mandrel 1.93.0 → 2.0.0

package/.agents/scripts/lib/config/delivery-routing.js

@@ -0,0 +1,103 @@
+/**
+ * `delivery.routing` accessor + framework defaults — Epic #4478 (M7-B), the
+ * role-scoped-boot-context flip and the maker-checker sampling floor.
+ *
+ * Stage 6 dropped `delivery.routing.singleDelivery` (the v1 epic
+ * single-vs-fan-out kill-switch). v2 has one Story delivery path; routing
+ * here is only about spawn boot context and critic sampling.
+ *
+ * `delivery.routing.roleScopedAgents` is the **kill-switch for the role-scoped
+ * boot contexts** (Epic #4478, M7-B). It defaults to `true`: a converted spawn
+ * (`story-worker`, `acceptance-critic`) boots on its own
+ * `.claude/agents/<role>.md` system prompt instead of re-paying the full
+ * `CLAUDE.md` @-import closure, which is the whole payoff of the context diet
+ * (≈50KB → ≈8KB per spawn). When set to `false`, every converted spawn falls
+ * back to `subagent_type: general-purpose` — the instant, code-rollback-free
+ * per-consumer revert, and the universal escape for hosts that ignore
+ * `.claude/agents/`. Flipping it off never drops a gate: the fallback is the
+ * full-closure agent that ran before M7-B.
+ *
+ * `delivery.routing.freshCriticSampleRate` is the **maker-checker sampling
+ * floor** (Epic #4478, M7-B, Part 2). Risk-routed ceremony sends a low-risk
+ * acceptance cluster down the contract-identical *inline* critic path, but a
+ * fraction of low-risk clusters are still forced through a *fresh-context*
+ * critic so "low risk" never degrades to zero independent checking. The rate is
+ * clamped into `[0, 1]`; `0` disables the floor (pure risk routing), `1` forces
+ * every cluster fresh. The default is `0.2`. See `resolveCeremonyForRisk` in
+ * `lib/orchestration/ceremony-routing.js`.
+ *
+ * Framework-defaults pattern mirrors `lib/config/ci.js#getCiDelivery`.
+ */
+
+export const DELIVERY_ROUTING_DEFAULTS = Object.freeze({
+  roleScopedAgents: true,
+  freshCriticSampleRate: 0.2,
+  /** @type {'minimal'|'standard'|'strict'} */
+  ceremonyProfile: 'standard',
+  /**
+   * When true (default), attended `/deliver` lands through merge in one
+   * close (`--wait-merge` semantics) instead of stopping at `agent::closing`.
+   * Operators opt out per-run with `--no-wait-merge`.
+   */
+  closeAndLand: true,
+});
+
+/**
+ * Clamp a candidate sample rate into `[0, 1]`. Non-finite / non-number inputs
+ * fall back to the framework default so a degraded config never yields a
+ * NaN-driven or out-of-range floor.
+ *
+ * @param {unknown} value
+ * @returns {number}
+ */
+function clampSampleRate(value) {
+  if (typeof value !== 'number' || !Number.isFinite(value)) {
+    return DELIVERY_ROUTING_DEFAULTS.freshCriticSampleRate;
+  }
+  if (value < 0) return 0;
+  if (value > 1) return 1;
+  return value;
+}
+
+/**
+ * Normalize ceremony profile; unknown values → `standard`.
+ *
+ * @param {unknown} value
+ * @returns {'minimal'|'standard'|'strict'}
+ */
+function normalizeCeremonyProfile(value) {
+  if (value === 'minimal' || value === 'standard' || value === 'strict') {
+    return value;
+  }
+  return DELIVERY_ROUTING_DEFAULTS.ceremonyProfile;
+}
+
+/**
+ * Read the merged `delivery.routing` block, applying framework defaults for
+ * any field the operator omitted. Accepts the full resolved config, the bare
+ * `delivery` bag, or the bare `routing` bag — mirroring `getCiDelivery`'s
+ * tolerant unwrap so callers can pass whichever shape they hold.
+ *
+ * @param {object | null | undefined} config
+ * @returns {{
+ *   roleScopedAgents: boolean,
+ *   freshCriticSampleRate: number,
+ *   ceremonyProfile: 'minimal'|'standard'|'strict',
+ *   closeAndLand: boolean,
+ * }}
+ */
+export function getDeliveryRouting(config) {
+  const routing = config?.delivery?.routing ?? config?.routing ?? config ?? {};
+  return {
+    roleScopedAgents:
+      typeof routing.roleScopedAgents === 'boolean'
+        ? routing.roleScopedAgents
+        : DELIVERY_ROUTING_DEFAULTS.roleScopedAgents,
+    freshCriticSampleRate: clampSampleRate(routing.freshCriticSampleRate),
+    ceremonyProfile: normalizeCeremonyProfile(routing.ceremonyProfile),
+    closeAndLand:
+      typeof routing.closeAndLand === 'boolean'
+        ? routing.closeAndLand
+        : DELIVERY_ROUTING_DEFAULTS.closeAndLand,
+  };
+}

