prizmkit 1.1.91 → 1.1.93

package/bundled/dev-pipeline-windows/lib/pipeline.ps1

@@ -34,8 +34,17 @@ function Invoke-PrizmPipeline {
     $envMaxRetryArgs = @('--max-retries', [string]$parsedEnvMaxRetries)
   }
 
+  $envMaxInfraRetryArgs = @()
+  if ($env:MAX_INFRA_RETRIES) {
+    $parsedEnvMaxInfraRetries = 0
+    if (-not [int]::TryParse($env:MAX_INFRA_RETRIES, [ref]$parsedEnvMaxInfraRetries) -or $parsedEnvMaxInfraRetries -lt 1) {
+      throw "MAX_INFRA_RETRIES must be a positive integer: $($env:MAX_INFRA_RETRIES)"
+    }
+    $envMaxInfraRetryArgs = @('--max-infra-retries', [string]$parsedEnvMaxInfraRetries)
+  }
+
   if ($command -in @('help','--help','-h')) {
-    Write-Host "Usage: .\run-$Kind.ps1 run [item-id] [list-path] [--dry-run] [--mode lite|standard|full] [--critic] [--max-retries N] [--timeout seconds]"
+    Write-Host "Usage: .\run-$Kind.ps1 run [item-id] [list-path] [--dry-run] [--mode lite|standard|full] [--critic] [--max-retries N] [--max-infra-retries N]"
     Write-Host "       .\run-$Kind.ps1 status [list-path]"
     Write-Host "       .\run-$Kind.ps1 reset"
     Write-Host ""
@@ -55,7 +64,7 @@ function Invoke-PrizmPipeline {
 
   if ($command -eq 'status') {
     $listPath = if ($remaining.Count -gt 0) { $remaining[0] } else { $defaultList }
-    Invoke-PrizmPythonText $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'status') + $envMaxRetryArgs)
+    Invoke-PrizmPythonText $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'status') + $envMaxRetryArgs + $envMaxInfraRetryArgs)
     $global:PRIZM_EXIT_CODE = $LASTEXITCODE
     return
   }
@@ -78,15 +87,9 @@ function Invoke-PrizmPipeline {
   }
   $maxRetries = $null
   if ($envMaxRetryArgs.Count -gt 0) { $maxRetries = [int]$envMaxRetryArgs[1] }
+  $maxInfraRetries = $null
+  if ($envMaxInfraRetryArgs.Count -gt 0) { $maxInfraRetries = [int]$envMaxInfraRetryArgs[1] }
   $verboseEnabled = $env:VERBOSE -in @('1','true','yes','on')
-  $timeoutSeconds = 0
-  if ($env:SESSION_TIMEOUT) {
-    $parsedEnvTimeout = 0
-    if (-not [int]::TryParse($env:SESSION_TIMEOUT, [ref]$parsedEnvTimeout) -or $parsedEnvTimeout -lt 0) {
-      throw "SESSION_TIMEOUT must be a non-negative integer: $($env:SESSION_TIMEOUT)"
-    }
-    $timeoutSeconds = $parsedEnvTimeout
-  }
   $heartbeatInterval = 30
   if ($env:HEARTBEAT_INTERVAL) {
     $parsedHeartbeatInterval = 0
@@ -115,26 +118,6 @@ function Invoke-PrizmPipeline {
   $enableDeploy = $env:ENABLE_DEPLOY -in @('1','true','yes','on')
   $stopOnFailure = $env:STOP_ON_FAILURE -in @('1','true','yes','on')
   $devBranchOverride = if ($env:DEV_BRANCH) { $env:DEV_BRANCH.Trim() } else { '' }
-  $logCleanupEnabled = $true
-  if ($env:LOG_CLEANUP_ENABLED) {
-    $logCleanupEnabled = $env:LOG_CLEANUP_ENABLED -in @('1','true','yes','on')
-  }
-  $logRetentionDays = 14
-  if ($env:LOG_RETENTION_DAYS) {
-    $parsedLogRetentionDays = 0
-    if (-not [int]::TryParse($env:LOG_RETENTION_DAYS, [ref]$parsedLogRetentionDays) -or $parsedLogRetentionDays -lt 0) {
-      throw "LOG_RETENTION_DAYS must be a non-negative integer: $($env:LOG_RETENTION_DAYS)"
-    }
-    $logRetentionDays = $parsedLogRetentionDays
-  }
-  $logMaxTotalMb = 1024
-  if ($env:LOG_MAX_TOTAL_MB) {
-    $parsedLogMaxTotalMb = 0
-    if (-not [int]::TryParse($env:LOG_MAX_TOTAL_MB, [ref]$parsedLogMaxTotalMb) -or $parsedLogMaxTotalMb -lt 0) {
-      throw "LOG_MAX_TOTAL_MB must be a non-negative integer: $($env:LOG_MAX_TOTAL_MB)"
-    }
-    $logMaxTotalMb = $parsedLogMaxTotalMb
-  }
   $featuresFilter = $null
 
