github-router 0.3.206 → 0.3.211

package/dist/{peer-mcp-personas-C3ii7ZqP.js → peer-mcp-personas-CxpFD-rW.js}

@@ -4563,7 +4563,7 @@ function authorMatchesBot(authorLogin, botLogin) {
 	const authorKey = agentKeyForLogin(authorLogin);
 	return authorKey !== null && authorKey === agentKeyForLogin(botLogin);
 }
-function asRecord$7(value) {
+function asRecord$8(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function stringValue$2(value) {
@@ -4573,7 +4573,7 @@ async function readJsonObject(response) {
 	const text = await response.text();
 	if (!text.trim()) return {};
 	try {
-		return asRecord$7(JSON.parse(text)) ?? {};
+		return asRecord$8(JSON.parse(text)) ?? {};
 	} catch (err) {
 		throw new AgentError("UPSTREAM", "GitHub API returned invalid JSON", { cause: err });
 	}
@@ -5139,7 +5139,7 @@ function capiHeaders() {
 		"user-agent": "github-router-first-mate"
 	};
 }
-function asRecord$6(value) {
+function asRecord$7(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function truncateHead(text) {
@@ -5238,25 +5238,25 @@ function parseSessionLog(body) {
 		if (!payload || payload === "[DONE]") continue;
 		let chunk;
 		try {
-			chunk = asRecord$6(JSON.parse(payload));
+			chunk = asRecord$7(JSON.parse(payload));
 		} catch {
 			continue;
 		}
 		if (!chunk || chunk.object !== "chat.completion.chunk") continue;
 		const choices = Array.isArray(chunk.choices) ? chunk.choices : [];
 		for (const choiceValue of choices) {
-			const choice = asRecord$6(choiceValue);
+			const choice = asRecord$7(choiceValue);
 			if (!choice) continue;
-			const delta = asRecord$6(choice.delta) ?? {};
+			const delta = asRecord$7(choice.delta) ?? {};
 			if (typeof delta.content === "string") content = capped(content, delta.content);
 			if (typeof delta.reasoning_text === "string") reasoning = capped(reasoning, delta.reasoning_text);
 			if (choice.finish_reason === "stop") finished = true;
 			const toolCallDeltas = Array.isArray(delta.tool_calls) ? delta.tool_calls : [];
 			for (const tcValue of toolCallDeltas) {
-				const call = asRecord$6(tcValue);
+				const call = asRecord$7(tcValue);
 				if (!call) continue;
 				const index = typeof call.index === "number" ? call.index : toolCalls.size;
-				const fn = asRecord$6(call.function) ?? {};
+				const fn = asRecord$7(call.function) ?? {};
 				const existing = toolCalls.get(index) ?? { args: "" };
 				if (typeof fn.name === "string" && fn.name.length > 0) {
 					existing.name = fn.name;
@@ -5271,7 +5271,7 @@ function parseSessionLog(body) {
 	for (const call of toolCalls.values()) {
 		if (call.name !== "report_progress") continue;
 		try {
-			const parsed = asRecord$6(JSON.parse(call.args));
+			const parsed = asRecord$7(JSON.parse(call.args));
 			const desc = parsed?.prDescription ?? parsed?.pr_description;
 			if (typeof desc === "string" && desc.length > planDescription.length) planDescription = desc;
 		} catch {}
@@ -5335,7 +5335,6 @@ async function getSessionLog(sessionId, signal) {
 const AGENT_TASKS_API_VERSION = "2026-03-10";
 const LOG_EXCERPT_LIMIT = 4e3;
 const TRUNCATED_MARKER = "…[truncated]…";
-const FOLLOW_UP_TASK_PATH_SUFFIX = "";
 const CANCEL_TASK_PATH_SUFFIX = "/cancel";
 function segment$1(value) {
 	return encodeURIComponent(String(value));
@@ -5346,7 +5345,7 @@ function repoTasksPath(repo) {
 function taskPath(repo, taskId) {
 	return `${repoTasksPath(repo)}/${segment$1(taskId)}`;
 }
-function asRecord$5(value) {
+function asRecord$6(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function stringField(record, keys) {
@@ -5364,10 +5363,10 @@ function numberField(record, keys) {
 function collectText(record) {
 	if (!record) return [];
 	const nested = [
-		asRecord$5(record.task),
-		asRecord$5(record.session),
-		asRecord$5(record.progress),
-		asRecord$5(record.result)
+		asRecord$6(record.task),
+		asRecord$6(record.session),
+		asRecord$6(record.progress),
+		asRecord$6(record.result)
 	];
 	const textKeys = [
 		"session_log",
@@ -5405,7 +5404,7 @@ function taskPrUrl(record) {
 		"pullRequestUrl"
 	]);
 	if (direct) return direct;
-	return stringField(asRecord$5(record?.pull_request) ?? asRecord$5(record?.pullRequest), ["html_url", "url"]);
+	return stringField(asRecord$6(record?.pull_request) ?? asRecord$6(record?.pullRequest), ["html_url", "url"]);
 }
 function taskPrNumber$1(record) {
 	const direct = numberField(record, [
@@ -5415,13 +5414,13 @@ function taskPrNumber$1(record) {
 		"pull_request_number"
 	]);
 	if (direct !== void 0) return direct;
-	return numberField(asRecord$5(record?.pull_request) ?? asRecord$5(record?.pullRequest), ["number"]) ?? void 0;
+	return numberField(asRecord$6(record?.pull_request) ?? asRecord$6(record?.pullRequest), ["number"]) ?? void 0;
 }
 function latestSessionId(record) {
 	const sessions$1 = record?.sessions;
 	if (!Array.isArray(sessions$1) || sessions$1.length === 0) return void 0;
 	for (let i = sessions$1.length - 1; i >= 0; i -= 1) {
-		const id = stringField(asRecord$5(sessions$1[i]), [
+		const id = stringField(asRecord$6(sessions$1[i]), [
 			"id",
 			"session_id",
 			"sessionId"
@@ -5450,7 +5449,7 @@ async function startTask(repo, input) {
 	};
 }
 async function getTask(repo, taskId) {
-	const record = asRecord$5(await ghRest("GET", taskPath(repo, taskId), { apiVersion: AGENT_TASKS_API_VERSION }));
+	const record = asRecord$6(await ghRest("GET", taskPath(repo, taskId), { apiVersion: AGENT_TASKS_API_VERSION }));
 	const sessionId = latestSessionId(record);
 	const sessionLog = sessionId ? await getSessionLog(sessionId) : null;
 	const fallbackText = collectText(record).join("\n\n");
@@ -5469,12 +5468,37 @@ async function getTask(repo, taskId) {
 		...sessionLog?.branch ? { branch: sessionLog.branch } : {}
 	};
 }
-async function followUpTask(repo, taskId, prompt) {
-	await ghRest("POST", `${taskPath(repo, taskId)}${FOLLOW_UP_TASK_PATH_SUFFIX}`, {
+/**
+* Continue an existing cloud-agent task by re-POSTing to the tasks endpoint with
+* `head_ref` set to the agent's existing branch. There is NO follow-up/steer
+* endpoint on the Agent-Tasks preview API; the documented way to give a running
+* or blocked task new input (e.g. the answer to its plan-mode question) is to
+* start a fresh session bound to the same branch — GitHub commits to `head_ref`
+* instead of creating a new branch. Returns the NEW task/session id so the
+* caller can re-point observation at it. Best-effort: the API is public preview
+* and pre-PR (branch-only) continue is inferred, not documented-guaranteed.
+*/
+async function continueTaskOnBranch(repo, input) {
+	const body = {
+		prompt: input.prompt,
+		head_ref: input.headRef
+	};
+	if (input.baseRef !== void 0) body.base_ref = input.baseRef;
+	if (input.model !== void 0) body.model = input.model;
+	const response = await ghRest("POST", repoTasksPath(repo), {
 		apiVersion: AGENT_TASKS_API_VERSION,
-		body: { prompt }
+		body,
+		retry: false,
+		...input.idempotencyKey ? { headers: { "Idempotency-Key": input.idempotencyKey } } : {}
 	});
-	return { ok: true };
+	return {
+		taskId: stringField(response, [
+			"task_id",
+			"taskId",
+			"id"
+		]) ?? "",
+		state: stringField(response, ["state", "status"]) ?? "unknown"
+	};
 }
 async function cancelTask(repo, taskId) {
 	await ghRest("POST", `${taskPath(repo, taskId)}${CANCEL_TASK_PATH_SUFFIX}`, { apiVersion: AGENT_TASKS_API_VERSION });
@@ -5875,53 +5899,53 @@ const DECISION_STATUSES = new Set([
 function decisionsPath() {
 	return nodePath.join(PATHS.FIRST_MATE_DIR, "decisions.json");
 }
-function asRecord$4(value) {
+function asRecord$5(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function isOneOf$1(value, allowed) {
 	return typeof value === "string" && allowed.has(value);
 }
-function isFiniteNumber$2(value) {
+function isFiniteNumber$3(value) {
 	return typeof value === "number" && Number.isFinite(value);
 }
 function isPositiveInteger(value) {
 	return typeof value === "number" && Number.isInteger(value) && value > 0;
 }
-function isNonNegativeInteger$3(value) {
+function isNonNegativeInteger$4(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function isOptionalString$2(value) {
+function isOptionalString$3(value) {
 	return value === void 0 || typeof value === "string";
 }
 function isOptionalStringOrNull$1(value) {
 	return value === void 0 || value === null || typeof value === "string";
 }
 function isOptionalFiniteNumber$2(value) {
-	return value === void 0 || isFiniteNumber$2(value);
+	return value === void 0 || isFiniteNumber$3(value);
 }
-function isOptionalStringArray(value) {
+function isOptionalStringArray$1(value) {
 	return value === void 0 || Array.isArray(value) && value.every((entry) => typeof entry === "string");
 }
 function isRepoRef$2(value) {
-	const repo = asRecord$4(value);
+	const repo = asRecord$5(value);
 	return repo !== void 0 && typeof repo.owner === "string" && repo.owner.length > 0 && typeof repo.name === "string" && repo.name.length > 0;
 }
 function isOptionRefs(value) {
 	return value === void 0 || Array.isArray(value) && value.every((option) => {
-		const row = asRecord$4(option);
+		const row = asRecord$5(option);
 		return row !== void 0 && typeof row.id === "string";
 	});
 }
 function isApprovalRecord(value) {
-	const approval = asRecord$4(value);
-	return approval !== void 0 && typeof approval.decisionId === "string" && approval.decisionId.length > 0 && isRepoRef$2(approval.repo) && isPositiveInteger(approval.pr) && typeof approval.headSha === "string" && approval.headSha.length > 0 && isOptionalString$2(approval.baseSha) && isOptionalString$2(approval.diffDigest) && isOptionalStringArray(approval.requiredCheckIds) && isOptionalString$2(approval.floorRunId) && approval.status === "approved" && typeof approval.consumed === "boolean" && isFiniteNumber$2(approval.createdMs) && isOptionalFiniteNumber$2(approval.consumedMs);
+	const approval = asRecord$5(value);
+	return approval !== void 0 && typeof approval.decisionId === "string" && approval.decisionId.length > 0 && isRepoRef$2(approval.repo) && isPositiveInteger(approval.pr) && typeof approval.headSha === "string" && approval.headSha.length > 0 && isOptionalString$3(approval.baseSha) && isOptionalString$3(approval.diffDigest) && isOptionalStringArray$1(approval.requiredCheckIds) && isOptionalString$3(approval.floorRunId) && approval.status === "approved" && typeof approval.consumed === "boolean" && isFiniteNumber$3(approval.createdMs) && isOptionalFiniteNumber$2(approval.consumedMs);
 }
 function isOptionalApprovalRecord(value) {
 	return value === void 0 || isApprovalRecord(value);
 }
 function isDecisionRecord(value) {
-	const record = asRecord$4(value);
-	return record !== void 0 && typeof record.decisionId === "string" && record.decisionId.length > 0 && typeof record.decisionKey === "string" && record.decisionKey.length > 0 && typeof record.type === "string" && record.type.length > 0 && isOneOf$1(record.status, DECISION_STATUSES) && isOptionalString$2(record.packetId) && typeof record.inputFingerprint === "string" && record.inputFingerprint.length > 0 && isOptionRefs(record.options) && isOptionalStringOrNull$1(record.chosenOptionId) && isOptionalStringOrNull$1(record.resolvedBy) && isFiniteNumber$2(record.createdMs) && isOptionalFiniteNumber$2(record.resolvedMs) && isOptionalApprovalRecord(record.approval);
+	const record = asRecord$5(value);
+	return record !== void 0 && typeof record.decisionId === "string" && record.decisionId.length > 0 && typeof record.decisionKey === "string" && record.decisionKey.length > 0 && typeof record.type === "string" && record.type.length > 0 && isOneOf$1(record.status, DECISION_STATUSES) && isOptionalString$3(record.packetId) && typeof record.inputFingerprint === "string" && record.inputFingerprint.length > 0 && isOptionRefs(record.options) && isOptionalStringOrNull$1(record.chosenOptionId) && isOptionalStringOrNull$1(record.resolvedBy) && isFiniteNumber$3(record.createdMs) && isOptionalFiniteNumber$2(record.resolvedMs) && isOptionalApprovalRecord(record.approval);
 }
 function parseDecisions(raw) {
 	if (raw === void 0) return {
@@ -5929,12 +5953,12 @@ function parseDecisions(raw) {
 		decisions: []
 	};
 	try {
-		const parsed = asRecord$4(JSON.parse(raw));
+		const parsed = asRecord$5(JSON.parse(raw));
 		if (!parsed || parsed.version !== DECISIONS_VERSION || !Array.isArray(parsed.decisions)) return {
 			rev: 0,
 			decisions: []
 		};
-		const rev = isNonNegativeInteger$3(parsed.rev) ? parsed.rev : 0;
+		const rev = isNonNegativeInteger$4(parsed.rev) ? parsed.rev : 0;
 		const cleaned = parsed.decisions.filter(isDecisionRecord);
 		if (cleaned.length !== parsed.decisions.length) consola.debug(`first-mate decisions dropped ${parsed.decisions.length - cleaned.length} corrupt decision(s)`);
 		return {
@@ -6488,25 +6512,25 @@ function sanitizeSegment$1(value) {
 function repoLedgerPath(repo) {
 	return nodePath.join(PATHS.FIRST_MATE_DIR, `${sanitizeSegment$1(repo.owner)}__${sanitizeSegment$1(repo.name)}.json`);
 }
-function asRecord$3(value) {
+function asRecord$4(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
 function isOneOf(value, allowed) {
 	return typeof value === "string" && allowed.has(value);
 }
-function isFiniteNumber$1(value) {
+function isFiniteNumber$2(value) {
 	return typeof value === "number" && Number.isFinite(value);
 }
-function isNonNegativeInteger$2(value) {
+function isNonNegativeInteger$3(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function isIssueNumberOrNull(value) {
-	return value === null || isNonNegativeInteger$2(value);
+	return value === null || isNonNegativeInteger$3(value);
 }
 function isStringOrNull(value) {
 	return value === null || typeof value === "string";
 }
-function isOptionalString$1(value) {
+function isOptionalString$2(value) {
 	return value === void 0 || typeof value === "string";
 }
 function isOptionalStringOrNull(value) {
@@ -6516,10 +6540,10 @@ function isOptionalBoolean(value) {
 	return value === void 0 || typeof value === "boolean";
 }
 function isOptionalFiniteNumber$1(value) {
-	return value === void 0 || isFiniteNumber$1(value);
+	return value === void 0 || isFiniteNumber$2(value);
 }
 function isRepoRef$1(value) {
-	const repo = asRecord$3(value);
+	const repo = asRecord$4(value);
 	return repo !== void 0 && typeof repo.owner === "string" && repo.owner.length > 0 && typeof repo.name === "string" && repo.name.length > 0;
 }
 function isStringArray(value) {
@@ -6527,13 +6551,13 @@ function isStringArray(value) {
 }
 function isLastSteer(value) {
 	if (value === void 0) return true;
-	const steer = asRecord$3(value);
-	return steer !== void 0 && isOptionalString$1(steer.cursor) && isOptionalString$1(steer.sha) && isFiniteNumber$1(steer.atMs);
+	const steer = asRecord$4(value);
+	return steer !== void 0 && isOptionalString$2(steer.cursor) && isOptionalString$2(steer.sha) && isFiniteNumber$2(steer.atMs);
 }
 function isUnitRow(value) {
-	const row = asRecord$3(value);
+	const row = asRecord$4(value);
 	if (!row) return false;
-	return typeof row.missionId === "string" && row.missionId.length > 0 && isRepoRef$1(row.repo) && isIssueNumberOrNull(row.issue) && isIssueNumberOrNull(row.pr) && isStringOrNull(row.taskId) && isOneOf(row.agent, AGENTS) && typeof row.botLogin === "string" && isOneOf(row.dispatchMode, DISPATCH_MODES) && isOptionalString$1(row.model) && isOneOf(row.provider, PROVIDER_STATES$2) && isOneOf(row.phase, PHASES) && isOneOf(row.artifact, ARTIFACTS) && isOneOf(row.validation, VALIDATIONS) && isNonNegativeInteger$2(row.retries) && isStringArray(row.dependsOn) && typeof row.title === "string" && isLastSteer(row.lastSteer) && (row.cancelledBy === void 0 || row.cancelledBy === "controller" || row.cancelledBy === "external") && isOptionalStringOrNull(row.bakeoffGroupId) && isOptionalStringOrNull(row.blockingDecisionId) && isOptionalBoolean(row.verifierAssigned) && (row.implementerLab === void 0 || isOneOf(row.implementerLab, AGENTS)) && isOptionalStringOrNull(row.branch) && isOptionalStringOrNull(row.headSha) && isOptionalStringOrNull(row.baseSha) && isOptionalFiniteNumber$1(row.lastCheckedMs) && isOptionalBoolean(row.terminal);
+	return typeof row.missionId === "string" && row.missionId.length > 0 && isRepoRef$1(row.repo) && isIssueNumberOrNull(row.issue) && isIssueNumberOrNull(row.pr) && isStringOrNull(row.taskId) && isOneOf(row.agent, AGENTS) && typeof row.botLogin === "string" && isOneOf(row.dispatchMode, DISPATCH_MODES) && isOptionalString$2(row.model) && isOneOf(row.provider, PROVIDER_STATES$2) && isOneOf(row.phase, PHASES) && isOneOf(row.artifact, ARTIFACTS) && isOneOf(row.validation, VALIDATIONS) && isNonNegativeInteger$3(row.retries) && isStringArray(row.dependsOn) && typeof row.title === "string" && isLastSteer(row.lastSteer) && (row.cancelledBy === void 0 || row.cancelledBy === "controller" || row.cancelledBy === "external") && isOptionalStringOrNull(row.bakeoffGroupId) && isOptionalStringOrNull(row.blockingDecisionId) && isOptionalBoolean(row.verifierAssigned) && (row.implementerLab === void 0 || isOneOf(row.implementerLab, AGENTS)) && isOptionalStringOrNull(row.branch) && isOptionalStringOrNull(row.headSha) && isOptionalStringOrNull(row.baseSha) && isOptionalFiniteNumber$1(row.lastCheckedMs) && isOptionalBoolean(row.terminal);
 }
 function sameUnitHandle(a, b) {
 	return b.id != null && a.id === b.id || b.issue !== null && a.issue === b.issue || b.taskId !== null && a.taskId === b.taskId;
@@ -6543,12 +6567,12 @@ function terminalTimestamp(row) {
 }
 function parseLedgerRaw(raw) {
 	try {
-		const parsed = asRecord$3(JSON.parse(raw));
+		const parsed = asRecord$4(JSON.parse(raw));
 		if (!parsed || parsed.version !== LEDGER_VERSION || !Array.isArray(parsed.units)) return {
 			rev: 0,
 			units: []
 		};
-		const rev = isNonNegativeInteger$2(parsed.rev) ? parsed.rev : 0;
+		const rev = isNonNegativeInteger$3(parsed.rev) ? parsed.rev : 0;
 		const cleaned = parsed.units.filter(isUnitRow);
 		if (cleaned.length !== parsed.units.length) consola.debug(`first-mate ledger dropped ${parsed.units.length - cleaned.length} corrupt unit(s)`);
 		return {
@@ -6644,31 +6668,31 @@ const REGISTRY_VERSION = 1;
 function registryPath() {
 	return nodePath.join(PATHS.FIRST_MATE_DIR, "missions.json");
 }
-function asRecord$2(value) {
+function asRecord$3(value) {
 	return typeof value === "object" && value !== null ? value : void 0;
 }
-function isFiniteNumber(value) {
+function isFiniteNumber$1(value) {
 	return typeof value === "number" && Number.isFinite(value);
 }
-function isNonNegativeInteger$1(value) {
+function isNonNegativeInteger$2(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function isOptionalString(value) {
+function isOptionalString$1(value) {
 	return value === void 0 || typeof value === "string";
 }
 function isOptionalFiniteNumber(value) {
-	return value === void 0 || isFiniteNumber(value);
+	return value === void 0 || isFiniteNumber$1(value);
 }
 function isOptionalPositiveInteger(value) {
 	return value === void 0 || Number.isInteger(value) && value >= 1;
 }
 function isRepoRef(value) {
-	const repo = asRecord$2(value);
+	const repo = asRecord$3(value);
 	return repo !== void 0 && typeof repo.owner === "string" && repo.owner.length > 0 && typeof repo.name === "string" && repo.name.length > 0;
 }
 function isMission(value) {
-	const mission = asRecord$2(value);
-	return mission !== void 0 && typeof mission.id === "string" && mission.id.length > 0 && typeof mission.goal === "string" && typeof mission.acceptanceCriteria === "string" && isOptionalString(mission.houseRules) && isOptionalFiniteNumber(mission.priority) && isOptionalString(mission.defaultModel) && (mission.planGate === void 0 || mission.planGate === "hard" || mission.planGate === "soft") && isOptionalPositiveInteger(mission.maxFixCycles) && isOptionalPositiveInteger(mission.maxCopilotComments) && (mission.ciRequired === void 0 || typeof mission.ciRequired === "boolean") && (mission.everDecomposed === void 0 || typeof mission.everDecomposed === "boolean") && Array.isArray(mission.repos) && mission.repos.every(isRepoRef) && (mission.status === "active" || mission.status === "done" || mission.status === "abandoned") && isFiniteNumber(mission.createdMs) && isFiniteNumber(mission.updatedMs);
+	const mission = asRecord$3(value);
+	return mission !== void 0 && typeof mission.id === "string" && mission.id.length > 0 && typeof mission.goal === "string" && typeof mission.acceptanceCriteria === "string" && isOptionalString$1(mission.houseRules) && isOptionalFiniteNumber(mission.priority) && isOptionalString$1(mission.defaultModel) && (mission.planGate === void 0 || mission.planGate === "hard" || mission.planGate === "soft") && isOptionalPositiveInteger(mission.maxFixCycles) && isOptionalPositiveInteger(mission.maxCopilotComments) && isOptionalPositiveInteger(mission.maxConcurrentBuilds) && (mission.ciRequired === void 0 || typeof mission.ciRequired === "boolean") && (mission.everDecomposed === void 0 || typeof mission.everDecomposed === "boolean") && (mission.noProgressWakes === void 0 || isNonNegativeInteger$2(mission.noProgressWakes)) && isOptionalFiniteNumber(mission.stallSinceMs) && isOptionalString$1(mission.stallEscalatedFingerprint) && Array.isArray(mission.repos) && mission.repos.every(isRepoRef) && (mission.status === "active" || mission.status === "done" || mission.status === "abandoned") && isFiniteNumber$1(mission.createdMs) && isFiniteNumber$1(mission.updatedMs);
 }
 function parseRegistry(raw) {
 	if (raw === void 0) return {
@@ -6676,12 +6700,12 @@ function parseRegistry(raw) {
 		missions: []
 	};
 	try {
-		const parsed = asRecord$2(JSON.parse(raw));
+		const parsed = asRecord$3(JSON.parse(raw));
 		if (!parsed || parsed.version !== REGISTRY_VERSION || !Array.isArray(parsed.missions)) return {
 			rev: 0,
 			missions: []
 		};
-		const rev = isNonNegativeInteger$1(parsed.rev) ? parsed.rev : 0;
+		const rev = isNonNegativeInteger$2(parsed.rev) ? parsed.rev : 0;
 		const cleaned = parsed.missions.filter(isMission);
 		if (cleaned.length !== parsed.missions.length) consola.debug(`first-mate registry dropped ${parsed.missions.length - cleaned.length} corrupt mission(s)`);
 		return {
@@ -7205,6 +7229,7 @@ var Outbox = class {
 
