runcastle 1.2.4 → 1.2.5

package/bin/runcastle.js

@@ -179,8 +179,11 @@ function loadConfig(env = process.env) {
     }
   }
   const overrides = {};
-  if (env.RUNCASTLE_SERVER_PORT)
-    overrides.serverPort = Number(env.RUNCASTLE_SERVER_PORT);
+  const num = (key, raw) => {
+    if (raw !== undefined && raw !== "")
+      overrides[key] = Number(raw);
+  };
+  num("serverPort", env.RUNCASTLE_SERVER_PORT);
   if (env.RUNCASTLE_MODEL)
     overrides.model = env.RUNCASTLE_MODEL;
   if (env.RUNCASTLE_SMOKE_MODEL)
@@ -193,21 +196,12 @@ function loadConfig(env = process.env) {
     overrides.mainBranch = env.RUNCASTLE_MAIN_BRANCH;
   if (env.RUNCASTLE_SANDBOX_IMAGE)
     overrides.sandboxImage = env.RUNCASTLE_SANDBOX_IMAGE;
-  if (env.RUNCASTLE_BURN_CONCURRENCY) {
-    overrides.burnConcurrency = Number(env.RUNCASTLE_BURN_CONCURRENCY);
-  }
-  if (env.RUNCASTLE_BURN_MAX_ITERATIONS) {
-    overrides.burnMaxIterations = Number(env.RUNCASTLE_BURN_MAX_ITERATIONS);
-  }
-  if (env.RUNCASTLE_BURN_ATTEMPTS) {
-    overrides.burnAttempts = Number(env.RUNCASTLE_BURN_ATTEMPTS);
-  }
-  if (env.RUNCASTLE_BURN_CONFLICT_ATTEMPTS !== undefined) {
-    overrides.burnConflictAttempts = Number(env.RUNCASTLE_BURN_CONFLICT_ATTEMPTS);
-  }
-  if (env.RUNCASTLE_BURN_CPUS)
-    overrides.burnCpus = Number(env.RUNCASTLE_BURN_CPUS);
-  if (env.RUNCASTLE_BURN_GUARD !== undefined) {
+  num("burnConcurrency", env.RUNCASTLE_BURN_CONCURRENCY);
+  num("burnMaxIterations", env.RUNCASTLE_BURN_MAX_ITERATIONS);
+  num("burnAttempts", env.RUNCASTLE_BURN_ATTEMPTS);
+  num("burnConflictAttempts", env.RUNCASTLE_BURN_CONFLICT_ATTEMPTS);
+  num("burnCpus", env.RUNCASTLE_BURN_CPUS);
+  if (env.RUNCASTLE_BURN_GUARD !== undefined && env.RUNCASTLE_BURN_GUARD !== "") {
     overrides.burnGuard = env.RUNCASTLE_BURN_GUARD !== "0" && env.RUNCASTLE_BURN_GUARD !== "false";
   }
   if (env.RUNCASTLE_SETUP_COMMAND)
@@ -236,6 +230,7 @@ function ensureDataDir() {
   mkdirSync(join2(root, "sessions"), { recursive: true });
   mkdirSync(join2(root, "worktrees"), { recursive: true });
 }
+var SERVE_HOSTNAME = "127.0.0.1", SERVE_IDLE_TIMEOUT_SECONDS = 120;
 var init_config2 = __esm(() => {
   init_config_load();
   init_paths();
@@ -250,7 +245,10 @@ var init_ids = () => {};
 
 // ../core/src/schemas.ts
 import * as z2 from "zod";
-var Phase, TicketStatus, SessionKind, SessionPurpose, MergeBranchPair, RunStatus, FeatureStatus, SessionStatus, TicketInput, Ticket, WaypointType, WaypointStatus, WaypointDisposition, WaypointInput, Waypoint, TestNoteStatus, TestNote, PREPARED_KEYS, PreparedKey, DRIVE_LOOP_KEYS, FindingSource, PROJECT_NAME_MAX = 80, ProjectName, Project, ProjectFinding, Feature, SessionRow, Run, SettingSource, SettingScope, SettingField, SettingsView, SettingsUpdateInput, EventRow;
+function isProjectSessionKind(kind) {
+  return PROJECT_SESSION_KINDS.includes(kind);
+}
+var Phase, TicketStatus, SessionKind, PROJECT_SESSION_KINDS, SessionPurpose, MergeBranchPair, RunStatus, FeatureStatus, SessionStatus, TicketInput, Ticket, WaypointType, WaypointStatus, WaypointDisposition, WaypointInput, Waypoint, TestNoteStatus, TestNote, PREPARED_KEYS, PreparedKey, DRIVE_LOOP_KEYS, FindingSource, PROJECT_NAME_MAX = 80, ProjectName, Project, ProjectFinding, Feature, SessionRow, Run, SettingSource, SettingScope, SettingField, SettingsView, SettingsUpdateInput, EventRow;
 var init_schemas = __esm(() => {
   Phase = z2.enum([
     "ideation",
@@ -270,13 +268,14 @@ var init_schemas = __esm(() => {
     "prepare",
     "project"
   ]);
+  PROJECT_SESSION_KINDS = ["prepare", "project"];
   SessionPurpose = z2.enum(["resolve-conflict"]);
   MergeBranchPair = z2.object({
     mergeFrom: z2.string(),
     mergeInto: z2.string()
   });
   RunStatus = z2.enum(["running", "succeeded", "failed", "cancelled"]);
-  FeatureStatus = z2.enum(["active", "shipped", "archived"]);
+  FeatureStatus = z2.enum(["draft", "active", "shipped", "archived"]);
   SessionStatus = z2.enum(["launching", "live", "ended"]);
   TicketInput = z2.object({
     title: z2.string(),
@@ -295,7 +294,8 @@ var init_schemas = __esm(() => {
     commits: z2.array(z2.string()),
     error: z2.string().optional(),
     attemptBranch: z2.string().optional(),
-    conflictFiles: z2.array(z2.string()).optional()
+    conflictFiles: z2.array(z2.string()).optional(),
+    digest: z2.string().optional()
   });
   WaypointType = z2.enum(["grilling", "research", "prototype", "task"]);
   WaypointStatus = z2.enum(["open", "claimed", "resolved", "dropped"]);
@@ -360,7 +360,8 @@ var init_schemas = __esm(() => {
     dbResetCommand: z2.string().optional(),
     driveSetupCommand: z2.string().optional(),
     driveStopCommand: z2.string().optional(),
-    driveEnv: z2.string().optional()
+    driveEnv: z2.string().optional(),
+    closedAt: z2.number().optional()
   });
   ProjectFinding = z2.object({
     key: PreparedKey,
@@ -378,6 +379,7 @@ var init_schemas = __esm(() => {
     slug: z2.string(),
     title: z2.string(),
     oneLiner: z2.string(),
+    brief: z2.string().optional(),
     mapped: z2.boolean(),
     lap: z2.number(),
     phase: Phase,
@@ -406,7 +408,8 @@ var init_schemas = __esm(() => {
     status: RunStatus,
     startedAt: z2.number(),
     endedAt: z2.number().optional(),
-    summary: z2.string().optional()
+    summary: z2.string().optional(),
+    digest: z2.string().optional()
   });
   SettingSource = z2.enum(["env", "project", "file", "default"]);
   SettingScope = z2.enum(["global", "project"]);
@@ -581,7 +584,7 @@ var init_pipeline = __esm(() => {
 });
 
 // ../core/src/db-schema.ts
-import { integer, primaryKey, sqliteTable, text } from "drizzle-orm/sqlite-core";
+import { index, integer, primaryKey, sqliteTable, text } from "drizzle-orm/sqlite-core";
 var projects, projectFindings, features, sessions, tickets, testNotes, waypoints, runs, events, gateOverrides;
 var init_db_schema = __esm(() => {
   projects = sqliteTable("projects", {
@@ -617,6 +620,7 @@ var init_db_schema = __esm(() => {
     slug: text("slug").notNull(),
     title: text("title").notNull(),
     oneLiner: text("one_liner").notNull(),
+    brief: text("brief"),
     mapped: integer("mapped", { mode: "boolean" }).notNull().default(false),
     lap: integer("lap").notNull().default(1),
     phase: text("phase").notNull().$type(),
@@ -654,7 +658,8 @@ var init_db_schema = __esm(() => {
     commits: text("commits", { mode: "json" }).notNull().$type(),
     error: text("error"),
     attemptBranch: text("attempt_branch"),
-    conflictFiles: text("conflict_files", { mode: "json" }).$type()
+    conflictFiles: text("conflict_files", { mode: "json" }).$type(),
+    digest: text("digest")
   });
   testNotes = sqliteTable("test_notes", {
     id: text("id").primaryKey(),
@@ -687,7 +692,8 @@ var init_db_schema = __esm(() => {
     status: text("status").notNull().$type(),
     startedAt: integer("started_at").notNull(),
     endedAt: integer("ended_at"),
-    summary: text("summary")
+    summary: text("summary"),
+    digest: text("digest")
   });
   events = sqliteTable("events", {
     id: integer("id").primaryKey({ autoIncrement: true }),
@@ -700,7 +706,10 @@ var init_db_schema = __esm(() => {
     type: text("type").notNull(),
     message: text("message").notNull(),
     data: text("data", { mode: "json" })
-  });
+  }, (t) => [
+    index("events_project_id_id_idx").on(t.projectId, t.id),
+    index("events_feature_id_id_idx").on(t.featureId, t.id)
+  ]);
   gateOverrides = sqliteTable("gate_overrides", {
     id: integer("id").primaryKey({ autoIncrement: true }),
     featureId: text("feature_id").notNull(),
@@ -1280,6 +1289,16 @@ var init_ring_buffer = __esm(() => {
 });
 