   for ($i = 0; $i -lt $remaining.Count; $i++) {
@@ -153,14 +136,13 @@ function Invoke-PrizmPipeline {
         $maxRetries = $parsedMaxRetries
         continue
       }
-      '^--timeout$' {
+      '^--max-infra-retries$' {
         $i++
-        if ($i -ge $remaining.Count) { throw '--timeout requires a seconds value.' }
-        $parsedTimeout = 0
-        if (-not [int]::TryParse($remaining[$i], [ref]$parsedTimeout) -or $parsedTimeout -lt 0) {
-          throw "--timeout must be a non-negative integer: $($remaining[$i])"
+        $parsedMaxInfraRetries = 0
+        if (-not [int]::TryParse($remaining[$i], [ref]$parsedMaxInfraRetries) -or $parsedMaxInfraRetries -lt 1) {
+          throw "--max-infra-retries must be a positive integer: $($remaining[$i])"
         }
-        $timeoutSeconds = $parsedTimeout
+        $maxInfraRetries = $parsedMaxInfraRetries
         continue
       }
       '^--features$' { $i++; $featuresFilter = $remaining[$i]; continue }
@@ -177,12 +159,15 @@ function Invoke-PrizmPipeline {
   }
   $maxRetryArgs = @()
   if ($maxRetries -ne $null) { $maxRetryArgs = @('--max-retries', [string]$maxRetries) }
+  $maxInfraRetryArgs = @()
+  if ($maxInfraRetries -ne $null) { $maxInfraRetryArgs = @('--max-infra-retries', [string]$maxInfraRetries) }
   if ($verboseEnabled) {
     $modeLabel = if ($mode) { $mode } else { 'auto' }
     $criticLabel = if ($critic) { $critic } else { 'plan-default' }
     $retryLabel = if ($maxRetries -ne $null) { [string]$maxRetries } else { 'default' }
+    $infraRetryLabel = if ($maxInfraRetries -ne $null) { [string]$maxInfraRetries } else { 'default' }
     Write-PrizmInfo "Verbose mode enabled."
-    Write-PrizmInfo "Effective options: mode=$modeLabel critic=$criticLabel maxRetries=$retryLabel timeoutSeconds=$timeoutSeconds staleKillThreshold=$staleKillThreshold dryRun=$dryRun"
+    Write-PrizmInfo "Effective options: mode=$modeLabel critic=$criticLabel maxRetries=$retryLabel maxInfraRetries=$infraRetryLabel staleKillThreshold=$staleKillThreshold dryRun=$dryRun"
   }
 
   # Validate PRIZMKIT_EFFORT early (fail-fast before any sessions are spawned)
@@ -241,17 +226,27 @@ function Invoke-PrizmPipeline {
 
   function Get-PrizmGitDirtyPaths {
     param([string]$ProjectRoot)
-    $lines = & git -C $ProjectRoot status --porcelain 2>$null
+    $hiddenToolWorktreeExcludes = Get-PrizmHiddenToolWorktreeExcludes
+    $lines = & git -C $ProjectRoot status --porcelain -- . @hiddenToolWorktreeExcludes 2>$null
     $paths = @()
     foreach ($line in $lines) {
       if ([string]::IsNullOrWhiteSpace($line) -or $line.Length -lt 4) { continue }
       $path = $line.Substring(3).Trim()
       if ($path -match ' -> ') { $path = ($path -split ' -> ')[-1].Trim() }
-      $paths += (($path -replace '\\', '/').Trim('"').TrimStart([char[]]@('.', '/')))
+      $paths += (($path -replace '\\', '/').Trim('"').TrimStart([char[]]@('/')))
     }
     return @($paths)
   }
 
