px;border:1px solid var(--border);border-radius:4px;background:rgba(130,160,210,0.06);font-size:var(--text-sm);color:var(--muted)">' +
-      'Moved to <strong>PR Lifecycle</strong>: Auto-complete PRs, Auto-apply review vote. ' +
-      'Moved to <strong>Workflow Defaults</strong>: Auto-archive Plans, Auto-approve Plans, Auto-decompose, Auto-consolidate Memory.' +
-    '</div>';
-
-  // P-g7a2b4c5 — new "PR Lifecycle" pane. Owns the two PR-lifecycle knobs
-  // that historically lived under Auto-fix but do NOT gate any dispatch:
-  // autoApplyReviewVote (lifecycle vote-posting), autoCompletePrs (auto-merge).
-  const paneLifecycle =
-    '<h3>PR Lifecycle</h3>' +
-    '<div class="settings-pane-sub">Post-merge / post-review lifecycle knobs. These are not dispatch gates — they control what Minions does with a PR once review or build state lands.</div>' +
-    '<div class="settings-stack">' +
-      settingsToggle('Auto-apply review vote to PR', 'set-autoApplyReviewVote', !!e.autoApplyReviewVote, 'When ON, Minions review verdicts (APPROVE / REQUEST_CHANGES) automatically flip the platform vote on ADO/GitHub. When OFF (default), verdicts are informational only and the human casts the final vote.') +
-      settingsToggle('Create PRs as draft', 'set-createPrsAsDraft', !!e.createPrsAsDraft, 'When ON, Minions-created PRs open as DRAFT (GitHub `gh pr create --draft`; ADO `az repos pr create --draft true`). When OFF (default), PRs open ready-for-review as today. Aggregate/E2E verify PRs already open as draft regardless of this flag.') +
-      settingsToggle('Auto-complete PRs', 'set-autoCompletePrs', !!e.autoCompletePrs, 'Auto-merge PRs when builds pass and review is approved (opt-in). Independent of the per-cause auto-fix gates above.') +
-      settingsToggle('Surface repo harnesses in PR body', 'set-includeHarnessSectionInPrBody', e.includeHarnessSectionInPrBody !== false, 'When ON (default), Minions-authored PRs get a fenced "Repo harnesses used" section listing the harness assets in effect for the dispatch\'s runtime + project — runtime, injected CLAUDE.md files, AGENTS.md discovery, MCP servers, and skills. Pure reporting from the same read-only source as `minions doctor --harness`; it does not change harness propagation. OFF suppresses the section.') +
-    '</div>';
-
-  // P-g7a2b4c5 — new "Workflow Defaults" pane. Owns the four workflow-level
-  // automation defaults that historically lived under Auto-fix: plan-flow
-  // (approve / decompose / archive) and memory consolidation. None of these
-  // gate a PR-triggered dispatch.
-  const paneWorkflow =
-    '<h3>Workflow Defaults</h3>' +
-    '<div class="settings-pane-sub">Workflow-level automation defaults. Independent of PR dispatch and PR lifecycle — these control plan flow and memory upkeep.</div>' +
-    '<div class="settings-stack">' +
-      settingsToggle('Auto-approve Plans', 'set-autoApprovePlans', !!e.autoApprovePlans, 'PRDs are approved automatically without human review.') +
-      settingsToggle('Auto-decompose', 'set-autoDecompose', e.autoDecompose !== false, 'Large implement items are auto-split into sub-tasks.') +
-      settingsToggle('Auto-archive Plans', 'set-autoArchive', !!e.autoArchive, 'Automatically archive plans after verify completes (off = manual archive via dashboard).') +
-      settingsToggle('Auto-consolidate Memory', 'set-autoConsolidateMemory', !!e.autoConsolidateMemory, 'Enabled by default. Periodically spawn the KB sweep (dedup + compress + normalize knowledge/) from the engine tick on a 4h cadence. Inbox→notes consolidation runs independently every tick.') +
-      settingsToggle('Bootstrap Default Schedules', 'set-bootstrapDefaultSchedules', e.bootstrapDefaultSchedules !== false, 'Auto-create the per-project git-fetch-freshness schedule (every 12h) when a project is added, and ensure one shared daily harness-sweep schedule exists engine-wide. Idempotent and non-destructive — never overwrites a schedule you have customized. Turn off to manage these schedules entirely by hand.') +
     '</div>';
 