 //#endregion
 //#region src/lib/first-mate/state-machine.ts
+const PLAN_RETRY_CAP = 2;
 function classify(observed, row) {
 	const events$1 = [];
 	const provider = observed.provider;
@@ -7279,10 +7304,13 @@ function nextAction(state$1, row, policy) {
 		kind: "escalate_human",
 		reason: "the agent opened multiple pull requests for one unit"
 	};
-	if (state$1.provider === "failed" || state$1.provider === "timed_out") return {
-		kind: "escalate_human",
-		reason: `cloud agent task ${state$1.provider}`
-	};
+	if ((state$1.provider === "failed" || state$1.provider === "timed_out") && state$1.artifact !== "pr_open") {
+		if (state$1.phase === "plan" && state$1.artifact === "no_pr" && row.dispatchMode === "plan" && (row.planRetries ?? 0) < PLAN_RETRY_CAP) return { kind: "retry_plan" };
+		return {
+			kind: "escalate_human",
+			reason: `cloud agent task ${state$1.provider}`
+		};
+	}
 	if (state$1.provider === "waiting_for_user") {
 		if (row.blockingDecisionId) return { kind: "noop" };
 		return {
@@ -7394,7 +7422,7 @@ const defaultDeps = {
 	readDecisions,
 	markAnswered,
 	startTask,
-	followUpTask,
+	continueTaskOnBranch,
 	cancelTask,
 	createIssue,
 	resolveAgentActor,
@@ -7443,6 +7471,8 @@ function unitHandle(unit) {
 * identity (the solo operator's account may BE the router PAT).
 */
 const FM_REVIEW_SENTINEL = "first-mate-review:";
+const STALL_WAKES = 6;
+const STALL_MS = 30 * 6e4;
 function stampReviewSentinel(unit, body) {
 	return `<!-- ${FM_REVIEW_SENTINEL}${unit.id ?? unitHandle(unit)} -->\n\n${body}`;
 }
@@ -7457,7 +7487,7 @@ function requestIdFor(unit, kind) {
 function humanRequestBase(unit, type) {
 	return `${unit.missionId}:${unitHandle(unit)}:${type}`;
 }
-function asRecord$1(value) {
+function asRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function stringValue(value) {
@@ -7564,6 +7594,70 @@ function primaryObservedPr(observed) {
 function isTerminalProvider(provider) {
 	return provider === "completed" || provider === "failed" || provider === "timed_out" || provider === "cancelled";
 }
+/** Portal-only progress identity. Provider state, phase, logs, and comments are excluded. */
+function verifiedProgressFact(unit, observed) {
+	const primary = primaryObservedPr(observed);
+	const merged = observed.prs.some((pr) => pr.state.toUpperCase() === "MERGED" || pr.merged === true);
+	const contentHead = observed.changedFiles !== void 0 && observed.changedFiles > 0 && primary?.headSha ? `${primary.number}@${primary.headSha}` : null;
+	const ci = observed.ci?.rollup ?? "none";
+	const verifier = observed.verifierReviewed === true ? primary?.headSha ?? unit.headSha ?? "present" : null;
+	const floor = observed.floor ?? (unit.validation === "floor_passed" ? "passed" : null);
+	const artifact = merged || unit.artifact === "pr_merged" ? "pr_merged" : null;
+	const fingerprint = [
+		`content=${contentHead ?? "none"}`,
+		`ci=${ci}`,
+		`verifier=${verifier ?? "none"}`,
+		`floor=${floor ?? "none"}`,
+		`artifact=${artifact ?? "none"}`
+	].join("|");
+	if (artifact) return {
+		fingerprint,
+		kind: "merged"
+	};
+	if (floor === "passed") return {
+		fingerprint,
+		kind: "floor_passed"
+	};
+	if (verifier) return {
+		fingerprint,
+		kind: "verifier_review"
+	};
+	if (ci === "passing") return {
+		fingerprint,
+		kind: "ci_passed"
+	};
+	if (contentHead) return {
+		fingerprint,
+		kind: "content_head"
+	};
+	return null;
+}
+function noProgressReason(unit, observed) {
+	if (unit.blockingDecisionId) return "waiting_for_user unanswered";
+	const primary = primaryObservedPr(observed);
+	if (primary) {
+		const ci = observed.ci?.rollup ?? "none";
+		return `PR #${primary.number} open, CI ${ci}, head unchanged`;
+	}
+	const since = unit.verifiedProgress?.atMs ?? unit.lastSteer?.atMs;
+	return `provider=${observed.provider}, no content-bearing head${since ? ` since ${new Date(since).toISOString()}` : " observed"}`;
+}
+function recordVerifiedProgress(unit, observed, now = Date.now()) {
+	const fact = verifiedProgressFact(unit, observed);
+	if (fact !== null && fact.fingerprint !== unit.verifiedProgress?.fingerprint) {
+		unit.verifiedProgress = {
+			...fact,
+			atMs: now
+		};
+		unit.noProgressWakes = 0;
+		delete unit.lastNoProgressReason;
+		return true;
+	}
+	if (fact?.kind === "merged" || unit.artifact === "pr_merged") return false;
+	unit.noProgressWakes = (unit.noProgressWakes ?? 0) + 1;
+	unit.lastNoProgressReason = noProgressReason(unit, observed);
+	return false;
+}
 function updateUnitFromObservedPrs(unit, observed) {
 	if (observed.prs.length === 1) {
 		const pr = observed.prs[0];
@@ -7725,7 +7819,7 @@ async function applyModelAnswer(answer, units, missions, deps, applied, needsHum
 		return;
 	}
 	const { unit, kind } = target;
-	const verdict = asRecord$1(answer.verdict) ?? {};
+	const verdict = asRecord$2(answer.verdict) ?? {};
 	const repo = agentRepo(unit.repo);
 	if (kind === "review_plan") {
 		if (unit.provider !== "completed") {
@@ -7736,8 +7830,8 @@ async function applyModelAnswer(answer, units, missions, deps, applied, needsHum
 		const mission = missions.find((entry) => entry.id === unit.missionId);
 		if (decision === "approve") {
 			if (mission !== void 0) {
-				if (hasActiveBuildUnit(unit.missionId, units)) {
-					applied.push(`deferred build dispatch for ${unit.missionId}:${unitHandle(unit)}: another build is active`);
+				if (!canDispatchBuild(unit, mission, units)) {
+					applied.push(`deferred build dispatch for ${unit.missionId}:${unitHandle(unit)}: concurrency cap or overlapping file scope with an active build`);
 					return;
 				}
 				const model = resolveCloudAgentModel(unit.model ?? mission.defaultModel);
@@ -7849,14 +7943,40 @@ async function applyModelAnswer(answer, units, missions, deps, applied, needsHum
 		applied.push(`sent fix instruction for ${unit.missionId}:${unitHandle(unit)}`);
 	} else if (kind === "answer_agent_question") {
 		const answerText = stringValue(verdict.answer);
-		if (answerText !== void 0 && unit.pr !== null) {
-			await assertFenceHeld("agent-question comment");
-			await deps.postComment(repo, unit.pr, answerText);
-			unit.lastSteer = {
-				sha: unit.headSha ?? void 0,
-				atMs: Date.now()
-			};
-			applied.push(`answered agent question for ${unit.missionId}:${unitHandle(unit)}`);
+		if (answerText !== void 0) {
+			if (unit.pr !== null) {
+				const currentHead = unit.headSha ?? void 0;
+				if (!(unit.answerMentionSha != null && currentHead != null && unit.answerMentionSha === currentHead)) {
+					await assertFenceHeld("agent-question mention");
+					await deps.mentionCopilot(repo, unit.pr, answerText);
+					unit.answerMentionSha = currentHead ?? null;
+					unit.lastSteer = {
+						sha: currentHead,
+						atMs: Date.now()
+					};
+					applied.push(`answered agent question via @copilot for ${unit.missionId}:${unitHandle(unit)}`);
+				}
+			} else if (unit.branch != null && unit.branch.length > 0) {
+				const mission = missions.find((entry) => entry.id === unit.missionId);
+				let model;
+				try {
+					model = resolveCloudAgentModel(unit.model ?? mission?.defaultModel);
+				} catch {
+					model = void 0;
+				}
+				await assertFenceHeld("agent-question task-continue");
+				const task = await deps.continueTaskOnBranch(repo, {
+					headRef: unit.branch,
+					baseRef: unit.baseRef ?? void 0,
+					prompt: answerText,
+					model,
+					idempotencyKey: `continue:${unit.id ?? unitHandle(unit)}:${unit.taskId ?? "none"}`
+				});
+				unit.taskId = task.taskId;
+				unit.provider = providerState(task.state, "in_progress");
+				unit.lastSteer = { atMs: Date.now() };
+				applied.push(`answered agent question via task-continue for ${unit.missionId}:${unitHandle(unit)}`);
+			}
 		}
 	} else if (kind === "judge_review") {
 		if (!(unit.verifierAssigned === true && (unit.validation === "review_pending" || unit.validation === "ci_passed" || unit.validation === "no_ci" || unit.validation === "floor_pending"))) {
@@ -7959,7 +8079,7 @@ function asAgentKey(value) {
 function validRawUnitIndices(rawUnits) {
 	const indices = /* @__PURE__ */ new Set();
 	for (let index = 0; index < rawUnits.length; index += 1) {
-		const spec = asRecord$1(rawUnits[index]);
+		const spec = asRecord$2(rawUnits[index]);
 		const title = spec === void 0 ? void 0 : stringValue(spec.title);
 		if (title !== void 0 && title.length > 0) indices.add(index);
 	}
@@ -7973,7 +8093,7 @@ function hasDependsOnCycle(rawUnits) {
 	const validIndices = validRawUnitIndices(rawUnits);
 	const graph = /* @__PURE__ */ new Map();
 	for (const index of validIndices) {
-		const spec = asRecord$1(rawUnits[index]) ?? {};
+		const spec = asRecord$2(rawUnits[index]) ?? {};
 		if ((Array.isArray(spec.dependsOn) ? spec.dependsOn : []).some((idx) => idx === index)) return true;
 		graph.set(index, dependsOnIndices$1(spec, index, validIndices));
 	}
@@ -7991,6 +8111,11 @@ function hasDependsOnCycle(rawUnits) {
 	for (const index of graph.keys()) if (visit(index)) return true;
 	return false;
 }
+/** Parse a unit spec's `fileScopes` into a clean string[] (non-string/blank dropped). */
+function parseFileScopes(raw) {
+	if (!Array.isArray(raw)) return [];
+	return raw.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => s.trim());
+}
 /**
 * Turn a model `decompose` answer into queued units. This is the mission→units
 * step: `start_mission` only registers the mission; `advance` emits one
@@ -8005,7 +8130,7 @@ async function addUnitsToMission(mission, rawUnits, deps, existingUnits = []) {
 	const idByRawIndex = /* @__PURE__ */ new Map();
 	const specs = [];
 	for (let rawIndex = 0; rawIndex < rawUnits.length; rawIndex += 1) {
-		const spec = asRecord$1(rawUnits[rawIndex]) ?? {};
+		const spec = asRecord$2(rawUnits[rawIndex]) ?? {};
 		const title = stringValue(spec.title);
 		if (title === void 0 || title.length === 0) continue;
 		const repo = parseRepoRef$1(stringValue(spec.repo)) ?? mission.repos[0];
@@ -8035,6 +8160,7 @@ async function addUnitsToMission(mission, rawUnits, deps, existingUnits = []) {
 	let created = 0;
 	for (const { rawIndex, id, spec, title, repo, goalHash } of specs) {
 		const dependsOn = dependsOnIndices$1(spec, rawIndex, validIndices).map((idx) => idByRawIndex.get(idx)).filter((id$1) => id$1 !== void 0);
+		const fileScopes = parseFileScopes(spec.fileScopes);
 		const unit = {
 			id,
 			missionId: mission.id,
@@ -8053,7 +8179,8 @@ async function addUnitsToMission(mission, rawUnits, deps, existingUnits = []) {
 			retries: 0,
 			goalHash,
 			dependsOn,
-			title
+			title,
+			...fileScopes.length > 0 ? { fileScopes } : {}
 		};
 		await deps.upsertUnit(repo, unit);
 		created += 1;
@@ -8069,7 +8196,7 @@ async function applyDecomposeAnswer(answer, missions, deps, applied) {
 	const missionId = answer.requestId.slice(10);
 	const mission = missions.find((m) => m.id === missionId);
 	if (mission === void 0 || mission.status !== "active") return;
-	const verdict = asRecord$1(answer.verdict) ?? {};
+	const verdict = asRecord$2(answer.verdict) ?? {};
 	const created = await addUnitsToMission(mission, Array.isArray(verdict.units) ? verdict.units : [], deps, await deps.loadAllUnits(mission.id));
 	if (created > 0) applied.push(`decomposed ${missionId} into ${created} unit(s)`);
 }
@@ -8124,6 +8251,42 @@ async function maybeMergeWithApproval(unit, observed, evidence, deps, applied) {
 	await deps.upsertUnit(unit.repo, unit);
 	return true;
 }
+async function createMissionStallRequest(mission, liveUnits, reason, fingerprint, deps) {
+	const representative = liveUnits[0];
+	const decisionKey = `mission:${mission.id}:stall:${fingerprint}`;
+	const existing = await deps.findByKey(decisionKey);
+	let record = existing?.status === "pending" ? existing : void 0;
+	let packetHtmlPath;
+	if (record === void 0) {
+		const observed = {
+			provider: representative.provider,
+			prs: []
+		};
+		const packet = deps.buildDecisionPacket(packetInput(representative, mission, observed, reason, "human_decision"));
+		packetHtmlPath = await deps.writeDecisionPacketHtml(packet.packetId, packet.html);
+		record = {
+			decisionId: packet.decisionId,
+			decisionKey,
+			type: "human_decision",
+			status: "pending",
+			packetId: packet.packetId,
+			inputFingerprint: fingerprint,
+			options: decisionOptions("human_decision").map((option) => ({ id: option.id })),
+			createdMs: Date.now()
+		};
+		await deps.upsertDecision(record);
+	}
+	return {
+		requestId: decisionKey,
+		decisionId: record.decisionId,
+		missionId: mission.id,
+		repo: representative.repo,
+		issue: null,
+		pr: null,
+		reason,
+		...packetHtmlPath !== void 0 ? { packetHtmlPath } : {}
+	};
+}
 async function createHumanRequest(unit, mission, observed, reason, deps) {
 	const { decisionKey, fingerprint, type } = decisionKeyFor(unit, observed, reason);
 	const existing = await deps.findByKey(decisionKey);
@@ -8309,9 +8472,10 @@ function shouldEscalateOpenUncorrelated(unit, observed, activeUnits) {
 }
 async function observeBlockedUnit(unit, deps, applied) {
 	const decisionId = unit.blockingDecisionId;
-	if (!decisionId) return;
+	if (!decisionId) return false;
 	const observed = await deps.observeUnit(unit);
 	updateUnitFromObservedPrs(unit, observed);
+	const progressed = recordVerifiedProgress(unit, observed);
 	unit.lastCheckedMs = Date.now();
 	const mutation = observed.externalMutation;
 	let decision;
@@ -8358,6 +8522,7 @@ async function observeBlockedUnit(unit, deps, applied) {
 		applied.push(`reconciled external close for ${repoLabel$1(unit.repo)}#${unit.pr ?? "?"}`);
 	} else if (mutation === "merged_uncorrelated" || mutation === "open_uncorrelated") consola.warn(`first-mate: an UNCORRELATED ${mutation === "merged_uncorrelated" ? "merged" : "open"} PR was observed for blocked ${unit.missionId}:${unitHandle(unit)} — leaving blocked for human reconciliation`);
 	await deps.upsertUnit(unit.repo, unit);
+	return progressed;
 }
 /**
 * Lightweight, idempotent, best-effort reconciliation at the start of a drive.
@@ -8418,9 +8583,30 @@ async function assertFenceHeld(effect) {
 	const token = currentFenceToken();
 	if (token !== void 0 && !await isCurrentFencingToken(token)) throw new Error(`first-mate: drive lease lost before ${effect} (token ${token}) — skipping side effect`);
 }
-async function executeAction(action, unit, mission, observed, evidence, policy, deps, needsModel, needsHuman, applied, order) {
+async function executeAction(action, unit, mission, observed, evidence, policy, deps, needsModel, needsHuman, applied, order, renewLease) {
 	switch (action.kind) {
 		case "dispatch": return;
+		case "retry_plan": {
+			const repo = agentRepo(unit.repo);
+			const model = resolveCloudAgentModel(unit.model ?? mission.defaultModel);
+			const dateStr = unit.artifactDateStr ?? artifactDate(Date.now());
+			unit.artifactDateStr = dateStr;
+			unit.planRetries = (unit.planRetries ?? 0) + 1;
+			if (await dispatchWithOutbox(unit, deps, ({ idempotencyKey, promptTag }) => deps.startTask(repo, {
+				prompt: planPrompt(unit, mission, dateStr) + promptTag,
+				model,
+				createPullRequest: false,
+				idempotencyKey
+			}), renewLease, (started) => {
+				unit.provider = providerState(started.state, "queued");
+				unit.phase = "plan";
+				unit.dispatchMode = "plan";
+				unit.blockingDecisionId = null;
+				unit.implementerLab = unit.agent;
+				unit.lastSteer = { atMs: Date.now() };
+			})) applied.push(`retried plan task for ${unit.missionId}:${unitHandle(unit)}`);
+			return;
+		}
 		case "steer":
 			consola.debug("first-mate controller received direct steer action; v1 skips it");
 			return;
@@ -8485,9 +8671,12 @@ async function upsertMissionDurable(mission, deps) {
 function isUndispatched(unit) {
 	return unit.provider === "none" && unit.taskId === null && unit.dispatch === void 0;
 }
-/** A dispatch that was interrupted mid-flight (intent persisted, no taskId yet). */
+/**
+* A dispatch interrupted mid-flight. Successor dispatches retain the prior taskId
+* until the new task is confirmed, so the durable intent itself is the signal.
+*/
 function isDispatchInterrupted(unit) {
-	return unit.dispatch !== void 0 && unit.taskId === null;
+	return unit.dispatch !== void 0;
 }
 function isActiveMissionUnit(unit, missions) {
 	return missions.get(unit.missionId)?.status === "active";
@@ -8509,8 +8698,59 @@ function activeCountsByAgent(units) {
 	}
 	return counts;
 }
-function hasActiveBuildUnit(missionId, units) {
-	return units.some((unit) => unit.missionId === missionId && unit.dispatchMode === "build" && unit.terminal !== true && (unit.provider !== "none" || unit.taskId !== null || unit.dispatch !== void 0));
+function activeBuildUnits(missionId, units) {
