claude-code-session-manager 0.75.1 → 0.75.3

package/src/main/__tests__/scheduler-clear-queue-history.test.cjs

@@ -0,0 +1,134 @@
+/**
+ * scheduler-clear-queue-history.test.cjs — schedule:clear-queue must never
+ * drop a job row with zero audit trail. Before this PRD, the handler did
+ * `s.jobs = s.jobs.filter(...)` straight over every non-running victim with
+ * no history.jsonl write at all — a queue row (e.g. the 2026-08-30 sigma
+ * `788-pr-sweep-final-gate` incident) could vanish leaving no trace anywhere.
+ *
+ * Exercises `applyClearQueueVictims` (the core mutation extracted from the
+ * `schedule:clear-queue` IPC handler so it's testable without ipcMain/
+ * electron) directly against a synthetic state, then feeds its output
+ * through the REAL `queueHistory.appendHistory`. Job fixtures carry a real
+ * absolute `cwd` under a per-test mkdtemp dir (never the live operations
+ * root) because appendHistory routes each entry to its OWN project's
+ * `<cwd>/session-manager-operations/scheduler/state/history.jsonl` shard
+ * whenever the entry has a `cwd` — SM_HISTORY_PATH_OVERRIDE only affects
+ * cwd-less entries, and the AC here requires every entry to carry a cwd.
+ *
+ * Run: timeout 120 npx vitest run src/main/__tests__/scheduler-clear-queue-history.test.cjs
+ */
+
+'use strict';
+
+import { test, expect, beforeEach, afterEach } from 'vitest';
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const queueHistory = require('../lib/queueHistory.cjs');
+const { projectHistoryPath } = require('../lib/queueStore.cjs');
+const scheduler = require('../scheduler.cjs');
+
+let tmpCwd;
+
+beforeEach(() => {
+  tmpCwd = fs.mkdtempSync(path.join(os.tmpdir(), 'sm-clear-queue-history-'));
+});
+
+afterEach(() => {
+  fs.rmSync(tmpCwd, { recursive: true, force: true });
+});
+
+function pendingJob(slug, overrides = {}) {
+  return { slug, cwd: tmpCwd, status: 'pending', runId: null, finishedAt: null, ...overrides };
+}
+
+function historyPath() {
+  return projectHistoryPath(tmpCwd);
+}
+
+function readHistoryRows() {
+  const text = fs.readFileSync(historyPath(), 'utf8').trim();
+  return text ? text.split('\n').map((l) => JSON.parse(l)) : [];
+}
+
+test('applyClearQueueVictims transitions N pending jobs to skipped, drops them from state.jobs, and appendHistory writes N rows with source clear-queue', async () => {
+  const jobs = [pendingJob('101-a'), pendingJob('102-b'), pendingJob('103-c')];
+  const running = { slug: '104-running', cwd: tmpCwd, status: 'running', runId: 'run-104', finishedAt: null };
+  const state = { jobs: [...jobs, running] };
+  const victimSlugs = new Set(jobs.map((j) => j.slug));
+  const archiveNoteBySlug = new Map(jobs.map((j) => [j.slug, 'PRD file archived to /fake/archive/dir']));
+
+  const historyEntries = scheduler.applyClearQueueVictims(state, victimSlugs, archiveNoteBySlug, '/fake/archive/dir');
+
+  // Running job is untouched, exempt from clear-queue, and got no history row.
+  expect(state.jobs.map((j) => j.slug)).toEqual(['104-running']);
+  expect(historyEntries.map((e) => e.slug).sort()).toEqual(['101-a', '102-b', '103-c']);
+  for (const entry of historyEntries) {