package/.agents/scripts/lib/config/explain.js

@@ -90,6 +90,8 @@ const KEY_MEANINGS = Object.freeze({
   'github.projectOwner': 'Owner of the GitHub Projects board.',
   'github.operatorHandle':
     'GitHub @handle mentioned when a run needs operator attention.',
+  'github.defaultTimeoutMs':
+    'Default timeout (ms) for GitHub CLI / API calls when a caller does not supply one.',
   'github.branchProtection.enforce':
     'Whether the framework applies branch-protection rules.',
   'github.branchProtection.requiredChecks':
@@ -126,28 +128,28 @@ const KEY_MEANINGS = Object.freeze({
     'How many recent commits the snapshot summarizes.',
   'planning.riskHeuristics':
     'Phrases that flag a Story as high-risk for HITL escalation.',
-  'planning.taskSizing.softAcceptanceCount':
-    'Acceptance-criteria count above which a Story is flagged as large (advisory-only — there is no hard acceptance ceiling).',
-  'planning.taskSizing.softFiles':
-    'Touched-file count above which a Story is flagged as large.',
-  'planning.taskSizing.hardFiles':
-    'Touched-file count above which a Story is rejected unless it declares `wide` with a reason.',
   'planning.failOnSharedEditors':
     'Whether shared-editor conflict findings are promoted to hard errors.',
   'planning.requireExplicitCrossStoryDeps':
     'Whether implicit cross-Story dependencies are promoted to hard errors.',
+  'planning.failOnRegistryConflicts':
+    'Whether cross-cutting registry conflict findings are promoted to hard errors.',
+  'planning.failOnLargeFanOut':
+    'Whether large fan-out findings are promoted to hard errors.',
+  'planning.largeFanOutThreshold':
+    'Story count above which a plan is flagged as a large fan-out.',
+  'planning.crossCuttingRegistries':
+    'Glob patterns naming cross-cutting registry files the planner conflict-checks.',
+  'planning.navigation.routeGlobs':
+    'Glob patterns marking paths that add a user-facing route (plan-time reachability gate).',
+  'planning.navigation.navRegistry':
+    'Tokens identifying the nav-registry SSOT a route-adding Story is expected to reference.',
 