+  function Test-PrizmPipelineIgnoredPath {
+    param([string]$Path)
+    $normalizedPath = (($Path -replace '\\', '/').Trim('"').TrimStart([char[]]@('/')))
+    $segments = @($normalizedPath -split '/' | Where-Object { -not [string]::IsNullOrWhiteSpace($_) })
+    if ($segments.Count -lt 2) { return $false }
+    if (-not $segments[0].StartsWith('.')) { return $false }
+    return $segments[1] -in @('worktree', 'worktrees')
+  }
+
   function Test-PrizmPipelineBookkeepingPath {
     param(
       [string]$ProjectRoot,
@@ -270,6 +265,7 @@ function Invoke-PrizmPipeline {
   function Test-PrizmGitWorkDirty {
     param([string]$ProjectRoot, [string]$StateDir, [string]$ListPath)
     foreach ($path in (Get-PrizmGitDirtyPaths $ProjectRoot)) {
+      if (Test-PrizmPipelineIgnoredPath $path) { continue }
       if (-not (Test-PrizmPipelineBookkeepingPath $ProjectRoot $path $StateDir $ListPath)) {
         return $true
       }
@@ -279,7 +275,8 @@ function Invoke-PrizmPipeline {
 
   function Test-PrizmGitDirty {
     param([string]$ProjectRoot)
-    $dirty = & git -C $ProjectRoot status --porcelain 2>$null | Select-Object -First 1
+    $hiddenToolWorktreeExcludes = Get-PrizmHiddenToolWorktreeExcludes
+    $dirty = & git -C $ProjectRoot status --porcelain -- . @hiddenToolWorktreeExcludes 2>$null | Select-Object -First 1
     return -not [string]::IsNullOrWhiteSpace([string]$dirty)
   }
 
@@ -294,12 +291,12 @@ function Invoke-PrizmPipeline {
   }
 
   function Write-PrizmStaleKillMarker {
-    param([string]$MarkerPath, [int]$StaleSeconds, [int]$Threshold)
+    param([string]$MarkerPath, [int]$StaleSeconds, [int]$Threshold, [string]$Reason = 'stale_session')
     $markerDir = Split-Path $MarkerPath -Parent
     if ($markerDir) { New-Item -ItemType Directory -Force -Path $markerDir | Out-Null }
     [ordered]@{
       killed_at = (Get-Date).ToUniversalTime().ToString('yyyy-MM-ddTHH:mm:ssZ')
-      reason = 'stale_session'
+      reason = $Reason
       stale_seconds = $StaleSeconds
       threshold = $Threshold
     } | ConvertTo-Json -Compress | Set-Content -Path $MarkerPath -Encoding UTF8
@@ -307,14 +304,16 @@ function Invoke-PrizmPipeline {
 
   function Invoke-PrizmGitAutoCommit {
     param([string]$ProjectRoot, [string]$Message)
-    & git -C $ProjectRoot add -A *> $null
+    $hiddenToolWorktreeExcludes = Get-PrizmHiddenToolWorktreeExcludes
+    & git -C $ProjectRoot add -A -- . @hiddenToolWorktreeExcludes *> $null
     & git -C $ProjectRoot commit --no-verify -m $Message *> $null
     return $LASTEXITCODE -eq 0
   }
 
   function Invoke-PrizmGitIncludeRemainingArtifacts {
     param([string]$ProjectRoot, [string]$ItemId)
-    & git -C $ProjectRoot add -A *> $null
+    $hiddenToolWorktreeExcludes = Get-PrizmHiddenToolWorktreeExcludes
+    & git -C $ProjectRoot add -A -- . @hiddenToolWorktreeExcludes *> $null
     & git -C $ProjectRoot commit --no-verify --amend --no-edit *> $null
     if ($LASTEXITCODE -eq 0) { return }
     & git -C $ProjectRoot commit --no-verify -m "chore($ItemId): include remaining session artifacts" *> $null
@@ -534,26 +533,6 @@ function Invoke-PrizmPipeline {
     }
   }
 
-  function Invoke-PrizmLogCleanup {
-    if (-not $logCleanupEnabled) { return }
-    if (-not (Test-Path $stateDir)) { return }
-
-    try {
-      $cleanup = Invoke-PrizmPythonJson $python @(
-        (Join-Path $paths.ScriptsDir 'cleanup-logs.py'),
-        '--state-dir', $stateDir,
-        '--retention-days', [string]$logRetentionDays,
-        '--max-total-mb', [string]$logMaxTotalMb
-      )
-      if ($cleanup -and $cleanup.deleted_files -gt 0) {
-        $reclaimedKb = [int]([int64]$cleanup.reclaimed_bytes / 1024)
-        Write-PrizmInfo "Log cleanup: deleted $($cleanup.deleted_files) files, reclaimed ${reclaimedKb}KB"
-      }
-    } catch {
-      Write-PrizmWarn "Log cleanup failed (continuing)"
-    }
-  }
-
   function Get-PrizmDeployIncompleteItems {
     param([string]$Kind, [string]$ListPath)
 