+    expect(entry.status).toBe('skipped'); // NEVER 'completed' — a manually cleared job did not ship
+    expect(entry.cwd).toBe(tmpCwd);
+    expect(entry.finishedAt).toBeTruthy();
+    const last = entry.statusHistory[entry.statusHistory.length - 1];
+    expect(last.source).toBe('clear-queue');
+    expect(last.reason).toContain('/fake/archive/dir');
+  }
+
+  const { appended } = await queueHistory.appendHistory(historyEntries);
+  expect(appended).toBe(3);
+  const onDisk = readHistoryRows();
+  expect(onDisk.length).toBe(3);
+  expect(onDisk.every((e) => e.status === 'skipped')).toBe(true);
+  expect(onDisk.every((e) => e.statusHistory.at(-1).source === 'clear-queue')).toBe(true);
+
+  // queue.json (state.jobs, what writeQueue serializes) no longer lists them.
+  expect(state.jobs.some((j) => victimSlugs.has(j.slug))).toBe(false);
+});
+
+test('running jobs are exempt from clear-queue and never appear in the returned history entries', () => {
+  const running = { slug: '201-running', cwd: tmpCwd, status: 'running', runId: 'run-201', finishedAt: null };
+  const state = { jobs: [running] };
+  const victimSlugs = new Set(); // schedule:clear-queue never includes running jobs as victims
+
+  const historyEntries = scheduler.applyClearQueueVictims(state, victimSlugs, new Map(), '/fake/archive/dir');
+
+  expect(historyEntries).toEqual([]);
+  expect(state.jobs).toEqual([running]);
+});
+
+test('a victim already terminal (completed) keeps its real status, not skipped, but still gets a clear-queue history row', () => {
+  const completed = { slug: '301-done', cwd: tmpCwd, status: 'completed', runId: 'run-301', finishedAt: '2026-08-29T00:00:00.000Z', statusHistory: [] };
+  const state = { jobs: [completed] };
+  const victimSlugs = new Set(['301-done']);
+
+  const historyEntries = scheduler.applyClearQueueVictims(state, victimSlugs, new Map(), '/fake/archive/dir');
+
+  expect(state.jobs).toEqual([]);
+  expect(historyEntries.length).toBe(1);
+  expect(historyEntries[0].status).toBe('completed'); // real outcome preserved, not overwritten to skipped
+  const last = historyEntries[0].statusHistory.at(-1);
+  expect(last.source).toBe('clear-queue');
+  expect(last.from).toBe('completed');
+  expect(last.to).toBe('completed');
+});
+
+test('appendHistory dedupe: clearing an already-cleared queue twice does not double-write rows', async () => {
+  const jobs = [pendingJob('401-x'), pendingJob('402-y')];
+  const state = { jobs: [...jobs] };
+  const victimSlugs = new Set(jobs.map((j) => j.slug));
+
+  const historyEntries = scheduler.applyClearQueueVictims(state, victimSlugs, new Map(), '/fake/archive/dir');
+  expect(state.jobs).toEqual([]);
+
+  const r1 = await queueHistory.appendHistory(historyEntries);
+  expect(r1.appended).toBe(2);
+
+  // A crash-replay of the SAME batch through appendHistory (the dedupe
+  // queueHistory itself guards against) must not double-write — this is
+  // what protects a second clear-queue pass, or a retry after a crash
+  // between the mutate() and appendHistory calls, from duplicating rows.
+  const r2 = await queueHistory.appendHistory(historyEntries);
+  expect(r2.appended).toBe(0);
+
+  const onDisk = readHistoryRows();
+  expect(onDisk.length).toBe(2);
+});