 // src/pty/registry.ts
+function killTreeBounded(pty) {
+  return new Promise((resolve3) => {
+    const timer = setTimeout(resolve3, KILL_TREE_TIMEOUT_MS);
+    pty.killTree().catch(() => {}).then(() => {
+      clearTimeout(timer);
+      resolve3();
+    });
+  });
+}
+
 class PtyRegistry {
   entries = new Map;
   create(input) {
@@ -1337,18 +1356,31 @@ class PtyRegistry {
     const entry = this.entries.get(sessionId);
     if (!entry)
       return false;
-    entry.pty.kill();
+    this.tearDown(entry);
+    return true;
+  }
+  async killTree(sessionId) {
+    const entry = this.entries.get(sessionId);
+    if (!entry)
+      return false;
+    await this.tearDown(entry);
     return true;
   }
   remove(sessionId) {
     this.entries.delete(sessionId);
   }
-  killAll() {
-    for (const entry of this.entries.values()) {
-      if (!entry.exited)
-        entry.pty.kill();
-    }
+  async killAllTrees() {
+    const all = [...this.entries.values()];
     this.entries.clear();
+    await Promise.allSettled(all.map((entry) => this.tearDown(entry)));
+  }
+  async tearDown(entry) {
+    if (entry.exited)
+      return;
+    await killTreeBounded(entry.pty);
+    try {
+      entry.pty.kill();
+    } catch {}
   }
   ids() {
     return [...this.entries.keys()];
@@ -1360,7 +1392,7 @@ function ptyRegistry() {
     g[REGISTRY_KEY] = new PtyRegistry;
   return g[REGISTRY_KEY];
 }
-var REGISTRY_KEY;
+var KILL_TREE_TIMEOUT_MS = 5000, REGISTRY_KEY;
 var init_registry = __esm(() => {
   init_pty();
   init_ring_buffer();
@@ -1441,7 +1473,7 @@ var init_bus = __esm(() => {
 // src/services/events.ts
 import { and, asc, desc, eq, gt, max } from "drizzle-orm";
 function rowToEvent(row) {
-  return {
+  return EventRow.parse({
     id: row.id,
     projectId: row.projectId,
     featureId: row.featureId ?? undefined,
@@ -1451,7 +1483,7 @@ function rowToEvent(row) {
     type: row.type,
     message: row.message,
     data: row.data ?? undefined
-  };
+  });
 }
 function projectIdForFeature(ctx, featureId) {
   const row = ctx.db.select({ projectId: features.projectId }).from(features).where(eq(features.id, featureId)).get();
@@ -1522,6 +1554,7 @@ function listByProject(ctx, projectId, afterId = 0) {
   return rows.map(rowToEvent);
 }
 var init_events = __esm(() => {
+  init_src();
   init_schema();
   init_errors();
   init_bus();
@@ -1530,12 +1563,13 @@ var init_events = __esm(() => {
 // src/services/repo.ts
 import { and as and2, desc as desc2, eq as eq2 } from "drizzle-orm";
 function rowToFeature(row) {
-  return {
+  return Feature.parse({
     id: row.id,
     projectId: row.projectId,
     slug: row.slug,
     title: row.title,
     oneLiner: row.oneLiner,
+    brief: row.brief ?? undefined,
     mapped: row.mapped,
     lap: row.lap,
     phase: row.phase,
@@ -1543,10 +1577,10 @@ function rowToFeature(row) {
     baseBranch: row.baseBranch ?? undefined,
     status: row.status,
     createdAt: row.createdAt
-  };
+  });
 }
 function rowToProject(row) {
-  return {
+  return Project.parse({
     id: row.id,
     name: row.name,
     repoPath: row.repoPath,
@@ -1559,22 +1593,24 @@ function rowToProject(row) {
     dbResetCommand: row.dbResetCommand ?? undefined,
     driveSetupCommand: row.driveSetupCommand ?? undefined,
     driveStopCommand: row.driveStopCommand ?? undefined,
-    driveEnv: row.driveEnv ?? undefined
-  };
+    driveEnv: row.driveEnv ?? undefined,
+    closedAt: row.closedAt ?? undefined
+  });
 }
 function rowToRun(row) {
-  return {
+  return Run.parse({
     id: row.id,
     featureId: row.featureId,
     workflow: row.workflow,
     status: row.status,
     startedAt: row.startedAt,
     endedAt: row.endedAt ?? undefined,
-    summary: row.summary ?? undefined
-  };
+    summary: row.summary ?? undefined,
+    digest: row.digest ?? undefined
+  });
 }
 function rowToSession(row) {
-  return {
+  return SessionRow.parse({
     id: row.id,
     featureId: row.featureId ?? undefined,
     projectId: row.projectId ?? undefined,
@@ -1586,7 +1622,7 @@ function rowToSession(row) {
     status: row.status,
     awaitingInput: row.awaitingInput,
     worktreePath: row.worktreePath
-  };
+  });
 }
 function tryGetFeature(ctx, id) {
   const row = ctx.db.select().from(features).where(eq2(features.id, id)).get();
@@ -1662,6 +1698,7 @@ function setFeatureStatus(ctx, featureId, status) {
   return { ...current, status };
 }
 var init_repo = __esm(() => {
+  init_src();
   init_schema();
   init_errors();
   init_events();
@@ -1670,7 +1707,7 @@ var init_repo = __esm(() => {
 // src/services/waypoints.ts
 import { and as and3, asc as asc2, eq as eq3 } from "drizzle-orm";
 function rowToWaypoint(row) {
-  return {
+  return Waypoint.parse({
     id: row.id,
     featureId: row.featureId,
     seq: row.seq,
@@ -1683,7 +1720,7 @@ function rowToWaypoint(row) {
     claimedBy: row.claimedBy ?? undefined,
     lastSessionId: row.lastSessionId ?? undefined,
     summary: row.summary ?? undefined
-  };
+  });
 }
 function listByFeature(ctx, featureId) {
   return ctx.db.select().from(waypoints).where(eq3(waypoints.featureId, featureId)).orderBy(asc2(waypoints.seq)).all().map(rowToWaypoint);
@@ -1799,6 +1836,9 @@ function releaseForSession(ctx, claimant) {
 }
 function resolve3(ctx, id, disposition, summary) {
   const wp = getWaypoint(ctx, id);
+  if (isTerminal(wp)) {
+    throw new InvalidInputError(`waypoint ${wp.seq} is already ${wp.status}`);
+  }
   const before = listByFeature(ctx, wp.featureId);
   const bySeqBefore = new Map(before.map((w) => [w.seq, w]));
   ctx.db.update(waypoints).set({ status: disposition, summary, claimedBy: null }).where(eq3(waypoints.id, id)).run();
@@ -1835,6 +1875,91 @@ var init_waypoints = __esm(() => {
   TERMINAL = new Set(["resolved", "dropped"]);
 });
 
+// src/services/feature-docs.ts
+import { existsSync as existsSync5 } from "fs";
+import { join as join5 } from "path";
+function featureDocsDir(project, feature) {
+  const relSegments = featureDocsRel(feature.slug).split("/");
+  const worktree = worktreeDir(project.id, feature.slug);
+  const base = existsSync5(worktree) ? worktree : project.repoPath;
+  return join5(base, ...relSegments);
+}
+function featureDocPath(project, feature, fileName) {
+  return join5(featureDocsDir(project, feature), fileName);
+}
+var init_feature_docs = __esm(() => {
+  init_paths();
+});
+
+// src/services/docs-watch.ts
+import { watch } from "fs";
+function startDocsWatch(ctx, feature) {
+  if (watches.has(feature.id))
+    return;
+  try {
+    const dir = featureDocsDir(projectForFeature(ctx, feature), feature);
+    const watcher = watch(dir, { persistent: false }, (_event, filename) => {
+      noteDocsChange(ctx, feature.id, typeof filename === "string" ? filename : null);
+    });
+    watcher.on("error", (err) => {
+      console.error(`docs watcher failed for feature ${feature.id}`, err);
+      stopDocsWatch(feature.id);
+    });
+    watches.set(feature.id, { watcher, timer: undefined, changed: new Set });
+  } catch (err) {
+    console.error(`docs watcher could not start for feature ${feature.id}`, err);
+  }
+}
+function stopDocsWatch(featureId) {
+  const entry = watches.get(featureId);
+  if (!entry)
+    return;
+  watches.delete(featureId);
+  if (entry.timer)
+    clearTimeout(entry.timer);
+  try {
+    entry.watcher.close();
+  } catch (err) {
+    console.error(`docs watcher failed to close for feature ${featureId}`, err);
+  }
+}
+function noteDocsChange(ctx, featureId, filename) {
+  const entry = watches.get(featureId);
+  if (!entry)
+    return;
+  if (filename !== null && !filename.endsWith(".md"))
+    return;
+  if (filename)
+    entry.changed.add(filename);
+  if (entry.timer)
+    clearTimeout(entry.timer);
+  entry.timer = setTimeout(() => emitDocsChanged(ctx, featureId), DOCS_WATCH_DEBOUNCE_MS);
+}
+function emitDocsChanged(ctx, featureId) {
+  const entry = watches.get(featureId);
+  if (!entry)
+    return;
+  entry.timer = undefined;
+  const files = [...entry.changed].sort();
+  entry.changed.clear();
+  try {
+    emit(ctx, featureId, {
+      type: "docs.changed",
+      message: files.length > 0 ? `docs changed: ${files.join(", ")}` : "docs changed",
+      data: { files }
+    });
+  } catch (err) {
+    console.error(`docs watcher failed to emit for feature ${featureId}`, err);
+  }
+}
+var DOCS_WATCH_DEBOUNCE_MS = 300, watches;
+var init_docs_watch = __esm(() => {
+  init_events();
+  init_feature_docs();
+  init_repo();
+  watches = new Map;
+});
+
 // src/pty/dev-pane.ts
 function drivePaneId(ownerId) {
   return `${DRIVE_PREFIX}${ownerId}`;
@@ -1895,24 +2020,12 @@ function devPaneLive(paneId) {
   const entry = ptyRegistry().get(paneId);
   return !!entry && !entry.exited;
 }
-function killTreeBounded(pty) {
-  return new Promise((resolve4) => {
-    const timer = setTimeout(resolve4, KILL_TREE_TIMEOUT_MS);
-    pty.killTree().catch(() => {}).then(() => {
-      clearTimeout(timer);
-      resolve4();
-    });
-  });
-}
 async function stopDevPane(paneId) {
   const reg = ptyRegistry();
-  const entry = reg.get(paneId);
-  if (entry && !entry.exited)
-    await killTreeBounded(entry.pty);
-  reg.kill(paneId);
+  await reg.killTree(paneId);
   reg.remove(paneId);
 }
-var DRIVE_PREFIX = "drive:", SNIFF_WINDOW = 8192, KILL_TREE_TIMEOUT_MS = 5000;
+var DRIVE_PREFIX = "drive:", SNIFF_WINDOW = 8192;
 var init_dev_pane = __esm(() => {
   init_events();
   init_registry();
@@ -1970,7 +2083,8 @@ function runDriveHook(command, opts) {
         cwd: opts.cwd,
         env: opts.env ?? process.env,
         windowsHide: true,
-        windowsVerbatimArguments: verbatim
+        windowsVerbatimArguments: verbatim,
+        detached: process.platform !== "win32"
       });
     } catch (err) {
       output = err instanceof Error ? err.message : String(err);
@@ -1979,7 +2093,11 @@ function runDriveHook(command, opts) {
     }
     timer = setTimeout(() => {
       timedOut = true;
-      child.kill();
+      const pid = child.pid;
+      if (pid === undefined)
+        child.kill();
+      else
+        killProcessTree(pid).then(() => child.kill());
       const grace = setTimeout(() => finish(null), KILL_GRACE_MS);
       grace.unref?.();
     }, timeoutMs);
@@ -2010,6 +2128,7 @@ function describeHookResult(command, result) {
 }
 var DRIVE_HOOK_TIMEOUT_MS, OUTPUT_TAIL_LINES = 40, KILL_GRACE_MS = 2000;
 var init_drive_hooks = __esm(() => {
+  init_kill_tree();
   DRIVE_HOOK_TIMEOUT_MS = 10 * 60000;
 });
 
