tldr-experts 0.30.0 → 0.31.0

package/CHANGELOG.md

@@ -1,5 +1,203 @@
 # Changelog
 
+## 0.31.0 — 2026-09-16
+
+### Added
+
+- **A `[src:]` citation on a Watch card that only has a punctuation slip — the marker missing its
+  space, a token sitting mid-sentence, an ASCII `->` in place of the real arrow — is repaired
+  locally, for $0.00, before the card is judged, instead of failing the stage over formatting a
+  script already knew how to fix (#345, watch-card half). Measured over two field audits: 10 of 54
+  failed tasks across 22 runs in one workspace were malformed watch cards — caught only after a
+  full paid turn wrote the card, by the same `parseWatcherCard` this repair now runs ahead of.
+  `repairSrcSyntax` (`src/core/text/srcToken.ts`) only accepts a fix it can VERIFY
+  re-parses clean (mirrors `parseYamlRepairing`'s own rule) and only touches the three rules that
+  are pure syntax — `marker-spelling`, `trailing-position`, `cmd-arrow` — never a rule that would
+  need an invented line number, path or fact id (AGENTS.md §7). The repair is written back to disk
+  whether or not the card ends up valid, and it is never silent: named in the stage's own report
+  when it clears the card, and in the failure reason when a genuine defect remains — the file on
+  disk already carries the fix, so a retry's `previousCard` prompt (`watchPrompt.ts`) shows a writer
+  only the part a script could not repair (owner decision 2026-09-15: auto-repair is visible, never
+  silent).
+
+- **`how` is skipped when the seed already declares its own technical solution, and `plan` reads
+  that section instead (#346).** Owner decision, measured against three samples where `how`
+  reworked a seed that already carried the answer: 11.4-45% of a run's spend and 43-53% of its
+  own bytes went unread downstream. The trigger is one exact, documented marker — an H2 `##
+  Solution` or `## Technical approach` in a seed document — never inferred from prose:
+  `src/core/facilitator/seedSolution.ts` reuses `seed/seedClaims.ts`'s fence-aware heading reader
+  rather than a second regex, and exposes it to the existing `skip_if` grammar as a new
+  `seed_solution` predicate (`skipIf.ts`, `(stories|repos|questions|seed_solution)<op>N`). Since no
+  shipped `workflows/*.yml` uses the §2.4 record shape a workflow-level `skip_if` needs, a stage's
+  own top-level `skip_if:` in `stage.yml` is now read as its built-in default when the workflow
+  names none (`stageSpec.ts`'s `overlay`, a workflow's own `skip_if` for that stage id still wins);
+  the shipped `stages/how/stage.yml` sets `skip_if: "seed_solution==1"` this way. The skip is
+  recorded exactly like any other `skip_if` (`stage.skipped`, named on the run), and — because this
+  is the one skip that would otherwise leave `plan` reading a `02-how/design.md` that silently
+  looks empty — `tldrx next` additionally materialises that file from the seed's declared section
+  verbatim, cited back to the seed, the moment the skip fires.
+
+- **A failed sub-agent turn now carries a named `failure_kind`** — `timeout`, `rate_limit`
+  (reusing #298's own quota-frame detection), `process_killed`, `empty_result`, `non_zero_exit`,
+  `result_error`, `malformed_result`, or `unclassified` (with the raw signal still in `error`) —
+  on the task row and the `agent.result` event, additive and absent on every ordinary/successful
+  turn and on a read-cap kill (`stopped_by` already names that one). `result_error` is
+  `non_zero_exit`'s exitCode-0 sibling (pre-merge review, 2026-09-15): the result document itself
+  reports `is_error: true` with a named reason while the process exited `0`, which used to read
+  `non_zero_exit` — a label contradicting its own exit code. Measured, one field audit (workspace
+  B, 2026-09-15): 24 of 54 failed tasks in that sample were an undifferentiated "timeout / generic
+  error" — the largest single bucket, unnamed until now. Classification only: no new retry
+  budgets, and nothing decides a retry off this field (#348, the family of #341/#298).
+
+### Changed
+
+- **`watch` now follows `build`'s gate policy in every shipped scope where `build` is already