package/src/main/__tests__/scheduler-prd-missing-skip.test.cjs

@@ -126,7 +126,11 @@ test("spawnJob's post-run handler retires a prd-missing skip as a plain completi
     const state = JSON.parse(fs.readFileSync(queuePath, 'utf8'));
     const row = state.jobs.find((j) => j.slug === slug);
     expect(row).toBeDefined();
-    expect(row.status).toBe('completed');
+    // A 'prd-missing' skip means no executor ever ran — it must land on the
+    // distinct 'skipped' status, never 'completed' (the status a genuine
+    // successful run produces), so unrun work can never masquerade as done.
+    expect(row.status).toBe('skipped');
+    expect(row.status).not.toBe('completed');
     expect(row.exitCode).toBe(0);
     expect(row.error).toBeNull();
     // No verify pass ran and no RCA feedback fired: a verified run always

package/src/main/ipcSchemas.cjs

@@ -369,6 +369,16 @@ const adminListPrdsQuery = z.object({
   cwd: z.string().min(1).max(4096).optional(),
   epicId: z.string().min(1).max(200).optional(),
   status: z.string().min(1).max(40).optional(),
+  // Page size — default 100, hard max 500 so an agent can't accidentally
+  // re-request the full unbounded list (PRD: the 353KB/120s-timeout
+  // incident this pagination exists to fix). Query strings arrive as text,
+  // so these coerce before the int/range checks run.
+  limit: z.coerce.number().int().min(1).max(500).optional().default(100),
+  offset: z.coerce.number().int().min(0).optional().default(0),
+  // 'compact' (default) omits the secondary detail fields (parallelGroup,
+  // estimateMinutes, sourcePromptId, epicId, archivedStatus) that aren't
+  // needed to answer "what PRDs are there"; 'full' restores them.
+  fields: z.enum(['compact', 'full']).optional().default('compact'),
 });
 
 const adminGetPrdQuery = z.object({

package/src/main/lib/__tests__/opsRootAbsoluteCwd.test.cjs

@@ -124,3 +124,54 @@ test('the guards compose: no relative cwd from a transcript can reach an ops-roo
   // And even if one somehow did, the write path itself refuses it.
   expect(() => queueStore.projectStateDir('src/renderer/state')).toThrow(/absolute path/);
 });
+
+// ─── the second incident: an ABSOLUTE cwd INSIDE an ops root ────────────────
+//
+// Reported from starry-night-ships on 2026-08-30: 14 stray
+// `.../session-manager-operations/scheduler/state/queue.json` stubs, each
+// nested under another ops directory (`scheduler/prds/`, `prompt-sessions/`,
+// `scheduler/epics/<id>/prds/`), every one holding `{"jobs": []}` and mtimes
+// spanning 8 days. The 2026-08-13 absolute-path guard above could not catch
+// them: these cwds ARE absolute and DO exist. They came from transcripts
+// where an agent had `cd`'d into the artifact directory it was writing, so
+// the last transcript row recorded that subdirectory as the session cwd.
+
+test('a transcript cwd inside an ops root is normalized to the project root, not taken literally', async () => {
+  const project = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-opsroot-nested-'));
+  tmpDirs.push(project);
+  const prdDir = path.join(project, 'session-manager-operations', 'scheduler', 'epics', 'e-1', 'prds');
+  fs.mkdirSync(prdDir, { recursive: true });
+  const projectsDir = await mkProjectsDir({ nested: prdDir });
+
+  const cwds = activeProjectCwds(Infinity, { projectsDir });
+  expect(cwds).toContain(project);
+  expect(cwds).not.toContain(prdDir);
+});
+
+test('normalization keeps the active-project signal rather than dropping the row', () => {
+  const { projectRootOf } = require('../../../../scripts/lib/activeSessions.cjs');
+  expect(projectRootOf('/p/session-manager-operations/prompt-sessions')).toBe('/p');
+  expect(projectRootOf('/p/session-manager-operations')).toBe('/p');
+  expect(projectRootOf('/p/session-manager-operations/scheduler/state')).toBe('/p');
+  // Already-nested strays truncate at the FIRST segment — the inner one is
+  // itself the bug, never a project.
+  expect(projectRootOf('/p/session-manager-operations/x/session-manager-operations/y')).toBe('/p');
+  // A plain project cwd is untouched.
+  expect(projectRootOf('/p/src/main')).toBe('/p/src/main');
+  // A directory that merely CONTAINS the name as a substring is not a segment.
+  expect(projectRootOf('/p/session-manager-operations-archive')).toBe('/p/session-manager-operations-archive');
+});
+
+test('projectStateDir fails closed on an ops-internal cwd, naming the offending value', () => {
+  expect(() => queueStore.projectStateDir('/p/session-manager-operations/scheduler/prds'))
+    .toThrow(/must be a project root/);
+  expect(() => queueStore.projectStateDir('/p/session-manager-operations/scheduler/prds'))
+    .toThrow(/scheduler\/prds/);
+  // The guard is segment-exact, not a substring match.
+  expect(queueStore.projectStateDir('/p/session-manager-operations-archive'))
+    .toBe(path.join('/p/session-manager-operations-archive', 'session-manager-operations', 'scheduler', 'state'));
+});
+
+// The writeSplit half of this guard lives in opsRootNestedWrite.test.cjs —
+// it must override HOME before requiring queueStore (writeSplit persists
+// machine state to a homedir path), which cannot be done from this file.