+	return units.filter((unit) => unit.missionId === missionId && unit.dispatchMode === "build" && unit.terminal !== true && (unit.provider !== "none" || unit.taskId !== null || unit.dispatch !== void 0));
+}
+/**
+* Normalize a declared file-scope entry to a comparable path prefix: collapse
+* backslashes, strip a leading `./`, and — because ANY glob metacharacter (`*`,
+* `?`, `[`, `{`) makes the matched set unbounded — collapse the scope to the
+* PARENT DIRECTORY of its first glob segment (`src/*.ts` → `src`, `src/f?.ts` →
+* `src`, `*.ts`/`{a,b}/**` → `` = whole repo). This over-approximates (it can
+* over-serialize) but NEVER declares two globby scopes falsely disjoint. A
+* whole-repo scope (`""`, `.`, `/`, or a root-level glob) overlaps everything.
+* Case is preserved — paths are case-sensitive on the primary Linux CI.
+*/
+function normalizeScope(raw) {
+	let s = raw.trim().replace(/\\/g, "/").replace(/^\.\//, "");
+	const glob = s.search(/[*?{[]/);
+	if (glob !== -1) {
+		const lastSlash = s.lastIndexOf("/", glob);
+		s = lastSlash === -1 ? "" : s.slice(0, lastSlash);
+	}
+	s = s.replace(/^\.$/, "").replace(/\/+$/, "");
+	return s;
+}
+/** Two single scopes overlap when equal, or one is a directory-prefix of the other. */
+function scopesOverlap(a, b) {
+	if (a === "" || b === "") return true;
+	return a === b || a.startsWith(`${b}/`) || b.startsWith(`${a}/`);
+}
+/**
+* Two file-scope LISTS are PROVABLY disjoint only when BOTH are non-empty and no
+* pair of entries overlaps. Absent/empty → NOT disjoint (unknown scope → caller
+* must serialize; the safe, pre-existing behavior).
+*/
+function fileScopesDisjoint(a, b) {
+	if (a === void 0 || b === void 0 || a.length === 0 || b.length === 0) return false;
+	const na = a.map(normalizeScope);
+	const nb = b.map(normalizeScope);
+	return na.every((x) => nb.every((y) => !scopesOverlap(x, y)));
+}
+/**
+* Concurrent-build gate. A mission serializes builds by default (one active build
+* per mission — avoids racing PRs on overlapping files). A candidate build may run
+* CONCURRENTLY with the mission's other active builds only when independence is
+* PROVEN: under the per-mission `maxConcurrentBuilds` cap AND its declared
+* `fileScopes` are non-empty and disjoint from EVERY other active build's scopes.
+* Unknown or overlapping scope → serialize. Dependency ordering is gated
+* separately by `depsSatisfied`, so this only governs concurrency among ready units.
+*/
+function canDispatchBuild(candidate, mission, units) {
+	const active = activeBuildUnits(mission.id, units).filter((u) => u !== candidate);
+	if (active.length === 0) return true;
+	if (active.length >= maxConcurrentBuildsOf(mission)) return false;
+	return active.every((other) => fileScopesDisjoint(candidate.fileScopes, other.fileScopes));
 }
 /** Default plan-review gate for a mission (absent → the hard, current flow). */
 function planGateOf(mission) {
@@ -8523,6 +8763,13 @@ function planGateOf(mission) {
 */
 const DEFAULT_MAX_FIX_CYCLES = 12;
 const DEFAULT_MAX_COPILOT_COMMENTS = 8;
+/**
+* Default per-mission concurrent-build cap. Builds still serialize unless the
+* units prove disjoint `fileScopes`, so this only bounds parallelism among
+* provably-independent units; a mission without declared scopes behaves exactly
+* as before (one active build at a time).
+*/
+const DEFAULT_MAX_CONCURRENT_BUILDS = 4;
 function maxFixCyclesOf(mission) {
 	const value = mission.maxFixCycles;
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : DEFAULT_MAX_FIX_CYCLES;
@@ -8531,6 +8778,10 @@ function maxCopilotCommentsOf(mission) {
 	const value = mission.maxCopilotComments;
 	return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : DEFAULT_MAX_COPILOT_COMMENTS;
 }
+function maxConcurrentBuildsOf(mission) {
+	const value = mission.maxConcurrentBuilds;
+	return typeof value === "number" && Number.isInteger(value) && value >= 1 ? value : DEFAULT_MAX_CONCURRENT_BUILDS;
+}
 /** Format an epoch-ms timestamp as a UTC `YYYY-MM-DD` date for artifact paths. */
 function artifactDate(ms) {
 	return new Date(ms).toISOString().slice(0, 10);
@@ -8547,6 +8798,13 @@ function artifactSlug(unit) {
 function unitIdInstruction(unit) {
 	return `Controller correlation marker: ${`unit-id: ${unit.id ?? unitHandle(unit)}`}. The Agent-Tasks API has no branch/label field, so this is cooperative: include this exact marker in the branch name if possible, put it on its own line in the PR body, and include it in the first commit message trailer.`;
 }
+/**
+* Prevention layer for plan-mode stalls: the documented lever to keep a Copilot
+* cloud agent from parking in `waiting_for_user` is to instruct it to proceed on
+* best judgment and record assumptions instead of pausing to ask. Included in
+* every dispatch prompt; mirrored in scaffolded repo guidance.
+*/
+const AUTONOMY_DIRECTIVE = "Work autonomously: do not stop to ask clarifying questions. If a requirement is ambiguous, choose the most reasonable interpretation, state the assumption explicitly (in the plan and the pull request description), and continue. Surface open questions as notes rather than blocking on them.";
 function planPrompt(unit, mission, dateStr) {
 	const slug = artifactSlug(unit);
 	const parts = [
@@ -8558,6 +8816,7 @@ function planPrompt(unit, mission, dateStr) {
 		`Persist your work as durable artifacts committed on the branch: write your research and findings to \`docs/research/${dateStr}-${slug}.md\` and your step-by-step implementation plan to \`docs/plans/${dateStr}-${slug}.md\`. Create the \`docs/research\` and \`docs/plans\` directories if they do not exist, and commit both files on the branch so the implementation task can read them.`
 	];
 	if (mission.houseRules !== void 0) parts.splice(2, 0, `House rules:\n${mission.houseRules}`);
+	parts.push(AUTONOMY_DIRECTIVE);
 	parts.push(renderDod([mission.acceptanceCriteria]));
 	return parts.join("\n\n");
 }
@@ -8574,6 +8833,7 @@ function buildPrompt(unit, mission, dateStr) {
 	if (hasPlan) parts.push(`Approved plan (authoritative — implement this):\n${unit.planExcerpt.trim()}`);
 	parts.push("Implement this work unit end-to-end on a new branch and open a pull request for review. Follow the approved plan above. Keep the change focused on this unit and do not modify unrelated files. If anything about the acceptance criteria is ambiguous, make a reasonable choice and note it in the PR description.");
 	parts.push(hasPlan ? `If a committed implementation plan for this unit is present (\`docs/plans/${dateStr}-${slug}.md\`, or a file under \`docs/plans/\` whose name ends with \`-${slug}.md\`) and the research at \`docs/research/${dateStr}-${slug}.md\`, read them for extra detail — but the approved plan above is authoritative and does not depend on those files existing. Keep any such artifacts up to date with deviations you make, and if a \`LEARNINGS.md\` exists at the repository root, append a dated entry summarizing what you learned.` : `Read the committed implementation plan at \`docs/plans/${dateStr}-${slug}.md\` and the research at \`docs/research/${dateStr}-${slug}.md\` (if the exact dated filename is absent, locate the plan committed for this unit under \`docs/plans/\` whose name ends with \`-${slug}.md\`) and implement it. Keep those artifacts up to date with any deviations you make, and if a \`LEARNINGS.md\` exists at the repository root, append a dated entry summarizing what you learned.`);
+	parts.push(AUTONOMY_DIRECTIVE);
 	parts.push(renderDod([mission.acceptanceCriteria]));
 	return parts.join("\n\n");
 }
@@ -8599,14 +8859,15 @@ function dispatchIdempotencyKey(unit, attempt) {
 	const unitId = unit.id ?? (unit.issue !== null ? `issue-${unit.issue}` : "unit");
 	return `dispatch:${unit.repo.owner}/${unit.repo.name}#${unitId}@${attempt}`;
 }
-async function dispatchWithOutbox(unit, deps, start, renewLease) {
+async function dispatchWithOutbox(unit, deps, start, renewLease, applySuccess) {
 	if (unit.dispatch !== void 0) {
 		consola.debug(`first-mate: skipping dispatch for ${unit.missionId}:${unitHandle(unit)} — a dispatch intent (${unit.dispatch.id}) is already pending; recovery resolves it`);
 		return null;
 	}
 	if (renewLease !== void 0 && !await renewLease()) throw new Error(`first-mate: drive lease renewal failed before dispatch side effect for ${unit.missionId}:${unitHandle(unit)} — aborting`);
-	const attempt = 1;
+	const attempt = (unit.dispatchAttempts ?? (unit.taskId ? 1 : 0)) + 1;
 	const key = dispatchIdempotencyKey(unit, attempt);
+	unit.dispatchAttempts = attempt;
 	unit.dispatch = {
 		id: key,
 		requestedMs: Date.now(),
@@ -8626,6 +8887,7 @@ async function dispatchWithOutbox(unit, deps, start, renewLease) {
 	if (task.taskId.length === 0) return null;
 	unit.taskId = task.taskId;
 	unit.dispatch = void 0;
+	applySuccess?.(task);
 	await deps.upsertUnit(unit.repo, unit);
 	await deps.dispatchOutbox?.markDone(key);
 	return task;
@@ -8664,7 +8926,7 @@ async function dispatchWave(units, missions, maxInFlightPerProvider, deps, appli
 		if (current >= maxInFlightPerProvider) continue;
 		const mission = missions.get(unit.missionId);
 		if (mission === void 0) continue;
-		if (unit.dispatchMode === "build" && hasActiveBuildUnit(unit.missionId, allCountUnits)) continue;
+		if (unit.dispatchMode === "build" && !canDispatchBuild(unit, mission, allCountUnits)) continue;
 		if (renewLease !== void 0 && !await renewLease()) {
 			applied.push("dispatch wave stopped: drive lease lost mid-sweep");
 			break;
@@ -8830,6 +9092,8 @@ async function advance(input = {}, deps = defaultDeps) {
 		const scopedMissions = input.missionId ? missions.filter((m) => m.id === input.missionId) : missions;
 		const missionsById = missionMap(scopedMissions);
 		let order = needsHuman.length;
+		const progressedMissionIds = /* @__PURE__ */ new Set();
+		const observedUnits = /* @__PURE__ */ new Set();
 		try {
 			await reconcile(scopedUnits, deps, applied);
 		} catch (err) {
@@ -8840,7 +9104,8 @@ async function advance(input = {}, deps = defaultDeps) {
 			order += 1;
 			if (unit.blockingDecisionId) {
 				try {
-					await observeBlockedUnit(unit, deps, applied);
+					observedUnits.add(unit);
+					if (await observeBlockedUnit(unit, deps, applied)) progressedMissionIds.add(unit.missionId);
 				} catch (err) {
 					consola.warn(`first-mate: blocked unit ${unit.missionId}:${unitHandle(unit)} observe failed:`, err);
 					applied.push(`error observing blocked ${unit.missionId}:${unitHandle(unit)}: ${errText(err)}`);
@@ -8864,7 +9129,20 @@ async function advance(input = {}, deps = defaultDeps) {
 					continue;
 				}
 				const observed = await deps.observeUnit(unit);
-				if (await reconcileObservedPrState(unit, observed, deps, applied)) continue;
+				observedUnits.add(unit);
+				const prevEmptyState = {
+					headSha: unit.headSha ?? null,
+					baseRef: unit.baseRef ?? null,
+					isDraft: unit.prIsDraft
+				};
+				updateUnitFromObservedPrs(unit, observed);
+				if (recordVerifiedProgress(unit, observed)) progressedMissionIds.add(unit.missionId);
+				unit.lastCheckedMs = Date.now();
+				if (await reconcileObservedPrState(unit, observed, deps, applied)) {
+					if (recordVerifiedProgress(unit, observed)) progressedMissionIds.add(unit.missionId);
+					await deps.upsertUnit(unit.repo, unit);
+					continue;
+				}
 				if (shouldEscalateOpenUncorrelated(unit, observed, scopedUnits)) {
 					needsHuman.push({
 						request: await createHumanRequest(unit, mission, observed, `uncorrelated open same-bot PR #${observed.externalPr ?? "unknown"} appears to be orphaned — human reconciliation required before first mate can continue`, deps),
@@ -8875,13 +9153,6 @@ async function advance(input = {}, deps = defaultDeps) {
 					continue;
 				}
 				const evidence = await fillFuzzyFields(unit, mission, observed, deps);
-				const prevEmptyState = {
-					headSha: unit.headSha ?? null,
-					baseRef: unit.baseRef ?? null,
-					isDraft: unit.prIsDraft
-				};
-				updateUnitFromObservedPrs(unit, observed);
-				unit.lastCheckedMs = Date.now();
 				const failSig = failureSignature(observed);
 				if (unit.lastFailSig !== void 0 && unit.lastFailSig !== null && failSig !== unit.lastFailSig) unit.retries = 0;
 				unit.lastFailSig = failSig;
@@ -8890,7 +9161,11 @@ async function advance(input = {}, deps = defaultDeps) {
 				} catch (err) {
 					consola.debug(`first-mate: dismissStaleOwnReviews skipped for ${unit.missionId}:${unitHandle(unit)}:`, err);
 				}
-				if (await maybeMergeWithApproval(unit, observed, evidence, deps, applied)) continue;
+				if (await maybeMergeWithApproval(unit, observed, evidence, deps, applied)) {
+					if (recordVerifiedProgress(unit, observed)) progressedMissionIds.add(unit.missionId);
+					await deps.upsertUnit(unit.repo, unit);
+					continue;
+				}
 				const classified = classify(observed, unit);
 				unit.provider = classified.provider;
 				unit.phase = classified.phase;
@@ -8912,19 +9187,56 @@ async function advance(input = {}, deps = defaultDeps) {
 						reason: "the agent's pull request still has no changes and its head has not advanced across repeated observations"
 					};
 				}
-				await executeAction(action, unit, mission, observed, evidence, policy, deps, needsModel, needsHuman, applied, requestOrder);
+				await executeAction(action, unit, mission, observed, evidence, policy, deps, needsModel, needsHuman, applied, requestOrder, input.renewLease);
 				await deps.upsertUnit(unit.repo, unit);
 			} catch (err) {
 				consola.warn(`first-mate: unit ${unit.missionId}:${unitHandle(unit)} step failed:`, err);
 				applied.push(`error advancing ${unit.missionId}:${unitHandle(unit)}: ${errText(err)}`);
 			}
 		}
+		for (const mission of scopedMissions) {
+			if (mission.status !== "active") continue;
+			const liveUnits = scopedUnits.filter((unit) => unit.missionId === mission.id && unit.terminal !== true);
+			if (liveUnits.length === 0 || liveUnits.some((unit) => !observedUnits.has(unit))) continue;
+			const now = Date.now();
+			if (progressedMissionIds.has(mission.id)) {
+				mission.noProgressWakes = 0;
+				delete mission.stallSinceMs;
+				delete mission.stallEscalatedFingerprint;
+				mission.updatedMs = now;
+				await upsertMissionDurable(mission, deps);
+				continue;
+			}
+			mission.noProgressWakes = (mission.noProgressWakes ?? 0) + 1;
+			mission.stallSinceMs ??= now;
+			mission.updatedMs = now;
+			const stallFingerprint = digest(liveUnits.map((unit) => `${unitHandle(unit)}:${unit.provider}:${unit.lastNoProgressReason ?? "no verified progress"}`).sort().join("|"));
+			const oldEnough = now - mission.stallSinceMs >= STALL_MS;
+			const impossible = mission.noProgressWakes >= STALL_WAKES && liveUnits.every((unit) => unit.provider === "in_progress" && unit.pr === null);
+			if (mission.noProgressWakes >= STALL_WAKES && (oldEnough || impossible) && mission.stallEscalatedFingerprint !== stallFingerprint) {
+				const ageMinutes = Math.max(0, Math.floor((now - mission.stallSinceMs) / 6e4));
+				const diagnosis = liveUnits.map((unit) => `${unitHandle(unit)} [provider=${unit.provider}]: ${unit.lastNoProgressReason ?? "no verified progress"}`).join("; ");
+				const reason = `mission is not progressing toward merge after ${mission.noProgressWakes} wakes (${ageMinutes}m): ${diagnosis}`;
+				needsHuman.push({
+					request: await createMissionStallRequest(mission, liveUnits, reason, stallFingerprint, deps),
+					sortKey: Math.min(...liveUnits.map(sortKey)),
+					order: order++
+				});
+				mission.stallEscalatedFingerprint = stallFingerprint;
+			}
+			await upsertMissionDurable(mission, deps);
+		}
 		for (const mission of scopedMissions) {
 			if (mission.status !== "active") continue;
 			if (mission.everDecomposed !== true) continue;
 			if (scopedUnits.some((unit) => unit.missionId === mission.id && isActiveUnit(unit, missionsById))) continue;
 			if (scopedUnits.some((unit) => unit.missionId === mission.id && Boolean(unit.blockingDecisionId))) continue;
 			if (hasQueuedRequestForMission(mission.id, needsModel, needsHuman)) continue;
+			const unmergedTerminal = scopedUnits.filter((unit) => unit.missionId === mission.id && unit.terminal === true && unit.artifact !== "pr_merged");
+			if (unmergedTerminal.length > 0) {
+				applied.push(`mission ${mission.id} NOT completed: ${unmergedTerminal.length} unit(s) ended without a merge — done requires every unit merged`);
+				continue;
+			}
 			mission.status = "done";
 			mission.updatedMs = Date.now();
 			await upsertMissionDurable(mission, deps);
@@ -8972,9 +9284,99 @@ async function advance(input = {}, deps = defaultDeps) {
 	return fenceToken !== void 0 ? runFenced(fenceToken, runDrive) : runDrive();
 }
 
