baxian 1.1.0 → 1.2.1

package/dist/agent/manager.js

@@ -2,7 +2,7 @@ import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
 import { createSignalToken } from './phase-signal.js';
-import { BRANCH_PREFIX, PHASE_EXPECTED_STATUS, PHASE_REQUIRES_AGENT_BOUND_TO_TASK, TASK_TERMINAL_STATUSES as TERMINAL_STATUSES, TASK_ACTIVE_STATUS_SET as ACTIVE_TASK_STATUSES, } from '../shared/index.js';
+import { BRANCH_PREFIX, PHASE_EXPECTED_STATUS, PHASE_REQUIRES_AGENT_BOUND_TO_TASK, TASK_TERMINAL_STATUSES as TERMINAL_STATUSES, TASK_ACTIVE_STATUS_SET as ACTIVE_TASK_STATUSES, isGitHubRepo, repoSlug, } from '../shared/index.js';
 import { AGENT_STORE_NOOP } from '../state/agent-store.js';
 import { PostApproveStore } from '../state/post-approve-store.js';
 import { SkillRegistry } from '../skill/registry.js';
@@ -73,8 +73,8 @@ function agentRuntimeKindFor(agent) {
 }
 const DEFAULT_DISPATCH_ACK_TIMEOUT_MS = 30_000;
 const DEFAULT_DISPATCH_SETTLE_TIMEOUT_MS = 3_000;
-// Dev-facing deliverable phases that weave the task's uploaded image paths into the prompt (task-055).
-const IMAGE_DISPATCH_PHASES = new Set(['develop', 'code', 'fix', 'spec-fix']);
+// Dev-facing deliverable phases that weave the task's uploaded image paths into the prompt.
+const IMAGE_DISPATCH_PHASES = new Set(['develop', 'code', 'fix', 'server-feedback']);
 export function canDispatchWithBinding(binding) {
     return !binding?.taskId && !binding?.creationToken && binding?.status !== 'awaiting_human';
 }
@@ -121,7 +121,7 @@ export class AgentManager {
     dispatchAckTimeoutMs;
     dispatchSettleTimeoutMs;
     // Re-send Enter after this long of continuous post-paste idle — recovers a swallowed first Enter
-    // (task-071) without risking a double-submit (a real submit goes busy well within this window).
+    // without risking a double-submit (a real submit goes busy well within this window).
     dispatchAckResendIntervalMs = 3_000;
     taskMutationQueue = Promise.resolve();
     agentIndex;
@@ -132,6 +132,7 @@ export class AgentManager {
     runtimeMenuPollIntervalMs = 10_000;
     compactIdleWaitMs = 5 * 60_000;
     compactIdlePollMs = 2_000;
+    manualCompactWaitMs = 5_000;
     postMergeFetchTimeoutMs = 60_000;
     postMergeBranchTimeoutMs = 10_000;
     // taskIds with in-flight manual review — second concurrent POST gets 409.
@@ -143,6 +144,7 @@ export class AgentManager {
     // agentIds with in-flight DELETE — 第二个 DELETE 撞 awaiting_human stale-lock takeover 路径会
     // 把第一个 DELETE 持有的占位也当 stale 接管，导致并发 cleanupRemovedAgentRuntime。
     deletionInFlight = new Set();
+    compactInFlight = new Set();
     constructor(deps) {
         this.config = deps.config;
         this.agentStore = deps.agentStore;
@@ -183,12 +185,32 @@ export class AgentManager {
     getReviewStore() {
         return this.reviewStore;
     }
+    // Non-GitHub repos are forced to server review mode — there is no platform PR/review
+    // to map onto. GitHub honors the global config. Snapshotted per-task at creation.
+    effectiveReviewMode(projectId) {
+        const project = this.getProjectConfig(projectId);
+        if (project && !isGitHubRepo(project.repo))
+            return 'server';
+        return this.config.review.mode ?? 'github';
+    }
     // Snapshot-aware afterDone read: an EXPLICIT null snapshot must win over hot
-    // config — `??` would swallow it and reroute an already-decided task (PR #288).
+    // config — `??` would swallow it and reroute an already-decided task.
     resolveAfterDone(task) {
         if (task.afterDone !== undefined)
             return task.afterDone;
-        return this.config.review.afterDone ?? null;
+        return this.coerceAfterDone(task.projectId, this.config.review.afterDone);
+    }
+    // Non-GitHub repos have no PR platform: 'pr' degrades to 'branch' (push + optional
+    // ff-merge). An unset afterDone defaults to 'branch' so reviewed work actually reaches
+    // the remote; an explicit null still means "don't publish". GitHub is unchanged.
+    coerceAfterDone(projectId, configured) {
+        const project = this.getProjectConfig(projectId);
+        if (project && !isGitHubRepo(project.repo)) {
+            if (configured === 'pr' || configured === undefined)
+                return 'branch';
+            return configured;
+        }
+        return configured ?? null;
     }
     getReviewTransport() {
         this.reviewTransportInstance ??= new ReviewTransport({
@@ -562,7 +584,7 @@ export class AgentManager {
             if (!discoveredPaneId)
                 return false;
             const probeNow = new Date().toISOString();
-            // 撤销 updatedAt guard（round-13 codex review）：updatedAt 太宽，正常 background updates
+            // 不用 updatedAt guard：updatedAt 太宽，正常 background updates
             // (repoPath refresh / poller bump 等) 也会触发假阳性让合法 retry dialog 路径误拒。
             // race ("DELETE+recreate 后旧回调写新 agent") 在持锁路径下是 theoretical (retry endpoint 持锁
             // 全程到 handleDialogPendingFromRuntime 返回；startSession/continueSession 由 acquireAgentForTask
@@ -599,7 +621,7 @@ export class AgentManager {
             // fromStatus 来自 caller 显式计算：startSession/continueSession 用 opts.dialogFailFromStatuses ??
             // PHASE_EXPECTED_STATUS[phase]，dispatchReviewToQa 走 bypassTaskStatusGate 时显式传 [taskStatusAtClaim]
             // (manual review 入口可能是 approved/fixing/in_progress，但 phase='review' 的 default 只接受 'review' →
-            // 不传就 skip → task 卡 active 死锁，见 owner round-15 评审)。
+            // 不传就 skip → task 卡 active 死锁)。
             const expectedFromStatuses = opts.expectedFromStatuses ?? [...ACTIVE_TASK_STATUSES];
             const transitioned = await this.transitionTaskStatus(state.taskId, 'failed', { fromStatus: expectedFromStatuses });
             if (transitioned) {
@@ -975,7 +997,7 @@ export class AgentManager {
         const state = await this.agentStore.get(agentId);
         const sameTaskLocked = state?.taskId === taskId && (await this.lockManager.isLocked(agentId));
         const reentryPhases = new Set([
-            'fix', 'post-approve', 'spec-fix', 'code',
+            'fix', 'post-approve', 'code',
             'server-feedback', 'server-after-done',
         ]);
         const sameTaskReentry = state?.taskId === taskId &&
@@ -1218,7 +1240,7 @@ export class AgentManager {
             // code-dispatch-failed: the code-phase prompt never reached the pane (spec
             // approval already transitioned the task). Resume = clear the hold AND
             // redispatch the code prompt (outside this lock) — without the redispatch
-            // the task would stay in_progress with nothing running (PR #288).
+            // the task would stay in_progress with nothing running.
             if (state.awaitingPhase === 'code-dispatch-failed'
                 && boundTask && ACTIVE_TASK_STATUSES.has(boundTask.status)
                 && state.taskId) {
@@ -1411,7 +1433,7 @@ export class AgentManager {
                 const bound = t.agentId === agentId || t.qaAgentId === agentId;
                 // Human gates are decision states, not running work: an absent agent
                 // session must not terminally fail a task whose published PR/branch
-                // would then be orphaned — Confirm/Cancel remain the only exits (PR #288).
+                // would then be orphaned — Confirm/Cancel remain the only exits.
                 if (t.status === 'ready' || t.status === 'merge-ready')
                     continue;
                 if (ACTIVE_TASK_STATUSES.has(t.status) && bound) {
@@ -1653,7 +1675,7 @@ export class AgentManager {
         return this.config.project.find(p => p.id === projectId);
     }
     getProjectByRepo(repo) {
-        return this.config.project.find(p => p.repo === repo);
+        return this.config.project.find(p => repoSlug(p.repo) === repo);
     }
     findQaPartner(devAgentId) {
         for (const project of this.config.project) {
@@ -1744,7 +1766,6 @@ export class AgentManager {
                     expectedKinds: 'pr-merge-ready',
                     token: completion.token,
                     skipSnapshot,
-                    reviewMode: task.reviewMode ?? 'github',
                     recovered: true,
                 });
             }
@@ -1753,8 +1774,8 @@ export class AgentManager {
             }
         }
     }
-    // skipSnapshot=true: 旧 scrollback 里的 signal 重启后不应再触发。
-    // 只对 spec verdict / spec-fixed emit intervention — spec-created 在 develop
+    // snapshot 扫描按协议族决定：server 协议（含全模式 spec 阶段）恢复时必扫，github code 阶段仅 review/fixing 扫。
+    // 只对 spec verdict / spec-fixed emit intervention — spec-done 在 develop
     // prompt 里是 optional, 报警会让所有 in_progress task 噪音化。
     // expectedKinds 必须覆盖 dispatch 时实际 set up 的 kind 集，否则真信号无法匹配。
     async setupRecoveredSpecSignals() {
@@ -1769,23 +1790,25 @@ export class AgentManager {
                 continue;
             const { expectedKinds, agentId } = mapped;
             // Only spec verdict / spec-fixed / PR verdict warrant an intervention —
-            // optional kinds (spec-created, pr-created in develop) would spam every
+            // optional kinds (spec-done, pr-created in develop) would spam every
             // in_progress task on restart.