package/src/main/lib/__tests__/opsRootNestedWrite.test.cjs

@@ -0,0 +1,51 @@
+/**
+ * opsRootNestedWrite.test.cjs — writeSplit must never materialize a second
+ * ops root beneath the first.
+ *
+ * Companion to opsRootAbsoluteCwd.test.cjs; separate file because HOME must
+ * be overridden BEFORE requiring queueStore — MACHINE_STATE_PATH is baked
+ * into a top-level const from os.homedir() at require time, and writeSplit
+ * writes it on every call. (Learned the hard way: running this assertion in
+ * the shared file overwrote the real ~/.claude/session-manager/
+ * scheduler-machine.json, dropping the user's firePolicy and concurrencyCap.)
+ *
+ * Run: timeout 120 npx vitest run src/main/lib/__tests__/opsRootNestedWrite.test.cjs
+ */
+
+'use strict';
+
+import { test, expect, afterEach } from 'vitest';
+const fs = require('node:fs');
+const fsp = require('node:fs/promises');
+const os = require('node:os');
+const path = require('node:path');
+
+const tmpHome = fs.mkdtempSync(path.join(os.tmpdir(), 'sm-opsroot-home-'));
+process.env.HOME = tmpHome;
+
+const queueStore = require('../queueStore.cjs');
+
+const tmpDirs = [tmpHome];
+afterEach(async () => {
+  while (tmpDirs.length > 1) {
+    await fsp.rm(tmpDirs.pop(), { recursive: true, force: true }).catch(() => {});
+  }
+});
+
+test('one ops-internal cwd in a write batch is skipped without losing the other projects', async () => {
+  const good = await fsp.mkdtemp(path.join(os.tmpdir(), 'sm-opsroot-good-'));
+  tmpDirs.push(good);
+  const bad = path.join(good, 'session-manager-operations', 'scheduler', 'epics', 'e-1', 'prds');
+  fs.mkdirSync(bad, { recursive: true });
+
+  await queueStore.writeSplit({
+    config: {},
+    sourceCwds: [bad, good],
+    jobs: [{ slug: 'keeper', cwd: good }, { slug: 'stray', cwd: bad }],
+  });
+
+  const written = JSON.parse(fs.readFileSync(queueStore.projectQueuePath(good), 'utf8'));
+  expect(written.jobs.map((j) => j.slug)).toEqual(['keeper']);
+  // The doubled-suffix stub the starry-night-ships report was about.
+  expect(fs.existsSync(path.join(bad, 'session-manager-operations'))).toBe(false);
+});

package/src/main/lib/__tests__/schedulerBatchDepends.test.cjs

@@ -93,6 +93,18 @@ test('a FAILED bare-named dep holds the dependent and reports an explicit reason
   assert.match(reason, /874-nav-face-project-home <- leftnav-two-face-framework/);
 });
 