   // delivery.*
   'delivery.execution.timeoutMs':
     'Per-execution timeout for orchestrated delivery steps.',
-  'delivery.maxTokenBudget':
-    'Cap on the hydrated task-prompt size handed to an agent.',
   'delivery.lease.ttlMs':
     'Time-to-live for the Epic lease before a stale claim is reclaimable.',
-  'delivery.ci.skipForStoryPushes':
-    'Whether Story-branch pushes carry a [skip ci] trailer.',
-  'delivery.ci.earlyPr':
-    'Whether /deliver opens the Epic PR early so CI warms during later waves.',
   'delivery.ci.watch.pollIntervalMs':
     'Poll cadence (ms) for the merge/CI watch loop.',
   'delivery.ci.watch.maxPolls':
@@ -156,22 +158,10 @@ const KEY_MEANINGS = Object.freeze({
     'Maximum times the CI watch may resume after a transient stall.',
   'delivery.ci.autoMerge':
     'Merge posture: trust-ci merges on green checks; strict also requires a clean review gate.',
-  'delivery.preflight.maxStories':
-    'Pre-dispatch ceiling on estimated Story count (no cap when unset).',
-  'delivery.preflight.maxWaves':
-    'Pre-dispatch ceiling on estimated wave count.',
-  'delivery.preflight.maxInstallCostSeconds':
-    'Pre-dispatch ceiling on estimated dependency-install seconds.',
-  'delivery.preflight.maxGithubApiRequests':
-    'Pre-dispatch ceiling on estimated GitHub API request volume.',
-  'delivery.preflight.maxClaudeQuotaTokens':
-    'Pre-dispatch ceiling on estimated Claude quota-token burn.',
   'delivery.docsFreshness.paths':
     'Docs whose freshness is checked at delivery time.',
   'delivery.deliverRunner.concurrencyCap':
     'Maximum Stories dispatched in parallel within one wave. Default 3 — conservative by design to keep host-quota consumption predictable. Operators running wide-wave Epics with adequate parallel-agent quota should raise this to reduce wall-clock time proportionally.',
-  'delivery.deliverRunner.progressReportIntervalSec':
-    'Cadence for delivery progress reporting.',
   'delivery.deliverRunner.verifyConcurrencyCap':
     'Maximum verify steps run in parallel.',
   'delivery.worktreeIsolation.enabled':
@@ -179,17 +169,19 @@ const KEY_MEANINGS = Object.freeze({
   'delivery.worktreeIsolation.root':
     'Directory under which per-Story worktrees are created.',
   'delivery.worktreeIsolation.nodeModulesStrategy':
-    'How node_modules is provisioned per worktree.',
+    'How node_modules is provisioned per worktree (default clone on darwin/linux; per-worktree on win32).',
   'delivery.worktreeIsolation.primeFromPath':
     'Source path a worktree primes its node_modules from.',
   'delivery.worktreeIsolation.allowSymlinkOnWindows':
     'Whether symlink node_modules strategy is allowed on Windows.',
   'delivery.worktreeIsolation.reapOnSuccess':
     'Whether a worktree is removed after a Story closes cleanly.',
-  'delivery.worktreeIsolation.reapOnCancel':
-    'Whether a worktree is removed after a cancelled run.',
   'delivery.worktreeIsolation.bootstrapFiles':
-    'Files copied into each new worktree (e.g. .env, .mcp.json).',
+    'Files copied into each new worktree (e.g. .env, .mcp.json, local overrides).',
+  'delivery.mergeWatch.intervalSeconds':
+    'Poll cadence (seconds) for MergeWatcher after epic.merge.armed.',
+  'delivery.mergeWatch.maxBudgetSeconds':
+    'Wall-clock budget (seconds) before MergeWatcher surfaces budget-exceeded.',
   'delivery.codeReview.providers':
     'Ordered provider chain the code-review phase consults.',
   'delivery.codeReview.maxFixAttempts':
@@ -198,12 +190,34 @@ const KEY_MEANINGS = Object.freeze({
     'Maximum files an auto-fix may touch in one attempt.',
   'delivery.codeReview.autoFixSeverity':
     'Severity threshold for on-branch code-review remediation (medium fixes 🔴/🟠/🟡, high fixes 🔴/🟠 only; default medium).',
-  'delivery.epicAudit.autoFixSeverity':
-    'Severity threshold for on-branch epic-audit remediation (medium fixes 🔴/🟠/🟡, high fixes 🔴/🟠 only; default medium).',
+  'delivery.routing.roleScopedAgents':
+    'Whether delivery spawns boot on role-scoped .claude/agents/<role>.md contexts.',
+  'delivery.routing.freshCriticSampleRate':
+    'Fraction of low-risk acceptance clusters forced through a fresh-context critic (maker-checker floor).',
+  'delivery.routing.ceremonyProfile':
+    'Acceptance-ceremony depth: minimal (always inline), standard (risk-routed), or strict (always fresh).',
+  'delivery.routing.closeAndLand':
+    'When true, single-story-close lands through merge in one close (opt out with --no-wait-merge).',
+  'delivery.feedbackLoop.auditResultsAutoFile':
+    'When true, auto-file non-blocking audit findings as follow-up issues.',
+  'delivery.feedbackLoop.retroProposals':
+    'When true, auto-file actionable retro proposals as follow-up issues.',
+  'delivery.quality.formatAutofix.timeoutMs':
+    'Bounded timeout (ms) for the close-time format autofix spawn.',
+  'delivery.quality.requireBaselines':
+    'When true, absent baseline artifacts fail close-validation instead of skipping cleanly.',
+  'delivery.quality.navigability.routeGlobs':
+    'Glob patterns marking user-facing routes for the navigability lens / journey gate.',
+  'delivery.quality.navigability.navRegistry':
+    'Tokens identifying the nav-registry SSOT the navigability lens expects.',
+  'delivery.quality.navigability.journeySuite':
+    'Optional journey-suite path the post-wave navigability integration gate runs.',
   'delivery.refactorStage.enabled':
     'Whether a dedicated refactor stage runs during delivery.',
   'delivery.acceptanceEval.maxRounds':
     'Redraft rounds the per-Story acceptance self-eval loop runs before escalating to agent::blocked (default 2; clamped to a hard ceiling that cannot be disabled).',
+  'delivery.acceptanceEval.clusterCeiling':
+    'Max acceptance criteria one single-delivery acceptance critic scores per fresh-context pass; the Epic ACs are split into ceil(totalACs / clusterCeiling) maker-blind critic clusters (default 4; clamped to [1, 8]).',
 