   // W-mpmwxkrw000872ec — Appearance pane. Hosts dashboard-wide visual
@@ -445,7 +468,7 @@ async function openSettings() {
           '<option value="draft"' + (createPrsAsDraftRaw === 'draft' ? ' selected' : '') + '>Draft — open PRs as draft</option>' +
           '<option value="ready"' + (createPrsAsDraftRaw === 'ready' ? ' selected' : '') + '>Not draft — open PRs ready</option>' +
         '</select>' +
-        '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:2px;line-height:1.4">Overrides the fleet-wide "Create PRs as draft" setting under PR Lifecycle for THIS project only. Draft = Minions-created PRs open as draft (GitHub `--draft`; ADO `--draft true`). Inherit follows the engine flag. Aggregate/E2E verify PRs and the shared-branch aggregate PR are unaffected.</div>' +
+        '<div style="font-size:var(--text-sm);color:var(--muted);margin-top:2px;line-height:1.4">Overrides the fleet-wide "Create PRs as draft" setting under Plan &amp; PR Workflow → PR creation for THIS project only. Draft = Minions-created PRs open as draft (GitHub `--draft`; ADO `--draft true`). Inherit follows the engine flag. Aggregate/E2E verify PRs and the shared-branch aggregate PR are unaffected.</div>' +
         '</div>';
     // W-mrchrfe100067d3a — per-project explicit allowlist of secondary repo
     // scopes this project's checkout is also allowed to track PRs for (e.g.
@@ -510,6 +533,10 @@ async function openSettings() {
       settingsToggle('ADO Polling', 'set-adoPollEnabled', e.adoPollEnabled !== false, 'Legacy bundle macro — when OFF, silences all three ADO axes (status, comments, reconcile) and ADO PR dispatch gates are inert when this is off. Per-axis flags below take priority when explicitly set. Keep ON unless you want a one-knob ADO kill.') +
       settingsToggle('GitHub Polling', 'set-ghPollEnabled', e.ghPollEnabled !== false, 'Legacy bundle macro — when OFF, silences all three GitHub axes (status, comments, reconcile) and GitHub PR dispatch gates are inert when this is off. Per-axis flags below take priority when explicitly set. Keep ON unless you want a one-knob GitHub kill.') +
     '</div>' +
+    '<div class="settings-pane-sub" style="margin-bottom:8px">Poll-side actions — these ride on the PR status poll (so they honor <em>Pause ALL polling</em> and the matching provider toggle above), but they write to the platform instead of dispatching a Minions agent. They are therefore <strong>not</strong> covered by the <em>Pause ALL PR auto-fix</em> switch on the Plan &amp; PR Workflow tab, which by design leaves polling and build-status acquisition running.</div>' +
+    '<div class="settings-stack" style="margin-bottom:12px">' +
+      settingsToggle('Queue Draft PR Builds (ADO)', 'set-adoQueueDraftPrBuilds', e.adoQueueDraftPrBuilds !== false, 'ADO-only: proactively queue the required branch-policy validation builds for DRAFT pull requests. Azure DevOps does NOT auto-run branch build policies while a PR is a draft, so a Minions-managed draft PR never gets a build status and the build-fix loop has nothing to act on. When ON (default), Minions discovers the required Build policies from the target branch and queues a fresh build per definition against refs/pull/<n>/merge (rate-limited to once per PR / 30 min). Queues builds only — it never dispatches an agent. Inert for GitHub PRs (GitHub already fires CI on drafts) and whenever ADO PR status polling is off or paused.', { blockHint: true }) +
+    '</div>' +
     '<details class="settings-collapsible" style="margin-bottom:12px"><summary>Granular per-poller controls (P-c4d8e1a3)</summary>' +
     '<div class="settings-pane-sub" style="margin-top:8px">Override individual ADO/GitHub poll axes + the pending-rebase processor. Explicit values here win; if unset, the legacy ADO/GitHub Polling macros above apply; otherwise the default is ON. <strong>Status</strong>, <strong>Comments</strong> and <strong>Reconcile</strong> all honor the <em>Pause All Polling</em> kill-switch above (reconcile included since W-ms5eljc60090f0d5 — it issues provider API calls); only <strong>Process Pending Rebases</strong> ignores it (by design — it makes no provider poll call).</div>' +
     '<div class="settings-stack" style="margin-top:8px">' +
@@ -533,6 +560,7 @@ async function openSettings() {
     '<div class="settings-grid-2">' +
       settingsField('PR Status Poll Frequency', 'set-prPollStatusEvery', e.prPollStatusEvery ?? 12, 'ticks', 'Poll PR build/review/merge status every N ticks for both ADO and GitHub (~12 min at default tick rate)') +
       settingsField('PR Comments Poll Frequency', 'set-prPollCommentsEvery', e.prPollCommentsEvery ?? 12, 'ticks', 'Poll PR human comments every N ticks for both ADO and GitHub (~12 min at default tick rate)') +
+      settingsField('Abandoned PR Re-probe Window', 'set-abandonedPrRepollWindowDays', Number((((e.abandonedPrRepollWindowMs ?? (7 * 24 * 60 * 60 * 1000)) / (24 * 60 * 60 * 1000))).toFixed(2)), 'days', 'How long after a PR is stamped `abandoned` the STATUS poll keeps re-probing it, so a PR that was closed and then REOPENED can leave the terminal stamp instead of being invisible to the pollers forever. Only the status poll re-probes (never the comment poll), a host-confirmed deletion closes the window early, and records with no known abandonment time are never re-probed. Set 0 to disable re-probing entirely (strict pre-W-msav5edk00g81710 behavior). Clamped 0–90 days.', '0.01') +
     '</div>';
 