@@ -2226,9 +2345,9 @@ var init_findings = __esm(() => {
 });
 
 // src/services/git.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, mkdtempSync, realpathSync, rmSync } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync2, mkdtempSync, realpathSync, rmSync } from "fs";
 import { tmpdir } from "os";
-import { dirname, join as join5, resolve as resolve4 } from "path";
+import { dirname, join as join6, resolve as resolve4 } from "path";
 import { simpleGit } from "simple-git";
 function migrationPaths(paths) {
   return paths.filter((p) => MIGRATION_DIR_RE.test(p) || DRIZZLE_SQL_RE.test(p));
@@ -2253,7 +2372,7 @@ function canon(p) {
   return process.platform === "win32" ? abs.replace(/\\/g, "/").toLowerCase() : abs;
 }
 async function assertRepo(repoPath) {
-  if (!existsSync5(repoPath)) {
+  if (!existsSync6(repoPath)) {
     throw new InvalidInputError(`path does not exist: ${repoPath}`);
   }
   let isRepo = false;
@@ -2342,7 +2461,7 @@ async function ensureTalkWorktree(project, feature) {
   await ensureBranchExists(g, branch, feature.baseBranch ?? project.mainBranch);
   if (await worktreeIsValid(g, worktreePath, branch))
     return worktreePath;
-  if (existsSync5(worktreePath) && (await registeredWorktrees(g)).has(canon(worktreePath))) {
+  if (existsSync6(worktreePath) && (await registeredWorktrees(g)).has(canon(worktreePath))) {
     if (await checkoutInWorktree(worktreePath, branch))
       return worktreePath;
   }
@@ -2365,14 +2484,13 @@ async function addWorktree(g, worktreePath, branch, label) {
     }
   }
 }
-async function ensureProjectWorktree(project) {
+async function ensureProjectWorktree(project, onLanded) {
   const worktreePath = worktreeDir(project.id, PROJECT_WORKTREE_SLUG);
   const g = git(project.repoPath);
   const base = project.mainBranch;
-  const leftover = await branchCommitsAhead(project.repoPath, base, PROJECT_BRANCH);
-  if (leftover.length > 0) {
-    await mergeTempBranch(project.repoPath, base, PROJECT_BRANCH);
-  }
+  const landed = await landProjectBranch(project);
+  if (landed)
+    onLanded?.(landed);
   const stillAhead = await branchCommitsAhead(project.repoPath, base, PROJECT_BRANCH);
   if (stillAhead.length === 0) {
     await deleteBranchDetachingWorktrees(g, project.repoPath, PROJECT_BRANCH);
@@ -2380,7 +2498,7 @@ async function ensureProjectWorktree(project) {
   }
   if (await worktreeIsValid(g, worktreePath, PROJECT_BRANCH))
     return worktreePath;
-  if (existsSync5(worktreePath) && (await registeredWorktrees(g)).has(canon(worktreePath))) {
+  if (existsSync6(worktreePath) && (await registeredWorktrees(g)).has(canon(worktreePath))) {
     if (await checkoutInWorktree(worktreePath, PROJECT_BRANCH))
       return worktreePath;
   }
@@ -2406,7 +2524,7 @@ async function ensureBranchExists(g, branch, from) {
   }
 }
 async function worktreeIsValid(g, worktreePath, branch) {
-  if (!existsSync5(worktreePath))
+  if (!existsSync6(worktreePath))
     return false;
   const registered = await registeredWorktrees(g);
   if (!registered.has(canon(worktreePath)))
@@ -2452,7 +2570,7 @@ async function worktreesOnBranch(g, branch, mainRepoPath) {
   return (await listWorktrees(g)).filter((e) => e.branch === branch && canon(e.path) !== main).map((e) => e.path);
 }
 async function detachWorktree(path) {
-  if (!existsSync5(path))
+  if (!existsSync6(path))
     return false;
   const g = git(path);
   let head;
@@ -2467,7 +2585,7 @@ async function detachWorktree(path) {
   return true;
 }
 async function reattachWorktree(path, branch) {
-  if (!existsSync5(path))
+  if (!existsSync6(path))
     return;
   try {
     await git(path).checkout(branch);
@@ -2483,21 +2601,21 @@ function ticketBranchName(slug, ticketSeq, unique) {
   return `${TICKET_BRANCH_PREFIX}${tempBranchSlugSegment(slug)}/${ticketSeq}-${unique}`;
 }
 function burnWorktreePath(repoPath, branch) {
-  return join5(repoPath, ".sandcastle", "worktrees", branch.replace(/\//g, "-"));
+  return join6(repoPath, ".sandcastle", "worktrees", branch.replace(/\//g, "-"));
 }
 async function cleanupBurnWorktree(repoPath, branch, opts = {}) {
   const path = burnWorktreePath(repoPath, branch);
   const attempts = Math.max(1, opts.attempts ?? 3);
   const delayMs = opts.delayMs ?? 750;
   const g = git(repoPath);
-  for (let attempt = 1;attempt <= attempts && existsSync5(path); attempt++) {
+  for (let attempt = 1;attempt <= attempts && existsSync6(path); attempt++) {
     try {
       await g.raw(["worktree", "remove", "--force", path]);
     } catch {}
-    if (existsSync5(path) && attempt < attempts)
+    if (existsSync6(path) && attempt < attempts)
       await sleep(delayMs);
   }
-  if (existsSync5(path)) {
+  if (existsSync6(path)) {
     try {
       rmSync(path, { recursive: true, force: true });
     } catch {}
@@ -2505,7 +2623,7 @@ async function cleanupBurnWorktree(repoPath, branch, opts = {}) {
   try {
     await g.raw(["worktree", "prune"]);
   } catch {}
-  return !existsSync5(path);
+  return !existsSync6(path);
 }
 function sleep(ms) {
   return new Promise((done) => setTimeout(done, ms));
@@ -2653,11 +2771,11 @@ async function mergeTempBranch(repoPath, featureBranchName, tempBranch) {
 async function mergeInDisposableWorktree(g, featureBranchName, tempBranch) {
   let dir;
   try {
-    dir = mkdtempSync(join5(tmpdir(), "rc-land-"));
+    dir = mkdtempSync(join6(tmpdir(), "rc-land-"));
   } catch (e) {
     return { ok: false, error: errMsg(e) };
   }
-  const wt = join5(dir, "wt");
+  const wt = join6(dir, "wt");
   try {
     await g.raw(["worktree", "add", wt, featureBranchName]);
     const gw = git(wt);
@@ -2764,7 +2882,7 @@ async function removeTalkWorktree(repoPath, worktreePath) {
   try {
     await g.raw(["worktree", "prune"]);
   } catch {}
-  if (existsSync5(worktreePath)) {
+  if (existsSync6(worktreePath)) {
     throw new InvalidInputError(`could not remove talk worktree at ${worktreePath} \u2014 a file may be locked; ` + "close anything using it and retry the delete");
   }
 }
@@ -2791,7 +2909,7 @@ async function deleteFeatureBranches(repoPath, slug) {
   return { deleted, kept };
 }
 async function commitDocs(worktreePath, message) {
-  if (!existsSync5(resolve4(worktreePath, DOCS_PATHSPEC)))
+  if (!existsSync6(resolve4(worktreePath, DOCS_PATHSPEC)))
     return;
   const g = git(worktreePath);
   await g.add([DOCS_PATHSPEC]);
@@ -3484,35 +3602,46 @@ function landProjectSession(ctx, session) {
   const project = getProjectById(ctx, session.projectId);
   if (!project)
     return;
-  const kept = `they are kept on ${PROJECT_BRANCH} and retried at the next launch`;
-  const report = (type, message, data = {}) => {
-    emitProject(ctx, project.id, {
-      type,
-      message,
-      data: { sessionId: session.id, branch: PROJECT_BRANCH, ...data }
-    });
-  };
   const landing = landProjectBranch(project).then((res) => {
-    if (!res)
-      return;
-    if (res.landed) {
-      report("project.landed", `landed ${res.commits} commit(s) from the project session onto ${project.mainBranch}`, { commits: res.commits });
-    } else if (res.conflict) {
-      report("project.land_conflict", `the project session's ${res.commits} commit(s) conflict with ${project.mainBranch} \u2014 nothing was overwritten; ${kept}`, { commits: res.commits, files: res.files ?? [] });
-    } else {
-      report("project.land_failed", `could not land the project session's ${res.commits} commit(s) onto ${project.mainBranch}: ${res.error ?? "unknown error"} \u2014 ${kept}`, { commits: res.commits, error: res.error ?? null });
-    }
+    if (res)
+      reportProjectLanding(ctx, project, res, { sessionId: session.id });
   }).catch((e) => {
-    report("project.land_failed", `could not land the project session's work onto ${project.mainBranch}: ${e instanceof Error ? e.message : String(e)} \u2014 ${kept}`, { error: e instanceof Error ? e.message : String(e) });
+    emitProject(ctx, project.id, {
+      type: "project.land_failed",
+      message: `could not land the project session's work onto ${project.mainBranch}: ${e instanceof Error ? e.message : String(e)} \u2014 ${LANDING_KEPT}`,
+      data: {
+        sessionId: session.id,
+        branch: PROJECT_BRANCH,
+        error: e instanceof Error ? e.message : String(e)
+      }
+    });
   });
   inFlightLandings.add(landing);
   landing.finally(() => inFlightLandings.delete(landing));
 }
+function reportProjectLanding(ctx, project, res, data = {}) {
+  const report = (type, message, extra) => {
+    emitProject(ctx, project.id, {
+      type,
+      message,
+      data: { branch: PROJECT_BRANCH, ...data, ...extra }
+    });
+  };
+  if (res.landed) {
+    report("project.landed", `landed ${res.commits} commit(s) from the project session onto ${project.mainBranch}`, { commits: res.commits });
+  } else if (res.conflict) {
+    report("project.land_conflict", `the project session's ${res.commits} commit(s) conflict with ${project.mainBranch} \u2014 nothing was overwritten; ${LANDING_KEPT}`, { commits: res.commits, files: res.files ?? [] });
+  } else {
+    report("project.land_failed", `could not land the project session's ${res.commits} commit(s) onto ${project.mainBranch}: ${res.error ?? "unknown error"} \u2014 ${LANDING_KEPT}`, { commits: res.commits, error: res.error ?? null });
+  }
+}
 function markSessionEnded(ctx, id) {
   const existing = getSessionRow(ctx, id);
   if (!existing)
     return null;
   forgetKickoff(id);
+  if (existing.featureId)
+    stopDocsWatch(existing.featureId);
   ctx.db.update(sessions).set({ status: "ended" }).where(eq5(sessions.id, id)).run();
   return getSessionRow(ctx, id);
 }
@@ -3535,11 +3664,12 @@ function mostRecentLiveSession(ctx) {
   const row = ctx.db.select().from(sessions).where(eq5(sessions.status, "live")).orderBy(desc3(sql2`rowid`)).limit(1).get();
   return row ? rowToSession(row) : null;
 }
-var KICKOFF_DELAY_MS = 1500, KICKOFF_SUBMIT_DELAY_MS = 350, KICKOFF_CONFIRM_MS = 12000, KICKOFF_MAX_ATTEMPTS = 3, CLEAR_INPUT = "\x15", SESSION_READY_TIMEOUT_MS = 25000, CONVERGE_KICKOFF_LINE, KICKOFF_LINES, RESUME_KICKOFF_PREFIX, pendingKickoffOverrides, deliveries, MATCH_PREFIX = 40, landedProjectSessions, inFlightLandings;
+var KICKOFF_DELAY_MS = 1500, KICKOFF_SUBMIT_DELAY_MS = 350, KICKOFF_CONFIRM_MS = 12000, KICKOFF_MAX_ATTEMPTS = 3, CLEAR_INPUT = "\x15", SESSION_READY_TIMEOUT_MS = 25000, CONVERGE_KICKOFF_LINE, KICKOFF_LINES, RESUME_KICKOFF_PREFIX, pendingKickoffOverrides, deliveries, MATCH_PREFIX = 40, landedProjectSessions, inFlightLandings, LANDING_KEPT;
 var init_sessions = __esm(() => {
   init_src();
   init_schema();
   init_registry();
+  init_docs_watch();
   init_events();
   init_git();
   init_waypoints();
@@ -3559,6 +3689,7 @@ var init_sessions = __esm(() => {
   deliveries = new Map;
   landedProjectSessions = new Set;
   inFlightLandings = new Set;
+  LANDING_KEPT = `they are kept on ${PROJECT_BRANCH} and retried at the next launch`;
 });
 