   // qa.*
   'qa.featureRoot': 'Root directory holding the QA harness .feature files.',
@@ -238,11 +252,19 @@ const PREFIX_MEANINGS = Object.freeze([
   ],
   ['delivery.quality', 'Delivery-time quality configuration.'],
   ['delivery.signals', 'Threshold for a delivery friction/telemetry signal.'],
-  ['delivery.lifecycle.timeouts', 'Timeout for a lifecycle-bus phase.'],
-  ['delivery.lifecycle', 'Lifecycle-bus configuration.'],
+  ['delivery.mergeWatch', 'MergeWatcher poll cadence and wall-clock budget.'],
   [
-    'planning.taskSizing',
-    'Story-sizing threshold for the decompose validator.',
+    'delivery.feedbackLoop',
+    'Opt-out toggles for auto-filing non-blocking findings.',
+  ],
+  [
+    'delivery.routing',
+    'Delivery-spawn routing and acceptance-ceremony profile.',
+  ],
+  ['delivery.ci', 'CI-aware delivery namespace (watch, auto-merge).'],
+  [
+    'planning.navigation',
+    'Plan-time navigability reachability gate (route globs + nav registry).',
   ],
   [
     'qa.environments',
@@ -261,8 +283,7 @@ const BLOCK_MEANINGS = Object.freeze({
   project: 'Project identity, paths, and command configuration.',
   github: 'GitHub provider identity and merge/notification policy.',
   planning: 'Inputs and guardrails for /epic-plan.',
-  delivery:
-    'Execution, isolation, quality, and lifecycle settings for delivery.',
+  delivery: 'Execution, isolation, quality, and CI settings for delivery.',
   qa: 'Agent-driven QA harness contract.',
 });
 

package/.agents/scripts/lib/config/limits.js

@@ -6,24 +6,18 @@
  * `planning.*` and `delivery.*`:
  *
  *   - `planning.context.{maxBytes, summaryMode}` (planning-context budget)
- *   - `delivery.maxTokenBudget` (task-prompt hydration cap)
  *   - `delivery.execution.timeoutMs` (per-process execution timeout)
  *   - `delivery.lease.ttlMs` (assignee-as-lease staleness window — Story #3480)
- *   - `delivery.signals.{hotspot, rework, retry}` (performance-signal
- *     detector thresholds — `churn` and `idle` dropped)
+ *   - `delivery.signals.{rework, retry}` (performance-signal detector
+ *     thresholds — `hotspot` retired with Epic #4406; `churn`/`idle` dropped)
  *
- * `maxTickets` (the decomposer reviewability budget) is a **framework
- * constant** — Story #4163 collapsed the never-overridden
- * `planning.maxTickets` operator knob to `LIMITS_DEFAULTS.maxTickets` and
- * removed it from the AJV schema, the published mirror, and the explain
- * map. The persist-time over-budget gate (ADR-20260610) still reads the
- * constant via `getLimits(config).maxTickets`; `resolveLimits` no longer
- * reads `planning.maxTickets`, so setting it in a config is inert.
+ * Framework constants (not operator-tunable via `.agentrc.json`):
+ *   - `maxTickets` — decomposer reviewability budget (Story #4163)
  *
- * Dropped entirely: `maxInstructionSteps`, `friction.*` (the LLM
- * self-pacing thresholds rewritten as qualitative prose in
- * `.agents/instructions.md`), `executionMaxBuffer` (now a framework-internal
- * constant in the spawn caller modules), `signals.{churn, idle}`.
+ * Dropped entirely: `maxInstructionSteps`, `friction.*`, `executionMaxBuffer`,
+ * `signals.{churn, idle}`, `delivery.preflight`, `delivery.maxTokenBudget`
+ * (planning no longer sizes against a token-budget envelope; session-mass
+ * ceilings are absolute in `DEFAULT_MODEL_CAPACITY`).
  *
  * The historic combined accessor `getLimits(config)` is preserved as a
  * compatibility surface: it returns a wrapper carrying the surviving
@@ -31,14 +25,12 @@
  * working. New call sites should prefer the specific accessors below.
  */
 
-import { getPreflight } from './preflight.js';
-
 /**
- * Framework defaults for the performance-signal detector thresholds. The two
- * dropped detectors (`churn`, `idle`) are omitted entirely.
+ * Framework defaults for the performance-signal detector thresholds.
+ * `hotspot` was retired with its detector (Epic #4406); `churn` and `idle`
+ * were dropped earlier.
  */
 export const SIGNALS_DEFAULTS = Object.freeze({
-  hotspot: Object.freeze({ p95Multiplier: 1.25 }),
   rework: Object.freeze({ editsPerFile: 5 }),
   retry: Object.freeze({ repeatCount: 3 }),
 });
@@ -53,17 +45,10 @@ export const SIGNALS_DEFAULTS = Object.freeze({
 export const LEASE_TTL_MS_DEFAULT = 900000;
 