+  `auto` — `feature`, `bugfix`, `integration`, `refactor` and `performance` (#349, owner decision
+  2026-09-16).** Every one of these scopes shipped `build: auto` with `watch: human` regardless,
+  so a run that trusted Build's own auto-gate still stopped a person at the very next stage over
+  a transcription job with a validator behind it. The reasoning is field evidence, not a guess:
+  auto-gating `what`/`how`/`plan` in a real workspace since 2026-09-12 produced zero measured
+  auto-gate incidents across 26 runs (77 `gate.rejected`, 100% human, 0 auto-rejections). The
+  mechanism is unchanged — `evaluateAutoGate` (`src/core/run/autoGate.ts`) already closes any
+  stage's gate the same way once its policy is `auto`, and a self-signed `watch` gate is
+  announced through the exact same `gate.requested`/`gate.approved`/`stage.done` events an
+  auto-signed `what`/`how`/`plan` gate already is — this does not widen the notify-window gap
+  tracked separately in #250, it only extends the existing behavior to one more stage. `upgrade`
+  is the one shipped scope excluded: `what`/`plan`/`build` are already all `auto` there, and
+  following `build` would leave it with no human gate at all, which spec.md's "no all-auto
+  preset" guarantee forbids — its `watch` stays `human`. `hotfix`/`security-patch`/`migration`
+  are unaffected: their `build` gate is `human`, so the "build already signed" condition never
+  applies. The tutorial's attended chapter (`tldrx learn`, chapter 7) ran its `next --commit` on
+  a `feature`-scope run expecting the Watch gate to still stop it (`expectExit: [4]`) — now that
+  `watch` self-signs there, the chapter sets it back to `human` explicitly first
+  (`run gates set watch:human --note …`), because the lesson is the attended human handoff, not
+  the shipped default.
+
+- **`how`'s default model is `sonnet`, not `opus`** (#346). Owner decision, measured across a
+  single-run analysis and two workspace audits: `how` cost $10.40-$269.90 per sample, 11.4-45% of
+  the run's total spend. A workspace or a single invocation that wants the strong model back
+  overrides it exactly as before — `.tldrx/stages/how/stage.yml` with `model: opus`, or
+  `tldrx next --model opus` / `tldrx run auto --model opus` for one invocation.
+
+- **`how` stops generating `risks.md`** (#350). Owner decision 2026-09-16 — "stop generating,"
+  not "generate and drop from the bundle" — because nothing downstream ever read it: measured
+  on a real run, `risks.md` (8,025 bytes) was excluded by `stages/plan/stage.yml`'s own
+  `inputs:` (only `design.md`, `contracts.md`, `test-strategy.md`) and a repo-wide grep found no
+  other reader. `handoff.md` and `questions.md` are unchanged — they carry no bundle content
+  either, but they are load-bearing elsewhere (the auto gate, `claim-sources`, `boundary`'s
+  `SURFACE_HANDOFFS`, the dashboard). `validateOutputs` only ever checks the DECLARED output
+  list, so a run directory written before this change that still has `02-how/risks.md` on disk
+  is unaffected — the file is simply not asked for anymore, never flagged as missing or
+  re-demanded on resume.
+
+### Fixed
+
+- **A headless turn whose parent `tldrx` process is SIGKILL-class killed mid-spawn now banks its
+  cost as unmetered rather than nowhere at all (#337, the remaining half of #246).** #246's field
+  case: a `run auto` process died while blocked in `spawnAgent`'s `await` (`runNext.ts`); the
+  orphaned `claude` child kept running to completion, but `run.yml`'s `budget.spent_usd` stayed
+  `0.00` forever, because `demoteStaleRunning` — the code that finds the dead `.lock` and puts the
+  stage back to `ready` — wrote no task row for that attempt at all, not even an unmetered one. A
+  confident `0.00` for money a provider may really have charged is the one answer AGENTS.md §7
+  rules out. `demoteStaleRunning` now reads `startedHeadless` (`run/lastStart.ts`, the one
+  derivation of which mode opened a stage's last turn — already used by the Ctrl-C path) and, for