 // src/launcher/reconcile.ts
@@ -3612,26 +3743,10 @@ async function getRuntimeCtx() {
 }
 var current = null;
 
-// src/services/feature-docs.ts
-import { existsSync as existsSync6 } from "fs";
-import { join as join6 } from "path";
-function featureDocsDir(project, feature) {
-  const relSegments = featureDocsRel(feature.slug).split("/");
-  const worktree = worktreeDir(project.id, feature.slug);
-  const base = existsSync6(worktree) ? worktree : project.repoPath;
-  return join6(base, ...relSegments);
-}
-function featureDocPath(project, feature, fileName) {
-  return join6(featureDocsDir(project, feature), fileName);
-}
-var init_feature_docs = __esm(() => {
-  init_paths();
-});
-
 // src/services/tickets.ts
 import { and as and6, asc as asc3, eq as eq6 } from "drizzle-orm";
 function rowToTicket(row) {
-  return {
+  return Ticket.parse({
     id: row.id,
     featureId: row.featureId,
     seq: row.seq,
@@ -3646,8 +3761,9 @@ function rowToTicket(row) {
     commits: row.commits,
     error: row.error ?? undefined,
     attemptBranch: row.attemptBranch ?? undefined,
-    conflictFiles: row.conflictFiles ?? undefined
-  };
+    conflictFiles: row.conflictFiles ?? undefined,
+    digest: row.digest ?? undefined
+  });
 }
 function resolveBlocking(inputs, startSeq) {
   try {
@@ -3683,7 +3799,8 @@ function storeTickets(ctx, featureId, inputs) {
     commits: [],
     error: null,
     attemptBranch: null,
-    conflictFiles: null
+    conflictFiles: null,
+    digest: null
   }));
   ctx.db.insert(tickets).values(rows).run();
   emit(ctx, featureId, {
@@ -3770,6 +3887,8 @@ function updateTicket(ctx, id, patch) {
     set.attemptBranch = patch.attemptBranch;
   if (patch.conflictFiles !== undefined)
     set.conflictFiles = patch.conflictFiles;
+  if (patch.digest !== undefined)
+    set.digest = patch.digest;
   ctx.db.update(tickets).set(set).where(eq6(tickets.id, id)).run();
   emit(ctx, current2.featureId, {
     type: "ticket.updated",
@@ -3855,6 +3974,13 @@ function docGate(ctx, feature, fileName, reason) {
 }
 function overrideGate(ctx, featureId, gate, reason) {
   const feature = getFeatureRow(ctx, featureId);
+  const current2 = nextGate(feature);
+  if (!current2) {
+    throw new InvalidInputError(`cannot override ${gate}: feature is at ${feature.phase}, its final phase \u2014 no gate to cross`);
+  }
+  if (current2.id !== gate) {
+    throw new InvalidInputError(`cannot override ${gate}: the feature is at ${feature.phase}, whose gate is ${current2.id}`);
+  }
   ctx.db.insert(gateOverrides).values({ featureId, gate, reason, ts: Date.now() }).run();
   emit(ctx, featureId, {
     type: "gate.overridden",
@@ -4411,14 +4537,21 @@ function buildIsolatedSetupCommand(tempBranch, setupCommand, pm) {
 }
 function buildWorkspaceNotes(mode) {
   if (mode === "mounted") {
-    return "Work in the current directory \u2014 it is the repo checkout on your branch.";
+    return [
+      "Work in the current directory \u2014 it is the repo checkout on your branch.",
+      "",
+      "Write `DIGEST.md` at the root of that checkout, and leave it uncommitted \u2014 the host harvests it from disk."
+    ].join(`
+`);
   }
   return [
     `Your working repository is \`${ISOLATED_REPO_PATH}\` \u2014 a clone on the container's fast native filesystem, with dependencies already installed. Do ALL work there: \`cd ${ISOLATED_REPO_PATH}\` first; every file you read, edit, test, and commit lives under it.`,
     "",
     `The directory you start in (\`${SANDBOX_WORKSPACE_PATH}\`) is a slow mounted mirror used only to collect your commits \u2014 never edit files, install, or run tests there. Your commits sync back automatically (a post-commit hook pushes them); just commit as normal. If you re-run the dependency install and it reconfigures git hooks (husky), run \`git -C ${ISOLATED_REPO_PATH} config core.hooksPath ${ISOLATED_REPO_PATH}/.git/hooks\` afterwards so the sync hook stays armed.`,
     "",
-    `If you are blocked and write \`BLOCKED.md\`, write it at \`${ISOLATED_REPO_PATH}/BLOCKED.md\` AND copy it to \`${SANDBOX_WORKSPACE_PATH}/BLOCKED.md\` so the orchestrator can see it.`
+    `If you are blocked and write \`BLOCKED.md\`, write it at \`${ISOLATED_REPO_PATH}/BLOCKED.md\` AND copy it to \`${SANDBOX_WORKSPACE_PATH}/BLOCKED.md\` so the orchestrator can see it.`,
+    "",
+    `Write \`DIGEST.md\` at \`${SANDBOX_WORKSPACE_PATH}/DIGEST.md\` \u2014 the mounted mirror, so the host can see it \u2014 and NOT inside \`${ISOLATED_REPO_PATH}\`, where it would be committed with your work.`
   ].join(`
 `);
 }
@@ -4680,6 +4813,7 @@ async function burnTickets(ctx, tickets2, execute, concurrency = 1) {
   const status = new Map(tickets2.map((t) => [t.seq, t.status]));
   const pending = new Set(tickets2.filter((t) => t.status === "pending").map((t) => t.seq));
   const inFlight = new Map;
+  const digests = [];
   const satisfied = (s) => s === "done" || s === "cancelled";
   const readyState = (seq) => {
     const t = bySeq.get(seq);
@@ -4716,13 +4850,22 @@ async function burnTickets(ctx, tickets2, execute, concurrency = 1) {
     const outcome = await execute(ctx, t);
     if (outcome.status === "done") {
       status.set(seq, "done");
-      ctx.updateTicket(t.id, { status: "done", commits: outcome.commits });
+      ctx.updateTicket(t.id, { status: "done", commits: outcome.commits, digest: outcome.digest });
       ctx.emitEvent({
         type: "ticket.done",
         message: `ticket ${t.seq} done \u2014 ${outcome.commits.length} commit(s)`,
         ticketId: t.id,
         data: { commits: outcome.commits }
       });
+      if (outcome.digest === undefined) {
+        ctx.emitEvent({
+          type: "digest.missing",
+          message: `ticket ${t.seq} done without DIGEST.md`,
+          ticketId: t.id
+        });
+      } else {
+        digests.push({ seq: t.seq, title: t.title, digest: outcome.digest });
+      }
     } else {
       failTicket(seq, outcome.error, outcome.event);
       ctx.emitEvent({
@@ -4788,7 +4931,16 @@ async function burnTickets(ctx, tickets2, execute, concurrency = 1) {
   for (const s of status.values())
     if (s === "done")
       done += 1;
-  return done;
+  return { done, digests };
+}
+function composeRunDigest(entries) {
+  if (entries.length === 0)
+    return null;
+  return [...entries].sort((a, b) => a.seq - b.seq).map((e) => `## ticket ${e.seq} \u2014 ${e.title}
+
+${e.digest.trim()}`).join(`
+
+`);
 }
 async function burnRun(ctx, deps) {
   const tickets2 = ctx.tickets;
@@ -4809,10 +4961,11 @@ async function burnRun(ctx, deps) {
     });
     return { status: "failed", summary: `dependency cycle: ${path}` };
   }
-  const done = await burnTickets(ctx, tickets2, deps.executeTicketRun, deps.concurrency);
+  const { done, digests } = await burnTickets(ctx, tickets2, deps.executeTicketRun, deps.concurrency);
   const summary = cancelled > 0 ? `${done}/${total} tickets done (${cancelled} cancelled)` : `${done}/${total} tickets done`;
   ctx.emitEvent({ type: "burn.summary", message: summary, data: { done, total, cancelled } });
-  return { status: done === total ? "succeeded" : "failed", summary };
+  const digest = composeRunDigest(digests);
+  return { status: done === total ? "succeeded" : "failed", summary, ...digest ? { digest } : {} };
 }
 function burnerTemplatePath() {
   return burnerAssetPath("implement-ticket.md");
@@ -4834,11 +4987,11 @@ function readDocsDigestFromDisk(projectId, slug) {
   const files = readdirSync3(docsDir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".md")).sort((a, b) => a.name.localeCompare(b.name)).map((e) => ({ name: e.name, content: readFileSync4(join9(docsDir, e.name), "utf8") }));
   return buildDocsDigest(files);
 }
-function readBlockedFile(dirs) {
+function readAgentFile(dirs, file) {
   for (const dir of dirs) {
     if (!dir)
       continue;
-    const p = join9(dir, "BLOCKED.md");
+    const p = join9(dir, file);
     if (existsSync10(p)) {
       try {
         return readFileSync4(p, "utf8");
@@ -4847,10 +5000,26 @@ function readBlockedFile(dirs) {
   }
   return;
 }
+function harvestDigest(dirs) {
+  const trimmed = readAgentFile(dirs, "DIGEST.md")?.trim();
+  return trimmed ? trimmed : undefined;
+}
+function buildAgentEnv(onHost, token) {
+  const env = {};
+  if (onHost) {
+    for (const [key, value] of Object.entries(process.env)) {
+      if (value !== undefined)
+        env[key] = value;
+    }
+  }
+  if (token)
+    env.CLAUDE_CODE_OAUTH_TOKEN = token;
+  return env;
+}
 function buildBurnAgent(config2, token, model) {
   const onHost = config2.sandbox === "noSandbox";
   const opts = {
-    ...token ? { env: { CLAUDE_CODE_OAUTH_TOKEN: token } } : {},
+    env: buildAgentEnv(onHost, token),
     ...onHost ? { permissionMode: "bypassPermissions" } : {}
   };
   const agent = claudeCode(model, opts);
@@ -4874,8 +5043,10 @@ function selectSandbox(config2, mounts = []) {
       return docker(imageOpts);
     case "podman":
       return podman(imageOpts);
-    default:
+    case "noSandbox":
       return noSandbox();
+    default:
+      throw new Error(`no sandbox provider for sandbox "${config2.sandbox}" \u2014 refusing to run the agent unsandboxed`);
   }
 }
 function buildSandboxOptions(config2, mounts = []) {
@@ -5020,7 +5191,7 @@ async function realExecuteTicketRun(ctx, ticket, config2, token, model, land, en
       }
       await cleanupBurnWorktree(project.repoPath, resolveBranch);
     }
-    const blocked = readBlockedFile([result?.preservedWorktreePath, project.repoPath]);
+    const blocked = readAgentFile([result?.preservedWorktreePath, project.repoPath], "BLOCKED.md");
     if (blocked !== undefined && blocked.trim().length > 0) {
       return {
         ok: false,
@@ -5054,11 +5225,16 @@ ${blocked.trim()}`
     label: `ticket ${ticket.seq}`,
     featureBranch: feature.branch
   };
+  let harvestedDigest;
   const landChain = async (branch, commits) => {
     const landing = await landWithResolve(branch, landDeps);
     if (landing.status === "landed") {
       ctx.updateTicket(ticket.id, { attemptBranch: null, conflictFiles: null });
-      return { status: "done", commits: landedCommits.length > 0 ? landedCommits : commits };
+      return {
+        status: "done",
+        commits: landedCommits.length > 0 ? landedCommits : commits,
+        digest: harvestedDigest
+      };
     }
     preserveChain(landing.branch);
     if (landing.status === "conflict") {
@@ -5219,7 +5395,9 @@ ${retryNotes}` : basePrompt,
     }
     if (!result)
       return { status: "failed", error: "internal: run loop produced no result" };
-    const blocked = readBlockedFile([result.preservedWorktreePath, project.repoPath]);
+    const agentFileDirs = [result.preservedWorktreePath, project.repoPath];
+    const blocked = readAgentFile(agentFileDirs, "BLOCKED.md");
+    harvestedDigest = harvestDigest(agentFileDirs);
     const chain = await branchCommitsAhead(project.repoPath, feature.branch, tempBranch);
     let outcome;
     if (result.commits.length === 0 && blocked !== undefined && blocked.trim().length > 0) {
@@ -5353,8 +5531,6 @@ import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as re
 import { dirname as dirname4, join as join10 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { run as run2 } from "@ai-hero/sandcastle";
-import { docker as docker2 } from "@ai-hero/sandcastle/sandboxes/docker";
-import { noSandbox as noSandbox2 } from "@ai-hero/sandcastle/sandboxes/no-sandbox";
 function waypointSlug(waypoint) {
   const base = waypoint.title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   return `${waypoint.seq}-${base || "waypoint"}`;
@@ -5368,7 +5544,7 @@ async function researchRun(ctx, deps) {
     ctx.emitEvent({ type: "research.error", message: "research run started without a waypoint" });
     return { status: "failed", summary: "no waypoint to research" };
   }
-  if (deps.config.sandbox === "docker" && !deps.hasAuthToken) {
+  if (deps.config.sandbox !== "noSandbox" && !deps.hasAuthToken) {
     ctx.emitEvent({ type: AUTH_MISSING_EVENT2, message: AUTH_MISSING_MESSAGE2 });
     return { status: "failed", summary: "research aborted: auth token missing" };
   }
@@ -5450,7 +5626,7 @@ async function realExecuteResearchRun(ctx, waypoint, config2, token, model) {
   const throttle = createResearchStreamThrottle((e) => ctx.emitEvent(e));
   const runOptions = {
     agent: buildBurnAgent(config2, token, model),
-    sandbox: config2.sandbox === "docker" ? docker2({ imageName: resolveSandboxImage(config2) }) : noSandbox2(),
+    sandbox: selectSandbox(config2),
     cwd: project.repoPath,
     prompt,
     branchStrategy: { type: "branch", branch: tempBranch, baseBranch: feature.branch },
@@ -5626,10 +5802,12 @@ function cancelRun(runId) {
 async function executeRun(ctx, runId, featureId, workflow2, runPromise, controller, cleanup) {
   let status = "failed";
   let summary = "run failed";
+  let digest;
   try {
     const result = await runPromise;
     status = result.status;