@@ -657,7 +636,12 @@ function Invoke-PrizmPipeline {
     $devBranchName = ''
     $hadDirtyBaseline = if ($isGitRepository) { Test-PrizmGitWorkDirty $paths.ProjectRoot $stateDir $listPath } else { $false }
     if ($hadDirtyBaseline) {
-      Write-PrizmWarn "Dirty working tree detected before pipeline bookkeeping; session success requires a new commit."
+      if ($dryRun) {
+        Write-PrizmWarn "Dirty working tree detected before $CurrentItemId; would auto-commit snapshot in real run."
+      } else {
+        Write-PrizmInfo "Dirty working tree detected before $CurrentItemId; auto-committing snapshot."
+        Invoke-PrizmGitAutoCommit $paths.ProjectRoot "chore: workspace snapshot ready for run $CurrentItemId" | Out-Null
+      }
     }
 
     if ($dryRun) {
@@ -672,7 +656,7 @@ function Invoke-PrizmPipeline {
         }
       }
     } else {
-      $start = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'start', $idOption, $CurrentItemId, '--session-id', $sessionId) + $maxRetryArgs)
+      $start = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'start', $idOption, $CurrentItemId, '--session-id', $sessionId) + $maxRetryArgs + $maxInfraRetryArgs)
       if ($start.retry_count -ne $null) { $retryCount = [string]$start.retry_count }
       if ($start.resume_from_phase -ne $null) { $resumePhase = [string]$start.resume_from_phase }
 
@@ -683,7 +667,10 @@ function Invoke-PrizmPipeline {
           $devBranchName = $candidateBranch
           Write-PrizmInfo "Dev branch: $devBranchName"
         } else {
-          Write-PrizmWarn "Failed to create dev branch; running on current branch: $originalBranch"
+          Write-PrizmError "Failed to create dev branch: $candidateBranch from $originalBranch - aborting to avoid running on $originalBranch"
+          $script:PRIZM_ITEM_LIST_STATUS = ''
+          $script:PRIZM_ITEM_EXIT_CODE = 1
+          return
         }
       }
     }
@@ -739,20 +726,18 @@ function Invoke-PrizmPipeline {
 
     $elapsedSeconds = 0
     $staleSeconds = 0
+    $staleReason = 'stale_session'
     $previousLogSize = 0
     $previousProgressSignature = ''
     $previousChildActivitySignature = ''
     $previousErrorLoopSignature = ''
-    $wasTimedOut = $false
     $staleKillMarker = Join-Path $logsDir 'stale-kill.json'
     $wasStaleKilled = $false
     while ($true) {
-      $remainingTimeout = if ($timeoutSeconds -gt 0) { $timeoutSeconds - $elapsedSeconds } else { $heartbeatInterval }
-      $waitSeconds = if ($timeoutSeconds -gt 0) { [Math]::Min($heartbeatInterval, [Math]::Max(1, $remainingTimeout)) } else { $heartbeatInterval }
-      $completed = Wait-Job $job -Timeout $waitSeconds
+      $completed = Wait-Job $job -Timeout $heartbeatInterval
       if ($completed) { break }
 
-      $elapsedSeconds += $waitSeconds
+      $elapsedSeconds += $heartbeatInterval
       $currentLogSize = 0
       if (Test-Path $sessionLog) {
         $currentLogSize = [int64](Get-Item $sessionLog).Length
@@ -799,17 +784,14 @@ function Invoke-PrizmPipeline {
       $previousErrorLoopSignature = $errorLoopSignature
 
       if ($errorLoopDetected) {
+        $staleReason = 'error_loop'
         $staleSeconds = $effectiveStaleKillThreshold
       } elseif ($growth -gt 0 -or $childAdvanced -or $progressAdvanced) {
+        $staleReason = 'stale_session'
         $staleSeconds = 0
       } else {
-        $staleSeconds += $waitSeconds
-      }
-
-      if ($timeoutSeconds -gt 0 -and $elapsedSeconds -ge $timeoutSeconds) {
-        $wasTimedOut = $true
-        Stop-PrizmSessionProcess $pidPath
-        break
+        $staleReason = 'stale_session'
+        $staleSeconds += $heartbeatInterval
       }
 