+  a genuinely orphaned HEADLESS spawn (never a `--prepare` bundle waiting for a human, and never a
+  Build executor phase, both of which are `preparedRefusal`'s and the executor's own business),
+  records a `status: "failed"` task with `cost_usd: null, metered: false` and
+  `error: "turn outlived its parent; no result line was read"` before demoting the stage — so
+  `spendBasis`/`tallyOf` (the one derivation, unchanged) count it as a LOWER BOUND, and `run
+  status`/`budget show`/the dashboard say so instead of printing a silent `$0.00`.
+
+- **`run auto` now names `--wait-gates` as the fix, at the moment an all-`auto` gate's only
+  blocking questions are answered but nothing will sign it (#342).** Measured live on a
+  `--gates none --questions none` run launched with no `--wait-gates`/`--wait-answers`: the
+  loop answers a blocking question itself (`questions_policy: recommended`) or once
+  `--wait-answers` polls one in, but the ONLY thing that ever self-closes a parked `auto`
+  gate is `selfCloseAutoGate`, reached only from `waitForGate`'s poll — so the next `next`
+  call reports the stage as `awaiting_gate` with a generic `gate pending: tldrx approve`,
+  never saying the gate would have closed itself with one more flag. `settleDeferredGate`
+  (`runAuto.ts`) now says so, by name, at the exact moment the gap is decided. The deeper fix
+  — `next` re-evaluating a parked `auto` gate on its own, so this holds even for a `next`
+  launched by hand — is recommendation (1) on the issue and stays open there; it touches
+  `runNext.ts`, out of scope for this change.
+
+- **The base-tree DoD refusal now names the workspace's own declared `install:` as the fix
+  (#343).** Measured on a fresh clone where a multi-step installer had only partly run: the
+  refusal reported `eslint`/`tsc`/`vitest` all `command not found`, identical in shape to a
+  genuinely broken repo, even though the same `WorkspaceContext` the refusal already reads
+  carries the workspace's own `install:` line. `baseRefusalLines` (`preflight.ts`) now names
+  it, once per repo — never runs it: running an installer against the operator's own
+  checkout, unasked, ahead of a refusal that has not yet told them anything, is exactly the
+  side effect the base-measurement design already avoids for gate commands. The zero-touch
+  first-run guide (EN/ES) now says explicitly to run the declared `install:` in the checkout
+  itself before the first `run auto`, not only in a story's worktree.
+
+- **`run status` now warns NO-RETRY on a phase that cannot afford a second attempt of its own
+  stage, not only `budget show` (#232).** The narrowed #232 asked for this at both screens;
+  `budget show` shipped it in `bd19763`/`efb4eee` and this closes the other half. `run status`
+  computed no retry verdict at all, so a pre-#170 run (sized for exactly one attempt) read every
+  phase as an ordinary progress bar right up to the refusal — the exact "operator discovers it at
+  the retry" failure the issue is about, just on the screen that gets opened more often. Shares
+  the one `retrySizing` derivation and the one `NO-RETRY` sentence (`noRetryBlock`, now exported
+  from `budgetView.ts`) that `budget show` already used, so the two screens cannot disagree about
+  the same measured shortfall. `buildStatus` takes an optional `root` (both CLI and `run auto`'s
+  heartbeat now pass it) to resolve the next stage's own `attempts:` the same tolerant way
+  `budget show` does; omitted, it falls back to the shipped default, so a caller that does not pass
+  it behaves exactly as before.
+
+- **A fix list dispositioned away from `fix-now` by hand, after the story already parked `review`
+  behind it, now settles `done` with no agent spawned instead of buying a fresh developer round and
+  a full DoD re-run for nothing (#218).** Measured live: a reviewer signed `fixlist` with an open
+  finding, parking the story at `review`; the finding was later re-routed away from `fix-now`
+  outside the audited auto-close (which only ever closes what a spawned reviewer's approve was
+  shown); nothing else re-read the file, so the next `--prepare`/headless pass read `fixlistFor`'s