   const paneConcurrency =
@@ -591,10 +619,12 @@ async function openSettings() {
     '</div>' +
     '<div class="settings-grid-2">' +
       settingsField('CC Session Idle Timeout', 'set-ccWorkerIdleTimeoutMs', Math.round((e.ccWorkerIdleTimeoutMs || 1800000) / 60000), 'minutes', 'How long a persistent `copilot --acp` CC worker stays warm with no activity before the idle reaper kills it. After a reap the next message cold-spawns a FRESH session with no memory of prior turns and CC shows a "context cleared after inactivity" notice. Shorter = less idle memory/process footprint; longer = more context durability across gaps between messages. Only affects the Copilot worker-pool path (CC Worker Pool ON). Clamped 1–480 minutes. Ignored when "Never idle-reap CC workers" below is ON.') +
+      settingsField('ACP Handshake Timeout', 'set-acpHandshakeTimeoutMs', Math.round((e.acpHandshakeTimeoutMs || 180000) / 1000), 's', 'Budget for a COLD `copilot --acp` worker handshake — the `initialize` call plus the follow-up `session/new` / `session/load`. Applies to both ACP worker pools (Command Center and the per-agent fleet pool). A cold start that loads your MCP configuration routinely needs ~95 s, and the old hardcoded 60 s surfaced as "Command Center returned no output / handshake timed out after 60000ms" (issue #1105). Warm-worker reuse is unaffected — this only bounds the cold startup handshake. On expiry the pool still raises the typed, retriable ACP handshake error. Clamped 10–900 s.', '0.001') +
       settingsField('Worktree Create Timeout', 'set-worktreeCreateTimeout', (e.worktreeCreateTimeout || 300000) / 1000, 's', 'Timeout for git worktree add (increase for large repos/Windows)', '0.001') +
       settingsField('Worktree Create Retries', 'set-worktreeCreateRetries', e.worktreeCreateRetries || 1, '', 'Retry count for transient worktree add failures (0-3)') +
       settingsField('Worktree Root', 'set-worktreeRoot', e.worktreeRoot || '../worktrees', '', 'Relative or absolute path for git worktrees; on Windows prefer a short path like C:\\wt') +
       settingsField('Minimum Free Space', 'set-worktreeMinFreeSpaceGiB', Number(((e.worktreeMinFreeSpaceBytes ?? (10 * 1024 * 1024 * 1024)) / (1024 * 1024 * 1024)).toFixed(2)), 'GiB', 'Defer worktree-mode dispatch before git worktree add when the target filesystem has less free space than this reserve. The pending item is re-checked every tick and does not consume an agent retry. Set 0 to disable.') +
+      settingsField('Protected Quarantine Retention', 'set-worktreeProtectedQuarantineRetentionDays', Number((((e.worktreeProtectedQuarantineRetentionMs ?? (30 * 24 * 60 * 60 * 1000)) / (24 * 60 * 60 * 1000))).toFixed(2)), 'days', 'How long the GC keeps a PROTECTED quarantine directory — one whose dirty WIP could not be snapshotted to a durable refs/minions/quarantine-wip/* ref, so the directory itself is the only recovery artifact. Defaults to the shared 30-day quarantine-REF retention window (engine/core/shared.js#QUARANTINE_REF_RETENTION_MS) and also DRIVES that recovery-REF sweep, so changing this value moves directories and their refs together instead of shortening only one side. These were previously kept forever, which is how a busy install accumulates quarantine residue. Set 0 to restore indefinite retention for both. Clamped 0–365 days.', '0.01') +
       settingsField('Assert-Clean Status Probe Timeout', 'set-assertCleanStatusTimeoutMs', (e.assertCleanStatusTimeoutMs || 10000) / 1000, 's', 'Timeout for the `git status --porcelain` preflight probe in assertCleanSharedWorktree. Raise this (e.g. 60) on GVFS/Plastic-backed monorepos where sparse hydration runs longer than the 10s default. On timeout the engine quarantines the bad worktree and emits a RETRYABLE failure so the next dispatch starts fresh. Clamped 1–120 s.', '0.001') +
       settingsField('Restart-health Timeout', 'set-restartHealthTimeoutMs', (e.restartHealthTimeoutMs || 60000) / 1000, 's', 'Cold-start budget for `minions restart` / post-update restart verification. The dashboard runs node:sqlite migrations + SPA HTML assembly + initial state reads synchronously BEFORE it binds its port, so right after `npm install` on a slow/loaded box the PID is alive but the port is unbound for tens of seconds. Below this budget that no longer prints a false "Restart verification failed" + exit(1) — the verifier keeps polling until the port listens. A genuinely crashed spawn (PID dies) still fails fast, well under the full budget. Clamped 15–300 s.', '0.001') +
       settingsField('Orphan-holder scan timeout', 'set-orphanHolderScanTimeoutMs', (e.orphanHolderScanTimeoutMs || 5000) / 1000, 's', 'Cap on the cross-platform scan (PowerShell / /proc walk / lsof) that identifies the OS process holding a stuck worktree\'s cwd. Bumps up only matter on heavily-loaded hosts where the holder scan races the sweep tick. Clamped 1–30 s.', '0.001') +
@@ -649,7 +679,7 @@ async function openSettings() {
          '<option value="workspace-write"' + (e.codexCcSandbox === 'workspace-write' ? ' selected' : '') + '>workspace-write</option>' +
          '<option value="read-only"' + (e.codexCcSandbox === 'read-only' ? ' selected' : '') + '>read-only</option>' +
        '</select>' +
-       '<div style="font-size:var(--text-xs);color:var(--muted);margin-top:4px"><strong>Security:</strong> <code>danger-full-access</code> lets Codex CC reach localhost Minions APIs and operator-authorized paths outside <code>~/.minions</code>. Dispatched Codex agents and non-CC calls remain <code>workspace-write</code>. The adapter emits an explicit <code>--sandbox</code> CLI flag, which takes precedence over Codex config-file values.</div>' +
+       '<div style="font-size:var(--text-sm);color:var(--muted);margin-top:4px"><strong>Security:</strong> <code>danger-full-access</code> lets Codex CC reach localhost Minions APIs and operator-authorized paths outside <code>~/.minions</code>. Dispatched Codex agents and non-CC calls remain <code>workspace-write</code>. The adapter emits an explicit <code>--sandbox</code> CLI flag, which takes precedence over Codex config-file values.</div>' +
       '</div>' +
     '</div>';
 