       $fatalErrorCode = Get-PrizmProgressFatalErrorCode -ProgressFile $progressJson
@@ -825,8 +807,12 @@ function Invoke-PrizmPipeline {
       }
       if ($effectiveStaleKillThreshold -gt 0 -and $staleSeconds -ge $effectiveStaleKillThreshold) {
         $wasStaleKilled = $true
-        Write-PrizmWarn "Session stale-killed (no progress for ${effectiveStaleKillThreshold}s)"
-        Write-PrizmStaleKillMarker $staleKillMarker $staleSeconds $effectiveStaleKillThreshold
+        if ($staleReason -eq 'error_loop') {
+          Write-PrizmWarn "Session stale-killed due to repeated read-offset/wasted-call error loop"
+        } else {
+          Write-PrizmWarn "Session stale-killed (no progress for ${effectiveStaleKillThreshold}s)"
+        }
+        Write-PrizmStaleKillMarker $staleKillMarker $staleSeconds $effectiveStaleKillThreshold $staleReason
         Stop-PrizmSessionProcess $pidPath
         if ($staleKillGraceSeconds -gt 0) { Start-Sleep -Seconds $staleKillGraceSeconds }
         break
@@ -834,11 +820,7 @@ function Invoke-PrizmPipeline {
     }
 
     $exitCode = 0
-    if ($wasTimedOut) {
-      Stop-Job $job
-      Remove-Job $job
-      $exitCode = 124
-    } elseif ($wasStaleKilled) {
+    if ($wasStaleKilled) {
       Stop-Job $job
       Remove-Job $job
       $exitCode = 143
@@ -853,6 +835,15 @@ function Invoke-PrizmPipeline {
     }
     Stop-PrizmProgressParser $parserProcess
 
+    $staleKillReason = ''
+    if (Test-Path $staleKillMarker) {
+      try {
+        $staleKillData = Get-Content $staleKillMarker -Raw | ConvertFrom-Json
+        if ($staleKillData.PSObject.Properties['reason']) { $staleKillReason = [string]$staleKillData.reason }
+      } catch {
+        $staleKillReason = ''
+      }
+    }
     $wasInfraError = ($exitCode -ne 0 -and (Test-PrizmInfraError -SessionLog $sessionLog -ProgressJson $progressJson))
     $wasAiRuntimeError = Test-PrizmAiRuntimeError -SessionLog $sessionLog -ProgressJson $progressJson
     $semanticCompletion = if ($Kind -eq 'feature' -and $isGitRepository) {
@@ -862,7 +853,7 @@ function Invoke-PrizmPipeline {
     $status = 'crashed'
     if ($semanticCompletion) {
       $status = 'success'
-      if ($exitCode -ne 0 -or $wasStaleKilled -or $wasTimedOut -or $wasAiRuntimeError) {
+      if ($exitCode -ne 0 -or $wasStaleKilled -or $wasAiRuntimeError) {
         Write-PrizmWarn "Session ended with a failure signal after semantic completion; treating as finalized success"
         Write-PrizmWarn "Semantic completion commit: $($semanticCompletion.CommitSha)"
       }
@@ -870,24 +861,23 @@ function Invoke-PrizmPipeline {
       $status = 'infra_error'
       Write-PrizmWarn "AI session failed due to structured AI runtime/context error"
       Write-PrizmWarn "AI runtime errors are retried without consuming code retry budget"
-    } elseif ($wasTimedOut) {
-      $status = 'timed_out'
-      Write-PrizmWarn "AI session timed out after $timeoutSeconds seconds"
     } elseif ($wasInfraError) {
       $status = 'infra_error'
       Write-PrizmWarn "AI session failed due to AI CLI/provider infrastructure error"
       Write-PrizmWarn "Infrastructure errors are retried without consuming code retry budget"
     } elseif ($wasStaleKilled -or (Test-Path $staleKillMarker)) {
-      Write-PrizmWarn "Session was stale-killed by heartbeat monitor (no progress for too long)"
-      Write-PrizmWarn "Stale-killed sessions are treated as failed; dev branch is preserved for inspection"
+      if ($staleKillReason -eq 'error_loop') {
+        Write-PrizmWarn "Session was killed by heartbeat monitor due to repeated read-offset/wasted-call errors"
+      } else {
+        Write-PrizmWarn "Session was stale-killed by heartbeat monitor (no progress for too long)"
+      }
+      Write-PrizmWarn "Heartbeat-killed sessions are treated as failed; dev branch is preserved for inspection"
     } elseif ($exitCode -ne 0) {
       Write-PrizmWarn "AI session exited with code $exitCode"
     } elseif (-not $isGitRepository) {
       Write-PrizmWarn "AI session exited cleanly, but project is not a git repository; cannot verify work was committed."
     } elseif (Test-PrizmGitCommitsSince $paths.ProjectRoot $baseCommit) {
       $status = 'success'
-    } elseif ($hadDirtyBaseline) {
-      Write-PrizmWarn "AI session exited cleanly but produced no new commits; pre-existing dirty tree will not be auto-committed."
     } elseif (Test-PrizmGitWorkDirty $paths.ProjectRoot $stateDir $listPath) {
       Write-PrizmWarn "AI session exited cleanly but produced no commits; auto-committing dirty work tree."
       if (Invoke-PrizmGitAutoCommit $paths.ProjectRoot "chore($CurrentItemId): auto-commit session work") {
@@ -903,17 +893,12 @@ function Invoke-PrizmPipeline {
     $itemListStatus = ''
     if ($status -eq 'success') {
       if (Test-PrizmGitDirty $paths.ProjectRoot) {
-        if ($hadDirtyBaseline) {
-          Write-PrizmInfo "Auto-committing pipeline bookkeeping artifacts only."
-          Invoke-PrizmGitIncludeBookkeepingArtifacts $paths.ProjectRoot $stateDir $listPath
-        } else {
-          Write-PrizmInfo "Auto-committing remaining session artifacts."
-          Invoke-PrizmGitIncludeRemainingArtifacts $paths.ProjectRoot $CurrentItemId
-        }
+        Write-PrizmInfo "Auto-committing remaining session artifacts."
+        Invoke-PrizmGitIncludeRemainingArtifacts $paths.ProjectRoot $CurrentItemId
       }
 