+//#endregion
+//#region src/lib/first-mate/operating-protocol.ts
+/**
+* Single source of truth for the condensed CEO/CTO/CPO operating sequence.
+*
+* Shared by BOTH the scaffolded product playbook (`buildPlaybook` in
+* `scaffold-spec.ts`, committed into a repo and read by the GitHub cloud agents)
+* AND the operator-facing `gh-first-mate-operate` skill (read by the local
+* first-mate lead that shapes missions). Keeping ONE copy is what prevents the
+* cloud-agent surface and the operator surface from drifting apart.
+*/
+const CONDENSED_OPERATING_SEQUENCE = `1. **DISCOVER:** find a struggling moment; require three corroborated sources; log hire/fire criteria.
+2. **NICHE:** choose one reachable beachhead with a credible 1,000-fan path; pass a distribution test and go/no-go table.
+3. **POSITION:** map do-nothing, workarounds, and competitors; prove differentiated value; test one sentence with real prospects.
+4. **SCOPE:** run the riskiest-assumption test against a pre-set threshold; freeze v0.1 with must-be, performance, and at least one delight.
+5. **BUILD:** ADRs, trunk/flags, test pyramid, CI/CD and DORA; verify HTTP 200, green CI, five-minute quickstart, WCAG, and Web Vitals.
+6. **LAUNCH:** README and docs sell the job; launch sequentially where the beachhead lives; instrument the aha moment.
+7. **MEASURE:** AARRR, time-to-first-value, Sean Ellis ≥40% very disappointed, and a flattening retention curve.
+8. **ITERATE:** weekly opportunity-solution tree from real evidence; RICE validated options only; thresholded experiments and changelog.
+9. **GROW:** scale retained-user channels and shareable-artifact loops within explicit economics.
+10. **GOVERN:** OODA daily inside Build-Measure-Learn; log hypothesis → experiment → metric → threshold → outcome; advance only on externally verifiable checkpoints.`;
+/**
+* Single source of truth for the DEFINITION OF REPO GREATNESS — the shipping-
+* infrastructure bar a repo must clear to be "great", stated as checkpoints a
+* third party can verify with NO special access (a green check, a `gh api`, a
+* `curl`, a `cosign verify`). Shared by the scaffolded playbook (`buildPlaybook`),
+* the operator/CEO skills, and the eval framework, so the bar never drifts across
+* surfaces. Every item is "done" only with a real evidence handle, never a
+* self-reported claim.
+*
+* Currency note (2026): INP replaced FID; npm/crates.io OIDC Trusted Publishing is
+* GA; GitHub build-provenance attestations meet SLSA Build L3; VS Code Marketplace
+* still needs a long-lived PAT (the one OIDC gap). SEO indexing/ranking and
+* E-E-A-T are NOT deterministically gradeable by anonymous curl — treat as soft
+* signals (proxy via byline/date/architecture + Search Console).
+*/
+const DEFINITION_OF_GREATNESS = `A repo is GREAT on the shipping axis only when every claim is externally verifiable by a stranger. The organizing invariant: **version file == git tag == GitHub Release == registry version == CHANGELOG heading == live-site build stamp** — most checkpoints are just cross-checks of this identity.
+
+**Leading vs lagging — the anti-hallucination rule for greatness.** Every checkpoint is either **[LEADING]** (a file/config an agent can add in ONE commit — necessary hygiene, NEVER proof of greatness) or **[LAGGING]** (requires real humans acting over time — response times, repeat contributors, dependents, retained downloads) or **[SOFT]** (real but not deterministically gradeable). An autonomous agent can fabricate every leading artifact while producing zero community. So a repo is GREAT only when at least one LAGGING signal has actually MOVED — not when the leading boxes are merely ticked. Never treat file-presence as evidence of community, adoption, or trust.
+
+## Universal core (every repo)
+- **Branch protection via a ruleset** [LEADING] on the default branch: required checks (lint + typecheck + test + build) green, strict (up-to-date), ≥1 review, linear history, conversation resolution. Verify: \`gh api repos/$R/rules/branches/main\`.
+- **Matrix CI** [LEADING] (OS × version) green on the default branch; gate on a synthetic all-green job that \`needs:\` every matrix cell. Verify: \`gh api repos/$R/commits/main/check-runs --jq '[.check_runs[].conclusion]|unique'\` == \`["success"]\`.
+- **Supply-chain security** [LEADING]: CodeQL + Dependabot (deps + security + \`github-actions\`) + secret scanning + push protection on, low/zero open alerts; OpenSSF Scorecard published. Verify: \`gh api repos/$R/code-scanning/alerts?state=open\`, \`.../dependabot/alerts?state=open\`, \`api.scorecard.dev/projects/github.com/$R\`.
+- **Security DISCLOSURE posture** [LEADING] (distinct from build hardening): \`SECURITY.md\` with a disclosure channel + response SLA; GitHub Private Vulnerability Reporting enabled; \`/.well-known/security.txt\` (RFC 9116) served on the site; an **OpenSSF Best Practices badge** (passing → silver → gold; state is API-readable at bestpractices.openssf.org). [LAGGING] a real advisory/CVE track record + time-to-patch.
+- **Workflow hygiene** [LEADING]: \`permissions:\` least-privilege (default \`contents: read\`, escalate per-job); every \`uses:\` pinned to a 40-char SHA; reproducible installs (lockfile + \`npm ci\`/\`--frozen\`/\`--require-hashes\`). Flaky tests QUARANTINED (\`continue-on-error\`, non-required, tracked as issues) — never retried-until-green.
+- **Safe to depend on** [LEADING/verifiable]: a written deprecation/stability/support-window policy + an **API-breaking-change CI gate** (\`cargo-semver-checks\` / \`@microsoft/api-extractor\` / \`japicmp\`) that fails a PR on an undeclared breaking change; migration guides for majors. [LAGGING] unplanned breaking releases trend to ~0.
+- **Docs that TEACH, not just rank** [LEADING/verifiable]: Diataxis structure (tutorial / how-to / reference / explanation) + a generated **API reference** + **examples EXECUTED in CI** (doctest / tested code fences — the one docs check that resists rot); a \`<5-min\` time-to-first-success smoke test from a clean container. [SOFT] whether the quickstart is genuinely clear.
+- **Legal & provenance** [LEADING/verifiable]: REUSE/SPDX headers (\`reuse lint\`), DCO or CLA enforced on PRs, a dependency-license scan in CI, correct \`NOTICE\`/attribution; \`actions/attest-build-provenance\` on release artifacts (SLSA Build L3) — verify \`gh attestation verify <artifact> --repo $R\`.
+- **Quality beyond green CI** [LEADING, gate ONLY when the surface applies]: OSS-Fuzz (parsers / security-sensitive), a perf-regression gate (hot paths), accessibility CI (axe-core / Lighthouse a11y ≥ target) for any UI, i18n wired. Track mutation-testing score (Stryker / \`cargo-mutants\`) — do NOT hard-gate a raw coverage %.
+- **Releases** [LEADING]: SemVer single-sourced; **Keep a Changelog** \`CHANGELOG.md\` (dated, \`[Unreleased]\`); tagged **GitHub Releases** with generated notes; release automation (release-please / semantic-release). Verify: \`gh release view vX.Y.Z --json tagName,isLatest,body,assets\`.
+- **README media** [LEADING]: theme-adaptive hero (\`<picture>\`/\`#gh-dark-mode-only\`) + a demo (GIF / asciinema / linked video) + alt text on every image; repo social-preview set. Verify: \`grep\` the README + \`curl -I\` the assets return image 200.
+
+## Community, sustainability & trust (Pillar C — the contributor funnel + who keeps it alive)
+Great OSS is a project other humans JOIN, TRUST, and SUSTAIN — not just a well-shipped artifact. Most of this is LAGGING: measure the trajectory, never the file. A great score here REQUIRES a lagging signal to have moved.
+- **Contributor funnel** [LAGGING]: time-to-first-response on new issues/PRs (CHAOSS; healthy ≈ ≤2 business days, a HUMAN not a bot), median PR-merge time, and **repeat-contributor rate** (contributors with ≥2 contributions across periods) — the real "is the onramp working" signal. [LEADING] \`CONTRIBUTING.md\` / \`CODE_OF_CONDUCT.md\` / \`SUPPORT.md\` / \`CODEOWNERS\` / issue + PR templates present (\`gh api repos/$R/community/profile\`) + good-first-issue / help-wanted labels — a HYGIENE FLOOR only, never proof.
+- **Sustainability & governance** [LEADING] \`.github/FUNDING.yml\`, \`GOVERNANCE.md\`/\`MAINTAINERS.md\`, \`ADOPTERS.md\`; [LAGGING] **Contributor Absence Factor** (bus-factor: min contributors making 50% of contributions) ≥ 2–3, **committers from ≥2 organizations** (CNCF graduated bar), ≥3 real adopters, and **liveness** — recent last-commit / last-release on a predictable cadence (abandonment is the most common death).
+- **Adoption verdict** [LAGGING]: **dependents / "Used by" count** (dependency-graph API — the un-fakeable adoption signal funders use), retained-download trend (not a launch-day spike), third-party integrations/tutorials, issue-to-star ratio (stars alone are vanity).
+
+## By final destination (detect from the repo root)
+- **Web app / docs → GitHub Pages** (\`build_type == "workflow"\`, auto-deploy on merge, protected \`github-pages\` env):
+  - **Live-content proof:** stamp \`_site/BUILD_SHA.txt\`; the live edge must serve it — \`curl -fsSL "$SITE/BUILD_SHA.txt?cb=$(date +%s)"\` == \`git rev-parse HEAD\`.
+  - **Google-discoverable SEO:** \`sitemap.xml\` + \`robots.txt\` (with \`Sitemap:\`) + self-referential \`rel=canonical\` + no accidental noindex (custom \`404.html\` gets \`meta robots noindex\`); full **OG + Twitter cards** + **JSON-LD \`SoftwareApplication\`** (+ \`WebSite\`/\`BreadcrumbList\`); **Lighthouse SEO ≥ 0.90**; **Core Web Vitals** LCP ≤ 2.5s / INP ≤ 200ms / CLS ≤ 0.1; HTTPS enforced + correct custom-domain DNS; **Search Console** verified + sitemap submitted + IndexNow ping from the deploy. og-image 1200×630 returns 200. Verify via \`curl\`/\`lighthouse\`/PageSpeed API.
+  - Content targeting real developer queries (error strings, "X vs Y", tutorials), dated changelog.
+- **JS library / CLI → npm:** OIDC Trusted Publishing (\`id-token: write\`, \`--provenance\`, NO \`NPM_TOKEN\`). Verify: \`npm view <pkg> version\`, \`npm install <pkg>\`, \`npm audit signatures\`.
+- **Python → PyPI:** Trusted Publisher (\`pypa/gh-action-pypi-publish\`, \`environment: pypi\`, no token) + PEP 740 attestation. Verify: \`pip install <pkg>==X.Y.Z\`.
+- **Rust → crates.io:** Trusted Publishing (\`rust-lang/crates-io-auth-action\`; first publish manual). Verify: \`cargo add <crate>@X.Y.Z\`.
+- **Service / container → GHCR:** multi-arch + \`provenance: true\` + \`sbom: true\` + keyless cosign. Verify: \`cosign verify\` + \`verify-attestation\` + \`docker pull\`.
+- **GitHub Action → Marketplace:** complete \`action.yml\` + a floating major tag (\`v1\`). Verify: \`uses: owner/action@v1\` resolves; listed publicly.
+- **Go module → proxy (tag-driven):** tag \`vX.Y.Z\` (\`/vN\` in the module path for major ≥ 2). Verify: \`go install ...@vX.Y.Z\`; \`proxy.golang.org\`/\`sum.golang.org\` have it.
+
+## Publish pipeline (final destination)
+End to end: reusable build+test (\`workflow_call\`) → release automation → tag + GitHub Release → \`on: release: published\` publish jobs, EACH behind its own protected environment + OIDC (no long-lived tokens) → provenance attestation on every artifact. Gate same-workflow steps with \`needs:\`; use protected environments + required reviewers so "push to main" becomes "a human approves" while auth stays tokenless. NEVER \`pull_request_target\` to check out untrusted fork code.
+
+## UI/UX excellence, VERIFIED BY BROWSING (Pillar D — every user-viewable surface, proven by VIEWING the rendered result, never guessed from code)
+Governing rule: NEVER infer UI/UX quality from source, markdown, or a returned 200 — DRIVE the running artifact in a real browser (\`mcp__browser__*\` / Playwright), capture the actual pixels at real viewports (375/768/1280+), light+dark + reduced-motion, walk the real flows, and judge THOSE pixels. Applies to EVERY surface a human sees: the product UI, the README as GitHub RENDERS it, the live Pages site, the docs, the rendered Release page, the social/og share-card as it appears when shared, and the 404. This UPGRADES the curl/grep "README media" + a11y checks above from "the asset exists / a score passed" to "the rendered result was viewed." A captured screenshot proves a state was rendered and viewed, NOT that it is good. No LAGGING item here — the lagging proof of frictionless UX is the activation / time-to-first-value / retention curve in the outcome bar; Pillar D is the LEADING craft that de-risks it.
+- **State matrix captured** [LEADING]: every key screen driven through ALL states — empty, loading/skeleton, error, success, first-run/onboarding, partial, edge/overflow (long text, huge/tiny data) — at mobile 375 / tablet 768 / desktop 1280+ × light+dark. Verify: a Playwright spec drives + screenshots each cell, run green.
+- **Visual-regression baselines** [LEADING]: \`expect(page).toHaveScreenshot()\` goldens committed + green in CI (any unintended pixel change fails), render env pinned. Green proves NO CHANGE from a BLESSED baseline, not beauty.
+- **Accessibility gate** [LEADING]: \`@axe-core/playwright\` ZERO serious/critical on each key screen AND state; keyboard reaches every control with a visible focus indicator; pointer targets ≥ 24×24 CSS px (WCAG 2.2 SC 2.5.8 / 2.4.11 / 2.4.13). axe catches ~57% of issues by volume — a floor, not "accessible."
+- **Contrast + dark-mode + reduced-motion** [LEADING]: text contrast ≥ 4.5:1 (≥ 3:1 large text / UI) measured from the rendered result; a REAL \`prefers-color-scheme\` dark theme (not inverted) and \`prefers-reduced-motion\` (animation actually suppressed), captured via \`page.emulateMedia\`. WCAG 2.2 SC 1.4.3.
+- **CWV + Lighthouse budgets** [LEADING, web surfaces]: LCP ≤ 2.5s / INP ≤ 200ms / CLS ≤ 0.1 (75th pct); Lighthouse Perf/A11y/Best-Practices/SEO ≥ 0.90 asserted in CI (Lighthouse CI). Perf ≠ flow friction — a floor.
+- **Rendered README as GitHub shows it** [LEADING]: \`mcp__browser__navigate\` the repo page + screenshot the RENDERED README in light AND dark — every image/badge loads (no broken-image glyph), theme-adaptive \`<picture>\` swaps, relative links resolve, no raw-markdown artifacts. A 200 proves reachable, not that the hero reads well.
+- **Rendered Pages / docs / Release / og share-card** [LEADING]: each published surface DRIVEN + screenshotted at its real URL — live Pages + docs (nav works, no overflow, consistent chrome), the latest Release page (notes render, links 200), the share-card (og:image exactly 1200×630 or social-preview 1280×640, returns 200, text legible when actually rendered).
+- **Is it beautiful, elegant, professional, frictionless?** [SOFT/advisory]: an LLM vision rubric scores the REAL screenshots (never the code) on visual hierarchy, spacing rhythm, type/readability, restrained palette, alignment/grid, consistency, motion-with-purpose, and whether each state genuinely helps (empty guides the next action; error is plain-language + recovery; onboarding lands the aha < 5 min). Cite the exact screenshot per finding. Record as ADVISORY evidence with the images — NEVER a verified checkmark or greatness box-tick.
+Anti-cargo-cult (do NOT fake a check): a screenshot file existing, a green \`toHaveScreenshot\` over an unreviewed baseline, an axe pass on only the happy path, a \`<meta viewport>\` tag, or a passing CWV score are NECESSARY floors, NOT proof of a beautiful, frictionless UI. The only honest proofs are the deterministic gates (each for its property) and the advisory rubric over real pixels, labeled advisory.
+
+## Soft signals & anti-cargo-cult (do NOT fake a checkmark, do NOT hard-gate)
+SEO indexing/ranking is never guaranteed by Google; E-E-A-T/content quality has no exposed score. Proxy via byline/last-updated presence, content architecture, and (with auth) Search Console Performance — record as evidence, not a binary pass. Do NOT hard-gate raw test-coverage %, raw star count, "has a Discord", Diataxis "compliance" as a box-tick, or any \`community/profile\` file-presence number treated as evidence of community — taken as proof of greatness these ARE the hallucinated-progress trap. The intangibles that separate LOVED from merely-functional — a clear vision/opinion, DX that delights, great error messages, brand/name/story, a maintainer who cares — are real but SOFT: estimate them with an advisory rubric and label the score advisory, never verified.`;
+
 //#endregion
 //#region src/lib/first-mate/scaffold-spec.ts
 const COPILOT_SETUP_JOB_NAME = "copilot-setup-steps";
+const COPILOT_SETUP_PATH = ".github/workflows/copilot-setup-steps.yml";
 const COPILOT_SETUP_TIMEOUT_MAX = 59;
 const GUIDANCE_PATHS = [
 	"AGENTS.md",
@@ -8986,7 +9388,14 @@ const ENHANCEABLE_PATHS = new Set([
 	...GUIDANCE_PATHS,
 	"docs/adr/0001-record-architecture-decisions.md",
 	"LEARNINGS.md",
-	"CHANGELOG.md"
+	"CHANGELOG.md",
+	"docs/playbook/README.md",
+	"SECURITY.md",
+	".github/CONTRIBUTING.md",
+	"CODE_OF_CONDUCT.md",
+	"SUPPORT.md",
+	"GOVERNANCE.md",
+	"ADOPTERS.md"
 ]);
 const COPILOT_SETUP_TIMEOUT_MINUTES = 15;
 const ROLE_AGENT_NAMES = [
@@ -8994,7 +9403,10 @@ const ROLE_AGENT_NAMES = [
 	"implementer",
 	"reviewer",
 	"researcher",
-	"tester"
+	"tester",
+	"ceo",
+	"cto",
+	"cpo"
 ];
 const DEFAULT_CI_MATRIX = ["ubuntu-latest", "windows-latest"];
 function buildScaffoldFiles(opts) {
@@ -9021,17 +9433,103 @@ function buildScaffoldFiles(opts) {
 			content: buildTestInstructions(normalized)
 		},
 		{
-			path: ".github/workflows/copilot-setup-steps.yml",
+			path: COPILOT_SETUP_PATH,
 			content: buildCopilotSetupWorkflow(normalized)
 		},
 		{
 			path: ".github/workflows/ci.yml",
 			content: buildCiWorkflow(normalized)
 		},
+		...normalized.hasSite ? [
+			{
+				path: ".github/workflows/pages.yml",
+				content: buildPagesWorkflow(normalized)
+			},
+			{
+				path: "public/robots.txt",
+				content: buildRobotsTxt()
+			},
+			{
+				path: "public/sitemap.xml",
+				content: buildSitemap()
+			},
+			{
+				path: "public/seo-head.html",
+				content: buildSeoHead()
+			},
+			{
+				path: "public/404.html",
+				content: buildNotFoundPage()
+			},
+			{
+				path: "public/.well-known/security.txt",
+				content: buildSecurityTxt()
+			}
+		] : [],
+		{
+			path: ".github/workflows/codeql.yml",
+			content: buildCodeqlWorkflow(normalized)
+		},
+		{
+			path: ".github/dependabot.yml",
+			content: buildDependabot(normalized)
+		},
+		{
+			path: ".github/workflows/release.yml",
+			content: buildReleaseWorkflow(normalized)
+		},
+		{
+			path: ".github/workflows/publish.yml",
+			content: buildPublishWorkflow(normalized)
+		},
+		{
+			path: ".github/workflows/media.yml",
+			content: buildMediaWorkflow(normalized)
+		},
+		{
+			path: ".github/workflows/maintainability.yml",
+			content: buildMaintainabilityWorkflow(normalized)
+		},
 		{
 			path: ".github/pull_request_template.md",
 			content: buildPullRequestTemplate(normalized)
 		},
+		{
+			path: ".github/ISSUE_TEMPLATE/config.yml",
+			content: buildIssueTemplateConfig()
+		},
+		{
+			path: "SECURITY.md",
+			content: buildSecurityPolicy(normalized)
+		},
+		{
+			path: ".github/CONTRIBUTING.md",
+			content: buildContributing(normalized)
+		},
+		{
+			path: "CODE_OF_CONDUCT.md",
+			content: buildCodeOfConduct()
+		},
+		{
+			path: "SUPPORT.md",
+			content: buildSupport()
+		},
+		{
+			path: ".github/CODEOWNERS",
+			content: buildCodeowners()
+		},
+		{
+			path: "GOVERNANCE.md",
+			content: buildGovernance()
+		},
+		{
+			path: ".github/FUNDING.yml",
+			content: buildFunding()
+		},
+		{
+			path: "ADOPTERS.md",
+			content: buildAdopters()
+		},
 		{
 			path: "docs/adrs/0000-template.md",
 			content: buildAdrTemplate()
@@ -9052,6 +9550,10 @@ function buildScaffoldFiles(opts) {
 			path: "docs/research/README.md",
 			content: buildDatedEntryReadme("Research")
 		},
+		{
+			path: "docs/playbook/README.md",
+			content: buildPlaybook()
+		},
 		{
 			path: "LEARNINGS.md",
 			content: buildLearnings(normalized)
@@ -9075,6 +9577,14 @@ function planScaffoldFiles(opts) {
 			});
 			continue;
 		}
+		if (file.path === COPILOT_SETUP_PATH && copilotSetupIsInert(existingByPath.get(file.path) ?? "")) {
+			filesToCommit.push(file);
+			reports.push({
+				path: file.path,
+				status: "overwritten"
+			});
+			continue;
+		}
 		if (opts.mode === "overwrite-approved") {
 			filesToCommit.push(file);
 			reports.push({
@@ -9119,6 +9629,29 @@ function planScaffoldFiles(opts) {
 		reports
 	};
 }
+/**
+* True when an existing `copilot-setup-steps.yml` is one of OUR inert stubs — a
+* bare "echo" environment step with NO dependency install. Such a file leaves the
+* Copilot cloud agent's container without dependencies, so it cannot build / lint /
+* test and returns an empty draft PR (the #1 real-world cause of empty coding-agent
+* PRs). Narrow by design: a real custom setup (any recognized install command) is
+* NOT matched, so a user's hand-tuned environment is never clobbered.
+*/
+function copilotSetupIsInert(content) {
+	if (content.trim().length === 0) return false;
+	if ([
+		"npm ci",
+		"npm install",
+		"pnpm install",
+		"yarn install",
+		"bun install",
+		"go mod download",
+		"cargo fetch",
+		"pip install",
+		"Detect toolchain and install"
+	].some((token) => content.includes(token))) return false;
+	return /run:\s*echo\b/.test(content) || content.includes("Set up environment");
+}
 function appendMissingSections(current, desired) {
 	const currentHeadings = new Set(sectionHeadings(current));
 	const missing = splitTopLevelSections(desired).filter((section) => !currentHeadings.has(section.heading));
@@ -9161,6 +9694,8 @@ function normalizeScaffoldOpts(opts) {
 		defaultBranch: opts.defaultBranch?.trim() || "<!-- TODO: confirm the default branch. -->",
 		techStack: opts.techStack?.trim() || "<!-- TODO: fill in languages, frameworks, package managers, services, and runtime versions. -->",
 		packageManager: opts.packageManager?.trim() || "<!-- TODO: confirm the package manager or build tool. -->",
+		finalDestination: opts.finalDestination ?? "unknown",
+		hasSite: opts.hasSite ?? false,
 		commands: opts.commands ?? {},
 		tests: opts.tests ?? {},
 		ci: opts.ci ?? {
@@ -9176,7 +9711,7 @@ function buildGuidance(opts) {
 	const commandBlock = commandLines(opts.commands);
 	const primaryOs = opts.ci.primaryOs || "<!-- TODO: choose the primary supported OS. -->";
 	const ciMatrix = opts.ci.matrix.length > 0 ? opts.ci.matrix.join(", ") : "<!-- TODO: define CI OS matrix. -->";
-	const uiEvidence = opts.uiEvidenceRequired ? "- UI-impacting changes include before/after screenshots or recorded browser evidence in the PR." : "- If a change affects user-visible UI or CLI output, include before/after evidence in the PR.";
+	const uiEvidence = opts.uiEvidenceRequired ? "- UI-impacting changes include before/after screenshots of the RENDERED result (product UI, and the README / Pages / docs as they render) at real viewports (mobile + desktop), light + dark — driven in a browser, never guessed from code." : "- If a change affects user-visible UI or CLI output, include before/after evidence in the PR — for UI, a screenshot of the rendered result at real viewports, not a code diff.";
 	const notes = opts.detectedNotes.length > 0 ? opts.detectedNotes.map((note) => `- ${note}`).join("\n") : "- <!-- TODO: add repo-specific hazards, flaky areas, rate limits, and platform traps as they are discovered. -->";
 	return `# Repository guidance for ${opts.repoName}
 