+  unnamed door returning `null` (0 open — correctly, it is not to be re-rendered) as "no fix list
+  ever happened" and dispatched a plain developer bundle for a story nothing faulted — one
+  developer task and one full DoD re-run over an unchanged tree. `closedFixlistCandidates` /
+  `settleClosedFixlists` (gh #329's pre-pass) now also recognizes a `review` story parked on a spent
+  `fixlist` verdict, alongside the `blocked`/`approve` shape it already settled, and asks
+  `openFixNow` before either. `--fixlist <path>` naming a file with 0 open findings is now a refusal
+  that names the file and the count, not a silent downgrade to a bundle.
+
+- **A fix list the parser could not fully read — a typo'd `Disposition:` word, or a round file
+  emptied by a crash or a disk-full write — can no longer settle a story `done` (#218, pre-merge
+  review).** Reviewer-measured: `**fix-now**` mistyped `**fix-noww**` is silently dropped by
+  `parseFixlistFile` (by design — a heading with no readable disposition is not a finding, and
+  inventing `fix-now` for it would block a story over a typo), so `openFindings(...).length` read 0
+  exactly as it would for a genuinely closed round, and a plain `--prepare` settled the story `done`
+  with no spawn and no re-review over a live, undetected defect. `parseFixlistFile`'s parse now also
+  reports what it could not read (`unreadableFindings`/`fixlistFullyParsed`, `fixlist.ts`), and
+  `openFixNow`/`closedFixlistCandidates` (both the `blocked`/`approve` shape and the `review`/
+  `fixlist` shape above share this one check) hold rather than settle when a round parsed
+  uncleanly, naming the exact heading and line that could not be read.
+
+- **`--fixlist <path>` naming a file this framework cannot fully parse — corrupted, truncated, or
+  another story's misnamed file — refuses with exit 1 (usage), not exit 5 (agent failed) (#218,
+  pre-merge review).** The refusal used to throw out of `fixlistFor` and land in the generic
+  executor `catch`, which reads any thrown `Error` as a STAGE failure: `run.yml`'s stage was stamped
+  `status: failed` with `cost_usd: 0.00`, and the next `tldrx next` printed "retrying … (cost already
+  spent is not refunded)" — a lie, since the refusal fires before anything is opened or spent. It
+  now returns the same `refusedOnSequence` precondition-refusal `offerAtFrontier`'s dependency wait
+  already uses: exit 1, `run.yml` untouched, no false retry line. The unnamed door's own corruption
+  check is scoped to `--prepare` only (the one caller with a `try`/`catch` around it) — the headless
+  in-session fix-round spawn keeps the pre-#218 fallback (a corrupted round is treated as absent
+  rather than crashing the run mid-wave), since the correctness half above already closes the
+  dangerous direction independently of this door.
+
+- **A relaunch of `tldrx run auto <runId>` resuming its OWN already-claimed epic branch now
+  verifies it instead of trusting it silently (#347).** `run auto` does not expose `--reuse-epic`
+  (there is nobody present to type it), so `foreignEpicRefusal`'s `claimed.has(branch)` case — this
+  run's own `build.epic_branch` already naming the branch a killed attempt cut and claimed before
+  it died — was a bare `continue`: no check that the branch head still resolved, no gate, and no
+  record that anything had been resumed at all. It now confirms the branch is still reachable and,
+  when the repo declares a `typecheck` command, runs it once in a throwaway detached worktree
+  (removed immediately after) before trusting the claim; a repo with no `typecheck` role is
+  adopted with that said explicitly (`typecheck: absent`) rather than assumed green. Recorded
+  honestly either way — an `epic.resumed` line and event carrying the sha and the typecheck
+  verdict — and a typecheck that FAILS refuses the stage by name instead of building on a possibly
+  broken branch (`tldrx next --reuse-epic` still adopts it deliberately, unchanged). A claim
+  another run wrote is refused exactly as before — nothing here relaxes that guard.
+
 ## 0.30.0 — 2026-09-15
 