     summary = result.summary;
+    digest = result.digest;
   } catch (e) {
     if (controller.signal.aborted) {
       status = "cancelled";
@@ -5642,7 +5820,7 @@ async function executeRun(ctx, runId, featureId, workflow2, runPromise, controll
   } finally {
     controllers.delete(runId);
   }
-  ctx.db.update(runs).set({ status, endedAt: Date.now(), summary }).where(eq8(runs.id, runId)).run();
+  ctx.db.update(runs).set({ status, endedAt: Date.now(), summary, ...digest ? { digest } : {} }).where(eq8(runs.id, runId)).run();
   releaseForSession(ctx, runId);
   if (workflowClaimsFeatureBranch(workflow2)) {
     sweepOrphanedBurning(ctx, featureId, `orphaned \u2014 the run ended (${status}) while it was burning`);
@@ -5697,36 +5875,73 @@ async function createFeature(ctx, input) {
   const slug = uniqueSlug(ctx, project.id, input.title);
   const branch = `feature/${slug}`;
   const requestedBase = input.baseBranch?.trim() || project.mainBranch;
-  const { branchReady, baseBranch } = await ensureFeatureBranch(project, slug, requestedBase);
+  const cut = input.draft ? null : await ensureFeatureBranch(project, slug, requestedBase);
   const row = {
     id: newId("feat"),
     projectId: project.id,
     slug,
     title: input.title,
     oneLiner: input.oneLiner,
+    brief: input.draft ? input.brief ?? null : null,
     mapped: false,
     lap: 1,
     phase: "ideation",
     branch,
-    baseBranch,
-    status: "active",
+    baseBranch: cut?.baseBranch ?? null,
+    status: cut ? "active" : "draft",
     createdAt: Date.now()
   };
   const inserted = ctx.db.insert(features).values(row).returning().get();
   const feature = rowToFeature(inserted);
   emit(ctx, feature.id, {
     type: "feature.created",
-    message: branchReady ? `feature.created (${branch} \u2190 ${baseBranch})` : "feature.created (branch pending)",
-    data: { slug, branch, baseBranch, branchReady }
+    message: !cut ? `feature.created (draft \u2014 ${branch} not cut yet)` : cut.branchReady ? `feature.created (${branch} \u2190 ${cut.baseBranch})` : "feature.created (branch pending)",
+    data: {
+      slug,
+      branch,
+      baseBranch: cut?.baseBranch,
+      branchReady: cut?.branchReady ?? false,
+      draft: !cut
+    }
   });
+  if (!cut)
+    return feature;
   scaffoldDocs(ctx, feature, { brief: input.brief });
-  if (branchReady) {
+  if (cut.branchReady) {
     try {
       await commitDocs(project.repoPath, `runcastle: scaffold ${slug} docs`);
     } catch {}
   }
   return feature;
 }
+function requireNotDraft(feature) {
+  if (feature.status === "draft") {
+    throw new GateError(`\`${feature.slug}\` is a draft \u2014 click Start to cut its branch and begin`);
+  }
+}
+async function startDraft(ctx, featureId, opts = {}) {
+  const feature = getFeatureRow(ctx, featureId);
+  if (feature.status !== "draft") {
+    throw new GateError(`feature ${feature.slug} is not a draft \u2014 it has already been started`);
+  }
+  const project = projectForFeature(ctx, feature);
+  const requestedBase = opts.baseBranch?.trim() || project.mainBranch;
+  const { branchReady, baseBranch } = await ensureFeatureBranch(project, feature.slug, requestedBase);
+  ctx.db.update(features).set({ status: "active", baseBranch }).where(eq9(features.id, featureId)).run();
+  const started = { ...feature, status: "active", baseBranch };
+  emit(ctx, featureId, {
+    type: "feature.started",
+    message: branchReady ? `feature ${feature.slug} started (${feature.branch} \u2190 ${baseBranch})` : `feature ${feature.slug} started (branch pending)`,
+    data: { branch: feature.branch, baseBranch, branchReady }
+  });
+  scaffoldDocs(ctx, started, { brief: feature.brief });
+  if (branchReady) {
+    try {
+      await commitDocs(project.repoPath, `runcastle: scaffold ${feature.slug} docs`);
+    } catch {}
+  }
+  return started;
+}
 async function quickChange(ctx, input) {
   const project = requireProjectById(ctx, input.projectId);
   const title = input.title.trim();
@@ -5845,6 +6060,7 @@ function liveSessionOf(ctx, featureId) {
 }
 function advance(ctx, featureId) {
   const feature = getFeatureRow(ctx, featureId);
+  requireNotDraft(feature);
   const gate = nextGate(feature);
   if (!gate)
     throw new GateError("feature is already at the final phase");
@@ -5862,6 +6078,7 @@ function advance(ctx, featureId) {
 }
 async function burn(ctx, featureId, opts = {}) {
   const feature = getFeatureRow(ctx, featureId);
+  requireNotDraft(feature);
   const running = hasActiveRun(ctx, featureId);
   let tickets2 = listByFeature2(ctx, featureId);
   const lapTickets = tickets2.filter((t) => t.lap === feature.lap);
@@ -5912,6 +6129,7 @@ async function burn(ctx, featureId, opts = {}) {
 }
 function rethink(ctx, featureId) {
   const feature = getFeatureRow(ctx, featureId);
+  requireNotDraft(feature);
   if (feature.phase !== RETHINK_LOOP_BACK.from) {
     throw new GateError(`feature must be in the review phase to rethink (currently ${feature.phase})`);
   }
@@ -6025,6 +6243,7 @@ function escalateToMap(ctx, featureId, input) {
 }
 function archiveFeature(ctx, featureId) {
   const feature = getFeatureRow(ctx, featureId);
+  requireNotDraft(feature);
   if (feature.status === "archived") {
     throw new GateError(`feature ${feature.slug} is already archived`);
   }
@@ -6308,8 +6527,19 @@ async function toolDryRunDrive(ctx, session, input) {
   }
   return dryRunDrive(ctx, project, input.action);
 }
+function createFeatureProject(ctx, session, input) {
+  if (isProjectSessionKind(session.kind))
+    return requireProject(ctx, session);
+  if (!DRAFTING_KINDS.includes(session.kind)) {
+    throw new GateError(`a ${session.kind} session is read-only and may not create features, drafts included. ` + "Tell the human what is worth capturing; the project session is where features are made.");
+  }
+  if (!input.draft || input.ticket) {
+    throw new GateError(`a ${session.kind} session may only PARK a feature here: call create_feature with ` + "`draft: true` and a `brief` carrying why you deferred it. Cutting a branch \u2014 a full " + "create or the quick-change `ticket` shape \u2014 belongs to the project session; tell the " + "human to open it.");
+  }
+  return projectForFeature(ctx, getFeatureRow(ctx, requireFeatureId(session)));
+}
 async function toolCreateFeature(ctx, session, input) {
-  const project = requireProject(ctx, session);
+  const project = createFeatureProject(ctx, session, input);
   const feature = input.ticket ? await quickChange(ctx, {
     projectId: project.id,
     title: input.title,
@@ -6320,7 +6550,8 @@ async function toolCreateFeature(ctx, session, input) {
     title: input.title,
     oneLiner: input.oneLiner,
     baseBranch: input.baseBranch,
-    brief: input.brief
+    brief: input.brief,
+    draft: input.draft
   });
   return {
     id: feature.id,
@@ -6381,7 +6612,8 @@ function toolGetWorkRecord(ctx, session, input) {
         status: t.status,
         seams: t.seams,
         commits: t.commits,
-        ...t.error !== undefined ? { error: t.error } : {}
+        ...t.error !== undefined ? { error: t.error } : {},
+        ...t.digest !== undefined ? { digest: t.digest } : {}
       }))
     });
   }
@@ -6435,12 +6667,13 @@ function buildMcpServer() {
   });
   server.registerTool("create_feature", {
     title: "Create a feature",
-    description: "Create a feature from the project session \u2014 the end of intake. Pass `brief` with the " + "reasoning you just worked out with the human (why this feature exists, what it must NOT " + "swallow): it becomes brief.md verbatim, and without it that reasoning is lost. Pass " + "`ticket: { prose }` for a quick change \u2014 work too small to deserve a grill \u2014 which " + "creates the feature at the implementation phase with that one ticket, and whose brief.md " + "is the prose itself (so `brief` is unused there). This does NOT open " + "a terminal on what it creates; the new card in the rail is the feedback, and the human " + "decides what to work on next.",
+    description: "Create a feature from the project session \u2014 the end of intake. Pass `brief` with the " + "reasoning you just worked out with the human (why this feature exists, what it must NOT " + "swallow): it becomes brief.md verbatim, and without it that reasoning is lost. Pass " + "`draft: true` to PARK it instead of starting it \u2014 a row and its brief, no branch and no " + "files, until the human clicks Start; ask them per feature whether to start it now or " + "park it. Pass " + "`ticket: { prose }` for a quick change \u2014 work too small to deserve a grill \u2014 which " + "creates the feature at the implementation phase with that one ticket, and whose brief.md " + "is the prose itself (so `brief` is unused there). From a feature session (ideation, " + "revisit, waypoint, converge) this tool parks drafts and nothing else: `draft: true` is " + "required and the `ticket` shape is refused, so deflect scope creep here and leave full " + "creation to the project session. This does NOT open " + "a terminal on what it creates; the new card in the rail is the feedback, and the human " + "decides what to work on next.",
     inputSchema: {
       title: z3.string().min(1),
       oneLiner: z3.string(),
       baseBranch: z3.string().optional(),
       brief: z3.string().optional(),
+      draft: z3.boolean().optional(),
       ticket: z3.object({ prose: z3.string().min(1) }).optional()
     }
   }, async (args, extra) => {
@@ -6461,7 +6694,7 @@ function buildMcpServer() {
   });
   server.registerTool("get_work_record", {
     title: "Get work record",
-    description: "What features actually DID \u2014 facts only: per feature its status, ship date, run " + "summaries and tickets as { seq, title, status, seams, commits, error? }. Never a " + "ticket's goal or acceptance criteria: those are intent from before the code existed. " + 'Query by `featureSlug` ("what did X do?") or by `seam` ("who has touched this area, and ' + 'what happened?") \u2014 the seam match is a case-insensitive substring, because seams are ' + "free prose that differs between features. At least one argument is required.",
+    description: "What features actually DID \u2014 facts only: per feature its status, ship date, run " + "summaries and tickets as { seq, title, status, seams, commits, error?, digest? }. The " + "digest is the burner's own account, written after the work: what it did, what " + "surprised it, what it left undone. Never a ticket's goal or acceptance criteria: " + "those are intent from before the code existed. " + 'Query by `featureSlug` ("what did X do?") or by `seam` ("who has touched this area, and ' + 'what happened?") \u2014 the seam match is a case-insensitive substring, because seams are ' + "free prose that differs between features. At least one argument is required.",
     inputSchema: { featureSlug: z3.string().optional(), seam: z3.string().optional() }
   }, async (args, extra) => {
     const rs = await resolveCtxSession(extra);
@@ -6584,7 +6817,7 @@ function buildMcpServer() {
   });
   return server;
 }
-var mcp, server_default;
+var DRAFTING_KINDS, mcp, server_default;
 var init_server = __esm(() => {
   init_src();
   init_paths();
@@ -6598,6 +6831,7 @@ var init_server = __esm(() => {
   init_repo();
   init_tickets();
   init_waypoints();
+  DRAFTING_KINDS = ["ideation", "revisit", "waypoint", "converge"];
   mcp = new Hono;
   mcp.use("*", async (c, next) => {
     await next();
@@ -6695,21 +6929,23 @@ function evaluateEditGuard(input) {
     return null;
   if (!input.filePath)
     return null;
+  const target = resolve7(input.worktreePath, input.filePath);
   if (!input.featureSlug) {
     return {
       reason: `This ${input.kind} session does not edit files \u2014 it runs in the developer's own ` + "checkout. Record what you establish with the `record_finding` MCP tool, and ask the " + "human to make any change to the repo itself."
     };
   }
   const docs = featureDocsRel(input.featureSlug);
-  const docsDir = resolve7(input.worktreePath, docs);
-  const target = resolve7(input.worktreePath, input.filePath);
-  const rel = relative2(docsDir, target);
-  if (rel === "" || !rel.startsWith("..") && !isAbsolute(rel))
+  if (within(resolve7(input.worktreePath, docs), target))
     return null;
   return {
     reason: `Talk sessions do not write code. This ${input.kind} session may only write this ` + `feature's docs under \`${docs}/\` \u2014 ${input.filePath} is outside them. The change you ` + "want belongs in a ticket: capture the decision in `decisions.md`, amend `spec.md`, and " + "emit a ticket for the work. An implementation agent burns it in its own sandbox."
   };
 }
+function within(dir, target) {
+  const rel = relative2(dir, target);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
 function editDenyResponse(denial) {
   return {
     hookSpecificOutput: {
@@ -7285,6 +7521,28 @@ var init_update_check = __esm(() => {
   NPM_LATEST_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
 });
 