@@ -9242,6 +9777,13 @@ ${opts.projectStructure.map((entry) => `- ${entry}`).join("\n")}
 - Solved problems, incidents, and debugging notes live in \`docs/history/YYYY-MM-DD-slug.md\`.
 - Durable project learnings live in \`LEARNINGS.md\`; update it when a future contributor would otherwise rediscover the same fact.
 
+## Operating autonomously
+
+- Proceed on best judgment for reversible choices within the mission scope; do not pause for clarification.
+- State assumptions explicitly in the plan and PR body, surface unresolved questions there, choose the safest reasonable path, and continue.
+- Use \`docs/playbook/README.md\` as the product operating protocol. Wear the \`ceo\`, \`cto\`, or \`cpo\` operator hat when strategy, engineering direction, or product judgment is needed, then delegate execution to the planner, implementer, reviewer, researcher, and tester roles.
+- Stop only when required input is unavailable, an action is destructive or outside scope, or spend, pricing, legal, privacy, or security authority requires a human decision.
+
 ## Handoff
 
 Every handoff should include:
@@ -9438,28 +9980,113 @@ function buildRoleAgent(role) {
 				"Failures that require implementation work"
 			],
 			model: "gpt-5.6-sol"
-		}
-	}[role];
-	const modelLine = spec.model === void 0 ? "" : `model: ${spec.model}\n`;
-	return `---
-name: ${role}
-description: ${spec.description}
-${modelLine}---
-
-# ${capitalize(role)}
-
-## Purpose
-
-${spec.purpose}
-
-## When to use
-
-${spec.when.map((line) => `- ${line}`).join("\n")}
-
-## Inputs (cold-start contract)
-
-A delegated task starts from a blank context. The caller must include:
-
+		},
+		ceo: {
+			description: "Operate the product strategy, growth, and launch loop; turn evidence into auditable bets and delegate execution.",
+			purpose: "Own direction and momentum across discovery, niche, MVP, launch, measurement, iteration, and growth. Govern with OODA inside Build-Measure-Learn, then delegate bounded work to the product, engineering, research, planning, implementation, review, and test roles.",
+			when: [
+				"The product needs a strategic sequence, go/no-go decision, launch plan, or growth loop.",
+				"Evidence conflicts or a bet needs an explicit hypothesis, metric, and threshold.",
+				"Work spans product and engineering and needs one accountable operator."
+			],
+			method: [
+				"Follow `docs/playbook/README.md` in order: discovery → niche → MVP → launch → measure → iterate → grow; do not skip discovery or distribution.",
+				"Run a daily OODA loop inside each Build-Measure-Learn phase: observe external evidence, orient against the current hypothesis, decide with a pre-set threshold, act through delegated execution roles, then measure.",
+				"Choose launch channels where the beachhead persona already gathers; sequence Show HN, Product Hunt, dev.to, and build-in-public rather than broadcasting everywhere at once.",
+				"Treat the README as the landing page, GitHub Pages and Diataxis docs as marketing, and shareable artifacts as growth loops. Use AARRR with activation defined as experienced value; stars are awareness, not activation.",
+				"Log every material decision as hypothesis → experiment → metric → threshold → outcome, link its evidence, and update the next bet."
+			],
+			quality: [
+				"Every claimed checkpoint is externally verifiable: a real HTTP 200, green CI run, observed analytics event, or real survey sample size, never a self-reported 'done'.",
+				"Do not over-build without first running a distribution test; viral attention is not product-market fit.",
+				"Never manipulate users or fabricate demand, evidence, testimonials, or progress. Do not authorize spend, paid acquisition, discounts, pricing, contracts, or other economic commitments beyond explicit hard limits set by a human."
+			],
+			output: [
+				"Current phase and externally verified checkpoint",
+				"Decision log: hypothesis, experiment, metric, threshold, outcome",
+				"Next bounded bets with owners and kill criteria",
+				"Delegations to cpo/cto and execution roles"
+			],
+			model: "claude-opus-4.8"
+		},
+		cto: {
+			description: "Set engineering direction and quality bars for a simple, reliable, accessible product that ships continuously.",
+			purpose: "Make engineering accelerate learning without mortgaging reliability. Define the architecture and delivery system, record non-trivial decisions, and delegate implementation, testing, and review to execution roles.",
+			when: [
+				"A product bet needs an architecture, delivery plan, API or developer-experience contract, or technical risk decision.",
+				"Quality, reliability, accessibility, performance, security, or operability needs an explicit bar.",
+				"The team must trade scope against learning speed without creating avoidable complexity."
+			],
+			method: [
+				"Write an ADR for every non-trivial technical or process decision; prefer radical simplicity and delete accidental complexity.",
+				"Design Stripe-grade APIs and developer experience: coherent naming, actionable errors, stable contracts, safe defaults, copy-paste quickstarts, and Diataxis tutorials/how-to/reference/explanation docs.",
+				"Use trunk-based development with short-lived branches and feature flags, a test pyramid, continuous delivery, and CI/CD. Track all DORA four keys; speed and stability reinforce each other rather than trade off.",
+				"Define and enforce product budgets: a timed cold-start quickstart under five minutes, WCAG 2.2 AA, Core Web Vitals thresholds in CI, and defaults that just work.",
+				"Delegate scoped delivery to planner/implementer/tester and require adversarial reviewer evidence before calling the system ready."
+			],
+			quality: [
+				"Every claimed checkpoint is externally verifiable: a real HTTP 200, a reproducible cold-start timer, green CI, measured Web Vitals, or an accessibility audit, never a self-reported 'done'.",
+				"Do not over-build infrastructure without a distribution or learning test; viral attention is not product-market fit.",
+				"Keep external side effects and economic authority bounded. Never incur spend, change pricing, purchase services, or expand privileges beyond explicit human-set hard limits."
+			],
+			output: [
+				"Architecture and ADR decisions",
+				"Delivery slices, feature-flag and rollback plan",
+				"Quality budgets and measured evidence",
+				"Delegations and residual technical risks"
+			],
+			model: "claude-opus-4.8"
+		},
+		cpo: {
+			description: "Discover a real underserved job, select a beachhead, position it, and scope a lovable evidence-seeking product.",
+			purpose: "Own product truth from struggling moment through activation and product-market fit. Turn customer evidence into a narrow proposition and frozen release scope, then delegate research and delivery.",
+			when: [
+				"The customer, problem, niche, positioning, MVP, activation moment, or roadmap is uncertain.",
+				"A feature request needs validation against observed jobs and opportunity evidence.",
+				"The product needs a go/no-go niche decision or product-market-fit assessment."
+			],
+			method: [
+				"Run Jobs-To-Be-Done interviews around the struggling moment, prior solution, forces of progress, and hire/fire criteria. Require at least three independent corroborated sources before treating a pain as real.",
+				"Segment with Disciplined Entrepreneurship criteria, choose one beachhead with a credible 1,000 true-fans floor, and publish a go/no-go table covering urgency, reachability, willingness to switch/pay, competition, and founder advantage.",
+				"Apply Obviously Awesome positioning: competitive alternatives including do-nothing and workaround status quo, unique attributes, value, proof, best-fit customer, category, relevant trends, and a one-sentence pitch.",
+				"Scope with a Riskiest-Assumption Test whose kill/pivot threshold is set before the experiment. Classify Kano must-be/performance/delight, ship at least one delight, and freeze a v0.1 cut list.",
+				"Maintain a weekly opportunity-solution tree from interviews and issues. Use RICE only to sequence already-validated options. Define the aha moment and instrument time-to-first-value under five minutes.",
+				"Declare product-market fit only when both the Sean Ellis survey reaches at least 40% 'very disappointed' and a relevant cohort retention curve flattens."
+			],
+			quality: [
+				"Every claimed checkpoint is externally verifiable: interview notes from at least three corroborating sources, a real survey sample size, observed activation events, or a measured retention cohort, never a self-reported 'done'.",
+				"Do not over-build before a distribution test; viral attention is not product-market fit.",
+				"Never manipulate participants or fabricate demand. Research incentives, spend, discounts, and pricing authority stay within explicit human-set hard limits."
+			],
+			output: [
+				"Evidence ledger and current product phase",
+				"Beachhead go/no-go table and positioning pitch",
+				"Riskiest-assumption experiment, threshold, and frozen v0.1 cut list",
+				"Activation/PMF measures and delegations to execution roles"
+			],
+			model: "claude-opus-4.8"
+		}
+	}[role];
+	const modelLine = spec.model === void 0 ? "" : `model: ${spec.model}\n`;
+	return `---
+name: ${role}
+description: ${spec.description}
+${modelLine}---
+
+# ${capitalize(role)}
+
+## Purpose
+
+${spec.purpose}
+
+## When to use
+
+${spec.when.map((line) => `- ${line}`).join("\n")}
+
+## Inputs (cold-start contract)
+
+A delegated task starts from a blank context. The caller must include:
+
 - The goal or artifact to work on, pasted or linked precisely.
 - Acceptance criteria and constraints.
 - Relevant files, PRs, issues, ADRs, plans, or prior decisions.
@@ -9531,7 +10158,10 @@ function buildCiWorkflow(opts) {
 on:
   pull_request:
   push:
-    branches: [${opts.defaultBranch.startsWith("<!--") ? "main" : opts.defaultBranch}]
+    branches: [${opts.defaultBranch.startsWith("<!--") ? "main # TODO: confirm the default branch" : opts.defaultBranch}]
+
+permissions:
+  contents: read
 