-            const interventionKindLabel = task.phase === 'spec' && task.status === 'review' ? 'spec-approved|spec-changes-requested'
+            const interventionKindLabel = task.phase === 'spec' && task.status === 'review' ? 'spec-reviewed'
                 : task.phase === 'spec' && task.status === 'fixing' ? 'spec-fixed'
                     : task.phase !== 'spec' && task.status === 'review' ? 'pr-approved|pr-changes-requested'
                         : task.phase !== 'spec' && task.status === 'fixing' ? 'pr-fixed'
                             : undefined;
-            // Scan the pane snapshot for one-shot completion signals the agent may have
-            // echoed before the server persisted/consumed it (lost on restart otherwise,
-            // since the agent does not re-emit): PR verdict (review) and pr-fixed (code
-            // fixing). Both handlers are idempotent under replay (token + status gates),
-            // and token rotation still rejects stale ones. Other phases keep
-            // skipSnapshot=true — their handlers aren't as cleanly replay-safe.
-            // Server mode scans on EVERY recovered state: the pane signal is the only
-            // verdict channel (no poller backstop) and all server handlers are
-            // replay-safe (token/status gates + stored-data resumption).
-            const scanSnapshotOnRecover = task.reviewMode === 'server'
+            // spec 阶段恒为 server 协议（无 poller 兜底）；code 阶段才按 reviewMode 区分。
+            // Scan pane snapshot on recover for signals the agent emitted before the
+            // server consumed them (lost on restart; agent won't re-emit).
+            // github code states (review/fixing): replay-safe handlers — token + status
+            // gates reject duplicates; PR verdict & pr-fixed covered.
+            // github pre-spec (phase undefined, in_progress): spec-done has only the pane
+            // channel (pr-created has a poller backstop, scanning it is idempotent).
+            // server protocol incl. all-mode spec phase: no poller backstop, pane is the
+            // only signal channel; handlers equally replay-safe via same gates.
+            const isServerProtocol = task.reviewMode === 'server' || task.phase === 'spec';
+            const scanSnapshotOnRecover = isServerProtocol
+                || (task.phase === undefined && task.status === 'in_progress')
                 || (task.phase !== 'spec' && (task.status === 'review' || task.status === 'fixing'));
             try {
                 await this.phaseSignalWatcher.start({
@@ -1795,9 +1818,8 @@ export class AgentManager {
                     expectedKinds,
                     token: task.signalToken,
                     skipSnapshot: !scanSnapshotOnRecover,
-                    reviewMode: task.reviewMode ?? 'github',
                     recovered: true,
-                    ...(task.reviewMode === 'server' && task.status === 'review'
+                    ...(isServerProtocol && task.status === 'review'
                         ? { onReadFile: (req) => { void this.handleReadFileRequest(task.id, agentId, req); } }
                         : {}),
                 });
@@ -1843,10 +1865,11 @@ export class AgentManager {
         // Three independent endpoints — fetch concurrently, not back-to-back. Reviews
         // cover the same-identity `gh pr review --comment` reply path (a PR review with
         // a body, surfaced via submitted_at, not an inline/issue comment).
+        const repo = repoSlug(project.repo);
         const [inlineReplies, issueComments, reviews] = await Promise.all([
-            this.ghCreatedAt(`repos/${project.repo}/pulls/${task.prNumber}/comments`, '.[] | select(.in_reply_to_id != null) | .created_at'),
-            this.ghCreatedAt(`repos/${project.repo}/issues/${task.prNumber}/comments`, '.[].created_at'),
-            this.ghCreatedAt(`repos/${project.repo}/pulls/${task.prNumber}/reviews`, '.[] | select(.submitted_at != null) | .submitted_at'),
+            this.ghCreatedAt(`repos/${repo}/pulls/${task.prNumber}/comments`, '.[] | select(.in_reply_to_id != null) | .created_at'),
+            this.ghCreatedAt(`repos/${repo}/issues/${task.prNumber}/comments`, '.[].created_at'),
+            this.ghCreatedAt(`repos/${repo}/pulls/${task.prNumber}/reviews`, '.[] | select(.submitted_at != null) | .submitted_at'),
         ]);
         const stamps = [...inlineReplies, ...issueComments, ...reviews];
         return stamps.some(ts => {
@@ -1874,7 +1897,7 @@ export class AgentManager {
         if (!project) {
             throw new Error(`fetchPrHeadSha: unknown project ${task.projectId}`);
         }
-        const result = await this.platformRunner.exec(`gh pr view ${task.prNumber} --repo ${shellQuote(project.repo)} --json headRefOid --jq .headRefOid`);
+        const result = await this.platformRunner.exec(`gh pr view ${task.prNumber} --repo ${shellQuote(repoSlug(project.repo))} --json headRefOid --jq .headRefOid`);
         if (result.exitCode !== 0) {
             throw new Error(`gh pr view failed for PR #${task.prNumber}: ${result.stderr || result.stdout}`);
         }
@@ -1898,7 +1921,7 @@ export class AgentManager {
         const project = this.getProjectConfig(task.projectId);
         if (!project)
             return undefined;
-        const result = await this.platformRunner.exec(`gh pr view ${prNumber} --repo ${shellQuote(project.repo)} --json headRefName,headRefOid --jq '.headRefName + "\\t" + .headRefOid'`);
+        const result = await this.platformRunner.exec(`gh pr view ${prNumber} --repo ${shellQuote(repoSlug(project.repo))} --json headRefName,headRefOid --jq '.headRefName + "\\t" + .headRefOid'`);
         if (result.exitCode !== 0)
             return undefined;
         const [headRefName, headSha] = result.stdout.trim().split('\t');
@@ -1977,7 +2000,7 @@ export class AgentManager {
     createRepoStore(agent, project, runner) {
         const host = resolveAgentHost(this.config.host, agent.host);
         if (this.repoStoreFactory) {
-            return this.repoStoreFactory(runner, project.repo, agent.mode, host, this.repoCache);
+            return this.repoStoreFactory(runner, repoSlug(project.repo), agent.mode, host, this.repoCache);
         }
         return new RepoStore(runner, project.repo, agent.mode, host, this.repoCache);
     }
@@ -2057,9 +2080,19 @@ export class AgentManager {
         return this.withTaskLock(async () => {
             const taskId = await this.taskStore.nextId();
             const now = new Date().toISOString();
+            // Server review has no platform fallback: a dev with no QA partner would strand (server mode
+            // is forced for non-GitHub repos). Fail fast BEFORE staging images — a rejected create must not
+            // orphan state/task-images/<taskId> with no TaskState to reclaim it. The dispatch path also
+            // guards (unassigned-claim entry). Unassigned skips this: empty preferredAgentId → no dev config.
+            if (this.getAgentConfig(input.preferredAgentId)?.role === 'dev'
+                && this.effectiveReviewMode(projectId) === 'server'
+                && !this.findQaPartner(input.preferredAgentId)) {
+                throw new ApiError(400, `Project "${projectId}" uses server review mode (forced for non-GitHub repos); ` +
+                    `dev "${input.preferredAgentId}" needs a QA partner — add a QA agent paired with this dev before creating tasks.`);
+            }
             // Stage images first so the task is written + emitted (task.created) WITH its images already
             // on disk — a pending task is never observable, or crash-recoverable, without them. A persist
-            // failure here throws before any store write / lock, so nothing half-created survives (task-055).