 ### Fixed

package/README.md

@@ -335,6 +335,7 @@ back on the registry is 0.3.0.
 
 | Version | Date | Status | Contains |
 |---|---|---|---|
+| 0.31.0 | 2026-09-16 | `beta` | Ten efficiency adjustments, ranked from a measured audit of 48 runs, so an unattended run spends less and stalls less. `how` is skipped when the seed already declares its own solution, and runs on `sonnet` when it does run (#346); `risks.md` is no longer generated (#350); `watch` follows `build`'s gate policy, so an all-auto run signs itself (#349); a Watch card's `[src:]` punctuation slip is repaired locally instead of costing a turn (#345); a fix list with zero open findings settles the round, an unreadable one holds it by name (#218); `run status` warns NO-RETRY before a retry the budget refuses (#232); a failed headless turn carries a named `failure_kind`, so the loop stops buying the same retry for every death (#348); an orphaned turn is banked as unmetered instead of a confident zero (#337); a relaunch resumes its own epic branch instead of restarting it (#347); the base-tree DoD refusal names the workspace `install:` (#343) and `run auto` names `--wait-gates` (#342). |
 | 0.30.0 | 2026-09-15 | `beta` | Seventeen changes that keep an unattended run moving instead of stranding. A cached Build refusal says so and a relaunch re-measures it (#339); a rate-limit warning is read instead of dropped, so a Build parks before the wall (#298); the plan-over-stage advisory speaks only past 2× (#302); a stage death stops recommending a retry the budget refuses (#232); a DoD command is measured twice, a fix-list finding is checked against the epic tip, and an over-long sha is refused by name (#163); a formatting slip gets one bounded repair turn (#288); five Checks stop asking the reviewer for what it can't do (#195); a Codex review no longer dies before it runs (#148); `tldrx init` probes four commands at once (#180); `tldrx ship` refuses a merged diff nobody judged (#311). Docs: the zero-touch recipe pairs `run auto` with `--wait-gates`/`--wait-answers` (#342). |
 | 0.29.0 | 2026-09-15 | `beta` | Sixteen changes that make an unattended run trust its own gates and its own numbers. Verdict integrity: a reviewer's `changes` must cite evidence (#326), a re-reviewed story's `changes` is consumed instead of parking it (#327), and a story blocked on a stale fix list settles `done` once resolved (#329). Fix-list flow: a headless fix list now buys its own fix round, and an approving reviewer's signature closes what it was shown (#327). Money and phase sizing: `run auto` rebalances a blocked phase's shortfall out of finished phases by default (#330), the `budget-gate` hook stops denying the launch that would fix the shortfall (#321), a Build gate no longer stops on paths outside the declared surface but carries them into the PR instead (#331), a parallel wave no longer hands two developers the same unspent money (#325), `budget show`/`run estimate`/the budget-gate hook price remaining work off the stage's own `attempts:` (#214), `run auto --until-done` states a token refusal in tokens rather than invented dollar words (#270), a Watch turn is recorded as unmetered rather than a false `$0.00` (#224), and a Watch spawn now records the ceiling it was given (#190). Dependency and safety: a Build gate names the story a dependent waits on (#303), the conflict-turn marker guard names unreadable paths, bounds its scan, and covers modified files too (#324), a developer's array-valued `notes` is joined instead of silently dropped (#217), and the Plan prompt states its per-item character cap where each field is described so an over-cap finding survives into the retry (#328). |
 | 0.28.1 | 2026-09-15 | `beta` | Two fixes so a reopened story's reason reaches the agents that need it. The developer and reviewer prompts now carry `## Why this story was reopened` — who signed it, whether it's a fix round, the note verbatim — off the same ledger value #308 reads, instead of the note reaching only a report line and #308's check (closes #322). `tldrx note --help` now says an operator note reaches no agent and names `dispatch-notes.md` as the channel that does (closes #151). |

package/dist/hooks/answer-capture.js

@@ -1,23 +1,24 @@
 #!/usr/bin/env node
 import {
   conflictOf
-} from "./chunk-fbmj1bk6.js";
+} from "./chunk-04kpbhvk.js";
 import {
   FactsStore,
   formatJaccard
-} from "./chunk-gr83pq7x.js";
+} from "./chunk-f9d2efhb.js";
 import {
   parseHookInput,
   readStdin
-} from "./chunk-z9hv47ps.js";
+} from "./chunk-zyz0fbz5.js";
+import"./chunk-ae6bkfs5.js";
 import {
   EventLog,
   PHASE_ID_RE
-} from "./chunk-77x6v0gg.js";
+} from "./chunk-akemhezh.js";
 import {
   PHASE_IDS
-} from "./chunk-g4d2v4jc.js";
-import"./chunk-857jhjmb.js";
+} from "./chunk-yyhwf3bp.js";
+import"./chunk-5kv2vtha.js";
 import {
   ADVISORY_KEY,
   MAX_FACT_CHARS,
@@ -27,7 +28,7 @@ import {
   renderQuestionBlock,
   replaceBlock,
   serializeQuestions
-} from "./chunk-yanmz0vz.js";
+} from "./chunk-x1f4dxwk.js";
 import {
   ITERATION_ONLY_SLOT,
   PROJECT_FRAMEWORK_DIR,
@@ -37,7 +38,7 @@ import {
   isScopedTemplate,
   parseYaml,
   scopedSlotOf
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/answer-capture.ts
 import { existsSync as existsSync5 } from "fs";