 jobs:
   quality-gate:
@@ -9542,7 +10172,7 @@ jobs:
       matrix:
         os: [${osList.join(", ")}]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@${CHECKOUT_SHA} # v4
 ${setupStepsFor(opts)}
       - name: Run repository quality gate
         run: |
@@ -9551,44 +10181,463 @@ ${runLines}
 }
 function setupStepsFor(opts) {
 	const pm = opts.packageManager;
-	if (pm === "bun") return `      - uses: oven-sh/setup-bun@v2
+	if (pm === "bun") return `      - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2
       - name: Install dependencies
         run: bun install --frozen-lockfile`;
-	if (pm === "pnpm") return `      - uses: actions/setup-node@v4
+	if (pm === "pnpm") return `      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
           cache: pnpm
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@7d2c2a2c7a1fb2f07e4646f7b4602195e3d0c57e # v4
         with:
           run_install: false
       - name: Install dependencies
         run: pnpm install --frozen-lockfile`;
-	if (pm === "yarn") return `      - uses: actions/setup-node@v4
+	if (pm === "yarn") return `      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
           cache: yarn
       - name: Install dependencies
         run: yarn install --immutable`;
-	if (pm === "npm") return `      - uses: actions/setup-node@v4
+	if (pm === "npm") return `      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
         with:
           node-version: 22
           cache: npm
       - name: Install dependencies
         run: npm ci`;
-	if (opts.techStack.toLowerCase().includes("go")) return `      - uses: actions/setup-go@v5
+	if (opts.techStack.toLowerCase().includes("go")) return `      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
         with:
-          go-version-file: go.mod`;
+          go-version-file: go.mod
+      - name: Download modules
+        run: go mod download`;
 	if (opts.techStack.toLowerCase().includes("rust")) return `      - name: Set up Rust
-        run: rustup show`;
-	if (opts.techStack.toLowerCase().includes("python")) return `      - uses: actions/setup-python@v5
+        run: rustup show
+      - name: Fetch dependencies
+        run: cargo fetch`;
+	if (opts.techStack.toLowerCase().includes("python")) return `      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5
         with:
           python-version: "3.x"
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi`;
-	return `      - name: Set up environment
-        run: echo "TODO: add language/runtime setup"`;
+          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+          if [ -f pyproject.toml ]; then pip install -e . || pip install .; fi`;
+	return `      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 22
+      - name: Detect toolchain and install dependencies
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [ -f bun.lockb ] || [ -f bun.lock ]; then
+            npm install -g bun && bun install --frozen-lockfile
+          elif [ -f pnpm-lock.yaml ]; then
+            corepack enable && pnpm install --frozen-lockfile
+          elif [ -f yarn.lock ]; then
+            corepack enable && yarn install --immutable
+          elif [ -f package-lock.json ]; then
+            npm ci
+          elif [ -f package.json ]; then
+            npm install
+          elif [ -f go.mod ]; then
+            go mod download
+          elif [ -f Cargo.toml ]; then
+            cargo fetch
+          elif [ -f requirements.txt ]; then
+            python -m pip install --upgrade pip && pip install -r requirements.txt
+          elif [ -f pyproject.toml ]; then
+            python -m pip install --upgrade pip && { pip install -e . || pip install .; }
+          else
+            echo "::warning::copilot-setup-steps found no recognized dependency manifest; the agent environment may be missing dependencies. Add a real install step for this repo's stack."
+          fi`;
+}
+const CHECKOUT_SHA = "11bd71901bbe5b1630ceea73d27597364c9af683";
+const CONFIGURE_PAGES_SHA = "983d7736d9b0ae728b81ab479565c72886d7745b";
+const UPLOAD_PAGES_SHA = "56afc609e74202658d3ffba0e8f6dda462b719fa";
+const DEPLOY_PAGES_SHA = "decdde0ac072f6f71b3a7fa0b3c73a7a62cc8a28";
+const UPLOAD_ARTIFACT_SHA = "65462800fd760344b1a7b4382951275a0abb4808";
+function buildPagesWorkflow(opts) {
+	return `name: Pages
+
+on:
+  push:
+    branches: [${opts.defaultBranch.startsWith("<!--") ? "main # TODO: confirm the default branch" : opts.defaultBranch}]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: pages
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@${CHECKOUT_SHA} # v4
+      - uses: actions/configure-pages@${CONFIGURE_PAGES_SHA} # v5
+      - name: Build site and stamp deployed revision
+        run: |
+          ${opts.commands.build ?? "echo \"TODO: build the site into _site\""}
+          mkdir -p _site
+          printf '%s\\n' "\${{ github.sha }}" > _site/BUILD_SHA.txt
+      - uses: actions/upload-pages-artifact@${UPLOAD_PAGES_SHA} # v3
+        with:
+          path: _site
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: \${{ steps.deployment.outputs.page_url }}
+    permissions:
+      pages: write
+      id-token: write
+    steps:
+      - name: Deploy Pages
+        id: deployment
+        uses: actions/deploy-pages@${DEPLOY_PAGES_SHA} # v4
+`;
+}
+function codeqlLanguages(opts) {
+	const stack = opts.techStack.toLowerCase();
+	const languages = [];
+	if (/javascript|typescript|node|react|vue|svelte/.test(stack)) languages.push("javascript-typescript");
+	if (stack.includes("python")) languages.push("python");
+	if (stack.includes("go")) languages.push("go");
+	if (/rust|cargo/.test(stack)) languages.push("rust");
+	return languages.length > 0 ? languages.join(", ") : "javascript-typescript # TODO: confirm CodeQL language";
+}
+function buildCodeqlWorkflow(opts) {
+	return `name: CodeQL
+
+on:
+  push:
+    branches: [${opts.defaultBranch.startsWith("<!--") ? "main # TODO: confirm the default branch" : opts.defaultBranch}]
+  pull_request:
+  schedule:
+    - cron: "17 3 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+    strategy:
+      matrix:
+        language: [${codeqlLanguages(opts)}]
+    steps:
+      - uses: actions/checkout@${CHECKOUT_SHA} # v4
+      - uses: github/codeql-action/init@b374143c1149a9115d881581d29b8390bbcbb59c # v3
+        with:
+          languages: \${{ matrix.language }}
+      - uses: github/codeql-action/autobuild@b374143c1149a9115d881581d29b8390bbcbb59c # v3
+      - uses: github/codeql-action/analyze@b374143c1149a9115d881581d29b8390bbcbb59c # v3
+`;
+}
+function dependabotEcosystem(opts) {
+	if ([
+		"npm",
+		"bun",
+		"pnpm",
+		"yarn"
+	].includes(opts.packageManager)) return "npm";
+	if (opts.finalDestination === "pypi") return "pip";
+	if (opts.finalDestination === "crates") return "cargo";
+	if (opts.finalDestination === "go-proxy") return "gomod";
+	if (opts.finalDestination === "ghcr") return "docker";
+	return "<!-- TODO: choose a supported package ecosystem -->";
+}
+function buildDependabot(opts) {
+	return `version: 2
+updates:
+  - package-ecosystem: "${dependabotEcosystem(opts)}"
+    directory: "/"
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: weekly
+`;
+}
+function releaseType(opts) {
+	if (opts.finalDestination === "pypi") return "python";
+	if (opts.finalDestination === "crates") return "rust";
+	if (opts.finalDestination === "go-proxy") return "go";
+	if (opts.finalDestination === "npm" || opts.finalDestination === "vscode-marketplace" || opts.finalDestination === "actions-marketplace") return "node";
+	return "simple";
+}
+function buildReleaseWorkflow(opts) {
+	return `name: Release
+
+on:
+  push:
+    branches: [${opts.defaultBranch.startsWith("<!--") ? "main # TODO: confirm the default branch" : opts.defaultBranch}]
+
+permissions:
+  contents: read
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    steps:
+      - uses: googleapis/release-please-action@a02a34c4d625f9be7cb89156071d8567266a2445 # v4
+        with:
+          release-type: ${releaseType(opts)}
+# This workflow creates the tag, changelog, and GitHub Release. Publishing is
+# deliberately separate in publish.yml and starts only on release: published.
+`;
+}
+function apiCompatibilitySteps(opts) {
+	if (opts.finalDestination === "crates") return `      - name: Check Rust API compatibility
+        run: |
+          cargo install cargo-semver-checks --locked
+          cargo semver-checks check-release`;
+	if (opts.finalDestination === "npm" || opts.finalDestination === "vscode-marketplace" || opts.finalDestination === "actions-marketplace") return `      - name: Check TypeScript API compatibility
+        if: \${{ hashFiles('api-extractor.json') != '' }}
+        run: npx --no-install api-extractor run --local
+      - name: API compatibility wiring reminder
+        if: \${{ hashFiles('api-extractor.json') == '' }}
+        run: echo "TODO: configure @microsoft/api-extractor and commit its API report"`;
+	return `      - name: Declare API compatibility policy
+        run: echo "TODO: wire the ecosystem's breaking-change checker when this repository exposes a stable public API"`;
+}
+function buildMaintainabilityWorkflow(opts) {
+	const exampleCommand = opts.commands.test ?? "echo \"TODO: execute every documented example or doctest in CI\"";
+	return `name: Maintainability
+
+on:
+  pull_request:
+  push:
+    branches: [${opts.defaultBranch.startsWith("<!--") ? "main # TODO: confirm the default branch" : opts.defaultBranch}]
+
+permissions:
+  contents: read
+
+jobs:
+  policy-gates:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@${CHECKOUT_SHA} # v4
+      - name: REUSE and SPDX compliance
+        run: |
+          python -m pip install reuse
+          reuse lint
+      - name: Dependency license policy
+        run: echo "TODO: wire the ecosystem-specific dependency-license scanner and approved-license policy"
+${apiCompatibilitySteps(opts)}
+      - name: Execute documented examples
+        run: ${exampleCommand}
+`;
+}
+function buildPublishWorkflow(opts) {
+	const common = `name: Publish\n\non:\n  release:\n    types: [published]\n\npermissions:\n  contents: read\n\n`;
+	if (opts.finalDestination === "npm") return `${common}jobs:\n  npm:\n    runs-on: ubuntu-latest\n    environment: npm\n    permissions:\n      contents: read\n      id-token: write\n      attestations: write\n    steps:\n      - uses: actions/checkout@${CHECKOUT_SHA} # v4\n      - name: Set up Node for OIDC trusted publishing\n        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4\n        with:\n          node-version: 22\n          registry-url: https://registry.npmjs.org\n      - run: npm ci\n      - run: npm pack\n      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2\n        with:\n          subject-path: '*.tgz'\n      - run: npm publish --provenance --access public *.tgz\n`;
+	if (opts.finalDestination === "pypi") return `${common}jobs:\n  pypi:\n    runs-on: ubuntu-latest\n    environment: pypi\n    permissions:\n      contents: read\n      id-token: write\n      attestations: write\n    steps:\n      - uses: actions/checkout@${CHECKOUT_SHA} # v4\n      - run: python -m pip install --upgrade build\n      - run: python -m build\n      - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0\n      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2\n        with:\n          subject-path: dist/*\n`;
+	if (opts.finalDestination === "crates") return `${common}jobs:\n  crates:\n    runs-on: ubuntu-latest\n    environment: crates-io\n    permissions:\n      contents: read\n      id-token: write\n      attestations: write\n    steps:\n      - uses: actions/checkout@${CHECKOUT_SHA} # v4\n      - id: auth\n        uses: rust-lang/crates-io-auth-action@e919bc7605cde86df457cf5b93c5e103838bd879 # v1\n      - run: cargo publish\n        env:\n          CARGO_REGISTRY_TOKEN: \${{ steps.auth.outputs.token }}\n      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2\n        with:\n          subject-path: target/package/*.crate\n`;
+	if (opts.finalDestination === "ghcr") return `${common}jobs:\n  ghcr:\n    runs-on: ubuntu-latest\n    environment: ghcr\n    permissions:\n      contents: read\n      packages: write\n      id-token: write\n      attestations: write\n    steps:\n      - uses: actions/checkout@${CHECKOUT_SHA} # v4\n      - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3\n        with:\n          registry: ghcr.io\n          username: \${{ github.actor }}\n          password: \${{ github.token }}\n      - name: Build and push image\n        id: build\n        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5\n        with:\n          push: true\n          tags: ghcr.io/\${{ github.repository }}:\${{ github.event.release.tag_name }}\n          provenance: true\n          sbom: true\n      - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3\n      - name: Keyless-sign image digest\n        run: cosign sign --yes "ghcr.io/\${{ github.repository }}@\${{ steps.build.outputs.digest }}"\n      - uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2\n        with:\n          subject-name: ghcr.io/\${{ github.repository }}\n          subject-digest: \${{ steps.build.outputs.digest }}\n          push-to-registry: true\n`;
+	return `${common}jobs:\n  destination-note:\n    runs-on: ubuntu-latest\n    steps:\n      - run: echo "TODO: ${opts.finalDestination === "go-proxy" ? "Go modules publish through signed SemVer tags and proxy.golang.org; no registry upload is required" : opts.finalDestination === "github-pages" ? "Pages deployment is handled by pages.yml; no package registry applies" : opts.finalDestination === "actions-marketplace" ? "complete Marketplace listing and maintain the floating major tag; no OIDC registry exists" : opts.finalDestination === "vscode-marketplace" ? "VS Code Marketplace does not support OIDC; require explicit human approval before configuring its PAT-based publish exception" : "resolve the final destination before enabling publication"}."\n`;
+}
+function buildMediaWorkflow(opts) {
+	const install = opts.commands.install ?? "echo \"TODO: record the install command\"";
+	const HAS_PW = "${{ hashFiles('**/playwright.config.*') != '' }}";
+	return `name: Media evidence & UI verification
+
+on:
+  workflow_dispatch:
+  # Enable on PRs once your UI/site paths are known, so visual-regression + a11y actually PROTECT
+  # every user-viewable surface on each change (until then the steps below no-op green):
+  # pull_request:
+  #   paths: ["<!-- TODO: your UI/site source globs -->"]
+
+permissions:
+  contents: read
+
+# Pillar D — UI/UX and every user-viewable surface are VERIFIED BY BROWSING: drive the running
+# artifact in a real browser and judge the RENDERED pixels. Never infer UI quality from source,
+# a passing build, or an HTTP 200. See docs/playbook/README.md Phase 4 (iterate-to-polish loop).
+jobs:
+  verify-ui:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@${CHECKOUT_SHA} # v4
+      - name: State-matrix screenshots + visual regression (Playwright)
+        if: ${HAS_PW}
+        run: |
+          ${install}
+          npx --no-install playwright install --with-deps chromium
+          # Your spec MUST drive each key screen through ALL states — empty / loading / error / success /
+          # first-run / edge — at 375 / 768 / 1280 x light+dark (page.emulateMedia), and assert
+          # expect(page).toHaveScreenshot() against committed baselines so any unintended pixel change fails.
+          npx --no-install playwright test
+      - name: Accessibility gate (axe-core, zero serious/critical)
+        if: ${HAS_PW}
+        run: echo "TODO: assert @axe-core/playwright inside the spec above; fail on ANY serious/critical violation on each key screen AND state; keyboard-reach + visible focus + >=24px targets (WCAG 2.2)."
+      - name: Core Web Vitals + Lighthouse budgets (web surfaces)
+        if: \${{ hashFiles('**/lighthouserc.*', '**/.lighthouserc.*') != '' }}
+        run: npx --no-install @lhci/cli autorun
+      - name: Capture launch media (screenshots, 1200x630 og-image, demo)
+        run: |
+          echo "TODO: capture desktop + mobile launch screenshots and a 1200x630 og-image.png from the RENDERED site."
+          echo "Optional: install VHS from a checksum-pinned release and record artifacts/demo.gif."
+          ${opts.commands.build ?? "true"}
+      - name: Wire-up reminder (no browser verification configured yet)
+        if: \${{ hashFiles('**/playwright.config.*') == '' }}
+        run: echo "TODO: add a Playwright config + a state-matrix spec (toHaveScreenshot + @axe-core/playwright) so UI is VERIFIED BY BROWSING, not guessed. See docs/playbook/README.md Phase 4."
+      - uses: actions/upload-artifact@${UPLOAD_ARTIFACT_SHA} # v4
+        with:
+          name: launch-media
+          path: |
+            artifacts/screenshots/**
+            artifacts/og-image.png
+            artifacts/demo.gif
+            playwright-report/**
+            test-results/**
+          if-no-files-found: warn
+`;
+}
+function buildRobotsTxt() {
+	return `User-agent: *\nAllow: /\nSitemap: <!-- TODO: insert the canonical absolute sitemap URL -->\n`;
+}
+function buildSitemap() {
+	return `<?xml version="1.0" encoding="UTF-8"?>\n<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">\n  <!-- TODO: generate canonical absolute <url><loc> entries during the site build. -->\n</urlset>\n`;
+}
+function buildSeoHead() {
+	return `<!-- Merge these tags into the site's real <head>; replace every TODO with canonical absolute URLs. -->\n<link rel="canonical" href="<!-- TODO: canonical page URL -->">\n<meta property="og:type" content="website">\n<meta property="og:title" content="<!-- TODO: product name -->">\n<meta property="og:description" content="<!-- TODO: concise value proposition -->">\n<meta property="og:image" content="<!-- TODO: absolute 1200x630 og-image URL -->">\n<meta name="twitter:card" content="summary_large_image">\n<script type="application/ld+json">{"@context":"https://schema.org","@type":"SoftwareApplication","name":"<!-- TODO: product name -->","url":"<!-- TODO: canonical site URL -->"}<\/script>\n`;
+}
+function buildNotFoundPage() {
+	return `<!doctype html>\n<html lang="en"><head><meta charset="utf-8"><meta name="robots" content="noindex"><title>Not found</title></head><body><main><h1>Page not found</h1><p><a href="/">Return home</a></p></main></body></html>\n`;
+}
+function buildSecurityTxt() {
+	return `Contact: <!-- TODO: security disclosure email or HTTPS form -->\nExpires: <!-- TODO: RFC 3339 date less than one year from publication -->\nCanonical: <!-- TODO: absolute /.well-known/security.txt URL -->\nPolicy: <!-- TODO: absolute SECURITY.md or security-policy URL -->\nPreferred-Languages: en\n`;
+}
+function buildSecurityPolicy(opts) {
+	return `# Security policy
+
+## Supported versions
+
+<!-- TODO: list supported release lines and their security-support windows. -->
+
+## Reporting a vulnerability
+
+Please do not open a public issue. Use GitHub Private Vulnerability Reporting for ${opts.repoName}, or contact <!-- TODO: monitored security disclosure address -->.
+
+## Response targets
+
+- Acknowledge a report within **2 business days**.
+- Provide an initial assessment or request for more information within **7 calendar days**.
+- Share remediation status at least every **14 calendar days** until closure.
+
+These are response targets, not a promise that every report can be fixed within a fixed period. Coordinated disclosure timing will be agreed with the reporter.
+`;
+}
+function buildContributing(opts) {
+	return `# Contributing
+
+## Set up
+
+1. Read the repository guidance and relevant ADRs.
+2. Install dependencies: ${commandOrTodo(opts.commands.install, "confirm install command")}
+3. Run tests: ${commandOrTodo(opts.commands.test, "record test command")}
+
+## Find a first contribution
+
+Look for issues labeled 'good first issue' or 'help wanted'. Before starting larger work, comment with the behavior you intend to change and the verification you will add.
+
+## Pull requests
+
+Keep one concern per PR. Include acceptance criteria, tests, failure modes considered, documentation updates, and exact verification output. Follow the repository's code of conduct and do not weaken CI to land a change.
+`;
+}
+function buildCodeOfConduct() {
+	return `# Contributor Covenant Code of Conduct
+
+## Our pledge
+
+We pledge to make participation in this community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, sex characteristics, gender identity and expression, experience, education, socioeconomic status, nationality, appearance, race, caste, color, religion, or sexual identity and orientation.
+
+## Our standards
+
+Use welcoming and inclusive language, respect differing viewpoints, accept constructive feedback, focus on what is best for the community, and show empathy. Harassment, insults, public or private intimidation, and publishing others' private information are unacceptable.
+
+## Enforcement
+
+Report unacceptable behavior to <!-- TODO: private conduct-reporting channel -->. Maintainers will investigate promptly, protect reporter privacy where possible, and apply proportionate corrective action.
+
+This policy adopts the Contributor Covenant, version 2.1. See https://www.contributor-covenant.org/version/2/1/code_of_conduct.html for the full enforcement guidelines and attribution required by that license.
+`;
+}
+function buildSupport() {
+	return `# Support
+
+## Questions and help
+
+<!-- TODO: name the supported discussion forum, issue category, or community channel. -->
+
+## Bugs
+
+Search existing issues, then open a bug report with reproduction steps, expected and actual behavior, environment details, and relevant logs with secrets removed.
+
+## Security
+
+Do not report vulnerabilities publicly. Follow [SECURITY.md](SECURITY.md).
+
+## Scope and response
+
+Support is provided on a best-effort basis. <!-- TODO: state maintained versions, normal response expectations, and commercial support if any. -->
+`;
+}
+function buildCodeowners() {
+	return `# TODO: replace placeholder owners with real maintainers or teams.\n* @OWNER/MAINTAINERS\n.github/ @OWNER/MAINTAINERS\nSECURITY.md @OWNER/SECURITY\n`;
+}
+function buildGovernance() {
+	return `# Governance
+
+## Roles
+
+- Contributors propose changes and participate in review.
+- Maintainers review, release, triage, and steward project health.
+- Security responders handle private vulnerability reports.
+
+<!-- TODO: list current maintainers, affiliations, and contact paths. -->
+
+## Decisions
+
+Routine reversible decisions use lazy consensus in issues or PRs. Architecture and durable process changes require an ADR. Conflicts of interest must be disclosed. Security-sensitive and irreversible decisions require explicit maintainer approval.
+
+## Becoming or leaving a maintainer
+
+Maintainer nominations should be based on sustained, constructive contributions and community trust, not employer or funding status. Record nominations and decisions publicly. Departing maintainers should transfer ownership and access promptly.
+
+## Sustainability
+
+Review contributor response time, repeat-contributor rate, contributor absence factor, organizational diversity, release cadence, and adopter evidence at least quarterly. These lagging signals, not this file's presence, show whether governance works.
+`;
+}
+function buildFunding() {
+	return `# TODO: uncomment and fill only funding platforms the project actually owns.\n# github: [maintainer]\n# open_collective: project\n# custom: [https://example.invalid/sponsor]\n`;
+}
+function buildAdopters() {
+	return `# Adopters
+
+Real users may add themselves through a pull request. Do not add organizations without their consent.
+
+| Organization / project | Public evidence | How it is used | Contact or PR |
+| --- | --- | --- | --- |
+| <!-- TODO: verified adopter --> | <!-- public URL --> | <!-- production, evaluation, integration --> | <!-- consent evidence --> |
+`;
+}
+function buildIssueTemplateConfig() {
+	return `blank_issues_enabled: false\ncontact_links:\n  - name: Security vulnerability\n    url: <!-- TODO: GitHub private vulnerability reporting URL -->\n    about: Report security issues privately; do not open a public issue.\n  - name: Support\n    url: <!-- TODO: discussions or support URL -->\n    about: Ask usage questions and get help.\n`;
 }
 function preferredRunner(opts) {
 	const primary = opts.ci.primaryOs?.toLowerCase() ?? "";
@@ -9636,7 +10685,7 @@ List the realistic failure modes you considered, how you tested each one, and an
 
 ## UI evidence
 
-${opts.uiEvidenceRequired ? "Attach before/after screenshots or recordings for every user-visible surface changed." : "If user-visible behavior changed, attach before/after screenshots, recordings, or CLI output."}
+${opts.uiEvidenceRequired ? "Attach screenshots of the RENDERED result for every user-viewable surface changed — the product UI, and any changed README / Pages / docs as they render — at mobile + desktop, light + dark, driven in a real browser. Never infer UI quality from source or a passing build." : "If user-visible behavior changed, attach before/after evidence — for UI, a screenshot of the rendered result at real viewports; for a CLI, the real output."}
 