       if ($status -eq 'success') {
-        $updateResult = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'update', $idOption, $CurrentItemId, '--session-id', $sessionId, '--session-status', $status) + $maxRetryArgs)
+        $updateResult = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'update', $idOption, $CurrentItemId, '--session-id', $sessionId, '--session-status', $status) + $maxRetryArgs + $maxInfraRetryArgs)
         if ($updateResult -and $updateResult.PSObject.Properties['new_status']) {
           $itemListStatus = [string]$updateResult.new_status
         }
@@ -950,7 +935,7 @@ function Invoke-PrizmPipeline {
           Write-PrizmRuntimeFailureLog $failureLog $CurrentItemId $sessionId $status $exitCode $staleKillMarker $progressJson $checkpointPath $paths.ProjectRoot $baseCommit
         }
       }
-      $updateResult = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'update', $idOption, $CurrentItemId, '--session-id', $sessionId, '--session-status', $status) + $maxRetryArgs)
+      $updateResult = Invoke-PrizmPythonJson $python (@((Join-Path $paths.ScriptsDir $updateScript), $listOption, $listPath, '--state-dir', $stateDir, '--action', 'update', $idOption, $CurrentItemId, '--session-id', $sessionId, '--session-status', $status) + $maxRetryArgs + $maxInfraRetryArgs)
       if ($updateResult -and $updateResult.PSObject.Properties['new_status']) {
         $itemListStatus = [string]$updateResult.new_status
       }
@@ -969,10 +954,6 @@ function Invoke-PrizmPipeline {
     return
   }
 
-  if (-not $dryRun) {
-    Invoke-PrizmLogCleanup
-  }
-
   if ($itemId) {
     Invoke-PrizmPipelineItem $itemId
     $global:PRIZM_EXIT_CODE = $script:PRIZM_ITEM_EXIT_CODE
@@ -1030,7 +1011,7 @@ function Invoke-PrizmPipeline {
       $global:PRIZM_EXIT_CODE = $lastExitCode
       return
     } elseif ($lastExitCode -ne 0 -and $stopOnFailure) {
-      Write-PrizmInfo "STOP_ON_FAILURE: $nextItemId is $($script:PRIZM_ITEM_LIST_STATUS); retry budget not exhausted, continuing."
+      Write-PrizmInfo "STOP_ON_FAILURE: $nextItemId is $($script:PRIZM_ITEM_LIST_STATUS); code/infra retry budget not exhausted, continuing."
     }
   }
 }

package/bundled/dev-pipeline-windows/run-recovery.ps1

@@ -62,7 +62,6 @@ function Get-PrizmRecoveryIntEnv {
   return $parsed
 }
 
-$timeoutSeconds = Get-PrizmRecoveryIntEnv 'SESSION_TIMEOUT' 0 0
 $heartbeatInterval = Get-PrizmRecoveryIntEnv 'HEARTBEAT_INTERVAL' 30 1
 $staleKillThreshold = Get-PrizmRecoveryIntEnv 'STALE_KILL_THRESHOLD' 900 0
 $staleKillGraceSeconds = Get-PrizmRecoveryIntEnv 'STALE_KILL_GRACE_SECONDS' 10 0
@@ -123,15 +122,12 @@ $staleSeconds = 0
 $previousLogSize = 0
 $previousProgressSignature = ''
 $previousChildActivitySignature = ''
-$wasTimedOut = $false
 $wasStaleKilled = $false
 while ($true) {
-  $remainingTimeout = if ($timeoutSeconds -gt 0) { $timeoutSeconds - $elapsedSeconds } else { $heartbeatInterval }
-  $waitSeconds = if ($timeoutSeconds -gt 0) { [Math]::Min($heartbeatInterval, [Math]::Max(1, $remainingTimeout)) } else { $heartbeatInterval }
-  $completed = Wait-Job $job -Timeout $waitSeconds
+  $completed = Wait-Job $job -Timeout $heartbeatInterval
   if ($completed) { break }
 