package/dist/hooks/budget-gate.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   budgetGateDeny
-} from "./chunk-mg3aj0sa.js";
+} from "./chunk-q1ge3nex.js";
 import {
   allow,
   deny,
   readPayload,
   runHook,
   toolInput
-} from "./chunk-pne7afnf.js";
-import"./chunk-z9hv47ps.js";
+} from "./chunk-27v2rwa9.js";
+import"./chunk-zyz0fbz5.js";
 import {
   REBALANCE_SOURCE,
   applyRebalance,
@@ -27,10 +27,10 @@ import {
   validateRunBudget,
   wouldExceed,
   wouldExceedHostTokens
-} from "./chunk-zpch8e2j.js";
+} from "./chunk-me0kzc6k.js";
 import {
   EventLog
-} from "./chunk-77x6v0gg.js";
+} from "./chunk-akemhezh.js";
 import {
   cursorStage,
   hostTokensIn,
@@ -39,20 +39,20 @@ import {
   newestActiveRun,
   renderRunEconomies,
   runSpend
-} from "./chunk-0d4csx4s.js";
+} from "./chunk-8ds2ret8.js";
 import {
   buildStageDefaults
-} from "./chunk-g4d2v4jc.js";
+} from "./chunk-yyhwf3bp.js";
 import {
   noteDeprecations
-} from "./chunk-yanmz0vz.js";
+} from "./chunk-x1f4dxwk.js";
 import {
   PROJECT_WORK_DIR,
   findWorkspaceRoot,
   locateWork,
   parseYaml,
   stageYamlPath
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/budget-gate.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "node:fs";

package/dist/hooks/{chunk-fbmj1bk6.js → chunk-04kpbhvk.js}

@@ -1,15 +1,15 @@
 import {
   findDuplicate
-} from "./chunk-gr83pq7x.js";
+} from "./chunk-f9d2efhb.js";
 import {
   evidencePath,
   gateEvidencePath,
   parseEvidence
-} from "./chunk-77x6v0gg.js";
+} from "./chunk-akemhezh.js";
 import {
   openBlocks,
   parseQuestions
-} from "./chunk-yanmz0vz.js";
+} from "./chunk-x1f4dxwk.js";
 
 // src/core/distill/distill.ts
 var CONFLICT_THRESHOLD = 0.6;

package/dist/hooks/{chunk-pne7afnf.js → chunk-27v2rwa9.js}

@@ -1,7 +1,7 @@
 import {
   parseHookInput,
   readStdin
-} from "./chunk-z9hv47ps.js";
+} from "./chunk-zyz0fbz5.js";
 