+test('a SKIPPED (never-ran) bare-named dep holds the dependent and reports an explicit reason', () => {
+  const jobs = [
+    job('873-leftnav-two-face-framework', 'skipped'),
+    job('874-nav-face-project-home', 'pending', { dependsOn: ['leftnav-two-face-framework'] }),
+  ];
+  const { batch, reason } = pick(jobs);
+  assert.deepEqual(batch, []);
+  assert.match(reason, /depends-gate/);
+  assert.match(reason, /never-ran dependencies/);
+  assert.match(reason, /874-nav-face-project-home <- leftnav-two-face-framework/);
+});
+
 // ---------------------------------------------------------------------------
 // Parallelism regression coverage.
 //
@@ -209,6 +221,20 @@ test('hold record carries a failed dep status alongside the depends-gate reason'
   ]);
 });
 
+test('hold record carries a skipped dep status alongside the depends-gate reason', () => {
+  const jobs = [
+    job('985-foundation', 'skipped'),
+    job('986-dependent', 'pending', { dependsOn: ['foundation'] }),
+  ];
+  const { batch, reason, holds } = pick(jobs, new Set(), 5);
+  assert.deepEqual(batch, []);
+  assert.match(reason, /depends-gate/);
+  assert.match(reason, /never-ran dependencies/);
+  assert.deepEqual(holds, [
+    { slug: '986-dependent', dep: 'foundation', depStatus: 'skipped' },
+  ]);
+});
+
 test('no holds when nothing is dependency-blocked', () => {
   const jobs = [job('988-a', 'pending'), job('989-b', 'pending')];
   const { batch, holds } = pick(jobs, new Set(), 5);

package/src/main/lib/prdAdminRoutes.cjs

@@ -45,6 +45,16 @@ function parseJsonBody(raw) {
  * scheduler.cjs's own registerAdminRoute(s) pattern.
  */
 function registerAdminRoute(adminHttp, remote) {
+  // GET /admin/scheduler/prds — paginated PRD listing (PRD: 353KB/120s
+  // fix). Sort order is stable and explicit: slug ascending via
+  // String.localeCompare(..., { numeric: true }) (listPrdsInternal in
+  // scheduler.cjs), so offset paging can't skip or duplicate an entry
+  // between calls as long as the underlying PRD set is unchanged.
+  // `limit`/`offset` default to 100/0 (hard max limit 500); `total` is the
+  // filtered count BEFORE the page slice, and `hasMore` is derived from
+  // `total`, not from whether the page came back full. `fields=full` opts
+  // into the secondary detail fields (parallelGroup, estimateMinutes,
+  // sourcePromptId, epicId, archivedStatus) omitted by default.
   adminHttp.registerRoute('GET', '/admin/scheduler/prds', async (req, res, query) => {
     let input;
     try {
@@ -53,8 +63,8 @@ function registerAdminRoute(adminHttp, remote) {
       sendJson(res, 400, { ok: false, error: 'invalid query', details: e?.issues ?? e?.message });
       return;
     }
-    const prds = await remote.listPrds(input);
-    sendJson(res, 200, { ok: true, prds });
+    const { prds, total, limit, offset, hasMore } = await remote.listPrds(input);
+    sendJson(res, 200, { ok: true, prds, total, limit, offset, hasMore });
   });
 
   adminHttp.registerRoute('GET', '/admin/scheduler/prd', async (req, res, query) => {

package/src/main/lib/queueHistory.cjs

@@ -62,9 +62,11 @@ function jobKey(job) {
 
 /**
  * O(n) over `jobs`. Splits terminal jobs into `hot` (stays in queue.json)
- * and `toArchive` (moves to history.jsonl). A completed/failed job archives
- * only when ALL of:
- *   - status is 'completed' or 'failed'
+ * and `toArchive` (moves to history.jsonl). A completed/failed/skipped job
+ * archives only when ALL of:
+ *   - status is 'completed', 'failed', or 'skipped' (skipped: a job whose
+ *     PRD source vanished before dispatch — never ran, but still terminal,
+ *     and must age out of the hot queue the same as any other finished row)
  *   - finishedAt parses and is older than opts.retentionMs (default
  *     HISTORY_RETENTION_MS)
  *   - it is not the healTargetForFix() parent of a pending/running fix-plan
@@ -90,7 +92,7 @@ function partitionJobs(jobs, nowMs, opts = {}) {
     if (!j) continue;
     const finishedMs = j.finishedAt ? Date.parse(j.finishedAt) : NaN;
     const archivable =
-      (j.status === 'completed' || j.status === 'failed') &&
+      (j.status === 'completed' || j.status === 'failed' || j.status === 'skipped') &&
       Number.isFinite(finishedMs) &&
       (nowMs - finishedMs) > retentionMs &&
       !protectedSlugs.has(j.slug);