+            // failure here throws before any store write / lock, so nothing half-created survives.
             const imageFilenames = input.images?.length
                 ? await this.persistTaskImages(taskId, input.images)
                 : undefined;
@@ -2075,7 +2108,7 @@ export class AgentManager {
                     reviewRound: 0,
                     status: 'pending',
                     branch: BRANCH_PREFIX + taskId,
-                    reviewMode: this.config.review.mode ?? 'github',
+                    reviewMode: this.effectiveReviewMode(projectId),
                     createdAt: now,
                     updatedAt: now,
                     ...(imageFilenames ? { images: imageFilenames } : {}),
@@ -2104,7 +2137,7 @@ export class AgentManager {
                     reviewRound: 0,
                     status: 'pending',
                     branch: BRANCH_PREFIX + taskId,
-                    reviewMode: this.config.review.mode ?? 'github',
+                    reviewMode: this.effectiveReviewMode(projectId),
                     createdAt: now,
                     updatedAt: now,
                     ...(qa ? { qaAgentId: qa.id } : {}),
@@ -2137,7 +2170,7 @@ export class AgentManager {
                     reviewRound: 0,
                     status: 'pending',
                     branch: BRANCH_PREFIX + taskId,
-                    reviewMode: this.config.review.mode ?? 'github',
+                    reviewMode: this.effectiveReviewMode(projectId),
                     createdAt: now,
                     updatedAt: now,
                     ...(qa ? { qaAgentId: qa.id } : {}),
@@ -2169,7 +2202,7 @@ export class AgentManager {
                 reviewRound: 0,
                 status: 'in_progress',
                 branch: BRANCH_PREFIX + taskId,
-                reviewMode: this.config.review.mode ?? 'github',
+                reviewMode: this.effectiveReviewMode(projectId),
                 createdAt: now,
                 updatedAt: now,
                 ...(imageFilenames ? { images: imageFilenames } : {}),
@@ -2201,7 +2234,7 @@ export class AgentManager {
     }
     async createAndStartTask(projectId, input, opts = {}) {
         // createTask stages images atomically before the task is visible (store + task.created),
-        // so a pending task can never be observed — or crash-recovered — without its images (task-055).
+        // so a pending task can never be observed — or crash-recovered — without its images.
         const task = await this.createTask(projectId, input);
         if (task.status === 'in_progress' && task.agentId) {
             // Persist token first — prompt build 和 watcher 验证共用 task.signalToken。
@@ -2253,7 +2286,7 @@ export class AgentManager {
                 return null;
             }
             // 后台路径吞掉 reject（void start.catch）：arm 抛异常时也要显式 hold agent，否则会留下一个没有
-            // spec-created/pr-created 消费者的常驻任务（同步 caller 仍由上游收到异常）。
+            // spec-done/pr-created 消费者的常驻任务（同步 caller 仍由上游收到异常）。
             // Kinds derive from the task's frozen reviewMode — a hot mode flip during the
             // startSession window must not desync the armed kinds from the sent prompt.
             const initialKinds = this.devInitialSignalKinds(fresh.reviewMode);
@@ -2292,7 +2325,7 @@ export class AgentManager {
         }
         return (await this.taskStore.get(taskId)) ?? null;
     }
-    /** task-055 entry A: write an uploaded image to the running agent's host, paste its path (no Enter). */
+    /** Write an uploaded image to the running agent's host, paste its path (no Enter). */
     async attachImageToRunningAgent(agentId, bytes, ext) {
         const cfg = this.getAgentConfig(agentId);
         if (!cfg)
@@ -2301,12 +2334,83 @@ export class AgentManager {
         const paneId = state?.paneId;
         if (!paneId)
             throw new ApiError(409, `Agent ${agentId} has no live session`);
-        const runner = this.createRunnerFor(cfg);
-        const path = agentHostPath(agentId, imageFilename(ext));
-        await writeImageToHost(runner, path, bytes);
-        const tmux = new TmuxManager(runner);
-        await tmux.injectPrompt(paneId, `${path} `, agentId);
-        return { path };
+        // 写文件→粘贴全程持有 pane 互斥：写文件可能卡住，恢复后的粘贴若落进
+        // compact 的 C-c→/compact 窗口会把路径拼进指令提交。
+        if (!this.tryAcquireCompactGuard(agentId)) {
+            throw new ApiError(409, `Agent ${agentId} compact or upload in progress; retry shortly`);
+        }
+        try {
+            const runner = this.createRunnerFor(cfg);
+            const path = agentHostPath(agentId, imageFilename(ext));
+            await writeImageToHost(runner, path, bytes);
+            const tmux = new TmuxManager(runner);
+            await tmux.injectPrompt(paneId, `${path} `, agentId);
+            return { path };
+        }
+        finally {
+            this.compactInFlight.delete(agentId);
+        }
+    }
+    // busy 时注入会把指令拼进正在运行的回合，宁可 409。
+    async compactAgent(agentId) {
+        const cfg = this.getAgentConfig(agentId);
+        if (!cfg)
+            throw new ApiError(404, `Unknown agent: ${agentId}`);
+        if (!this.tryAcquireCompactGuard(agentId)) {
+            throw new ApiError(409, `Agent ${agentId} compact or upload already in progress`);
+        }
+        let guardHandedOff = false;
+        try {
+            const state = await this.agentStore.get(agentId);
+            const paneId = state?.paneId;
+            if (!paneId)
+                throw new ApiError(409, `Agent ${agentId} has no live session`);
+            const taskIdAtStart = state.taskId;
+            const updatedAtAtStart = state.updatedAt;
+            // updatedAt 拦同任务 phase 派发（paneId/taskId 均不变，派发 paste 前必写 state）；
+            // 快照变了决不注入——C-c 会打断刚注入的 prompt。
+            const assertSessionUnchanged = async () => {
+                const now = await this.agentStore.get(agentId);
+                if (!now
+                    || now.paneId !== paneId
+                    || now.taskId !== taskIdAtStart
+                    || now.updatedAt !== updatedAtAtStart) {
+                    throw new ApiError(409, `Agent ${agentId} session changed while waiting; compact aborted`);
+                }
+            };
+            const tmux = new TmuxManager(this.createRunnerFor(cfg));
+            const waitReady = async () => {
+                try {
+                    await this.waitForReplPromptReady(tmux, paneId, cfg.runtime, this.manualCompactWaitMs);
+                }
+                catch (err) {
+                    const detail = err instanceof Error ? err.message : String(err);
+                    throw new ApiError(409, `Agent ${agentId} runtime is not at an idle REPL prompt: ${detail}`);
+                }
+            };
+            await waitReady();
+            await assertSessionUnchanged();
+            // 残留草稿会被「草稿/compact」连带提交；C-c 清线后再发。
+            await tmux.sendKeysToPane(paneId, 'C-c');
+            await waitReady();
+            await assertSessionUnchanged();
+            await tmux.sendKeysLiteral(paneId, '/compact');
+            await tmux.sendEnter(paneId);
+            // 压缩仍在运行：guard 交给后台尾随等待，runtime 回到 idle 才释放，
+            // 否则紧随的上传/派发会粘进压缩中的 pane。
+            guardHandedOff = true;
+            void this.waitForReplPromptReady(tmux, paneId, cfg.runtime, this.compactIdleWaitMs)
+                .catch(err => {
+                console.warn(`[AgentManager] compactAgent(${agentId}) post-/compact idle wait failed:`, err);
+            })
+                .finally(() => {
+                this.compactInFlight.delete(agentId);
+            });
+        }
+        finally {
+            if (!guardHandedOff)
+                this.compactInFlight.delete(agentId);
+        }
     }
     async persistTaskImages(taskId, images) {
         const dir = join(this.imageStagingRoot, taskId);
@@ -2319,7 +2423,7 @@ export class AgentManager {
         }
         return filenames;
     }
-    // Retry reads staged bytes up-front; a missing source is a visible 409, never a silent drop (task-055).
+    // Retry reads staged bytes up-front; a missing source is a visible 409, never a silent drop.
     async readStagedImages(taskId, filenames) {
         const dir = join(this.imageStagingRoot, taskId);
         const out = [];
@@ -2337,7 +2441,7 @@ export class AgentManager {
         return out;
     }
     // Materialize staged task images onto the agent host at dispatch; absolute host paths get
-    // woven into the prompt. Missing staging aborts the dispatch loudly (no silent skip, task-055).
+    // woven into the prompt. Missing staging aborts the dispatch loudly (no silent skip).
     async materializeTaskImages(runner, task) {
         const filenames = task.images ?? [];
         if (filenames.length === 0)
@@ -2358,12 +2462,10 @@ export class AgentManager {
         }
         return hostPaths;
     }
-    // Dev-facing deliverable phases (initial + rework) all carry the task's uploaded images, since
-    // the image is a persistent task input the dev needs while producing or revising the spec/code —
-    // and a fresh runtime (restart/recovery) loses the original context. `develop` flows through
-    // startSession; `code`/`fix`/`spec-fix` through continueSession — both call this. Excluded:
-    // QA phases (review/recheck/spec-review) and post-approve (feedback-processing; if it needs
-    // changes baxian routes to `fix`, which carries the image) (task-055).