+// src/shutdown.ts
+function createShutdown(deps, timeoutMs = SHUTDOWN_TIMEOUT_MS) {
+  let settling = false;
+  return () => {
+    if (settling) {
+      deps.exit(1);
+      return;
+    }
+    settling = true;
+    (async () => {
+      const deadline = new Promise((resolve9) => {
+        const timer = setTimeout(resolve9, timeoutMs);
+        timer.unref?.();
+      });
+      await Promise.race([deps.killAllTrees().catch(() => {}), deadline]);
+      deps.stop();
+      deps.exit(0);
+    })();
+  };
+}
+var SHUTDOWN_TIMEOUT_MS = 5000;
+
 // src/trpc/context.ts
 import { initTRPC } from "@trpc/server";
 var t, errorMapping, router, publicProcedure, createCallerFactory;
@@ -7345,13 +7603,16 @@ function serverUrlFor(config2) {
 function noCodeRule(docs) {
   return `- **Talk sessions do not write code.** You may write this feature's docs under \`${docs}/\` ` + "and nothing else in this checkout. Every code change rides a ticket, burned by an " + "implementation agent in its own sandbox \u2014 even the one-line fix that is obviously faster " + "to just do. This is enforced by a hook, not left to your judgement: edits outside the docs " + "are denied.";
 }
-function renderSystemPrompt(feature, kind, waypoint, lap) {
+function conflictResolutionRule() {
+  return "- **This session resolves a merge conflict, so it DOES write code here.** Edit the " + "conflicted files in this checkout, resolving them from the feature docs\u2019 intent, and " + "commit the merge. That is the exception and its whole extent: the edit guard exempts " + "writes only while the merge is in progress, so work the merge revealed but did not " + "cause still rides a ticket.";
+}
+function renderSystemPrompt(feature, kind, waypoint, lap, purpose) {
   if (kind === "waypoint")
     return renderWaypointPrompt(feature, waypoint);
   if (kind === "converge")
     return renderConvergePrompt(feature);
   if (kind === "revisit")
-    return renderRevisitPrompt(feature, lap);
+    return renderRevisitPrompt(feature, lap, purpose);
   const docs = featureDocsRel(feature.slug);
   const entry = kind === "ideation" ? "Begin by invoking the `/runcastle:ideate` skill and drive the ideation session to completion." : "This is a Q&A session: invoke `/runcastle:qa`. Answer questions from the docs + code. Do NOT advance phases or emit tickets.";
   return [
@@ -7480,7 +7741,7 @@ function renderConvergePrompt(feature) {
   ].join(`
 `);
 }
-function renderRevisitPrompt(feature, lap) {
+function renderRevisitPrompt(feature, lap, purpose) {
   const docs = featureDocsRel(feature.slug);
   const lapIteration = lap ? [
     `## This is lap ${lap}`,
@@ -7550,7 +7811,7 @@ function renderRevisitPrompt(feature, lap) {
     lap ? "- DO call `complete_phase` \u2014 this lap advances ideation \u2192 spec \u2192 tickets, and only you can." : "- Do NOT call `complete_phase` \u2014 a revisit never moves the pipeline.",
     "- Do NOT touch `done`/`burning` tickets; if done work is now wrong, emit a new ticket that fixes it.",
     "- Docs first, tickets second: capture the decision prose before any ticket surgery.",
-    noCodeRule(docs),
+    purpose === "resolve-conflict" ? conflictResolutionRule() : noCodeRule(docs),
     "",
     "## Your task",
     "Invoke the `/runcastle:revisit` skill and work through what the human brings up.",
@@ -7708,7 +7969,8 @@ function renderProjectPrompt(brief) {
     "- `get_project_context()` \u2014 the project, its charter, its live ADRs, and a one-line",
     "  index of every feature.",
     "- `get_work_record({ featureSlug? | seam? })` \u2014 what features actually did: tickets by",
-    "  status, seams, commits, errors. Facts, never intent.",
+    "  status, seams, commits, errors, and each burner's digest of what it actually did,",
+    "  what surprised it and what it left undone. Facts, never intent.",
     "- `record_event({ type, message })` \u2014 drop a note on the project timeline.",
     "",
     "Every merged feature's docs are already on disk in this worktree \u2014 read them with your",
@@ -7757,13 +8019,13 @@ function renderMcpConfig(session, config2) {
   };
 }
 async function writeSessionArtifacts(input) {
-  const { session, feature, config: config2, waypoint, prepare, projectBrief, lap } = input;
+  const { session, feature, config: config2, waypoint, prepare, projectBrief, lap, purpose } = input;
   const dir = sessionDir(session.id);
   mkdirSync7(dir, { recursive: true });
   const systemPromptPath = join13(dir, "system-prompt.md");
   const settingsPath = join13(dir, "settings.json");
   const mcpConfigPath = join13(dir, "mcp.json");
-  const systemPrompt = feature ? renderSystemPrompt(feature, session.kind, waypoint, lap) : prepare ? renderPreparePrompt(prepare) : projectBrief ? renderProjectPrompt(projectBrief) : (() => {
+  const systemPrompt = feature ? renderSystemPrompt(feature, session.kind, waypoint, lap, purpose) : prepare ? renderPreparePrompt(prepare) : projectBrief ? renderProjectPrompt(projectBrief) : (() => {
     throw new Error(`session ${session.id} has no feature and no project-session brief`);
   })();
   writeFileSync3(systemPromptPath, systemPrompt, "utf8");
@@ -7886,8 +8148,10 @@ function assertSpawnable(ctx, feature, excludeSessionId) {
   }
 }
 function sessionFinished(ctx, feature, session) {
-  if (session.kind !== "waypoint")
+  if (session.kind === "ideation" || session.kind === "converge")
     return feature.mapped;
+  if (session.kind !== "waypoint")
+    return false;
   const own = listByFeature(ctx, feature.id).find((w) => w.lastSessionId === session.id);
   return !!own && (own.status === "resolved" || own.status === "dropped");
 }
@@ -7926,6 +8190,7 @@ async function ensureWorktree(ctx, project, feature) {
 }
 async function launchSession(ctx, input, opts = {}) {
   const feature = getFeatureRow(ctx, input.featureId);
+  requireNotDraft(feature);
   const project = projectForFeature(ctx, feature);
   const worktreePath = await ensureWorktree(ctx, project, feature);
   const session = createSessionRow(ctx, {
@@ -8008,7 +8273,8 @@ async function launchSession(ctx, input, opts = {}) {
     project,
     config: ctx.config,
     waypoint,
-    lap: plan.lap
+    lap: plan.lap,
+    purpose: input.purpose
   });
   const serverUrl = serverUrlFor(ctx.config);
   const buildInput = {
@@ -8108,7 +8374,7 @@ async function launchProjectSession(ctx, input, opts = {}) {
   if (live) {
     throw new GateError(`a project session is already open for ${project.name} \u2014 resume or end it first`);
   }
-  const worktreePath = await ensureProjectWorktree(project);
+  const worktreePath = await ensureProjectWorktree(project, (res) => reportProjectLanding(ctx, project, res, { retried: true }));
   const session = createSessionRow(ctx, {
     projectId: project.id,
     kind: "project",
@@ -8179,6 +8445,7 @@ async function buildPrepareBrief(ctx, project) {
 }
 async function workWaypoint(ctx, input, opts = {}) {
   const feature = getFeatureRow(ctx, input.featureId);
+  requireNotDraft(feature);
   if (!feature.mapped) {
     throw new GateError(`feature ${feature.slug} is not mapped \u2014 it has no waypoints to work`);
   }
@@ -8199,6 +8466,7 @@ async function workWaypoint(ctx, input, opts = {}) {
 }
 async function converge(ctx, input, opts = {}) {
   const feature = getFeatureRow(ctx, input.featureId);
+  requireNotDraft(feature);
   if (!feature.mapped) {
     throw new GateError(`feature ${feature.slug} is not mapped \u2014 convergence is only for mapped features`);
   }
@@ -8297,6 +8565,8 @@ function spawnEmbeddedPty(ctx, feature, session, worktreePath, serverUrl, claude
       opts: { cwd: worktreePath, env, cols: 80, rows: 24, useConpty: true },
       onExit: ({ exitCode }) => handlePtyExit(ctx, feature, session, meta, exitCode)
     });
+    if (feature)
+      startDocsWatch(ctx, feature);
     emitForSession(ctx, session, {
       type: "session.launched",
       message: "embedded terminal spawned",
@@ -8323,10 +8593,12 @@ var init_launcher = __esm(() => {
   init_errors();
   init_end_session();
   init_registry();
+  init_docs_watch();
   init_events();
   init_gates();
   init_git();
   init_repo();
+  init_features();
   init_tickets();
   init_waypoints();
   init_runner();
@@ -8348,6 +8620,74 @@ var init_launcher = __esm(() => {
   ];
 });
 