@@ -693,13 +723,13 @@ async function openSettings() {
   const displayFeatures = featuresList.filter(function(f) { return f.id !== 'slim-ux'; });
   const paneFeatures =
     '<h3>Feature Flags</h3>' +
-    '<div class="settings-pane-sub">In-progress UX or behavior gates. Toggles persist immediately. Registry: <code>engine/features.js</code>. Env override: <code>MINIONS_FEATURE_&lt;NAME&gt;=1</code>.</div>' +
+    '<div class="settings-pane-sub">In-progress UX or behavior gates. Toggles persist immediately. Registry: <code>engine/core/features.js</code>. Env override: <code>MINIONS_FEATURE_&lt;NAME&gt;=1</code>.</div>' +
     '<details id="settings-features-details" open style="border:1px solid var(--border);border-radius:6px;padding:12px">' +
       '<summary style="cursor:pointer;font-size:var(--text-md);color:var(--text);user-select:none;margin-bottom:8px">Show experimental flags ' +
         '<span style="font-size:var(--text-sm);color:var(--muted)">(' + displayFeatures.length + ' registered)</span>' +
       '</summary>' +
       (displayFeatures.length === 0
-        ? '<div style="font-size:var(--text-base);color:var(--muted);padding:12px;border:1px dashed var(--border);border-radius:4px;text-align:center">No experimental features registered. Add entries to <code>engine/features.js</code> to gate new work.</div>'
+        ? '<div style="font-size:var(--text-base);color:var(--muted);padding:12px;border:1px dashed var(--border);border-radius:4px;text-align:center">No experimental features registered. Add entries to <code>engine/core/features.js</code> to gate new work.</div>'
         : '<div style="display:flex;flex-direction:column;gap:8px">' +
           displayFeatures.map(function(f) {
             const checked = f.enabled ? ' checked' : '';
@@ -755,6 +785,15 @@ async function openSettings() {
       settingsToggle('Allow Temp Agents', 'set-allowTempAgents', !!e.allowTempAgents, 'Spawn ephemeral agents when all permanent agents are busy') +
       settingsToggle('Disable model discovery', 'set-disableModelDiscovery', !!e.disableModelDiscovery, 'Skip /api/runtimes/<name>/models REST calls fleet-wide. Settings UI falls back to free-text.') +
     '</div>' +
+    // W-ms4o7y1g007jdb2d follow-up — engine-tick upkeep automation defaults moved
+    // here out of the Plan & PR Workflow tab (they are engine maintenance, not the
+    // per-PR watch→react loop). set-* ids are unchanged so save/collect + search
+    // are untouched.
+    '<h4>Engine automation</h4>' +
+    '<div class="settings-stack">' +
+      settingsToggle('Auto-consolidate Memory', 'set-autoConsolidateMemory', !!e.autoConsolidateMemory, 'Enabled by default. Periodically spawn the KB sweep (dedup + compress + normalize knowledge/) from the engine tick on a 4h cadence. Inbox→notes consolidation runs independently every tick.') +
+      settingsToggle('Bootstrap Default Schedules', 'set-bootstrapDefaultSchedules', e.bootstrapDefaultSchedules !== false, 'Auto-create the per-project git-fetch-freshness schedule (every 12h) when a project is added, and ensure one shared daily harness-sweep schedule exists engine-wide. Idempotent and non-destructive — never overwrites a schedule you have customized. Turn off to manage these schedules entirely by hand.') +
+    '</div>' +
     // W-mqk2s8q1 — dashboard refresh diagnostics, relocated here from the
     // floating bottom-left "diag" chip so it sits alongside the other
     // diagnostic/admin controls. Opens the same ring-buffer modal defined in
@@ -767,10 +806,9 @@ async function openSettings() {
 
   // Section registry — order is intentional (Runtime + Auto-fix surface first
   // per Caleb's feedback). Each entry maps a rail-button id → pane HTML.
-  // P-g7a2b4c5 — added "PR Lifecycle" and "Workflow Defaults" panes for the
-  // non-dispatch toggles that historically lived under Auto-fix; placed
-  // adjacent to Auto-fix so operators following the legacy mental model find
-  // the moved flags quickly.
+  // W-ms4o7y1g007jdb2d — the former 'autofix' / 'lifecycle' / 'workflow' panes
+  // are merged into ONE featured 'plan-pr-workflow' section (Plan → PR creation
+  // → Monitor). It sits where 'autofix' was (near the rail top, featured).
   // W-mryz3r7h — a section may opt into a collapsible rail fold by declaring a
   // `group`. Grouped sections render as an indented child list beneath a fold
   // header (see RAIL_GROUPS + the railHtml builder below); their PANES stay in
@@ -780,9 +818,7 @@ async function openSettings() {
   // only ever one thing labeled "Advanced".
   const sections = [
     { id: 'runtime', label: 'Agents Runtime & Models', featured: true, html: paneRuntime },
-    { id: 'autofix', label: 'Auto-fix & Review Loop', featured: true, html: paneAutoFix },
-    { id: 'lifecycle', label: 'PR Lifecycle', html: paneLifecycle },
-    { id: 'workflow', label: 'Workflow Defaults', html: paneWorkflow },
+    { id: 'plan-pr-workflow', label: 'Plan & PR Workflow', featured: true, html: panePlanPrWorkflow },
     { id: 'appearance', label: 'Appearance', html: paneAppearance },
     { id: 'projects', label: 'Projects', html: paneProjects },
     { id: 'polling', label: 'Polling', html: panePolling },
@@ -807,7 +843,12 @@ async function openSettings() {
   const SAVED_TAB_KEY = 'minions.settings.activeTab';
   let activeTab = sections[0].id;
   try {
-    const saved = localStorage.getItem(SAVED_TAB_KEY);
+    let saved = localStorage.getItem(SAVED_TAB_KEY);
+    // W-ms4o7y1g007jdb2d — the 'autofix' / 'lifecycle' / 'workflow' panes merged
+    // into 'plan-pr-workflow'. Redirect a stale saved tab (or old deep-link)
+    // so no operator lands on a dead rail id and silently falls back to the
+    // first section.
+    if (saved === 'autofix' || saved === 'lifecycle' || saved === 'workflow') saved = 'plan-pr-workflow';
     if (saved && sections.some(s => s.id === saved)) activeTab = saved;
   } catch { /* localStorage may be blocked in some embeds */ }
 