 // src/hooks/lib/decide.ts
 function deny(reason) {

package/dist/hooks/{chunk-przta0a0.js → chunk-3r0hhgcf.js}

@@ -9,7 +9,7 @@ import {
   spentBasis,
   tallyOf,
   validateRunBudget
-} from "./chunk-zpch8e2j.js";
+} from "./chunk-me0kzc6k.js";
 import {
   EventLog,
   OUTCOME_NOT_RECORDED,
@@ -22,12 +22,12 @@ import {
   isTerminal,
   stageAt,
   validateRunFile
-} from "./chunk-77x6v0gg.js";
+} from "./chunk-akemhezh.js";
 import {
   cursorStage,
   isAttendedByHostView,
   openRunViews
-} from "./chunk-0d4csx4s.js";
+} from "./chunk-8ds2ret8.js";
 import {
   backupPathFor,
   isAlive,
@@ -36,13 +36,13 @@ import {
   workspaceRootOfRunDir,
   writeAtomic,
   yamlScalar
-} from "./chunk-857jhjmb.js";
+} from "./chunk-5kv2vtha.js";
 import {
   isAdvisory,
   noteDeprecations,
   openBlocks,
   parseQuestions
-} from "./chunk-yanmz0vz.js";
+} from "./chunk-x1f4dxwk.js";
 import {
   FRAMEWORK_ROOT,
   MAX_ITEM_CHARS,
@@ -50,7 +50,7 @@ import {
   listRunDirs,
   parseYaml,
   parseYamlRepairing
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/statusline/runSnapshot.ts
 import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
@@ -134,6 +134,7 @@ function task(t, indent) {
     `${inner}error: ${yamlScalar(t.error)}, session_id: ${yamlScalar(t.session_id)},`,
     `${inner}started_at: ${yamlScalar(t.started_at)}, ended_at: ${yamlScalar(t.ended_at)},`,
     ...t.stopped_by === undefined || t.stopped_by === null ? [] : [`${inner}stopped_by: ${yamlScalar(t.stopped_by)},`],
+    ...t.failure_kind === undefined || t.failure_kind === null ? [] : [`${inner}failure_kind: ${yamlScalar(t.failure_kind)},`],
     ...t.banked_before_refusal === undefined ? [] : [`${inner}banked_before_refusal: true,`],
     ...t.dedupe === undefined ? [] : [`${inner}dedupe: ${yamlScalar(t.dedupe)},`],
     ...t.duration_ms === undefined ? [] : [`${inner}duration_ms: ${String(Math.round(t.duration_ms))}, ` + `duration_basis: ${yamlScalar(t.duration_basis ?? null)},`],

package/dist/hooks/{chunk-857jhjmb.js → chunk-5kv2vtha.js}

@@ -1,7 +1,7 @@
 import {
   PROJECT_FRAMEWORK_DIR,
   PROJECT_WORK_DIR
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/lock/workspaceLock.ts
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync2, rmSync as rmSync2, writeSync, closeSync } from "node:fs";

package/dist/hooks/{chunk-7xascvee.js → chunk-72et1xzx.js}

@@ -1,6 +1,6 @@
 import {
   toolInput
-} from "./chunk-pne7afnf.js";
+} from "./chunk-27v2rwa9.js";
 
 // src/hooks/lib/wouldBe.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-0d4csx4s.js → chunk-8ds2ret8.js}

@@ -1,7 +1,7 @@
 import {
   listRunDirs,
   parseYaml
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/lib/runFile.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-qmp5p77c.js → chunk-9bd6b3xf.js}

@@ -7969,6 +7969,7 @@ function diagnoseSrcToken(line, repos) {
   }
   return { rule: srcRule(id), line: quotable(line), piece: null };
 }
+var MECHANICALLY_REPAIRABLE = new Set(["marker-spelling", "trailing-position", "cmd-arrow"]);
 function parseSrcToken(line, repos) {
   const trimmed = trimTrailingClosers(line);
   const match = TRAILING_TOKEN_RE.exec(trimmed);

package/dist/hooks/{chunk-77x6v0gg.js → chunk-akemhezh.js}

@@ -2,7 +2,7 @@ import {
   GATE_POLICIES,
   validateGatesPolicy,
   validateStagePolicy
-} from "./chunk-g4d2v4jc.js";
+} from "./chunk-yyhwf3bp.js";
 import {
   asDocument,
   isRecord,
@@ -15,7 +15,7 @@ import {
   requireString,
   requireVersion,
   result
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/events/EventLog.ts
 import { appendFileSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
@@ -57,6 +57,7 @@ var EVENT_TYPES = [
   "story.touches_widened",
   "plan.fix_round",
   "epic.released",
+  "epic.resumed",
   "worktree.foreign_work_aside",
   "worktree.foreign_work_restored",
   "result.unreadable",

package/dist/hooks/{chunk-gr83pq7x.js → chunk-f9d2efhb.js}

@@ -3,7 +3,7 @@ import {
   withWorkspaceLock,
   workspaceRootOfFactsPath,
   writeAtomic
-} from "./chunk-857jhjmb.js";
+} from "./chunk-5kv2vtha.js";
 import {
   FACT_CONFIDENCES,
   FACT_DECIDERS,
@@ -15,7 +15,7 @@ import {
   isLive,
   isRetired,
   noteDeprecations
-} from "./chunk-yanmz0vz.js";
+} from "./chunk-x1f4dxwk.js";
 import {
   SRC_PATTERNS,
   asDocument,
@@ -28,7 +28,7 @@ import {
   requireString,
   requireVersion,
   result
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/facts/FactsStore.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-zpch8e2j.js → chunk-me0kzc6k.js}