 ## Notes / follow-ups
 
@@ -9764,6 +10813,175 @@ Each ${title.toLowerCase()} entry should include:
 - links to related issues, PRs, ADRs, and follow-ups
 `;
 }
+function buildPlaybook() {
+	return `# Autonomous product operating playbook
+
+## Definition of greatness (verifiable)
+
+${DEFINITION_OF_GREATNESS}
+
+Run the phases in order. A phase exits only on its externally verifiable checkpoint. Store source links, raw counts, command output, analytics queries, and decisions in issues, plans, research, ADRs, or PRs so another operator can audit the claim.
+
+## Phase 0 — Discover
+
+- Interview people at a concrete struggling moment. Capture the trigger, prior behavior, forces pushing and pulling change, current workaround, and the criteria that would make them hire or fire a solution.
+- Mine support threads, issues, communities, searches, and observed workflows for the same job. Separate a repeated behavior from a stated preference.
+- Treat pain as real only after at least three independent sources corroborate the same struggling moment and consequence.
+- Write the first falsifiable hypothesis and the cheapest test that could disprove it.
+
+Decision criteria: the job is specific, consequential, recurrent, and currently served by a workaround people can describe. Otherwise continue discovery or stop.
+
+Exit checkpoint: an evidence ledger links at least three independent corroborating sources, verbatim hire/fire criteria, and a named owner who can reproduce the evidence.
+
+## Phase 1 — Niche
+
+- Segment candidate customers with Disciplined Entrepreneurship criteria: common job, purchasing process, reachability, urgency, switching friction, competition, and ability to become a reference.
+- Estimate a credible path to a 1,000 true-fans floor. Do not use total-addressable-market theater as a substitute for reachable people.
+- Run a distribution test in the channels where each segment already gathers before building for it.
+- Publish the go/no-go table and select one beachhead.
+
+| Candidate | Urgent job | Reachable now | Will switch/pay | Weak alternatives | Founder advantage | 1,000-fan path | Go/no-go |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| <!-- segment --> | <!-- evidence --> | <!-- channel/test --> | <!-- evidence --> | <!-- alternatives --> | <!-- evidence --> | <!-- estimate --> | <!-- decision --> |
+
+Decision criteria: go only when the niche is reachable, has the repeated job from Phase 0, and passes a real distribution test. Kill or narrow otherwise.
+
+Exit checkpoint: the completed table links observed channel responses and names one beachhead; a reviewer can recount real prospects reached and responses received.
+
+## Phase 2 — Position
+
+Apply the Obviously Awesome sequence:
+
+1. List competitive alternatives.
+2. Include doing nothing and the status-quo workaround.
+3. Identify unique attributes.
+4. Translate attributes into customer value.
+5. Prove the value with evidence.
+6. Identify customers who care most.
+7. Choose the market category that makes the value obvious.
+8. Add only trends that strengthen relevance.
+9. Align product, sales, and marketing language.
+10. Test the positioning with beachhead prospects and revise.
+
+| Competitive alternative | Why it is hired now | Where it fails the job | Our differentiated value | Proof |
+| --- | --- | --- | --- | --- |
+| Do nothing / tolerate it | <!-- reason --> | <!-- cost --> | <!-- value --> | <!-- evidence --> |
+| Manual workaround | <!-- reason --> | <!-- cost --> | <!-- value --> | <!-- evidence --> |
+
+One-sentence pitch: For [beachhead] who struggle with [job], [product] is a [category] that [primary value], unlike [main alternative], because [proof-backed differentiator].
+
+Decision criteria: a prospect in the beachhead can accurately repeat who it is for, why it matters, and why the status quo is worse.
+
+Exit checkpoint: recorded or written tests with real beachhead prospects show the pitch was understood without explanation; store the sample size and exact responses.
+
+## Phase 3 — Scope
+
+- Rank assumptions by impact and uncertainty. Design a Riskiest-Assumption Test before implementation.
+- Set the numeric kill, pivot, and continue thresholds before collecting results; never move the threshold after seeing data.
+- Classify scope with Kano: must-be, performance, and delight. Include every true must-be, the minimum performance needed for the job, and at least one memorable delight.
+- Define the aha moment and instrument a path to time-to-first-value under five minutes.
+- Freeze a v0.1 cut list. New requests replace an item or wait; they do not silently expand scope.
+
+Decision criteria: the cheapest test clears its pre-set threshold and the cut list can deliver the job end-to-end without speculative platform work.
+
+Exit checkpoint: the repository contains the dated experiment, raw result, threshold decision, instrumented aha event, and frozen v0.1 cut list approved in a plan or issue.
+
+## Phase 4 — Build
+
+- Record every non-trivial architecture or long-lived process decision in an ADR. Prefer radical simplicity.
+- Use trunk-based development, short-lived branches, and feature flags for incomplete or reversible exposure.
+- Apply the test pyramid: many fast unit checks, focused integration checks, and few critical end-to-end journeys.
+- Ship through CI/CD and track all DORA four keys. Speed and stability improve together; do not trade one away by weakening checks.
+- Make APIs and developer experience Stripe-grade: coherent names, actionable errors, stable contracts, safe defaults, copy-paste examples.
+- Write Diataxis tutorials, how-to guides, reference, and explanation. Time the quickstart from a cold machine and keep it under five minutes.
+- Enforce WCAG 2.2 AA and Core Web Vitals budgets in CI. Defaults must just work.
+- Verify every user-viewable surface BY BROWSING, never by guessing from code. Drive the running artifact through each state (empty / loading / error / success / first-run / edge) at 375 / 768 / 1280 x light+dark, screenshot the actual pixels, critique them against a professional bar (visual hierarchy, spacing rhythm, type/readability, restrained palette, alignment, motion-with-purpose, and whether each state genuinely helps), fix the top defects at the design-system level, then re-drive and re-capture until the vision rubric is clean and the deterministic gates are green (visual-regression \`toHaveScreenshot\`, \`@axe-core/playwright\` zero serious/critical, contrast, CWV). Commit the baselines so polish cannot silently regress.
+
+Decision criteria: the frozen cut list works as one coherent journey and every quality budget has executable or observed evidence.
+
+Exit checkpoint: required CI is green; a cold-start recording/log reaches first value in under five minutes; a real deployment returns HTTP 200; accessibility and Web Vitals reports meet their budgets; the state-matrix Playwright screenshots + visual-regression baselines are committed and green, axe reports zero serious/critical, and the UI was judged from the rendered pixels, not the source.
+
+## Phase 5 — Launch
+
+- Turn the README into the landing page: the beachhead job, proof, five-minute quickstart, examples, limits, and next action above internal architecture detail.
+- Publish the GitHub Pages site and complete the Diataxis documentation. Treat docs as marketing because they let prospects experience competence before adoption.
+- Launch first where the beachhead persona already lives. Sequence, do not spray: Show HN for Hacker News builders, dev.to for developer education, Product Hunt for its discovery audience, and build-in-public for communities already following the problem.
+- Give each channel a channel-native artifact and measurable activation link. Respond to questions and capture objections as discovery input.
+- Verify every launch surface as it actually RENDERS, never from markdown or a 200: browse the repo page and screenshot the rendered README in light AND dark (every image/badge loads, the theme-adaptive hero swaps, relative links resolve, no raw-markdown artifacts), the live Pages site and docs (nav works, no overflow), the latest Release page (notes render, links resolve), and the og / social share-card (1200x630, legible when shared). Fix whatever looks off, re-capture, and only then call it launched.
+
+Decision criteria: launch traffic reaches the instrumented aha path and produces conversations or usage from the selected beachhead, not merely impressions.
+
+Exit checkpoint: public URLs return HTTP 200; channel posts are live; analytics record real visitors reaching or failing the aha event; support responses and objections are linked; the rendered README, Pages, docs, Release page, and og-card were driven + screenshotted and read well, not merely reachable.
+
+## Phase 6 — Measure
+
+- Define AARRR with explicit events. Stars and impressions are acquisition signals, never activation.
+- Measure the aha moment and median/p90 time-to-first-value; target under five minutes.
+- Run the Sean Ellis test with a reported sample size and segment: at least 40% must answer "very disappointed".
+- Plot cohort retention over a relevant product interval and require the curve to flatten. The Sean Ellis result and retention shape are both required for a product-market-fit claim.
+- Compare outcomes to the pre-registered hypothesis and threshold, including negative results.
+
+Decision criteria: continue only from observed behavior. Strong survey sentiment without retention, or retention without strong dependence, is promising evidence but not product-market fit.
+
+Exit checkpoint: an auditable dashboard/export contains activation, time-to-first-value, AARRR, Sean Ellis responses with real N, and cohort retention; the PMF conclusion cites both required tests.
+
+## Phase 7 — Iterate
+
+- Build a weekly opportunity-solution tree from interviews, support, issues, lost users, and behavioral data: outcome → opportunities → solutions → experiments.
+- Validate opportunities before solutions. Use RICE only to sequence options that already cleared validation; a high score cannot make an unvalidated idea true.
+- Select the next riskiest assumption, pre-register its threshold, run the smallest experiment, and update the tree.
+- Publish a changelog entry for every release and close the loop with affected users.
+
+Decision criteria: each iteration traces from external evidence to opportunity to experiment to measured outcome; vanity requests do not bypass the tree.
+
+Exit checkpoint: the dated tree links source evidence, the selected experiment, threshold, measured result, release, and user follow-up.
+
+## Phase 8 — Grow
+
+- Scale only channels that have produced retained and activated users in the beachhead.
+- Create shareable-artifact loops where normal product use produces something useful others can see, reuse, or discuss; measure invites and downstream activation, not raw shares.
+- Invest in community infrastructure, examples, integrations, and contribution paths that compound trust.
+- Use docs as search and education: answer the real job, alternatives, migration questions, and failure modes with proof.
+- Expand to adjacent segments one at a time and rerun niche, positioning, activation, and retention checks.
+
+Decision criteria: growth preserves or improves activation and cohort retention and has bounded, approved economics.
+
+Exit checkpoint: cohort and channel reports show incremental retained users, a measured share/referral loop, and acquisition economics within explicit human-approved limits.
+
+## Governance
+
+Daily OODA inside each phase:
+
+1. **Observe:** collect fresh customer, product, delivery, and distribution evidence.
+2. **Orient:** compare it with the current job, segment, assumptions, decision log, and constraints.
+3. **Decide:** choose one reversible next action against a pre-set threshold; escalate only destructive, regulated, or economically unauthorized actions.
+4. **Act:** delegate bounded work, execute, and capture the result.
+
+At phase scale, run Build-Measure-Learn: build the smallest testable artifact, measure externally observable behavior, learn against the threshold, then persist or pivot. Do not enter the next phase until its checkpoint is independently reproducible.
+
+Decision log format:
+
+| Date | Hypothesis | Experiment | Metric | Pre-set threshold | Outcome/evidence | Decision | Owner/next check |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| YYYY-MM-DD | <!-- falsifiable claim --> | <!-- smallest test --> | <!-- measure --> | <!-- kill/pivot/continue --> | <!-- URL, query, output, real N --> | <!-- result --> | <!-- owner/date --> |
+
+Hard authority limits: no operator may fabricate evidence, manipulate users, incur spend, start paid acquisition, set or change pricing, issue discounts, enter contracts, expand privileges, or make regulated/legal/privacy commitments unless a human has provided explicit boundaries. Within scope, proceed on best judgment and record assumptions rather than pausing for routine clarification.
+
+## Anti-patterns
+
+- **Over-building without distribution:** run a reachability or channel test before extending product scope.
+- **Hallucinated progress:** Project Vend and TheAgentCompany-style evaluations show a 70%+ autonomous-task failure base rate; never convert activity or a narrative into completion. Require real HTTP 200 responses, green CI, observed analytics, deployment state, or a real survey N.
+- **No distribution plan:** "build it and they will come" is not a plan. Name the beachhead, channel, artifact, owner, and activation event before launch.
+- **Manipulation or unbounded economic judgment:** no dark patterns, fabricated scarcity/social proof, undisclosed persuasion, speculative purchases, autonomous pricing, or spend outside human-set limits.
+- **Demo equals reality:** a local screenshot or scripted happy path is not a deployed, accessible, observable product. Verify the production journey cold.
+- **Viral equals product-market fit:** attention, stars, posts, and shares do not replace the Sean Ellis threshold plus a flattening cohort retention curve.
+- **Metrics after the fact:** choosing thresholds after seeing results destroys the test. Pre-register kill, pivot, and continue criteria.
+
+## One-page operating sequence
+
+${CONDENSED_OPERATING_SEQUENCE}
+`;
+}
 function buildLearnings(opts) {
 	return `# Learnings
 
@@ -10294,7 +11512,7 @@ function tier1LiveEnabled() {
 	return !envOptOut(process.env.GH_ROUTER_FM_TIER1_LIVE);
 }
 const DETERMINISTIC_VERIFIERS = { decompose: isValidDecomposeVerdict };
-function isNonNegativeInteger(value) {
+function isNonNegativeInteger$1(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function dependsOnIndices(indices, rawIndex, total) {
@@ -10302,7 +11520,7 @@ function dependsOnIndices(indices, rawIndex, total) {
 	if (!Array.isArray(indices)) return null;
 	const result = [];
 	for (const idx of indices) {
-		if (!isNonNegativeInteger(idx) || idx >= total || idx === rawIndex) return null;
+		if (!isNonNegativeInteger$1(idx) || idx >= total || idx === rawIndex) return null;
 		result.push(idx);
 	}
 	return result;
@@ -10416,6 +11634,142 @@ function decideRoute(kind, verdict) {
 	};
 }
 