@@ -1047,7 +1088,79 @@ async function _toggleSettingsCharter(agentId) {
   }
 }
 
+/**
+ * Populate the Cloud Provider selector from /api/cloud-providers.
+ *
+ * Cloud dispatch ships with an EMPTY provider registry until a provider lands,
+ * and `engine.cloudProvider` is validated server-side against that same
+ * registry — so a free-text input would reject every value an operator could
+ * type. Instead the control offers exactly what is registered, and when nothing
+ * is, it disables itself and says why. The server re-validates fail-closed
+ * regardless; this is an affordance, not the gate.
+ *
+ * A stale stored value (a provider that was registered when it was saved and
+ * is not now) is preserved as a selected option and flagged, so opening
+ * Settings can never silently clear a config value the operator did not touch.
+ */
+async function _hydrateCloudProviderSelect(engineCfg) {
+  const select = document.getElementById('set-cloudProvider');
+  if (!select) return;
+  const hint = document.getElementById('set-cloudProvider-hint');
+  const current = (engineCfg && engineCfg.cloudProvider) || '';
+
+  let providers = [];
+  let reachable = true;
+  try {
+    const res = await fetch('/api/cloud-providers');
+    const data = await res.json();
+    providers = Array.isArray(data.providers) ? data.providers.map(p => p.name) : [];
+  } catch {
+    reachable = false; // older dashboard or transient failure — degrade, don't clear
+  }
+
+  const stale = current && !providers.includes(current);
+  const options = ['<option value=""' + (!current ? ' selected' : '') + '>None — cloud dispatch disabled</option>']
+    .concat(providers.map(n =>
+      '<option value="' + escHtml(n) + '"' + (n === current ? ' selected' : '') + '>' + escHtml(n) + '</option>'
+    ));
+  if (stale) {
+    options.push(
+      '<option value="' + escHtml(current) + '" selected>' + escHtml(current) + ' (not registered)</option>'
+    );
+  }
+  // eslint-disable-next-line no-unsanitized/property -- reason: structural HTML is a string literal; all user data wrapped in escHtml() (fields: provider names, stored provider id)
+  select.innerHTML = options.join('');
+
+  // Disable only when there is genuinely nothing to choose AND nothing stored:
+  // a stale stored value must stay editable so the operator can clear it.
+  select.disabled = providers.length === 0 && !current;
+
+  if (!hint) return;
+  if (!reachable) {
+    hint.textContent = 'Could not reach /api/cloud-providers — the stored value is unchanged. '
+      + 'Cloud dispatch hands a work item to a remote coding agent that authors its own PR.';
+  } else if (providers.length === 0) {
+    hint.textContent = 'No cloud providers are registered on this build, so cloud dispatch is unavailable '
+      + 'and any work item declaring meta.executionSurface: "cloud" is refused (never run locally instead). '
+      + 'This control activates when a provider ships.';
+  } else if (stale) {
+    hint.textContent = 'The stored provider "' + current + '" is not registered on this build — '
+      + 'cloud-declared work items will be refused until you pick a registered provider or clear this field.';
+  } else {
+    hint.textContent = 'Fleet-wide default for work items declaring meta.executionSurface: "cloud" — Minions '
+      + 'investigates locally, renders the scoped dispatch instructions, and hands them to a REMOTE coding agent '
+      + 'that authors its own PR. Overridden by project.cloudProvider, then meta.cloudProvider. '
+      + 'Only PR-producing types (implement, fix, test, docs) may declare the cloud surface.';
+  }
+}
+
 async function initRuntimeFleetUI(engineCfg, agentsCfg) {
+  // Cloud dispatch providers come from a DIFFERENT registry than runtimes
+  // (/api/cloud-providers) and ship empty until a provider lands. Hydrated
+  // FIRST, ahead of the runtime-select guard below, so the cloud control is
+  // never left showing "Loading…" just because the CLI selects are absent.
+  await _hydrateCloudProviderSelect(engineCfg);
+
   const cliSelect = document.getElementById('set-defaultCli');
   const ccCliSelect = document.getElementById('set-ccCli');
   if (!cliSelect || !ccCliSelect) return;
@@ -1064,6 +1177,9 @@ async function initRuntimeFleetUI(engineCfg, agentsCfg) {
     runtimes = Array.isArray(d.runtimes) ? d.runtimes : [];
   } catch { /* ignore — we'll surface a free-text-only path below */ }
 