+    // Dev-facing deliverable phases all carry the task's uploaded images, since the image is a
+    // persistent task input the dev needs while producing or revising the spec/code — and a fresh
+    // runtime (restart/recovery) loses the original context. IMAGE_DISPATCH_PHASES 中的后续阶段经
+    // continueSession 触发此方法；QA 阶段和 post-approve 不传图。
     async imagePathsForDispatch(runner, task, phase) {
         if (!IMAGE_DISPATCH_PHASES.has(phase))
             return [];
@@ -2552,7 +2654,7 @@ export class AgentManager {
         const isServerQaPhase = phase === 'server-review' || phase === 'server-recheck' || phase === 'server-spec-review';
         const worktreePath = isServerQaPhase
             ? await worktree.createDetachedAtBase(workdir, taskId)
-            : phase === 'review' || phase === 'recheck' || phase === 'spec-review'
+            : phase === 'review' || phase === 'recheck'
                 ? await worktree.createDetached(workdir, taskId, task.branch)
                 : await worktree.create(workdir, taskId, baseRef);
         // Persist worktreePath now so a crash before set-running leaves a recoverable trail.
@@ -2578,8 +2680,18 @@ export class AgentManager {
         const reuseInjectedSkills = ensure.freshRuntime
             ? null
             : reuseSkillsIfContextValid(beforeInjectAgent, taskId, paneId);
+        // develop prompt 按 QA 有无裁剪 spec 路线（qaAgentId 快照优先，与 review 派发同一解析）。
+        const hasQaPartner = !!(task.qaAgentId ?? this.findQaPartner(agentId)?.id);
         let prompt;
         try {
+            // Server review has no platform fallback: a dev with no QA partner would emit a
+            // completion signal nobody consumes and the task strands (server mode is forced
+            // for non-GitHub repos via effectiveReviewMode). Enforce at this single dispatch
+            // chokepoint — the catch below removes the worktree, then the task fails cleanly.
+            if (task.reviewMode === 'server' && !hasQaPartner) {
+                throw new DispatchTerminalError('server_review_needs_qa', `Task ${task.id} runs in server review mode but dev "${agentId}" has no QA partner; ` +
+                    `pair a QA agent with this dev (server review has no platform fallback to absorb the verdict).`);
+            }
             const imagePaths = await this.imagePathsForDispatch(runner, task, phase);
             prompt = buildPromptInline({
                 task,
@@ -2587,9 +2699,9 @@ export class AgentManager {
                 agent,
                 worktreePath,
                 skillRegistry: this.skillRegistry,
+                hasQaPartner,
                 ...(promptSignalToken ? { signalToken: promptSignalToken } : {}),
                 ...(promptSpecRound !== undefined ? { currentSpecRound: promptSpecRound } : {}),
-                ...(opts.specFindings ? { specFindings: opts.specFindings } : {}),
                 ...(reuseInjectedSkills ? { excludeSkills: reuseInjectedSkills } : {}),
                 ...(imagePaths.length ? { imagePaths } : {}),
                 ...(opts.serverContent !== undefined ? { serverContent: opts.serverContent } : {}),
@@ -2702,7 +2814,7 @@ export class AgentManager {
             }
             // dedup baseline 记录的是「已 paste 进 idle composer 的 skill 文本」：paste 落入 composer 即进
             // REPL 上下文，与 submit-ack 无关。ack 超时（首个 Enter 被吞）下 skill 仍在 composer，跳过落盘会让
-            // 下一轮整组重注入——正是 task-071 的 SKILLS 重复注入。但 composerDelivered=false（paste 时 pane
+            // 下一轮整组重注入——即 SKILLS 重复注入。但 composerDelivered=false（paste 时 pane
             // 已 busy，文本进了运行中输入流而非 composer）则不能落盘，否则恢复提示会缺必需 skill。freshRuntime
             // 负责 REPL 真正重启时作废 baseline。
             if (ack.composerDelivered) {
@@ -2762,7 +2874,27 @@ export class AgentManager {
             throw err;
         }
     }
-    async injectAndAwaitAck(tmux, paneId, prompt, agentId, _runtime) {
+    // 注入方必须持有 pane 互斥：compact 侧的快照校验关不死「校验→按键」
+    // 之间的 async 边界，竞态只能在这里关死。
+    async injectAndAwaitAck(tmux, paneId, prompt, agentId, runtime) {
+        const before = await this.agentStore.get(agentId);
+        await this.acquireCompactGuard(agentId);
+        try {
+            // guard 等待期间任务可能被 Cancel（释放绑定）或会话重建；过期派发
+            // 决不落 pane。无快照（direct 调用）时跳过——真实派发必有绑定。
+            if (before) {
+                const now = await this.agentStore.get(agentId);
+                if (!now || now.paneId !== before.paneId || now.taskId !== before.taskId) {
+                    throw new Error(`dispatch aborted: agent ${agentId} binding changed while waiting for pane mutex`);
+                }
+            }
+            return await this.injectAndAwaitAckSteps(tmux, paneId, prompt, agentId, runtime);
+        }
+        finally {
+            this.compactInFlight.delete(agentId);
+        }
+    }
+    async injectAndAwaitAckSteps(tmux, paneId, prompt, agentId, _runtime) {
         await tmux.injectPrompt(paneId, prompt, agentId);
         let baseline;
         try {
@@ -2812,7 +2944,7 @@ export class AgentManager {
             });
             // "pane already busy at baseline" means the paste landed on an already-running input stream,
             // NOT an idle composer — the skills did NOT become context, so callers must not record them
-            // as injected (codex 3345468647). Any other timeout (idle composer / swallowed Enter) did
+            // as injected. Any other timeout (idle composer / swallowed Enter) did
             // deliver the prompt text into the composer.
             const composerDelivered = !/pane already busy at baseline/.test(message);
             return { acked: false, composerDelivered };
@@ -2935,7 +3067,7 @@ export class AgentManager {
                 && opts.postApproveRedispatchCount > 0
                 && !ensure.freshRuntime;
             // code phase (post spec-approval) flows through here, not startSession — materialize the
-            // task's uploaded images so a fresh code-phase context still sees their paths (task-055).
+            // task's uploaded images so a fresh code-phase context still sees their paths.
             const imagePaths = await this.imagePathsForDispatch(runner, task, phase);
             prompt = buildPromptInline({
                 task,
@@ -2948,7 +3080,6 @@ export class AgentManager {
                     ? { postApproveRedispatchCount: opts.postApproveRedispatchCount }
                     : {}),
                 ...(promptSpecRound !== undefined ? { currentSpecRound: promptSpecRound } : {}),
-                ...(opts.specFindings ? { specFindings: opts.specFindings } : {}),
                 ...(reuseInjectedSkills ? { excludeSkills: reuseInjectedSkills } : {}),
                 ...(imagePaths.length ? { imagePaths } : {}),
                 ...(opts.serverContent !== undefined ? { serverContent: opts.serverContent } : {}),
@@ -3348,7 +3479,7 @@ export class AgentManager {
         let qaToRelease;
         // Server-mode ready gate may have already published remote artifacts
         // (pushed branch / open PR). Capture before flipping to cancelled so the
-        // post-lock cleanup can retire them instead of orphaning (PR #288).
+        // post-lock cleanup can retire them instead of orphaning.
         // mayBeInFlight: approved+marker means the publish prompt may STILL be
         // running — retirement must wait for the dev interrupt or the in-flight
         // push/pr-create would recreate the artifacts right after cleanup.
@@ -3392,7 +3523,7 @@ export class AgentManager {
                 }
             }
             else if (task.status === 'merge-ready' && task.prNumber !== undefined && task.branch && task.agentId) {
-                // GitHub-mode gate cancel leaves the same orphaned PR/branch (PR #288).
+                // GitHub-mode gate cancel leaves the same orphaned PR/branch.
                 publishedCleanup = {
                     afterDone: 'pr',
                     branch: task.branch,
@@ -3478,7 +3609,7 @@ export class AgentManager {
             const project = this.getProjectConfig(result.projectId);
             try {
                 if (publishedCleanup.afterDone === 'pr' && publishedCleanup.prNumber !== undefined && project) {
-                    const close = await this.platformRunner.exec(`gh pr close ${publishedCleanup.prNumber} --repo ${shellQuote(project.repo)} ` +
+                    const close = await this.platformRunner.exec(`gh pr close ${publishedCleanup.prNumber} --repo ${shellQuote(repoSlug(project.repo))} ` +
                         `--comment ${shellQuote('Task cancelled in baxian; closing the published PR.')} --delete-branch`);
                     if (close.exitCode !== 0)
                         throw new Error(close.stderr.trim() || close.stdout.trim());
@@ -3513,7 +3644,7 @@ export class AgentManager {
         }
         return result;
     }
-    // task-044 重构：create-time 不再校验 awaiting_human / creating / bound —— 这些都是"忙"，
+    // create-time 不再校验 awaiting_human / creating / bound —— 这些都是"忙"，
     // 允许入队（落 pending）；可执行性判断下沉到 dispatchPendingTask（或 createTask 已空闲分支）。
     // 仍保留：agent 存在/同 project/role=dev（非空时）+ prompt size 上界。
     async validateTaskDispatch(projectId, input) {
@@ -3776,7 +3907,7 @@ export class AgentManager {
             throw new ApiError(409, `Continue one round is only supported for code-phase tasks`);
         }
         // Server-mode continue: grant one round past the cap, then re-run the server
-        // fix protocol from the stored findings — no PR exists at this point (PR #288).