 /**
- * Framework defaults for the surviving limits surface. `executionTimeoutMs`
- * bumps from 5 min to 10 min per the Story 1 decisions log.
- *
- * `maxTokenBudget` is a **single global value** (Story #3875 — raised once
- * from 200000 to 300000 so capability-sized Stories are not clipped by
- * hydration elision). There is intentionally no per-profile or
- * per-complexity budget branch anywhere in the resolver.
+ * Framework defaults for the surviving limits surface.
  */
 export const LIMITS_DEFAULTS = Object.freeze({
   maxTickets: 80,
-  maxTokenBudget: 300000,
   executionTimeoutMs: 600000,
   leaseTtlMs: LEASE_TTL_MS_DEFAULT,
   planningContext: Object.freeze({
@@ -79,7 +64,7 @@ export const LIMITS_DEFAULTS = Object.freeze({
  * operator can override a single threshold without re-listing the others.
  *
  * @param {object|undefined} userSignals
- * @returns {{ hotspot: {p95Multiplier: number}, rework: {editsPerFile: number}, retry: {repeatCount: number} }}
+ * @returns {{ rework: {editsPerFile: number}, retry: {repeatCount: number} }}
  */
 function mergeSignals(userSignals) {
   const user =
@@ -97,16 +82,14 @@ function mergeSignals(userSignals) {
 
 /**
  * Resolve the surviving limits surface against a `.agentrc.json` shape
- * (post-reshape). Accepts the resolved-config wrapper or a partial bag —
- * `maxTickets` is the framework constant `LIMITS_DEFAULTS.maxTickets`
- * (no longer operator-configurable; Story #4163), pulls `planningContext`
- * from `planning.*`, pulls `maxTokenBudget` and `executionTimeoutMs` from
- * `delivery.*`, pulls signals from `delivery.signals.*`.
+ * (post-reshape). `maxTickets` is a framework constant (never read from
+ * config); pulls `planningContext` from `planning.*`, pulls
+ * `executionTimeoutMs` from `delivery.*`, pulls signals from
+ * `delivery.signals.*`.
  *
  * @param {object|undefined} config
  * @returns {{
  *   maxTickets: number,
- *   maxTokenBudget: number,
  *   executionTimeoutMs: number,
  *   leaseTtlMs: number,
  *   planningContext: { maxBytes: number, summaryMode: string },
@@ -133,11 +116,7 @@ export function resolveLimits(config) {
   const lease =
     delivery.lease && typeof delivery.lease === 'object' ? delivery.lease : {};
   return {
-    // `maxTickets` is a framework constant (Story #4163) — never read from
-    // `planning.maxTickets`. The persist-time over-budget gate still reads
-    // this value via getLimits().maxTickets.
     maxTickets: LIMITS_DEFAULTS.maxTickets,
-    maxTokenBudget: delivery.maxTokenBudget ?? LIMITS_DEFAULTS.maxTokenBudget,
     executionTimeoutMs:
       execution.timeoutMs ?? LIMITS_DEFAULTS.executionTimeoutMs,
     leaseTtlMs: lease.ttlMs ?? LIMITS_DEFAULTS.leaseTtlMs,
@@ -173,26 +152,6 @@ export function getSignals(config) {
   return getLimits(config).signals;
 }
 
-/**
- * Resolve the configured `delivery.preflight.max*` ceilings as a plain
- * object holding **only** the keys the operator actually configured
- * (Story #3875 — plan-time/delivery-time reconciliation). Unconfigured
- * ceilings (`null` floors, meaning "no cap") are omitted entirely so the
- * decomposition context can thread a compact, non-null envelope to the
- * planner. An Epic on a zero-config project yields `{}` — never `null`.
- *
- * @param {object | null | undefined} config
- * @returns {Record<string, number>}
- */
-export function resolvePreflightCeilings(config) {
-  const resolved = getPreflight(config);
-  const ceilings = {};
-  for (const [key, value] of Object.entries(resolved)) {
-    if (value !== null) ceilings[key] = value;
-  }
-  return ceilings;
-}
-
 /**
  * Resolve the assignee-as-lease TTL in milliseconds (Story #3480). Standalone
  * accessor so the `ticket-lease` module can import it without dragging the

package/.agents/scripts/lib/config/paths.js

@@ -32,7 +32,6 @@ export const PATHS_DEFAULTS = Object.freeze({
  *   auditOutputDir: string,
  *   scriptsRoot: string,
  *   workflowsRoot: string,
- *   personasRoot: string,
  *   schemasRoot: string,
  *   skillsRoot: string,
  *   templatesRoot: string,
@@ -53,7 +52,6 @@ export function resolvePaths(userPaths) {
     auditOutputDir: `${tempRoot}/audits`,
     scriptsRoot: `${agentRoot}/scripts`,
     workflowsRoot: `${agentRoot}/workflows`,
-    personasRoot: `${agentRoot}/personas`,
     schemasRoot: `${agentRoot}/schemas`,
     skillsRoot: `${agentRoot}/skills`,
     templatesRoot: `${agentRoot}/templates`,