+  // Cloud dispatch providers come from a DIFFERENT registry (/api/cloud-providers)
+  // and ship empty until a provider lands. Hydrated at the top of this function.
+
   // Always include 'copilot' as a fallback option even if /api/runtimes is empty;
   // legacy installs without the registry endpoint should still see something pickable.
   const names = runtimes.length ? runtimes.map(rt => rt.name) : ['copilot'];
@@ -1364,6 +1480,27 @@ function settingsToggle(label, id, checked, hint, opts) {
   '</div>';
 }
 
+// W-ms4o7y1g007jdb2d — two-state DRAFT ⇄ PUBLISH switch backing a real
+// `<input type=checkbox id="set-…">` so the existing id-based save/collect path
+// (getElementById('set-…').checked) is untouched: checked = Draft, unchecked =
+// Publish (ready-for-review). Renders both ends ('Publish' / 'Draft') with a
+// pure-CSS sliding knob driven by the `:checked` sibling selector (.settings-
+// switch* in styles.css) — no JS change handler. `extraSearch` folds the
+// legacy label into data-search so the cross-tab search box still finds it.
+function settingsDraftPublishToggle(id, checked, label, hint) {
+  const searchKey = (String(label || '') + ' ' + String(hint || '') + ' create prs as draft publish ready for review pull request lifecycle').toLowerCase().replace(/"/g, '');
+  return '<div class="settings-row" data-search="' + escHtml(searchKey) + '">' +
+    '<label for="' + id + '" style="font-size:var(--text-sm);color:var(--muted);display:block;margin-bottom:4px">' + escHtml(label) + '</label>' +
+    '<label class="settings-switch" title="' + escHtml(hint || '') + '">' +
+      '<input type="checkbox" id="' + id + '" class="settings-switch__input"' + (checked ? ' checked' : '') + '>' +
+      '<span class="settings-switch__end settings-switch__end--publish">Publish</span>' +
+      '<span class="settings-switch__track" aria-hidden="true"><span class="settings-switch__knob"></span></span>' +
+      '<span class="settings-switch__end settings-switch__end--draft">Draft</span>' +
+    '</label>' +
+    (hint ? '<div style="font-size:var(--text-sm);color:var(--muted);margin-top:4px;line-height:1.4">' + escHtml(hint) + '</div>' : '') +
+  '</div>';
+}
+
 // W-mryyzhug000454b7 — enable/disabled TILE for a boolean per-cause auto-fix
 // gate. Renders a real (visually-hidden but focusable) `<input type=checkbox
 // id="set-...">` as the source of truth so the existing id-based save/collect
@@ -1574,6 +1711,7 @@ async function saveSettings() {
       worktreeCreateRetries: document.getElementById('set-worktreeCreateRetries').value,
       worktreeRoot: document.getElementById('set-worktreeRoot').value,
       worktreeMinFreeSpaceBytes: Math.round(Math.max(0, Number(document.getElementById('set-worktreeMinFreeSpaceGiB').value) || 0) * 1024 * 1024 * 1024),
+      worktreeProtectedQuarantineRetentionMs: Math.round(Math.max(0, Number(document.getElementById('set-worktreeProtectedQuarantineRetentionDays').value) || 0) * 24 * 60 * 60 * 1000),
       assertCleanStatusTimeoutMs: secToMs('set-assertCleanStatusTimeoutMs'),
       restartHealthTimeoutMs: secToMs('set-restartHealthTimeoutMs'),
       idleAlertMinutes: document.getElementById('set-idleAlertMinutes').value,
@@ -1591,11 +1729,13 @@ async function saveSettings() {
       autoDecompose: document.getElementById('set-autoDecompose').checked,
       allowTempAgents: document.getElementById('set-allowTempAgents').checked,
       autoArchive: document.getElementById('set-autoArchive').checked,
+      autoQaCompletedPrds: !!document.getElementById('set-autoQaCompletedPrds')?.checked,
       autoConsolidateMemory: document.getElementById('set-autoConsolidateMemory').checked,
       bootstrapDefaultSchedules: document.getElementById('set-bootstrapDefaultSchedules').checked,
       autoApplyReviewVote: document.getElementById('set-autoApplyReviewVote').checked,
       createPrsAsDraft: document.getElementById('set-createPrsAsDraft').checked,
       autoFixBuilds: document.getElementById('set-autoFixBuilds').checked,
+      adoQueueDraftPrBuilds: document.getElementById('set-adoQueueDraftPrBuilds').checked,
       autoFixConflicts: document.getElementById('set-autoFixConflicts').checked,
       autoFixPaused: document.getElementById('set-autoFixPaused').checked,
       autoReviewPrs: document.getElementById('set-autoReviewPrs').checked,
@@ -1636,6 +1776,9 @@ async function saveSettings() {
       planMaterializationEnabled: document.getElementById('set-planMaterializationEnabled').checked,
       prPollStatusEvery: document.getElementById('set-prPollStatusEvery').value,
       prPollCommentsEvery: document.getElementById('set-prPollCommentsEvery').value,
+      // W-msav5edk00g81710 — UI is days, engine stores ms (mirrors the
+      // protected-quarantine retention field). 0 disables the re-probe.
+      abandonedPrRepollWindowMs: Math.round(Math.max(0, Number(document.getElementById('set-abandonedPrRepollWindowDays').value) || 0) * 24 * 60 * 60 * 1000),
       evalMaxCost: document.getElementById('set-evalMaxCost').value || null,
       enablePreDispatchEval: document.getElementById('set-enablePreDispatchEval').checked,
       preDispatchEvalSkipPrdSourced: document.getElementById('set-preDispatchEvalSkipPrdSourced').checked,
@@ -1651,8 +1794,16 @@ async function saveSettings() {
       ccCli: (document.getElementById('set-ccCli')?.value ?? '').trim(),
       ccModel: (document.getElementById('set-ccModel')?.value ?? '').trim(),
       ccEffort: document.getElementById('set-ccEffort').value || null,
+      // Cloud dispatch default provider. Empty string clears the override, so
+      // the fleet goes back to "no cloud provider" and every cloud-declared
+      // work item is refused (never silently downgraded to a local dispatch).
+      cloudProvider: (document.getElementById('set-cloudProvider')?.value ?? '').trim(),
       codexCcSandbox: document.getElementById('set-codexCcSandbox')?.value || 'danger-full-access',
       ccTurnTimeoutMs: secToMs('set-ccTurnTimeoutMs'),
+      // Issue #1105 — cold ACP handshake budget. UI is seconds, engine stores
+      // ms; the server validates against [10000, 900000] ms. undefined when
+      // blank so the server keeps the prior value.
+      acpHandshakeTimeoutMs: secToMs('set-acpHandshakeTimeoutMs'),
       // Settings UI presents the idle timeout in minutes for readability; the
       // engine stores ms (ENGINE_DEFAULTS.ccWorkerIdleTimeoutMs). Convert here;
       // the server validates against [60000, 28800000] ms. undefined when blank so the