package/src/main/lib/queueStore.cjs

@@ -38,7 +38,8 @@ const { ScheduleJobSchema } = require('./scheduleJobSchema.cjs');
 
 const MACHINE_STATE_PATH = path.join(os.homedir(), '.claude', 'session-manager', 'scheduler-machine.json');
 const LEGACY_QUEUE_PATH = path.join(os.homedir(), '.claude', 'session-manager', 'scheduled-plans', 'queue.json');
-const STATE_SUBPATH = ['session-manager-operations', 'scheduler', 'state'];
+const OPS_DIRNAME = 'session-manager-operations';
+const STATE_SUBPATH = [OPS_DIRNAME, 'scheduler', 'state'];
 
 /**
  * A project's `session-manager-operations/scheduler/state/` directory.
@@ -60,6 +61,20 @@ function projectStateDir(cwd) {
   if (!path.isAbsolute(cwd)) {
     throw new Error(`projectStateDir: cwd must be an absolute path, got "${cwd}"`);
   }
+  // ...and it must not itself sit INSIDE an ops root. Absolute-and-existing
+  // was not enough: a transcript records an agent's `cd` into a PRD folder,
+  // activeSessions hands that subdirectory over as a project, and this join
+  // materializes a second ops root under the first — the doubled
+  // `.../prds/session-manager-operations/scheduler/state/queue.json` stubs
+  // found in starry-night-ships on 2026-08-30 (14 of them, 8 days' worth).
+  // activeSessions.projectRootOf normalizes such a cwd away upstream; this is
+  // the fail-closed backstop for every other caller. A queue file below an
+  // ops root is always a bug, never a project.
+  if (cwd.split(path.sep).includes(OPS_DIRNAME)) {
+    throw new Error(
+      `projectStateDir: cwd must be a project root, not a path inside ${OPS_DIRNAME}/, got "${cwd}"`,
+    );
+  }
   return path.join(cwd, ...STATE_SUBPATH);
 }
 
@@ -71,6 +86,22 @@ function projectHistoryPath(cwd) {
   return path.join(projectStateDir(cwd), 'history.jsonl');
 }
 