@@ -1,6 +1,6 @@
 import {
   STAGE_TUNING_DEFAULTS
-} from "./chunk-g4d2v4jc.js";
+} from "./chunk-yyhwf3bp.js";
 import {
   MAX_PLAN_STORIES,
   MAX_STORIES_PER_WAVE,
@@ -25,7 +25,7 @@ import {
   requireVersion,
   requireVersion1,
   result
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/lib/actor.ts
 function currentActor() {

package/dist/hooks/{chunk-mg3aj0sa.js → chunk-q1ge3nex.js}

@@ -3,7 +3,7 @@ import {
   EMPTY_SECTION_RULE,
   noneBullet,
   srcRule
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/lib/messages.ts
 var GRAMMAR = "[src: <repo:path:line> | https://… | Q<n> | F<n> | $ <cmd> → exit <n> | graph:<node> | absent:<path>]";

package/dist/hooks/{chunk-yanmz0vz.js → chunk-x1f4dxwk.js}

@@ -3,7 +3,7 @@ import {
   parseSrcToken,
   srcToken,
   withoutSrcToken
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/text/questions.ts
 var REQUIRED_METADATA_KEYS = ["id", "status", "area", "asked_by", "asked_at"];

package/dist/hooks/{chunk-g4d2v4jc.js → chunk-yyhwf3bp.js}

@@ -6,7 +6,7 @@ import {
   isRecord,
   loadWorkspace,
   parseYaml
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/run/workflowPreset.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-z9hv47ps.js → chunk-zyz0fbz5.js}

@@ -1,6 +1,6 @@
 import {
   runtime
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/core/hooks/passthrough.ts
 async function readStdin() {

package/dist/hooks/claim-sources.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   wouldBeContent
-} from "./chunk-7xascvee.js";
+} from "./chunk-72et1xzx.js";
 import {
   claimSourcesDeny,
   claimSourcesEmptySectionDeny,
   claimSourcesMalformedDeny,
   claimSourcesUnresolvedDeny
-} from "./chunk-mg3aj0sa.js";
+} from "./chunk-q1ge3nex.js";
 import {
   allow,
   deny,
@@ -16,8 +16,8 @@ import {
   postContext,
   readPayload,
   runHook
-} from "./chunk-pne7afnf.js";
-import"./chunk-z9hv47ps.js";
+} from "./chunk-27v2rwa9.js";
+import"./chunk-zyz0fbz5.js";
 import {
   isHandoff,
   loadWorkspace,
@@ -25,7 +25,7 @@ import {
   toSrcContext,
   validateCitations,
   validateHandoff
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/claim-sources.ts
 await runHook("claim-sources", async () => {

package/dist/hooks/dod-gate.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   wouldBeContent
-} from "./chunk-7xascvee.js";
+} from "./chunk-72et1xzx.js";
 import {
   dodGateDeny,
   dodGateInternalErrorDeny,
   dodGateMissingBlockDeny,
   dodGateRefusedCommandDeny
-} from "./chunk-mg3aj0sa.js";
+} from "./chunk-q1ge3nex.js";
 import {
   allow,
   deny,
@@ -15,15 +15,15 @@ import {
   filePathOf,
   isWriteOrEdit,
   readPayload
-} from "./chunk-pne7afnf.js";
-import"./chunk-z9hv47ps.js";
+} from "./chunk-27v2rwa9.js";
+import"./chunk-zyz0fbz5.js";
 import {
   loadRunView
-} from "./chunk-0d4csx4s.js";
+} from "./chunk-8ds2ret8.js";
 import {
   DEFAULT_TIMEOUT_S,
   buildStageDefaults
-} from "./chunk-g4d2v4jc.js";
+} from "./chunk-yyhwf3bp.js";
 import {
   DodCommandRefused,
   loadWorkspace,
@@ -31,7 +31,7 @@ import {
   readStory,
   repoPath,
   runDodCommand
-} from "./chunk-qmp5p77c.js";
+} from "./chunk-9bd6b3xf.js";
 
 // src/hooks/dod-gate.ts
 import { basename, join } from "node:path";