+        // fix protocol from the stored findings — no PR exists at this point.
         if (task.reviewMode === 'server') {
             if (!task.agentId) {
                 throw new ApiError(400, `Task ${taskId} has no dev agent; cannot continue`);
@@ -3937,7 +4068,7 @@ export class AgentManager {
         }
         // General case: rolled-back task may still want a watcher matching its
         // current (restored) state — develop dispatch still waiting on
-        // spec-created/pr-created, recheck still waiting on verdict, etc.
+        // spec-done/pr-created, recheck still waiting on verdict, etc.
         const restored = await this.taskStore.get(taskId);
         if (!restored || !restored.signalToken)
             return;
@@ -3966,23 +4097,23 @@ export class AgentManager {
         const mode = reviewMode ?? this.config.review.mode ?? 'github';
         return mode === 'server'
             ? ['spec-done', 'code-done']
-            : ['spec-created', 'pr-created'];
+            : ['spec-done', 'pr-created'];
     }
     mapTaskStateToExpectedWatcher(task) {
         if (task.reviewMode === 'server')
             return this.mapServerTaskToExpectedWatcher(task);
         if (task.phase === 'spec' && task.status === 'review' && task.qaAgentId) {
-            return { expectedKinds: ['spec-approved', 'spec-changes-requested'], agentId: task.qaAgentId };
+            return { expectedKinds: ['spec-reviewed'], agentId: task.qaAgentId };
         }
         if (task.phase === 'spec' && task.status === 'fixing' && task.agentId) {
             return { expectedKinds: ['spec-fixed'], agentId: task.agentId };
         }
         if (task.phase !== 'spec' && task.status === 'fixing' && task.agentId) {
-            // Code-track fixing: dev emits pr-fixed when the round is done (task-060).
+            // Code-track fixing: dev emits pr-fixed when the round is done.
             return { expectedKinds: ['pr-fixed'], agentId: task.agentId };
         }
         if (task.phase === undefined && task.status === 'in_progress' && task.agentId) {
-            return { expectedKinds: ['spec-created', 'pr-created'], agentId: task.agentId };
+            return { expectedKinds: ['spec-done', 'pr-created'], agentId: task.agentId };
         }
         if (task.phase === 'code' && task.status === 'in_progress' && task.agentId) {
             return { expectedKinds: ['pr-created'], agentId: task.agentId };
@@ -4064,7 +4195,7 @@ export class AgentManager {
             preferredAgentId: old.preferredAgentId,
         };
         // Retry preserves uploaded images: read the old task's staged bytes up-front
-        // (missing → visible 409 before any new task/binding is created). task-055.
+        // (missing → visible 409 before any new task/binding is created).
         if (old.images?.length) {
             input.images = await this.readStagedImages(old.id, old.images);
         }
@@ -4130,7 +4261,7 @@ export class AgentManager {
         const matchHead = opts.matchHeadSha
             ? ` --match-head-commit ${shellQuote(opts.matchHeadSha)}`
             : '';
-        const result = await this.platformRunner.exec(`gh pr merge ${task.prNumber} --repo ${shellQuote(project.repo)}${matchHead} --squash --delete-branch`);
+        const result = await this.platformRunner.exec(`gh pr merge ${task.prNumber} --repo ${shellQuote(repoSlug(project.repo))}${matchHead} --squash --delete-branch`);
         if (result.exitCode !== 0) {
             throw new Error(`gh pr merge failed for PR #${task.prNumber}: ${result.stderr || result.stdout}`);
         }
@@ -4155,7 +4286,7 @@ export class AgentManager {
         const task = await this.claimCompleteGate(taskId, ['max_rounds', 'approved']);
         try {
             // Server-mode publish retry: a failed afterDone dispatch leaves the task
-            // 'approved' with dev released — mark-complete re-runs the publish (PR #288).
+            // 'approved' with dev released — mark-complete re-runs the publish.
             const serverApprovedRetry = task.status === 'approved' && task.reviewMode === 'server';
             if (!serverApprovedRetry && task.status !== 'max_rounds') {
                 throw new ApiError(409, `Task ${taskId} is not at max_rounds (status=${task.status})`);
@@ -4175,7 +4306,7 @@ export class AgentManager {
                 // publishDispatchedAt persists delivery across restarts: set = the
                 // prompt reached the pane before the restart (still in flight, 409);
                 // cleared = the dispatch failed and this approved state is retryable —
-                // stop the recovered watch and let the retry own the dispatch (PR #288).
+                // stop the recovered watch and let the retry own the dispatch.
                 if (this.phaseSignalWatcher?.expectedKindsFor(taskId).has('code-ready')) {
                     if (!this.phaseSignalWatcher.isRecovered(taskId) || task.publishDispatchedAt) {
                         throw new ApiError(409, `Task ${taskId} publish is in flight; retry only after it fails`);
@@ -4195,13 +4326,13 @@ export class AgentManager {
                 return (await this.taskStore.get(taskId));
             }
             // Server-mode capped task, human accepts as-is: no PR exists yet — run the
-            // afterDone flow (or finish directly) instead of the legacy PR merge (PR #288).
+            // afterDone flow (or finish directly) instead of the legacy PR merge.
             // Inside the in-flight claim so a concurrent Continue can't act on the same
             // max_rounds snapshot and release dev mid-publish.
             if (task.reviewMode === 'server') {
                 // Max_rounds never routed an approve verdict — snapshot afterDone NOW so
                 // the eventual ready-confirm uses this decision, not future hot config.
-                const afterDone = this.config.review.afterDone ?? null;
+                const afterDone = this.coerceAfterDone(task.projectId, this.config.review.afterDone);
                 await this.updateTask(taskId, { afterDone });
                 if (afterDone === null) {
                     const done = await this.transitionTaskStatus(taskId, 'done', { fromStatus: ['max_rounds'] });
@@ -4416,6 +4547,28 @@ export class AgentManager {
         }
     }
     async runPostMergeCompaction(tmux, paneId, agentId, originalTaskId, runtime, prompt) {
+        // 等待获取（而非无条件 add）：手动 compact 持锁时直接进入会并发注入，
+        // 且 finally 会误删对方的 guard 放穿后续请求。
+        await this.acquireCompactGuard(agentId);
+        try {
+            await this.runPostMergeCompactionSteps(tmux, paneId, agentId, originalTaskId, runtime, prompt);
+        }
+        finally {
+            this.compactInFlight.delete(agentId);
+        }
+    }
+    async acquireCompactGuard(agentId) {
+        while (!this.tryAcquireCompactGuard(agentId)) {
+            await new Promise(r => setTimeout(r, this.compactIdlePollMs));
+        }
+    }
+    tryAcquireCompactGuard(agentId) {
+        if (this.compactInFlight.has(agentId))
+            return false;
+        this.compactInFlight.add(agentId);
+        return true;
+    }
+    async runPostMergeCompactionSteps(tmux, paneId, agentId, originalTaskId, runtime, prompt) {
         const bindingStillOurs = async () => {
             const s = await this.agentStore.get(agentId);
             return !!s && s.taskId === originalTaskId && s.paneId === paneId;
@@ -4488,12 +4641,6 @@ export class AgentManager {
     stopPhaseSignalWatcher(taskId) {
         this.phaseSignalWatcher?.stop(taskId);
     }
-    // Backwards-compat alias for spec-only call sites (recovery, transitions
-    // that already named the kind). New callers should use setupPhaseSignalWatcher
-    // directly with the right expectedKinds.
-    stopSpecSignalWatcher(taskId) {
-        this.stopPhaseSignalWatcher(taskId);
-    }
     // Prompt build (via task.signalToken) and watcher must share the same token.
     // Returns whether dispatch may safely proceed. False ONLY when a configured watcher failed
     // to arm — the dangerous case where a same-identity verdict would have no consumer. When no
@@ -4513,9 +4660,6 @@ export class AgentManager {
                 expectedKinds,
                 token,
                 skipSnapshot,
-                // Mode routing rides every arm automatically: the snapshot lives on the
-                // task, so github-mode tasks keep their legacy event types untouched.