+/**
+ * queuePathOrSkip(cwd, context) → the shard path, or null when `cwd` is not a
+ * usable project root. projectStateDir fails closed on a relative or
+ * ops-internal cwd; a single such job row (or a stale cached cwd) must not
+ * abort a whole read or write of every OTHER project's queue, so callers that
+ * loop over many cwds log-and-skip instead of throwing.
+ */
+function queuePathOrSkip(cwd, context) {
+  try {
+    return projectQueuePath(cwd);
+  } catch (e) {
+    console.error(`[queueStore] ${context}: skipping invalid project cwd — ${e?.message}`);
+    return null;
+  }
+}
+
 function writeJsonAtomicSync(file, value) {
   assertOpsWrite(file, 'scheduler');
   fs.mkdirSync(path.dirname(file), { recursive: true });
@@ -183,7 +214,8 @@ function readMergedSync(opts) {
     }
   }
   for (const cwd of stateCwds(opts)) {
-    const file = projectQueuePath(cwd);
+    const file = queuePathOrSkip(cwd, 'read');
+    if (!file) continue;
     try {
       const { jobs, invalid } = shapeJobs(fs.readFileSync(file, 'utf8'), file);
       out.jobs.push(...jobs);
@@ -212,7 +244,8 @@ async function readMerged(opts) {
     }
   }
   for (const cwd of stateCwds(opts)) {
-    const file = projectQueuePath(cwd);
+    const file = queuePathOrSkip(cwd, 'read');
+    if (!file) continue;
     try {
       const { jobs, invalid } = shapeJobs(await fsp.readFile(file, 'utf8'), file);
       out.jobs.push(...jobs);
@@ -261,12 +294,14 @@ async function writeSplit(state, defaultCwd) {
     byCwd.get(cwd).push(job);
   }
   for (const [cwd, jobs] of byCwd) {
+    const file = queuePathOrSkip(cwd, 'writeSplit');
+    if (!file) continue;
     try {
-      await writeJsonAtomic(projectQueuePath(cwd), { jobs });
+      await writeJsonAtomic(file, { jobs });
     } catch (e) {
       // A single unwritable project (deleted repo dir, permissions) must not
       // lose every other project's write.
-      console.error(`[queueStore] failed to write ${projectQueuePath(cwd)}: ${e?.message}`);
+      console.error(`[queueStore] failed to write ${file}: ${e?.message}`);
     }
   }
   bustCwdCache();
@@ -316,7 +351,8 @@ async function migrateLegacyGlobalQueue(defaultCwd) {
   }
   let moved = 0;
   for (const [cwd, jobs] of byCwd) {
-    const file = projectQueuePath(cwd);
+    const file = queuePathOrSkip(cwd, 'legacy split');
+    if (!file) continue;
     let existing = [];
     try { existing = shapeJobs(await fsp.readFile(file, 'utf8'), file).jobs; } catch { /* fresh shard */ }
     const have = new Set(existing.map((j) => j.slug));

package/src/main/lib/scheduleJobSchema.cjs

@@ -24,7 +24,7 @@
 
 const { z } = require('zod');
 
-const JOB_STATUSES = ['pending', 'running', 'investigating', 'completed', 'failed', 'needs_review', 'quarantined'];
+const JOB_STATUSES = ['pending', 'running', 'investigating', 'completed', 'skipped', 'failed', 'needs_review', 'quarantined'];
 
 const ScheduleJobStatusSchema = z.enum(JOB_STATUSES);
 

package/src/main/lib/scheduleJobTransitions.cjs

@@ -44,7 +44,10 @@ const STATUS_HISTORY_CAP = 20;
  *    manual archive of an already-shipped PRD), pending->failed (admin
  *    cancelJob on a not-yet-started job)
  *  - running->completed|failed|needs_review (normal run outcomes, reaper),
- *    running->pending (halt/rate-limit reset, transient-failure retry)
+ *    running->skipped (spawnJob:skip-archived's 'prd-missing' case — no
+ *    executor ever ran; kept distinct from 'completed' so unrun work can't
+ *    read as shipped), running->pending (halt/rate-limit reset,
+ *    transient-failure retry)
  *  - investigating->failed|needs_review (restore prior status once the
  *    investigation probe exits), investigating->completed (defensive: the
  *    restored prior status could in principle be 'completed' if a caller
@@ -58,20 +61,30 @@ const STATUS_HISTORY_CAP = 20;
  *  - completed->pending (force-only reset, gated separately by
  *    resetJobFields' own guard — this table only says the edge is
  *    structurally legal, not that every caller may take it unconditionally)
+ *  - skipped->pending (force-only reset, same resetJobFields guard as
+ *    completed->pending — 'skipped' is otherwise terminal: no further
+ *    transitions out)
  *  - quarantined->pending (reconcile()'s adopt path, PRD-authoring lockdown:
  *    a PRD discovered with no `createdVia` provenance stamp is queued
  *    'quarantined' instead of 'pending'; the ONLY way out is the PRD being
  *    stamped via the update-prd API — reconcile() detects the stamp on its
  *    next pass and promotes the row)
+ *  - pending|investigating|needs_review|quarantined -> skipped
+ *    (schedule:clear-queue: a manual queue clear force-terminates any
+ *    non-running victim row so it can leave a durable history.jsonl record
+ *    instead of vanishing — same 'never ran, don't call it completed'
+ *    rationale as running->skipped, just reachable from every pre-dispatch
+ *    or unresolved status a queued row can be sitting in)
  */
 const LEGAL_TRANSITIONS = {
-  pending: ['running', 'completed', 'failed'],
-  running: ['completed', 'failed', 'needs_review', 'pending'],
-  investigating: ['failed', 'needs_review', 'completed', 'pending'],
+  pending: ['running', 'completed', 'failed', 'skipped'],
+  running: ['completed', 'failed', 'needs_review', 'skipped', 'pending'],
+  investigating: ['failed', 'needs_review', 'completed', 'pending', 'skipped'],
   failed: ['investigating', 'pending', 'completed'],
-  needs_review: ['investigating', 'pending', 'completed'],
+  needs_review: ['investigating', 'pending', 'completed', 'skipped'],
   completed: ['pending'],
-  quarantined: ['pending'],
+  skipped: ['pending'],
+  quarantined: ['pending', 'skipped'],
 };
 