-  $elapsedSeconds += $waitSeconds
+  $elapsedSeconds += $heartbeatInterval
   $currentLogSize = 0
   if (Test-Path $logPath) { $currentLogSize = [int64](Get-Item $logPath).Length }
   $growth = $currentLogSize - $previousLogSize
@@ -145,13 +141,7 @@ while ($true) {
   $childAdvanced = ($childSignature -and $childSignature -ne $previousChildActivitySignature)
   $previousChildActivitySignature = $childSignature
 
-  if ($growth -gt 0 -or $childAdvanced -or $progressAdvanced) { $staleSeconds = 0 } else { $staleSeconds += $waitSeconds }
-
-  if ($timeoutSeconds -gt 0 -and $elapsedSeconds -ge $timeoutSeconds) {
-    $wasTimedOut = $true
-    Stop-PrizmSessionProcess $pidPath
-    break
-  }
+  if ($growth -gt 0 -or $childAdvanced -or $progressAdvanced) { $staleSeconds = 0 } else { $staleSeconds += $heartbeatInterval }
 
   if ($staleKillThreshold -gt 0 -and $staleSeconds -ge $staleKillThreshold) {
     $wasStaleKilled = $true
@@ -164,11 +154,7 @@ while ($true) {
 }
 
 $exitCode = 0
-if ($wasTimedOut) {
-  Stop-Job $job
-  Remove-Job $job
-  $exitCode = 124
-} elseif ($wasStaleKilled) {
+if ($wasStaleKilled) {
   Stop-Job $job
   Remove-Job $job
   $exitCode = 143
@@ -188,7 +174,6 @@ if (Test-Path $logPath) {
   $sizeKb = [int](([int64](Get-Item $logPath).Length) / 1024)
   Write-PrizmInfo "Session log: $lineCount lines, ${sizeKb}KB"
 }
-if ($wasTimedOut) { Write-PrizmWarn "Recovery session timed out after $timeoutSeconds seconds." }
 if ($wasStaleKilled -or (Test-Path $staleKillMarker)) { Write-PrizmWarn "Recovery session was stale-killed." }
 if ($exitCode -eq 0) { Write-PrizmSuccess "Recovery session completed." } else { Write-PrizmError "Recovery session failed. Log: $logPath" }
 exit $exitCode

package/bundled/dev-pipeline-windows/scripts/update-bug-status.py

@@ -16,7 +16,7 @@ Usage:
         --bug-list <path> --state-dir <path> \
         --action <get_next|start|update|status|pause|reset|clean|unskip> \
         [--bug-id <id>] [--session-status <status>] \
-        [--session-id <id>] [--max-retries <n>]
+        [--session-id <id>] [--max-retries <n>] [--max-infra-retries <n>]
 """
 
 import argparse
@@ -75,7 +75,8 @@ def parse_args():
         help="Session outcome status (required for 'update' action)",
     )
     parser.add_argument("--session-id", default=None, help="Session ID (optional, for 'update' action)")
-    parser.add_argument("--max-retries", type=int, default=3, help="Maximum retry count (default: 3)")
+    parser.add_argument("--max-retries", type=int, default=3, help="Maximum code retry count (default: 3)")
+    parser.add_argument("--max-infra-retries", type=int, default=3, help="Maximum infrastructure retry count (default: 3)")
     parser.add_argument("--project-root", default=None, help="Project root directory. Required for 'clean' action.")
     return parser.parse_args()
 