package/dashboard/js/utils.js

@@ -902,6 +902,56 @@ async function submitBugReport() {
   }
 }
 
+// ── Slim "+ Add" create deep-link (W-ms258yw0000ffd8a) ─────────────────────
+// Shared boot hook for the classic /watches, /schedule and /pipelines screens
+// when the Slim Automation tile embeds them at `?embed=1#create`.
+//
+// Waiting only for `typeof openCreate*Modal === 'function'` is NOT sufficient:
+// the create function is a hoisted declaration in the same concatenated bundle,
+// so it already exists synchronously — but the Project / Agent / Owner <option>
+// lists are built from the `cmdProjects` / `cmdAgents` globals that refresh.js
+// only fills once the first /api/status + /api/agents fetch resolves. This hook
+// runs one macrotask after DOMContentLoaded and always wins that race, and the
+// create forms are one-shot innerHTML renders with no re-render hook — so the
+// dialog would open with empty dropdowns and never self-heal. Screens whose
+// create form depends on that data therefore pass an `isReady` predicate.
+//
+// The retry budget is bounded so a page whose data never lands cannot spin the
+// 30 ms timer forever; on exhaustion we open best-effort (a degraded dialog
+// still beats a "+ Add" click that silently does nothing).
+function classicCreateFormDataReady() {
+  // The first refresh() tick has landed for BOTH slices cmdProjects/cmdAgents
+  // are derived from. Deliberately not `cmdProjects.length` — a valid install
+  // can have zero projects or zero agents, and that must not stall the dialog.
+  return !!(window._lastStatus && window._lastAgents);
+}
+
+// opts: { route: '/watches', resolve: () => fn|null, isReady?: () => boolean }
+function bootCreateDeepLink(opts) {
+  if (typeof window === 'undefined' || typeof document === 'undefined') return;
+  if (!opts || typeof opts.resolve !== 'function') return;
+  var RETRY_MS = 30;
+  var MAX_ATTEMPTS = 200;   // ~6s at RETRY_MS — bounded, never an unbounded loop
+  try {
+    if (window.location.pathname.replace(/\/+$/, '') !== opts.route) return;
+    if (window.location.hash !== '#create') return;
+  } catch (e) { return; }
+  function attempt(n) {
+    var open = null;
+    try { open = opts.resolve(); } catch (e) { open = null; }
+    var ready = true;
+    if (opts.isReady) { try { ready = opts.isReady() === true; } catch (e) { ready = false; } }
+    if (typeof open === 'function' && ready) { open(); return; }
+    if (n >= MAX_ATTEMPTS) { if (typeof open === 'function') open(); return; }
+    setTimeout(function() { attempt(n + 1); }, RETRY_MS);
+  }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', function() { setTimeout(function() { attempt(0); }, 0); });
+  } else {
+    setTimeout(function() { attempt(0); }, 0);
+  }
+}
+
 // ── Send-shortcut helpers (Classic UX) ──────────────────────────────────
 // macOS submits with Command+Enter; Windows/Linux keep Control+Enter. These are
 // the single source of truth for both the key handler and the visible hint so
@@ -930,4 +980,4 @@ function sendShortcutAriaLabel() { return isMacPlatform() ? 'Command+Enter' : 'C
 // aria-keyshortcuts uses the DOM modifier names, so macOS reports "Meta".
 function sendShortcutAriaKeys() { return isMacPlatform() ? 'Meta+Enter' : 'Control+Enter'; }
 