-                reviewMode: task.reviewMode ?? 'github',
                 ...(onReadFile ? { onReadFile } : {}),
             });
         }
@@ -4580,358 +4724,6 @@ export class AgentManager {
         if (mapped)
             await this.setupPhaseSignal(taskId, mapped.agentId, mapped.expectedKinds);
     }
-    async readSpecReviewFile(taskId, fileName) {
-        const task = await this.taskStore.get(taskId);
-        if (!task)
-            return null;
-        if (!task.branch) {
-            throw new Error(`readSpecReviewFile: task ${taskId} has no branch`);
-        }
-        const project = this.getProjectConfig(task.projectId);
-        if (!project) {
-            throw new Error(`readSpecReviewFile: unknown project ${task.projectId}`);
-        }
-        const dev = this.getAgentConfig(task.agentId);
-        if (!dev) {
-            throw new Error(`readSpecReviewFile: task ${taskId} has no dev agent bound`);
-        }
-        const runner = this.createRunnerFor(dev);
-        const store = this.createRepoStore(dev, project, runner);
-        const workdir = await this.resolveWorkdir(dev, await this.agentStore.get(dev.id))
-            ?? await store.ensure();
-        const filePath = `.baxian/spec-review/${fileName}`;
-        return store.readFileFromBranch(workdir, task.branch, filePath);
-    }
-    async dispatchSpecReviewToQa(taskId) {
-        // Phase 1 (lock): validate + decide qa + compute newToken/newRound (无 mutation, 无 park)。
-        // 关键约束：task 不能在 startSession 之前被改 — startSession 内部调用
-        // buildPromptInline，prompt 必须看到的是新 token 和新 round；这里只 *计算*，
-        // 真正写回 task 放到 Phase 3。
-        const claim = await this.withTaskLock(async () => {
-            const task = await this.taskStore.get(taskId);
-            if (!task)
-                throw new Error(`dispatchSpecReviewToQa: task ${taskId} not found`);
-            if (!task.branch)
-                throw new Error(`dispatchSpecReviewToQa: task ${taskId} has no branch`);
-            // Stale spec-created guard: 一旦 task 离开 pre-spec 阶段 (phase='code' 或其他
-            // 非 'spec'/undefined 值)，迟到的 spec-created signal 不应再 dispatch review。
-            // 允许 phase==='spec' 是预留 dev 在 fix-complete 后再 emit spec-created 的扩展点。
-            if (task.phase !== undefined && task.phase !== 'spec') {
-                await this.safeEmit({
-                    id: '',
-                    type: 'human.intervention',
-                    timestamp: new Date().toISOString(),
-                    projectId: task.projectId,
-                    agentId: task.agentId,
-                    taskId,
-                    data: { phase: 'spec-created-stale-after-code', taskPhase: task.phase },
-                });
-                return null;
-            }
-            const qa = this.findQaPartner(task.agentId);
-            if (!qa) {
-                await this.safeEmit({
-                    id: '',
-                    type: 'human.intervention',
-                    timestamp: new Date().toISOString(),
-                    projectId: task.projectId,
-                    agentId: task.agentId,
-                    taskId,
-                    data: { phase: 'spec-review-no-qa-partner', devAgentId: task.agentId },
-                });
-                return null;
-            }
-            // 记录入口 status — fix-then-review 重派 (fromStatus 含 'fixing') 时,
-            // spawn 失败 rollback 不能无差别回 in_progress；必须回到原 status 以保留 spec phase。
-            // transitionTaskStatus 的 fromStatus 守门已限定为这三种之一; 其他 status 不会走到这里。
-            const isReviewEntry = task.status === 'in_progress'
-                || task.status === 'fixing'
-                || task.status === 'pending';
-            if (!isReviewEntry)
-                return null;
-            return {
-                qaId: qa.id,
-                devAgentId: task.agentId,
-                projectId: task.projectId,
-                newToken: createSignalToken(),
-                newRound: (task.specReviewRound ?? 0) + 1,
-                originalStatus: task.status,
-                // 记录原 spec-created token — pre-spec entry rollback 时 restore,
-                // 让 dev 后续 spec-created signal (with 原 token) 经 handler freshness gate 通过 → auto retry。
-                originalToken: task.signalToken,
-                // 回滚时 restore — round 是 "已完成轮次" 计数, 累计失败不应吃 round 配额。
-                originalRound: task.specReviewRound,
-            };
-        });
-        if (!claim)
-            return null;
-        const { qaId, devAgentId, projectId, newToken, newRound, originalStatus, originalToken, originalRound } = claim;
-        // Phase 2a: 先 acquire QA — 失败时 dev 还未 park，直接 return 即可。
-        const acquired = await this.acquireAgentForTask(qaId, taskId, 'spec-review');
-        if (!acquired) {
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: qaId,
-                taskId,
-                data: { phase: 'spec-review-qa-acquire-failed', qaAgentId: qaId },
-            });
-            return null;
-        }
-        // Phase 2b: dev gate — park dev so it stops editing the spec while QA reviews。
-        // 顺序在 acquireQA 之后：避免 QA 失败时 dev 已 parked 但 task 仍 in_progress，
-        // 无任何后续 dispatch 把 dev 拉出 waiting (即 dev 永久挂起)。
-        if (devAgentId) {
-            const devOk = await this.markAgentWaiting(devAgentId, taskId);
-            if (!devOk) {
-                await this.releaseAgentForTask(qaId, taskId, 'idle')
-                    .catch(() => undefined);
-                await this.safeEmit({
-                    id: '',
-                    type: 'human.intervention',
-                    timestamp: new Date().toISOString(),
-                    projectId,
-                    agentId: devAgentId,
-                    taskId,
-                    data: { phase: 'spec-review-dev-park-failed', devAgentId },
-                });
-                return null;
-            }
-        }
-        // Phase 2c (lock): atomic transition + persist newToken/newRound/phase/qaAgentId.
-        // 必须在 startSession 之前；若顺序反过来，startSession 之后崩溃但 transition 没做时，
-        // setupRecoveredSpecSignals 会读旧 status/token 推断错 kind/token，新 signal 无法匹配 → 链路死。
-        const transition = await this.transitionTaskStatus(taskId, 'review', { fromStatus: ['in_progress', 'fixing', 'pending'] }, {
-            specReviewRound: newRound,
-            signalToken: newToken,
-            phase: 'spec',
-            qaAgentId: qaId,
-        });
-        if (!transition) {
-            await this.releaseAgentForTask(qaId, taskId, 'idle')
-                .catch(() => undefined);
-            // 不 re-acquire dev: markAgentWaiting (mode='waiting') 仅 bump updatedAt,
-            // dev 仍 bound 到 task; develop phase 不在 reentry 集合, 重 acquire 必返回 false (dead code)。
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: qaId,
-                taskId,
-                data: { phase: 'spec-review-transition-failed', qaAgentId: qaId },
-            });
-            return null;
-        }
-        // Phase 2d: startSession 用显式 newToken/newRound 透传到 prompt。
-        // 失败时回滚 transition + 清新 persist 字段，避免 task 留在 review 但 qa 无 session 的 stuck。
-        // 不调 acquireAgentForTask(dev, 'develop')：markAgentWaiting 走 mode='waiting' 仅 bump updatedAt
-        // (不清 binding 也不真正 park REPL)，dev 仍 bound 到 task；且 develop phase 不在
-        // canDispatchWithBinding 的 reentry 集合，重 acquire 必返回 false — 是 dead code。
-        let started = false;
-        try {
-            started = await this.startSession(taskId, qaId, 'spec-review', {
-                bypassTaskStatusGate: true,
-                signalToken: newToken,
-                currentSpecRound: newRound,
-            });
-        }
-        catch (err) {
-            // DispatchTerminalError 都委托给 failTaskForDispatchError：ack_unknown 会保留绑定走
-            // markAwaitingHuman，其他 reason（prompt_too_large 等非 transient）让 task 进 failed
-            // 而不是 rollback 让 cron 反复 retry。其他异常（瞬时 / 不明）才走 rollback + release。
-            if (err instanceof DispatchTerminalError) {
-                await this.failTaskForDispatchError(taskId, 'spec-review', qaId, err);
-            }
-            else if (err instanceof EnsureSessionError && err.partial.handled) {
-                // handleDialogPendingFromRuntime 已 Held + fail task + release partners；跳过 rollback + release，
-                // 否则 boundTask terminal 让 release gate 放行清掉仍卡 dialog 的 pane lock。
-            }
-            else {
-                await this.rollbackSpecReviewTransition(taskId, originalStatus, originalToken, originalRound);
-                await this.releaseAgentForTask(qaId, taskId, 'idle')
-                    .catch(() => undefined);
-            }
-            throw err;
-        }
-        if (!started) {
-            await this.rollbackSpecReviewTransition(taskId, originalStatus, originalToken, originalRound);
-            await this.releaseAgentForTask(qaId, taskId, 'idle')
-                .catch(() => undefined);
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: qaId,
-                taskId,
-                data: { phase: 'spec-review-start-failed', qaAgentId: qaId },
-            });
-            return null;
-        }
-        // Phase 3: set up watcher。spec-created 已被消费，先 tear down 防止 dev 之后无关 signal 误触发。
-        // QA echoes exactly one verdict signal — set up both kinds, the first match wins.