package/.agents/scripts/lib/config/quality.js

@@ -57,7 +57,7 @@ const DEFAULT_COVERAGE_FLOORS = Object.freeze({
   '*': Object.freeze({ lines: 90, branches: 85, functions: 90 }),
 });
 const DEFAULT_CRAP_FLOORS = Object.freeze({
-  '*': Object.freeze({ crap: 20 }),
+  '*': Object.freeze({ max: 30, p95: 20, methodsAbove20: 50 }),
 });
 /**
  * Story #2193 — maintainability rollups expose the `min` / `p50` / `p95`

package/.agents/scripts/lib/config/runners.js

@@ -1,10 +1,12 @@
 /**
  * Runner accessor (Epic #1720 Story #1739 — top-level reshape).
  *
- * Post-reshape, only `delivery.deliverRunner`, `delivery.epicAudit`, and
- * `delivery.codeReview` are configurable; everything else lives in
- * framework-internal constants exported alongside (`DEFAULT_STORY_MERGE_RETRY`,
- * `DEFAULT_DECOMPOSER`).
+ * Post-reshape, only `delivery.deliverRunner` and `delivery.codeReview` are
+ * configurable via this accessor; everything else lives in framework-internal
+ * constants exported alongside (`DEFAULT_STORY_MERGE_RETRY`,
+ * `DEFAULT_DECOMPOSER`). `delivery.epicAudit` was removed on v2 (Story-only
+ * delivery — no epic-audit runner; remediation policy lives on
+ * `delivery.codeReview`).
  */
 
 /** Hardcoded story-merge retry policy (was `orchestration.runners.storyMergeRetry`). */
@@ -23,14 +25,13 @@ export const DEFAULT_DECOMPOSER = Object.freeze({
  * `delivery.deliverRunner.*` in `.agentrc.json`.
  *
  * **Throughput tradeoff — `concurrencyCap`.**
- * The default of 3 is intentionally conservative: it keeps host-quota
- * consumption low for Epics with small waves and avoids saturating the
- * GitHub API with concurrent label writes. For wide-wave Epics where the
- * host has adequate parallel-agent quota, operators should raise
- * `delivery.deliverRunner.concurrencyCap` — wall-clock time falls
- * proportionally to the extra concurrency. The safe default is a tuning
- * knob, not a performance ceiling. See `helpers/deliver-epic.md` § Phase 2b and
- * `agentrc-reference.json` `delivery.deliverRunner.concurrencyCap` for details.
+ * The default of 3 is intentionally moderate: it keeps host-quota
+ * consumption predictable for multi-Story plan-runs and avoids saturating
+ * the GitHub API with concurrent label writes, while still allowing a
+ * small ready-set fan-out. Operators who want strictly sequential delivery
+ * should set `delivery.deliverRunner.concurrencyCap: 1`. Raising the cap
+ * reduces wall-clock time where dependencies allow. See `deliver.md` and
+ * `agentrc-reference.json` `delivery.deliverRunner.concurrencyCap`.
  *
  * **`verifyConcurrencyCap`** (Epic #3019 Tech Spec §1.4 / Story #3024) is a
  * separate knob that bounds the `verifyWaveResults` loop independently of
@@ -39,35 +40,14 @@ export const DEFAULT_DECOMPOSER = Object.freeze({
  */
 const DEFAULT_DELIVER_RUNNER = Object.freeze({
   concurrencyCap: 3,
-  progressReportIntervalSec: 120,
   verifyConcurrencyCap: 4,
 });
 