+//#endregion
+//#region src/lib/first-mate/strategy-store.ts
+const STRATEGIES_VERSION = 1;
+function strategiesPath() {
+	return nodePath.join(PATHS.FIRST_MATE_DIR, "strategy.json");
+}
+function asRecord$1(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+function isFiniteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value);
+}
+function isNonNegativeInteger(value) {
+	return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function isOptionalString(value) {
+	return value === void 0 || typeof value === "string";
+}
+function isOptionalStringArray(value) {
+	return value === void 0 || Array.isArray(value) && value.every((entry) => typeof entry === "string");
+}
+function isStrategyBet(value) {
+	const bet = asRecord$1(value);
+	return bet !== void 0 && typeof bet.hypothesis === "string" && typeof bet.metric === "string" && typeof bet.threshold === "string" && (bet.decisionRule === "kill" || bet.decisionRule === "pivot" || bet.decisionRule === "continue");
+}
+function isOptionalStrategyBet(value) {
+	return value === void 0 || isStrategyBet(value);
+}
+function isStrategyGreatnessItem(value) {
+	const entry = asRecord$1(value);
+	return entry !== void 0 && typeof entry.item === "string" && (entry.status === "done" || entry.status === "pending") && isOptionalString(entry.evidence);
+}
+function isOptionalGreatnessChecklist(value) {
+	return value === void 0 || Array.isArray(value) && value.every(isStrategyGreatnessItem);
+}
+function isStrategyDecisionEntry(value) {
+	const entry = asRecord$1(value);
+	return entry !== void 0 && isFiniteNumber(entry.atMs) && typeof entry.decision === "string" && typeof entry.rationale === "string" && isOptionalString(entry.evidenceRef);
+}
+function isOptionalDecisionLog(value) {
+	return value === void 0 || Array.isArray(value) && value.every(isStrategyDecisionEntry);
+}
+function isNextStrategicAction(value) {
+	if (value === void 0) return true;
+	const next = asRecord$1(value);
+	return next !== void 0 && typeof next.action === "string" && isOptionalString(next.trigger);
+}
+function isStrategyRecord(value) {
+	const record = asRecord$1(value);
+	return record !== void 0 && typeof record.missionId === "string" && record.missionId.length > 0 && isOptionalStringArray(record.repos) && isOptionalString(record.currentPhase) && isOptionalStrategyBet(record.activeBet) && isOptionalGreatnessChecklist(record.greatnessChecklist) && isOptionalDecisionLog(record.decisionLog) && isOptionalStringArray(record.openAssumptions) && isNextStrategicAction(record.nextStrategicAction) && isFiniteNumber(record.updatedMs) && isOptionalString(record.updatedByWake);
+}
+function parseStrategies(raw) {
+	if (raw === void 0) return {
+		rev: 0,
+		strategies: []
+	};
+	try {
+		const parsed = asRecord$1(JSON.parse(raw));
+		if (!parsed || parsed.version !== STRATEGIES_VERSION || !Array.isArray(parsed.strategies)) return {
+			rev: 0,
+			strategies: []
+		};
+		const rev = isNonNegativeInteger(parsed.rev) ? parsed.rev : 0;
+		const cleaned = parsed.strategies.filter(isStrategyRecord);
+		if (cleaned.length !== parsed.strategies.length) consola.debug(`first-mate strategies dropped ${parsed.strategies.length - cleaned.length} corrupt strategy record(s)`);
+		return {
+			rev,
+			strategies: cleaned
+		};
+	} catch (err) {
+		consola.debug("first-mate strategies corrupt, starting empty:", err);
+		return {
+			rev: 0,
+			strategies: []
+		};
+	}
+}
+async function readStrategiesFile() {
+	let raw;
+	try {
+		raw = await fs.readFile(strategiesPath(), "utf8");
+	} catch (err) {
+		if (err.code !== "ENOENT") consola.debug("first-mate strategies read skipped:", err);
+		raw = void 0;
+	}
+	const parsed = parseStrategies(raw);
+	return {
+		version: STRATEGIES_VERSION,
+		rev: parsed.rev,
+		strategies: parsed.strategies
+	};
+}
+async function withStrategiesMutation(work) {
+	const { result } = await commitJsonCas({
+		path: strategiesPath(),
+		parse: (raw) => {
+			const parsed = parseStrategies(raw);
+			return {
+				rev: parsed.rev,
+				value: parsed.strategies
+			};
+		},
+		mutate: async (strategies) => {
+			return {
+				value: strategies,
+				result: await work(strategies)
+			};
+		},
+		build: (strategies, rev) => ({
+			version: STRATEGIES_VERSION,
+			rev,
+			strategies
+		})
+	});
+	return result;
+}
+async function readStrategies() {
+	return (await readStrategiesFile()).strategies;
+}
+async function readStrategy(missionId) {
+	return (await readStrategies()).find((record) => record.missionId === missionId);
+}
+async function upsertStrategy(rec) {
+	await withStrategiesMutation((strategies) => {
+		const existing = strategies.find((entry) => entry.missionId === rec.missionId);
+		const next = {
+			...existing,
+			...rec,
+			decisionLog: [...existing?.decisionLog ?? [], ...rec.decisionLog ?? []],
+			updatedMs: Date.now()
+		};
+		const kept = strategies.filter((entry) => entry.missionId !== rec.missionId);
+		strategies.splice(0, strategies.length, ...kept, next);
+	});
+}
+
 //#endregion
 //#region src/lib/first-mate/tools.ts
 const FIRST_MATE_GROUP = "first-mate";
@@ -10501,6 +11855,41 @@ const ScaffoldRepoArgsSchema = z.object({
 	base_ref: z.string().trim().min(1).optional(),
 	detection_overrides: ScaffoldDetectionOverridesSchema.optional()
 }).strict();
+const StrategyBetSchema = z.object({
+	hypothesis: z.string(),
+	metric: z.string(),
+	threshold: z.string(),
+	decisionRule: z.enum([
+		"kill",
+		"pivot",
+		"continue"
+	])
+}).strict();
+const StrategyGreatnessItemSchema = z.object({
+	item: z.string(),
+	status: z.enum(["done", "pending"]),
+	evidence: z.string().optional()
+}).strict();
+const StrategyDecisionEntrySchema = z.object({
+	atMs: z.number().finite(),
+	decision: z.string(),
+	rationale: z.string(),
+	evidenceRef: z.string().optional()
+}).strict();
+const NextStrategicActionSchema = z.object({
+	action: z.string(),
+	trigger: z.string().optional()
+}).strict();
+const WriteStrategyArgsSchema = z.object({
+	mission_id: z.string().trim().min(1),
+	repos: z.array(z.string()).optional(),
+	currentPhase: z.string().optional(),
+	activeBet: StrategyBetSchema.optional(),
+	greatnessChecklist: z.array(StrategyGreatnessItemSchema).optional(),
+	decisionLog: z.array(StrategyDecisionEntrySchema).optional(),
+	openAssumptions: z.array(z.string()).optional(),
+	nextStrategicAction: NextStrategicActionSchema.optional()
+}).strip();
 function createFirstMateTools(depsOverride = {}) {
 	const deps = {
 		...defaultMergeCloseDeps(),
@@ -10686,6 +12075,80 @@ function createFirstMateTools(depsOverride = {}) {
 				inactiveSummary: summarizeInactiveMissions(missions)
 			});
 		}),
+		tool$1("read_strategy", "Reads the durable strategic record for one first-mate mission so a fresh CEO can rehydrate its current phase, active bet, greatness evidence, decisions, assumptions, and next action. Returns a minimal empty record when no strategy has been written yet. Use at the start of each strategic wake before making portfolio decisions.", objectSchema({ mission_id: stringProp("Mission id whose strategy should be read.") }, ["mission_id"]), async (args) => {
+			const missionId = requiredString(args, "mission_id");
+			return ok(await readStrategy(missionId) ?? {
+				missionId,
+				currentPhase: null,
+				activeBet: null,
+				greatnessChecklist: [],
+				decisionLog: [],
+				openAssumptions: [],
+				nextStrategicAction: null,
+				repos: [],
+				updatedMs: 0
+			});
+		}),
+		tool$1("write_strategy", "Persists the strategic continuity record for one first-mate mission after a CEO wake. Inputs contain only the state a fresh CEO needs to rehydrate: phase, bet, greatness evidence, append-only decisions, assumptions, next action, and repo handles. Decision-log entries append to existing history while the other supplied fields replace their prior values. Returns the durable update timestamp.", {
+			...objectSchema({
+				mission_id: stringProp("Mission id whose strategy should be updated."),
+				repos: stringArrayProp("Repository handles relevant to the mission."),
+				currentPhase: stringProp("Current condensed operating-sequence phase."),
+				activeBet: objectProp("Current falsifiable strategic bet.", {
+					hypothesis: stringProp("Hypothesis being tested."),
+					metric: stringProp("Metric used to evaluate the bet."),
+					threshold: stringProp("Threshold that triggers the decision rule."),
+					decisionRule: enumProp([
+						"kill",
+						"pivot",
+						"continue"
+					], "Action when the threshold is evaluated.")
+				}, [
+					"hypothesis",
+					"metric",
+					"threshold",
+					"decisionRule"
+				]),
+				greatnessChecklist: arrayOfObjectsProp("Definition-of-greatness items and evidence handles.", {
+					item: stringProp("Greatness criterion."),
+					status: enumProp(["done", "pending"], "Current criterion status."),
+					evidence: stringProp("Optional evidence handle.")
+				}, ["item", "status"]),
+				decisionLog: arrayOfObjectsProp("Strategic decision entries to append.", {
+					atMs: numberProp("Decision timestamp in milliseconds."),
+					decision: stringProp("Decision made."),
+					rationale: stringProp("Why the decision was made."),
+					evidenceRef: stringProp("Optional evidence handle.")
+				}, [
+					"atMs",
+					"decision",
+					"rationale"
+				]),
+				openAssumptions: stringArrayProp("Strategic assumptions still requiring evidence."),
+				nextStrategicAction: objectProp("Next strategic action and optional trigger.", {
+					action: stringProp("Action to take next."),
+					trigger: stringProp("Optional condition that triggers the action.")
+				}, ["action"])
+			}, ["mission_id"]),
+			additionalProperties: true
+		}, async (args) => {
+			const input = parseWriteStrategyArgs(args);
+			await upsertStrategy({
+				missionId: input.mission_id,
+				...input.repos !== void 0 ? { repos: input.repos } : {},
+				...input.currentPhase !== void 0 ? { currentPhase: input.currentPhase } : {},
+				...input.activeBet !== void 0 ? { activeBet: input.activeBet } : {},
+				...input.greatnessChecklist !== void 0 ? { greatnessChecklist: input.greatnessChecklist } : {},
+				...input.decisionLog !== void 0 ? { decisionLog: input.decisionLog } : {},
+				...input.openAssumptions !== void 0 ? { openAssumptions: input.openAssumptions } : {},
+				...input.nextStrategicAction !== void 0 ? { nextStrategicAction: input.nextStrategicAction } : {},
+				updatedMs: 0
+			});
+			return ok({
+				ok: true,
+				updatedMs: (await readStrategy(input.mission_id))?.updatedMs ?? 0
+			});
+		}),
 		tool$1("merge_pr", "Merges a live GitHub pull request immediately, which is irreversible through this tool once GitHub accepts the merge. Inputs identify the repo and PR, bind the action to the exact reviewed head SHA, optionally bind the reviewed base branch, select the merge method, and can explicitly override ownership with allow_unowned. Returns GitHub's merge result and merge SHA after the live PR passes head-SHA and optional base concurrency checks, ownership checks, OPEN/not-draft/mergeable checks, and available CI or workflow checks. Use only after out-of-band human authorization for this exact head; this tool does not consult the first-mate approval ledger. It is not for PRs that are not agent-authored or correlated to a first-mate unit (unit.pr === pr) unless allow_unowned is intentionally set; a repo with no configured CI can merge on operator review plus the non-CI guards.", objectSchema({
 			repo: stringProp("Repository as an owner/name string."),
 			pr: numberProp("Pull request number."),
@@ -11153,6 +12616,16 @@ async function detectScaffoldOptions(input) {
 	const workflowSignal = [...workflowNames, ...workflowTexts];
 	const primaryOs = input.overrides?.primary_os ?? detectPrimaryOs(readme, workflowSignal);
 	const matrix = detectCiMatrix(primaryOs, workflowSignal);
+	const hasSite = detectHasSite(rootNames, frameworkNames);
+	const finalDestination = detectFinalDestination({
+		packageJsonRaw: packageJsonText,
+		hasPackageJson: packageJson !== void 0,
+		goMod,
+		pyproject,
+		cargoToml,
+		rootNames,
+		hasSite
+	});
 	return {
 		repoName: input.repoSlug,
 		repoDescription: input.repoDescription ?? summarizeReadme(readme),
@@ -11174,9 +12647,60 @@ async function detectScaffoldOptions(input) {
 			cargoToml,
 			workflows: workflowNames,
 			primaryOs
-		})
+		}),
+		finalDestination,
+		hasSite
 	};
 }
+/**
+* True when the repo builds a web site worth an SEO/Pages scaffold: a root
+* `index.html`, or a static-site / web framework in its dependencies. Kept
+* conservative (a UI *library* is not a site) — over-seeding SEO templates with
+* TODOs is low-harm, but a false site would seed an irrelevant Pages workflow.
+*/
+function detectHasSite(rootNames, frameworkNames) {
+	if (new Set(rootNames.map((n) => n.toLowerCase())).has("index.html")) return true;
+	const siteFrameworks = new Set([
+		"vite",
+		"next",
+		"nuxt",
+		"astro",
+		"@docusaurus/core",
+		"gatsby",
+		"vitepress",
+		"@11ty/eleventy",
+		"@sveltejs/kit",
+		"remix",
+		"solid-start"
+	]);
+	return frameworkNames.some((n) => siteFrameworks.has(n.toLowerCase()));
+}
+/**
+* Detect the repo's PUBLIC final destination from root signals. Only assigns a
+* specific destination on a CLEAR signal; genuinely ambiguous → "unknown" (the
+* scaffold then seeds CI + Pages-if-site but NO publish workflow — a safe
+* false-negative, never a wrong publish pipeline).
+*/
+function detectFinalDestination(args) {
+	const root = new Set(args.rootNames.map((n) => n.toLowerCase()));
+	const has = (n) => root.has(n.toLowerCase());
+	const raw = args.packageJsonRaw ?? "";
+	if (has("action.yml") || has("action.yaml")) return "actions-marketplace";
+	if (/"engines"\s*:\s*\{[^}]*"vscode"/.test(raw)) return "vscode-marketplace";
+	if (args.cargoToml !== void 0) return "crates";
+	if (args.pyproject !== void 0 || has("setup.py")) return "pypi";
+	if (args.goMod !== void 0) return "go-proxy";
+	if (args.hasPackageJson) {
+		const isPublishableLib = !/"private"\s*:\s*true/.test(raw) && /"(bin|exports|main|module)"\s*:/.test(raw);
+		if (args.hasSite) return "github-pages";
+		if (isPublishableLib) return "npm";
+		if (has("dockerfile")) return "ghcr";
+		return "unknown";
+	}
+	if (has("dockerfile")) return "ghcr";
+	if (args.hasSite) return "github-pages";
+	return "unknown";
+}
 async function readFirstAvailableText(repo, paths, ref, signal) {
 	for (const path$1 of paths) {
 		const content = await readRepoTextFile(repo, path$1, ref, signal);
@@ -11403,9 +12927,17 @@ function stringRecord(value) {
 function parseScaffoldRepoArgs(args) {
 	const parsed = ScaffoldRepoArgsSchema.safeParse(args);
 	if (parsed.success) return parsed.data;
-	throw new FirstMateToolInputError("INVALID_ARGUMENT", parsed.error.issues.map((issue) => {
+	throwSchemaError(parsed.error, "scaffold_repo");
+}
+function parseWriteStrategyArgs(args) {
+	const parsed = WriteStrategyArgsSchema.safeParse(args);
+	if (parsed.success) return parsed.data;
+	throwSchemaError(parsed.error, "write_strategy");
+}
+function throwSchemaError(error, toolName) {
+	throw new FirstMateToolInputError("INVALID_ARGUMENT", error.issues.map((issue) => {
 		return `${issue.path.length === 0 ? "arguments" : `arguments.${issue.path.join(".")}`}: ${issue.message}`;
-	}).join("; ") || "arguments must match the scaffold_repo schema");
+	}).join("; ") || `arguments must match the ${toolName} schema`);
 }
 function ok(value) {
 	return jsonResult(value, false);
@@ -11516,6 +13048,12 @@ function arrayOfObjectsProp(description, properties, required) {
 		items: objectSchema(properties, required)
 	};
 }
+function objectProp(description, properties, required) {
+	return {
+		...objectSchema(properties, required),
+		description
+	};
+}
 function anyProp(description) {
 	return { description };
 }
@@ -30891,7 +32429,7 @@ function buildPeerAwarenessSummary(opts) {
 	if (opts.standInAvailable) lines.push(`\`mcp__${key("decide")}__stand_in\` returns a three-lab consensus for a decision when the user is unavailable.`);
 	if (opts.browseAvailable) lines.push(`\`mcp__${key("browser")}__*\` drives a real Chrome or Edge browser.`);
 	if (opts.fleetAvailable) lines.push(`\`mcp__${key("fleet")}__*\` drives remote ai-or-die coding sessions.`);
-	if (opts.agentToolsAvailable === true) lines.push("The `/gh-first-mate` skill drives a durable GitHub cloud-agent loop.");
+	if (opts.agentToolsAvailable === true) lines.push("In `--agents` mode you are the CEO of the product: `/gh-first-mate-conduct` is the fleet conductor — one durable loop that drives one or many repos, each by its own per-repo CEO subagent — and `/gh-first-mate-operate` is your operating protocol (niche → MVP → launch → iterate) toward a verifiable greatness bar; get verified work out of the team, never a self-reported \"done\".");
 	lines.push("");
 	lines.push(`Each tool's own description carries when to use it and when not. The full per-tool inventory (models, gating, workers, skills) is in the "Peer review and advisor" section of your CLAUDE.md project instructions.`);
 	return lines.join("\n");
@@ -32030,5 +33568,5 @@ function enumerateInjectedMcpToolNames(groupKeys, opts = {}) {
 }
 
 //#endregion
-export { buildAdvisorStream as $, setupCopilotToken as $t, trustRepo as A, readResponseBodyCapped as At, runWorkerAgent as B, buildWorkspaceHeaderJson as Bt, fileLastPromptStore as C, getTokenCount as Ct, repoRoot as D, createResponses as Dt, repoFingerprint as E, pickEndpoint as Et, EXPLORE_DEFAULT_MODEL as F, extractTarGzMember as Ft, toolbeltEnabled as G, DEFAULT_CODEX_MODEL_FALLBACKS as Gt, buildEnv as H, toolbeltPathOverride as Ht, IMPLEMENT_DEFAULT_MODEL as I, extractZipMember as It, TOOLBELT_TOOLS$1 as J, UPSTREAM_INACTIVITY_TIMEOUT_MS as Jt, toolbeltSkipSet as K, DEFAULT_PORT as Kt, PLAN_DEFAULT_MODEL as L, shouldUseInsecureTls as Lt, resolveSealedGate as M, provisionBrowserAssets as Mt, BROWSE_DEFAULT_MODEL as N, hasSupportedBrowserInstalled as Nt, stopGateEnabledForRepo as O, createChatCompletions as Ot, DEFAULT_MODEL as P, provisionAndIndexColbert as Pt, ADVISOR_TOOL_INSTRUCTIONS as Q, withInstallLock as Qt, REVIEW_DEFAULT_MODEL as R, ArtifactClient as Rt, fileFindingsStore as S, createMessages as St, isSubagentContext as T, resolveMcpToolTimeoutMs as Tt, availableToolCommands as U, DEFAULT_CLAUDE_MODEL_FALLBACKS as Ut, withNoOutputRetry as V, collapsePathKeys as Vt, buildToolbeltAwareness as W, DEFAULT_CODEX_MODEL as Wt, searchWeb as X, pickClaudeDefault as Xt, assetFor as Y, generateRandomPort as Yt, ADVISOR_INTERNAL_TOOL_NAME as Z, getPackageVersion as Zt, stopGateDisabled as _, copilotBaseUrl as _n, nativeSubagentModel as _t, buildPeerAwarenessSnippet as a, cacheVSCodeVersion as an, logStreamError as at, stopReviewEnabled as b, state as bn, shimDefaultsToXhigh as bt, personasFor as c, resolveCodexModel as cn, handleMcpDelete as ct, buildStopHookCommand as d, getModels as dn, artifactToolsEnabled as dt, setupGitHubAgentToken as en, injectAdvisorTool as et, captureLaunchBaseline as f, getGitHubUser as fn, browseAgentEnabled as ft, launchBaselineKey as g, GITHUB_API_BASE_URL as gn, geminiAvailable as gt, injectStopHookIntoSettingsFile as h, forwardError as hn, fleetToolsEnabled as ht, buildAgentPrompt as i, cacheModels as in, isControllerClosedError as it, liveExec as j, parseJsonOrDiagnose as jt, stopReviewStateDir as k, MAX_RESPONSE_BODY_BYTES as kt, buildArtifactOpenHookCommand as l, resolveModel as ln, handleMcpPost as lt, fileBlockBudget as m, HTTPError as mn, browserToolsEnabled as mt, MCP_GROUPS as n, tryRefreshAndRetry as nn, buildAnthropicErrorEvent as nt, buildPeerAwarenessSummary as o, filterBetaHeader as on, readIteratorWithTimeout as ot, decideStopHook as p, fetchWithTransientRetry as pn, browserCompoundToolsEnabled as pt, vscodeRipgrepPath as q, UPSTREAM_FETCH_TIMEOUT_MS as qt, assertMcpToolSurfaceConsistent as r, cacheCopilotVersion as rn, buildOpenAIErrorEvent as rt, enumerateInjectedMcpToolNames as s, isNullish as sn, relayAnthropicStream as st, GROUP_META as t, setupGitHubToken as tn, isAdvisorRequested as tt, buildSessionBindHookCommand as u, sleep as un, agentToolsEnabled as ut, stopGateId as v, copilotHeaders as vn, standInToolEnabled as vt, fileReviewDebounce as w, assembleResponsesPayload as wt, fileBaselineStore as x, countTokens as xt, stopGatePlanMode as y, githubHeaders as yn, workerToolsEnabled as yt, appendPlanReminder as z, buildWorkspaceHeaderHelperCommand as zt };
-//# sourceMappingURL=peer-mcp-personas-C3ii7ZqP.js.map
+export { buildAdvisorStream as $, getPackageVersion as $t, trustRepo as A, readResponseBodyCapped as At, runWorkerAgent as B, ArtifactClient as Bt, fileLastPromptStore as C, getTokenCount as Ct, repoRoot as D, createResponses as Dt, repoFingerprint as E, pickEndpoint as Et, EXPLORE_DEFAULT_MODEL as F, extractTarGzMember as Ft, toolbeltEnabled as G, DEFAULT_CLAUDE_MODEL_FALLBACKS as Gt, buildEnv as H, buildWorkspaceHeaderJson as Ht, IMPLEMENT_DEFAULT_MODEL as I, extractZipMember as It, TOOLBELT_TOOLS$1 as J, DEFAULT_PORT as Jt, toolbeltSkipSet as K, DEFAULT_CODEX_MODEL as Kt, PLAN_DEFAULT_MODEL as L, CONDENSED_OPERATING_SEQUENCE as Lt, resolveSealedGate as M, provisionBrowserAssets as Mt, BROWSE_DEFAULT_MODEL as N, hasSupportedBrowserInstalled as Nt, stopGateEnabledForRepo as O, createChatCompletions as Ot, DEFAULT_MODEL as P, provisionAndIndexColbert as Pt, ADVISOR_TOOL_INSTRUCTIONS as Q, pickClaudeDefault as Qt, REVIEW_DEFAULT_MODEL as R, DEFINITION_OF_GREATNESS as Rt, fileFindingsStore as S, state as Sn, createMessages as St, isSubagentContext as T, resolveMcpToolTimeoutMs as Tt, availableToolCommands as U, collapsePathKeys as Ut, withNoOutputRetry as V, buildWorkspaceHeaderHelperCommand as Vt, buildToolbeltAwareness as W, toolbeltPathOverride as Wt, searchWeb as X, UPSTREAM_INACTIVITY_TIMEOUT_MS as Xt, assetFor as Y, UPSTREAM_FETCH_TIMEOUT_MS as Yt, ADVISOR_INTERNAL_TOOL_NAME as Z, generateRandomPort as Zt, stopGateDisabled as _, forwardError as _n, nativeSubagentModel as _t, buildPeerAwarenessSnippet as a, cacheCopilotVersion as an, logStreamError as at, stopReviewEnabled as b, copilotHeaders as bn, shimDefaultsToXhigh as bt, personasFor as c, filterBetaHeader as cn, handleMcpDelete as ct, buildStopHookCommand as d, resolveModel as dn, artifactToolsEnabled as dt, withInstallLock as en, injectAdvisorTool as et, captureLaunchBaseline as f, sleep as fn, browseAgentEnabled as ft, launchBaselineKey as g, HTTPError as gn, geminiAvailable as gt, injectStopHookIntoSettingsFile as h, fetchWithTransientRetry as hn, fleetToolsEnabled as ht, buildAgentPrompt as i, tryRefreshAndRetry as in, isControllerClosedError as it, liveExec as j, parseJsonOrDiagnose as jt, stopReviewStateDir as k, MAX_RESPONSE_BODY_BYTES as kt, buildArtifactOpenHookCommand as l, isNullish as ln, handleMcpPost as lt, fileBlockBudget as m, getGitHubUser as mn, browserToolsEnabled as mt, MCP_GROUPS as n, setupGitHubAgentToken as nn, buildAnthropicErrorEvent as nt, buildPeerAwarenessSummary as o, cacheModels as on, readIteratorWithTimeout as ot, decideStopHook as p, getModels as pn, browserCompoundToolsEnabled as pt, vscodeRipgrepPath as q, DEFAULT_CODEX_MODEL_FALLBACKS as qt, assertMcpToolSurfaceConsistent as r, setupGitHubToken as rn, buildOpenAIErrorEvent as rt, enumerateInjectedMcpToolNames as s, cacheVSCodeVersion as sn, relayAnthropicStream as st, GROUP_META as t, setupCopilotToken as tn, isAdvisorRequested as tt, buildSessionBindHookCommand as u, resolveCodexModel as un, agentToolsEnabled as ut, stopGateId as v, GITHUB_API_BASE_URL as vn, standInToolEnabled as vt, fileReviewDebounce as w, assembleResponsesPayload as wt, fileBaselineStore as x, githubHeaders as xn, countTokens as xt, stopGatePlanMode as y, copilotBaseUrl as yn, workerToolsEnabled as yt, appendPlanReminder as z, shouldUseInsecureTls as zt };
+//# sourceMappingURL=peer-mcp-personas-CxpFD-rW.js.map