 let refusedTransitionCount = 0;

package/src/main/lib/schedulerBatch.cjs

@@ -97,6 +97,12 @@ function pickForProject(projectJobs, runningSlugsInProject, slots) {
 
   const pending = [];
   const heldByFailedDep = [];
+  // A dep that never ran (its PRD source vanished before dispatch — see
+  // scheduleJobSchema.cjs's 'skipped' status) is just as blocking as a
+  // failed one and deserves the same explicit reason, not a silent fall into
+  // the generic `holds` bucket — resetting won't help here (the source file
+  // is gone), so the guidance differs from the failed-dep case.
+  const heldBySkippedDep = [];
   // Per-job hold records, surfaced to the UI so a `pending` row can say WHICH
   // dep is holding it instead of leaving the reason in console.log.
   const holds = [];
@@ -105,7 +111,9 @@ function pickForProject(projectJobs, runningSlugsInProject, slots) {
     if (!dep) { pending.push(j); continue; }
     const depRows = rowsForDep(dep);
     const failed = depRows.some((d) => d.status === 'failed');
+    const skipped = depRows.some((d) => d.status === 'skipped');
     if (failed) heldByFailedDep.push({ job: j, dep });
+    else if (skipped) heldBySkippedDep.push({ job: j, dep });
     holds.push({
       slug: j.slug,
       dep,
@@ -114,9 +122,17 @@ function pickForProject(projectJobs, runningSlugsInProject, slots) {
     // running/pending/needs_review dep — simply not eligible this tick.
   }
   if (pending.length === 0) {
+    const reasons = [];
     if (heldByFailedDep.length > 0) {
       const detail = heldByFailedDep.map(({ job, dep }) => `${job.slug} <- ${dep}`).join(', ');
-      const reason = `[scheduler] depends-gate [${projectCwd}]: holding ${heldByFailedDep.length} job(s) behind failed dependencies [${detail}]. Reset or archive the dep to unblock.`;
+      reasons.push(`holding ${heldByFailedDep.length} job(s) behind failed dependencies [${detail}]. Reset or archive the dep to unblock.`);
+    }
+    if (heldBySkippedDep.length > 0) {
+      const detail = heldBySkippedDep.map(({ job, dep }) => `${job.slug} <- ${dep}`).join(', ');
+      reasons.push(`holding ${heldBySkippedDep.length} job(s) behind never-ran dependencies [${detail}]. The dep's PRD source is gone — author a fresh PRD for that work to unblock.`);
+    }
+    if (reasons.length > 0) {
+      const reason = `[scheduler] depends-gate [${projectCwd}]: ${reasons.join(' ')}`;
       console.log(reason);
       return { batch: [], reason, holds };
     }