-        this.stopSpecSignalWatcher(taskId);
-        await this.armPostDispatchSignalOrHold(taskId, qaId, ['spec-approved', 'spec-changes-requested'], newToken);
-        return await this.taskStore.get(taskId);
-    }
-    // startSession 失败回滚：
-    // - pre-spec entry: restore originalToken 让 dev 后续 spec-created signal 经 freshness gate 通过 → auto retry。
-    // - fixing entry: 保留 phase='spec' + qaAgentId（否则 spec.* freshness gate 全 fail），清 token 防 stale。
-    // round 必须 restore — round 是 "已完成轮次" 计数, 累计失败不应吃 round 配额。
-    async rollbackSpecReviewTransition(taskId, originalStatus, originalToken, originalRound) {
-        if (originalStatus === 'fixing') {
-            await this.transitionTaskStatus(taskId, 'fixing', { fromStatus: ['review'] }, { signalToken: undefined, specReviewRound: originalRound });
-            return;
-        }
-        await this.transitionTaskStatus(taskId, originalStatus, { fromStatus: ['review'] }, {
-            signalToken: originalToken,
-            phase: undefined,
-            qaAgentId: undefined,
-            specReviewRound: originalRound,
-        });
-    }
-    async dispatchSpecFixToDev(taskId, findings) {
-        // Phase 1 (lock): validate + phase guard + decide newToken。
-        // fix 是同 round 的 dev 处理 QA findings，round 不递增；只刷新 token 让 prompt + watcher 唯一识别本轮 fix。
-        const claim = await this.withTaskLock(async () => {
-            const task = await this.taskStore.get(taskId);
-            if (!task)
-                throw new Error(`dispatchSpecFixToDev: task ${taskId} not found`);
-            const devAgentId = task.agentId;
-            if (!devAgentId) {
-                throw new Error(`dispatchSpecFixToDev: task ${taskId} has no dev agent`);
-            }
-            // 离开 spec 阶段的 task 不应再被 spec-fix dispatch 击中 (defense in depth — handler 也 gate)。
-            if (task.phase !== 'spec') {
-                await this.safeEmit({
-                    id: '',
-                    type: 'human.intervention',
-                    timestamp: new Date().toISOString(),
-                    projectId: task.projectId,
-                    agentId: devAgentId,
-                    taskId,
-                    data: { phase: 'spec-fix-stale-phase', taskPhase: task.phase },
-                });
-                return null;
-            }
-            return {
-                devAgentId,
-                qaAgentId: task.qaAgentId,
-                projectId: task.projectId,
-                newToken: createSignalToken(),
-                currentRound: task.specReviewRound ?? 1,
-            };
-        });
-        if (!claim)
-            return null;
-        const { devAgentId, qaAgentId, projectId, newToken, currentRound } = claim;
-        if (qaAgentId) {
-            // release 失败留 stale qa binding，下一轮 acquireAgentForTask(qa) 必拒；abort + emit intervention。
-            const released = await this.releaseAgentForTask(qaAgentId, taskId, 'idle')
-                .catch(err => {
-                console.warn(`[AgentManager] dispatchSpecFixToDev release qa=${qaAgentId} failed:`, err);
-                return false;
-            });
-            if (!released) {
-                await this.safeEmit({
-                    id: '',
-                    type: 'human.intervention',
-                    timestamp: new Date().toISOString(),
-                    projectId,
-                    agentId: qaAgentId,
-                    taskId,
-                    data: { phase: 'spec-fix-qa-release-failed', qaAgentId },
-                });
-                return null;
-            }
-        }
-        // Phase 2a: acquire dev。
-        const acquired = await this.acquireAgentForTask(devAgentId, taskId, 'spec-fix');
-        if (!acquired) {
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: devAgentId,
-                taskId,
-                data: { phase: 'spec-fix-dev-acquire-failed', devAgentId },
-            });
-            return null;
-        }
-        // Phase 2b (lock): atomic transition + persist newToken/phase。
-        // 必须在 continueSession 之前；否则崩溃后 setupRecoveredSpecSignals 读旧 token,
-        // 与 dev 输出的 newToken signal 不匹配 → 链路死。
-        const transition = await this.transitionTaskStatus(taskId, 'fixing', { fromStatus: ['review'] }, { signalToken: newToken, phase: 'spec' });
-        if (!transition) {
-            await this.releaseAgentForTask(devAgentId, taskId, 'idle')
-                .catch(() => undefined);
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: devAgentId,
-                taskId,
-                data: { phase: 'spec-fix-transition-failed', devAgentId },
-            });
-            return null;
-        }
-        // Phase 2c: continueSession 透传 newToken + currentRound 给 prompt。
-        // 失败时回滚 transition + 清新 token，避免 task 留在 fixing 但 dev 无 spec-fix prompt 的 stuck。
-        let resumed = false;
-        try {
-            resumed = await this.continueSession(taskId, devAgentId, 'spec-fix', {
-                specFindings: findings,
-                signalToken: newToken,
-                currentSpecRound: currentRound,
-                bypassTaskStatusGate: true,
-            });
-        }
-        catch (err) {
-            // 同 spec-review：DispatchTerminalError 走 failTaskForDispatchError 统一处理
-            // （ack_unknown → markAwaitingHuman，其他 reason → release + task failed）。
-            if (err instanceof DispatchTerminalError) {
-                await this.failTaskForDispatchError(taskId, 'spec-fix', devAgentId, err);
-            }
-            else if (err instanceof EnsureSessionError && err.partial.handled) {
-                // handleDialogPendingFromRuntime 已 Held + fail task + release partners；跳过 rollback + release。
-            }
-            else {
-                await this.rollbackSpecFixTransition(taskId);
-                await this.releaseAgentForTask(devAgentId, taskId, 'idle')
-                    .catch(() => undefined);
-            }
-            console.error(`[AgentManager] dispatchSpecFixToDev continueSession(dev=${devAgentId}) failed:`, err);
-            throw err;
-        }
-        if (!resumed) {
-            await this.rollbackSpecFixTransition(taskId);
-            await this.releaseAgentForTask(devAgentId, taskId, 'idle')
-                .catch(() => undefined);
-            await this.safeEmit({
-                id: '',
-                type: 'human.intervention',
-                timestamp: new Date().toISOString(),
-                projectId,
-                agentId: devAgentId,
-                taskId,
-                data: { phase: 'spec-fix-resume-failed', devAgentId },
-            });
-            return null;
-        }
-        // Phase 3: set up watcher。
-        await this.armPostDispatchSignalOrHold(taskId, devAgentId, 'spec-fixed', newToken);
-        return await this.taskStore.get(taskId);
-    }
-    // continueSession 失败回滚：fixing → review + 清新 token。
-    // 保留 phase='spec' 与 qaAgentId — 失败后 review 状态需要人工 retry 或重新 dispatch。
-    async rollbackSpecFixTransition(taskId) {
-        await this.transitionTaskStatus(taskId, 'review', { fromStatus: ['fixing'] }, { signalToken: undefined });
-    }
     async transitionToCodePhase(taskId) {
         const task = await this.taskStore.get(taskId);
         if (!task)
@@ -5000,7 +4792,7 @@ export class AgentManager {
             resumed = await this.continueSession(taskId, devAgentId, 'code');
         }
         catch (err) {
-            // 同 spec-review/spec-fix：DispatchTerminalError 委托给 failTaskForDispatchError
+            // 同 dispatchServerReviewToQa/dispatchServerFixToDev：DispatchTerminalError 委托给 failTaskForDispatchError
             // （ack_unknown → markAwaitingHuman；其他 reason → release + task failed）。
             if (err instanceof DispatchTerminalError) {
                 await this.failTaskForDispatchError(taskId, 'code', devAgentId, err);
@@ -5038,7 +4830,8 @@ export class AgentManager {
             const task = await this.taskStore.get(taskId);
             if (!task)
                 throw new Error(`dispatchServerReviewToQa: task ${taskId} not found`);
-            if (task.reviewMode !== 'server') {
+            // spec 阶段恒为 server 中转；code 阶段仍 server-only。
+            if (task.reviewMode !== 'server' && opts.phase !== 'spec') {
                 throw new Error(`dispatchServerReviewToQa: task ${taskId} is not in server review mode`);
             }
             const qaId = task.qaAgentId ?? this.findQaPartner(task.agentId)?.id;
@@ -5073,18 +4866,22 @@ export class AgentManager {
                 originalRound: roundField,
                 originalBatchIndex: task.batchIndex,
                 originalBatchTotal: task.batchTotal,
+                originalPhase: task.phase,
             };
         });
         if (!claim)
             return null;
         const { qaId, devAgentId, projectId, newToken, newRound } = claim;
         // continueSession failure after the transition would otherwise strand the
-        // task in 'review' with a fresh token nobody will ever signal (PR #288).