 /**
- * Default auto-fix loop ceilings for /deliver Phase 4 (epic-audit)
- * and Phase 5 (code-review). Operators override via
- * `delivery.epicAudit.*` and `delivery.codeReview.*` in `.agentrc.json`
- * (Story #2611, Epic #2586).
- *
- * `autoFixSeverity` is **tier-aware** (Story #4412, Epic #4405). The
- * Epic-close audit tier (`DEFAULT_EPIC_AUDIT`) defaults to `'high'` —
- * remediating only 🔴 Critical + 🟠 High findings on-branch while 🟡 Medium
- * and 🟢 Suggestion findings graduate to follow-up issues. This is the
- * three-tier model's slim outermost tier: 🟡 Medium code-quality concerns are
- * already routed into on-branch remediation shift-left (the write-time
- * checklist threading of Story #4410 and the Story-scope local-lens pass of
- * Story #4409), so the Epic-close tier stops paying to re-remediate them where
- * a fix is most expensive. The code-review tier (`DEFAULT_CODE_REVIEW`) keeps
- * the `'medium'` default introduced by Story #4399. Both are hard cutovers per
- * `rules/git-conventions.md` — no back-compat flag; an operator opts back into
- * the wider routing by setting `delivery.epicAudit.autoFixSeverity: 'medium'`.
+ * Default auto-fix loop ceilings for /deliver code-review. Operators
+ * override via `delivery.codeReview.*` in `.agentrc.json` (Story #2611,
+ * Epic #2586; `autoFixSeverity` default `'medium'` per Story #4399).
  */
-export const DEFAULT_EPIC_AUDIT = Object.freeze({
-  maxFixAttempts: 3,
-  maxFixScopeFiles: 5,
-  autoFixSeverity: 'high',
-});
-
 export const DEFAULT_CODE_REVIEW = Object.freeze({
   maxFixAttempts: 3,
   maxFixScopeFiles: 5,
@@ -79,8 +59,7 @@ export const DEFAULT_CODE_REVIEW = Object.freeze({
  *
  * @param {object | null | undefined} config
  * @returns {{
- *   deliverRunner: { concurrencyCap: number, progressReportIntervalSec: number, verifyConcurrencyCap: number },
- *   epicAudit: { maxFixAttempts: number, maxFixScopeFiles: number, autoFixSeverity: 'high'|'medium' },
+ *   deliverRunner: { concurrencyCap: number, verifyConcurrencyCap: number },
  *   codeReview: { maxFixAttempts: number, maxFixScopeFiles: number, autoFixSeverity: 'high'|'medium' },
  *   storyMergeRetry: { maxAttempts: number, backoffMs: readonly number[] },
  *   decomposer: { concurrencyCap: number },
@@ -88,28 +67,16 @@ export const DEFAULT_CODE_REVIEW = Object.freeze({
  */
 export function getRunners(config) {
   const deliverRunnerUser = config?.delivery?.deliverRunner ?? {};
-  const epicAuditUser = config?.delivery?.epicAudit ?? {};
   const codeReviewUser = config?.delivery?.codeReview ?? {};
   return {
     deliverRunner: {
       concurrencyCap:
         deliverRunnerUser.concurrencyCap ??
         DEFAULT_DELIVER_RUNNER.concurrencyCap,
-      progressReportIntervalSec:
-        deliverRunnerUser.progressReportIntervalSec ??
-        DEFAULT_DELIVER_RUNNER.progressReportIntervalSec,
       verifyConcurrencyCap:
         deliverRunnerUser.verifyConcurrencyCap ??
         DEFAULT_DELIVER_RUNNER.verifyConcurrencyCap,
     },
-    epicAudit: {
-      maxFixAttempts:
-        epicAuditUser.maxFixAttempts ?? DEFAULT_EPIC_AUDIT.maxFixAttempts,
-      maxFixScopeFiles:
-        epicAuditUser.maxFixScopeFiles ?? DEFAULT_EPIC_AUDIT.maxFixScopeFiles,
-      autoFixSeverity:
-        epicAuditUser.autoFixSeverity ?? DEFAULT_EPIC_AUDIT.autoFixSeverity,
-    },
     codeReview: {
       maxFixAttempts:
         codeReviewUser.maxFixAttempts ?? DEFAULT_CODE_REVIEW.maxFixAttempts,

package/.agents/scripts/lib/config/temp-paths.js

@@ -1,21 +1,21 @@
 /**
- * `temp/epic-<id>/` path-resolution helper (Epic #1030 Story #1039).
+ * `temp/run-<id>/` path-resolution helper (Epic #1030 Story #1039).
  *
  * Single source of truth for every artifact path that lives under
  * `project.paths.tempRoot`. Every script that previously hand-rolled
- * a flat `temp/<artifact>-epic-<id>.<ext>` path migrates to call one of
+ * a flat `temp/<artifact>-run-<id>.<ext>` path migrates to call one of
  * these helpers. The Tech Spec (#1032) names this module as the cutover
  * grep target — `temp/.*-epic-` should be empty across `.agents/scripts`
  * once the migration Stories land.
  *
  * Layout:
- *   temp/epic-<eid>/
+ *   temp/run-<eid>/
  *     ├─ techspec.md
  *     ├─ manifest.md          (dispatch manifest)
  *     ├─ retro.md             (mirror of GitHub retro at Epic close)
  *     ├─ perf-report.md       (analyzer output, Epic-level)
  *     ├─ lifecycle.ndjson     (lifecycle bus ledger)
- *     ├─ checkpoints/...      (epic-runner state store)
+ *     ├─ checkpoints/...      (pre-v2 epic-runner state store; retained layout)
  *     ├─ <name>               (epicArtifactPath escape hatch)
  *     └─ stories/
  *        └─ story-<sid>/
@@ -43,7 +43,7 @@
  * parent of `git rev-parse --git-common-dir`) rather than `process.cwd()`.
  * Without this, a story child that `cd`s into `.worktrees/story-<id>/` before
  * calling `story-phase.js` would append `story.heartbeat` records to
- * `<worktree>/temp/epic-N/lifecycle.ndjson`, while the `/deliver` host
+ * `<worktree>/temp/run-N/lifecycle.ndjson`, while the `/deliver` host
  * (running from the main checkout) reads the main-checkout copy — so the
  * idle-watchdog never sees heartbeats and the Epic-lease guard silently
  * reclaims live foreign claims (the audit-#3513 bug class). Anchoring the
@@ -206,18 +206,23 @@ const artifactName = (name) => {
 };
 