+// src/services/outcome.ts
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync4 } from "fs";
+import { join as join15 } from "path";
+function composeOutcomeDoc(feature, tickets2, shippedAt) {
+  const blocks = [
+    `# Outcome \u2014 ${feature.title}`,
+    feature.oneLiner,
+    [`- Shipped: ${shippedDate(shippedAt)}`, `- Lap: ${feature.lap}`].join(`
+`)
+  ];
+  let oneLiners = [];
+  const flush = () => {
+    if (oneLiners.length > 0)
+      blocks.push(oneLiners.join(`
+`));
+    oneLiners = [];
+  };
+  for (const ticket of [...tickets2].sort((a, b) => a.seq - b.seq)) {
+    if (ticket.status === "done") {
+      flush();
+      blocks.push(`## ${ticket.seq}. ${ticket.title}`, ticket.digest?.trim() || NO_DIGEST);
+    } else {
+      oneLiners.push(oneLineEntry(ticket));
+    }
+  }
+  flush();
+  return `${blocks.join(`
+
+`)}
+`;
+}
+function shippedDate(shippedAt) {
+  return new Date(shippedAt).toISOString().slice(0, 10);
+}
+function oneLineEntry(ticket) {
+  const headline = errorHeadline3(ticket.error ?? "");
+  return `- **${ticket.seq}. ${ticket.title}** \u2014 ${ticket.status}${headline ? `: ${headline}` : ""}`;
+}
+function errorHeadline3(error) {
+  const lines = error.split(`
+`).map((l) => l.trim()).filter(Boolean);
+  const causes = lines.filter((l) => /^(fatal|error):/i.test(l));
+  const headline = causes.at(-1) ?? lines[0] ?? "";
+  return headline.length > HEADLINE_MAX ? `${headline.slice(0, HEADLINE_MAX)}\u2026` : headline;
+}
+async function promoteOutcomeDoc(ctx, project, feature) {
+  try {
+    const worktreePath = await ensureTalkWorktree(project, feature);
+    const docsDir = join15(worktreePath, ...featureDocsRel(feature.slug).split("/"));
+    mkdirSync8(docsDir, { recursive: true });
+    const doc = composeOutcomeDoc(feature, listByFeature2(ctx, feature.id), Date.now());
+    writeFileSync4(join15(docsDir, "outcome.md"), doc, "utf8");
+    await commitDocs(worktreePath, `runcastle: outcome for ${feature.slug}`);
+  } catch (e) {
+    emit(ctx, feature.id, {
+      type: "docs.outcome_failed",
+      message: `outcome.md not promoted: ${e instanceof Error ? e.message : String(e)}`
+    });
+  }
+}
+var NO_DIGEST = "_no digest captured_", HEADLINE_MAX = 160;
+var init_outcome = __esm(() => {
+  init_paths();
+  init_events();
+  init_git();
+  init_tickets();
+});
+
 // src/trpc/routers/feature.ts
 import * as z6 from "zod";
 var gateId, featureRouter;
@@ -8359,6 +8699,7 @@ var init_feature = __esm(() => {
   init_features();
   init_gates();
   init_git();
+  init_outcome();
   init_repo();
   init_context();
   gateId = z6.enum(["G1", "G2", "G3", "G4", "G5"]);
@@ -8367,8 +8708,10 @@ var init_feature = __esm(() => {
       projectId: z6.string(),
       title: z6.string().min(1),
       oneLiner: z6.string(),
-      baseBranch: z6.string().optional()
+      baseBranch: z6.string().optional(),
+      draft: z6.boolean().optional()
     })).mutation(({ ctx, input }) => createFeature(ctx, input)),
+    start: publicProcedure.input(z6.object({ featureId: z6.string(), baseBranch: z6.string().optional() })).mutation(({ ctx, input }) => startDraft(ctx, input.featureId, { baseBranch: input.baseBranch })),
     quickChange: publicProcedure.input(z6.object({
       projectId: z6.string(),
       title: z6.string().min(1),
@@ -8402,6 +8745,7 @@ var init_feature = __esm(() => {
     burn: publicProcedure.input(z6.object({ featureId: z6.string(), model: z6.string().min(1).optional() })).mutation(({ ctx, input }) => burn(ctx, input.featureId, { modelOverride: input.model })),
     testDrive: publicProcedure.input(z6.object({ featureId: z6.string(), action: z6.enum(["start", "stop"]) })).mutation(async ({ ctx, input }) => {
       const feature = getFeatureRow(ctx, input.featureId);
+      requireNotDraft(feature);
       const project = projectForFeature(ctx, feature);
       return testDrive(ctx, project, feature, input.action);
     }),
@@ -8412,10 +8756,12 @@ var init_feature = __esm(() => {
     }),
     merge: publicProcedure.input(z6.object({ featureId: z6.string() })).mutation(async ({ ctx, input }) => {
       const feature = getFeatureRow(ctx, input.featureId);
+      requireNotDraft(feature);
       const project = projectForFeature(ctx, feature);
       if (activeTestDriveFeatureId() === feature.id) {
         await testDrive(ctx, project, feature, "stop");
       }
+      await promoteOutcomeDoc(ctx, project, feature);
       const res = await mergeFeature(project, feature);
       if (res.ok) {
         setPhase(ctx, input.featureId, "shipped", "feature.shipped", `merged to ${res.target}`);
@@ -8435,7 +8781,7 @@ var init_feature = __esm(() => {
 // src/services/fsbrowse.ts
 import { existsSync as existsSync15, readdirSync as readdirSync5, statSync as statSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename, dirname as dirname8, isAbsolute as isAbsolute2, join as join15, resolve as resolve10, sep as sep3 } from "path";
+import { basename, dirname as dirname8, isAbsolute as isAbsolute2, join as join16, resolve as resolve10, sep as sep3 } from "path";
 function expandPath(input, home = homedir2()) {
   const trimmed = input.trim();
   if (trimmed === "")
@@ -8444,12 +8790,12 @@ function expandPath(input, home = homedir2()) {
   if (out === "~")
     out = home;
   else if (out.startsWith("~/") || out.startsWith("~\\"))
-    out = join15(home, out.slice(2));
+    out = join16(home, out.slice(2));
   return resolve10(out);
 }
 function looksLikeRepo(dir) {
   try {
-    return existsSync15(join15(dir, ".git"));
+    return existsSync15(join16(dir, ".git"));
   } catch {
     return false;
   }
@@ -8471,7 +8817,7 @@ function listRoots(home = homedir2()) {
     roots.push({ label: "Home", path: home, kind: "home" });
   const seen = new Set(roots.map(pathKey));
   for (const name of COMMON_DIRS) {
-    const candidate = join15(home, name);
+    const candidate = join16(home, name);
     const key = pathKey({ path: candidate });
     if (seen.has(key) || !existsSync15(candidate))
       continue;
@@ -8532,7 +8878,7 @@ function browseDir(input, showHidden = false, home = homedir2()) {
       continue;
     if (!showHidden && name.startsWith("."))
       continue;
-    const path = join15(dir, name);
+    const path = join16(dir, name);
     const isSymlink = dirent.isSymbolicLink();
     if (isSymlink && !showHidden)
       continue;
@@ -8570,7 +8916,7 @@ var init_fsbrowse = __esm(() => {
 