@@ -98,6 +99,9 @@ def load_bug_status(state_dir, bug_id):
             "bug_id": bug_id,
             "retry_count": 0,
             "max_retries": 3,
+            "max_infra_retries": 3,
+            "infra_error_count": 0,
+            "last_infra_error_session_id": None,
             "sessions": [],
             "last_session_id": None,
             "resume_from_phase": None,
@@ -111,6 +115,9 @@ def load_bug_status(state_dir, bug_id):
             "bug_id": bug_id,
             "retry_count": 0,
             "max_retries": 3,
+            "max_infra_retries": 3,
+            "infra_error_count": 0,
+            "last_infra_error_session_id": None,
             "sessions": [],
             "last_session_id": None,
             "resume_from_phase": None,
@@ -234,6 +241,7 @@ def action_get_next(bug_list_data, state_dir):
         "title": chosen.get("title", ""),
         "severity": chosen.get("severity", "medium"),
         "retry_count": chosen_status_data.get("retry_count", 0),
+        "infra_error_count": chosen_status_data.get("infra_error_count", 0),
         "resume_from_phase": chosen_status_data.get("resume_from_phase", None),
     }
     print(json.dumps(result, indent=2, ensure_ascii=False))
@@ -248,6 +256,7 @@ def action_update(args, bug_list_path, state_dir):
     session_status = args.session_status
     session_id = args.session_id
     max_retries = args.max_retries
+    max_infra_retries = args.max_infra_retries
 
     if not bug_id:
         error_out("--bug-id is required for 'update' action")
@@ -262,6 +271,8 @@ def action_update(args, bug_list_path, state_dir):
     new_status = get_bug_status_from_list(bug_list_path, bug_id)
 
     if session_status == "success":
+        bs["infra_error_count"] = 0
+        bs["last_infra_error_session_id"] = None
         new_status = "completed"
         bs["resume_from_phase"] = None
         err = update_bug_in_list(bug_list_path, bug_id, "completed")
@@ -286,11 +297,25 @@ def action_update(args, bug_list_path, state_dir):
             error_out("Failed to update .prizmkit/plans/bug-fix-list.json: {}".format(err))
             return
     elif session_status == "infra_error":
-        new_status = "pending"
-        bs["infra_error_count"] = bs.get("infra_error_count", 0) + 1
+        # AI CLI/provider outage, auth failure, gateway error, etc.
+        # Infra failures do not consume the code retry budget, but they still
+        # need their own bounded budget so a flaky provider cannot loop forever.
+        infra_error_count = bs.get("infra_error_count", 0) + 1
+        bs["infra_error_count"] = infra_error_count
         bs["last_infra_error_session_id"] = session_id
+        bs["max_infra_retries"] = max_infra_retries
+        bs["degraded_reason"] = "infra_error"
+        if session_id:
+            bs["last_session_id"] = session_id
         bs["resume_from_phase"] = None
 
+        if infra_error_count >= max_infra_retries:
+            new_status = "failed"
+            if session_id:
+                bs["last_failed_session_id"] = session_id
+        else:
+            new_status = "pending"
+
         err = update_bug_in_list(bug_list_path, bug_id, new_status)
         if err:
             error_out("Failed to update .prizmkit/plans/bug-fix-list.json: {}".format(err))
@@ -338,6 +363,8 @@ def action_update(args, bug_list_path, state_dir):
         "session_status": session_status,
         "new_status": new_status,
         "retry_count": bs["retry_count"],
+        "infra_error_count": bs.get("infra_error_count", 0),
+        "max_infra_retries": max_infra_retries,
         "resume_from_phase": bs.get("resume_from_phase"),
         "updated_at": bs["updated_at"],
     }
@@ -577,6 +604,8 @@ def action_reset(args, bug_list_path, state_dir):
     old_retry = bs.get("retry_count", 0)
 
     bs["retry_count"] = 0
+    bs["infra_error_count"] = 0
+    bs["last_infra_error_session_id"] = None
     bs["sessions"] = []
     bs["last_session_id"] = None
     bs["resume_from_phase"] = None
@@ -652,6 +681,8 @@ def action_clean(args, bug_list_path, state_dir):
     old_retry = bs.get("retry_count", 0)
 
     bs["retry_count"] = 0
+    bs["infra_error_count"] = 0
+    bs["last_infra_error_session_id"] = None
     bs["sessions"] = []
     bs["last_session_id"] = None
     bs["resume_from_phase"] = None
@@ -740,6 +771,8 @@ def action_start(args, bug_list_path, state_dir):
         "bug_id": bug_id,
         "old_status": old_status,
         "new_status": "in_progress",
+        "retry_count": bs.get("retry_count", 0),
+        "infra_error_count": bs.get("infra_error_count", 0),
         "updated_at": bs["updated_at"],
     }
     print(json.dumps(result, indent=2, ensure_ascii=False))
@@ -816,6 +849,8 @@ def action_unskip(args, bug_list_path, state_dir):
     for bid in to_reset:
         bs = load_bug_status(state_dir, bid)
         bs["retry_count"] = 0
+        bs["infra_error_count"] = 0
+        bs["last_infra_error_session_id"] = None
         bs["sessions"] = []
         bs["last_session_id"] = None
         bs["resume_from_phase"] = None