 /**
- * `temp/epic-<eid>/` — every Epic-scoped artifact lives under here.
+ * `temp/run-<eid>/` — every Epic-scoped artifact lives under here.
  *
  * @param {number} eid
  * @param {object} [config]
  * @returns {string}
  */
+export function runTempDir(rid, config) {
+  return path.join(anchorTempRoot(tempRootFrom(config)), `run-${epicId(rid)}`);
+}
+
+/** @deprecated Use {@link runTempDir}. */
 export function epicTempDir(eid, config) {
-  return path.join(anchorTempRoot(tempRootFrom(config)), `epic-${epicId(eid)}`);
+  return runTempDir(eid, config);
 }
 
 /**
- * `temp/epic-<eid>/stories/story-<sid>/` — every Story-scoped artifact
+ * `temp/run-<eid>/stories/story-<sid>/` — every Story-scoped artifact
  * lives under here.
  *
  * Story #2874: accepts `eid === null` for standalone Stories (no
@@ -246,7 +251,7 @@ export function storyTempDir(eid, sid, config) {
 }
 
 /**
- * `temp/epic-<eid>/stories/story-<sid>/signals.ndjson` — append-only
+ * `temp/run-<eid>/stories/story-<sid>/signals.ndjson` — append-only
  * signal stream consumed by the analyzer (Epic #1030 AC1).
  *
  * @param {number} eid
@@ -259,18 +264,18 @@ export function signalsFile(eid, sid, config) {
 }
 
 /**
- * `temp/epic-<eid>/stories/story-<sid>/lifecycle.ndjson` — the story-scope
+ * `temp/run-<eid>/stories/story-<sid>/lifecycle.ndjson` — the story-scope
  * ledger destination for lifecycle events emitted directly by a Story
  * (rather than routed through the Epic-scoped bus ledger). Story #4426
  * (Epic #4425) introduces the first consumer: a standalone
  * `single-story-close` run (no parent Epic) emitting `merge.unlanded`
- * needs an on-disk home even though there is no `epic-<id>/` directory to
+ * needs an on-disk home even though there is no `run-<id>/` directory to
  * anchor the event to.
  *
  * Mirrors `epicLedgerPath` exactly, one level down: `eid === null` routes
  * through `storyTempDir`'s standalone branch to
  * `<tempRoot>/standalone/stories/story-<sid>/lifecycle.ndjson`; a real
- * `eid` routes to `<tempRoot>/epic-<eid>/stories/story-<sid>/lifecycle.ndjson`,
+ * `eid` routes to `<tempRoot>/run-<eid>/stories/story-<sid>/lifecycle.ndjson`,
  * so an Epic-attached Story's story-scope ledger sits alongside its
  * `signals.ndjson` sibling.
  *
@@ -324,7 +329,7 @@ export const epicPerfReportPath = (eid, config) =>
   epicArtifactPath(eid, 'perf-report.md', config);
 
 /**
- * `temp/epic-<eid>/epic-perf-report.json` — canonical JSON snapshot of
+ * `temp/run-<eid>/epic-perf-report.json` — canonical JSON snapshot of
  * the `epic-perf-report` payload persisted at /deliver close
  * (Epic #3019 / Story #3029 / Task #3040). When present alongside the
  * `epic-perf-report` structured comment, the report is discoverable
@@ -340,7 +345,7 @@ export const epicPerfReportJsonPath = (eid, config) =>
   epicArtifactPath(eid, 'epic-perf-report.json', config);
 
 /**
- * `temp/epic-<eid>/lifecycle.ndjson` — append-only lifecycle bus ledger
+ * `temp/run-<eid>/lifecycle.ndjson` — append-only lifecycle bus ledger
  * (Story #2510). The LedgerWriter persists every emitted/completed/failed
  * record here; the TraceLogger renders the companion markdown from it.
  *