 // src/services/projects.ts
 import { existsSync as existsSync16 } from "fs";
-import { basename as basename2, join as join16 } from "path";
+import { basename as basename2, join as join17 } from "path";
 import { eq as eq12, isNull } from "drizzle-orm";
 function listProjects(ctx) {
   return ctx.db.select().from(projects).where(isNull(projects.closedAt)).all().map(rowToProject);
@@ -8594,7 +8940,7 @@ async function openProject(ctx, rawPath) {
   const existing = getProjectByRepoPath(ctx, repoPath) ?? findProjectByCanonPath(ctx, repoPath);
   if (existing) {
     ctx.db.update(projects).set({ mainBranch, repoPath, closedAt: null }).where(eq12(projects.id, existing.id)).run();
-    const reopened = { ...existing, mainBranch, repoPath };
+    const reopened = { ...existing, mainBranch, repoPath, closedAt: undefined };
     emitProject(ctx, existing.id, {
       type: "project.opened",
       message: `project ${existing.name} re-opened at ${repoPath} (${mainBranch})`
@@ -8651,7 +8997,7 @@ async function assertRepoTolerant(ctx, repoPath) {
   } catch (e) {
     if (!isNotImplemented(e))
       throw e;
-    if (!existsSync16(join16(repoPath, ".git"))) {
+    if (!existsSync16(join17(repoPath, ".git"))) {
       throw new InvalidInputError(`not a git repository: ${repoPath}`);
     }
   }
@@ -8716,7 +9062,8 @@ var init_run = __esm(() => {
   runRouter = router({
     get: publicProcedure.input(z8.object({ runId: z8.string() })).query(({ ctx, input }) => getRunRow(ctx, input.runId)),
     agentTranscript: publicProcedure.input(z8.object({ ticketId: z8.string(), after: z8.number().int().optional() })).query(({ input }) => readTranscript(input.ticketId, input.after ?? -1)),
-    cancel: publicProcedure.input(z8.object({ runId: z8.string() })).mutation(({ input }) => {
+    cancel: publicProcedure.input(z8.object({ runId: z8.string() })).mutation(({ ctx, input }) => {
+      getRunRow(ctx, input.runId);
       cancelRun(input.runId);
       return { ok: true };
     })
@@ -8724,7 +9071,7 @@ var init_run = __esm(() => {
 });
 
 // src/services/settings.ts
-import { existsSync as existsSync17, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "fs";
 import { dirname as dirname9 } from "path";
 import * as z9 from "zod";
 import { eq as eq13 } from "drizzle-orm";
@@ -8871,8 +9218,8 @@ function updateSettings(ctx, input, io = {}) {
 function writeGlobal(configFile, configKey, value) {
   const raw = readRawConfig(configFile);
   raw[configKey] = value;
-  mkdirSync8(dirname9(configFile), { recursive: true });
-  writeFileSync4(configFile, `${JSON.stringify(raw, null, 2)}
+  mkdirSync9(dirname9(configFile), { recursive: true });
+  writeFileSync5(configFile, `${JSON.stringify(raw, null, 2)}
 `);
 }
 function updateStepModel(ctx, input, configFile, io) {
@@ -8910,8 +9257,8 @@ function writeStepModel(configFile, step, value) {
   else
     stepModels[step] = value;
   raw.stepModels = stepModels;
-  mkdirSync8(dirname9(configFile), { recursive: true });
-  writeFileSync4(configFile, `${JSON.stringify(raw, null, 2)}
+  mkdirSync9(dirname9(configFile), { recursive: true });
+  writeFileSync5(configFile, `${JSON.stringify(raw, null, 2)}
 `);
 }
 function field(view, key) {
@@ -9148,11 +9495,11 @@ async function gitIdentityProbe(exec, cwd) {
 async function containerRuntimeProbe(exec) {
   const id = "container-runtime";
   const label = "Container runtime (Docker / Podman)";
-  const docker3 = await exec("docker", ["--version"]);
-  if (docker3.ok && docker3.code === 0) {
+  const docker2 = await exec("docker", ["--version"]);
+  if (docker2.ok && docker2.code === 0) {
     const info = await exec("docker", ["info"]);
     if (info.ok && info.code === 0) {
-      return { id, label, tier: 2, status: "ok", detail: docker3.stdout.trim() || "docker healthy" };
+      return { id, label, tier: 2, status: "ok", detail: docker2.stdout.trim() || "docker healthy" };
     }
     return {
       id,
@@ -9288,8 +9635,8 @@ var init_system_exec = __esm(() => {
 });
 
 // src/services/setup.ts
-import { copyFileSync, existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync9, readdirSync as readdirSync6, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname10, join as join17 } from "path";
+import { copyFileSync, existsSync as existsSync18, mkdirSync as mkdirSync10, readFileSync as readFileSync9, readdirSync as readdirSync6, writeFileSync as writeFileSync6 } from "fs";
+import { dirname as dirname10, join as join18 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 async function writeGitIdentity(exec, identity) {
   const name = identity.name.trim();
@@ -9367,11 +9714,11 @@ function resolveSandcastleBin() {
     const mainUrl = import.meta.resolve("@ai-hero/sandcastle");
     let dir = dirname10(fileURLToPath7(mainUrl));
     for (let hops = 0;hops < 6; hops++) {
-      const manifestPath = join17(dir, "package.json");
+      const manifestPath = join18(dir, "package.json");
       if (existsSync18(manifestPath)) {
         const manifest = JSON.parse(readFileSync9(manifestPath, "utf8"));
         if (manifest.name === "@ai-hero/sandcastle" && manifest.bin?.sandcastle) {
-          return join17(dir, manifest.bin.sandcastle);
+          return join18(dir, manifest.bin.sandcastle);
         }
       }
       const parent = dirname10(dir);
@@ -9399,18 +9746,18 @@ function sandcastleTemplateDir() {
   return resolveAsset(ASSET_ENV.sandcastleTemplate, fileURLToPath7(new URL("../assets/sandcastle", import.meta.url)));
 }
 function scaffoldSandcastleConfig(templateDir, targetDir) {
-  const dir = join17(targetDir, ".sandcastle");
+  const dir = join18(targetDir, ".sandcastle");
   if (existsSync18(dir))
     return { scaffolded: false, dir };
-  mkdirSync9(dir, { recursive: true });
+  mkdirSync10(dir, { recursive: true });
   for (const name of readdirSync6(templateDir)) {
-    copyFileSync(join17(templateDir, name), join17(dir, name));
+    copyFileSync(join18(templateDir, name), join18(dir, name));
   }
   return { scaffolded: true, dir };
 }
 function prepareSandboxBuildContext() {
   const target = sandboxBuildDir();
-  mkdirSync9(target, { recursive: true });
+  mkdirSync10(target, { recursive: true });
   scaffoldSandcastleConfig(sandcastleTemplateDir(), target);
   return target;
 }
@@ -9448,8 +9795,8 @@ function fileAfkTokenIo(exec) {
   return {
     read: () => existsSync18(path) ? readFileSync9(path, "utf8") : "",
     write: (content) => {
-      mkdirSync9(dirname10(path), { recursive: true });
-      writeFileSync5(path, content, "utf8");
+      mkdirSync10(dirname10(path), { recursive: true });
+      writeFileSync6(path, content, "utf8");
     },
     verify: createTokenVerifier(exec)
   };
@@ -9515,11 +9862,11 @@ var init_system = __esm(() => {
 });
 
 // src/services/test-notes.ts
-import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync11, writeFileSync as writeFileSync7 } from "fs";
 import { dirname as dirname11 } from "path";
 import { asc as asc4, eq as eq14 } from "drizzle-orm";
 function rowToNote(row) {
-  return {
+  return TestNote.parse({
     id: row.id,
     featureId: row.featureId,
     lap: row.lap,
@@ -9528,7 +9875,7 @@ function rowToNote(row) {
     ticketId: row.ticketId ?? undefined,
     createdAt: row.createdAt,
     updatedAt: row.updatedAt
-  };
+  });
 }
 function getNote(ctx, id) {
   const row = ctx.db.select().from(testNotes).where(eq14(testNotes.id, id)).get();
@@ -9661,8 +10008,8 @@ function renderTestNotes(ctx, feature) {
       lines.push(noteLine(ctx, note));
   }
   const path = featureDocPath(projectForFeature(ctx, feature), feature, "test-notes.md");
-  mkdirSync10(dirname11(path), { recursive: true });
-  writeFileSync6(path, `${lines.join(`
+  mkdirSync11(dirname11(path), { recursive: true });
+  writeFileSync7(path, `${lines.join(`
 `)}
 `, "utf8");
 }
@@ -9853,6 +10200,8 @@ async function startServer() {
   }
   const server = Bun.serve({
     port: config2.serverPort,
+    hostname: SERVE_HOSTNAME,
+    idleTimeout: SERVE_IDLE_TIMEOUT_SECONDS,
     fetch(req, srv) {
       if (tryUpgradeTerminal(req, srv))
         return;
@@ -9866,11 +10215,11 @@ async function startServer() {
   const g = globalThis;
   if (!g[SHUTDOWN_KEY]) {
     g[SHUTDOWN_KEY] = true;
-    const shutdown = () => {
-      ptyRegistry().killAll();
-      server.stop();
-      process.exit(0);
-    };
+    const shutdown = createShutdown({
+      killAllTrees: () => ptyRegistry().killAllTrees(),
+      stop: () => server.stop(),
+      exit: (code) => process.exit(code)
+    });
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
   }