+        // task in 'review' with a fresh token nobody will ever signal.
         const rollback = async () => {
             await this.transitionTaskStatus(taskId, claim.originalStatus, { fromStatus: ['review'] }, {
                 signalToken: claim.originalToken,
                 batchIndex: claim.originalBatchIndex,
                 batchTotal: claim.originalBatchTotal,
+                // spec transition 写入 phase:'spec'；github 首轮失败若不还原，dev 直发
+                // pr-created 会被 legacy freshness gate 拒（设计 §2）。
+                phase: claim.originalPhase,
                 ...(opts.phase === 'spec'
                     ? { specReviewRound: claim.originalRound }
                     : { reviewRound: claim.originalRound }),
@@ -5093,7 +4890,7 @@ export class AgentManager {
         // The entry signal (code/spec-done|fixed) was already consumed by the
         // watcher; a pre-transition failure must re-arm it with the unrotated token
         // or the agent's re-emit after the operator fixes availability has no
-        // consumer (PR #288).
+        // consumer.
         const rearmEntrySignal = async () => {
             const entryKind = claim.originalStatus === 'fixing'
                 ? (opts.phase === 'spec' ? 'spec-fixed' : 'code-fixed')
@@ -5177,7 +4974,7 @@ export class AgentManager {
         // A continuation consumed the QA's reviewed signal (not the dev's entry
         // signal): rollback restores the prior slice's review/token, so re-arm the
         // reviewed watcher — the QA's re-emit replays the stored batch findings and
-        // resumes the next-slice dispatch (PR #288).
+        // resumes the next-slice dispatch.
         const rearmConsumedSignal = async () => {
             if (opts.continuation) {
                 await this.setupPhaseSignal(taskId, qaId, expectedKind, { skipSnapshot: true });
@@ -5234,7 +5031,7 @@ export class AgentManager {
             const task = await this.taskStore.get(taskId);
             if (!task)
                 throw new Error(`dispatchServerFixToDev: task ${taskId} not found`);
-            if (task.reviewMode !== 'server') {
+            if (task.reviewMode !== 'server' && task.phase !== 'spec') {
                 throw new Error(`dispatchServerFixToDev: task ${taskId} is not in server review mode`);
             }
             if (!task.agentId)
@@ -5247,7 +5044,7 @@ export class AgentManager {
                 taskPhase: (task.phase ?? 'code'),
                 currentSpecRound: task.specReviewRound,
                 // Continue-one-round enters from max_rounds — failure must restore THAT,
-                // not silently demote the human's pause decision to 'review' (PR #288).
+                // not silently demote the human's pause decision to 'review'.
                 originalStatus: task.status,
                 originalToken: task.signalToken,
             };
@@ -5343,7 +5140,7 @@ export class AgentManager {
                 await this.releaseAgentForTask(devAgentId, taskId, 'idle').catch(() => undefined);
                 // Rollback restored review/old-token, but the QA's reviewed signal was
                 // consumed — without a subscriber its re-emit can never retry the fix
-                // dispatch (PR #288).
+                // dispatch.
                 await rearmReviewedSignal();
             }
             throw err;
@@ -5379,7 +5176,7 @@ export class AgentManager {
         await this.updateTask(taskId, { signalToken: newToken });
         // The publish prompt never reached the pane — restore the pre-rotation token
         // (so recovery still matches the pre-dispatch arm) and clear the delivery
-        // marker so retry knows this approved state is preemptible (PR #288).
+        // marker so retry knows this approved state is preemptible.
         const rollbackToken = async () => {
             await this.updateTask(taskId, { signalToken: originalToken, publishDispatchedAt: undefined })
                 .catch(() => undefined);
@@ -5402,7 +5199,7 @@ export class AgentManager {
         // path below clears it. The remaining crash window (marker written, paste
         // never ran) fails CLOSED — retry 409s on a publish that never started and
         // the operator escapes via Cancel — instead of the old window's fail-open
-        // double publish (paste ran, marker missing, retry re-pastes) (PR #288).
+        // double publish (paste ran, marker missing, retry re-pastes).
         await this.updateTask(taskId, { publishDispatchedAt: new Date().toISOString() });
         let resumed = false;
         try {
@@ -5470,24 +5267,34 @@ export class AgentManager {
             return;
         }
         try {
-            await this.injectTextToAgent(qaAgentId, body);
+            await this.injectTextToAgent(qaAgentId, body, { expectedTaskId: taskId });
         }
         catch (err) {
             console.warn(`[AgentManager] read-file injection to ${qaAgentId} failed:`, err);
         }
     }
     // Plain text paste + submit into a live agent pane (no skills, no ack protocol).
-    async injectTextToAgent(agentId, text) {
+    async injectTextToAgent(agentId, text, opts = {}) {
         const cfg = this.getAgentConfig(agentId);
         if (!cfg)
             throw new Error(`injectTextToAgent: unknown agent ${agentId}`);
-        const state = await this.agentStore.get(agentId);
-        const paneId = state?.paneId;
-        if (!paneId)
-            throw new Error(`injectTextToAgent: agent ${agentId} has no live pane`);
-        const tmux = new TmuxManager(this.createRunnerFor(cfg));
-        await tmux.injectPrompt(paneId, text, agentId);
-        await tmux.sendEnter(paneId);
+        await this.acquireCompactGuard(agentId);
+        try {
+            // 锁内重读：guard 等待期间绑定可能已易主，过期文本决不落 pane。
+            const state = await this.agentStore.get(agentId);
+            if (opts.expectedTaskId !== undefined && state?.taskId !== opts.expectedTaskId) {
+                throw new Error(`injectTextToAgent: agent ${agentId} no longer bound to ${opts.expectedTaskId}`);
+            }
+            const paneId = state?.paneId;
+            if (!paneId)
+                throw new Error(`injectTextToAgent: agent ${agentId} has no live pane`);
+            const tmux = new TmuxManager(this.createRunnerFor(cfg));
+            await tmux.injectPrompt(paneId, text, agentId);
+            await tmux.sendEnter(paneId);
+        }
+        finally {
+            this.compactInFlight.delete(agentId);
+        }
     }
     // Human gate confirm (spec §10): executes the configured completion for
     // ready (server mode) / merge-ready (github mode) tasks.
@@ -5500,7 +5307,7 @@ export class AgentManager {
             const project = this.getProjectConfig(task.projectId);
             const mergeAuto = project?.merge === 'auto';
             // Snapshot from verdict time — a hot config flip between publish and
-            // confirm must not reroute an already-published artifact (PR #288).
+            // confirm must not reroute an already-published artifact.
             const afterDone = this.resolveAfterDone(task);
             if (task.status === 'merge-ready') {
                 if (mergeAuto && task.prNumber) {
@@ -5579,7 +5386,7 @@ export class AgentManager {
     }
     // Merge failures keep the gate: transient gh/network errors retry via another
     // Confirm, a stale head resolves via Cancel or an external decision — terminal
-    // 'failed' would orphan the published PR/branch outside the task flow (PR #288).
+    // 'failed' would orphan the published PR/branch outside the task flow.
     async executeConfirmMerge(task, merge) {
         try {
             await merge();
@@ -5650,7 +5457,7 @@ export class AgentManager {
             const defaultBranch = db.stdout.trim().replace(/^origin\//, '');
             if (db.exitCode !== 0 || defaultBranch === '') {
                 // A silent 'main' fallback would push the reviewed branch onto the wrong
-                // ref for repos whose default branch differs (PR #288).
+                // ref for repos whose default branch differs.
                 throw new Error(`ffMergeBranch: cannot resolve default branch: ${db.stderr.trim() || 'empty origin/HEAD'}`);
             }
             const fetch = await runner.exec(`${cd}git fetch origin`);
@@ -5658,7 +5465,7 @@ export class AgentManager {
                 throw new Error(`ffMergeBranch [git fetch] failed: ${fetch.stderr.trim()}`);
             }
             // Reviewed-head guard (branch path): refuse if origin/<branch> moved after
-            // the gate — symmetric with the pr path's --match-head-commit (PR #288).
+            // the gate — symmetric with the pr path's --match-head-commit.
             if (task.latestHeadSha) {
                 const remoteHead = await runner.exec(`${cd}git rev-parse ${shellQuote(`origin/${branch}`)}`);
                 if (remoteHead.exitCode !== 0 || remoteHead.stdout.trim() !== task.latestHeadSha) {
@@ -5674,7 +5481,7 @@ export class AgentManager {
                 throw new Error(`ffMergeBranch [push] failed: ${push.stderr.trim() || push.stdout.trim()}`);
             }
             // The merge has landed; branch deletion is cleanup — a transient failure
-            // here must not flip an already-merged task to failed (PR #288).
+            // here must not flip an already-merged task to failed.
             const del = await runner.exec(`${cd}git push origin --delete ${shellQuote(branch)}`);
             if (del.exitCode !== 0) {
                 console.warn(`[AgentManager] ffMergeBranch: post-merge branch delete failed for ${branch}: ${del.stderr.trim() || del.stdout.trim()}`);