-window.MinionsUtils = { wakeEngine, markDeleted, clearDeleted, escapeHtml, escHtml, renderMd, normalizePlanFile, timeAgo, statusColor, shouldIgnoreSelectionClick, llmCopyBtn, copyLlmText, openBugReport, submitBugReport, isMacPlatform, isSendShortcutEvent, sendShortcutLabel, sendShortcutAriaLabel, sendShortcutAriaKeys };
+window.MinionsUtils = { wakeEngine, markDeleted, clearDeleted, escapeHtml, escHtml, renderMd, normalizePlanFile, timeAgo, statusColor, shouldIgnoreSelectionClick, llmCopyBtn, copyLlmText, openBugReport, submitBugReport, isMacPlatform, isSendShortcutEvent, sendShortcutLabel, sendShortcutAriaLabel, sendShortcutAriaKeys, bootCreateDeepLink, classicCreateFormDataReady };

package/dashboard/pages/home.html

@@ -16,7 +16,7 @@
         </div>
       </section>
       <section>
-        <h2>Minions Members <span class="qa-section-subtitle">click for details</span></h2>
+        <h2>Minions Members</h2>
         <div class="agents" id="agents-grid">Loading...</div>
       </section>
       <section>

package/dashboard/pages/qa.html

@@ -1,24 +1,9 @@
       <section>
         <h2>QA</h2>
-        <p class="empty" style="margin:4px 0 12px 0">Passive monitor for QA sessions, live targets, runs, and saved runbooks. Create new sessions or runbooks from <button type="button" class="qa-inline-link" onclick="qaFocusCommandCenter()">Command Center</button>.</p>
+        <p class="empty" style="margin:4px 0 12px 0">Passive monitor for QA sessions, live targets, runs, and saved runbooks. Create new sessions or runbooks from <button type="button" class="qa-inline-link" onclick="qaFocusCommandCenter()">Command Center</button>. <a href="/state/docs/qa-runbook-lifecycle.md" target="_blank" rel="noopener" class="qa-inline-link">Docs →</a></p>
       </section>
       <section id="qa-sessions-section" class="qa-section">
         <h2>Active QA Sessions <span class="qa-section-subtitle">live, non-terminal runs — engine sets up a target, drafts a runner-native test, and (with your approval) executes it</span></h2>
-        <div id="qa-cc-pitch" class="qa-cc-pitch" style="border:1px solid var(--border);border-radius:var(--radius-md);background:var(--surface2);padding:var(--space-5);margin-bottom:var(--space-5);display:flex;flex-direction:column;gap:var(--space-3)">
-          <div style="font-weight:600;color:var(--text);display:flex;align-items:center;gap:var(--space-2)">💬 Ask Command Center to start a QA session</div>
-          <div style="color:var(--muted);font-size:var(--text-base);line-height:1.5">
-            Examples:
-            <ul style="margin:var(--space-2) 0 0 var(--space-5);padding:0;color:var(--muted)">
-              <li><code>QA the login flow on PR #1234</code></li>
-              <li><code>Smoke test the checkout flow on develop</code></li>
-              <li><code>Validate the signup journey on my current worktree</code></li>
-            </ul>
-          </div>
-          <div style="display:flex;gap:var(--space-3);align-items:center;margin-top:var(--space-2)">
-            <button type="button" id="qa-cc-pitch-open" class="btn-primary-solid" onclick="qaFocusCommandCenter()">Open Command Center →</button>
-            <a href="/state/docs/qa-runbook-lifecycle.md" target="_blank" rel="noopener" class="qa-cc-pitch-docs" style="color:var(--blue);font-size:var(--text-base)">Docs →</a>
-          </div>
-        </div>
         <div id="qa-sessions-content" class="qa-sessions-list">
           <p class="empty">Loading sessions…</p>
         </div>

package/dashboard/pages/work.html

@@ -4,6 +4,46 @@
           <button id="work-archive-toggle" type="button" class="pr-pager-btn" style="font-size:var(--text-sm);padding:2px 8px;margin-left:4px" onclick="toggleWorkItemArchive()" aria-expanded="false" aria-controls="work-items-archive">See Archive</button>
           <span style="font-size:var(--text-sm);color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">tasks dispatched to agents — auto-created from PRDs or added manually</span>
         </h2>
+        <div class="pr-filters" role="group" aria-label="Work item filters and sort">
+          <label class="pr-filter">Status
+            <select id="wi-filter-status" onchange="applyWiFilters()">
+              <option value="">All statuses</option>
+            </select>
+          </label>
+          <label class="pr-filter">Type
+            <select id="wi-filter-type" onchange="applyWiFilters()">
+              <option value="">All types</option>
+            </select>
+          </label>
+          <label class="pr-filter">Project
+            <select id="wi-filter-project" onchange="applyWiFilters()">
+              <option value="">All projects</option>
+            </select>
+          </label>
+          <label class="pr-filter">Agent
+            <select id="wi-filter-agent" onchange="applyWiFilters()">
+              <option value="">All agents</option>
+            </select>
+          </label>
+          <label class="pr-filter">Priority
+            <select id="wi-filter-priority" onchange="applyWiFilters()">
+              <option value="">All priorities</option>
+            </select>
+          </label>
+          <label class="pr-filter">Sort by
+            <select id="wi-sort-by" onchange="applyWiFilters()">
+              <option value="lifecycle" selected>Lifecycle (active first)</option>
+              <option value="updated">Last updated</option>
+              <option value="created">Created</option>
+              <option value="priority">Priority</option>
+              <option value="status">Status</option>
+              <option value="type">Type</option>
+            </select>
+          </label>
+          <button id="wi-sort-dir" class="pr-filter-reset" type="button" value="desc" title="Descending — click for ascending" aria-label="Sort descending (newest first)" onclick="toggleWiSortDir()">&#8595; Desc</button>
+          <button class="pr-filter-reset" type="button" onclick="resetWiFilters()">Reset filters</button>
+          <span class="pr-filter-summary" id="wi-filter-summary" aria-live="polite"></span>
+        </div>
         <div id="work-items-content"><p class="empty">No work items yet.</p></div>
         <div id="work-items-archive" style="display:none;margin-top:12px"></div>
       </section>